Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 2 Networking Configuration Guide, Release 6.2(x)

Configure 802.1Q tunnels using the NX-OS style CLI

Updated: July 7, 2026

Want to summarize with AI?

Log in

Configure a Dot1q Tunnel and the interfaces for use in the tunnel using the NX-OS Style CLI.

Before you begin

Configure the tenant that will use the Dot1q Tunnel.

Follow these steps to configure 802.1Q tunnels using the NX-OS style CLI:

Note

You can use ports, port-channels, or virtual port channels for interfaces included in a Dot1q Tunnel. Detailed steps are included for configuring ports. See the examples below for the commands to configure edge and core port-channels and virtual port channels.

Note

Dot1q Tunnels must include 2 or more interfaces. Repeat the steps (or configure two interfaces together), to mark each interface for use in a Dot1q Tunnel. In this example, two interfaces are configured as edge-switch ports, used by a single customer.

Create a Dot1q Tunnel and configure the interfaces for use in the tunnel using the NX-OS Style CLI, with the following steps:

  1. Configure at least two interfaces for use in the tunnel.

  2. Create a Dot1q Tunnel.

  3. Associate all the interfaces with the tunnel.

Procedure

  1. configure

    Enters configuration mode.

    Example:

    apic1# configure

  2. Configure two interfaces for use in an 802.1Q tunnel, with the following steps:

  3. leaf ID

    Identifies the leaf where the interfaces of the Dot1q Tunnel will be located.

    Example:

    apic1(config)# leaf 101

  4. interface ethernet slot/port

    Identifies the interface or interfaces to be marked as ports in a tunnel.

    Example:

    apic1(config-leaf)# interface ethernet 1/13-14

  5. switchport mode dot1q-tunnel {edgePort | corePort}

    Marks the interfaces for use in an 802.1Q tunnel, and then leaves the configuration mode.

    The example shows configuring some interfaces for edge port use. Repeat steps 3 to 5 to configure more interfaces for the tunnel.

    Example:

    apic1(config-leaf-if)# switchport mode dot1q-tunnel edgePort
apic1(config-leaf-if)# exit
apic1(config-leaf)# exit
apic1(config)# exit

  6. Create an 802.1Q tunnel with the following steps:

  7. leaf ID

    Returns to the leaf where the interfaces are located.

    Example:

    apic1(config)# leaf 101

  8. interface ethernetslot/port

    Returns to the interfaces included in the tunnel.

    Example:

    apic1(config-leaf)# interface ethernet 1/13-14

  9. switchport tenanttenant-namedot1q-tunnel tunnel-name

    Associates the interfaces to the tunnel and exits the configuration mode.

    Example:

    apic1(config-leaf-if)# switchport  tenant  tenant64  dot1q-tunnel  vrf64_edgetunnel
apic1(config-leaf-if)# exit

  10. Repeat steps 7 to 10 to associate other interfaces with the tunnel.