Description

This article provides an example configuration of Q-in-Q tunneling for receiving both untagged and tagged traffic using a customer scenario with the following requirements:

  1. Accept any type of frames (tagged/untagged) from clients.
  2. Push a VLAN-ID (3410) and send it to the remote end which is another vendor device.
  3. Receive traffic back from remote device. The return traffic will have VLAN-ID 3410.
  4. Pop the outer-VLAN ID of 3410 and send it back to the clients.

Solution

Topology 

alt

The traffic flow is working as expected, meaning if we take flow from ce1 to ce2:

  1. Ce1 sends traffic to ge-0/0/0 of ACX with VLAN 121.
  2. ACX adds tag 3410 and sends it to MX.
  3. Then MX forwards it to ge-0/3/1 and to ce2.

To achieve this, the following configuration needs to be applied on the ACX:

set interfaces ge-0/0/0 flexible-vlan-tagging
set interfaces ge-0/0/0 native-vlan-id 123
set interfaces ge-0/0/0 encapsulation flexible-ethernet-services
set interfaces ge-0/0/0 gigether-options ethernet-switch-profile tag-protocol-id 0x88a8
set interfaces ge-0/0/0 gigether-options ethernet-switch-profile tag-protocol-id 0x8100
set interfaces ge-0/0/0 gigether-options ethernet-switch-profile tag-protocol-id 0x9100
set interfaces ge-0/0/0 unit 0 encapsulation vlan-bridge
set interfaces ge-0/0/0 unit 0 vlan-id-list 121-122
set interfaces ge-0/0/0 unit 0 input-vlan-map push
set interfaces ge-0/0/0 unit 0 input-vlan-map tag-protocol-id 0x88a8
set interfaces ge-0/0/0 unit 0 input-vlan-map vlan-id 3410
set interfaces ge-0/0/0 unit 0 output-vlan-map pop

set interfaces ge-0/1/0 flexible-vlan-tagging
set interfaces ge-0/1/0 media-type copper
set interfaces ge-0/1/0 encapsulation flexible-ethernet-services
set interfaces ge-0/1/0 gigether-options ethernet-switch-profile tag-protocol-id 0x88a8
set interfaces ge-0/1/0 gigether-options ethernet-switch-profile tag-protocol-id 0x8100
set interfaces ge-0/1/0 gigether-options ethernet-switch-profile tag-protocol-id 0x9100
set interfaces ge-0/1/0 unit 3410 encapsulation vlan-bridge
set interfaces ge-0/1/0 unit 3410 vlan-tags outer 0x88a8.3410

set bridge-domains test interface ge-0/0/0.0
set bridge-domains test interface ge-0/1/0.3410
 

On the MX, the following needs to be added:

set interfaces ge-0/3/0 flexible-vlan-tagging
set interfaces ge-0/3/0 encapsulation flexible-ethernet-services
set interfaces ge-0/3/0 gigether-options ethernet-switch-profile tag-protocol-id 0x88a8
set interfaces ge-0/3/0 gigether-options ethernet-switch-profile tag-protocol-id 0x8100
set interfaces ge-0/3/0 gigether-options ethernet-switch-profile tag-protocol-id 0x9100
set interfaces ge-0/3/0 unit 3410 encapsulation vlan-bridge
set interfaces ge-0/3/0 unit 3410 vlan-tags outer 0x88a8.3410

set interfaces ge-0/3/1 encapsulation ethernet-bridge
set interfaces ge-0/3/1 gigether-options ethernet-switch-profile tag-protocol-id 0x88a8
set interfaces ge-0/3/1 gigether-options ethernet-switch-profile tag-protocol-id 0x8100
set interfaces ge-0/3/1 gigether-options ethernet-switch-profile tag-protocol-id 0x9100
set interfaces ge-0/3/1 unit 0 input-vlan-map push
set interfaces ge-0/3/1 unit 0 input-vlan-map tag-protocol-id 0x88a8
set interfaces ge-0/3/1 unit 0 input-vlan-map vlan-id 3410
set interfaces ge-0/3/1 unit 0 output-vlan-map pop

set bridge-domains test interface ge-0/3/0.3410
set bridge-domains test interface ge-0/3/1.0


Please note that this was based on a particular scenario where the customer requirement was to push protocol-id 0x88a8. The regular 0x8100 protocol-id can also be used.

Verification

Traffic was sent from CE1 to CE2 (ICMP echo requests were sent) and captures were taken in CE2, showing that the requests came in correctly.

For untagged VLAN:

alt
 

For tagged VLAN:

alt

Modification History

2024-08-22: Updated Data Category
2020-10-23: Article reviewed for accuracy, no changes required; article accurate and valid