Ethernet Switching
Showing results for 
Search instead for 
Do you mean 
Reply
Contributor
Posts: 33
Registered: ‎12-14-2015
0 Kudos
Accepted Solution

Private VLAN

Hi all, 

I have a topology shown below
Capture.GIF
Two switches run VLAN with two primary VLAN 100 and 200. Two primary VLAN 100 and 200 also have secondary VLAN community VLAN 40. The interface connects between two switches is run trunk member VLAN 100 and VLAN 200 as well as pvlan-trunk

[edit vlans]
root@sw1# show pvlan-100
vlan-id 100;
interface {
   ge-0/0/12.0 {
      pvlan-trunk;
   }
no-local-switching;

[edit vlans]
root@sw1# show pvlan-200
vlan-id 200;
interface {
   ge-0/0/12.0 {
      pvlan-trunk;
   }
no-local-switching;

[edit interface ge-0/0/12.0 family ethernet-switching]
root@sw1# show
vlan members [pvlan-100 pvlan-200]
interface-mode trunk



So, is the configuration valid? And Does PC2 ping PC3 successfully? Does the same result with PC1 ping PC4?

Thank all,
Hoang Nguyen HUy 

Distinguished Expert
Posts: 1,940
Registered: ‎06-06-2011
0 Kudos

Re: Private VLAN

NO. You are missing the community vlan  among other statements. You configure one Primary vlan and the primary vlan must be set to be primary for the community vlans. This article explains:

https://www.juniper.net/documentation/en_US/junos/topics/example/private-vlans-multiple-switches-ex-...

 

[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]
Contributor
Posts: 33
Registered: ‎12-14-2015
0 Kudos

Re: Private VLAN

Hi lyndidon, 

I gave the idea and didn't show full configuration. 
So, If I configured more command line as you said, Will PCs which are same community vlan and match primary vlan ping successfully? 

Thanks

Highlighted
Distinguished Expert
Posts: 1,940
Registered: ‎06-06-2011
0 Kudos

Re: Private VLAN

Yes. Once properly configured, all the devices in the separate community vlans will be able to communicate with each other.

[KUDOS PLEASE! If you think I earned it!
If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]