Access port membership based on outer+inner VLAN tag - Catalyst 4500-X

[AhmedArefin]

Hello,

I am exploring options to assign access ports membership based on outer and inner tag. I am trying to achieve an architecture where the [outer tag and the inner tag] defines the broadcast domain membership of the access ports.

to give an example, the outer tag + inner tag combination of 10+100 will only forward layer 2 traffic to ports 1 and 2 where as outer tag + inner tag combination of 10+200 will forward layer 2 traffic to port 3 only. This way a broadcast frame for customer#1 on outer+inner tag 10+100 will not be forwarded to 10+200.

Frames on the access ports can be sigle tagged on not tagged at all.

Any help will be much appreciated. for switching I am using 4500X. please see the schematic attached.

[AhmedArefin]

Could anyone help?

[LJ Gabrillo]

Soooooo, what seems to be the problem? 
and what do you mean bu inner tag/outer tag, it's really confusing (with all your 10+100 thing)


Put it like this, what is your desired setup? What do you want with your setup?

[Dan Lukes]

It seems he have double 802.1q tagged packets (a.k.a. Q in Q).

See IEEE 802.1Q-in-Q VLAN Tag Termination for more.