VLAN tags over Pseudowire

I have an existing MPLS Pseudowire connection that I need to rework to be able to carry vlan tags instead of just plain L2 frames.
Existing setup:
ME3400 <-> 7206VXR <-> 7206VXR <-> ME3400
The ME3400's customer facing int tags incoming frames, which go over a trunk interface to a 7206VXR subint. The subint is conf'd for pseudowire p2p to the remote 7206VXR which has an identical setup. Subint on a trunk int to a ME3400, cust facing int tied to a matching vlan.
My thought is use QinQ on the switches, with the question being will the 7206s correctly strip off one vlan tag layer, encapsulate the remaining vlan tagged L2 frame for psuedowire, and on the remote end take the pesuedowire packet, decapsulate it, add on the QinQ tag, and shove it back out to the switch? I won't know ahead of time what vlan tags the customer will be looking to pass, so I need to be able to support whatever they try to throw across this link.

Hi,
You can definitely do that, The pseudowire has 2 labels , the outer label represent the (tunnel label), the inner label represent the (Vc label).
The egress 7206Vxr performs lookup at Vc label and forward the frames un labeled to the ME3400.
On the other hand, with QinQ, the customer vlan access port is tunneled across the Service provider Network, this has no affect in your MPLS Forwarding which done at the vxr7206, The outer vlan tag(tagged by the service provider) is stripped out when the frames forwarded firstly unlabeled to the ME3400 at the egress tunnel interface , the inner vlan tag (customer tag) is forwarded untouched (preserved) to the ingress ME3400 interface.
So, from different point,the MPLS provider is transparent for the Customer Vlan traffic even within the MPLS forwarding LSRs, The Only vlan that is binded to the inner label (Vc label) is the service provider access vlan provided to each customer.
HTH
Mohamed

Similar Messages

  • Transport dot1q vlan tagging over wan link

    Hi,
    I would like to transport 802.1Q vlan tagging over a wan link, is it possible ?
    I heard about l2tp V3...
    Best regards

    Hi,
    You would have to use a technology such as Ethernet over MPLS (EoMPLS) or VPLS. This technology is referred to as Layer 2 VPNs. You can get more info on this at the following locations:
    EoMPLS (part of the Cisco Any Transport over ATM suite):
    http://www.cisco.com/en/US/products/ps6646/products_ios_protocol_option_home.html
    VPLS:
    http://www.cisco.com/en/US/products/ps6648/products_ios_protocol_option_home.html
    Hope that helps - pls rate the post if it does.
    Regards,
    Paresh

  • RV320 and WAN VLAN tagging/IPTV

    I have a fiber connection on WAN1 which only works with VLAN tagging and I can't find a way to make it work without the provider's middleware router (Comtrend C5813)... Is there a way to connect to my FTTH (Lucent I240G-B) router directly? I'm having problems with my IPTV (multicast) service, if it's connect direct to the middleware I can have multiple channels running at once, but if I go back to the RV320 and do the same, everything start to pixelate.
    Using Wireshark I can see that the RV320 is connecting to the different channels with CS4 DSCP marking.
    Any ideas?
    Thank you!

    As you can read above, I'm having problems with my IPTV pixelation/cuts... I need to be able to connect directly to the fiber and have more control over the connection, but I don't see the option on the web admin for PPPOE over VLAN. I don't know if it's a hardware limitation or just software (the GUI).

  • Native VLAN tagging work-around?

    Good Day!
    Story here is that I am upgrading my 6500 Metro Ethernet core switch from CatOS to IOS and implementing several security components - one in question is implementing 'vlan dot1q tag native' global command on core switch. Most of my PE switches are 3550 series and are compatible with this configuration. The problem is that I also have several remote legacy 3508G switches that I need to support, and they will not accept this command.
    Is anyone aware of a work-around config for these 3508s? So far have not found any help on CCO...
    Thanks!

    Don't know if you can do this on a Cat6500 running IOS, but here's my idea:
    Set the native VLAN on the 3508G end of the 802.1Q trunk to a VLAN that is not going to be used anywhere for access, and match the native VLAN specification on your 6500's corresponding interface. Then, remove that VLAN from the trunk at both ends.
    The way I read it, on the 6500 the "vlan dot1q tag native" command would tag outgoing traffic on the native VLAN; and would drop all incoming traffic on the native VLAN that wasn't tagged. But none of that will matter, because removing that one VLAN from the allowed VLAN list on the trunk will leave you with only tagged VLAN traffic on the trunk from the 3508G. CDP will see that the native VLAN is set the same at each end (if you use CDP), so it won't flag any mismatches there. You just won't use the native VLAN on the trunk.
    I'm doing something similar with CatOS on a 6509 and 2950G access switches. Setting native VLAN to 1 (the default) on both ends, which makes it untagged; and then removing VLAN 1 from the trunk on both sides, leaving me with only tagged traffic on the trunk.
    Now, VLAN 1 is a special case, you can't remove it completely from the allowed VLAN list on a 2950G. The documentation refers to it as "minimizing" VLAN 1: CDP and VTP traffic will still pass over it, as will a couple of other Cisco-centric things; but no user traffic, and no STP BPDUs. Testing it today, I verified the CDP and VTP traffic work in both directions after I cleared VLAN 1 from the trunk and had only one customer VLAN, tagged, on it.
    In your situation, you can't remove VLAN 1 at all from a 3508G XL trunk. So just pick another VLAN to throw away as the native VLAN that you remove from the trunk, and transmit VLAN1 tagged across it.
    I think DTP uses the native VLAN; so the only drawback to my idea is that you have to manually set the trunk mode rather than letting the switches negotiate it out. (No problem for me, I set them all manually anyway.)
    Hope this helps.

  • Vlan tag issue with Nexus 4001 in IBM Blade Centre

    Hi
    I have a DC architecture with a pair of Nexus 7010's running 3 VDC's (Core/Aggregation/Enterprise). I have at the edge Nexus 5548's which connect to back to the Aggregation VDC. Also connecting back to the Aggregation VDC is an IBM Blade Chassis which has a Nexus 4001i in slots 7 and slot 9. These blade servers are running ESXi 4.0 and are mapped to the Nexus 4001 blade switch.
    I had set up the Native VLAN as VLAN 999 which connects up to the ESXi host and I am trunking up multiple VLANS for the Virtual Machines.
    The problem I have is that VM's in all VLANS except the ESXi host VLAN (VLAN 10) cannot see their default gateway, and I suspect that there is an issue with the VLAN tag going up to the ESXi host. I have read enough documentation to suggest that this is where the issue is.
    My Nexus 4001 interface configuration is below
    interface Ethernet1/1
      switchport mode trunk
      switchport trunk native vlan 999
      switchport trunk allowed vlan 10,30,40-41,60-62,90,96,999
      spanning-tree port type edge trunk
      speed auto
    The Aggregation VDC on the Nexus 7010 is the default gateway for all these VLANS.
    I also noted that the Nexus 5000 and Nexus 7000 supports the command vlan dot1q tag native command yet the Nexus 4000 doesn't seem to support this. Any assistance would be useful
    Thanks
    Greg

    Your configuration on the N4K looks correct. You shouldn't use vlan dot1q tag native commands on your N7Ks and N5Ks. Native VLAN tagging is really for QinQ (dot1q tunneling).
    My only suggestion is check your configuration of the vSwitch in the ESXi host and the host network profile.
    Regards,
    jerry

  • How do I overlap text in a Div Tag over an Image

    Hi,
    I have a large image which I would like to set as as border around the page.
    Please see www.touchw1.com, it is the grey border with the 3 archways on it that I would like as a border.  At present, everything on this screen apart from the contact details at the bottom are saved as one JPEG.  I saved it like this as I don't know how to set that border as a border and then insert other div tags over, or in it?  Can anyone help??
    Thanks

    Create a 'wrapper" and 'footer1' <div>
    <div id="wrapper">
    </div><!-- end wrapper -->
    <div id="footer1">
    </div><!-- end footer1 -->
    Create some css:
    #wrapper {
    border: 1px solid #333;
    border-bottom: none;
    width: XXXpx /* width you require */
    margin: 0 auto; /* centers wrapper horizontally in browser window */
    #footer1 {
    background-image: url(archway.gif); /*archway image plus borders */
    background-repeat: no-repeat;
    height: XXpx /* height of background archway image */
    width: XXXpx /* width you require */
    margin: 0 auto; /* centers footer1 horizontally in browser window */
    Then start adding content to the 'wrapper' <div>. Insert your logo into a <h1> header.
    <div id="wrapper">
    <h1><img src="images/logo.jpg" width="XXX" height="XXX" alt="TouchW1 Sales and Press Agency - Central London" /></h1>
    <p>TouchW1 is a newly created niche agency that specialises in all aspects of sales management, press and licensing, based in the heart of Central London</p>
    </div><!-- end wrapper -->
    <div id="footer1"></div><!-- end footer1 -->
    Move h1 header into position in the 'wrapper" <div> with css:
    h1 {
    margin: XXpx XXpx XXpx XXpx; /* top, right, bottom, left */
    padding: XXpx XXpx XXpx XXpx;
    Do the same with the paragraph tag
    #wrapper p {
    margin: XXpx XXpx XXpx XXpx; /* top, right, bottom, left */
    padding: XXpx XXpx XXpx XXpx;
    Add rose as background to 'wrapper' <div>
    #wrapper {
    border: 1px solid #333;
    border-bottom: none;
    width: XXXpx /* width you require */
    margin: 0 auto; /* centers wrapper horizontally in browser window */
    background-image: url(rose.jpg);
    background-position: top right;
    background-repeat: no-repeat;
    Hummm that its really....add a 'footer2' <div> for the address line

  • Mesh Ethernet Bridging with VLAN Tagging Issue

    Hi all.
    I'm a little stuck with a 4400 7.0.220.0 + RAP 1550 + MAP 1260 Ethernet bridging issue. I'm using the VLAN tagging functionality and I'm finding that periodically a VLAN that I've tagged on the MAP will deregister from the backhaul and stop passing traffic. If I go into the Mesh tab on the MAP, select the wired interface, remove the VLAN from the list of tagged VLAN IDs and then add it right back to the list, its starts passing traffic again.
    Has anyone else seen this? I can't find any relevant bugs.
    Justin

    Hi Saravanan,
    It is one RAP and three MAPs. After a TAC call and 30 hours of monitoring, my VLANs have remained registered. I think the issue was mismatched VLANs to bridge groups an it looks like the mesh bridge may be stable for now. Here is what I was seeing on the RAP and MAPs when the VLANs were deregistering unexpectedly. Notice how VLANs 2 and 10 are mapped to opposite bridge groups on the RAP and MAP:
    After I removed all the VLAN IDs from the Trunk configuration on the MAPs (through each AP's Mesh tab -- Ethernet Bridging config) and then rebuilt the VLAN IDs, I ran the same commands and now see this:
    My very unscientific theory here is that the mismatching was causing consistency checks to fail, so the RAP was just tearing down the registrations after getting bogus or non- responses from the MAPs during the periodic VLAN registration maintenance checks (debug mesh ethernet registration).
    If I have continued issues, I'll post back with updates.
    Thanks for the response!
    Justin

  • 7600 second-dot1q & vlan tag manipulation

    Hi,
    Does anyone know what the hardware requirements are for using config such as "sencapsulation dot1Q 660 second-dot1q 1" or any of the "service instance" commands such as below to manipulate dot1q tags?
    Im running 7600 with SIP-400, IOS 12.2(33)SRD and there are no such commands available at the cli. Suspect ES-20 is needed as a minimum but can't see this mentioned in any docs.
    interface FastEthernet1/0.660
    encapsulation dot1Q 660 second-dot1q 1
    OR
    interface GigabitEthernet3/0/0
    description Sample Configs
    service instance 1 ethernet
    encapsulation untagged
    rewrite ingress tag push dot1q 3 symmetric
    xconnect 10.30.30.173 2 encapsulation mpls
    service instance 10 ethernet
    encapsulation dot1q 10
    rewrite ingress tag pop 1 symmetric
    bridge-domain 500 split-horizon
    service instance 20 ethernet
    encapsulation dot1q 20 second-dot1q 200
    rewrite ingress tag pop 1 symmetric
    bridge-domain 500 split-horizon
    service instance 30 ethernet
    encapsulation dot1q 20 second-dot1q any
    rewrite ingress tag pop 1 symmetric
    bridge-domain 500 split-horizon
    I just need to pop the service vlan tag. At the moment I'm using a port per service to peel off the outer tag and this approach isn't going to scale.
    Appreciate any advice on this.
    Cheers
    Kent.

    Hi Jerry,
    I believe - about to test it - that this only works with SPA-v2 interfaces. I was testing with a SPA-v1 interface previously. Is this your understanding? Docs are pretty light on with hardware requirements.
    Show ver:
    Cisco IOS Software, c7600s3223_rp Software (c7600s3223_rp-ADVIPSERVICES-M), Version 12.2(33)SRD, RELEASE SOFTWARE (fc2)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2008 by Cisco Systems, Inc.
    Compiled Thu 23-Oct-08 22:32 by prod_rel_team
    ROM: System Bootstrap, Version 12.2(17r)SX3, RELEASE SOFTWARE (fc1)
    pe1.lab uptime is 19 hours, 5 minutes
    Uptime for this control processor is 19 hours, 5 minutes
    System returned to ROM by power-on (SP by power-on)
    System restarted at 17:09:22 EST Mon Jul 27 2009
    System image file is "bootdisk:c7600s3223-advipservices-mz.122-33.SRD.bin"
    Last reload type: Normal Reload
    cisco CISCO7606-S (R7000) processor (revision 1.0) with 458752K/65536K bytes of memory.
    Processor board ID FOX11310AY3
    R7000 CPU at 300Mhz, Implementation 0x27, Rev 3.3, 256KB L2, 1024KB L3 Cache
    Last reset from power-on
    1 SIP-400 controller (4 GigabitEthernet).
    10 Virtual Ethernet interfaces
    125 Gigabit Ethernet interfaces
    1915K bytes of non-volatile configuration memory.
    65536K bytes of Flash internal SIMM (Sector size 512K).
    Configuration register is 0x2102
    Modules are now:
    7600-SIP-400 and SPA-2X1GE-V2

  • Does Cisco7200VXR support feature Q-in-Q VLAN tag termination?

    There is only 10000ESR platform support announced in feature guide and no information in Feature Navigator tool...
    http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps5207/products_feature_guide09186a00801f0f4a.html

    Hi there,
    Well.. it seems this feature has several names:
    "Cisco IOS Software Releases 12.3 T - IEEE 802.1Q-in-Q VLAN Tag Termination"
    http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a00801f0f4a.html
    "Cisco IOS Software Releases 12.0 S - Stacked VLAN Processing"
    http://www.cisco.com/en/US/products/sw/iosswrel/ps1829/products_feature_guide09186a008021b9ee.html
    But I can't find any reference to the 7200 having support for it... though many others has it.. mainly switches.. not too surprising.. :)
    Did it help?

  • Vlan tag preservation span monitoring

    Hi
    I am spanning multiple vlans as source with the destination as a single ethernet port, though I am able to see the traffic from the VLANs, I am not able to see the VLAN tag in the packet which is a key requirement for me for monitoring.
    Does anyone know why the VLAN tagging is stripped or how to preserve it in the monitor session?
    Your help is much appreciated.
    - Balaji

    While I appreciate your response Najaf, we have been monitoring the SVIs on our current CAT6500 switches without any problems as we can "preserve" the vlan tags on the destination monitoring port.
    However, we have found a way to see the VLAN tags on the monitoring destination port but we are still carrying out some tests to confirm our findings.
    Will keep this thread updated.
    -Balaji

  • Installing OVM X86 3.1.1 with Trunk VLAN tag for ovm management network

    Hi Guys
    Can anyone help with network config on the OVM server 3.1.1 basically we need to use vlan tags on trunk port... so i have a subnet from following *(Trunk Allowed VLAN XXX)* from which i need to allocate IP for the OVM server component so that the ovm manager can find the OVM server instance...
    Can you use vlan tags, on trunk port with OVM server 3.1.1???
    Thanks

    Your right there as i later found out the engineers weren't selecting the vlan option when installing the vm server...

  • How to get vlan tag programe with mac book air

    how to get vlan tag programe with mac book air,i'm using the usb ethernet adapter

    For prompt help contact TATA.
    For more on this: https://discussions.apple.com/thread/3680625?tstart=270

  • VLAN tagging for Desktops

    I have a test VDI 3.1.1 system set up and I have to say, I'm quite impressed. In about a day, I was able to serve Windows 7 desktops, something we can't do with our current VMware View setup. One apparent limitation I have run into, however, is 802.1q VLAN tagging support for Desktop NICs. I have created a 2-way aggregate on nxge0 and nxge1. The portchannel these are connected to is set up for 802.1q tagging, and Solaris is plumbed with aggr13001 to tag its packets with VLAN 13, for example. However, traffic from Desktops is not so tagged, so its packets go nowhere. Is there any way to define a VLAN for a given Desktop Pool? This is important for us, as we tend to keep server systems on campus-only subnets, while desktops get Internet-routed addresses.
    Thanks,
    Charles

    Aggregation shouldn't have any adverse effect here. You need to configure VDI to use the correct VLANs on a per Pools basis. In the VDI Manager first navigate to the Desktop Provider -> Networks tab and 'Refresh' the networks. This will scan all VirtualBox hosts in the provider for currently plumbed interfaces, each of which will be listed by their subnet.
    After all networks are detected navigate to the Pool -> Settings tab and select 'Host Networking' followed by the required subnet(s). The primary subnet listed here is used for RDP connections.

  • VLAN Tagging

    I am trying to utilize a wireless device in a customer site that extends VLAN to the wireless infrastructure. My device does not support VLAN Tagging, so it will not work. My question is this: Is this the norm, requireing end-point devices to insert VLAN Tags in the normal ethernet frame, or do most environments perform the Tag insertion/stripping at teh acces point level. Since they can use multiplpe SSIDs on their access points, can a new SSID be set up for another wireless VLAN that does not require VLAN Tagging?

    In a Cisco environment you configure your VLANs on your switches and configure the switchport the AP is connected to as a trunk port. On the AP you define the VLANs and SSIDs and tie each SSID to a VLAN. End devices connect to an SSID and when connected to that SSID are automatically connected to it's matching VLAN. The end device (be it a PC, barcode reader or whatever) doesn't need to know anything about VLANs or which VLAN it needs to connect to, as long as it's associated to the correct SSID it will be on the correct VLAN.

  • Cisco RV180 VLAN tagging WAN interface

    Is there by any chance in the future firmware update that this product (RV180) will be able to support VLAN tagging on WAN interface like the Cisco's RV315W router? ISP in Singapore (Singtel) and Malaysia(Unifi) (http://klseet.com/index.php/mikrotik/mikrotik-rb750-750g/setup-for-unifi) requires certain type of vlan tagging on the WAN interface for it to work. 
    Is there any workaround to this?

    I tried with only two vlans and set the DHCP active only for the office "vlan2". Computers receive the correct ip but some of them won't register on the network, i tried to set the ip manualy on the computers but that computer will still be isolated.
    Ex: computer A receives ip 192.168.10.25, Subnet 255.255.255.0, Gateway 192.168.10.1, for 2-3 minutes i can access the router on 192.168.10.1 and the internet, after a random time interval the gateway won't even respond to ping.It's not from firewall related issues as i set to accept all both incoming and outgoing. If i set a manual ip corresponding to vlan1 "default" everything works.It's like that computer is isolated so i believe it has to do with the asignment of Tagged, untagged and Excluded settings on the vlans.

Maybe you are looking for

  • No home phone service for more than two months

    I am sending this note on behalf of my mother.  She has been waiting for technical services to her home phone for more than two months.  She has received dates where a technician would come out to repair her services in which she has left work early

  • VMware Fusion Update, now PC side no longer sees network

    I had installed VMware Fusion V 1.1.2 on my MB Pro and had set set up network printing and file sharing. Then a couple of days ago I updated to 1.1.3, and now I can no longer see my work network, and my printer is nolonger there. I can still connect

  • How do I install Ubuntu on Mac?

    I was wondering about Ubuntu and learning more about it. I used Boot Camp once to install Windows 7 Ultimate, but I wasn't satisfied with Windows 7, so I removed it. I thought Windows 7 was really boring and I missed many of the games included with X

  • Digital Signatures on Scanned forms

    Is it possible to apply Digital Signatures on Scanned form; i.e can we add a hidden signature field? Thanks, Nith

  • Anyone having trouble sharing large images via email with Aperture 3 and OSX 10.7.2?

    I am having trouble sharing images via email with Aperture 3. No matter what size I have in the preferences, the image is thumbnail size. The requested size flashes on the email a couple of times but the small size remains and is sent. I am using OSX