Switching

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
  • 1.  EZ-LAG untagged interface

    Posted 13 days ago

    Hi all,

    Is it possible to configure port that is either esi-lag or standalone, but it is untagged/access? Not tagged. I was thinking about using apply-config-groups for interface, but it is not working. Below are two approaches. Neither worked, it cannot be commited. QFX5120-48y, 24.2R1.17

      • Common config under "services evpn evpn-vxlan"
      •   server SERVER1 {
                    single-home-id 112;
                    vlan-id-list 16;
                    interface ge-0/0/12;
                    apply-config-groups native-vlan-16;
                    no-lacp;
                }
    • possibility a) "access"
      • groups { native-vlan-16 {
            interfaces {
                <*> {
                    unit 0 {
                        family ethernet-switching {
                            interface-mode access;  ##### ACCESS
                        }
                    }
                }                               
            }
        }
      • ae1136 {
            vlan-tagging;
            ##
            ## Warning: native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
            ## '16' was inherited from group 'native-vlan-16'
            ##
            native-vlan-id 16;
            encapsulation flexible-ethernet-services;
            unit 1 {
                family ethernet-switching {
                    interface-mode trunk;
                    vlan {
                        members 16;
                    }
                }
            }
      • {master:0}[edit]
        root@SWITCH# commit check 
        [edit interfaces ae1136 unit 0 family ethernet-switching interface-mode]
          'interface-mode access'
            interface-mode access is allowed only for untagged interfaces, also not allowed with flexible-vlan-tagging and extended-vlan-bridge
        error: configuration check-out failed: (statements constraint check failed)
    • possiblity b) via native-vlan-id
      • groups { native-vlan-16 {
            interfaces {
                <*> {
                    native-vlan-id 16;
                }
            }
        }
      • ae1136 {
            vlan-tagging;
            ##
            ## Warning: native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
            ## '16' was inherited from group 'native-vlan-16'
            ##
            native-vlan-id 16;
            encapsulation flexible-ethernet-services;
            unit 1 {
                family ethernet-switching {
                    interface-mode trunk;
                    vlan {
                        members 16;
                    }
                }
            }
        }
      • root@SWITCH# commit check 
        [edit interfaces ae1136 native-vlan-id]
          'native-vlan-id 16'
            native-vlan-id can be specified with flexible-vlan-tagging mode or with interface-mode trunk
        error: configuration check-out failed: (statements constraint check failed)

    Whole evpn config from one switch.  I know, vlan is missing and so it is not correct config, but idea is how to configure it and then commit. Should I also change also flexible-ethernet-services to something else in apply-group? 

    evpn {
        device-attribute {
            peer-id 1;
            loopback {
                peer1-subnet 192.168.1.1/32;
                peer2-subnet 192.168.2.1/32;
            }
            system-id 10:14:15:16:17:10;
            peer-to-peer {
                peer-subnet inet 10.1.1.0/31 interface-name et-0/0/54;
            }
        }
        evpn-vxlan {
            irb IRB_10 {
                vlan-id 10;
                subnet-address inet 10.10.1.1/24;
            }
            server SERVER1 {
                single-home-id 112;
                vlan-id-list 16;
                interface ge-0/0/12;
                apply-config-groups native-vlan-16;
                no-lacp;
            }
        }
    }

    Thanks

    Jozef



    ------------------------------
    JOZEF KLACKO
    ------------------------------