Bridge-domain and trunk configuration on ES20 card.

Hello.
I have two 7609-S boxes equipped with ESM20G cards and WS-X6748-GE-TX cards. A trunk is configured on ports of WS cards between these devices. A very important system is to be connected with two optical links to both devices via ES20 cards for redundancy. I consider configuring it using EVC framework in the following way:
service instance -> bridge-domain XXX -> interface VLAN XXX and enable HSRP on my devices.
I am not sure what is the structure of conecting system so I would like to have some kind of L2 connectivity between my devices for this connection. For other connections made using ports on WS card a dedicated VLAN is allocated for every one of them and then this VLAN is simply put in trunk between devices. Can I simply add vlan XXX to the list of VLANs allowed on the WS-card-based-trunk or do I have to utilize some completely different solution? Links to any related documentation are appreciated. Tomorrow I am going to test this configruation any way but I would like to have some backup solution in case this will not work.
Thanks in advance,
Andrew.

Hi Andrei,
Im having the same dilemna and im wondering if you were able to find a solution for this?
I need to support HSRP on a vlan interface with bridging over port channel bundled interface between routers.
im trying this but i cant seem to get this to work.
----R2----
interface Vlan10
ip vrf forwarding BOB
ip address 10.1.1.2 255.255.255.248
standby 1 ip 10.1.1.1
standby 1 priority 110
standby 1 preempt
end
interface Port-channel1
no ip address
service instance 10 ethernet
  encapsulation dot1q 10
  bridge-domain 10
--- R2----
interface Vlan10
ip vrf forwarding BOB
ip address 10.1.1.3 255.255.255.248
standby 1 ip 10.1.1.1
end
interface Port-channel1
no ip address
service instance 10 ethernet
  encapsulation dot1q 10
  bridge-domain 10
BR//
Chanuka

Similar Messages

  • Bridge Domain and multicast traffic

    Hi All,
    i am planning to build a Point to multipoint network based on ME3600X switch at the HQ and ISR 2900 routers at the Branches. i need to simulate a lan service.
    i though of using EOMPLS at the ISR 2900 and closing them at the ME3600X. at the ME3600X i will use bridge domain to have this point to multipoint functionality.
    at the configuration guide i saw that when i am using bridge domain i need to disable IGMP snooping on every Vlan.
    my question is how the bridge domain treat Multicast traffic ?
    furthermore, can i mix EOMPLS and Bridge Domain ?
    Thanks,
    Avi.

    Hi Avi,
    ME3600X doesn't support VPLS yet (check with your account team for the roadmap) so I don't think your design will work here. What you can do is having a router behind the ME3600X which will have a dedicated VLAN with each remote site.
    HTH
    Laurent.

  • Bridge domain questions

    Hi everybody.
    At work , I have seen a lot of bridge domains configured on a single switch. My question is what is bridge domain and why we use them. An example with configurations will be great.
    Thanks and have a great day.

    Hi Marvin and Rick
    Please consider the following config and questions:
    R1#  show platform
    Interrupt Throttling:
      Throttle Count   = 00052552   Timer Count      = 00039372
      Netint usec      = 00000800   Netint Mask usec = 00000240
      Active           =        0   Configured       =        1
      Longest IRQ(usec)= 00003999
    MSFC CPU IDPROM:
    IDPROM image:
      (FRU is 'C7600 MSFC4 Daughterboard')
    +++++++++++++++++++++++++++++++++++++++++
    R1#show running-config interface gigabitEthernet 9/7
    service instance 1251 ethernet
      encapsulation dot1q 1251
      rewrite ingress tacg pop 1 symmetri
      bridge-domain 440
    service instance 2001 ethernet
      encapsulation dot1q 2001
      rewrite ingress tag pop 1 symmetric
      bridge-domain 440
    +++++++++++++++++++++++++++++++++++++++++
    Let say R1 receives a packet with vlan tag 1251 on g9/7. What will happen next? will R1 update its MAc table with source mac?
    1)Will there be a mac table for bridge -domain 440?  Do we have one-to one correspondence between the two i.e each  bridge-domain has its own mac table.?
    2)Let say R1 receives a packet with vlan tag 1251 on g9/7. What will happen next? will R1 update its MAc table with source mac?
    3) Let say R1 receives a frame with vlan tag 1251 with destination mac ff:ff:ff:ff
    What will R1 do next?
    4)Will R1 forward it to all service instance in bridge-domain 440 except the one R1 receives the broadcast frame? 
    ( in our case we have two service instances under  bridge -domain 440 i.e service instance 1251 ethernet,service instance  2001 ethernet)
    5) Will R1 change the vlan tag 1251 to 2001 when forwarding the broadcast frame out of instance 2001?
    Appreciate your help.
    Thanks

  • Bridge-domain traffic paths

    Hi guys,
    Couldn't really get into logic of bridge-domain and hsrp coexistence. How traffic will be flooded?
    Imagine following topology:
    Bridge-domain and hsrp is running between ASR1 and ASR2.
    Host C has two network adapters. Both are in UP state, but only one of them is forwarding traffic.
    I am curious, what path traffic will take from host A to host C and from B to C in situation when :
    1) net.adapter #1 is active
    2) net.adapter #2 is active
    p.s. active router for hsrp remains the same.
    We have captured traffic on the devices, and it was a bit confusing to me that standby hsrp router was forwarding traffic from host B out of g0/0/0/0 and pw 3
    I would appriciate any help...

    Okay, that really make sence. Thank You very much for the explanation!
    Yes, You are right, that's RNC.
    Theoretically the MAC address should be flushed away from the memory when the switchover of the network card appears, because, the connection for some seconds goes down.
    Could You please tak a look on the following output:
    As I understand, both ASR's do know where 0040.4384.8260 (This is RNC NPGEP mac address) is. So basically there should not be any flooding..
    RP/0/RSP1/CPU0:ASR9k-1#sh l2vpn forwarding bridge-domain RNC:RNC3_TEST mac-address detail location 0/0/CPU0
    Mon Dec  2 21:05:25.639 EET
    Bridge-domain name: RNC:RNC3_TEST, id: 20, state: up
    MAC learning: enabled
    MAC port down flush: enabled
    Flooding:
       Broadcast & Multicast: enabled
       Unknown unicast: enabled
    MAC aging time: 300 s, Type: inactivity
    MAC limit: 4000, Action: none, Notification: syslog
    MAC limit reached: no
    MAC Secure: disabled, Logging: disabled
    DHCPv4 snooping: profile not known on this node
    Dynamic ARP Inspection: disabled, Logging: disabled
    IP Source Guard: disabled, Logging: disabled
    IGMP snooping: disabled, flooding: enabled
    Routed interface: BVI3, Xconnect id: 0x8000001f, state: up
      IRB platform data: {0x14000a, 0x1, 0x0, 0x80000000}, len: 16
    Bridge MTU: 1500 bytes
    Number of bridge ports: 2
    Number of MAC addresses: 2
    Multi-spanning tree instance: 0
    Mac Address: 0000.0c07.ac03, LC learned: N/A
       Resync Age: N/A, Flag: static, BVI
    Mac Address: 6c9c.ed0a.2e3d, LC learned: N/A
       Resync Age: N/A, Flag: static, BVI
      GigabitEthernet0/0/0/0, state: oper up
        Number of MAC: 1
        Statistics:
          packets: received 48765801690, sent 309298266072
          bytes: received 33416543382293, sent 54307173696538
        Storm control drop counters:
          packets: broadcast 0, multicast 0, unknown unicast 0
          bytes: broadcast 0, multicast 0, unknown unicast 0
        Dynamic arp inspection drop counters:
          packets: 0, bytes: 0
        IP source guard drop counters:
          packets: 0, bytes: 0
    Mac Address: 0040.4384.8260, LC learned: 0/0/CPU0
       Resync Age: 0d 0h 0m 0s, Flag: local
      Nbor 10.9.9.253 pw-id 3
        Number of MAC: 1
        Statistics:
          packets: received 19771488146, sent 198111062527
          bytes: received 10977874479587, sent 50825792902418
        Storm control drop counters:
          packets: broadcast 0, multicast 0, unknown unicast 0
          bytes: broadcast 0, multicast 0, unknown unicast 0
        Dynamic arp inspection drop counters:
          packets: 0, bytes: 0
        IP source guard drop counters:
          packets: 0, bytes: 0
    Mac Address: 6c9c.ed0a.9ced, LC learned: 0/0/CPU0
       Resync Age: 0d 0h 0m 0s, Flag: global
       L3 encapsulation Vlan: 2558
    RP/0/RSP1/CPU0:ASR9k-2#sh l2vpn forwarding bridge-domain RNC:RNC3_TEST mac-address detail location 0/0/CPU0
    Mon Dec  2 21:05:49.504 EET
    Bridge-domain name: RNC:RNC3_TEST, id: 15, state: up
    MAC learning: enabled
    MAC port down flush: enabled
    Flooding:
       Broadcast & Multicast: enabled
       Unknown unicast: enabled
    MAC aging time: 300 s, Type: inactivity
    MAC limit: 4000, Action: none, Notification: syslog
    MAC limit reached: no
    MAC Secure: disabled, Logging: disabled
    DHCPv4 snooping: profile not known on this node
    Dynamic ARP Inspection: disabled, Logging: disabled
    IP Source Guard: disabled, Logging: disabled
    IGMP snooping: disabled, flooding: enabled
    Routed interface: BVI3, Xconnect id: 0x8000001a, state: up
      IRB platform data: {0xf000a, 0x1, 0x0, 0x80000000}, len: 16
    Bridge MTU: 1500 bytes
    Number of bridge ports: 2
    Number of MAC addresses: 3
    Multi-spanning tree instance: 0
    To Resynchronize MAC table from the Network Processors, use the command...
        l2vpn resynchronize forwarding mac-address-table location
      GigabitEthernet0/0/0/0, state: oper up
        Number of MAC: 0
        Statistics:
          packets: received 782133119087, sent 620642426712
          bytes: received 514958352902308, sent 107302134940298
        Storm control drop counters:
          packets: broadcast 0, multicast 0, unknown unicast 0
          bytes: broadcast 0, multicast 0, unknown unicast 0
        Dynamic arp inspection drop counters:
          packets: 0, bytes: 0
        IP source guard drop counters:
          packets: 0, bytes: 0
      Nbor 10.9.9.254 pw-id 3
        Number of MAC: 3
        Statistics:
          packets: received 297905813562, sent 17722149746
          bytes: received 68165206300571, sent 10642920750826
        Storm control drop counters:
          packets: broadcast 0, multicast 0, unknown unicast 0
          bytes: broadcast 0, multicast 0, unknown unicast 0
        Dynamic arp inspection drop counters:
          packets: 0, bytes: 0
        IP source guard drop counters:
          packets: 0, bytes: 0
    Mac Address: 0000.0c07.ac03, LC learned: 0/0/CPU0
       Resync Age: 0d 0h 0m 0s, Flag: global
       L3 encapsulation Vlan: 510
    Mac Address: 0040.4384.8260, LC learned: 0/0/CPU0
       Resync Age: 0d 0h 0m 0s, Flag: global
       L3 encapsulation Vlan: 510
    Mac Address: 6c9c.ed0a.2e3d, LC learned: 0/0/CPU0
       Resync Age: 0d 0h 0m 0s, Flag: global
       L3 encapsulation Vlan: 3582

  • Bridge-domain vs xconnect

    Hi guys, I have been readying a few documents about VPLS/EoMPLS but still confuse about the bridge-domain and xconnect. Could you please provide any ideas which scenarios I should use bridge-domain and which should be for xconnect? What is the difference between them, any documens can explain this?
    Thanks, Leo

    The simple difference between the 2 is mac learning.
    An Xcon will just throw everything it received over to the other end.
    A bridge-domain will forward traffic based on the dmac knowing where it should go. If it doesnt know it goes flooding.
    So if you have 2 circuits to connect only, VPWS or XCON is the right choice as it is simple, light weight and fast.
    If you have more then 2 end points you will need a Bridge Domain which constitutes mac learning with the notion that flooding is intensive from a hw forwarding perspective and will consume more system resources in terms of mac tables.
    xander
    Xander Thuijs #6775
    Principal Engineer ASR9000

  • MIBS to Monitor Etherchannel and trunks via SNMP

    I would like to monitor the status of etherchannel and trunk configurations in 6500 Catalyst switches running both CATOS and IOS. I would like to understand the specific mibs/OIDS that should be monitored for etherchannels and trunks. I am trying to get a better handle on tracking the etherchannels and trunk dynamically and then understanding when the ports are having issues (up/down and errors). I need to understand how to differentiate these type of ports from regular access ports.
    Thanks,
    Tim

    Hi Tim,
    what exactly do you want to query via SNMP?
    For an (PAgP) Etherchannel, the member-interfaces might be interesting:
    https://supportforums.cisco.com/message/3957914#3957914
    For a trunk, you could start with the operational mode, depending on the platform you can use:
    vlanTrunkPortDynamicStatus (CISCO-VTP-MIB):
    vlanTrunkPortDynamicStatus.49 = notTrunking
    vlanTrunkPortDynamicStatus.50 = trunking
    vlanPortIslOperStatus (CISCO-STACK-MIB):
    vlanPortIslOperStatus.13.43 = notTrunking
    vlanPortIslOperStatus.13.44 = trunking
    Hope that helps
    Rolf

  • How to configure 8192 bridge domain default limit shows 2048

    Hello,
     How can i scale up bridge-domain from 2048 to 8192.
     As per the link (http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-1/lxvpn/configuration/guide/lesc41/lesc41p2mps.html) ASR9000 series routers can scale up to 8192 bridge-domains.
     However my ASR9k shows the l2vpn capability to be only around 2048. How can i configure 8192 bridge-domain
    RP/0/RSP0/CPU0:ci-asr9k#show l2vpn capability 
    Tue Feb 10 14:11:36.797 EST
    Capability mode: mixed-mode
    L2vpn all-capable: N
    System capability:
      VPLS Max MAC addresses: 32000 
      VPLS Max bridge-domains: 2048 
      VPLS Max attachment circuits: 32768 
      VPLS Max pseudowires: 32768 
      RSI bit size: 13 
      Per-AC drop counters supported: Y 
      VPLS Preferred path allowed: Y 
      VPLS Preferred path fallback enable allowed: Y 
      VPLS Preferred path fallback disable allowed: Y 
      MAC withdrawal allowed: Y 
      Max attachment circuits per bridge-domain: 16384 
      VPLS Max virtual forwarding interfaces: 2048 
      VPLS Max virtual forwarding interfaces per bridge-domain: 1 
      VPLS Max pseudowires per bridge-domain: 512 
      VPLS Max pseudowires per virtual forwarding interface: 512 
      VPWS PW redundancy supported: Y 
      VPLS Access PW supported: Y 
      Bundle AC supported: Y 
      Security config supported: Y 
      DHCP snooping supported: Y 
      VPLS Static MAC filter supported: Y 
      VPLS MAC configs on bridge port supported: Y 
      VPLS Flooding config on bridge port supported: Y 
      Flood unknown unicast disable supported: Y 
      IGMP snooping supported: Y 
      MMRP flood optimization supported: Y 
      MMRP flood optimization max multicast address entries: 8192 
      MMRP flood optimization max PW participants: 262144 
      VPLS MAC Aging Default Timer Value: 300 
      VPLS MAC Aging Min Timer Value: 300 
      VPLS MAC Aging Max Timer Value: 30000 
      VPWS Max attachment circuits: 32768 
      VPWS Max pseudowires: 32768 
      VPWS Preferred path fallback enable allowed: Y 
      VPWS Preferred path fallback disable allowed: Y 
    -Ramdas

    Are there any LC scale profiles configured in the admin mode? If so, that would reduce L2 resources. If you don't need the L3 profile, remove it and reboot the router to gain back 8k bridge domains.
    Regards, 
    /A

  • No "sip domain name" field in trunk configuration

    Hello,
    A customer' s UC320 throw a "sip 484" error,
    Sep 22 16:10:44 UC320W user.debug voice: SIP/2.0 484 Address Incomplete
    I think the problem is the lack of the  "sip domain name" field in the  trunk configuration as i can see one here;
    https://supportforums.cisco.com/servlet/JiveServlet/showImage/102-15041-40-10
    https://supportforums.cisco.com/docs/DOC-15041#UC_320_SIP_Trunk_Configuration
    See attached the screenshot of the state of the trun, it misses his domain after the @
    The UC320 is upgraded to 2.2.2 .

    The case number is; 623254153
    This is what the provider can see, (they say they cant handle "notify" requests);
    U 2012/09/21 14:18:28.183877 IP.IP.IP.IP:5060 -> ip.ip.ip.ip:5060
    NOTIFY sip:sip.myprovider.net SIP/2.0.
    Via: SIP/2.0/UDP IP.IP.IP.IP:5060;branch=z9hG4bK-d56a8b2a.
    From: "NIT" [email protected]>;tag=d78ae5c25878b8eco5.
    To: .
    Call-ID: [email protected]
    CSeq: 211 NOTIFY.
    Max-Forwards: 70.
    Contact: "NIT" [email protected]:5060;ref=MYSIPID>.
    Event: keep-alive.
    User-Agent: Cisco/UC320W-2.2.2(1).
    Allow-Events: talk, hold, conference, x-spa-cti.
    Content-Length: 0.
    U 2012/09/21 14:18:28.184243 ip.ip.ip.ip:5060 -> IP.IP.IP.IP:5060
    SIP/2.0 484 Address Incomplete.
    Via: SIP/2.0/UDP IP.IP.IP.IP:5060;branch=z9hG4bK-d56a8b2a.
    From: "NIT" [email protected]>;tag=d78ae5c25878b8eco5.
    To: ;tag=696c4aa18cbb1138a6b8a116e3582f18.6a97.
    Call-ID: [email protected]
    CSeq: 211 NOTIFY.
    Server: Alphalink SIP Proxy 2.0.
    Content-Length: 0.

  • In Order to Configure TCP/IP, You Must Install and Enable a Network Adapter Card

    I get this message when I try to TCP/IP settings in any network card. 
    "In Order to Configure TCP/IP, You Must Install and Enable a Network Adapter Card"
    What I have tried:
    1. Removed card, did not click on "Remove driver". Then re-scanned in device manager. This usually leads to the network card showing up with a yellow exclamation mark, and I can not get it work again (have to use system restore).
    2. Removed card, deinstalled driver, re-installed driver. 
    3. Rebooted a thousand times. 
    4. Used the Lenovo drivers.
    5. Used the Intel drivers. 
    Doesn't matter what I do, I'm stuck with yellow exclamation marks in the end for the LAN and WLAN card, with not hope to repair them.
    Driver version for the Intel 82579LM is 12.9.15.0
    Driver version for the centrino advanced-n 6205 is 15.10.4.2
    I'd really like some help on how to fix this so I'm able to configure my network manually. 

    For clarity, as your machine MTM number lists it with another type of WLAN adapter, and apparently, therein lies your problem.
    How To Fix Error Message : In Order To Configure TCP/IP , You Must Install And Enable Network Adapte...
    [How To Fix] In Order to Configure TCP/IP, You Must Install and Enable a Network Adapter Card
    ThinkPad W540 (20BG) - i7-4800MQ/24GB // ThinkPad T440s (20AQ) - i7-4600U/12GB
    ThinkPad T440p (20AW) - i7-4800MQ/16GB // ThinkPad Helix (3698-6EU) - i5-3337U/4GB
    ThinkPad W520 (4282-W4Q) - i7-2720QM/32GB // ThinkPad T400 (2767-W1C) - P9500/8GB
    ThinkPad T61 (7665-CTO) - T7700/4GB // ThinkPad T60p (8741-C2G) - T7400/4GB

  • [svn:fx-trunk] 10889: Add FTETextTests which check that a Label and NumericStepper configured to use FTEText have a textField and textInput , respectively, of type UIFTETextField and MXFTETextInput.

    Revision: 10889
    Author:   [email protected]
    Date:     2009-10-06 09:29:53 -0700 (Tue, 06 Oct 2009)
    Log Message:
    Add FTETextTests which check that a Label and NumericStepper configured to use FTEText have a textField and textInput, respectively, of type UIFTETextField and MXFTETextInput.  The components are configured via style properties rather than by theme which would require another version/compile of the BasicTests.swf.
    QE notes:
    Doc notes:
    Bugs:
    Reviewer: Alex
    Tests run: basictests
    Is noteworthy for integration: no
    Modified Paths:
        flex/sdk/trunk/frameworks/tests/basicTests/BasicTests-config.xml
        flex/sdk/trunk/frameworks/tests/basicTests/BasicTests.mxml
    Added Paths:
        flex/sdk/trunk/frameworks/tests/basicTests/halo/scripts/FTETextTestScript.mxml
        flex/sdk/trunk/frameworks/tests/basicTests/halo/views/FTETextTests.mxml

    I'm also having this problem. I'm using Flash Builder 4.6, AIR 3.4 and I've made a DLL (e.g. ExtensionDll.dll) which needs to call functions in another DLL (e.g. DllUsedByExtensionDll.dll) . I've made sure my ANE is working with the ExtensionDll.dll already, so there are no issues with my actionscript code or my ANE packaging or my DLL compilation. However, once I start calling functions from the other DLL, it starts throwing me Error #3500. Even if I call this function (e.g. abc()) in ExtensionDll.dll, but I never actually use the function from actionscript, and I call another function (e.g. def()) from actionscript, the Error #3500 still appears, so it does not seem to depened on the whether the code is used or not.
    It's similar to this problem.
    http://stackoverflow.com/questions/9823504/how-to-use-external-dll-in-air-native-extension
    Does anyone have a solution or at least a way to debug this?

  • Native VLAN and Trunks on Bridges

    I have a need for different Native VLANs on the radio side and the ethernet side. Can this be done on the non-root 1410 bridge?
    The radio native VLAN is to support the management on teh 1410 bridges. I also need to attach a single device from another VLAN on the non-root bridge and I do not want to have to put in a switch just to break out that needed VLAN.

    The bridge supports only one SSID. You should assign the SSID to the native VLAN
    1.Create subinterfaces on the radio and Ethernet interfaces.
    2. Enable 802.1q encapsulation on the subinterfaces and assign one subinterface as the native VLAN.
    3. Assign a bridge group to each VLAN.
    4. (Optional) Enable WEP on the native VLAN.
    5. Assign the bridge's SSID to the native VLAN.
    To assign an SSID to a VLAN and how to enable a VLAN on the bridge radio and Ethernet ports
    For further information click this link.
    http://www.cisco.com/en/US/docs/wireless/bridge/1400/12.3_8_JA/configuration/guide/p38vlan.html

  • Configuring Root Bridge Primary and Secondary on a Switch Stack

    Hi, Consider a small LAN using a collapsed core design with two Catalyst 3650 switches in a stack as the core/distribution layer. There are several 2960X switches with cross-stack EtherChannels to the 3650's. After enabling Rapid-PVST, best practice would be to configure the root bridge. The question is, would it be sufficient to configure the stack to be the Root Primary and not configure a secondary, based on a failure of the stack master switch would elect the slave to become the stack master and effectively become the root bridge?
    Thanks
    Tony

    Disclaimer
    The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
    Liability Disclaimer
    In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
    Posting
    BTW, don't know if issue also applies to 3650 stacks, but on 3750 stacks, if stack master fails, I believe your port channels will reset because, by default, stack's MAC changes.  However (again at least for 3750s), the stack can be configured to retain the original master MAC.

  • Configuration fails to save a lot (related to custom domain and SSL)

    Attempting to add a custom domain and then to apply an SSL certificate to that domain result in a lot of errors. The sequence of events that led to this screenshot http://cl.ly/image/2w1V2m0x3N0U were:
    Add a custom domain (failed)
    Attempt to add the same custom domain again (failed)
    Attempt to add the same custom domain again (succeeded)
    Attempt to assign an SSL certificate to that domain (failed)
    I was performing similar actions on Monday with similar results...a lot of failures with some successes and no apparent reason for the failures and no different actions leading to the successes. On Monday I refreshed the page in the browser a lot, but it
    didn't seem to help. During the above sequence, I didn't refresh the page.

    We have been having the same issue with regards to custom SSL bindings and certs in our staging environment. No matter how I choose to enter the information or how many times I try, the save button is nonfunctional and navigating away from the page discards
    my changes.

  • ME3600-ME3800: service-instance & bridge-domain syntax

    Hello,
    what is the best practice for the configuration of L3VPN on Cisco ME3XXX ?
    Old Syntax:
    interface GigabitEthernet0/1
    switchport trunk allowed vlan none
    switchport mode trunk
    service instance 2 ethernet
      encapsulation dot1q 3
      rewrite ingress tag pop 1 symmetric
      bridge-domain 4
    interface vlan 4
    vrf forwarding L3VPN-1
    ip address 2.2.2.1 255.255.255.0
    New Syntax:
    interface GigabitEthernet0/1
    switchport trunk allowed vlan none
    switchport mode trunk
    service instance 2 ethernet
      encapsulation dot1q 3
      rewrite ingress tag pop 1 symmetric
    bridge-domain 4
    member GigabitEthernet0/1 service-instance 2
    interface vlan 4
    vrf forwarding L3VPN-1
    ip address 2.2.2.1 255.255.255.0
    The new syntax is very much similar to the new syntax for L2VPN, see:
    http://www.cisco.com/en/US/docs/switches/metro/me3600x_3800x/software/design/guide/ME3600x_Design_Guide.pdf
    I'm soon sending in the field some more ME3600, so I'd like to start right.
    Best Regards
    Andrea

    Hello.
    You might have confused service instance configuration and usual switchport mode trunk.
    Please refer figure 11-10 in the document http://www.cisco.com/c/en/us/td/docs/switches/metro/me3600x_3800x/software/release/12-2_52_ey/configuration/guide/3800x3600xscg/swevc.html
    >But there is a typo - per description it should be "enc doat1q 20" under service instance 9on the picture).
    Also under Figure 11-2 we have following example:
     QinQ is also supported when sending packets between an EFP and a switchport trunk, because the switchport trunk is implicitly defined as rewrite ingress tag pop 1 symmetric. The same external behavior as Method 1 can be achieved with this configuration:
    Switch (config)# interface gigabitethernet0/1 
    Switch (config-if)# service instance 1 Ethernet 
    Switch (config-if-srv)# encapsulation dot1q 1-100 
    Switch (config-if-srv)# bridge-domain 30
    Switch (config)# interface gigabitethernet0/2 
    Switch (config-if)# switchport mode trunk
    Again, service instance 1 on Gigabit Ethernet port 0/1 is configured with the VLAN encapsulations used by the customer: C-VLANs 1-100. These are forwarded on bridge-domain 30. The service provider facing port is configured as a trunk port. The trunk port implicitly pushes a tag matching the bridge-domain that the packet is forwarded on (in this case S-VLAN 30). 

  • Service instance and trunk ports

    hi I have the following configuration:
    interface Port-channel1
     description SHN-AX1-1-2-CNRY
     switchport trunk allowed vlan none
     switchport mode trunk
     load-interval 30
     no keepalive
     service instance 1 ethernet
      encapsulation untagged
      l2protocol peer lacp
      bridge-domain 1
     service instance 2 ethernet
      description IDP_VLAN_2
      encapsulation dot1q 2
      bridge-domain 3998
     service instance 3 ethernet
      description BBR_VLAN
      encapsulation dot1q 420
      bridge-domain 3998
     service instance 4 ethernet
      description MGMT_VLAN
      encapsulation dot1q 95
      bridge-domain 3998
     service instance 5 ethernet
      description STATIC_VLAN
      encapsulation dot1q 3641,3644,3777,3291
      bridge-domain 3998
     service instance 6 ethernet
      description SME_VLAN
      encapsulation dot1q 2098,2339
      bridge-domain 3998
    interface Port-channel1
     description SHN-AX1-1-2-CNRY
     switchport trunk allowed vlan none
     switchport mode trunk
     load-interval 30
     no keepalive
     service instance 1 ethernet
      encapsulation untagged
      l2protocol peer lacp
      bridge-domain 1
     service instance 2 ethernet
      description IDP_VLAN_2
      encapsulation dot1q 2
      bridge-domain 3998
     service instance 3 ethernet
      description BBR_VLAN
      encapsulation dot1q 420
      bridge-domain 3998
     service instance 4 ethernet
      description MGMT_VLAN
      encapsulation dot1q 95
      bridge-domain 3998
     service instance 5 ethernet
      description STATIC_VLAN
      encapsulation dot1q 3641,3644,3777,3291
      bridge-domain 3998
     service instance 6 ethernet
      description SME_VLAN
      encapsulation dot1q 2098,2339
      bridge-domain 3998
    interface GigabitEthernet0/1
     switchport trunk allowed vlan none
     switchport mode trunk
     channel-group 1 mode on
    interface GigabitEthernet0/2
     switchport trunk allowed vlan none
     switchport mode trunk
     channel-group 1 mode on
    interface Port-channel12
     description SHN-AGG-BX1
     switchport trunk allowed vlan 34,50,76,3998
     switchport mode trunk
     mtu 9000
    interface GigabitEthernet0/23
     switchport trunk allowed vlan 34,3998
     switchport mode trunk
     mtu 9000
     channel-group 12 mode active
    interface GigabitEthernet0/24
     switchport trunk allowed vlan 34,3998
     switchport mode trunk
     mtu 9000
     channel-group 12 mode active
    the input interfaces are gigEth0/1 and gigEth0/2 and the output interfaces are gigEth0/23 and gigEth0/24.
    the ingress traffic at the input port has a single tag and the ingress traffic at the output port has two tags.
    please explain me, where tags would be pushed/popped and why??
    thank you.

    Hello.
    You might have confused service instance configuration and usual switchport mode trunk.
    Please refer figure 11-10 in the document http://www.cisco.com/c/en/us/td/docs/switches/metro/me3600x_3800x/software/release/12-2_52_ey/configuration/guide/3800x3600xscg/swevc.html
    >But there is a typo - per description it should be "enc doat1q 20" under service instance 9on the picture).
    Also under Figure 11-2 we have following example:
     QinQ is also supported when sending packets between an EFP and a switchport trunk, because the switchport trunk is implicitly defined as rewrite ingress tag pop 1 symmetric. The same external behavior as Method 1 can be achieved with this configuration:
    Switch (config)# interface gigabitethernet0/1 
    Switch (config-if)# service instance 1 Ethernet 
    Switch (config-if-srv)# encapsulation dot1q 1-100 
    Switch (config-if-srv)# bridge-domain 30
    Switch (config)# interface gigabitethernet0/2 
    Switch (config-if)# switchport mode trunk
    Again, service instance 1 on Gigabit Ethernet port 0/1 is configured with the VLAN encapsulations used by the customer: C-VLANs 1-100. These are forwarded on bridge-domain 30. The service provider facing port is configured as a trunk port. The trunk port implicitly pushes a tag matching the bridge-domain that the packet is forwarded on (in this case S-VLAN 30). 

Maybe you are looking for

  • Simple button applet help

    ok, i'm working on a project involving buttons, and i finished it and it compiles fine, but when i run the applet (using textpad), nothign shows up. i decided to make a new applet of only the frame and buttons, and i got the same problem. here is the

  • Using Refcursor in Callable Statement without using the Oracle Drivers

    Hello all, Is there anyway to have a stored procedure (Oracle 8i) return a refcursor to my CallableStatement without using the Oracle Thin drivers (i'm now using jdbcodbc). I've tried registering my out parameter with every possible type i can think

  • Itunes 7.1.1 Upgrade / Exiting Program Shows ERROR message

    I installed itunes 7.1.1. Afterwards when I close itunes I get an error message saying the the program encountered a problem and needs to close down. I have two options at this point debug or send an error report to Microsoft. Have done both but it s

  • N8 and ovi map problem,server timeout

    just got my new device and when try to update map application to have maps on the phone I alwys get the following eroor..server timeout...try again...I have tried all evening and same message again and again..I have Ovi suit version 2,2,1,23..It´s a

  • Mime-attachment.ics acceptance...!!!...???

    How in the world can an iphone user see or accept an outlook calendar invite? Everytime anyone from my windows office sends me a Microsoft Office Outlook calendar invite it shows up as a "mime-attachment.ics"... All I can do from my iphone i see the