SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  VLAN tag on layer 3 port?

    Posted 10-18-2013 10:24

    Hi,

     

    I have an SRX240 with a layer 3 port connected to a fibre link which has the same setup on the other end. The layer 3 ports are running OSPF between them.

     

    Device A:

    unit 0 {
        family inet {
            address 172.31.254.50/30;
        }
    }
    

     Device B:

    unit 0 {
        family inet {
            address 172.31.254.49/30;
        }
    }
    

     

    I need to make the Device A output traffic on VLAN 110.

     

    Is there a way of doing this without setting up a VLAN and putting the port in the correct VLAN?

     

    Thanks.

     

    Andrew.



  • 2.  RE: VLAN tag on layer 3 port?
    Best Answer

     
    Posted 10-18-2013 10:46

    Try:

     

    ge-0/0/0 {
        vlan-tagging;
        unit 0 {                           
            vlan-id 110;                     
            family inet {                   
                address 172.31.254.50/30;      
            }                               
        }                                   
    

     



  • 3.  RE: VLAN tag on layer 3 port?

    Posted 10-21-2013 01:50

    @smicker wrote:

    Try:

     

    ge-0/0/0 {
        vlan-tagging;
        unit 0 {                           
            vlan-id 110;                     
            family inet {                   
                address 172.31.254.50/30;      
            }                               
        }                                   
    

     


    That worked exactly, thank you.



  • 4.  RE: VLAN tag on layer 3 port?

    Posted 10-18-2013 10:49

    What is the purpose of tagging the traffic if this is a direct link between Device A and B?

    Both sides would have to match, so you could set vlan-tagging on your interface and leave your unit 0 conifg in place with a vlan-id of 110 on each side. (as shown in previous reply)

    If there is a switch in between the devices, you could set the switch port facing Device A and B to access mode for VLAN 110 and not change any config on the Devices. Then traffic would be tagged after entering the switch and could be trunked on the switches between the devices, but would not have to be tagged on the end devices as the switch would untag before sending it out. 

    Please elaborate more as to why only Device A side needs to be tagged if possible.

     

    HTH