SRX Services Gateway
Reply
Contributor
charm
Posts: 136
Registered: ‎05-04-2009
0
Accepted Solution

aggregate 2 GE interfaces and add IP address in aggregated interface

Hi Guys,

 

I have cisco switch and SRX 650

 

How can I aggregate the ports on my SRX650 so I can connect it to etherchannel (aggregated) port on my cisco switch.

 

I want also to add IP address to ae0.

 

Does anyone who can assist me to how to configure it...

 

 

Thanks in advance

 

 

 

Juniper Employee
xhoms
Posts: 33
Registered: ‎08-20-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

As far as I know Ethernet Link Aggregation (ag interfaces) is part of the "Advanced Switching" feature set and is not available on the 4 GE ports in the SRX650 base board. You can, however, configure it using ports of any optional XPIM.

 

Which SRX650 interfaces are you using?

 

Xavi

Contributor
charm
Posts: 136
Registered: ‎05-04-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

I am using ge-2/0/x ports from the new module installed.
Contributor
mikevaus
Posts: 14
Registered: ‎12-12-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

[ Edited ]

The following may be suitable:

 

set chassis aggregated-devices ethernet device-count 1
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 unit 0 family inet address 192.168.100.254/24
set interfaces ge-2/0/0 gigether-options 802.3ad ae0
set interfaces ge-2/0/1 gigether-options 802.3ad ae0
set security zones security-zone trust interface ae0 host-inbound-traffic system-services all

 

You can instead define a vlan instead and attach this to your ae0.0:

 

set chassis aggregated-devices ethernet device-count 1
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 unit 0 family ethernet-switching port-mode trunk vlan members all
set interfaces ae0 unit 0 family ethernet-switching native-vlan-id 100
set interfaces ge-2/0/0 gigether-options 802.3ad ae0
set interfaces ge-2/0/1 gigether-options 802.3ad ae0
set interfaces vlan.100 family inet 192.168.100.254/24
set vlans vlan100 vlan-id 100 l3-interface vlan.100
set security zones security-zone trust interface vlan.100 host-inbound-traffic system-services all

 

For the above make sure you have a trust intra-zone security policy permitting traffic.

 

"show lacp interfaces" will show your ae0 status (in this case it is down):

 

Aggregated interface: ae0
    LACP state:       Role   Exp   Def  Dist  Col  Syn  Aggr  Timeout  Activity
      ge-2/0/0       Actor    No   Yes    No   No   No   Yes     Fast    Active
      ge-2/0/0     Partner    No   Yes    No   No   No   Yes     Fast   Passive
      ge-2/0/1       Actor    No   Yes    No   No   No   Yes     Fast    Active
      ge-2/0/1     Partner    No   Yes    No   No   No   Yes     Fast   Passive
    LACP protocol:        Receive State  Transmit State          Mux State
      ge-2/0/0                Defaulted   Fast periodic           Detached
      ge-2/0/1            Port disabled     No periodic           Detached

 

Hope this helps!

 

mikevaus

Trusted Contributor
dennish
Posts: 207
Registered: ‎09-03-2008
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

Afaik family inet is not supported on aggregated-ethernet interfaces, so you'd have to go for option 2 (with the vlan setup).

 

I think you might need to use:

set interfaces ae0 aggregated-ether-options lacp

 

in stead of:

set interfaces ae0 aggregated-ether-options lacp active

 

I believe that way the SRX creates a static aggregated interfaces in stead of using lacp, which i think your cisco does not support.

Contributor
mikevaus
Posts: 14
Registered: ‎12-12-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

[ Edited ]

dennish wrote:

Afaik family inet is not supported on aggregated-ethernet interfaces, so you'd have to go for option 2 (with the vlan setup).

 

I think you might need to use:

set interfaces ae0 aggregated-ether-options lacp

 

in stead of:

set interfaces ae0 aggregated-ether-options lacp active

 

I believe that way the SRX creates a static aggregated interfaces in stead of using lacp, which i think your cisco does not support.


 

I haven't actually tried it without a vlan attached to the ae interface, but it will let you commit with a family inet address.  Whether this works is another matter :smileyhappy:

 

ae0 {
    aggregated-ether-options {
        lacp {
            active;
        }
    }
    unit 0 {
        family inet {
            address 192.168.100.254/24;
        }
    }
}


  Logical interface ae0.0 (Index 71) (SNMP ifIndex 151)
    Flags: Device-Down SNMP-Traps 0x0 Encapsulation: ENET2
    Statistics        Packets        pps         Bytes          bps
    Bundle:
        Input :             0          0             0            0
        Output:             0          0             0            0
    Security: Zone: Null
    Protocol inet, MTU: 1500
      Flags: None
      Addresses, Flags: Dest-route-down Is-Preferred Is-Primary
        Destination: 192.168.100/24, Local: 192.168.100.254, Broadcast: 192.168.100.255

 

You may be right about the active flag, I was assuming the cisco config included "channel-group x mode active" on each bundled interface and I believed lacp active was to be set on the SRX.
Trusted Contributor
dennish
Posts: 207
Registered: ‎09-03-2008
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

[ Edited ]

Hmm i asumed cisco always uses pagp in stead of lacp, but i might be misonformed about that.

Therefore i asumed on the cisco end you had to force a static eth-chan by setting mode on and on the juniper side disable lacp.

 

If i recall correctly i did this with a EX4200 and a (good old) cat 4006...

 

 

Regarding the fam inet on ae... i recall a SRX240 not committing that config...

Contributor
charm
Posts: 136
Registered: ‎05-04-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

Thanks to all of you guys for your warm response. Especially to you mikevaus, your config works for us.

By the way, Guys what is the maximum number of Ge-ports that can be bundle to one ae(x) interface?

Is it possible to aggregate 5 Ge-interfaces on SRX 5600?

Thanks,

Mark

Trusted Contributor
Saurabh
Posts: 171
Registered: ‎09-08-2009
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

U will able add uptill 8 equale speed links in and AE on stand alone and 16 in a cluster ( 8 pr not).

 

Saurabh Joshi
--------------------------------------------------------------------------------------------------
CCNA,CCIP/JNCIA-EX,ER/JNCIS-ER,SEC,M/JNCIP-M
alk
Visitor
alk
Posts: 3
Registered: ‎01-25-2011
0

Re: aggregate 2 GE interfaces and add IP address in aggregated interface

 



As far as I know Ethernet Link Aggregation (ag interfaces) is part of the "Advanced Switching" feature set and is not available on the 4 GE ports in the SRX650 base board

   in release 10.4 situation hasn't changed?

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.