vlans
Sintaxe (Série QFX, QFabric, Série NFX e EX4600)
vlans {
vlan-name {
description text-description;
dot1q-tunneling {
customer-vlans (id | range);
}
filter input filter-name;
filter output filter-name;{
isolated;
mapping (policy | tag push | native push);
promiscuous;
}
isolation-vlan-id;
l3-interface vlan.logical-interface-number;
mac-limit number;
no-local-switching;
no-mac-learning;
primary-vlan vlan-name;
pvlan extend-secondary-vlan-id vlan-id;
vlan-id number;
vlan-range vlan-id-low-vlan-id-high;
}
}
Sintaxe (Série QFX, Série NFX e EX4600)
vlans {
vlan-name {
description text-description;
domain-type bridge;
forwarding-options {
dhcp-security {
arp-inspection;
group group-name {
interface interface-name {
static-ip ip-address {
mac mac-address;
}
}
overrides {
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
no-dhcp-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name hostname;
use-interface-description (device | logical);
use-string string;
}
vendor-id {
use-string string;
}
}
}
fip-security {
examine-vn2vf;
examine-vn2vn {
beacon-period milliseconds;
}
fc-map fc-map-value;
interface interface-name {
(fcoe-trusted | no-fcoe-trusted;)
}
}
}
l3-interface irb.logical-unit-number;
multicast-snooping-options {
flood-groups [group-names];
forwarding-cache {
threshold {
reuse threshold;
suppress threshold;
}
}
graceful-restart {
disable;
restart-duration duration;
}
host-outbound-traffic {
dot1p bits;
forwarding-class forwarding-class;
}
multichassis-lag-replicate-state;
nexthop-hold-time time;
options {
syslog {
level level;
mark interval;
upto level;
}
}
traceoptions {
file filename {
files number;
no-world-readable;
size file-size;
world-readable;
}
flag flag {
disable;
}
}
}
switch-options {
interface interface-name {
interface-mac-limit limit {
packet-action action;
}
static-mac mac-address;
}
interface-mac-limit limit {
packet-action action;
}
mac-move-limit limit {
packet-action action;
}
mac-table-size limit {
packet-action drop;
}
no-mac-learning;
}
}
vlan-id number;
vlan-id-list [vlan-id | vlan-id–vlan-id];
vlan-tags
inner value;
outer value;
}
vxlan {
ingress-node-replication
ovsdb-managed
}
}
}
}
Sintaxe (Série SRX e Série EX)
vlans {
vlan-name {
description text-description;
dot1q-tunneling {
customer-vlans (id | range)
layer2-protocol-tunneling all | protocol-name {
drop-threshold number;
shutdown-threshold number;
}
}
filter input filter-name;
filter output filter-name;{
egress;
ingress;
mapping (native (push | swap) | policy | tag (push | swap));
pvlan-trunk;
}
isolation-id id-number;
l3-interface l3-interface-name.logical-interface-number;
l3-interface-ingress-counting layer-3-interface-name;
mac-limit limit action action;
mac-table-aging-time seconds;
no-local-switching (VLAN);
no-mac-learning;
primary-vlan vlan-name;
vlan-id number;
vlan-prune;
vlan-range vlan-id-low-vlan-id-high;
}
}
Sintaxe (Série SRX)
vlans {
vlan name {
(vlan-id (1..3967) | vlan-id-list [ vlan-id-numbers]);
description;
forwarding-options {
dhcp-security {
arp-inspection;
dhcpv6-options {
option-16 {
use-string use-string;
}
option-18 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
option-37 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
}
group group-name {
interface interface-name {
static-ip {
ip-address {
mac-address;
}
}
static-ipv6 {
ip-address {
mac-address;
}
}
}
overrides {
no-dhcpv6-options;
no-option16;
no-option18;
no-option37;
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
ipv6-source-guard;
neighbor-discovery-inspection;
no-dhcp-snooping;
no-dhcpv6-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name;
mac;
use-interface-description (device | logical);
use-string use-string;
}
vendor-id {
use-string use-string;
}
}
}
filter {
input filter-name;
}
flood {
input filter-name;
}
}
interface interface-name;
l3-interface l3-interface-name;
mcae-mac-flush;
mcae-mac-synchronize;
service-id service-id;
switch-options {
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
no-mac-learning;
pseudowire-status-tlv;
static-mac mac-address {
vlan-id value;
}
}
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-table-aging-time seconds;
mac-table-size {
limit;
packet-action {
drop;
}
}
no-mac-learning;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
Sintaxe (firewall virtual vSRX)
vlans {
vlan name {
(vlan-id (all | none | number) | vlan-id-list [ vlan-id-numbers] | vlan-tags <inner number> outer number);
description;
forwarding-options {
dhcp-security {
arp-inspection;
dhcpv6-options {
option-16 {
use-string use-string;
}
option-18 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
option-37 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
}
group group-name {
interface interface-name {
static-ip {
ip-address;
}
static-ipv6 {
ip-address;
}
}
overrides {
no-dhcpv6-options;
no-option16;
no-option18;
no-option37;
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
ipv6-source-guard;
light-weight-dhcpv6-relay;
neighbor-discovery-inspection;
no-dhcp-snooping;
no-dhcpv6-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name;
mac;
use-interface-description (device | logical);
use-string use-string;
}
vendor-id {
use-string use-string;
}
}
}
filter {
input filter-name;
}
flood {
input filter-name;
}
}
interface interface-name;
l3-interface l3-interface-name;
mcae-mac-synchronize;
no-irb-layer-2-copy;
service-id service-id;
switch-options {
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
disable;
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-pinning;
no-mac-learning;
pseudowire-status-tlv;
static-mac mac-address {
vlan-id value;
}
}
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-statistics;
mac-table-aging-time seconds;
mac-table-size {
limit;
packet-action {
drop;
}
}
no-mac-learning;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
Nível de hierarquia
[edit]
[edit routing-instances routing-instance-name]
Descrição
Configure propriedades de VLAN.
Nos switches da Série EX e firewalls da Série SRX (incluindo o firewall virtual vSRX), as seguintes diretrizes de configuração se aplicam:
Somente filtros de firewall VLAN (PVLAN) privados podem ser usados quando o VLAN está habilitado para tunelamento Q-in-Q.
Uma tag S-VLAN é adicionada ao pacote se o VLAN tiver tunelamento Q-in-Q e o pacote estiver chegando de uma interface de acesso.
Você não pode usar um filtro de firewall para atribuir uma interface integrada de roteamento e ponte (IRB) ou uma interface VLAN roteada (RVI) a uma VLAN.
Atribuições de VLAN realizadas usando um filtro de firewall sobrepõem todas as outras atribuições de VLAN.
Inadimplência
Se você usar a configuração padrão de fábrica, todas as interfaces de switch tornam-se parte do padrão de VLAN.
Opções
vlan-name— Nome da VLAN. O nome pode incluir letras, números, hífens (-) e períodos (.) e pode conter até 255 caracteres de comprimento.
As declarações restantes são explicadas separadamente. Veja CLI Explorer.
As declarações restantes são descritas separadamente.
Nível de privilégio exigido
roteamento — Para visualizar essa declaração na configuração.
roteamento — controle — para adicionar essa declaração à configuração.
sistema — Para visualizar essa declaração na configuração.
controle do sistema — para adicionar essa declaração à configuração.
Informações de versão
Declaração introduzida no Junos OS Release 9.0.
Declarações para VLANs privadas e tunelamento Q-in-Q introduzidas no Junos OS Release 12.1 para os switches da Série QFX.