i worked around the lack of dot1q-tunnelling by bribing the people who allocate vlans with coffee. therefore coffee > cisco nexus 5000s for solving my problems.