Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

what to do when QinQ is not an option.

Our service provider we use to connect to a remote office wants to bill us an extra 1000 a month to allow us to send tagged traffic over the circuit. seems like a lot of money to add the line "switchport mode dot1q-tunnel " to the ports config.

are there any solutions which will allow us to pass tagged traffic between offices without paying the service provider to allow double tagging? Routing is not an option as we have to pass vlans (voice/video) which we do not administrate.

thanks,

g

1 ACCEPTED SOLUTION

Accepted Solutions
Green

Re: what to do when QinQ is not an option.

IMHO, the GRE would probably be the least painful, as long as both ends can see each other, you have a link.

You can also track it for lighting up a backup path, if necessary.

A site-to-site VPN is a little trickier, but it is also normally encrypted (the GRE usually isn't, I believe), so if security is critical, you'd need to add encryption to eh GRE, or just go with the VPN.

It should be easy enough to check out one against the other for a final judgment.

3 REPLIES
Green

Re: what to do when QinQ is not an option.

GRE Tunnel?

VPN?

New Member

Re: what to do when QinQ is not an option.

thanks. I was looking at GRE and VPN solutions, we have at 6509e on one end and a 4k on the other. we also have a few ASA's I could use.

which would be the most transparent ( both to the service provider and to the network), or which would you recomend?

=g

Green

Re: what to do when QinQ is not an option.

IMHO, the GRE would probably be the least painful, as long as both ends can see each other, you have a link.

You can also track it for lighting up a backup path, if necessary.

A site-to-site VPN is a little trickier, but it is also normally encrypted (the GRE usually isn't, I believe), so if security is critical, you'd need to add encryption to eh GRE, or just go with the VPN.

It should be easy enough to check out one against the other for a final judgment.

154
Views
0
Helpful
3
Replies
CreatePlease to create content