[j-nsp] Logical Interfaces 802.1ad

Onam Rubio onamrubio at hotmail.com
Mon Oct 26 02:24:01 EDT 2009


Hello experts.

About the sub-interfaces on GigaEthernet interface.

I connect two Juniper back-to-back to make this test, and discard that the summit were the problem.

M5_A<=====>M7i_B

Test 1:
I configure both of them without sub-interfaces and without VLAN, the router's see each other.

Test 2:
I configure both router with sub-interfaces encapsulation dot1q(0x8100), the router's see each other.

Test 3
I configure both router with sub-interfaces encapsulation 802.1ad(0x88a8), the router's don't see each other.
M5_A (Version 8.3R1.5)

ge-0/2/0 {

        description "===to M7i Test===";

        flexible-vlan-tagging;

        gigether-options {

            ethernet-switch-profile {

                tag-protocol-id 0x88a8;

            }

        }

        unit 50 {

            vlan-tags outer 0x88a8.50 inner 10;

            family inet {

                address 192.168.38.57/30;

            }

        }

    }



M7i_B (Version 8.5R4.3)

interfaces {

    ge-0/0/0 {

        description "===to M5 Test ===";

        flexible-vlan-tagging;

        gigether-options {

            ethernet-switch-profile {

                tag-protocol-id 0x88a8;

            }

        }

        unit 50 {

            vlan-tags outer 0x88a8.50 inner 10;

            family inet {

                address 192.168.38.58/30;

            }

        }

    }

Test 4

I configure both router with sub-interfaces encapsulation QinQ(0x9100), the router's don't see each other.

M5_A (Version 8.3R1.5)
ge-0/2/0 {
        description "===to M7i Test===";
        flexible-vlan-tagging;
        gigether-options {
            ethernet-switch-profile {
                tag-protocol-id 0x9100;
            }
        }
        unit 50 {
            vlan-tags outer 0x9100.50 inner 10;
            family inet {
                address 192.168.38.57/30;
            }
        }
    }


M7i_B (Version 8.5R4.3)
interfaces {
    ge-0/0/0 {
        description "===to M5 Test ===";
        flexible-vlan-tagging;
        gigether-options {
            ethernet-switch-profile {
                tag-protocol-id 0x9100;
            }
        }
        unit 50 {
            vlan-tags outer 0x9100.50 inner 10;
            family inet {
                address 192.168.38.58/30;
            }
        }
    }

In the two las test(3,4) I ran a ping to the IP 192.168.38.58 in the router M7i_B, this should response because is in the interface of this router. IMHO, but this one doesn't response.

Thaks for your help.

Best regards.

> From: onamrubio at hotmail.com
> To: evgeniy at ip.datagroup.ua; juniper-nsp at puck.nether.net
> Date: Tue, 20 Oct 2009 10:50:30 -0600
> Subject: Re: [j-nsp] Logical Interfaces 802.1ad
> 
> 
> Hello,
> 
> Here, is the information. but the Junipes's don't see each other.
> 
> onam at M10_A> show configuration interfaces ge-0/2/0 
> flexible-vlan-tagging;
> gigether-options {
>     ethernet-switch-profile {
>         tag-protocol-id 0x88a8;
>     }
> }
> unit 50 {
>     vlan-tags outer 0x88a8.50 inner 100;
>     family inet {
>         address 192.168.38.58/30;
>     }
> }
> 
> onam at M10_A> show interfaces ge-0/2/0.100 | match Encapsulation 
> 
> onam at M10_Ashow interfaces ge-0/2/0 | match Encapsulation 
>     Flags: SNMP-Traps VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
> 
> onam at M5_B> show configuration interfaces ge-0/2/0 
> 
> flexible-vlan-tagging;
> 
> gigether-options {
> 
>     ethernet-switch-profile {
> 
>         tag-protocol-id 0x88a8;
> 
>     }
> 
> }
> 
> unit 50 {
> 
>     vlan-tags outer 0x88a8.50 inner 100;
> 
>     family inet {
> 
>         address 192.168.38.57/30;
> 
>     }
> 
> }
> 
> onam at MetisM5_B> show interfaces ge-0/2/0.100 | match Encapsulation 
> 
> 
> 
> onam at MetisM5_B> show interfaces ge-0/2/0 | match Encapsulation                             
> 
>     Flags: SNMP-Traps VLAN-Tag [ 0x0000.0 ]  Encapsulation: ENET2
> 
> Summit
> x450_A# sho vman etherType 
> vman EtherType : 0x88a8  
> 
> x450_A# # SHO vman "Test_Side_A" 
> VMAN Interface with name Test_Side_A created by user
>         Admin State:    Enabled         Tagging:        802.1Q Tag 50 
>         Virtual router: VR-Default
>         **Primary IP    : 192.168.175.166/28 **(Administration IP address)**
>         IPv6:           None
>         STPD:           None
>         Protocol:       Match all unfiltered protocols
>         Loopback:       Disabled
>         NetLogin:       Disabled
>         QosProfile:     None configured
>         Egress Rate Limit Designated Port: None configured
>         Ports:   4.       (Number of active ports=3)           
>            Tag:   *1(UpLink_x450_B),*46(M10_A_Ge-0/2/0)
>         Flags:    (*) Active, (!) Disabled, (g) Load Sharing port
>                   (b) Port blocked on the vlan, (a) Authenticated NetLogin port
>                   (u) Unauthenticated NetLogin port, (m) Mac-Based port
> x450_A# 
> 
> 
> 
> x450_B # sh vman etherType 
> 
> Vman Primary EtherType    : 0x88a8  
> 
> x450_B # sho vman "Test_Side_B" 
> VMAN Interface with name Test_Side_B created by user
>         Admin State:    Enabled         Tagging:        802.1Q Tag 50 
>         Virtual router: VR-Default
>         **Primary IP    : 172.16.40.2/24** (Administration IP address)**
>         IPv6:           None
>         STPD:           None
>         Protocol:       Match all unfiltered protocols
>         Loopback:       Disabled
>         NetLogin:       Disabled
>         QosProfile:     None configured
>         Egress Rate Limit Designated Port: None configured
>         Flood Rate Limit QosProfile:       None configured
>         Ports:   20.      (Number of active ports=15)          
>            Tag:   *1(UpLink_x450_A),*45(M5_B_Ge-0/2/0)
>         Flags:    (*) Active, (!) Disabled, (g) Load Sharing port
>                   (b) Port blocked on the vlan, (m) Mac-Based port
>                   (a) Egress traffic allowed for NetLogin
>                   (u) Egress traffic unallowed for NetLogin
> x450_B# 
> 
> Best regards.
> 
> > Date: Tue, 20 Oct 2009 11:15:37 +0300
> > From: evgeniy at ip.datagroup.ua
> > To: onamrubio at hotmail.com
> > Subject: Re[4]: [j-nsp] Logical Interfaces 802.1ad
> > 
> > Hi Onam,
> > I examined you config and at first glance all should works....
> > Please show from both Junipers:
> > show interfaces xxx.100 | match Encapsulation
> > 
> > From both Summits:
> > show vman etherType
> > show vman xxx
> > 
> > 
> > 
> > best regards,
> > -- 
> > Evgeniy Aikashev
> > network engineer
> > JSC DATAGROUP
> > 
> > Tuesday, October 20, 2009, 9:45:37 AM, Onam wrote:
> > > Dear Evgenie,
> > 
> > > Thaks for your help.
> > 
> > > But I configure the juniper as you suggest me, but it doesn't work. I don't know if I'am missing a parameter or something else.
> > 
> > > I sent you the topology, maybe you can check it.
> > 
> > > I just try the same with to Cisco router at the same topology and it works, in fact I test it with 0x88a8 and 0x9100.
> > 
> > > Best regards.
> > 
> > >> Date: Mon, 19 Oct 2009 10:47:16 +0300
> > >> From: evgeniy at ip.datagroup.ua
> > >> To: onamrubio at hotmail.com
> > >> CC: juniper-nsp at puck.nether.net
> > >> Subject: Re[2]: [j-nsp] Logical Interfaces 802.1ad
> > >> 
> > >> Also works fine:
> > >> 
> > >> {master}[edit interfaces xe-4/1/0]
> > >> evgeniy at mx480# show
> > >> description "=== Summit X650 test ===";
> > >> flexible-vlan-tagging;
> > >> encapsulation flexible-ethernet-services;
> > >> gigether-options {
> > >> ethernet-switch-profile {
> > >> tag-protocol-id 0x88a8;
> > >> }
> > >> }
> > >> unit 100 {
> > >> description "=== Summit X650 test ===";
> > >> vlan-tags outer 0x88a8.4092 inner 100;
> > >> family inet {
> > >> address x.x.x.x/30;
> > >> }
> > >> }
> > >> 
> > >> Summit:
> > >> enable jumbo-frame ports all
> > >> 
> > >> 
> > >> best regards,
> > >> -- 
> > >> Evgeniy Aikashev
> > >> network engineer
> > >> JSC DATAGROUP
> > >> 
> > >> Monday, October 19, 2009, 10:17:22 AM, Onam wrote:
> > >> > Hello Evgeniy,
> > >> 
> > >> > I made some test before with this ethertype and it works. The Extreme x450 use both of them
> > >> > 0x8100 for VLAN and 0x88a8 for VMAN so if i do that the VMAN will become a VLAN.
> > >> 
> > >> > I see that by default the Juniper router M10 use ethertype 0x8100, but when I try to use
> > >> > ethertype 0x88a8 the devices doens't see each other, I run a ping to the other side with no response.
> > >> 
> > >> 
> > >> >> Date: Mon, 19 Oct 2009 09:58:23 +0300
> > >> >> From: evgeniy at ip.datagroup.ua
> > >> >> To: onamrubio at hotmail.com
> > >> >> CC: juniper-nsp at puck.nether.net
> > >> >> Subject: Re: [j-nsp] Logical Interfaces 802.1ad
> > >> >> 
> > >> >> Hello Onam,
> > >> >> try to change ethertype from Summit side:
> > >> >> 
> > >> >> configure vman ethertype 0x8100
> > >> >> 
> > >> >> best regards,
> > >> >> -- 
> > >> >> Evgeniy Aikashev
> > >> >> network engineer
> > >> >> JSC DATAGROUP
> > >> >> 
> > >> >> Monday, October 19, 2009, 3:30:51 AM, Onam wrote:
> > >> >> 
> > >> >> > Hi experts,
> > >> >> 
> > >> >> > I want to make logical interfaces on a physical interface ge-0/2/0 of a Juniper M10 router to
> > >> >> > connected to a the trunk port of a Summit Extreme x450 with the ethertype 0x88a8 (IEEE 802.1ad).
> > >> >> 
> > >> >> > I have the following configuration on the router.
> > >> >> 
> > >> >> > ge-0/2/0 {
> > >> >> > vlan-tagging;
> > >> >> > gigether-options {
> > >> >> > ethernet-switch-profile {
> > >> >> > tag-protocol-id 0x88a8;
> > >> >> > }
> > >> >> > }
> > >> >> > unit 50 {
> > >> >> > vlan-tags outer 0x88a8.50;
> > >> >> > family inet {
> > >> >> > address 192.168.175.169/28;
> > >> >> > }
> > >> >> > }
> > >> >> > }
> > >> >> 
> > >> >> > I made the test with the 802.1q and it works but with 802.1ad didn't work.
> > >> >> 
> > >> >> > Best regards.
> > >> >> > 
> > >> >> > _________________________________________________________________
> > >> >> > News, entertainment and everything you care about at Live.com. Get it now!
> > >> >> > http://www.live.com/getstarted.aspx
> > >> >> > _______________________________________________
> > >> >> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > >> >> > https://puck.nether.net/mailman/listinfo/juniper-nsp
> > >> >> 
> > >> 
> > >> > Get news, entertainment and everything you care about at Live.com. Check it out! 
> > >> 
> > 
> > > Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! Try it! 
> > 
>  		 	   		  
> _________________________________________________________________
> Connect to the next generation of MSN Messenger 
> http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
 		 	   		  
_________________________________________________________________
Explore the seven wonders of the world
http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE


More information about the juniper-nsp mailing list