Configuring S-VLAN Tunnels for Layer 2 Services over MPLS
When you configure Ethernet layer 2 services over MPLS, you can create a special type of S-VLAN called an S-VLAN tunnel that uses a single interface to tunnel traffic from multiple VLANs across an MPLS network. The S-VLAN tunnel enables multiple VLANs, each configured with a unique VLAN ID tag, to share a common S-VLAN ID tag when they traverse an MPLS network.
Advantages
Using S-VLAN tunnels provides an easier and faster way to configure Ethernet layer 2 services over MPLS than using standard S-VLANs. For example, consider the network configuration shown in Figure 19.
![]()
In this example, traffic from three VLAN subinterfaces must traverse the MPLS network. To accomplish this using standard S-VLANs, you issue the following commands to configure three separate S-VLANs with the same S-VLAN ID value and different VLAN IDs, as follows:
host1(config-if)#svlan id 33 10host1(config-if)#svlan id 33 20host1(config-if)#svlan id 33 30By contrast, using an S-VLAN tunnel achieves the same result, but requires you to issue only a single svlan id command with the keyword any in place of the VLAN ID value. For example, the following command creates a single interface that tunnels traffic from VLANs configured with an S-VLAN ID of 33 and any VLAN ID to the same destination across the MPLS network. In effect, this command tunnels traffic from all three VLANs shown in Figure 19.
host1(config-if)#svlan id 33 anyInterface Stacking
When you configure Ethernet layer 2 services over MPLS using S-VLAN tunnels, the only interface that you can stack over an S-VLAN tunnel is an MPLS tunnel, which you configure using the MPLS tunneling command (mpls-relay or route interface) that is appropriate for your configuration. Attempting to configure any other interface typesuch as IP, MPLS (nontunnel), or PPPoEover the S-VLAN tunnel causes the router to generate an error and reject the configuration as invalid.
For details about configuring MPLS and layer 2 services over MPLS, see:
- JUNOSe BGP and MPLS Configuration Guide, Chapter 2, Configuring MPLS
- JUNOSe BGP and MPLS Configuration Guide, Chapter 5, Configuring Layer 2 Services over MPLS
Configuration Example
This section uses the sample network topology shown in Figure 19 to illustrate the steps for configuring S-VLAN tunnels for Ethernet layer 2 services over MPLS.
To configure S-VLAN tunnels for Ethernet layer 2 services over MPLS:
- Specify a Fast Ethernet, Gigabit Ethernet, or 10-Gigabit Ethernet port.
host1(config)#interface fastEthernet 4/0- Specify VLAN as the encapsulation method to create the VLAN major interface.
host1(config-if)#encapsulation vlan- Create a VLAN subinterface.
host1(config-if)#interface fastEthernet 8/1.1- Create the S-VLAN tunnel. This interface tunnels traffic from VLANs configured with an S-VLAN ID of 33 and any VLAN ID to the same destination across the MPLS network.
host1(config-if)#svlan id 33 any- Assign an S-VLAN Ethertype.
host1(config-if)#svlan ethertype 8100- Create the MPLS tunnel interface using the appropriate MPLS tunneling command for your configuration. For example:
host1(config-if)#route interface tunnel mpls:tunnel3 45For complete instructions on configuring the MPLS tunnel, see JUNOSe BGP and MPLS Configuration Guide, Chapter 5, Configuring Layer 2 Services over MPLS.
- Repeat Steps 1 through 6 using unique values to configure the S-VLAN tunnel and MPLS tunnel interfaces on the remote E-series router. For example:
host2(config)#interface fastEthernet 3/1host2(config-if)#encapsulation vlanhost2(config-if)#interface fastEthernet 3/1.1host2(config-if)#svlan id 83 anyhost2(config-if)#svlan ethertype 88a8host2(config-if)#route interface tunnel mpls:tunnel2 45encapsulation vlan
- Use to configure VLAN as the encapsulation method for the interface.
- Use the no version to disable VLAN on an interface.
interface fastEthernet
host1(config)#interface fastEthernet 3/1Use the no version to remove the interface or subinterface. You must issue the no version from the highest level down; you cannot remove an interface or subinterface if the one above it still exists. route interface
- Use to route layer 2 traffic on a specific tunnel interface.
- Use the no version to negate this command.
NOTE: For details on the use of this command, see JUNOSe BGP and MPLS Configuration Guide, Chapter 5, Configuring Layer 2 Services over MPLS.
svlan ethertype
- Use to assign an Ethertype value for the S-VLAN tunnel interface.
- Choose one of the following Ethertype values:
- 8100Specifies Ethertype value 0x8100, as defined in IEEE Standard 802.1q
- 88a8Specifies Ethertype value 0x88a8, as defined in draft IEEE Standard 802.1ad
- 9100Specifies Ethertype value 0x9100, which is the default
- Use an Ethertype value that matches the Ethertype value set on the customer premises equipment (CPE) to which your router connects.
- Example
host1(config-if)#svlan ethertype 8100Use the no version to restore the default value, 9100. svlan id
- Use to create an S-VLAN tunnel interface for configuring Ethernet layer 2 services over MPLS.
- Assign an S-VLAN ID value in the range 04095 that is unique within the Ethernet interface.
- Use the any keyword to tunnel traffic from VLANs configured with the specified S-VLAN ID and any VLAN ID to the same destination across an MPLS network.
- Issue the svlan id command with the any keyword before you configure the upper binding, which must be an MPLS tunnel interface. Attempting to configure any other interface type over the S-VLAN tunnel causes an error.
- Example
host1(config-if)#svlan id 1000 anyThere is no no version.