[j-nsp] Juniper M7i & Cisco 3650 vlan configuration difficulties

[Hyunseog Ryu]

Hi Eric,

You are correct that Cisco has untagged native VLAN for dot1q trunk.
But in Chris' case, that's not the issue.
Chris configured VLAN 2 from Juniper side, but he didn't configure dot1q 
trunk from Cisco side.
That was the problem.
Since Cisco uses VLAN 1 as default for all ports, that's not going to 
work unless he changes the port to dot1q and setup VLAN2 interface with 
ip address.

Hyun


Eric Van Tol wrote:
> Chris,
> I hate these kinds of replies, but it may help nonetheless...
>
> I've not worked with the Cisco 3650, but in my experience with other
> Catalyst platforms, such as the 29xx and 35xx, the 'native' VLAN had to
> be modified on the Cisco side to some non-extistent VLAN, thanks to
> Cisco's VLAN1 designation of 'untagged'.  In Juniper-world (and pretty
> much everyone else), there's no concept of an 'untagged' VLAN:
>
> interface GigabitEthernet0/1
>  switchport
>  no ip address
>  switchport trunk encapsulation dot1q
>  switchport trunk native vlan 1000
>  switchport mode trunk
> !
>
> The VLAN1000 is a VLAN that exists solely on the Cisco switch and is not
> used for anything at all.  It could possibly be used for a back-end
> management VLAN, of course, but cannot be trunked to
> non-Cisco-"compliant" devices, AFAIK.
>
> -evt
>
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Hyunseog Ryu
> Sent: Tuesday, January 17, 2006 10:10 AM
> To: Chris Davies
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] Juniper M7i & Cisco 3650 vlan configuration
> difficulties
>
>
> Since you configured Juniper side as dot1q, you should configure Cisco 
> port as dot1q.
>
> Here is the example for Cisco 3650 configuration.
>
> interface GigabitEthernet0/1
>   switchport
>   no ip adress
>   switchport trunk encap dot1q
>   switchport trunk encapsulation dot1q
>   switchport mode trunk
> exit
> interface vlan2
>    ip address x.x.195.250 255.255.255.252
>
> This will do it.
>
> Hyun
>
>
> Chris Davies wrote:
>   
>> I've got a Juniper M7i and a Cisco 3650.  I need to run vlan-tagging
>>     
> on
>   
>> the interface that connects the two due to another piece of hardware 
>> which requires it.
>>
>> Juniper:
>>
>>      ge-1/3/0 {
>>          description "Aggregate LAN";
>>          vlan-tagging;
>>          link-mode full-duplex;
>>          unit 0 {
>>              vlan-id 2;
>>              family inet {
>>                  address xx.xx.195.249/30;
>>              }
>>          }
>>      }
>>
>> Cisco:
>>
>> interface GigabitEthernet0/1
>>   no switchport
>>   ip address x.x.195.250 255.255.255.252
>>
>> As soon as I add the vlan-tagging to the gigE port on the Juniper, the
>> two units cannot communicate.
>>
>> I also tried to configure the GigE port on the cisco as
>>
>> interface vlan 2
>>    ip address x.x.195.250 255.255.255.252
>> interface GigabitEthernet0/1
>>    switchport access vlan 2
>>
>> However, that also does not work.  Cisco's vlan is an internal 
>> designation, not 802.1q.
>>
>> If I try to turn on 802.1q encapsulation:
>>
>> #switchport trunk encapsulation dot1q
>> Command rejected: Gi0/1 not a switching port.
>>
>> #switchport encapsulation dot1q
>> Command rejected: Gi0/1 not a switching port.
>>
>> Is there a way to configure a port so that the primary interface
>>     
> doesn't 
>   
>> require vlan tagging, but a secondary interface does?  Or, is there a 
>> way to assign two other IPs as VLANS that are not attached to an 
>> interface but are able to be reached through a direct IP address?
>>
>> Thank you.
>> _______________________________________________
>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>> http://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>>
>>
>>   
>>     
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
>