6500 QinQ native vlan risks

[Arthur Kant]

I have two questions:

1)  6500 (regardless of SUP) do not support standard 802.1ad correct?  The "QinQ" functions available are non standard?

2) Can someone help me understand why tagging the native vlan is listed as a required step when configuring switchport mode dot1-tunnel ?

(http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dot1qtnl.html)

I understand vlan hopping ..etc but I am not understanding how this relates to creating a tunnel port.  To me, a tunnel port puts all data into the provider / S-VLAN defined on the tunnel port with "switchport mode access vlan x" this includes tagged traffic and untagged traffic coming from the CE on the tunnel port.   I understand the best practice of tagging the native vlan on core switches in general.. but why do tunnel ports prompt and say it is required?

I am missing something basic here :)

thanks!

[milan.kulik · Accepted solution]

Hi,

ad 2) here is an explanation, I believe:

http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/interfaces/configuration/guide/if_cli/if_qinq_tunnel.html#28818

Best regards,

Milan

[Arthur Kant]

Yes I believe this does answer question #2 ... thank you for the link. !! :)