CHAPTER
13-1
Cisco ME 3400 Ethernet Access Switch Software Configuration Guide
OL-9639-07
13
Configuring IEEE 802.1Q Tunneling and Layer 2
Protocol Tunneling
Virtual private networks (VPNs) provide enterprise-scale connectivity on a shared infrastructure, often
Ethernet-based, with the same security, prioritization, reliability, and manageability requirements of
private networks. Tunneling is a feature designed for service providers who carry traffic of multiple
customers across their networks and are required to maintain the VLAN and Layer 2 protocol
configurations of each customer without impacting the traffic of other customers. The Cisco ME 3400
Ethernet Access switch supports IEEE 802.1Q tunneling and Layer 2 protocol tunneling when it is
running the metro access or metro IP access image. The metro base image does not support tunneling.
Note For complete syntax and usage information for the commands used in this chapter, see the command
reference for this release.
• Understanding 802.1Q Tunneling, page 13-1
• Configuring 802.1Q Tunneling, page 13-4
• Understanding Layer 2 Protocol Tunneling, page 13-7
• Configuring Layer 2 Protocol Tunneling, page 13-10
• Monitoring and Maintaining Tunneling and Mapping Status, page 13-18
Understanding 802.1Q Tunneling
Business customers of service providers often have specific requirements for VLAN IDs and the number
of VLANs to be supported. The VLAN ranges required by different customers in the same
service-provider network might overlap, and traffic of customers through the infrastructure might be
mixed. Assigning a unique range of VLAN IDs to each customer would restrict customer configurations
and could easily exceed the VLAN limit (4096) of the 802.1Q specification.
Using the 802.1Q tunneling (QinQ) feature, service providers can use a single VLAN to support
customers who have multiple VLANs. Customer VLAN IDs (C-VLANs) are preserved, and traffic from
different customers is segregated within the service-provider network, even when they appear to be in
the same VLAN. Using 802.1Q tunneling expands VLAN space by using a VLAN-in-VLAN hierarchy
and retagging the tagged packets. A port configured to support 802.1Q tunneling is called a tunnel port.
When you configure tunneling, you assign a tunnel port to a VLAN ID that is dedicated to tunneling.
To Next Page
Loading...
Need help?
General
