Why the Huawei S2700 switch cannot transparently transmit the packets whose VLANID is greater than 127 after VLAN translation is enabled?

no, the 2700 is a programmable switch

Huawei S2700-18TP-SI-ACis Layer 2 switch, Huawei S2700 series Switch cannot be used as a gateway.If it is used as a gateway, it sends all packets that need to be forwarded at Layer 3 to the CPU to forward the packets through software. This causes a high CPU usage. Because CAR parameters are configured to protect the CPU, a large number of packets are dropped, affecting forwarding of service packets.

Differences in configuration on switch interfaces connected to APs are as follows:

In tunnel forwarding mode, interfaces connected to APs transparently transmit only packets of the management VLAN. These interfaces must be added to the management VLAN in untagged mode. In direct forwarding mode, interfaces connected to APs must be trunk or hybrid interfaces. These interfaces must be added to the management VLAN in untagged mode and added to service VLANs in tagged mode. If a trunk interface is connected to an AP, the PVID of the interface must be set to the management VLAN ID.


Differences in configuration on intermediate switches are as follows:

In tunnel forwarding mode, intermediate switches transparently transmit only packets of the management VLAN. In direct forwarding mode, intermediate switches transparently transmit packets of both the management VLAN and service VLANs.
S5700 Switch Thunder link com

You can enable a switch to transparently transmit BPDUs in the following modes:
1. Run the bpdu bridge enable command to enable the port bridge function. Then the switch can transparently transmit all BPDUs.
2. Globally specify the group MAC address of BPDU for the inbound and outbound ports of two edge switches on the network, and enable the L2PT transparent transmission function of the protocol for the ports.
Incoming BPDUs are replaced with the group MAC address, converted to data packets, and forwarded in the VLAN. Configure the L2PT function in the outbound port to replace the group MAC address with the BPDU MAC address.

Huawei S2300/3300/5300 series switch although no H3C switches am user-bind command, but through the DHCP Snooping function can also be realized IP+MAC+ port binding to prevent users set up a static IP address. For example, if the request port Ethernet0/0/1 in addition to the static IP address for the 1.1.1.2, MAC address for the 001c-2309-9aa7 corresponding to the user, all other static IP users can not access the internet. Configuration is as follows:
Configure the device DHCP Snooping
# enable the global DHCP Snooping function.
[Quidway] DHCP snooping enable
# configure user side interface of VLAN.
[Quidway] VLAN 100
[Quidway-vlan100] quit
[Quidway] interface Ethernet 0/0/1
[Quidway-Ethernet0/0/1] port default VLAN 100
[Quidway-Ethernet0/0/1] quit
# enable VLAN DHCP Snooping function.
[Quidway] VLAN 100
[Quidway-vlan100] DHCP snooping enable
# configuration interface for packet inspection at the user side
[Quidway] interface Ethernet 0/0/1
[Quidway-Ethernet0/0/1] DHCP snooping check ARP enable
[Quidway-Ethernet0/0/1] DHCP snooping check IP enable
[Quidway-Ethernet0/0/1] quit
# configuration static binding table entry
[Quidway] VLAN 100
[Quidway-vlan100] DHCP snooping bind-table static IP-address 1.1.1.2 mac-address 001c-2309-9aa7 interface Ethernet 0/0/1