Q in Q, VMAN, VLAN Translation

09/2012

Marián Marčok
Roman Jargan
IEEE 802.1ad various naming

 IEEE 802.1QinQ
 provider bridging
 Stacked VLANs
 QinQ
 Q-in-Q
 Vman

Marcok/Jargan 27/09/2012
802.1ad encapsulation

Marcok/Jargan 27/09/2012
Topology example

Marcok/Jargan 27/09/2012
Ethertype

EtherType Protocol
0x0800 Internet Protocol, Version 4 (IPv4)

VLAN-tagged frame (IEEE 802.1Q),

0x8100
Cisco default for QinQ

0x88A8 Provider Bridging (IEEE 802.1ad), Extreme default for QinQ

0x9100 Q-in-Q, Cisco optional for QinQ

Marcok/Jargan 27/09/2012
Extreme/Cisco Interworking

Marcok/Jargan 27/09/2012
Cisco configuration example
interface FastEthernet1/0/3
mtu 9100
description ****
switchport access vlan 1111
switchport mode dot1q-tunnel
duplex full
speed 100
l2protocol-tunnel cdp
l2protocol-tunnel stp
l2protocol-tunnel vtp
interface Gi1/1
service instance 2066 ethernet
encapsulation dot1q 1111 second-dot1q 1-
4094
rewrite ingress tag pop 1 symmetric
l2protocol forward
xconnect 213.81.255.X 2066 encapsulation
mpls
Marcok/Jargan 27/09/2012
Extreme configuration example

 create vman <vlan_name>

 delete vman <vlan_name>
 configure vman <vlan_name> tag <tag>
 configure vman <vlan_name> add ports
 configure vman <vlan_name> delete ports
 configure vman ethertype

Marcok/Jargan 27/09/2012
Example 1- Q in Q
ba1-ipe-1
interface GigabitEthernet4/0/1
description BA-BA IP1G437, connect to T-Systems, ba-bts-sa23
mtu 9100
service instance 240 ethernet
description #SRID=26207# SKA-SKA CET3 > BAA-BAA CET28
encapsulation dot1q 240 second-dot1q 1-4094
rewrite ingress tag pop 1 symmetric
l2protocol forward
xconnect 213.81.254.245 10030240 encapsulation mpls

senc-upe-1
interface GigabitEthernet2/16
description MEN, SENC-SKCA MEN1G2, skca-al-ptoc-1, (skca-cus-grs-1)
mtu 9100
service instance 240 ethernet
description #SRID=26207# SKA-SKA CET3 > BAA-BAA CET28
encapsulation dot1q 240 second-dot1q 1-4094
rewrite ingress tag pop 1 symmetric
l2protocol forward
xconnect 213.81.255.14 10030240 encapsulation mpls

skca-al-ptoc-1
configure vman vman240_t-systems add ports 9 untagged
configure vman vman240_t-systems add ports 21 tagged
create vman "vman240_t-systems"
configure vman vman240_t-systems tag 240
configure vman ethertype 0x8100

Marcok/Jargan 27/09/2012
Example 2– VLAN translation Cisco

Router(config)# interface TenGigabitEthernet 1/1

Router(config-if)# service instance 100 ethernet
Router(config-if-srv)# encapsulation dot1q 100 second-dot1q 10
Router(config-if-srv)# rewrite ingress tag translate 2-to-2 dot1q 200 second-dot1q 20 symmetric
Router(config-if-srv)# bridge-domain 200

QinQ VLAN
Router(config)# interface TenGigabitEthernet 1/2
Router(config-if)# service instance 101 ethernet
Router(config-if-srv)# encapsulation dot1q 200 second-dot1q 20
Router(config-if-srv)# bridge-domain 200

Marcok/Jargan 27/09/2012
Example 3– VLAN translation Extreme

 create vlan v101

 configure v101 tag 101
 configure v101 add ports 1:1 tagged

 create vlan v1000

 configure v1000 tag 1000
 configure v1000 add ports 2:1 tagged
 configure v1000 add member-vlan v101

Marcok/Jargan 27/09/2012
LAB
Single tag operation

 Zákazník pripojený na trunk port

 xconnect neprenáša vlan tag

Marcok/Jargan 27/09/2012
LAB
Dual tag operation – no QinQ

 Zákazník pripojený na trunk port

 Sieť dovolí prenášať viac vlans
 xconnect prenáša len inner vlan tag
 Možnosť konfigurácie QinQ zákazníkom

Marcok/Jargan 27/09/2012
LAB
Dual tag operation – QinQ

 Zákazník pripojený na vman access port

 Outer tag sa pridá na výstupnom porte
 xconnect prenáša len inner vlan tag
 Zákazník posiela ľubovoľné vlans

Marcok/Jargan 27/09/2012