[a-nsp] Terminating a Q-in-Q L3 interface?
Bryan Holloway
bryan at shout.net
Fri May 10 12:19:27 EDT 2024
So in Cisco (IOSXR)-land, it's trivial to terminate double-tagged
traffic on an SVI like so:
interface Bundle-Ether3.900
ipv4 address 10.11.12.13 255.255.255.252
encapsulation dot1q 900 second-dot1q 100
... where 900 is the outer-tag, and 100 is the inner-tag.
I've been trying to figure out a way to do this on Arista.
Since there's no built-in way to do it on standard SVIs, I thought I'd
take a look at their double-tag VLAN translation feature, which looks
like it'll do the trick.
So I created the following:
interface Ethernet49/1
switchport trunk allowed vlan 900
switchport mode trunk
switchport vlan translation 900 inner 100 200
... which purports to dump double-tagged 900:100 traffic into the VLAN
200 bridge domain.
To wit:
"On ingress, specified double-tagged packets are mapped to the bridging
VLAN, and on egress packets with the ID of the bridging VLAN are double
tagged as specified."
So I created VLAN 200 and an SVI:
interface Vlan200
ip address 10.11.12.14/30
But it doesn't work. Notably, the SVI doesn't even come up because there
are no interfaces using VLAN 200.
Fine ... so I added 200 to another unrelated trunk, which caused my
VLAN200 interface to come up.
But still no joy. I know this is a bit kludge-y, but shouldn't it work
as advertised?
Has anyone succeeded in something like this? I'm open to suggestions,
thank you!
- bryan
P.S.: Running 4.25.4M on the Arista, which is admittedly a little long
in the tooth.
More information about the arista-nsp
mailing list