Sites - Other Sites - Core via L2 vlans currently some sites have customers hooked up on the switches on untagged vlan ports, from site to site we're always tagging...
So now what we want to do is be able to dump a give a port on our core to the other provider, and a port at each of our sites, that way we only have to truck 1 vman/vlan across our network of 60+ switches instead of lugging hundreds of their vlans across 1 at a time which will be a logistical nightmare.
Can we do this easily if so how, to operate vlan and vman on same network of switches and transit these vlans between our sites+core to their hardware+core transparently to us.
We don't have any existing vmans so that's no issue with changing ethertypes
So enable jumbo, set the ethertype to 8100 (same as vlan I think)
then the vman and vlan id's will share the same numbering so if I have free vlan #100 I can use vman #100 tag the vman and vlans on the trunked ports
untag it on the port going to their equipment, and on their side it just looks like a bunch of clean vlans?
any risk I should worry about doing this on a live network, dont wanna crash out traffic or something
also how will this tie into our core which is mlag'd follow same process, and treat it like a normal vlan over the ISC?
You can have a VMAN and a VLAN with a similar ID, btw. The purpose of VMAN is to scale and become transparent to customers' VLAN configuration.
crap just saw in the 15.3 manual that with x450's with PNP+tagged on same port i have to use 0x8100, from x450-x450 if i'm reading it right.
BTW best recommendation for figuring out of our switch types + version of fw supports vman+vlan on same ports?
Now just got to figure if my various wireless radios, have anywhere i need to enable jumbo support, or if its on by default for the backhauls :)
Do i need to run spanning tree or something on the untagged port facing them that's delivering all the vlans? to prevent a loop between our MLAG1 and MLAG2 and their 2 switches, that they run stpd on? I know stp works via vlan, not vman so ... sorta lost, do i just not add the vman to the ISC port and send it to their port on each unit untagged