Community discussions

MikroTik App
 
rradu92
just joined
Topic Author
Posts: 9
Joined: Fri Feb 05, 2016 11:32 am

QinQ trunk port

Wed May 20, 2020 1:44 pm

Hello,

I have a scenario where I need to do qinq with multiple s-vlan and the same c-vlan in a trunk port.

The upstream provider sends me zone A with vlan 100 and zone B with vlan 200 as s-vlan and I need to send my c-vlans (31 and 32) to s-vlan 100 and s-vlan 200.

What I've tried is this, but I dont know if it is correct or what.
/interface vlan
add interface=sfp12 name=svlan100 vlan-id=100 # Service vlan 100
add interface=sfp12 name=svlan200 vlan-id=200 # Service vlan 200

add interface=svlan100 name=svlan100-cvlan31 vlan-id=31 # Client vlan 31 on service vlan 100
add interface=svlan100 name=svlan100-cvlan32 vlan-id=32 # Client vlan 32 on service vlan 100
add interface=svlan200 name=svlan200-cvlan31 vlan-id=31 # Client vlan 31 on service vlan 200
add interface=svlan200 name=svlan200-cvlan32 vlan-id=32 # Client vlan 32 on service vlan 200

/interface bridge port
add name=br-cvlan31 # Add bridge for client vlan 31
add name=br-cvlan32 # Add bridge for client vlan 32

add bridge=br-cvlan31 interface=svlan100-cvlan31 # Add client vlan 31 from service vlan 100 in the bridge br-cvlan31
add bridge=br-cvlan31 interface=svlan200-cvlan31  # Add client vlan 31 from service vlan 200 in the bridge br-cvlan31
add bridge=br-cvlan32 interface=svlan100-cvlan31  # Add client vlan 31 from service vlan 100 in the bridge br-cvlan32
add bridge=br-cvlan32 interface=svlan200-cvlan31  # Add client vlan 31 from service vlan 200 in the bridge br-cvlan32

Thanks in advance.
You do not have the required permissions to view the files attached to this post.
 
User avatar
floaty
Member
Member
Posts: 357
Joined: Sat Oct 20, 2018 1:24 am
Location: 52°08'32.34"N 14°39'05.0"E

Re: QinQ trunk port

Wed May 20, 2020 9:09 pm

https://wiki.mikrotik.com/wiki/Manual:I ... LAN#Q-in-Q
.
not 100% posititve about ... but maybe the remote-device uses 802.1ad compliant tagging
then you need to set
use-service-tag = yes
 
User avatar
floaty
Member
Member
Posts: 357
Joined: Sat Oct 20, 2018 1:24 am
Location: 52°08'32.34"N 14°39'05.0"E

Re: QinQ trunk port

Wed May 20, 2020 9:13 pm

in case your netflix is off duty ... surrogate:
https://www.youtube.com/watch?v=C46ISu_T2SE
starting 33:00
 
rradu92
just joined
Topic Author
Posts: 9
Joined: Fri Feb 05, 2016 11:32 am

Re: QinQ trunk port

Wed May 20, 2020 9:47 pm

The service vlan needs to be applied in the first vlan only (100 and 200) right?

Thanks
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11278
Joined: Mon Dec 04, 2017 9:19 pm

Re: QinQ trunk port

Wed May 20, 2020 11:56 pm

The service vlan needs to be applied in the first vlan only (100 and 200) right?
s-vlans need 802.1ad (service) tagging (hence use-service-tag=yes), c-vlans need 802.1Q (customer) tagging, hence use-service-tag=no.
 
User avatar
floaty
Member
Member
Posts: 357
Joined: Sat Oct 20, 2018 1:24 am
Location: 52°08'32.34"N 14°39'05.0"E

Re: QinQ trunk port

Thu May 21, 2020 5:49 am

that may or may not be so ...
better you check that out by testing your configuration(s)
.
you should be suspicious, if two versions work : )
.
had QinQ never in production ... but earned all the the time mx'ed emotions, hearing production stories ....
 
rradu92
just joined
Topic Author
Posts: 9
Joined: Fri Feb 05, 2016 11:32 am

Re: QinQ trunk port

Thu May 21, 2020 8:57 am

Hello,

I am using it in production but with cisco products and not with multiple s-vlans in the same trunk port, and just saw mikrotik is more "versatile" in this way and wanted to try it.because I really don't want to spend 456547765$ in a dedicated hardware just to be a middleware for this.

I will try it and will post here the results!

Thanks floaty
 
User avatar
Maggiore81
Trainer
Trainer
Posts: 602
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: QinQ trunk port

Mon Nov 27, 2023 9:30 pm

Where are the results?
 
rradu92
just joined
Topic Author
Posts: 9
Joined: Fri Feb 05, 2016 11:32 am

Re: QinQ trunk port

Tue Nov 28, 2023 8:46 am

Oh yeah lol,

I'm using it since then and is working great, now I have more than 50 svlans with 4 cvlans for each in a bridge for each vlan with split horizon on place with pppoe in one of the cvlans bridge and is working great. the mix is still a mikrotik connected to cisco switch and never had any issues.

The approximate traffic it is managing is something between 2.5 and 3gbps with connection tracking disabled.
 
User avatar
Maggiore81
Trainer
Trainer
Posts: 602
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: QinQ trunk port

Tue Nov 28, 2023 11:02 am

Please share the conf!
 
User avatar
erwindrew
just joined
Posts: 3
Joined: Fri Nov 24, 2017 9:45 am

Re: QinQ trunk port

Fri Jan 12, 2024 7:21 am

Oh yeah lol,

I'm using it since then and is working great, now I have more than 50 svlans with 4 cvlans for each in a bridge for each vlan with split horizon on place with pppoe in one of the cvlans bridge and is working great. the mix is still a mikrotik connected to cisco switch and never had any issues.

The approximate traffic it is managing is something between 2.5 and 3gbps with connection tracking disabled.
Hi,

Can you share your mikrotik config for reference. thanks
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: QinQ trunk port

Fri Jan 12, 2024 7:39 am

why not vlan-filtering?
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11278
Joined: Mon Dec 04, 2017 9:19 pm

Re: QinQ trunk port

Sat Jan 13, 2024 12:37 pm

why not vlan-filtering?
What do you refer to? The video? Nobody mentions vlan-filtering in this topic in written, neither positive nor negative.
 
User avatar
nichky
Forum Guru
Forum Guru
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: QinQ trunk port

Sat Jan 13, 2024 1:57 pm

hey @sindy, kako ide shta ima, srechna ti nova godina.

basically i'm referring to the config. provided by @rradu92
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11278
Joined: Mon Dec 04, 2017 9:19 pm

Re: QinQ trunk port

Sat Jan 13, 2024 6:52 pm

srechna ti nova godina.
[/quite]
I tebi :)

basically i'm referring to the config. provided by @rradu92
Ah, I haven't noticed that the stub of a configuration in the OP has some mistakes - since the configuration branch is called /interface bridge port I just skipped it, not realizing that the first two rows actually belong to /interface bridge.

OK, sorry, I have no opinion as for whether it is better to use a single common bridge with vlan-filtering=yes for c-vlans 31 and 32 or to keep @rradu92's approach of separate bridges, I was just curious. In general, a common bridge for both c-vlans means a common instance of xSTP protocol, which may or may not be desired. Also, with vlan-filtering=no, the xSTP packets are prepended with VLAN tags, so even a variant with vlan-filtering=yes on separate bridges for c-vlans 31 and 32 may make sense in some scenarios.