Configure Q-in-Q Inner VLAN Tagging in Concerto

For supported software information, click here.

IEEE 802.1Q tunneling, commonly called Q-in-Q, extends VLANs between different enterprises in a service provider network. You configure Q-in-Q by defining an inner VLAN ID in addition to the regular VLAN ID for a WAN or LAN interface. The two VLAN tags are used to identify a logical interface. Versa Q-in-Q allows you to use the full VLAN space (4096 x 4096) as a single addressing and segmentation space, and it allows you to classify and forward packets using any Q-in-Q VLAN values.

The example below illustrates Q-in-Q. Here, a service provider has two customers, Acme and ABC, and each of the customers has two locations, Acme-1 and Acme-2, and ABC-1 and ABC-2. Both customers use VLAN IDs 10 and 20 for the traffic between their sites. To separate the traffic of the two customers, the service provider inserts a second, inner VLAN ID that is unique to each customer. For customer Acme, the service provider creates VLAN 100, which includes Acme's VLAN IDs 10 and 20. Likewise, the service provider creates VLAN 200 for customer ABC that includes ABC's VLAN IDs 10 and 20. The inner VLAN tags (100 and 200) are added when the traffic enters the service provider's network and is removed when the traffic exits the service provider's network. In this way, the service provider can separate and transport the traffic for each customer even though they use the same VLAN IDs (VLAN 10 and VLAN 20).

To configure Q-in-Q inner VLAN tagging:

1. In Tenant view, select Configure > Secure SD-WAN > Network Interfaces.
   
    
   
   The screen displays the Interfaces screen with the WAN tab selected by default. Q-in-Q tagging is supported on wired WAN and wired LAN interfaces.
   
   
2. To configure Q-in-Q tagging on a wired WAN interface, select the WAN tab in the Interfaces screen, then click the interface on which you want to configure Q-in-Q tagging. The Edit WAN Interface screen displays.
3. Select step 1, WAN Settings, then enter information for the following fields.
   
   
    

   Field	Description
   VLAN ID	Enter the VLAN ID of the interface. Note that you should use VLAN 0 only for an untagged interface.  Range: 1 through 4094 Default: None
   Inner VLAN ID	Enter the inner VLAN ID of the interface. Note that the Inner VLAN ID field is grayed out until you enter a VLAN ID. Range: 0 through 4094 Default: None

   Note: To create a new WAN interface, see Configure WAN Interfaces in Concerto.

4. To configure Q-in-Q tagging on a wired LAN interface, select the LAN tab in the Interfaces screen.
   
   
    
5. Click the interface on which you want to configure Q-in-Q tagging. The Edit LAN Interface screen displays.
   
   
    
6. Select step 1, LAN Settings, then enter the VLAN ID and Inner VLAN ID.
    

   Field	Description
   VLAN ID	Enter the VLAN ID of the interface. Note that you should use VLAN 0 only for an untagged interface. Range: 1 through 4094 Default: None
   Inner VLAN ID	Enter the inner VLAN ID of the interface. Note that the Inner VLAN ID field is not visible until you enter a VLAN ID. Range: 1 through 4094 Default: None

   Note: To create a new LAN interface, see Configure LAN Interfaces in Concerto.

7. Click Skip to Review, review the changes, then click Submit to save the configuration.