SG550XG and VLAN Mapping

[henrihoffmann]

Hi,

have here a couple of SG550XG and want to configure VLAN one-to-one mapping for a LAG.

Problem: on the other side (Router), the packet arrived without remapping, according to the trace.

Win ping - LAG VLAN2102 ---> SG550XG - PO15 - VLAN2102 one-to-one mapping VLAN2 --> Router BUNDLE-1 ....

Thanks

Henri

This is the config:

switch4#sh run int po15
interface Port-Channel15
loopback-detection enable
description "PO15 - SW13.bundle-1"
spanning-tree disable
switchport mode trunk
switchport trunk native vlan none
switchport trunk allowed vlan 2001,2100-2103,2105,2155
switchport vlan-mapping one-to-one 2 2102

[VLAN] 2025/02/04 10:51:53,898
VLAN ingress filter for packet received from bc:24:11:7b:73:85 via port BUNDLE-1 destined to ff:ff:ff:ff:ff:ff (Broadcast) Type 0x0806
Frame Tag: full (network 2102, prio 0)[Bridge] 2025/02/04 10:51:53,898
Bridge frame coming from ifc BUNDLE-1:
bc:24:11:7b:73:85 to ff:ff:ff:ff:ff:ff (Broadcast), 56 bytes
VLAN Id 2102 Prio 0
-->multi/broadcast
--> BUNDLE-1's forwarding mask is [GRE-TUNNEL-2]
-->VLAN egress filter forbids forwarding to GRE-TUNNEL-2
-->forwarding into own LSL stack

[Flavio Miranda]

@henrihoffmann 

Take a look on this guide to make sure you didnt miss anything 

https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-350-series-managed-switches/smb5742-configure-vlan-mapping-on-a-switch.html 

[henrihoffmann]

Hi Flavio,

I already tripple checked this point: 

Prerequisites in configuring VLAN Mapping on your switch:

Note: Applying VLAN tunneling on an interface requires the use of router TCAM rules. There should be four TCAM entries per mapping. If there is not a sufficient number of router TCAM resources, the command will fail.

1. Create the VLANs. To learn how to configure the VLAN settings on your switch, click here.

2. Disable IP routing on the switch. To learn how to configure IP routing settings on your switch, click here.

3. Configure Ternary Content Addressable Memory (TCAM) allocations on your switch. To learn how to configure router TCAM resources allocation for VLAN tunneling and mapping purposes, click here.

Note: Applying VLAN tunneling on an interface requires the use of router TCAM rules. There should be four TCAM entries per mapping. If there is not a sufficient number of router TCAM resources, the command will fail. 

4. Disable Spanning Tree Protocol (STP) on the interfaces that you want to configure. For instructions on how to configure the STP interface settings on your switch, click here.

5. Configure the interface as trunk ports. For instructions, click here.

6. Disable Generic Attribute Registration Protocol (GARP) VLAN Registration Protocol (GVRP) on the interface. To learn how to configure the GVRP settings on your switch, click here.

switch4#sh int switchport po15
S-VLAN Ethernet Type: 0x8100 (802.1q)
VLAN Mapping Tunnel L2 protocols Global CoS: 5
Name: Po15
Switchport: enable
Administrative Mode: trunk
Operational Mode: up
Access Mode VLAN: 1
Access Multicast TV VLAN: none
Trunking Native Mode VLAN: none
Trunking VLANs: 2001,2100-2103,2105,2155
General PVID: 1
General VLANs: none
General Egress Tagged VLANs: none
General Forbidden VLANs: none
General Ingress Filtering: enabled
General Acceptable Frame Type: all
General GVRP status: disabled
Customer Mode VLAN: none
Customer Multicast TV VLANs: none
Private-vlan promiscuous-association primary VLAN: none
Private-vlan promiscuous-association Secondary VLANs: none
Private-vlan host-association primary VLAN: none
Private-vlan host-association Secondary VLAN: none

VLAN Mapping Tunnel:
S-VLAN Ethernet Type: 0x0x8100 (802.1q)
C-VLANs Outer S-VLANs
------------ ---------------
VLAN Mapping Tunnel L2 protocols S-VLAN:
VLAN Mapping Tunnel L2 protocols Interface CoS: 5 (global)
VLAN Mapping Tunnel L2 protocols forward enabled:
Drop Threshold: 32 kbps (default)

VLAN Mapping One-to-one:
C-VLANs Translated S-VLANs
------------ --------------------
2 2102

Classification rules:

Classification type Group ID VLAN ID
------------------- -------- -------

switch4#sh spanning-tree po15

Port Po15 disabled
State: disabled Role: disabled
Port id: 128.1014 Port cost: 10000
Type: N/A (configured:Auto ) RSTP Port Fast: No (configured:Auto)
Designated bridge Priority : 0 Address: c4:44:a0:30:a9:30
Designated port id: 128.1014 Designated path cost: 0
Guard root: Disabled BPDU guard: Disabled
Number of transitions to forwarding state: 0
BPDU: sent 307, received 0

switch4#sh system resources

In-Use Max
------ --------
IP Entries 36 7168
IPv4 policy Routes 0 16
IPv6 policy Routes 0 16
VLAN Mapping Entries 13 32