We're looking to install a Cisco 7606 router to do q-in-q vlan tag termination. A trunk from our Metro E provider will be terminated on the 7606. The outer tag will represent the physical site and the inner-tag will represent the individual customer VLAN's at that physical site. Our concern is that a client a a site may somehow create a layer 2 loop which would in-turn create a broadcast storm that traverses our Metro E link, hits our 7606 and affects other customers. Is there any way to mitigate this? Also, is there a way to rate-limit a q-in-q VLAN?
