Alright, I've got router on a stick with a physical interface bridged to a tunnel interface, I want to bring in vlan 1000-2500 and tag it with an S Tag and sent down the tunnel interface. I want the rest of the vlans on that interface to be untouched and handled by the router. I think I understand how to do this: on the tunnel interface, create a vlan with use s tag, then stick that in the bridge instead of the base tunnel interface. Is that correct?

My other scenario: router on a stick, crs 326: various c vlans across most of the ports, qinq coming in 1 port that needs to be preserved through to the router. That one I'm not entirely sure what to do with.. Will the switch just look at the outer most tag and forward it on based on the stag?