Switching

I seem to be missing somthing here. Any ideas?  I have link and both ports are up but I cannot ping the gateway on the VLAN2 segment (10.202.6.1).  VLAN.0 is up and I can ping 10.202.6.41 locally from the 2200.

Cisco port config

interface FastEthernet0/6
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 2
 switchport mode trunk

EX 2200 config

ge-0/0/23 {
        mtu 1500;
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members all;
                }
            }
        }
    }

vlan {
        unit 0 {
            family inet {
                address 10.202.6.41/24;
            }
        }
    }
routing-options {
    static {
        route 0.0.0.0/0 next-hop 10.202.6.1;
    }
}
protocols {
    igmp-snooping {
        vlan all;
    }
    rstp;
    lldp {
        interface all;
    }
    lldp-med {
        interface all;
    }
}
ethernet-switching-options {
    storm-control {
        interface all {
            level 50; ## Warning: 'level' is deprecated
        }
    }
}
vlans {
    VLAN2 {
        vlan-id 2;
        interface {
            ge-0/0/23.0;
        }
        l3-interface vlan.0;
    }
}

Hi,

switchport trunk native vlan 2 means that packets from and to vlan 2 are sent untagged and all other packets are tagged on the Cisco side. You configured your Juniper switch to send and receive all packets tagged, also that belonging to vlan 2.

Regards,

Dominik

Doh.  Removed switchport trunk native vlan 2 from the Cisco and it fixed my issue.   Are there any good resources out there with Junos examples?  Maybe showing the difference between ISO and Junos commands?

I can highly recommend

Junos Enterprise Switching

https://www.juniper.net/us/en/training/jnbooks/junos_switching.html

There are large parts for Cisco and Juniper interaction. In particular for VTP and Spanning Tree isues that may arise.

Regards,

Dominik

On the Juniper side, under ge-0/0/23, set the native vlan to 2 also.

-Mike

But in this case he has to remove the vlan members all statement because otherwise Juniper would send the frames also tagged but untagged frames that are received would be associated with the native vlan.

To also send native vlan frames untagged, all but the native vlan have to be listed under the vlan members statement.

Dominik,

You are correct. 🙂

-Mike

Hi Mike,

I hope you didn't find my posting pedantic. I just wanted to mention that because I feel this behavior a little bit unintuitive and I spent a full hour when I had my first EX switch in hand to find that out . In addition, it decreases the worth of the very practical vlan members all statement, as I can't exclude a specific vlan.

Dominik,

No problem with your reply.  The behavior has caused me grief in the past too.  Strange but makes sense after you figure it out. 🙂

You would imagine if you set the native vlan, that VLAN would be excluded from ALL.  Maybe they will fix it in future version.

-Mike

http://kb.juniper.net/InfoCenter/index?page=content&id=KB17419&cat=EX_SERIES&actp=LIST