Q-in-Q and SPBM

[bfaltys]

We are testing a Q-in-Q link to an internet service provider in our city. I have a few test VLANs at the remote site. The provider’s Q-in-Q tag is stripped on a Juniper ex4600 that connects to one of our VSP7254s. The remote site VLAN gateways are on the VSP7254. I can ping the layer 3 logical interface for each VLAN at the remote site. We also have an SPBM cloud so I’m trying to extend the remote VLANs to our main office (Site-A), but am not having success. I have created the VLANs and mapped them to i-sids on the 7254 and on the 4450 at Site-A. I created an untagged port for one of the test VLANs and connected an edge device to the port and assigned it an IP in one of the test VLANs. At this time I cannot even ping the gateway, but the 7254 does see the MACs. Any thoughts on what could be missing? Here is a basic diagram of the setup plus the out put of the MACs on the 7254.

Data-Center-1:1#sh vlan mac-address-entry 2997

===============================================================================
                                    Vlan Fdb
===============================================================================
VLAN                     MAC                                                SMLT                       
ID         STATUS     ADDRESS              INTERFACE      REMOTE   TUNNEL            
----------------------------------------------------------------------------------------------------
2997    learned      c4:00:ad:fe:0f:83    Port-2/2            false           VSP-4450
2997    self            d4:78:56:96:b5:13  Port-cpp            false           -                 
2997    learned      f0:64:26:5f:9c:83    Port-1/1            false            -                

[bfaltys]

YES! Adding the vlan & i-sid on the other VSP7254 did the trick!

Thanks!!

[bfaltys]

Here is confirmation of the matching i-sids. We have a lot of other sites on our SPBM cloud and they are all working fine.

Data-Center-1:1#sh vlan i-sid | inc 299
2997       102997              
2998       102998              
VSP4450:1#sh vlan i-s | inc 299  
************************************************************************************
                Command Execution Time: Tue Apr 20 12:29:03 2021 CDT
************************************************************************************
2997       102997              
2998       102998      

Here is confirmation of the VLAN configuration & port assignment on the 4450. 

VSP4450:1#show vlan mem 2997
************************************************************************************
                Command Execution Time: Tue Apr 20 12:30:51 2021 CDT
************************************************************************************

===============================================================================
                                   Vlan Port
===============================================================================
VLAN   PORT             ACTIVE             STATIC             NOT_ALLOW         
ID        MEMBER         MEMBER             MEMBER             MEMBER            
----------------------------------------------------------------------------------------------------
2997   1/9                  1/9                                                      

VSP4450:1#sh run | inc 1/9
************************************************************************************
                Command Execution Time: Tue Apr 20 12:32:43 2021 CDT
************************************************************************************
vlan members 2997 1/9 portmember

VSP4450:1#sh run | inc vlan    
************************************************************************************
                Command Execution Time: Tue Apr 20 12:33:41 2021 CDT
************************************************************************************
vlan create 2997 type port-mstprstp 0
vlan members 2997 1/9 portmember
vlan i-sid 2997 102997

Ping results to the layer 3 interfaces at the edge site (192.168.197.15 & 192.168.198.15) and to my edge device (192.168.197.77).

Data-Center-1:1#ping 192.168.197.15
192.168.197.15 is alive
Data-Center-1:1#ping 192.168.198.15
192.168.198.15 is alive
Data-Center-1:1#ping 192.168.197.77
ping: timeout
no answer from 192.168.197.77

I can see my edge device’s MAC on the VSP7254 after I try to ping.

edge-device# sho info

Model Name       : EKI-7712G-4FMPI

System Name      : BENS DESK
System Location  : BENS DESK
MAC Address      : C4:00:AD:FE:0F:83
IP Address       : 192.168.197.77
Subnet Mask      : 255.255.255.0

Data-Center-1:1#sh vlan mac-address-entry 2997

==============================================================================
                                    Vlan Fdb
==============================================================================
VLAN                    MAC                                               SMLT                       
ID        STATUS     ADDRESS              INTERFACE    REMOTE   TUNNEL            
----------------------------------------------------------------------------------------------------
2997   learned      c4:00:ad:fe:0f:83     Port-2/2           false         VSP4450
2997   self            d4:78:56:96:b5:13   Port-cpp           false         -                 
2997   learned      f0:64:26:5f:9c:83     Port-1/1           false         -                

[Roger_Lapuh]

yep, good one.

[Ludovico_Steven · Accepted solution]

None of those VSPs have a vIST configured ? If yes, the I-SIDs must be configured on both vIST peers.