Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Configure the switch to de-encapsulate and to accept original VLAN tags in Virtual Extensible LAN (VXLAN) packets.

We require this option on some platforms to process tagged VXLAN payloads so the device doesn't drop the tagged packet. You don't need to configure this option in some use cases, such as:

  • On the QFX10000 line of switches, you only need to include the encapsulate-inner-vlan configuration statement at the [edit vlans vlan-name vxlan] hierarchy level. You don't need to also configure the decapsulate-accept-inner-vlan option.

  • On ACX7100 routers, the device doesn't drop the tagged packets, and can process the packets whether you configure the decapsulate-accept-inner-vlan option or not.


Starting in Junos OS release 22.3R1, IS-IS logical link control (LLC) packets that are encapsulated in a VXLAN tunnel now have their VLAN tags removed by default. You can configure this option to accept the original VLAN tags on IS-IS LLC packets.


ARP suppression is automatically disabled when you encapsulate VLAN traffic for EVPN-VXLAN by configuring encapsulate-inner-vlan and its equivalent converse statement decapsulate-accept-inner-vlan. As a result, you might observe ARP packets being sent by the device.

Required Privilege Level

routing—To view this statement in the configuration.

routing-control—To add this statement to the configuration.

Release Information

Statement modified in Junos OS Release 14.1X53 for the QFX Series.