Cisco 3845 - Security Bundle Router

11-20
Cisco ME 3800X and 3600X Switch Software Configuration Guide
OL-23400-01
Chapter 11 Configuring Ethernet Virtual Connections (EVCs)
Configuring Other Features on EFPs
Customer B
Switch (config)# interface gigabitethernet0/3
Switch (config-if)# service instance 1 Ethernet
Switch (config-if-srv)# encapsulation dot1q 1-200
Switch (config-if-srv)# bridge-domain 40
Switch (config)# interface gigabitethernet0/4
Switch (config-if)# switchport mode trunk
For information about the effect on cost of service (CoS) for different EFT tagging operations, see the
“CoS Mapping” section on page 27-8 in Chapter 27, “Configuring QoS.”
VLAN Translation Example Configurations
• To configure untagged to tagged packets, for implicit push on ingress and pop on the ingress,
configure the ingress port as:
Switch (config)# interface gigabitethernet0/1
Switch (config-if)# switchport access vlan 10
or
Switch (config)# interface gigabitethernet0/1
Switch (config-if)# switchport trunk native vlan 10
Switch (config-if)# switchport mode trunk
Configure the egress port with switchport mode trunk.
• For 1-to-1 VLAN translation (EFP to EFP), ingress port configuration:
Switch (config)# interface gigabitethernet0/1
Switch (config-if)# switchport trunk allowed vlan none
Switch (config-if)# switchport mode trunk
Switch (config-if)# service instance 10 Ethernet
Switch (config-if-srv)# encapsulation dot1q 10
Switch (config-if-srv)# rewrite ingress tag pop 1 symmetric
Switch (config-if-srv)# bridge-domain 10
Egress port configuration:
Switch (config)# interface gigabitethernet0/2
Switch (config-if)# switchport trunk allowed vlan none
Switch (config-if)# switchport mode trunk
Switch (config-if)# service instance 10 Ethernet
Switch (config-if-srv)# encapsulation dot1q 20
Switch (config-if-srv)# rewrite ingress tag pop 1 symmetric
Switch (config-if-srv)# bridge-domain 10
• For 1-to-2 VLAN translation (EFP to EFP), ingress port configuration:
Switch (config)# interface gigabitethernet0/1
Switch (config-if)# switchport trunk allowed vlan none
Switch (config-if)# switchport mode trunk
Switch (config-if)# service instance 10 Ethernet
Switch (config-if-srv)# encapsulation dot1q 10
Switch (config-if-srv)# rewrite ingress tag pop 1 symmetric
Switch (config-if-srv)# bridge-domain 10
Egress port configuration:
Switch (config)# interface gigabitethernet0/2
Switch (config-if)# switchport trunk allowed vlan none
Switch (config-if)# switchport mode trunk
Switch (config-if)# service instance 10 Ethernet
Switch (config-if-srv)# encapsulation dot1q 20 second dot1q 30
Switch (config-if-srv)# rewrite ingress tag pop 2 symmetric
Switch (config-if-srv)# bridge-domain 10