Cisco ASR1004 How to globally map the concrete c-vlan from different s-vlans for management

[Sukhrob Gulyamov]

Hi to all.

I have lots of qinq channels to our remote sites. Channels are provided by our ISP by separate links from ISPs switch to our switch, without  second tag (s-vlan). Now, we are going to migrate all our channels to one 10G interface, and provider will give  us our channels with double tag (s-vlan + c-vlan).

All management interfaces on switches (SVIs) are in c-vlans. Regarding that i have a question: how can I globally configure sub interface for management (on Cisco ASR1004), for all c-vlans, from different s-vlans?

Here is attached topology, what will be after migrating to one 10G link with ISP.

P.S. Sorry for my terrible english :(

[Evgeniy Prichinin]

hello. try this.

interface TenGigabitEthernet1/1/0
 no ip address
 service instance 2215 ethernet
  encapsulation dot1q any second-dot1q 20
  rewrite ingress tag pop 2 symm
  bridge-domain 2215
 !
end

and then create interface bdi2215.

[Sukhrob Gulyamov]

Hi! But there is no "encapsulation" command at all (((

[Evgeniy Prichinin]

I have it.

Cisco IOS XE Software, Version 03.10.01.S - Extended Support Release
Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.3(3)S1, RELEASE SOFTWARE (fc1)

[Sukhrob Gulyamov]

Hi! I've upgraded IOS Software, and tried configure interface as proposed above, but no success ( Rewrite change is not logically valid on ServInst 2215(Gi1/1/0)), u cannot configure to poping out tags with range of s-vlans or c-vlans... only push  

I've tried to push top and inner tags - also no success. Can't understand, what's wrong in my configuration?

RT:
interface GigabitEthernet1/1/0
 description TEST1
 mtu 1536
 no ip address
 negotiation auto

 no mop enabled

service instance 11 ethernet
  encapsulation dot1q 1-4094 second-dot1q 11
  rewrite ingress tag push dot1q 11 second-dot1q 11 symmetric
  bridge-domain 11
 

interface BDI11
 mtu 1536
 ip address 10.101.8.254 255.255.255.0
 encapsulation dot1Q 11 second-dot1q 11
 

SW:

Link to customer switch:

interface GigabitEthernet1/1
 description trunk:
 switchport access vlan 4000
 switchport mode dot1q-tunnel
 no cdp enable
end

Link to RT:

interface GigabitEthernet2/23
 description TRUNK: TEST1
 switchport trunk allowed vlan 2-4094
 switchport mode trunk
 

[Evgeniy Prichinin · Accepted solution]

heh. i think this is not possible (symmetric) because how router would choose right first vlan tag for outgoing traffic?

so create service instance for each s-vlan and bridge it to BDI.

[Sukhrob Gulyamov]

does it affect to cpu utilization?