[c-nsp] Problematic Q-in-Q

[Brault, Ryan]

Notes inline below.

Ryan Brault
Illinois Century Network
Illinois Department of Central Management Services
815-936-4647

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Chris Knipe
Sent: Thursday, November 10, 2011 5:27 AM
To: cisco-nsp
Subject: [c-nsp] Problematic Q-in-Q


I need to encapsulate as follows:
VLAN10
VLAN20 -> VLAN103 -> Provider Trunk
VLAN30


Am I right in presuming:
Int gi1/0
  switchport mode trunk
  switchport trunk allowed vlans 100-103 <----This looks fine.

Int gi1/1
  switchport mode access
  switchport access vlan 100 <----This looks fine.

Int gi1/2
  switchport mode access
  switchport access vlan 101 <----This looks fine.

Int gi1/3
  switchport mode access
  switchport access vlan 102 <----This looks fine.

Int gi1/4
  switchport mode dot1q-tunnel
  switchport access vlan 10 <----This should be "switchport access vlan 103"

Int gi1/5
  switchport mode dot1q-tunnel
  switchport access vlan 20 <----This should be "switchport access vlan 103"

Int gi1/6
  switchport mode dot1q-tunnel
  switchport access vlan 30 <----This should be "switchport access vlan 103"

Now what.. How do I get vlans 10-30 to be encapsulated inside vlan103
specifically?  Documentation suggests Int gi1/0 (trunk port) to be
configured as follows:
Int gi1/0
  switchport mode trunk
  switchport trunk allowed vlans 10,30-100-103 <----This is wrong.  Your original config above is correct.  You don't want vlans 10, 20, or 30 exposed in the carrier's network.