[j-nsp] Question about bridge-domain MX

Nguyen Hoang Nam nhnam81 at gmail.com
Tue Sep 13 03:35:12 EDT 2011


Dear all !

I have deployed Layer 2 VPN for a customer with 02 sites with different vlan-id as topo below:

site-1 --------- (metro) ---- MX80 -------(metro)------- site-2
       (outer 100, inner 100)     (outer 200, inner 200)

I tested using bridge domain on MX: 
Config on MX: 
lab at mxA-1# show interfaces ge-1/0/4 
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
gigether-options {
    ethernet-switch-profile {
        tag-protocol-id 0x9100;
    }
}
unit 100 {
    encapsulation vlan-bridge;
    vlan-tags outer 0x9100.100 inner 0x9100.100;
}
unit 200 {
    encapsulation vlan-bridge;
    vlan-tags outer 0x9100.200 inner 0x9100.200;
}
[edit]
lab at mxA-1# show bridge-domains 
cmcti {
    domain-type bridge;
    vlan-id none;
    interface ge-1/0/4.100;
    interface ge-1/0/4.200;
    routing-interface irb.100;
}

Config on customer site ( I used logical-system or virtual router on MX): 
lab at mxA-1# show routing-instances 
ce-1 {
    instance-type virtual-router;
    interface ge-1/1/4.100;
}
ce-2 {
    instance-type virtual-router;
    interface ge-1/1/4.200;
}
[edit]
lab at mxA-1# show interfaces ge-1/1/4 
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
gigether-options {
    ethernet-switch-profile {
        tag-protocol-id 0x9100;
    }
}
unit 100 {
    vlan-tags outer 0x9100.100 inner 0x9100.100;
    family inet {
        address 172.16.1.2/24;
    }
}
unit 200 {
    vlan-tags outer 0x9100.200 inner 0x9100.200;
    family inet {
        address 172.16.1.3/24;
    }
}

I could ping from site-1 to MX, site-2 to MX but cannot ping between site-1 and site-2 

Please help me

-------------- 
Nam Nguyen
(84)98-381-0783


More information about the juniper-nsp mailing list