Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Example: Configuring VSTP on a Trunk Port with Tagged Traffic

VSTP on a Trunk Port with Tagged Traffic Overview

In 802.1ad provider bridge networks (stacked VLANs), single-tagged access ports and double-tagged trunk ports can co-exist in a single spanning tree context. In this mode, the VLAN Spanning Tree Protocol (VSTP) can send and receive untagged Rapid Spanning Tree Protocol (RSTP) bridge protocol data units (BPDUs) on gigabit Ethernet (ge), 10 gigabit Ethernet (xe), and aggregated Ethernet (ae) interfaces. The untagged RSTP BPDUs interoperate with tagged VSTP BPDUs sent over the double-tagged trunk ports.

Double-tagging can be useful for Internet service providers, allowing them to use VLANs internally while mixing traffic from clients that are already VLAN-tagged.

Example: Configuring VSTP on a Trunk Port with Tagged Traffic

This example shows how to configure the VSTP to send and receive standard untagged Rapid Spanning Tree Protocol (RSTP) bridge protocol data units (BPDUs) on access trunks that interoperate with tagged VSTP BPDUs sent over the double-tagged trunk ports.

Requirements

This example uses the following hardware and software components:

  • Two CE devices (MX Series routers with DPCE or MPC cards)
  • Two PE devices (MX Series routers with DPCE or MPC cards)
  • Junos OS Release 12.3 or later running on the PE devices

Overview

This example shows how to configure VSTP on a trunk port with tagged traffic.

Topology

Figure 1 shows a sample topology in which two customer edge (CE) bridges are dual-homed to two provider edge (PE) devices. All of the PE-CE links are single-tagged trunks using C-VLANs 1-100. The core link between Devices PE1 and PE2 is a double-tagged trunk that carries traffic from both CE devices, using S-VLANs 100 and 200 to distinguish the CE traffic.

Two VSTP instances are created on the PE devices, one for each S-VLAN. The CE devices run the standard RSTP. The PE devices run VSTP on the core link while sending standard untagged RSTP BPDUs toward the CE devices.

Figure 1: Topology for VSTP Configured on a Trunk Port with Tagged Traffic

Topology for VSTP Configured on a Trunk
Port with Tagged Traffic

Configuration

CLI Quick Configuration

To quickly configure this example, copy the following commands, paste them into a text file, remove any line breaks, change any details necessary to match your network configuration, and then copy and paste the commands into the CLI at the [edit] hierarchy level.

Device PE1

set interfaces ge-2/0/1 flexible-vlan-taggingset interfaces ge-2/0/1 encapsulation flexible-ethernet-servicesset interfaces ge-2/0/1 unit 1 vlan-id 100set interfaces ge-2/0/1 unit 1 family bridge interface-mode trunkset interfaces ge-2/0/1 unit 1 family bridge inner-vlan-id-list 1-100set interfaces ge-2/0/1 unit 2 vlan-id 200set interfaces ge-2/0/1 unit 2 family bridge interface-mode trunkset interfaces ge-2/0/1 unit 2 family bridge inner-vlan-id-list 1-100set interfaces ge-2/0/4 encapsulation ethernet-vplsset interfaces ge-2/0/4 unit 0 description to_CE1 set interfaces ge-2/0/4 unit 0 family bridge interface-mode trunkset interfaces ge-2/0/4 unit 0 family bridge vlan-id-list 1-100set interfaces ge-2/1/1 unit 0 description to_CE2set interfaces ge-2/1/1 unit 0 family bridge interface-mode trunkset interfaces ge-2/1/1 unit 0 family bridge vlan-id-list 1-100set routing-instances vs1 instance-type virtual-switchset routing-instances vs1 interface ge-2/0/1.1set routing-instances vs1 interface ge-2/0/4.0set routing-instances vs1 protocols vstp vlan 100 interface ge-2/0/1set routing-instances vs1 protocols vstp vlan 100 interface ge-2/0/4 access-trunkset routing-instances vs1 bridge-domains bd vlan-id-list 1-100set routing-instances vs2 instance-type virtual-switchset routing-instances vs2 interface ge-2/0/1.2set routing-instances vs2 interface ge-2/1/1.0set routing-instances vs2 protocols vstp vlan 200 interface ge-2/0/1set routing-instances vs2 protocols vstp vlan 200 interface ge-2/1/1 access-trunkset routing-instances vs2 bridge-domains bd vlan-id-list 1-100

Device PE2

set interfaces ge-2/0/1 flexible-vlan-taggingset interfaces ge-2/0/1 encapsulation flexible-ethernet-servicesset interfaces ge-2/0/1 unit 1 vlan-id 100set interfaces ge-2/0/1 unit 1 family bridge interface-mode trunkset interfaces ge-2/0/1 unit 1 family bridge inner-vlan-id-list 1-100set interfaces ge-2/0/1 unit 2 vlan-id 200set interfaces ge-2/0/1 unit 2 family bridge interface-mode trunkset interfaces ge-2/0/1 unit 2 family bridge inner-vlan-id-list 1-100set interfaces ge-2/1/3 description to_CE1set interfaces ge-2/1/3 unit 0 family bridge interface-mode trunkset interfaces ge-2/1/3 unit 0 family bridge vlan-id-list 1-100set interfaces ge-2/0/5 description to_CE2set interfaces ge-2/0/5 unit 0 family bridge interface-mode trunkset interfaces ge-2/0/5 unit 0 family bridge vlan-id-list 1-100 set routing-instances vs1 instance-type virtual-switch set routing-instances vs1 interface ge-2/0/1.1 set routing-instances vs1 interface ge-2/1/3.0 set routing-instances vs1 protocols vstp vlan 100 interface ge-2/0/1 set routing-instances vs1 protocols vstp vlan 100 interface ge-2/1/3 access-trunk set routing-instances vs1 bridge-domains bd vlan-id-list 1-100set routing-instances vs2 instance-type virtual-switchset routing-instances vs2 interface ge-2/0/1.2set routing-instances vs2 interface ge-2/0/5.0set routing-instances vs2 protocols vstp vlan 200 interface ge-2/0/1set routing-instances vs2 protocols vstp vlan 200 interface ge-2/0/5 access-trunkset routing-instances vs2 bridge-domains bd vlan-id-list 1-100

Device CE1

set interfaces ge-2/0/7 unit 0 description to_PE1set interfaces ge-2/0/7 unit 0 family bridge interface-mode trunkset interfaces ge-2/0/7 unit 0 family bridge vlan-id-list 1-100set interfaces ge-2/1/4 unit 0 description to_PE2set interfaces ge-2/1/4 unit 0 family bridge interface-mode trunkset interfaces ge-2/1/4 unit 0 family bridge vlan-id-list 1-100set protocols rstp interface ge-2/0/7set protocols rstp interface ge-2/1/4set bridge-domains bd vlan-id-list 1-100

Device CE2

set interfaces ge-2/0/8 unit 0 description to_PE2set interfaces ge-2/0/8 unit 0 family bridge interface-mode trunkset interfaces ge-2/0/8 unit 0 family bridge vlan-id-list 1-100set interfaces ge-2/1/1 unit 0 description to_PE1set interfaces ge-2/1/1 unit 0 family bridge interface-mode trunkset interfaces ge-2/1/1 unit 0 family bridge vlan-id-list 1-100set protocols rstp interface ge-2/0/8set protocols rstp interface ge-2/1/1set bridge-domains bd vlan-id-list 1-100

Configuring PE1, PE2, CE1, and CE2

Step-by-Step Procedure

The following example requires you to navigate various levels in the configuration hierarchy. For information about navigating the CLI, see Using the CLI Editor in Configuration Mode in the CLI User Guide.

To configure Device PE1:

  1. Configure the network interfaces.
    [edit interfaces]user@PE1# set ge-2/0/1 flexible-vlan-tagginguser@PE1# set ge-2/0/1 encapsulation flexible-ethernet-servicesuser@PE1# set ge-2/0/1 unit 1 vlan-id 100user@PE1# set ge-2/0/1 unit 1 family bridge interface-mode trunkuser@PE1# set ge-2/0/1 unit 1 family bridge inner-vlan-id-list 1-100user@PE1# set ge-2/0/1 unit 2 vlan-id 200user@PE1# set ge-2/0/1 unit 2 family bridge interface-mode trunkuser@PE1# set ge-2/0/1 unit 2 family bridge inner-vlan-id-list 1-100
    user@PE1# set ge-2/0/4 encapsulation ethernet-vplsuser@PE1#set ge-2/0/4 unit 0 description to_CE1 user@PE1# set ge-2/0/4 unit 0 family bridge interface-mode trunkuser@PE1#set ge-2/0/4 unit 0 family bridge vlan-id-list 1-100
    user@PE1# set ge-2/1/1 unit 0 description to_CE2user@PE1# set ge-2/1/1 unit 0 family bridge interface-mode trunkuser@PE1# set ge-2/1/1 unit 0 family bridge vlan-id-list 1-100
  2. Configure the routing instances.
    [edit routing-instances]user@PE1# set vs1 instance-type virtual-switchuser@PE1# set vs1 interface ge-2/0/1.1user@PE1# set vs1 interface ge-2/0/4.0user@PE1# set vs1 protocols vstp vlan 100 interface ge-2/0/1user@PE1# set vs1 protocols vstp vlan 100 interface ge-2/0/4 access-trunkuser@PE1# set vs1 bridge-domains bd vlan-id-list 1-100
    user@PE1# set vs2 instance-type virtual-switchuser@PE1# set vs2 interface ge-2/0/1.2user@PE1# set vs2 interface ge-2/1/1.0user@PE1# set vs2 protocols vstp vlan 200 interface ge-2/0/1user@PE1# set vs2 protocols vstp vlan 200 interface ge-2/1/1 access-trunkuser@PE1# set vs2 bridge-domains bd vlan-id-list 1-100

Step-by-Step Procedure

To configure Device PE2:

  1. Configure the interfaces.
    [edit interfaces]user@PE2# set ge-2/0/1 flexible-vlan-tagginguser@PE2# set ge-2/0/1 encapsulation flexible-ethernet-servicesuser@PE2# set ge-2/0/1 unit 1 vlan-id 100user@PE2# set ge-2/0/1 unit 1 family bridge interface-mode trunkuser@PE2# set ge-2/0/1 unit 1 family bridge inner-vlan-id-list 1-100user@PE2# set ge-2/0/1 unit 2 vlan-id 200user@PE2# set ge-2/0/1 unit 2 family bridge interface-mode trunkuser@PE2# set ge-2/0/1 unit 2 family bridge inner-vlan-id-list 1-100
    user@PE2# set ge-2/1/3 description to_CE1user@PE2# set ge-2/1/3 unit 0 family bridge interface-mode trunkuser@PE2# set ge-2/1/3 unit 0 family bridge vlan-id-list 1-100
    user@PE2# set ge-2/0/5 description to_CE2user@PE2# set ge-2/0/5 unit 0 family bridge interface-mode trunkuser@PE2# set ge-2/0/5 unit 0 family bridge vlan-id-list 1-100
  2. Configure the routing instances.
    [edit routing-instances]user@PE2# set vs1 instance-type virtual-switchuser@PE2# set vs1 interface ge-2/0/1.1user@PE2# set vs1 interface ge-2/1/3.0user@PE2# set vs1 protocols vstp vlan 100 interface ge-2/0/1user@PE2# set vs1 protocols vstp vlan 100 interface ge-2/1/3 access-trunkuser@PE2# set vs1 bridge-domains bd vlan-id-list 1-100
    user@PE2# set vs2 instance-type virtual-switchuser@PE2# set vs2 interface ge-2/0/1.2user@PE2# set vs2 interface ge-2/0/5.0user@PE2# set vs2 protocols vstp vlan 200 interface ge-2/0/1user@PE2# set vs2 protocols vstp vlan 200 interface ge-2/0/5 access-trunkuser@PE2# set vs2 bridge-domains bd vlan-id-list 1-100

Step-by-Step Procedure

To configure CE1:

  1. Configure the interfaces.
    [edit interfaces]user@CE1# set ge-2/0/7 unit 0 description to_PE1user@CE1# set ge-2/0/7 unit 0 family bridge interface-mode trunkuser@CE1# set ge-2/0/7 unit 0 family bridge vlan-id-list 1-100
    user@CE1# set ge-2/1/4 unit 0 description to_PE2user@CE1# set ge-2/1/4 unit 0 family bridge interface-mode trunkuser@CE1# set ge-2/1/4 unit 0 family bridge vlan-id-list 1-100
  2. Configure the protocols.
    [edit protocols]user@CE1# set rstp interface ge-2/0/7user@CE1# set rstp interface ge-2/1/4
  3. Configure the bridge domain.
    [edit bridge-domains]user@CE1# set bd vlan-id-list 1-100

Step-by-Step Procedure

To configure CE2:

  1. Configure the interfaces.
    [edit interfaces]user@CE2# set ge-2/0/8 unit 0 description to_PE2user@CE2# set ge-2/0/8 unit 0 family bridge interface-mode trunkuser@CE2# set ge-2/0/8 unit 0 family bridge vlan-id-list 1-100
    user@CE2# set ge-2/1/1 unit 0 description to_PE1user@CE2# set ge-2/1/1 unit 0 family bridge interface-mode trunkuser@CE2# set ge-2/1/1 unit 0 family bridge vlan-id-list 1-100
  2. Configure the protocols.
    [edit protocols]user@CE2# set rstp interface ge-2/0/8user@CE2# set rstp interface ge-2/1/1
  3. Configure the bridge domain.
    [edit bridge-domains]user@CE2# set bd vlan-id-list 1-100

Results

From configuration mode, confirm your configuration by entering the show interfaces, show routing-instances, show protocols, and show bridge-domains commands. If the output does not display the intended configuration, repeat the instructions in this example to correct the configuration.

Device PE1

user@PE1# show interfaces
ge-2/0/1 {flexible-vlan-tagging;encapsulation flexible-ethernet-services;unit 1 {vlan-id 100;family bridge {interface-mode trunk;inner-vlan-id-list 1-100;}}unit 2 {vlan-id 200;family bridge {interface-mode trunk;inner-vlan-id-list 1-100;}}}
ge-2/0/4 {encapsulation ethernet-vpls;unit 0 {description to_CE1;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
ge-2/1/1 {unit 0 {description to_CE2;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
user@PE1# show routing-instances
vs1 {instance-type virtual-switch;interface ge-2/0/1.1;interface ge-2/0/4.0;protocols {vstp {vlan 100 {interface ge-2/0/1;interface ge-2/0/4 {access-trunk;}}}}bridge-domains {bd {vlan-id-list 1-100;}}}
vs2 {instance-type virtual-switch;interface ge-2/0/1.2;interface ge-2/0/1.0;protocols {vstp {vlan 200 {interface ge-2/0/1;interface ge-2/1/1 {access-trunk;}}}}bridge-domains {bd {vlan-id-list 1-100;}}}

Device PE2

user@PE2# show interfaces
ge-2/0/1 {flexible-vlan-tagging;encapsulation flexible-ethernet-services;unit 1 {vlan-id 100;family bridge {interface-mode trunk;inner-vlan-id-list 1-100;}}unit 2 {vlan-id 200;family bridge {interface-mode trunk;inner-vlan-id-list 1-100;}}}
ge-2/0/5 {description to_CE2;unit 0 {family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
ge-2/1/3 {description to_CE1;unit 0 {family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
user@PE2# show routing-instances
vs1 {instance-type virtual-switch;interface ge-2/0/1.1;interface ge-2/1/3.0;protocols {vstp {vlan 100 {interface ge-2/0/1;interface ge-2/1/3 {access-trunk;}}}}bridge-domains {bd {vlan-id-list 1-100;}}}
vs2 {instance-type virtual-switch;interface ge-2/0/1.2;interface ge-2/0/5.0;protocols {vstp {vlan 200 {interface ge-2/0/1;interface ge-2/0/5 {access-trunk;}}}}bridge-domains {bd {vlan-id-list 1-100;}}}

Device CE1

user@CE1# show interfaces
ge-2/0/7 {unit 0 {description to_PE1;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
ge-2/1/4 {unit 0 {description to_PE2;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
user@CE1# show protocols
rstp {interface ge-2/0/7;interface ge-2/1/4;}
user@CE1# show bridge-domains
bd {vlan-id-list 1-100;}

Device CE2

user@CE2 show interfaces
ge-2/0/8 {unit 0 {description to_PE2;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
ge-2/1/1 {unit 0 {description to_PE1;family bridge {interface-mode trunk;vlan-id-list 1-100;}}}
user@CE2# show protocols
rstp {interface ge-2/0/8;interface ge-2/1/1;}
user@CE2# show bridge-domains
bd {vlan-id-list 1-100;}

If you are done configuring the device, enter commit from configuration mode.

Verification

Confirm that the configuration is working properly.

Verifying That the Interfaces Are Operational

Purpose

Verify that the interfaces are operational.

Action

From operational mode, enter the show spanning-tree interface routing-instance command.

user@PE1> show spanning-tree interface routing-instance vs1
Spanning tree interface parameters for VLAN 100

Interface    Port ID    Designated      Designated         Port    State  Role
                         port ID        bridge ID          Cost
ge-2/0/1        128:82       128:82  32868.0021590f37d0     20000  FWD    DESG 
ge-2/0/4        128:85       128:85  32868.0021590f37d0     20000  FWD    DESG 

Meaning

The output shows the status of the interfaces configured for VLAN 100.

Verifying the STP Bridge Parameters of the Routing Instances

Purpose

Verify the STP bridge parameters configured for the routing instances.

Action

From operational mode, enter the show spanning-tree bridge routing-instance command.

user@PE1> show spanning-tree bridge routing-instance vs1
STP bridge parameters 
Routing instance name               : vs1
Enabled protocol                    : RSTP

STP bridge parameters for VLAN 100
  Root ID                           : 32868.00:21:59:0f:37:d0
  Hello time                        : 2 seconds
  Maximum age                       : 20 seconds
  Forward delay                     : 15 seconds
  Message age                       : 0 
  Number of topology changes        : 2
  Time since last topology change   : 687 seconds
  Local parameters 
    Bridge ID                       : 32868.00:21:59:0f:37:d0
    Extended system ID              : 100

Meaning

The output shows the status of the STP bridge parameters for routing instance vs1.

Displaying STP Statistics for the Configured Bridge

Purpose

Display spanning-tree statistics for the configured bridge.

Action

From operational mode, enter the show spanning-tree statistics bridge command.

user@PE1> show spanning-tree statistics bridge
STP Context  : default
STP Instance : 0  
Number of Root Bridge Changes: 0         
Number of Root Port Changes:   0         

STP Context  : x/default
STP Instance : 0  
Number of Root Bridge Changes: 0         
Number of Root Port Changes:   0         

STP Context  : vs1
STP Instance : 0  
Number of Root Bridge Changes: 2            Last Changed: Thu Sep 20 15:12:18 2012  
Number of Root Port Changes:   1            Last Changed: Thu Sep 20 15:01:13 2012  
Recent TC  Received:  ge-2/0/1.1            Received    : Thu Sep 20 15:01:17 2012   

STP Context  : vs2
STP Instance : 0  
Number of Root Bridge Changes: 2            Last Changed: Thu Sep 20 15:10:25 2012  
Number of Root Port Changes:   2            Last Changed: Thu Sep 20 15:10:25 2012  
Recent TC  Received:  ge-2/1/1.0            Received    : Thu Sep 20 15:10:47 2012   

STP Context  : CE1/default
STP Instance : 0  
Number of Root Bridge Changes: 0         
Number of Root Port Changes:   0         
Recent TC  Received:  ge-2/1/4.0            Received    : Thu Sep 20 15:12:15 2012   

Meaning

The command output shows spanning-tree statistics for the configured bridge.

Published: 2013-02-07

Supported Platforms

Published: 2013-02-07