09-01-2020 04:12 AM
Hi Expert,
I am using below Toplogy:
Cust-RTR1 ---(Gig1/0)SW1-----SW2-----SW3(Gig1/1)---------Cust-RTR2
|---------Provider---------|
I am trying to build a Q-in-q tunneling lab in EVE-NG using 3 Switches (vios_l2 Software (vios_l2-ADVENTERPRISEK9-M) as L2 q-in-q provider, Version 15.2(4.0.55)E), and two 7200 Series router (7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)M11) as customer edge router.
L2 Provider domain all the 3 switches configured internally as dot1q trunk and allowed supplier vlan 123 over the trunk for customer VPN. In the Provider domain edge switch 1 and 3 are configured for dot1q as below:
Summary:
Customer Vlan10,20,30
Provider Vlan for the Customer-123
Provider SW1
!
Vlan123
name Cust-A
!
interface GigabitEthernet1/0 -(Customer facing)
switchport access vlan 123
switchport mode dot1q-tunnel
mtu 1504
media-type rj45
negotiation auto
l2protocol-tunnel cdp
no cdp enable
!
Provider SW2
!
Vlan123
name Cust-A
!
Switch1 & Switch3 facing port configured as trunk
Provider SW3
!
Vlan123
name Cust-A
!
interface GigabitEthernet1/1 -(Customer facing)
switchport access vlan 123
switchport mode dot1q-tunnel
mtu 1504
media-type rj45
negotiation auto
l2protocol-tunnel cdp
no cdp enable
!
!
SW1#sh int Gi1/0 switchport | i Mode
Administrative Mode: tunnel
Operational Mode: tunnel
Access Mode VLAN: 123 (Cust-A)
Trunking Native Mode VLAN: 1 (default)
Capture Mode Disabled
SW3#sh int gi1/0 switchport | i Mode
Administrative Mode: tunnel
Operational Mode: tunnel
Access Mode VLAN: 123 (Cust-A)
Trunking Native Mode VLAN: 1 (default)
Capture Mode Disabled
As you can see switchport mode form as tunnel and ready to tunnel the customer layer2 frames. When I gave a ping from customer router R1 to R2 and vice versa, no ping success, wireshark reporting "icmp no response found".
Don't understand this behavior both side router hitting icmp unidirectional request without reply.
I capture the traffic R1 and R2, both router receiving double tagged frame which should not be like this, since I understood q-in-q tunneling outer supplier transport vlan 123 only travel inside the provider Core and never cross their edge. Edge provider switch should send the frame by removing supplier tag and send original dot1q customer frame to the customer.
Can anyone experience this lab in Eve-NG, GNS3 or any of the simulator successfully, or this is the limitation with these images and can't support ever on simulator.
I also experience ISL & VACL command taken by these images, failed to work.
If so then there is no significance to give this feature for learners.
Appreciate for any good response on this.
Thank You in Advance!!
09-01-2020 05:27 AM
Hello vimalmallick@gmail.com ,
your configuration is correct and would work on real switches.
There are some issues in emulation tools and you may be hitting one of them.
Hope to help
Giuseppe
09-01-2020 10:59 AM
Hi Giusepppe,
Agreed. Thank You for the reply.
09-01-2020 05:33 AM
here is the supported features :
https://learningnetwork.cisco.com/s/article/iosv-more-info-updated-4-20-15-x
09-01-2020 11:07 AM
Hi Balaji,
Thank You for listing supported feature by the IOSv platform. Do you know any tested image which support VACL , Q-in-Q ?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide