Encapsulation dot1q subintfcaces configuration on ASR1006

[Ziggy74]

Hello all,

has someone set up an ASR1006 with sub interfaces with the encapsulation dot1q?
would you have some examples as a suggestion?

Thanks in advance 

Regards

[Julio E. Moisa]

Hi

Have you tried with:

interface GigabitEthernet0/0/0

no ip address

no shutdown 

interface GigabitEthernet0/0/0.100

 encapsulation dot1q 100

ip address 100.0.0.1 255.255.255.0

no shutdown 

[Ziggy74]

Hello Julio,

thanks for your reply, my doubt is that i need to connect two switched to my single router , please see the diagram here in attached.

Do you have a suggestion for me?

I though to configure one interface of my router for the ISP , another two in bridging to connect a trunk port of the two switches and i left the encapsulation, is it ok?

I would use the two port of the switch in trunk to pass all vlans .

The bridging could be a solution? or is it better the encapsulation with sub-interfaces?

Thanks in advance

Regards

[Georg Pauwen]

Hello,

in addition to Julio's post, are the VLANs the same, or different at both sites ? If they are different, just configure subinterfaces for each VLAN on the respective GigabitEthernet interfaces of the router. If they are the same, BDIs (bridging) is indeed a solution...

[Julio E. Moisa]

Hi

I agree with Georg, you could use BDI:

https://www.cisco.com/c/en/us/support/docs/lan-switching/integrated-routing-bridging-irb/200650-Understanding-Bridge-Virtual-Interface.html

[Ziggy74]

Hello Julio and Georg,

thanks for your help, once the dvice will be ready i will apply the BDI configuration and give you a feedback.

Thanks

Regards

[Ziggy74]

Hello,

my customer would apply a mir on the interface connected to the isp , commitment is 1 GIGA but with a burst up to 10G, i can use the rate limit class map right?

But is should be better to do on level 2 so connect to the 10giga port of my nexus 3064 the link from isp or is better to connect directly to the spa 10g board of the asr1006?

Thanks a lot in advance for your suggestion

[Georg Pauwen]

Hello,

I would police at the outgoing interface to the ISP:

class-map CLASS_LIMIT_ISP-1G
match access-group 101

policy-map POLICE_ISP_1G
class CLASS_LIMIT_ISP_1G
police 1000000000 1250000000 conform-action transmit exceed-action transmit violate-action drop

interface TenGigabitEthernet1/1/1
service-policy input POLICE_ISP_1G

[Ziggy74]

Hello Gerog ,

thanks a lot for the suggestion.

So at the end , as yopu can se in the diagram , I will:

1) use the DBI interface on ASR bridged connected on the tw nexus

2) I can apply a class map for the CIR and MIR to ISP

3) site 2 question

On point 3 I will use this scenario:

Site 2 will need a public IPs so I will get from a /24 subnet a /27 subnet and give it (/27)  to this site, I would apply a INT BDI on ASR with the address got from /27 net , on the little router in the Site 2 I will configure the interfaces with anther address got from the sme  /27 subnet and the default gateway will be the IP address of the INT BDI of the ASR in the pop.

Do you agree?

Thanks in advance for your suggestions