Tunneling Q-in-Q traffic through an EVPN-VXLAN overlay network

This switches that function as Layer 2 VXLAN tunnel endpoints (VTEPs) can tunnel single- and double-tagged Q-in-Q packets through an Ethernet VPN-Virtual Extensible LAN (EVPN-VXLAN) overlay network. In addition to tunneling Q-in-Q packets, the ingress and egress VTEPs can perform the following Q-in-Q actions:

• Delete, or pop, an outer service provider VLAN (S-VLAN) tag from an incoming packet.
• Add, or push, an outer S-VLAN tag onto an outgoing packet.
• Map a configured range of customer VLAN (C-VLAN) IDs to an S-VLAN.

The ingress and egress VTEPs support the tunneling of Q-in-Q packets and the Q-in-Q actions in the context of specific traffic patterns. 

To enable the tunneling of the Q-in-Q packets on the VTEPs, you must configure a flexible VLAN tagging interface, which can transmit 802.1Q VLAN single- and double-tagged packets, on ingress and egress VTEPs. It is also important to configure the interface to retain the inner C-VLAN tag while a packet is tunneled.