Skip to main content
Customize Q-in-Q
Last update:

Customize Q-in-Q

  1. Enable Q-in-Q on the switch port.
  2. Configure Q-in-Q on the Selectel firewall.

Enable Q-in-Q on the switch port⁠

Q-in-Q can only be enabled for a private network.

When Q-in-Q is enabled, there may be a brief private network down time for servers on the selected VLAN.

  1. Create a ticket with a request to enable Q-in-Q. Specify the VLAN numbers in the ticket, you can look in the control panels under Servers and hardware → Network → tab VLAN.
  2. In the ticket created, wait for a Selectel employee to respond that Q-in-Q is enabled.

Configure Q-in-Q on the Selectel firewall⁠

  1. Connect to the Selectel firewall through the graphical interface.
  2. On the menu. Interfaces go to Assignments.
  3. Open the tab QinQs.
  4. Click + Add.
  5. In the field Parent Interface select the interface to which Q-in-Q will be configured.
  6. In the field First level tag enter the VLAN number. You can look in control panels under Servers and hardware → Network → tab VLAN.
  7. In the field Tag(s) Enter the tag for the VLAN, a number from 1 to 4094.
  8. Click Save.
  9. Open the tab Interfaces Assignments.
  10. Click in the row of the desired interface Q-in-Q + Add.
  11. Click the name of the Q-in-Q interface you added.
  12. Change the interface settings.
  13. Click Save.
  14. Create permissive rules for the interface.