QinQ on cisco C6816-X-LE

[raghu.jrs]

Hi

We are trying to establish a Connection from our Cisco C6816 router to Azure-cloud( Express-route), to achieve this we need to use the QinQ VLAN configuration, I have done this on Nexus switch which is working fine, not able to get the exact config for Cisco 6816 router, can anyone  share the config for  Cisco 6816, this will be a great help. 

" Nexus

interface GigabitEthernet<Interface_Number>.<Number>
 encapsulation dot1Q <s-tag> seconddot1Q <c-tag>
 ip address <IPv4_Address><Subnet_Mask>

[Georg Pauwen]

Hello,

I remember this to be something like below:

switchport mode dot1q-tunnel
switchport vlan mapping enable
switchport vlan mapping 1501 701

[raghu.jrs]

hi

i added below config's still not working

interface Vlan1131
 ip address 192.168.12.1 255.255.255.252

1)

interface TenGigabitEthernet1/2
 switchport
 switchport vlan mapping enable
 switchport vlan mapping 1131 1132
 switchport mode trunk

2)

interface TenGigabitEthernet1/2
 switchport
 switchport vlan mapping enable
 switchport vlan mapping 1131 1132
 switchport mode dot1q-tunnel
 no cdp enable

both the case i'm not able to reach the destination IP

C6816-2513#ping 192.168.12.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.12.2, timeout is 2 seconds:
.....

[Georg Pauwen]

Hello,

I think ' no lldp transmit' is required on the PE port. In your case, I don't know which port that is, try it on one or the other...

[raghu.jrs]

Hi

Please find the attached connectivity FYR.

We are connecting to Microsoft Azure through one of the providers,  where we need to use Q-in-Q (802.1ad), port te1/2 connected to Service provider. 

As per our Provider "Cusertmerdevice should support 802.1ad (Q-in-Q) with inner/outer tags", we are using Cisco C6816-X-LE router to achieve this connection

The interface te1/2 connect to Service provider ( C-Tag 1141 S-Tag-1131) ( C-Tag-> Our end VLAN, S-TAG-> Service provider VLAN)

" https://docs.microsoft.com/en-us/azure/expressroute/expressroute-config-samples-routing "

C6816(config)#do sh run int te 1/2

interface TenGigabitEthernet1/2
 switchport
 switchport vlan mapping enable
 switchport vlan mapping 1141 1131
 switchport mode dot1q-tunnel
 switchport access vlan 1131
 no cdp enable
 no lldp transmit

[paul driver]

Hello

My understanding is you apply QinQ on the SP switch facing your end hosts.

Sw1
int x/x
description facing rtr1
switchport mode dot1q-tunnel
l2protocol-tunnel CDP | VTP |STP
switchport access vlan 102 <--qinq tunnel vlan

Sw2
int x/x
description facing rtr2
switchport mode dot1q-tunnel
l2protocol-tunnel CDP | VTP |STP
switchport access vlan 102 <--qinq tunnel vlan

res

Paul

[raghu.jrs]

HI @paul driver

Thank you for the reply,

But in this case, where we are doing the VLAN mapping, as per the Service provider & Azure, we will have a VLAN 1141 on our & Azure end, VLAN 1131 is the Provider  Q-in-Q tunnel VLAN, 

Basically how it works is we need to send double-tagged frames with an outer tag of 1131 and an inner tag of1141 (used for  Azure peerings)

When provider receive that they pass the traffic through their network, remove the outer tag of 1131 and replace it with the Azure "B VLAN (1141)" and send it to Azure

Azure remove the outer VLAN and then use the inner VLANs for  individual peerings

If we send only single-tagged frames, or either of the tags is not correct, it won't work.