Cisco 9600 and QinQ a vlan interface

[trondaker]

Hi,

Struggeling a bit with Azure Expressroute direct and QinQ - we have a cat9k facing Azure, and we need qinq for more circuits over a single connection - however, i cant quite see how i can get a SVI to be wrapped in a s-tag? So say we have vlan 2 towards Azure as the s-tag. Port facing Azure configured as a trunk with vlan 2 on it - but where do i do the dot1q-tunnel-part? Is it possible to do this on a single box, or do i have to be one hop back from the switch doing the tunneling?

[trondaker]

Apparently using the following:

interface x/x/x.100

 encap dot1q 100 second-dot1q 1000

Should theoretically work, but on our 9k it didnt. Ended up doing a back to back port-channel with:

int vlan yyy

 desc peering to azure

int po1

 desc towards dot1q-tunnel source

switchport mode trunk

switchport trunk allowed vlan yyy

int po2

 desc source for dot1q-tunnel to azure

 switchport access vlan 7 <- s-tag azure expects, this tags whatever comes in from the other side with 7 as s-tag

 switchport mode dot1q-tunnel

Guess its an old-school way of doing things, but the second-dot1q way didnt work so..