[AusNOG] Cisco Q-in-Q config on AAPT e-Line

[James Mcintosh]

It's a 3750X



----- Original Message -----
From: James Matthews <james.matthews.au at gmail.com>
To: "ausnog at lists.ausnog.net" <ausnog at lists.ausnog.net>
Cc: 
Sent: Thursday, 13 December 2012 12:33 PM
Subject: Re: [AusNOG] Cisco Q-in-Q config on AAPT e-Line

Well, it depends how advanced your switch is. What model is it? The
more metro-ethernet oriented switches would be able to inspect an
inner VLAN tag and explicitly pull it out.

Otherwise you'd normally pull it out to a port with "switchport mode
dot1q-tunnel" and "l2protocol-tunnel" and your ethernet cable coming
out of this port would be in effect a a trunk port containing VLAN 8,
91 and 22 and whatever else you choose to put in it.

The actual port connecting to AAPT itself would remain a trunk and is
transparent to the fact there is QinQ happening on one VLAN. One
caveat, make sure your MTU is high enough, 1500 won't cut it when you
start adding QinQ frame headers.


Regards,

James

On Thu, Dec 13, 2012 at 9:19 AM, James Mcintosh
<james.mcintosh at rocketmail.com> wrote:
> Hi Noggers,
>
> I'm hoping one of the many smart people on the list can help me with my Q-in-Q issue on AAPT's e-Line (Ethernet).
>
> We have an AAPT Ethernet Trunk Access at our core that terminates various customer Single Access services. Config on the trunk port that terminates the various single access services looks like so:
>
> sh run interface GigabitEthernet1/0/21
> Building configuration...
>
> Current configuration : 217 bytes
> !
> interface GigabitEthernet1/0/21
>  description AAPT Trunk
>  switchport trunk encapsulation dot1q
>  switchport trunk allowed vlan 215-218,320,321,398
>  switchport mode trunk
>  load-interval 30
> end
>
> Pretty standard stuff. However here's where it gets complicated (to me). VLAN 320 needs to do Q-in-Q, encapsulating 3 other VLAN's within it (VLAN 8, 91 and 22)
>
> Quoting from the AAPT product definition:
>
> "AAPT e-Line services delivered end-to-end on AAPT infrastructure support customer VLANs transparently. e-Line services are designed to allow customers to configure and run multiple VLANs without any need to co-ordinate with AAPT.
>
>
> To enable multiple VLANs across an AAPT e-Line service where one end is an Ethernet Trunk Access and the other end is either Ethernet Single-Service Access, the customer should configure the CPE at the Ethernet Trunk Access end with 802.1QinQ encapsulation and the CPE at the other end with 802.1Q encapsulation."
>
>
> So my question is, how do I get visibility on the core switch of VLAN 8, 91 and 22 which are encapsulated within VLAN 320?
>
> Your help would be VERY much appreciated!
>
>
> -James
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net
http://lists.ausnog.net/mailman/listinfo/ausnog