[j-nsp] srx with ethernet switching and chassis clustering

Richard Zheng rzheng at gmail.com
Mon Aug 1 03:04:55 EDT 2011


On Sun, Jul 31, 2011 at 4:39 PM, Jonathan Lassoff <jof at thejof.com> wrote:

> On Sun, Jul 31, 2011 at 7:28 PM, Richard Zheng <rzheng at gmail.com> wrote:
> > Hi,
> >
> > We have a configuration with multiple VR to support multiple customers.
> Vlan
> > is used to trunk traffic into and out of SRX. While trying to do chassis
> > clustering, it seems vlan is not supported. How do you do chassis cluster
> > with multiple customers? Do you have dedicated interfaces for each
> customer?
>
> If it's truly just a trunk and used to carry traffic to another switch
> for access, there is another way to configure a trunk that doesn't
> require "ethernet-switching".
>
> Configure an interface like:
>
> interfaces {
>    ge-0/0/0 {
>        vlan-tagging;
>        unit 10 {
>            vlan-id 10;
>            family inet {
>                address 10.0.0.1/24;
>        }
>    }
> }
>
> Now, your IP interface could be ge-0/0/0.10 instead of vlan.10.
>
> Cheers,
> jof
>

Thanks jof. I see, in production we can make other switches handle the
access and only use srx for firewall. So after setting up reth interface, we
should be able to add vlan-tagging to it, right?


More information about the juniper-nsp mailing list