TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Example: Setting Up Q-in-Q Tunneling on EX Series Switches

Service providers can use Q-in-Q tunneling to transparently pass Layer 2 VLAN traffic from a customer site, through the service provider network, to another customer site without removing or changing the customer VLAN tags or class-of-service (CoS) settings. You can configure Q-in-Q tunneling on EX Series switches.

This example describes how to set up Q-in-Q:

Requirements

This example requires one EX Series switch with Junos OS Release 9.3 or later for EX Series switches.

Before you begin setting up Q-in-Q tunneling, make sure you have created and configured the necessary customer VLANs. See Configuring VLANs for EX Series Switches (CLI Procedure) or Configuring VLANs for EX Series Switches (J-Web Procedure).

Overview and Topology

In this service provider network, there are multiple customer VLANs mapped to one service VLAN.

Table 1 lists the settings for the example topology.

Table 1: Components of the Topology for Setting Up Q-in-Q Tunneling

Interface	Description
ge-0/0/11.0	Tagged S-VLAN trunk port
ge-0/0/12.0	Untagged customer-facing access port
ge-0/0/13.0	Untagged customer-facing access port
ge-0/0/14.0	Tagged S-VLAN trunk port

Configuration

CLI Quick Configuration

To quickly create and configure Q-in-Q tunneling, copy the following commands and paste them into the switch terminal window:

[edit]

set vlans qinqvlan vlan-id 4001

set vlans qinqvlan dot1q-tunneling customer-vlans
1-100

set vlans qinqvlan dot1q-tunneling customer-vlans
201-300

set interfaces ge-0/0/11 unit 0 family ethernet-switching
port-mode trunk

set interfaces ge-0/0/11 unit 0 family ethernet-switching
vlan members 4001

set interfaces ge-0/0/12 unit 0 family ethernet-switching
port-mode access

set interfaces ge-0/0/12 unit 0 family ethernet-switching
vlan members 4001

set interfaces ge-0/0/13 unit 0 family ethernet-switching
port-mode access

set interfaces ge-0/0/13 unit 0 family ethernet-switching
vlan members 4001

set interfaces ge-0/0/14 unit 0 family ethernet-switching
port-mode trunk

set interfaces ge-0/0/14 unit 0 family ethernet-switching
vlan members 4001

set ethernet-switching-options dot1q-tunneling
ether-type 0x9100

Step-by-Step Procedure

To configure Q-in-Q tunneling:

Set the VLAN ID for the S-VLAN:
[edit vlans] user@switch# set qinqvlan vlan-id (Layer 3 Subinterfaces) 4001
Enable Q-in-Q tuennling and specify the customer VLAN ranges:
[edit vlans] user@switch# set qinqvlan dot1q-tunneling customer-vlans 1-100 user@switch# set qinqvlan dot1q-tunneling customer-vlans 201-300
Set the port mode and VLAN information for the interfaces:
[edit interfaces] user@switch# set ge-0/0/11 unit 0 family ethernet-switching port-mode trunk user@switch# set ge-0/0/11 unit 0 family ethernet-switching vlan members 4001 user@switch# set ge-0/0/12 unit 0 family ethernet-switching port-mode access user@switch# set ge-0/0/12 unit 0 family ethernet-switching vlan members 4001 user@switch# set ge-0/0/13 unit 0 family ethernet-switching port-mode access user@switch# set ge-0/0/13 unit 0 family ethernet-switching vlan members 4001 user@switch# set ge-0/0/14 unit 0 family ethernet-switching port-mode trunk user@switch# set ge-0/0/14 unit 0 family ethernet-switching vlan members 4001
Set the Q-in-Q Ethertype value:
[edit] user@switch# set ethernet-switching-options dot1q-tunneling ether-type 0x9100

Results

Check the results of the configuration:

user@switch> show configuration vlans qinqvlanvlan-id 4001 {dot1q-tunneling { customer-vlans [ 1-100 201-300 ];}user@switch> show configuration interfacesge-0/0/11 {unit 0 {family ethernet-switching {port-mode trunk;vlan members 4001;}}}ge-0/0/12 {unit 0 {family ethernet-switching {port-mode access;vlan members 4001;}}}ge-0/0/13 {unit 0 {family ethernet-switching {port-mode access;vlan members 4001;}}}ge-0/0/14 {unit 0 {family ethernet-switching {port-mode trunk;vlan members 4001;}}}user@switch> show ethernet-switching-optionsdot1q-tunneling {ether-type 0x9100;}

Verification

To confirm that the configuration is working properly, perform these tasks:

Verifying That Q-in-Q Tunneling Was Enabled

Verifying That Q-in-Q Tunneling Was Enabled

Purpose

Verify that Q-in-Q tunneling was properly enabled on the switch.

Action

Use the show vlans command:

user@switch> show vlans qinqvlan extensive

VLAN: qinqvlan, Created at: Thu Sep 18 07:17:53 2008
802.1Q Tag: 4001, Internal index: 18, Admin State: Enabled, Origin: Static
Dot1q Tunneling Status: Enabled
Customer VLAN ranges:
                     1-100
                     201-300
Protocol: Port Mode
Number of interfaces: Tagged 2 (Active = 0), Untagged  4 (Active = 0)
      ge-0/0/11.0, tagged, trunk
      ge-0/0/14.0, tagged, trunk
      ge-0/0/12.0, untagged, access
      ge-0/0/13.0, untagged, access

Meaning

The output indicates that Q-in-Q tunneling is enabled and that the VLAN is tagged and shows the associated customer VLANs.