Link Search Menu Expand Document

VLAN Bridging QinQ (802.1ad)

Introduction

QinQ VLANs, or 802.1ad is an extension to the VLAN standard that allows multiple VLAN tags to be attached to a single frame. Using stacked VLANs, providers are able to bundle traffic tagged with different VLAN into a single Service tag.

Similarly to 802.1q bridging, it is possible to configure 802.1ad VLANs using iproute2 or systemd-networkd.

WARNING: Any bridge configured to forward VLAN traffic with either protocol 802.1q or 802.1ad will only forward traffic of the selected VLAN protocol type.

iproute2

Creation of the 802.1ad bridge is done with the following commands.

BRIDGE=${BRIDGE:-swbridge}
...
ip link add name ${BRIDGE} type bridge vlan_filtering 1 vlan_default_pvid 1 vlan_protocol 802.1ad
ip link set ${BRIDGE} up

The rest of the configuration follows the same steps as the 802.1q bridging section.

systemd-networkd

A .netdev file for the bridge needs to be created in /etc/systemd/network/, containing the device type (bridge) and its configurations. Specifically related to 802.1ad, we configure the bridge VLAN protocol with the VLANProtocol attribute:

10-swbridge.netdev

[NetDev]
Name=swbridge
Kind=bridge

[Bridge]
DefaultPVID=0
VLANFiltering=1
VLANProtocol=802.1ad

The remaining configurations follow the same steps from the instructions in the 802.1q bridging section.