Introduction

As a Layer 2 tunneling technology, BPDU tunneling enables Layer 2 protocol packets from geographically dispersed customer networks to be transparently transmitted over a BPDU tunnel on the ISP (Internet Service Provider) network.

Figure 1 Transparent Transmission of Layer 2 Protocol Packets through BPDU Tunnel

PicOS currently supports Layer 2 protocol packets of STP and LACP that can be transmitted through BPDU tunneling. Transparent transmission of Layer 2 protocol packets through BPDU tunnel is based on the following processes:

1. On the BPDU tunnel ingress switch SW-A, destination multicast MAC address of the received Layer 2 protocol packet is replaced with a specified destination multicast MAC address.

2. Layer 2 protocol packets are transparently transmitted through the ISP network.

3. When the packet arrives at the BPDU tunnel egress switch SW-B, the destination multicast MAC address is checked and the packet is considered as a tunneled packet. Then the destination multicast MAC address of the packet is restored to standard destination multicast MAC address on the BPDU tunnel egress interface, and the packet is further processed and forwarded.

Configuration Notes

BPDU Tunneling cannot be configured on a LAG port or a physical port that belongs to a LAG. When we need to configure BPDU tunneling on the physical port that belongs to a LAG, we must first remove the physical port from the LAG port before configuration.

When configuring BPDU tunneling destination multicast MAC address, the following multicast MAC addresses cannot be used:

01:80:C2:00:00:00 to 01:80:C2:00:00:2f.

The destination multicast MAC address configured on the tunnel ingress switch and the egress switch must be the same value.

Configuring BPDU Tunneling

Procedure

Step1 Configure VLAN.

a) Configure VLAN ID.

set vlans <vlan-id>

b) Configure the interface to VLAN.

set interface gigabit-ethernet <port-id> family ethernet-switching vlan members <vlan-id>

Step2 Enable the BPDU tunneling function of the Layer 2 protocol.

set interface gigabit-ethernet <port-id> family ethernet-switching bpdu-tunneling protocol <protocol-type>

Step3 Configure the BPDU tunneling destination multicast MAC address to replace the original destination multicast MAC address.

set interface bpdu-tunneling destination-mac <destination-mac>

Configuration Example

Network Requirements

Private networks of User A and User B are located on two sides of the ISP network, as shown in Figure 2, SwitchA1, SwitchA2, SwitchB1 and SwitchB2 are the edge devices of the user network, SW-A and SW-B are the edge devices of the ISP network.
The User A network belongs to VLAN 100 and the User B network belongs to VLAN 200.
The BPDU tunneling function of the STP protocol is enabled so that Layer 2 protocol packets of User A and User B can cross the ISP network to complete the spanning tree calculation.

Figure 2 Networking Diagram for Configuring Transparent Transmission of Layer 2 Protocol Packets through BPDU Tunnel

Procedure

Step1 Enable STP function on SwitchA1, SwitchA2, SwitchB1 and SwitchB2.

# Configure SwitchA1

admin@XorPlus# set vlans vlan-id 100
admin@XorPlus# set interface gigabit-ethernet ge-1/1/3 family ethernet-switching vlan members 100
admin@XorPlus# set protocols spanning-tree enable true

# Configure SwitchA2

admin@XorPlus# set vlans vlan-id 200
admin@XorPlus# set interface gigabit-ethernet ge-1/1/4 family ethernet-switching vlan members 200
admin@XorPlus# set protocols spanning-tree enable true

# Configure SwitchB1

admin@XorPlus# set vlans vlan-id 100
admin@XorPlus# set interface gigabit-ethernet ge-1/1/3 family ethernet-switching vlan  members 100
admin@XorPlus# set protocols spanning-tree enable true

# Configure SwitchB2

admin@XorPlus# set vlans vlan-id 200
admin@XorPlus# set interface gigabit-ethernet ge-1/1/4 family ethernet-switching vlan members 200
admin@XorPlus# set protocols spanning-tree enable true

Step2 Configure VLAN on SW-A and SW-B.

# Configure SW-A

admin@XorPlus# set vlans vlan-id 100
admin@XorPlus# set vlans vlan-id 200
admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching vlan members 100
admin@XorPlus# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching vlan members 200
admin@XorPlus# set interface gigabit-ethernet te-1/1/49 family ethernet-switching port-mode trunk
admin@XorPlus# set interface gigabit-ethernet te-1/1/49 family ethernet-switching vlan members 100
admin@XorPlus# set interface gigabit-ethernet te-1/1/49 family ethernet-switching vlan members 200

# Configure SW-B

 admin@XorPlus# set vlans vlan-id 100
 admin@XorPlus# set vlans vlan-id 200
 admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching vlan members 100
 admin@XorPlus# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching vlan members 200
 admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching port- mode trunk
 admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching vlan members 100
 admin@XorPlus# set interface gigabit-ethernet te-1/1/50 family ethernet-switching vlan members 200

Step3 Enable the BPDU tunneling function of STP on SW-A and SW-B of different inbound interface.

# Configure SW-A

admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching bpdu-tunneling protocol stp
admin@XorPlus# set interface gigabit-ethernet ge-1/1/2 family Ethernet-switching bpdu-tunneling protocol stp

# Configure SW-B

admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching bpdu-tunneling protocol stp
admin@XorPlus# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching bpdu-tunneling protocol stp

Step4 Configure the BPDU tunneling destination multicast MAC address to replace the original destination multicast MAC address.

# Configure SW-A

admin@XorPlus# set interface bpdu-tunneling destination-mac 01:90:00:00:00:1a

# Configure SW-B

admin@XorPlus# set interface bpdu-tunneling destination-mac 01:90:00:00:00:1a

NOTE:

The destination multicast MAC address configured on the tunnel ingress switch and the egress switch must be the same value.

Configuring Flex Links Preemption Delay

User can configure two physical ports or two LAGs as Flex Links or configure one physical port and one LAG as Flex Links.

admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 backup-port interface ae1
admin@XorPlus# commit
Waiting for merging configuration.
Commit OK.
Save done.
admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 backup-port delay 10 
admin@XorPlus# commit
Waiting for merging configuration.
Commit OK.
Save done.
admin@XorPlus# set interface aggregate-ethernet ae2 backup-port interface ae3
admin@XorPlus# commit
Waiting for merging configuration.
Commit OK.
Save done.

Configuring the Preemption Mode

By default, the preemption mode is set, and the active interface is preferred. Beyond that, user can configure the "bandwidth" or "off" mode. The "bandwidth" mode calls for a higher bandwidth interface, and the "off" mode turns off preemption.

admin@XorPlus# set interface gigabit-ethernet ge-1/1/1 backup-port mode bandwidth 
admin@XorPlus# commit
Waiting for merging configuration.
Commit OK.
Save done.
admin@XorPlus#

Showing Flex Links on All Interfaces

User can view the state of user's Flex Links interfaces:

admin@XorPlus# run show interface flexlink 
Active Interface Backup Interface Mode Delay(seconds)
----------------- ----------------- --------- --------------
ge-1/1/1(up) ge-1/1/2(standby) bandwidth 10
admin@XorPlus#

Browser not supported