Switching

Is it possible to:

- Create a new VLAN id 100

- Put VLAN 100 on fe-0/0/0 and fe-0/0/1 (to get the two ports to act like a switch)

- Assign an IP address to "the VLAN" (to provide routing for that VLAN)

- The router IP address is accessible from a computer connected to fe-0/0/0, even if fe-0/0/1 is down

- The router IP address is accessible from a computer connected to fe-0/0/1, even if fe-0/0/0 is down

===

If that is possible, is it possible to complicate it further:

- Create a new VLAN id 100

- Create a new VLAN id 200

- Create a new VLAN id 300

- Put VLANs 100 and 200 on fe-0/0/0 (using 802.1q)

- Put VLANs 100 and 300 on fe-0/0/1 (using 802.1q)

- Assign an IP address to "VLAN 100" (to provide routing for that VLAN)

- The VLAN 100 IP address is accessible from fe-0/0/0 even if fe-0/0/1 is down

- The VLAN 100 IP address is accessible from fe-0/0/1 even if fe-0/0/0 is down

Thank you,

Chris

That is all possbile.  You will need to use an RVI "routed virtual instance" like this:

Part 1:

set vlans FINANCE vlan-id 100
set vlans FINANCE l3-interface vlan.100

set interfaces vlan unit 100 family inet address 192.168.29.2/24

The add both those interfaces to the FINANCE VLAN

Part 2:

If you are actually connecting computers to these interfaces then you can make them trunk groups with multiple VLANs.  This is commonly done with ESX servers that house multiple VLANs.

You could also include one tagged VLAN and specify the other as a "native-vlan."  Depends on your needs.

SRXs,

Thank you for your help.  WHen I tried to do "part 2" I got a warning: "An interface cannot have both family ethernet-switching and vlan-tagging configured".  Is my SRX100 tellingme that "part 2" is impossible?

Thank you,

Chris

Can someone please tell me why this produces an error?  What is the concept that I do not understand?  Where is the documentation that describes the fundamental concepts that someone needs to know wrt tagging and switching?

interfaces {
    fe-0/0/4 {
        vlan-tagging
        unit 0 {
            ##
            ## Warning: An interface cannot have both family ethernet-switching and vlan-tagging configured
            ##
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ vlan10 vlan11 vlan12 ];
                }
            }
        }
}

Thank you,

Chris

Hi Chris,

You don't need the "vlan-tagging" option (that's for router interfaces), "port-mode trunk" under "family ethernet-switching" already allows for vlan tagged packets on the interface. Try committing the config with that removed.