cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1587
Views
0
Helpful
4
Replies

IOSv does not support q-n-q tunneling??

Hi Expert,


I am using below Toplogy:


Cust-RTR1 ---(Gig1/0)SW1-----SW2-----SW3(Gig1/1)---------Cust-RTR2

|---------Provider---------|

I am trying to build a Q-in-q tunneling lab in EVE-NG using 3 Switches (vios_l2 Software (vios_l2-ADVENTERPRISEK9-M) as L2 q-in-q provider, Version 15.2(4.0.55)E), and two 7200 Series router (7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)M11) as customer edge router.

L2 Provider domain all the 3 switches configured internally as dot1q trunk and allowed supplier vlan 123 over the trunk for customer VPN. In the Provider domain edge switch 1 and 3 are configured for dot1q as below:

Summary:

Customer Vlan10,20,30

Provider Vlan for the Customer-123


Provider SW1

!

Vlan123

name Cust-A

!
interface GigabitEthernet1/0 -(Customer facing)
switchport access vlan 123
switchport mode dot1q-tunnel
mtu 1504
media-type rj45
negotiation auto
l2protocol-tunnel cdp

no cdp enable

!


Provider SW2

!

Vlan123

name Cust-A

!

Switch1 & Switch3 facing port configured as trunk


Provider SW3

!

Vlan123

name Cust-A

!

interface GigabitEthernet1/1 -(Customer facing)
switchport access vlan 123
switchport mode dot1q-tunnel
mtu 1504
media-type rj45
negotiation auto
l2protocol-tunnel cdp

no cdp enable

!

!

SW1#sh int Gi1/0 switchport | i Mode
Administrative Mode: tunnel
Operational Mode: tunnel
Access Mode VLAN: 123 (Cust-A)
Trunking Native Mode VLAN: 1 (default)
Capture Mode Disabled


SW3#sh int gi1/0 switchport | i Mode
Administrative Mode: tunnel
Operational Mode: tunnel
Access Mode VLAN: 123 (Cust-A)
Trunking Native Mode VLAN: 1 (default)
Capture Mode Disabled


As you can see switchport mode form as tunnel and ready to tunnel the customer layer2 frames. When I gave a ping from customer router R1 to R2 and vice versa, no ping success, wireshark reporting "icmp no response found".

Don't understand this behavior both side router hitting icmp unidirectional request without reply.

I capture the traffic R1 and R2, both router receiving double tagged frame which should not be like this, since I understood q-in-q tunneling outer supplier transport vlan 123 only travel inside the provider Core and never cross their edge. Edge provider switch should send the frame by removing supplier tag and send original dot1q customer frame to the customer.


Can anyone experience this lab in Eve-NG, GNS3 or any of the simulator successfully, or this is the limitation with these images and can't support ever on simulator.


I also experience ISL & VACL command taken by these images, failed to work.


If so then there is no significance to give this feature for learners.


Appreciate for any good response on this.


Thank You in Advance!!

4 Replies 4

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello vimalmallick@gmail.com ,

your configuration is correct and would work on real switches.

 

There are some issues in emulation tools and you may be hitting one of them.

 

Hope to help

Giuseppe

 

Hi Giusepppe,

 

Agreed. Thank You for the reply.

balaji.bandi
Hall of Fame
Hall of Fame

here is the supported features :

 

https://learningnetwork.cisco.com/s/article/iosv-more-info-updated-4-20-15-x

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hi Balaji,

 

Thank You for listing supported feature by the IOSv platform. Do you know any tested image which support VACL , Q-in-Q ?