Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Configuring Interfaces for Layer 2 VPNs (CLI Procedure)


Configuring the device interfaces that participate in the VPN is similar to configuring them for other uses, with a few requirements for the VPN. Perform the following tasks for each interface involved in the VPN, except Layer 3 loopback interfaces, which do not require other configuration.

To configure an interface for an MPLS VPN:

  1. Configure IPv4 address and loopback address on all of the interfaces of the provider edge (PE) and provider (P) devices, excluding the Layer 2 VPN interfaces facing a customer edge (CE) device:
  2. Enable MPLS address family on all the PE and P device interfaces, excluding the loopback interfaces and the CE-facing Layer 2 VPN interfaces.
  3. For CE-facing Layer 2 VPN interfaces, enable the reception and transmission of 802.1Q VLAN-tagged frames on the interface.
  4. Configure the physical and logical link-layer encapsulation type on all the PE devices that communicate with the CE devices on Layer 2 VPNs and Layer 2 circuits.
  5. Commit the configuration if you are finished configuring the device.