Set up Q-in-Q

Last update: May 30 2026

1. Enable Q-in-Q on a switch port.
2. Set up Q-in-Q on a Selectel firewall.

1. Enable Q-in-Q on a switch port

You can only enable Q-in-Q for a private network.

When enabling Q-in-Q, a short downtime of the private network for servers on the selected VLAN is possible.

1. Create a ticket requesting that Q-in-Q be enabled. In the ticket, specify the VLAN numbers, which you can see in the control panel: from the top menu, click Products → Dedicated Servers → Network → VLAN tab.
2. In the created ticket, wait for a response from a Selectel employee confirming that Q-in-Q has been enabled.

2. Set up Q-in-Q on a Selectel firewall

1. Connect to the Selectel firewall via the graphical interface.
2. In the Interfaces menu, go to the Assignments.
3. Open the QinQs tab.
4. Click + Add.
5. In the Parent Interface field, select the interface for which Q-in-Q will be configured.
6. In the First level tag field, enter the VLAN number. You can see it in the control panel: from the top menu, click Products → Dedicated Servers → Network → VLAN tab.
7. In the Tag(s) field, enter a tag for the VLAN — a number from 1 to 4094.
8. Click Save.
9. Open the Interfaces Assignments tab.
10. Click + Add in the row of the required Q-in-Q interface.
11. Click the name of the Q-in-Q interface you added.
12. Change the interface parameters.
13. Click Save.
14. Create allow rules for the interface.