How to terminate a vlan on ASR 9000 and bridge it to a port on asr 9000

Unanswered Question
Feb 4th, 2012
User Badges:

hi guys;

so here is another issue i have.


a switch in the north is trunking a VLAN for a client at our central site. The switch in north site is a 3560 and central site node is ASR 9000.

This vlan is extended along with few others to distribution switch (7609) and from there teh same VLAN is trunked to a 2960 device at the same site as that of ASR. The idea is to carry the vlan from teh reote site to teh ASR at our central site and then bridge it to a seperate port on ASR and hook this port up to our fibre patch panel, hence providing a service to the client connecting to us at our northern site and then getting connected to teh internet service provider via teh patch panel.

Since we can not make a port on ASR an access port, i am not sure how we can do the above mentioned interconnect.

please assisst.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (5 ratings)
Alexei Kiritchenko Sun, 02/05/2012 - 00:03
User Badges:
  • Cisco Employee,

Hello Jalal,

Here the configuration example:


interface GigabitEthernet0/0/0/0.100 l2transport

  encapsulation dot1q 100

  rewrite ingress tag pop 1 symmetric



interface GigabitEthernet0/0/0/1






bridge group cust1

  bridge-domain cust1

   interface GigabitEthernet0/0/0/0.100

   interface GigabitEthernet0/0/0/1


  • GigabitEthernet0/0/0/1 is the access port (untagged).
  • interface GigabitEthernet0/0/0/0.100 accepts tagged frames with vlan 100.
  • L2vpn bridge-domain cust1 connects both interfaces together.
  • GigabitEthernet0/0/0/0.100 has tag rewrite operation. Removing tag on ingress, so sending untagged to GigabitEthernet0/0/0/1, and pushing tag 100 on egress, so untagged frames from gi0/0/0/1 got tagged.



jalalyounus Mon, 02/06/2012 - 18:59
User Badges:

Thanks alot boss...

so do i use global config mode or  go to interface level (specially for bridge domain and bridge group?


jalalyounus Wed, 02/08/2012 - 10:23
User Badges:

Thanks guys. The configs just had to be modified a little as i already had a bridge group which was using the same port as an ethernet flow point.

Much appreciated!

Thanks again and regards

jalalyounus Sat, 02/11/2012 - 11:14
User Badges:

sure here is what i have:

interface GigabitEthernet0/2/0/34

description xxx-2

transceiver permit pid all



bridge group xxx

  bridge-domain xxx

   interface Bundle-Ether99.526


   interface GigabitEthernet0/2/0/34 -------------> just added this new interface to the existing bridge group.


   interface GigabitEthernet0/2/0/33.526

so what i achieved here is that  the interface Bundle-Ether99.526 acts as an EFP(where i terminate the x-connect or extended vlan from the the remote site) . I am then briding this interface with the GigabitEthernet0/2/0/3 and connecting it to the patch pannel inturn.

I hope it helps.


manuv1984 Tue, 01/22/2013 - 07:15
User Badges:

Hi marhifer,

                     Please help me to configure a telnet configuration in my ASR 9k. Is this the right step for creating telnet in ASR ?

vty-pool pool1 7 80 line-template xan

line template xan




This Discussion