Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


l2pt (Destination Tunnels)


Hierarchy Level


Enable Layer 2 (L2) protocol tunneling (L2PT) across the encapsulation tunnels in an EVPN network.

Use this statement to enable a device to receive protocol control frames coming in on an access interface and tunnel those frames across the encapsulation tunnels on the device. Configure this statement with the interface name option (required) and each of the following (required):

  1. The destination tunnel-type option.

  2. The protocol option for each bridge protocol data unit (BPDU) type you want the device to tunnel from the access interface across the encapsulation tunnels on the device. Or, specify the all option to enable L2PT for all of the supported protocols.


When you enable L2PT over VXLAN for a supported protocol, the device transparently forwards the protocol control frames with that protocol destination MAC address. If you enable L2PT for a protocol that has the same destination MAC address as one or more other supported protocols, the device transparently forwards the control frames for all of those protocols.


interface name

(Required) Interface name on which to enable L2PT across a destination tunnel type on the device. The interface can be a physical interface or an aggregated Ethernet (AE) interface.

destination tunnel-type

(Required) Destination tunnel type over which to enable L2PT—you must specify one of the supported encapsulation tunnel types:

  • vxlan-tunnel—Enable L2PT over VXLAN encapsulation tunnels on the device.


    The vxlan-tunnel tunnel type is currently the only destination encapsulation tunnel type supported with this statement.

protocol (all | protocol-name)

(Required) Protocol for which to transparently tunnel control packets from the specified interface across the destination tunnel type. Some of the available protocol options might not be supported with all encapsulation tunnel types. We support all of the protocol options listed below with the vxlan-tunnel destination tunnel type.

Specify the all option to enable L2PT for all of the supported protocol options, or specify one of the following supported protocol options:

  • cdp—Cisco Discovery Protocol (CDP)

  • elmi—Ethernet Local Management Interface (E-LMI)

  • gvrp—Generic Attribute Registration Protocol (GARP) VLAN Registration Protocol (GVRP)

  • ieee8021x—IEEE 802.1X authentication

  • ieee8023ah—IEEE 802.3ah Operation, Administration, and Maintenance (OAM) link fault management (LFM)

  • lacp—Link Aggregation Control Protocol (LACP)

  • lldp—Link Layer Discovery Protocol (LLDP)

  • mmrp—Multiple MAC Registration Protocol (MMRP)

  • mvrp—MVRP VLAN Registration Protocol (MVRP)

  • udld—Unidirectional Link Detection (UDLD)

  • vtp—VLAN Trunking Protocol (VTP)

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 24.2R1.