SRX

Dear Team,

We have setup like:

Firewall => juniper s/w (Trunk) => juniper s/w new (trunk) => VMware machines

We have three different subnet VMware machines connected through port ge-0/0/32 of EX4200.

If I do ge-0/0/32 port as trunk it will not work, even I tried for aggregation link too but not working

My configuration:

set interfaces ge-0/0/32 ether-options 802.3ad ae2
set interfaces ge-0/0/33 ether-options 802.3ad ae2
set interfaces ge-0/0/32 ether-options 802.3ad lacp force-up
set interfaces ge-0/0/33 ether-options 802.3ad lacp force-up
set interfaces ae2 unit 0 family ethernet-switching port-mode trunk
set interfaces ae2 unit 0 family ethernet-switching vlan members 5
set interfaces ae2 unit 0 family ethernet-switching vlan members 158
set interfaces ae2 unit 0 family ethernet-switching vlan members 200
set interfaces ae2 unit 0 family ethernet-switching vlan members 100

set interfaces ae2 aggregated-ether-options lacp passive periodic fast

VMware is using NIC teaming not AE so you will configure the two switch ports as standard trunk ports not an AE bundle with LACP.

You will need to match the vlan tag id on your vlans with those setup on the VMware v-switch inside the host machine.

Yes , I configured two switch ports in the trunk too. so i tried for AE.

I promise that the trunk port configuration will work.  I have a number of these setup with dual NIC on the VMware host.

You about setup with each vlan member on unit 0 is correct when applied to each physical interface.

You vlan configuration needs to include the vlan id with the desired tag per vlan, in your case

set vlans 5 vlan-id 5

for each vlan.

On the VMware side in networking:

Add both NIC to the vswitch for the physical connect

Add one virtual machine port group to the vswitch for each VLAN id.  Set the matching VLAN id on each switch

When creating the VM attach this to the desired VLAN port group

Yes .. its working.

with cisco there is no need of vlan tagging on server.

but with Juniper & VMware setup, Vmware NIC should tag with Vlan ID.

Thank you for your help .