Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

QinQ tunneling

Hi everybody,

I am confused with QinQ Tunneling in 3560 Switch. Please find the attached diagram.

I need clarity where to configure Trunk and where to configure Tunnel.

Please explain

1. Whether Switch D port Fa0/1 has to be configured as "switchport mode tunne" or "switchmode mode trunk"

2. Whether Switch A port Fa0/2 has to be configured as "switchport mode tunnel" or "switchmode mode trunk"

3. Whether Switch B port Fa0/3 has to be configured as "switchport mode tunnel" or "switchmode mode trunk"

Please help me in advicing how to go with and answer the above questions

Thanks in advance



Re: QinQ tunneling


First of all, ISP devices don't about vlan 100,101,103. Assuming that I want to user Vlan 1000 for tunneling in ISP. Okay you may know how QinQ works for us.

- SwitchD f0/1 and SwitchE f0/7 are TRUNK.

- SwitchA,SwitchB,SwitchC have Vlan1000 in vlan DB. All interfaces connecting between them are TRUNK.

- SwitchA f0/0 and SwitchC f0/6 configured as follows:


SwitchA(config)# interface gigabitethernet0/0

SwitchA(config-if)# switchport access vlan 1000

SwitchA(config-if)# switchport mode dot1q-tunnel


SwitchC(config)# interface gigabitethernet0/6

SwitchC(config-if)# switchport access vlan 1000

SwitchC(config-if)# switchport mode dot1q-tunnel


Let's test connection between vlan100,101,103. It should work I thought!!(grin)



Hall of Fame Super Silver

Re: QinQ tunneling

Hello R.B. Kumar,

the command switcport mode tunnel is needed on the SP equipment and only on port facing customer equipment

in your case

SwitchA :f0/0 and SwitchC:f0/6

they need to share the same access vlan = customer vlan to build a point-to-point service.

that vlan has to be permitted on trunk ports in Switch A,B,C.

all other ports including SP ports should be trunk ports.

Hope to help


CreatePlease login to create content