ExpressRoute Direct Connection Encapsulation: QinQ vs Dot1Q

Question

ExpressRoute Direct Connection Encapsulation: QinQ vs Dot1Q

ares 206

What is the difference between encapsulation types QinQ and Dot1Q for activating an ExpressRoute Direct connection?

If Dot1Q is chosen on a 10GB link, can more circuits still be activated, and are there any limitations? Additionally, is it possible to activate both private peering and Microsoft peering?

G Sree Vidya 825 Reputation points Microsoft External Staff

2025-03-18T01:12:09.3333333+00:00

Hello ares

We haven’t heard from you on the last response and was just checking back to see if the above information was helpful.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
G Sree Vidya 825 Reputation points Microsoft External Staff

2025-03-19T01:05:12.3433333+00:00

Hi ares

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

1 answer

Your answer

G Sree Vidya 825 Reputation points Microsoft External Staff

2025-03-18T01:12:09.3333333+00:00

Hello ares

We haven’t heard from you on the last response and was just checking back to see if the above information was helpful.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
G Sree Vidya 825 Reputation points Microsoft External Staff

2025-03-19T01:05:12.3433333+00:00

Hi ares

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

Answer 1

Hi ares

QinQ and Dot1Q are used for VLAN tagging, which can be referred to as segregation.

QinQ VLAN Tagging allows for isolated routing domains on a per ExpressRoute circuit basis. Azure dynamically gives an S-Tag at circuit creation that can't be changed. Each peering on the circuit (Private and Microsoft) uses a unique C-Tag as the VLAN. The C-Tag isn't required to be unique across circuits on the ExpressRoute Direct ports.
Dot1Q VLAN Tagging allows for a single tagged VLAN on a per ExpressRoute Direct port pair basis. A C-Tag used on a peering must be unique across all circuits and peerings on the ExpressRoute Direct port pair.

Refer: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-erdirect-about

Yes! you can enable both peering as single Physical Connection can have maximum of 2 Peerings (MS and Private)
In a single ExpressRoute Circuit from a Service Provider is capable of providing 2 Physical Connections. (from ISP end to Azure end)

Refer :https://learn.microsoft.com/en-us/answers/questions/1573052/express-route-private-and-microsoft-peering

If Dot1Q is chosen on a 10GB link, can more circuits still be activated, and are there any limitations?

Regarding the above question, I would request you to elaborate to assist you better, if possible, please provide your architecture diagram.

For ExpressRoute circuit limitations, there are various constraints based on the SKU, Routes, and Azure server limits. You can refer to this resource for more details:

Refer: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/azure-subscription-service-limits#azure-expressroute-limits

https://learn.microsoft.com/en-us/azure/expressroute/rate-limit

I hope this information helps to you and let me know if you have any further questions, we will be happy to help you.

If it was helpful, please ACCEPT the Answer and click "UpVOTE" on this post to let us know.

Thank You.

Share via

ExpressRoute Direct Connection Encapsulation: QinQ vs Dot1Q

1 answer

Your answer