[Enterprise Switch] How to config QinQ tunneling Follow

IEEE 802.1Q tunneling (also known as QinQ tunneling) allows multiple VLAN tags to be inserted into a single frame, by using a VLAN-in-VLAN hierarchy, preserving the customer’s original tagged packets, and adding second tags to each frame.

Support models

ECS4100 series, ECS4120 series

Application

IEEE 802.1Q Tunneling (QinQ) is designed for service providers carrying traffic for multiple customers across their networks. QinQ tunneling is used to maintain customer-specific VLAN and Layer 2 protocol configurations even when different customers use the same internal VLAN IDs. This is accomplished by inserting Service Provider VLAN (SPVLAN) tags into the customer’s frames when they enter the service provider’s network and then stripping the tags when the frames leave the network.

Topology

Config at Switch_2 and Switch_3 :

Enable dot1q-service in global config

Console#configure
Console(config)#dot1q-tunnel system-tunnel-control

Check dot1q-tunnel with command

Console#show dot1q-tunnel
802.1Q Tunnel Status : Enabled
802.1Q Tunnel TPID : 8100 (Hex)

Setting dot1q-tunnel on port

Console#configure
Console(config)#interface ethernet 1/2
Console(config-if)#switchport allowed vlan add 3217 untagged
Console(config-if)#switchport native vlan 3217
Console(config-if)#switchport allowed vlan remove 1
Console(config-if)#switchport dot1q-tunnel mode access
Console(config-if)#exit
Console(config)#interface ethernet 1/1
Console(config-if)#switchport allowed vlan add 3217 tagged
Console(config-if)#switchport dot1q-tunnel mode uplink

Check dot1q-tunnel with command

Console#show dot1q-tunnel

Config at Switch_1 and Switch_4 :

Config access mode

Console#configure
Console(config)#interface ethernet 1/1
Console(config-if)#switchport mode access
Console(config-if)#switchport native vlan 208
Console(config-if)#switchport allowed vlan remove 1

Config trunk mode

Console#configure
Console(config)#interface ethernet 1/2
Console(config-if)#switchport mode trunk
Console(config-if)#switchport allowed vlan add 208 tagged
Console(config-if)#switchport allowed vlan remove 1

Use PC1 ping PC2 and capture between Switch_2 and Switch_3
can see the EC switch put on the outer tag by QinQ service.