Hi all,
Is it possible to configure port that is either esi-lag or standalone, but it is untagged/access? Not tagged. I was thinking about using apply-config-groups for interface, but it is not working. Below are two approaches. Neither worked, it cannot be commited. QFX5120-48y, 24.2R1.17
-
- Common config under "services evpn evpn-vxlan"
- server SERVER1 {
single-home-id 112;
vlan-id-list 16;
interface ge-0/0/12;
apply-config-groups native-vlan-16;
no-lacp;
}
- possibility a) "access"
- groups { native-vlan-16 {
interfaces {
<*> {
unit 0 {
family ethernet-switching {
interface-mode access; ##### ACCESS
}
}
}
}
}
- ae1136 {
vlan-tagging;
##
## Warning: native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
## '16' was inherited from group 'native-vlan-16'
##
native-vlan-id 16;
encapsulation flexible-ethernet-services;
unit 1 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 16;
}
}
}
}
- {master:0}[edit]
root@SWITCH# commit check
[edit interfaces ae1136 unit 0 family ethernet-switching interface-mode]
'interface-mode access'
interface-mode access is allowed only for untagged interfaces, also not allowed with flexible-vlan-tagging and extended-vlan-bridge
error: configuration check-out failed: (statements constraint check failed)
- possiblity b) via native-vlan-id
- groups { native-vlan-16 {
interfaces {
<*> {
native-vlan-id 16;
}
}
}
- ae1136 {
vlan-tagging;
##
## Warning: native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
## '16' was inherited from group 'native-vlan-16'
##
native-vlan-id 16;
encapsulation flexible-ethernet-services;
unit 1 {
family ethernet-switching {
interface-mode trunk;
vlan {
members 16;
}
}
}
}
- root@SWITCH# commit check
[edit interfaces ae1136 native-vlan-id]
'native-vlan-id 16'
native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
error: configuration check-out failed: (statements constraint check failed)
Whole evpn config from one switch. I know, vlan is missing and so it is not correct config, but idea is how to configure it and then commit. Should I also change also flexible-ethernet-services to something else in apply-group?
evpn {
device-attribute {
peer-id 1;
loopback {
peer1-subnet 192.168.1.1/32;
peer2-subnet 192.168.2.1/32;
}
system-id 10:14:15:16:17:10;
peer-to-peer {
peer-subnet inet 10.1.1.0/31 interface-name et-0/0/54;
}
}
evpn-vxlan {
irb IRB_10 {
vlan-id 10;
subnet-address inet 10.10.1.1/24;
}
server SERVER1 {
single-home-id 112;
vlan-id-list 16;
interface ge-0/0/12;
apply-config-groups native-vlan-16;
no-lacp;
}
}
}
Thanks
Jozef
------------------------------
JOZEF KLACKO
------------------------------