Example for Configuring QinQ-based Layer 2 Protocol Tunneling

When backbone network edge devices receive tagged Layer 2 protocol data units (PDUs) from user networks, configure QinQ-based Layer 2 protocol tunneling to allow the Layer 2 PDUs to be tunneled across the backbone network and also reduce the consumption of VLAN resources on the backbone network. Layer 2 PDUs from the user networks then travel through different Layer 2 tunnels to reach the destinations to perform Layer 2 protocol calculation. This example uses the Spanning Tree Protocol (STP).

Networking Requirements

When each edge device interface on a backbone network connects to more than one user network and Layer 2 PDUs from the user networks carry VLAN tags, configure QinQ-based Layer 2 protocol tunneling to allow the Layer 2 PDUs from the user networks to be tunneled across the backbone network and also reduce the consumption of VLAN resources on the backbone network. This configuration allows backbone network edge devices to transmit Layer 2 PDUs through different tunnels based on the outer VLAN IDs.

On the network shown in Figure 1, CEs are connected through PEs and run STP. CE1 and CE2 send BPDUs that carry VLAN 100 to PE1; CE3 and CE4 send BPDUs that carry VLAN 200 to PE2. To achieve the following requirements, configure QinQ-based Layer 2 protocol tunneling on the PEs:

Devices in VLAN 100 build a spanning tree.
Devices in VLAN 200 build a spanning tree.

To reduce the consumption of VLAN resources on the backbone network, configure QinQ on the PEs so that the PEs add a VLAN ID of 10 to BPDUs that carry VLAN 100 and VLAN 200 before transmitting the BPDUs onto the backbone network. BPDUs transmitted on the backbone network then carry double VLAN tags.

The default multicast destination MAC address 0180-C200-0000 of BPDUs is used in this example.

Interfaces 1 through 3 in this example represent GE 0/1/1, GE 0/1/2, and GE 0/1/3, respectively.

Figure 1 QinQ-based Layer 2 protocol tunneling networking

Configuration Roadmap

The configuration roadmap is as follows:

Switch the interfaces that connect the PEs and CEs to Layer 2 mode.
Enable STP on the CEs and PEs.
Configure Layer 2 forwarding on the CEs so that the CEs send tagged BPDUs to the PEs.
Configure QinQ-based Layer 2 protocol tunneling on the PEs:
1. Configure QinQ so that PEs exchange double tagged BPDUs.
2. Disable STP on PEs' user-side interfaces and enable Layer 2 protocol tunneling on tagged interfaces.
3. Configure the PEs to replace the multicast destination MAC address in the BPDUs from the CEs.

Data Preparation

To complete the configuration, you need the following data:

Types and numbers of the interfaces that connect the PEs and CEs and that connect the PEs
VLAN IDs of the CEs
Outer VLAN ID of BPDUs transmitted between the PEs
Specified multicast MAC address to replace the multicast destination MAC address in BPDUs

Procedure

Run the portswitch command to switch the interfaces that connect the PEs and CEs to Layer 2 mode.

Enable STP on the CEs and PEs.

# Configure CE1.

[~CE1] stp enable
[*CE1] commit

# Configure CE2.

[~CE2] stp enable
[*CE2] commit

# Configure CE3.

[~CE3] stp enable
[*CE3] commit

# Configure CE4.

[~CE4] stp enable
[*CE4] commit

# Configure PE1.

[~PE1] stp enable
[*PE1] commit

# Configure PE2.

[~PE2] stp enable
[*PE2] commit

Configure Layer 2 forwarding on the CEs.

# Configure CE1.

[~CE1] vlan 100
[*CE1-vlan100] quit
[*CE1] interface gigabitethernet 0/1/1
[*CE1-GigabitEthernet0/1/1] undo shutdown
[*CE1-GigabitEthernet0/1/1] port trunk allow-pass vlan 100
[*CE1-GigabitEthernet0/1/1] stp bpdu vlan 100
[*CE1-GigabitEthernet0/1/1] quit
[*CE1] commit

# Configure CE2.

[~CE2] vlan 100
[*CE2-vlan100] quit
[*CE2] interface gigabitethernet 0/1/1
[*CE2-GigabitEthernet0/1/1] undo shutdown
[*CE2-GigabitEthernet0/1/1] port trunk allow-pass vlan 100
[*CE2-GigabitEthernet0/1/1] stp bpdu vlan 100
[*CE2-GigabitEthernet0/1/1] quit
[*CE2] commit

# Configure CE3.

[~CE3] vlan 200
[*CE3-vlan200] quit
[*CE3] interface gigabitethernet 0/1/1
[*CE3-GigabitEthernet0/1/1] undo shutdown
[*CE3-GigabitEthernet0/1/1] port trunk allow-pass vlan 200
[*CE3-GigabitEthernet0/1/1] stp bpdu vlan 200
[*CE3-GigabitEthernet0/1/1] quit
[*CE3] commit

# Configure CE4.

[~CE4] vlan 200
[*CE4-vlan200] quit
[*CE4] interface gigabitethernet 0/1/1
[*CE4-GigabitEthernet0/1/1] undo shutdown
[*CE4-GigabitEthernet0/1/1] port trunk allow-pass vlan 200
[*CE4-GigabitEthernet0/1/1] stp bpdu vlan 200
[*CE4-GigabitEthernet0/1/1] quit
[*CE4] commit

Configure QinQ-based Layer 2 protocol tunneling on the PEs:

Configure QinQ.

# Configure PE1.

[~PE1] vlan 10
[*PE1-Vlan10] quit
[*PE1] interface gigabitethernet 0/1/3
[*PE1-GigabitEthernet0/1/3] undo shutdown
[*PE1-GigabitEthernet0/1/3] port link-type trunk
[*PE1-GigabitEthernet0/1/3] port trunk allow-pass vlan 10
[*PE1-GigabitEthernet0/1/3] quit
[*PE1] interface gigabitethernet 0/1/1
[*PE1-GigabitEthernet0/1/1] undo shutdown
[*PE1-GigabitEthernet0/1/1] port link-type dot1q-tunnel
[*PE1-GigabitEthernet0/1/1] port default vlan 10
[*PE1-GigabitEthernet0/1/1] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] undo shutdown
[*PE1-GigabitEthernet0/1/2] port link-type dot1q-tunnel
[*PE1-GigabitEthernet0/1/2] port default vlan 10
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] commit

# Configure PE2.

[~PE2] vlan 10
[*PE2-Vlan10] quit
[*PE2] interface gigabitethernet 0/1/3
[*PE2-GigabitEthernet0/1/3] undo shutdown
[*PE2-GigabitEthernet0/1/3] port link-type trunk
[*PE2-GigabitEthernet0/1/3] port trunk allow-pass vlan 10
[*PE2-GigabitEthernet0/1/3] quit
[*PE2] interface gigabitethernet 0/1/1
[*PE2-GigabitEthernet0/1/1] undo shutdown
[*PE2-GigabitEthernet0/1/1] port link-type dot1q-tunnel
[*PE2-GigabitEthernet0/1/1] port default vlan 10
[*PE2-GigabitEthernet0/1/1] quit
[*PE2] interface gigabitethernet 0/1/2
[*PE2-GigabitEthernet0/1/2] undo shutdown
[*PE2-GigabitEthernet0/1/2] port link-type dot1q-tunnel
[*PE2-GigabitEthernet0/1/2] port default vlan 10
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] commit

Run the display vlan command on the PEs to view QinQ configurations.

The following example uses the command output on PE1.

[~PE1] display vlan 10 verbose
* : Management-VLAN
---------------------
  VLAN ID                     : 10
  VLAN Name                   :
  VLAN Type                   : Common
  Description                 : VLAN 0010
  Status                      : Enable
  Broadcast                   : Enable
  MAC Learning                : Enable
  Smart MAC Learning          : Disable
  Current MAC Learning Result : Enable
  Statistics                  : Disable
  Property                    : Default
  VLAN State                  : Up

  ----------------
  Untagged      Port: GigabitEthernet0/1/1               GigabitEthernet0/1/2
  ----------------
  Active Untag  Port: GigabitEthernet0/1/1               GigabitEthernet0/1/2
  ----------------
  Tagged        Port: GigabitEthernet0/1/3
  ----------------
  Active  Tag   Port: GigabitEthernet0/1/3
---------------------
Interface                          Physical
GigabitEthernet0/1/1               UP
GigabitEthernet0/1/2               UP
GigabitEthernet0/1/3               UP

Disable STP on PEs' user-side interfaces and enable Layer 2 protocol tunneling on tagged interfaces.

# Configure PE1.

[~PE1] interface gigabitethernet 0/1/1
[~PE1-GigabitEthernet0/1/1] stp disable
[*PE1-GigabitEthernet0/1/1] l2protocol-tunnel stp enable
[*PE1-GigabitEthernet0/1/1] quit
[*PE1] interface gigabitethernet 0/1/2
[*PE1-GigabitEthernet0/1/2] stp disable
[*PE1-GigabitEthernet0/1/2] l2protocol-tunnel stp enable
[*PE1-GigabitEthernet0/1/2] quit
[*PE1] commit

# Configure PE2.

[~PE2] interface gigabitethernet 0/1/1
[~PE2-GigabitEthernet0/1/1] stp disable
[*PE2-GigabitEthernet0/1/1] l2protocol-tunnel stp enable
[*PE2-GigabitEthernet0/1/1] quit
[*PE2] interface gigabitethernet 0/1/2
[*PE2-GigabitEthernet0/1/2] stp disable
[*PE2-GigabitEthernet0/1/2] l2protocol-tunnel stp enable
[*PE2-GigabitEthernet0/1/2] quit
[*PE2] commit

Configure the PEs to replace the multicast destination MAC address in the BPDUs from the CEs.

# Configure PE1.

[~PE1] l2protocol-tunnel stp group-mac 0100-5e00-0011
[*PE1] commit

# Configure PE2.

[~PE2] l2protocol-tunnel stp group-mac 0100-5e00-0011
[*PE2] commit

Verify the configuration.
After completing the configurations, run the display l2protocol-tunnel group-mac command on the PEs to view Layer 2 protocol tunneling information, such as the tunneled Layer 2 protocol names, protocol types, multicast destination MAC addresses, and specified multicast MAC addresses (group MAC addresses).

The following example uses the command output on PE1.
```
[~PE1] display l2protocol-tunnel group-mac stp
Protocol         Protocol-MAC   Group-MAC       
-----------------------------------------------------------------------------
stp              0180-c200-0000 0100-5e00-0011 
```
After completing the configurations, run the display stp brief command on the CEs to view the MSTP port role. The following example uses the command output on CE3 and CE4. The command output shows that GE 0/1/1 on CE3 is the root port and GE 0/1/1 on CE4 is the designated port.
```
[~CE3] display stp brief
 MSTID  Port                        Role  STP State     Protection   Cost   Edged
     0  GigabitEthernet0/1/1        ROOT  forwarding    none       199999   disable
[~CE4] display stp
 MSTID  Port                        Role  STP State     Protection   Cost   Edged
     0  GigabitEthernet0/1/1        DESI  forwarding    none       199999   disable
```

Configuration Files

CE1 configuration file

#
sysname CE1
#
vlan batch 100
#
stp enable
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 100
 stp bpdu vlan 100
#
return

CE2 configuration file

#
sysname CE2
#
vlan batch 100
#
stp enable
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 100
 stp bpdu vlan 100
#
return

CE3 configuration file

#
sysname CE3
#
vlan batch 200
#
stp enable
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 200
 stp bpdu vlan 200
#
return

CE4 configuration file

#
sysname CE4
#
vlan batch 200
#
stp enable
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 200
 stp bpdu vlan 200
#
return

PE1 configuration file

#
sysname PE1
#
vlan batch 10
#
l2protocol-tunnel stp group-mac 0100-5e00-0011
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type dot1q-tunnel
 port default vlan 10
 stp disable
 l2protocol-tunnel stp enable
#
interface GigabitEthernet0/1/2
 portswitch
 port link-type dot1q-tunnel
 port default vlan 10
 stp disable
 l2protocol-tunnel stp enable
#
interface GigabitEthernet0/1/3
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 10
#
return

PE2 configuration file

#
sysname PE2
#
vlan batch 10
#
l2protocol-tunnel stp group-mac 0100-5e00-0011
#
interface GigabitEthernet0/1/1
 portswitch
 port link-type dot1q-tunnel
 port default vlan 10
 stp disable
 l2protocol-tunnel stp enable
#
interface GigabitEthernet0/1/2
 portswitch
 port link-type dot1q-tunnel
 port default vlan 10
 stp disable
 l2protocol-tunnel stp enable
#
interface GigabitEthernet0/1/3
 portswitch
 port link-type trunk
 port trunk allow-pass vlan 10
#
return