Chapter 8 Configuring IEEE 802.1Q Tunneling and Layer 2 Protocol Tunneling on the ML-Series Card

Configuring Layer 2 Protocol Tunneling

Tunneling is not supported on trunk ports. If you enter the l2protocol-tunnelinterface configuration command on a trunk port, the command is accepted, but Layer 2 tunneling does not take effect unless you change the port to a tunnel port.

EtherChannel port groups are compatible with tunnel ports as long as the IEEE 802.1Q configuration is configured within an EtherChannel port group.

If an encapsulated PDU (with the proprietary destination MAC address) is received from a tunnel port or access port with Layer 2 tunneling enabled, the tunnel port is shut down to prevent loops.

Only decapsulated PDUs are forwarded to the customer network. The spanning tree instance running on the service-provider network does not forward BPDUs to tunnel ports. No CDP packets are forwarded from tunnel ports.

Because tunneled PDUs (especially STP BPDUs) must be delivered to all remote sites for the customer virtual network to operate properly, you can give PDUs higher priority within the service-provider network than data packets received from the same tunnel port. By default, the PDUs use the same CoS value as data packets.

Protocol tunneling has to be configured symmetrically at both the ingress and egress point. For example, if you configure the entry point to tunnel STP, CDP, and VTP, then you must configure the egress point in the same way.

Configuring Layer 2 Tunneling on a Port

Beginning in privileged EXEC mode, follow these steps to configure a port as a Layer 2 tunnel port:

 

Command

Purpose

Step 1

 

 

ML_Series# configuration terminal

Enters global configuration mode.

Step 2

 

 

ML_Series(config)# bridge

Creates a bridge group number and specifies a protocol.

 

bridge-group-number protocol type

 

Step 3

 

 

ML_Series(config)# l2protocol-tunnel cos

Associates a CoS value with the Layer 2 tunneling port. Valid numbers

 

cos-value

for cos-valuerange from 0 to 7.

Step 4

 

 

ML_Series(config)# interface type number

Enters interface configuration mode for the interface to be configured

 

 

as a tunnel port.

Step 5

 

 

ML_Series(config-if)# bridge-group

Assigns a bridge group to the interface.

 

bridge-group-number

 

Step 6

 

 

ML_Series(config-if)# mode dot1q tunnel

Sets the interface as an IEEE 802.1Q tunnel VLAN.

Step 7

 

 

ML_Series(config-if)# l2protocol-tunnel

Sets the interface as a Layer 2 protocol tunnel port and enables all

 

{all cdp stp vtp}

three protocols or specifically enables CDP, STP, or VTP. These

 

 

protocols are off by default.

Step 8

 

 

ML_Series(config-if)# end

Returns to privileged EXEC mode.

Step 9

 

 

ML_Series# show dot1q-tunnel

Displays the tunnel ports on the switch.

Step 10

 

 

ML_Series# copy running-config

(Optional) Saves your entries in the configuration file.

 

startup-config

 

 

 

 

Cisco ONS 15310-CL and Cisco ONS 15310-MA Ethernet Card Software Feature and Configuration Guide R8.5

 

78-18133-01

8-11

 

 

 

Page 107
Image 107
Cisco Systems 15310-CL, 15310-MA manual Configuring Layer 2 Tunneling on a Port

15310-CL, 15310-MA specifications

Cisco Systems has established itself as a leader in the networking domain, offering a wide array of solutions to meet the needs of modern businesses. Among its impressive product lineup are the Cisco 15310-CL and 15310-MA routers, designed to provide advanced network performance and reliability.

The Cisco 15310-CL is a versatile platform that primarily serves as a carrier-class router aimed at supporting high-speed data and voice services. It is built to handle the demands of large enterprises and service providers, offering a robust design that ensures maximum uptime and performance. One of its standout features is its modular architecture, which enables users to customize their configurations based on specific application needs. This scalability allows for future expansion without the need for a complete hardware overhaul.

Key technologies integrated into the Cisco 15310-CL include high-density Ethernet interfaces and a comprehensive suite of Layer 2 and Layer 3 protocol support. The device is capable of supporting multiple types of connections, including TDM, ATM, and Ethernet. This flexibility makes it an ideal choice for organizations that require seamless migration between various service types. Moreover, with features such as MPLS (Multiprotocol Label Switching) support and advanced Quality of Service (QoS) mechanisms, the router ensures that critical applications receive the necessary bandwidth and low latency required for optimal performance.

In contrast, the Cisco 15310-MA focuses on access solutions, providing a cost-effective entry point for businesses looking to enhance their network capabilities. It is well-suited for smaller offices or branch locations that need reliable connectivity without the expense and complexity associated with larger systems. The device supports a range of access methods and provides essential features like firewall capabilities, VPN support, and comprehensive security measures to protect sensitive data.

Both models benefit from Cisco's commitment to security and manageability, offering features like enhanced encryption protocols and user authentication mechanisms that help safeguard networks against threats. Additionally, they can be managed through Cisco’s intuitive software tools, simplifying configuration and monitoring tasks for IT administrators.

The Cisco 15310-CL and 15310-MA are ideal solutions for businesses seeking to enhance their network infrastructure, ensuring firms can keep pace with evolving technology demands while maintaining a focus on security and performance. Their combination of advanced features, modular capabilities, and robust support makes them valuable assets in the networking landscape.