Reset Search



How to configure l2pt profile in Extreme Switches

« Go Back


TitleHow to configure l2pt profile in Extreme Switches
This article explains the procedure to create l2pt profile for tunneling the following layer 2 protocols across a L2 VLAN or the VMAN. 

• Cisco Discovery Protocol (CDP)
• Unidirectional Link Detection (UDLD)
• VLAN Trunking Protocol (VTP)
• Port Aggregation Protocol (PAgP)
• Dynamic Trunking Protocol (DTP)
• Link Aggregation Control Protocol (LACP)
• Link Layer Discovery Protocol (LLDP)
• Spanning Tree Protocol (STP)
• Extreme Discovery Protocol (EDP)
  • EXOS 15.4 and above
  • Summit and BlackDiamond series

User-added image

Endpoints 1 and 2 can be any device which is running L2 protocols. (CDP/LACP etc.,)
If SW1 and SW2 are acting as a pure L2 VLAN or VMAN environment for these end points, they would not able to exchange these L2 protcol packsts by default. We need to create a layer 2 tunneling protocol profile to overcome this limitation. 
Step 1: Create l2pt profile in both the switches. 
create l2pt profile <profile name>
Step 2: Create and define a protocol filter matching the  l2 packets. By default, there are some protocol filters created and defined. 
# show protocol  filter ---> output truncated to show only the l2 protocols which are predefined. 
Protocol Name           Protocol Id   Destination        Field   Field   Field
                       Type   Value   Address            Offset  Value   Mask
---------------------  -----  ------  -----------------  ------  ------  ------
cdp                    snap   0x2000  01:00:0c:cc:cc:cc
dtp                    snap   0x2004  01:00:0c:cc:cc:cc
edp                    snap   0x00bb  00:e0:2b:00:00:00
stp                    llc    0x4242  01:80:c2:00:00:00
vtp                    snap   0x2003  01:00:0c:cc:cc:cc
lacp                   etype  0x8809  01:80:c2:00:00:02      14  01      ff
lldp                   etype  0x88cc  01:80:c2:00:00:0e
pagp                   snap   0x0104  01:00:0c:cc:cc:cc
udld                   snap   0x0111  01:00:0c:cc:cc:cc
If you would like to tunnel any of the above L2 protocols between end points, you need not create a new filter. 
if there is any specific L2 packet that you would like to tunnel across, you can create and define a new protocol filter. 
create protocol filter <name>
configure protocol filter <name> add dest-mac <mac-address> <snap/llc/etype/field> <value>
Step 3: Add the protocol filters to the l2pt profile. 
configure l2pt profile <profile name> add protocol filter <filter name>
Step 4: Map the l2pt profile to the VMAN or VLAN on the ingress ports for the l2 packets. 
configure vlan <name> ports <port-list> l2pt profile <profile name>
configure vman <name> ports <port-list l2pt profile <profile name>
To verify if the traffic is tunneled, check the following command: 
show vman <name> l2pt detail
show vlan <name> l2pt detail

The l2pt profile only needs to be added to the untagged vman port, the service/customer port.

Additional notes
Sample configuration of switches SW1 and SW2 for the topology above: 
create vlan vlan1
configure vlan vlan1 tag 100
configure vlan vlan1 add ports 2 tagged

create l2pt profile allowl2protocols
create protocol filter new
configure protocol filter new add dest-mac 01:00:00:00:00:0a etype 0x2100 
configure l2pt profile allowl2protocols add protocol filter cdp
configure l2pt profile allowl2protocols add protocol lacp
configure l2pt profile allowl2protocols add protocol new

configure vlan vlan1 ports 2 l2pt allowl2protocols
Please click the link below to check how to allow cdp packets across VMAN. 
Layer two (layer 2) protocol packets does not pass though the VMAN tunnel after upgrade of EXOS




Was this article helpful?



Please tell us how we can make this article more useful.

Characters Remaining: 255