In a SP environment, you need to hand off two VLANs to a customer, is
there any advantage or disadvantage in doing the following two setups?
- One untagged and one tagged VLAN
- Two tagged VLAN and no untagged VLAN
I can't think of anything other than some equipment may not let you
have no untagged VLAN. But it's bugging me that something could go
wrong by not having untagged native VLAN that I can't think of.
I'd think that going with two tagged VLAN's is the better route. You will then be forcing the customer
to adhere to the VLAN's that you have specified and reserved for them.
It's also a security advantage because if you go with untagged, who knows if someone might be able
to vlan hop/double tag their way into someone elses network....
I would go with tagged for both VLANs. If you can't tag the native in your
equipment create a dummy VLAN and use it as native on the link and all VLANs
will be tagged. If you know the customer will be using more VLANs later on
Q-in-Q might be a good solution or you will have to transport a lot of VLANs
in your network and they might collide with other customers etc.
/Daniel