Consider the provider bridge network shown in Figure 7.
Figure 7: Provider Bridge Network Using Normalized VLAN Tags

The Layer 2 (L2) provider edge (PE) routers are MX-series routers. Each site is connected to two provider (P) routers for redundancy, although both links are only shown for L2-PE1 at Site 1. Site 1 is connected to P0 and P1 (as shown), Site 2 is connected to P0 and P2 (not shown), Site 3 is connected to P2 and P3 (as shown), and Site 4 is connected to P1 and P3 (as shown). VPLS pseudowires configured on the PE and P routers carry traffic between the sites.
The VLANs' bridging paths are shown with distinct dashed and dotted lines. The VLANs at each site are:
![]() |
Note: The configurations in this chapter are only partial examples of complete and functional router configurations. Do not copy these configurations and use them directly on an actual system. |
The following is the configuration of interfaces, virtual switches, and bridge domains for MX-series router L2-PE1:
- [edit]
- interfaces ge-1/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 1 {
- encapsulation vlan-bridge;
- vlan-id 100;
- }
-
- unit 11 {
- encapsulation vlan-bridge;
- vlan-id 301;
- }
- }
- interface ge-2/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 1 {
- encapsulation vlan-bridge;
- vlan-id 100;
- }
- }
- interface ge-3/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 1 {
- encapsulation vlan-bridge;
- vlan-id 200; # NOTE: 200 is translated to normalized VLAN
vlaue
- }
- }
- interfaces ge-4/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 1 {
- encapsulation vlan-bridge;
- vlan-tags outer 500 inner 100; # This places two VLAN tags
on the provider
- #
pseudowire
- }
- }
- interfaces ge-5/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 1 {
- encapsulation vlan-bridge;
- vlan-tags outer 500 inner 100; # This places two VLAN tags
on the provider
- #
pseudowire
- }
-
- unit 11 {
- encapsulation vlan-bridge;
- vlan-tags outer 600 inner 300; # This places two VLAN tags
on the provider
- #
pseudowire
- }
- }
- interfaces ge-6/0/0 {
- encapsulation flexible-ethernet-services;
- flexible-vlan-tagging;
-
- unit 11 {
- encapsulation vlan-bridge;
- vlan-id 300;
- }
- }
- routing-instances {
-
- customer-c1-virtual-switch {
- instance-type virtual-switch ;
-
- bridge-domains {
-
- c1-vlan-100 {
- domain-type bridge;
- vlan-id 100; # Customer VLAN 100 uses these five logical
interfaces
- interface ge-1/0/0.1;
- interface ge-2/0/0.1;
- interface ge-3/0/0.1;
- interface ge-4/0/0.1;
- interface ge-5/0/0.1;
- } # End of c1-vlan-100
- } # End of bridge-domains
- } # End of customer-c1-virtual-switch
-
- customer-c2-virtual-switch {
- instance-type virtual-switch ;
-
- bridge-domains {
-
- c2-vlan-300 {
- domain-type bridge;
- vlan-id 300; # Customer VLAN 300 uses these three logical
interfaces
- interface ge-1/0/0.11;
- interface ge-5/0/0.11;
- interface ge-6/0/0.11;
- } # End of c1-vlan-300
- } # End of bridge-domains
- } # End of customer-c2-virtual-switch
- } # end of routing-instances
Bridge domain c1–vlan-100 for customer-c1–virtual-switch has five logical interfaces:
The association of the received packet to a logical interface is done by matching the VLAN tags of the received packet with the VLAN tags configured on one of the logical interfaces on that physical port. The vlan-id 100 configuration within the bridge domain c1–vlan-100 sets the normalized VLAN value to 100.
The following happens as a result of this configuration:
Configuration and function of bridge domain c2-vlan-300 for customer-c2-virtual-switch is similar to, but not identical to, that of bridge domain c1-vlan-100 for customer-c1-virtual-switch.