Connecting Mikrotik router to a QinQ provider network

lz1dsb · Wed Jan 29, 2014 6:10 pm

I recently started a thread regarding the trunk port configuration in RouterOS. Well, now I have a real world example where I have to configure a trunk port to a provider network, where the provider uses QinQ to transport my traffic. Here's the provider's port configuration:

 description customerX
 switchport
 switchport access vlan 2705
 switchport trunk encapsulation dot1q
 switchport mode dot1q-tunnel
 no ip address
 logging event link-status
 logging event trunk-status
 load-interval 30
 spanning-tree portfast trunk
 spanning-tree bpdufilter enable
 spanning-tree bpduguard enable

The way I see it, my traffic will be tagged with a Provider VLAN Tag of 2705 and the provider will accept whatever other VLAN I put, and this is how the QinQ frame will enter the port (P-Tag 2705)(C-tag)(Rest of Ethernet frame)

Based on that and on my previous thread I configured both Mikrotik routers the following way:
Site A

/interface bridge export 
/interface bridge
add l2mtu=1586 name=br-vlan100
/interface bridge port
add bridge=br-vlan100 interface=vlan100
/interface bridge settings
set use-ip-firewall=yes use-ip-firewall-for-vlan=yes
/interface vlan export
/interface vlan
add interface=ether2 l2mtu=1586 name=vlan100 vlan-id=100
/ip address export 
/ip address
add address=10.27.5.101/24 interface=br-vlan100 network=10.27.5.0

Site B

/interface bridge export
/interface bridge
add l2mtu=1586 name=br-vlan100
/interface bridge port
add bridge=br-vlan100 interface=vlan100
/interface vlan export
/interface vlan
add interface=sfp1 l2mtu=1586 name=vlan100 vlan-id=100
/ip address export 
/ip address
add address=10.27.5.100/24 interface=br-vlan100 network=10.27.5.0

And this is supposed to work... but it doesn't! I'm not able to reach the other end. And the provider says it's all configured at his end. So I'm kind of stuck with this...

onnoossendrijver · Wed Jan 29, 2014 6:20 pm

I assume both ends of the ISP link are configured the same?
If so.. switchport mode dot1q-tunnel allows you to transport whatever vlan configuration you want.. No tag, or tagged, of even both. The VLAN tag is preserved when crossing the ISP link.

lz1dsb · Wed Jan 29, 2014 6:49 pm

I assume both ends of the ISP link are configured the same?

That's a valid point! I realized that I don't have an explicit knowledge what's configured on the other end of the link... So I'm now checking on that.
But if we assume that I might have analog configuration on the other end, this configuration should work, shouldn't it?

Connecting Mikrotik router to a QinQ provider network

Connecting Mikrotik router to a QinQ provider network

Re: Connecting Mikrotik router to a QinQ provider network

Re: Connecting Mikrotik router to a QinQ provider network

Who is online