Provider Bridging with VLAN Translation
This is a sample configurations to verify functionality to support provider-bridging feature with extended SVLAN translation as below:
Topology
Figure 14-26: Provider Bridging with VLAN Traslation Topology
PEB1
Bridge Configuration
#configure terminal | Enter configure mode. |
(config)#bridge 1 protocol provider-rstp edge | Enter Configure bridge type as provider-RSTP edge bridge |
(config)#exit | Exit configure mode. |
VLAN Configuration
#configure terminal | Enter configure mode. |
(config)#vlan database | Enter VLAN database |
(config-vlan)# vlan 2-500 type customer bridge 1 state enable | Configure customer VLANs on bridge 1 |
(config-vlan)#vlan 501-1005 type service point-point bridge 1 state enable | Configure service VLANs on bridge 1 |
(config-vlan)#end | Exit VLAN database and configure mode. |
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 6 | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 7 | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode customer-edge hybrid | Configure port as customer-edge hybrid port |
(config-if)#switchport customer-edge hybrid allowed vlan all | Add all VLANs configured above to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
PEB2
Bridge Configuration
#configure terminal | Enter configure mode. |
(config)# bridge 1 protocol provider-rstp edge | Enter configure bridge type as provider-RSTP edge bridge |
(config)#exit | Exit configure mode. |
VLAN Configuration
#configure terminal | Enter configure mode. |
(config)#vlan database | Enter VLAN database |
(config-vlan)#vlan 2-500 type customer bridge 1 state enable | Configure customer VLANs on bridge 1 |
(config-vlan)#vlan 501-1005 type service point-point bridge 1 state enable | Configure service VLANs on bridge 1 |
(config-vlan)#end | Exit VLAN database and configure mode. |
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 6 | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 7 | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode customer-edge hybrid | Configure port as customer-edge hybrid port |
(config-if)#switchport customer-edge hybrid allowed vlan all | Add all VLANs configured above to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
Translation Cases
Case1 - (C S - C’ S’)
Configuration on PEB2
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#switchport provider-network vlan translation cvlan 2 svlan 6 cvlan 3 svlan 7 | Translate CVLAN and SVLAN to new CVLAN and new SVLAN on PNP port |
Validation for Case 1
When tagged traffic with CVLAN 2 is sent from IXIA-1 to IXIA-2 with both CTAG and STAG entering provider network and gets translated to new CVLAN and SVLAN as per Case1.
PEB2#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge27 1402.ec1c.3144 1 300
1 6 ge9 6400.6a1e.d9a5 1 300
1 7 ge9 0000.0500.0400 1 300
1 7 ge9 6400.6a1e.d9a5 1 300
New SVLAN 7 is observed on PEB2 after translation. Also, captured packets on CEP show new CVLAN 3.
When tagged traffic for CVLAN 3 is sent from IXIA-2 to IXIA-1
PEB1#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge9 74e6.e2af.598b 1 300
1 6 ge3 0000.0500.0400 1 300
1 6 ge9 0000.0500.0700 1 300
When traffic is reversed and traffic has both new CVLAN 3 and SVLAN 7 on provider network from IXIA-2, translation to old CVLAN 2 and SVLAN 6 happens. Also, captured packets have CVLAN as 2.
Case2 - (C S - S’)
Configuration on PEB2
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 6 | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 7 untagged-pep | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport customer-edge hybrid vlan 3 | Allow access VLAN 3 configured above to this CEP port |
(config-if)#switchport customer-edge hybrid allowed vlan add 2-3 | Allow other VLANs configured to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#no switchport provider-network vlan translation cvlan 2 svlan 6 | Unconfigure Translation Case1 from PNP port |
(config-if)#switchport provider-network vlan translation cvlan 2 svlan 6 svlan 7 | Configure Translation Case2 on PNP port |
(config-if)#end | Exit interface and configure mode. |
Validation for Case 2
When tagged traffic with CVLAN 2 is sent from IXIA-1 to IXIA-2 with both CTAG and STAG entering provider network and translated to new SVLAN as per Case2.
PEB2#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge27 1402.ec1c.3144 1 300
1 7 ge9 0000.0500.0400 1 300
New SVLAN 7 is observed on PEB2 after translation. At CEP port connected to IXIA-2, untagged traffic should be received.
When tagged traffic for CVLAN 3 is sent from IXIA-2 to IXIA-1.
PEB1#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge9 74e6.e2af.598b 1 300
1 6 ge3 0000.0500.0400 1 300
1 6 ge9 0000.0500.0700 1 300
When traffic is reversed and traffic has both new CVLAN 3 and SVLAN 7 from IXIA-2, translatiom to old CVLAN 2 and SVLAN 6 happens. Also, captured packets have CVLAN as 2.
Case3 - (S - S’)
Configuration on PEB1
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 6 | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 7 | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport customer-edge hybrid vlan 2 | Allow access VLAN 2 configured above to this CEP port |
(config-if)#switchport customer-edge hybrid allowed vlan add 2-3 | Allow other VLANs configured to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
Configuration on PEB2
CEP Port Configuration (should be configured as PNP in this case)
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#no switchport provider-network vlan translation cvlan 2 svlan 6 | Unconfigure Translation Case2 from PNP port |
(config-if)#switchport provider-network vlan translation svlan 6 svlan 7 | Configure Translation Case3 on PNP port |
(config-if)#end | Exit interface and configure mode. |
Validation for Case 3
When tagged traffic with CVLAN 2 is sent from IXIA-1 to IXIA-2 with only STAG entering provider network and translation happens to new SVLAN as per Case3.
PEB2#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge27 1402.ec1c.3144 1 300
1 6 ge9 0000.0500.0400 1 300
1 6 ge9 6400.6a1e.d9a5 1 300
New SVLAN 7 is observed on PEB2 At PNP port connected to IXIA-2.
When double tagged traffic of CVLAN 2 and SVLAN 7 is sent from IXIA-2 to IXIA-1:
PEB1#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge9 74e6.e2af.598b 1 300
1 7 ge3 0000.0500.0400 1 300
1 6 ge9 0000.0500.0700 1 300
Here we get a tagged traffic of CVALN 2 when the captured at IXIA-1.
Case4 - (S - C’ S’)
Configuration on PEB1
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 6 untagged-pep | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 7 | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport customer-edge hybrid vlan 2 | Allow access VLAN 2 configured above to this CEP port |
(config-if)#switchport customer-edge hybrid allowed vlan add 2-3 | Allow other VLANs configured to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
Configuration on PEB2
CEP Port Configuration (should be configured as PNP in this case)
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#no switchport provider-network vlan translation svlan 6 svlan 7 | Unconfigure Translation Case2 from PNP port |
(config-if)#switchport provider-network vlan translation svlan 6 cvlan 3 svlan 7 | Configure Translation Case3 on PNP port |
(config-if)#end | Exit interface and configure mode. |
Validation for Case 4
When tagged traffic with CVLAN 2 is sent from IXIA-1 to IXIA-2 enters provider network and translation happens to new CVLAN and new SVLAN as per Case4.
PEB2#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge27 1402.ec1c.3144 1 300
1 6 ge9 0000.0500.0400 1 300
1 6 ge9 6400.6a1e.d9a5 1 300
When you observe the traffic received in IXIA-2, you can observe that new CVLAN 3 and SVLAN 7 tags can be seen. Here the VLAN 2 will be a data packet.
When tagged traffic for CVLAN 3 and SVLAN 7 is sent from IXIA-2 to IXIA-1:
PEB1#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 6 ge3 0000.0500.0400 1 300
1 7 ge9 0000.0500.0700 1 300
When you observe, in PEB1 the packets will be dropped at the CEP port since only a single S tagged packets is obtained in the PNP.
Case5 - (C - C’ S’)
Configuration on PEB1
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 cvlan3 svlan 4 | Map CVLAN to C’VLAN and SVLAN |
(config-cvlan-registration)#cvlan 5 cvlan 6 svlan 7 | Map CVLAN to C’VLAN and SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode customer-edge hybrid | Configure port as customer-edge hybrid port |
(config-if)#switchport customer-edge hybrid allowed vlan all | Allow other VLANs configured to this CEP port |
(config-if)#switchport customer-edge vlan registration map1 | Attach the Map1 to CEP port |
(config-if)#end | Exit interface and configure mode. |
Configuration on PEB2
CEP Port Configuration (should be configured as PNP in this case)
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
Validation for Case 5
When tagged traffic with CVLAN 2 is sent from IXIA-1 to IXIA-2 with both CTAG and STAG entering provider network and gets translated to new CVLAN and SVLAN as per Case1.
PEB2#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge27 1402.ec1c.3144 1 300
1 6 ge9 0000.0500.0400 1 300
1 6 ge9 6400.6a1e.d9a5 1 300
When the packet is captured at PNP port of PEB2 CVLAN of 3 and SVLAN of 4 is seen.
When tagged traffic for CVLAN 6 and SVLAN 7 is sent from IXIA-2 to IXIA-1:
PEB1#show bridge
Bridge CVLAN SVLAN BVLAN Port MAC Address FWD Time-out
---------+------+------+------+-----------+-----------------+-----+---------+
1 1 ge9 74e6.e2af.598b 1 300
1 4 ge3 0000.0500.0400 1 300
1 7 ge9 0000.0500.0700 1 300
When traffic is reversed and traffic has both new CVLAN 6 and SVLAN 7 on provider network from IXIA-2, translation to CVLAN 5 and SVLAN 7 happens. Also, captured packets have CVLAN as 2 based on the entry in the cvlan registration table.
Switchport ethertype
Bridge Configuration (for 0x88a8)
Configuration on PEB1
CVLAN Registration Table Configuration
#configure terminal | Enter configure mode. |
(config)#cvlan registration table map1 bridge 1 | Configure CVLAN registration table as map1 |
(config-cvlan-registration)#cvlan 2 svlan 4 | Map CVLAN to SVLAN |
(config-cvlan-registration)#cvlan 3 svlan 6 | Map CVLAN to SVLAN |
(config-cvlan-registration)#end | End the CVLAN registration mode |
Configuration on PEB2
CEP Port Configuration (should be configured as PNP in this case)
CEP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge3 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#end | Exit interface and configure mode. |
PNP Port Configuration
#configure terminal | Enter configure mode. |
(config)#interface ge9 | Enter the interface mode |
(config-if)#switchport | Configure switchport |
(config-if)#bridge-group 1 | Attach port to bridge |
(config-if)#switchport mode provider-network | Configure port as Provider Network Port (PNP) |
(config-if)#switchport provider-network vlan allowed vlan all | Add all VLANs configured above to this PNP port |
(config-if)#switchport dot1q ethertype 0x88a8 | Change the TPID of the SVLAN to 0x88a8 |
(config-if)#end | Exit interface and configure mode. |
Validation for Switchport ethertype
To validate, send tagged traffic of VLAN 2 from IXIA-1.
Now at eth9 of PB2, capture the packets through IXIA-2 and verify that the traffic is received with double tag.
If the 2 tags CVLAN tag 2 will have the TPID of 0x8100 and SVLAN tag 4 will have a TPID of 0x88a8.
Last modified date: 07/13/2023