Hi Brian,
When a packet egress a tagged port through let's say vlan tag 10 then the ethernet frame is increased by 4 bytes which includes the 802.1a tag/ID 10. The other side port must be also tagged for vlan 10 so it can check the ethernet frame 802.1q value (10 in this case) and then assign the traffic to the correct vlan (vlan 10).
Example:
PC1 port 1 ====
SW1 port 5 ================ port 5
SW2 port 1 ====
PC2
Vlans:
Sw1: Sw2:
vlan_10 tag 10 vlan_10 tag 10
vlan_20 tag 20 vlan_20 tag 20
vlan_30 tag 30 vlan_30 tag 30
Configuration for both switches:
create vlan vlan_10 tag 10
create vlan vlan_20 tag 20
create vlan vlan_30 tag 30
configure vlan vlan_10 add port 5 tagged
configure vlan vlan_20 add port 5 tagged
configure vlan vlan_30 add port 5 tagged
configure vlan vlan_10 add port 1 untagged
configure vlan vlan_20 add port 1 untagged
configure vlan vlan_30 add port 1 untagged
Based on the above example the following is true:
- When a packet egress Sw1 port 5 through vlan_30, the packet will have 802.1q tagged frame (ID 30) included. When the packet ingress Sw2 port 5 it will read the ethernet frame 802.1q ID 30 and assign vlan_30 to it. When the packet egress port 1 (untagged) it will strip the 802.1q tagged frame (4 bytes) and then PC2 will be able to read the packet
- Same behavior will happen when the packet egress/ingress from/to the other vlans (10 and 20)