Dear @Giuseppe Larosa ,   I agree that we can bridge the EVCs created in different physical interfaces.   But our objective is to bridge and terminate all of the same inner VLANs as a single interface in our Router using BDI  for the ease of management and we are not passing to any other device.   My only concern is, it is getting the ARP entry but communication is not happening properly.   why you are not recommending to bridge multiple VLANs in the same physical interface. Is there any reason.   As per below guidelines, We can bridge multiple VLANs in the same physical interface.   "You can connect multiple EFPs to the same bridge domain on the same physical interface, and each EFP can have its own matching criteria and rewrite operation. An incoming frame is matched against EFP matching criteria on the interface, learned on the matching EFP, and forwarded to one or more EFPs in the bridge domain. If there are no matching EFPs, the frame is dropped. " https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/cether/configuration/xe-3s/ce-xe-3s-book/ce-ether-vc-infra-xe.html   Am I missing anything, why the communication is not happening properly with BDI.   I also checked in the PC associated with one of the EFPs, it is not getting the arp entries of other devices in the same bridge domain except for BDI interface.   Kindly help me to troubleshoot this.   Thanks for your valuable discussion. Selva ... View more

Thanks @Richard Burts  & @Giuseppe Larosa for your comments.   There is no ACL configured in BDI interface as well the firewall is disabled in PC for the testing.   My doubt is why it is getting arp request and sending arp request for every second as per my debug. In a normal operation, it should not happen right.   I have not done anything for this. But sometimes I can able to ping without any issue. And now there is no such continuous arp request and reply.   Sometimes, I am getting ping drops as below.   Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125 Request timed out. Reply from 10.12.0.50: bytes=32 time=1ms TTL=125   The above ping taken from the PC connected in the network.   At the same time, when pinging from the bdi12 interface also, I am getting the drops as below   ping 10.12.0.50 so bdi12 repeat 100 Type escape sequence to abort. Sending 1000, 100-byte ICMP Echos to 10.12.0.50, timeout is 2 seconds: Packet sent with a source address of 10.12.0.1 !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!........................... ......!.......!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!! Success rate is 96 percent (960/1000), round-trip min/avg/max = 1/1/7 ms   It is not stable at all.   What do you think, am I missing anything here.    Also sometimes when I am clearing the arp entries, the ping will work.   @Giuseppe Larosa ,    Regarding the VLANs, Actually fiber operator is giving one outer vlan for each exchange which will have 4 inner vlans for different services. Thats why we bridged same inner vlans in the single bridge domain to provide the service over inner vlans.   Also I tried adding only one VLAN rather multiple VLANs in the bridge domain, even that time also I faced all of the issues as observed above.   Which way we can resolve this issue.   Could you please help on this.   Thanks, Selva ... View more

Dear Guys @Richard Burts , @Giuseppe Larosa , @Joseph W. Doherty , @Jon Marshall , @Georg Pauwen    Could you help and advise me to resolve this issue.   I tried debug arp and found that, arp requests and arp replies happening continuously for every second and ARP also updated. But I cannot able to ping the IP 10.12.0.50.   please find the below debug arp samples.   082028: Mar 25 13:17:45.797: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082029: Mar 25 13:17:45.798: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082030: Mar 25 13:17:45.798: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082031: Mar 25 13:17:45.798: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082032: Mar 25 13:17:45.798: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082033: Mar 25 13:17:45.798: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082034: Mar 25 13:17:45.798: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082035: Mar 25 13:17:45.798: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082045: Mar 25 13:17:46.903: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082046: Mar 25 13:17:46.903: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082047: Mar 25 13:17:46.903: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082048: Mar 25 13:17:46.903: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082049: Mar 25 13:17:46.903: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082050: Mar 25 13:17:46.903: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12 082051: Mar 25 13:17:46.903: IP ARP: rcvd req src 10.12.0.50 6cc2.1763.9452, dst 10.12.0.1 BDI12 082052: Mar 25 13:17:46.903: IP ARP: sent rep src 10.12.0.1 6cb2.aeb9.96bf, dst 10.12.0.50 6cc2.1763.9452 BDI12   and sh ip arp bdi12 output as below   Protocol Address Age (min) Hardware Addr Type Interface Internet 10.12.0.1 - 6cb2.aeb9.96bf ARPA BDI12 Internet 10.12.0.50 0 6cc2.1763.9452 ARPA BDI12 Kindly help me to resolve this,   Thanks in advance, Selva       ... View more

Dear @Giuseppe Larosa ,   Today we started testing those double tagged packets scenario, Switches can able to process those double tagged packets with default 1500 MTU Size and also both single and double tagged packets passed through same trunk port of the switch 3750x without any issue.    I will update you regarding the status and performance after final testing.   I have one more doubt.   Can we allocate same subnet to multiple subinterfaces. Like multiple subinterfaces of router should share the same IP subnet. Is that possible.   I tried the option "IP Unnumbered" . But it is not helping on 7200 router. Whether IP Unnumbered command on Cisco ASR 1001-X router will help to allocate one subnet for multiple subinterfaces.Because in the below second link, I can able to see below option.   Feature Name  Releases   Feature Information VLANs over IP Unnumbered Subinterfaces   Cisco IOS XE Release 3.9S   The VLANs over IP Unnumbered Subinterfaces feature allows IP unnumbered interface support to be configured on Ethernet VLAN subinterfaces. This feature also provides support for DHCP on VLAN subinterfaces. Configuring Ethernet VLANs on IP unnumbered subinterfaces can save IPv4 address space and simplify configuration management, address management, and migration for DSL providers from ATM networks to IP. The following command was modified: ip unnumbered   I will check with ASR Router and I will update you whether this is working or not.   IP Unnumbered links below https://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/13786-20.html   https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-16-10/lanswitch-xe-16-10-book/lsw-cfg-vlan-ip-unnum-subint.pdf     Thanks, Selva       ... View more

Thanks @Giuseppe Larosa  for your advice. It really helped a lot.   My provider is confirming that they will be sending double tagged packets with 1500 bytes MTU. Whether can we process the double tagged packets with our cisco switch default 1500 MTU size.   You faced this mixed vlan issue while sending doubled tagged and single tagged packets to the same physical interface of ASR 1000 Router. If we use different physical ports like one port for single tagged and other for double tagged vlan packets, then can we overcome the mixed vlan issue.   Can cisco switches (C9300 & 3750X) able to handle both single and double tagged packets in the same trunk ports?    Thanks, Selva ... View more

Thanks for your kind reply @Joseph W. Doherty  ... View more

Dear @Leo Laohoo & @Giuseppe Larosa @Joseph W. Doherty , Could you guys please advise on my queries. It will be really helpful for me to move further.     Thanks, Selva ... View more

Hi Yokesh,   I hope the IOS file is stored in the subdirectory " c3750e-universalk9-mz.150-1.SE3" and not directly in flash.   So we need to give the exact path and filename for this. Please try the below   Tech-C2-FCore01#copy flash tftp: Source filename [c3750e-universalk9-mz.150-1.SE3]?c3750e-universalk9-mz.150-1.SE3/c3750e-universalk9-mz.150-1.SE3.bin Address or name of remote host []? 10.85.65.11 Destination filename [c3750e-universalk9-mz.150-1.SE3]? ... View more

Thanks Lespejel for your time.   After restart, Router starts accepting the service policies.   Thanks, Selvakumar M ... View more

Yea. path tftp://IP-ADDRESS/$h is worked for me.   Thanks a lot TLDR. ... View more