Step 1

On the menu bar, click Fabric > Access Policies.

Step 2

On the Navigation bar, click Policies > Interface > L2 Interface.

Step 3

Right-click L2 Interface, select Create L2 Interface Policy, and perform the following actions:

1. In the Name field, type a name for the Layer 2 Interface policy.

2. Optional. Add a description of the policy. We recommended that you describe the purpose for the L2 Interface Policy.

3. To create an interface policy that enables an interface to be used as an edge port in a Dot1q Tunnel, in the QinQ field, click edgePort.

4. To create an interface policy that enables an interface to be used as a core port in Dot1q Tunnels, in the QinQ field, click corePort.

Step 4

Apply the L2 Interface policy to a Policy Group with the following steps:

1. Click on Fabric > Access Policies > Interfaces > Leaf Interfaces and expand Policy Groups.

2. Right-click Leaf Access Port, PC Interface, or VPC Interface and choose one of the following, depending on the type of interface you are configuring for the tunnel.

   • Create Leaf Access Port Policy Group

   • Create PC Policy Group

   • Create VPC Policy Group

3. In the resulting dialog box, perform the following actions:

   • In the Name field, type a name for the policy group.

     Optional. Add a description of the policy group. We recommend that you describe the purpose of the policy group.

   • In the L2 Interface Policy field, click on the down-arrow and choose the L2 Interface Policy that you previously created.

   • If you are tunneling the CDP Layer 2 Tunneled Protocol, click on the CDP Policy down-arrow, and in the policy dialog box add a name for the policy, disable the Admin State and click Submit..

   • If you are tunneling the LLDP Layer 2 Tunneled Protocol, click on the LLDP Policy down-arrow, and in the policy dialog box add a name for the policy, disable the Transmit State and click Submit.

   • Click Submit.

Step 5

Create a Leaf Interface Profile with the following steps:

1. Click on Fabric > Access Policies > Interfaces > Leaf Interfaces > Profiles.

2. Right-click on Profiles, select Create Leaf Interface Profile, and perform the following steps:

   • In the Name field, type a name for the Leaf Interface Profile.

     Optional. Add a description.

   • In the Interface Selectors field, click the +, and enter the following information:

     • In the Name field, type a name for the interface selector.

       Optional. Add a description.

     • In the Interface IDs field, enter the Dot1q Tunnel interface or multiple interfaces to be included in the tunnel.

     • In the Interface Policy Group field, click on the down arrow and select the interface policy group that you previously created .

Step 6

To create a static binding of the tunnel configuration to a port, click on Tenant > Networking > Dot1Q Tunnels. Expand Dot1Q Tunnels and click on the Dot1Q Tunnels policy_name perviously created and perform the following actions:

1. Expand the Static Bindings table to open Create Static Binding dialog box.

2. In the Port field, select the type of port.

3. In the Node field, select a node from the drop-down.

4. In the Path field, select the interface path from the drop-down and click Submit.

Step 1

Create a Dot1q Tunnel using the REST API with XML such as the following example.

<fvTnlEPg name="VRF64_dot1q_tunnel" qiqL2ProtTunMask="lldp" accEncap="vlan-10" fwdCtrl="mac-learn-disable"  >
    <fvRsTnlpathAtt  tDn="topology/pod-1/paths-101/pathep-[eth1/13]"/>
</fvTnlEPg>

Step 2

Configure a Layer 2 Interface policy with static binding with XML such as the following example.

<l2IfPol name="VRF64_L2_int_pol" qinq="edgePort"  />

Step 3

Apply the Layer 2 Interface policy to a Leaf Access Port Policy Group with XML such as the following example.

<infraAccPortGrp name="VRF64_L2_Port_Pol_Group" >
    <infraRsL2IfPol tnL2IfPolName="VRF64_L2_int_pol"/>
</infraAccPortGrp>

Step 4

Configure a Leaf Profile with an Interface Selector with XML such as the following example:

<infraAccPortP name="VRF64_dot1q_leaf_profile" >
    <infraHPortS name="vrf64_access_port_selector" type="range">
        <infraPortBlk name="block2" toPort="15" toCard="1" fromPort="13" fromCard="1"/>
        <infraRsAccBaseGrp tDn="uni/infra/funcprof/accportgrp-VRF64_L2_Port_Pol_Group" />
    </infraHPortS>
</infraAccPortP>

Step 1

Create a Dot1q Tunnel using the REST API with XML such as the following example.

    <fvTnlEPg name="WEB" qiqL2ProtTunMask=lldp accEncap="vlan-10" fwdCtrl="mac-learn-disable" >
        <fvRsTnlpathAtt tDn="topology/pod-1/paths-101/pathep-[po2]"/>
      </fvTnlEPg>

Step 2

Configure a Layer 2 Interface policy with static binding with XML such as the following example.

<l2IfPol name="testL2IfPol" qinq="edgePort"/>

Step 3

Apply the Layer 2 Interface policy to a PC Interface Policy Group with XML such as the following:

<infraAccBndlGrp name="po2" lagT="link">
   <infraRsL2IfPol tnL2IfPolName="testL2IfPol"/>
    </infraAccBndlGrp>

Step 4

Configure a Leaf Profile with an Interface Selector with XML such as the following:

<infraAccPortP name="PC">
   <infraHPortS name="allow" type="range">
    <infraPortBlk name="block2" fromCard="1" toCard="1" fromPort="10" toPort="11" />
    <infraRsAccBaseGrp tDn="uni/infra/funcprof/accbundle-po2"/>
   </infraHPortS>
  </infraAccPortP>

Step 1

Create an 802.1Q tunnel using the REST API with XML such as the following example.

<fvTnlEPg name="WEB" qiqL2ProtTunMask=lldp accEncap="vlan-10" fwdCtrl="mac-learn-disable" >
        <fvRsTnlpathAtt tDn="topology/pod-1/protpaths-101-102/pathep-[po4]" />
      </fvTnlEPg>

Step 2

Configure a Layer 2 interface policy with static binding with XML such as the following example.

<l2IfPol name="testL2IfPol" qinq="edgePort"/>

Step 3

Apply the Layer 2 Interface policy to a VPC Interface Policy Group with XML such as the following:

<infraAccBndlGrp name="po4" lagT="node">
   <infraRsL2IfPol tnL2IfPolName="testL2IfPol"/>
   </infraAccBndlGrp>

Step 4

Configure a Leaf Profile with an Interface Selector with XML such as the following:

  <infraAccPortP name="VPC">
   <infraHPortS name="allow" type="range">
    <infraPortBlk name="block2" fromCard="1" toCard="1" fromPort="10" toPort="11" />
    <infraRsAccBaseGrp tDn="uni/infra/funcprof/accbundle-po4"/>
   </infraHPortS>
  </infraAccPortP>