Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Configuring the Layer 2 CPE at the PE1 Site When Running MX Series Router Cloud CPE Services to Route Internet Traffic to a Subscriber-Owned NAT Gateway

Note: This procedure uses a Juniper Networks EX Series Ethernet Switch for the Layer 2 CPE.

To configure the Layer 2 CPE:

  1. Configure the first Ethernet interface on the CPE — ge-0/0/8 is the VPN Internal interface.
    [edit]user@host# set interfaces ge-0/0/8 unit 0 family ethernet-switching port-mode access
  2. Configure the second Ethernet interface — ge-0/0/9 is the public Internet interface connecting to the WAN link of the subscriber’s NAT gateway.
    [edit]user@host# set interfaces ge-0/0/9 unit 0 family ethernet-switching port-mode access
  3. Configure the VLAN trunk port for the WAN link — ge-0/0/10 is a trunk port connecting to the PE router.
    [edit]user@host# set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode trunk
  4. Configure the first VLAN for VPN internal traffic.
    1. Specify the VLAN name.
      [edit]user@host# edit vlans vlan-vpn
    2. Specify the VLAN ID.
      [edit]user@host# set vlan-id 105
    3. Specify the interface associated with the VLAN.
      [edit vlans vlan-vpn]user@host# set interface ge-0/0/8.0
    4. Specify the trunk port interface associated with the VLAN.
      [edit vlans vlan-vpn]user@host# set interface ge-0/0/10.0
  5. Configure the second VLAN for public Internet traffic.
    1. Specify the VLAN name.
      [edit vlans vlan-vpn]user@host# topuser@host# edit vlans vlan-public
    2. Specify the VLAN ID.
      [edit vlans vlan-public]user@host# set vlan-id 106
    3. Specify the interface associated with the VLAN.
      [edit vlans vlan-public ]user@host# set interface ge-0/0/9.0
    4. Specify the trunk port interface associated with the VLAN.
      [edit vlans vlan-public ]user@host# set interface ge-0/0/10.0

Modified: 2015-10-29