[j-nsp] VPLS q-in-q

Baldur Norddahl baldur at gigabit.dk
Fri May 22 06:42:25 EDT 2020


Hello

I got this working by changing VPLS encapsulation from tagged to raw and 
this config:

baldur at formervangen-edge1# show routing-instances poi-formervangen | 
display inheritance brief
protocols {
     vpls {
         encapsulation-type ethernet;
         ## 'no-control-word' was inherited from group 'POI-VPLS'
         no-control-word;
         ## 'mac-statistics' was inherited from group 'POI-VPLS'
         mac-statistics;
         mesh-group 1 {
             vpls-id 424;
             neighbor 10.9.124.0;
         }
     }
}
## 'vpls' was inherited from group 'POI-VPLS'
instance-type vpls;
vlan-id all;
interface xe-0/1/7.424;
interface ps1.0;
interface ps1.424; ## 'ps1.424' is not defined

[edit]
baldur at formervangen-edge1# show interfaces xe-0/1/7
flexible-vlan-tagging;
native-vlan-id 424;
encapsulation flexible-ethernet-services;
unit 424 {
     encapsulation vlan-vpls;
     vlan-tags outer 424 inner-range 1-4000;
}


I now get double tagged frames out on interface xe-0/1/7:

10:29:34.667573 00:22:07:4d:7b:0d > ff:ff:ff:ff:ff:ff, ethertype 802.1Q 
(0x8100), length 350: vlan 424, p 0, ethertype 802.1Q, vlan 201, p 0, 
ethertype IPv4, 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request 
from 00:22:07:4d:7b:0d, length 300

However I also need this on a 'ps' interface to support auto 
configuration with subscriber management. I tried replicating the 
configuration from xe-0/1/7.424 on ps1.424 and that configuration is 
accepted by the router but does nothing. Auto configuration does query 
the radius server. I then tried ethernet-vpls on ps1.0 which works but 
now I am missing the outer vlan tag.

baldur at formervangen-edge1# show interfaces ps1
apply-groups AUTO-PS;
encapsulation flexible-ethernet-services;
unit 0 {
     encapsulation ethernet-vpls;
}
inactive: unit 424 {
     encapsulation vlan-vpls;
     vlan-tags outer 424 inner-range 1-4000;
}

Packet counters on ps1.424 is counting output packages but 
auto-configure is not triggered.

Is there a trick to get the full q-in-q double tagged headers back in 
this case?

Thanks,

Baldur


Full config of ps1:

baldur at formervangen-edge1# show interfaces ps1 | display inheritance brief
## 'anchor-point' was inherited from group 'AUTO-PS'
anchor-point {
     ## 'lt-0/0/0' was inherited from group 'AUTO-PS'
     lt-0/0/0;
}
## 'flexible-vlan-tagging' was inherited from group 'AUTO-PS'
flexible-vlan-tagging;
## 'auto-configure' was inherited from group 'AUTO-PS'
auto-configure {
     ## 'stacked-vlan-ranges' was inherited from group 'AUTO-PS'
     stacked-vlan-ranges {
         ## 'USER-ACCESS-TEST' was inherited from group 'AUTO-PS'
         dynamic-profile USER-ACCESS-TEST {
             ## 'any' was inherited from group 'AUTO-PS'
             accept any;
             ranges {
                 ## 'any,any' was inherited from group 'AUTO-PS'
                 any,any;
             }
         }
         ## 'authentication' was inherited from group 'AUTO-PS'
         authentication {
             ## 'any' was inherited from group 'AUTO-PS'
             packet-types any;
             ## '$ABC123' was inherited from group 'AUTO-PS'
             password "$ABC123";
             ## 'username-include' was inherited from group 'AUTO-PS'
             username-include {
                 ## 'qqvlan' was inherited from group 'AUTO-PS'
                 user-prefix qqvlan;
                 ## 'vlan-tags' was inherited from group 'AUTO-PS'
                 vlan-tags;
             }
         }
         ## 'access-profile' was inherited from group 'AUTO-PS'
         ## 'rad' was inherited from group 'AUTO-PS'
         access-profile rad;
     }
     ## 'vlan-ranges' was inherited from group 'AUTO-PS'
     vlan-ranges {
         ## 'USER-ACCESS-TEST' was inherited from group 'AUTO-PS'
         dynamic-profile USER-ACCESS-TEST {
             ## 'any' was inherited from group 'AUTO-PS'
             accept any;
             ranges {
                 ## 'any' was inherited from group 'AUTO-PS'
                 any;
             }
         }
         ## 'authentication' was inherited from group 'AUTO-PS'
         authentication {
             ## 'any' was inherited from group 'AUTO-PS'
             packet-types any;
             ## '$ABC123' was inherited from group 'AUTO-PS'
             password "$ABC123";
             ## 'username-include' was inherited from group 'AUTO-PS'
             username-include {
                 ## 'qvlan' was inherited from group 'AUTO-PS'
                 user-prefix qvlan;
                 ## 'vlan-tags' was inherited from group 'AUTO-PS'
                 vlan-tags;
             }
         }
         ## 'access-profile' was inherited from group 'AUTO-PS'
         ## 'rad' was inherited from group 'AUTO-PS'
         access-profile rad;
     }
}
encapsulation flexible-ethernet-services;
unit 0 {
     encapsulation ethernet-vpls;
}




More information about the juniper-nsp mailing list