Switching

Hi,

I think this should be possible, but I couldn't get it working yet. The situation is as follows:

To our office we deliver a couple of QinQ VLANs on an interface, which is working fine. The next thing we want to do on the interface is bridging the inner vlan of a QinQ interface with a single VLAN on the other. This is what I currently have configured:

Interface where QinQ goes out:

interface ge-1/1/4 {
    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    unit 5103 {
        encapsulation vlan-bridge;
        vlan-tags outer 0x8100.1 inner 0x8100.600;
    }
}

This VLAN needs to be bridged with this interface:

interface ge-1/0/0 {
    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    unit 600 {
        encapsulation vlan-bridge;
        vlan-id 600;
    }
}

The bridge:

bridge-600 {
    domain-type bridge;
    vlan-id 600;
    interface ge-1/0/0.600;
    interface ge-1/1/4.5103;
}

Is there anything else I'm missing?

Marijn

Hi, 

I think you may need vlan-map push and pop:

https://kb.juniper.net/InfoCenter/index?page=content&id=KB24398&actp=RSS

interface ge-1/0/0 {
    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    unit 600 {
        encapsulation vlan-bridge;
        vlan-id 600;
        input-vlan-map {
            push;
            vlan-id 1;
        }
    output-vlan-map pop;
    }
}

Cheers,

Ashvin

Hi Ashvin,

Thanks for your reply! Could you perhaps elaborate your answer for me?

The ultimate idea is that we can ping internal management IP accessable via VLAN 600.

Also, I should delete 'family bridge' ?

Edit: i got this warning..

Warning: interface with input/output vlan-maps cannot be added to a routing-instance with a vlan-id/vlan-tags configure

Greetings,

Marijn

Hi,

Could you try by removing the vlan-id from the bridge-domain:

delete bridge-domains bridge-600 vlan-id 600

The idea is to push an outer vlan-id=1 for ingress traffic in ge-0/0/1.600 to enable the QinQ, and pop the outer vlan tag for egress traffic.

Cheers,

Ashvin

Hi AshvinO,

I removed the vlan-id from the bridge-domain. From our office should be able ping any address in VLAN 600 that is connected to interface ge-1/0/0 right? I will test this soon as I need to patch a cable in the datacenter 🙂

Marijn

Hi AshvinO,

We succesfully implemented the configuration today. Thanks for your help!

Greetings,

Marijn