Ethernet Switching
Highlighted
Ethernet Switching

Port isolation on QFX5100

Friday

Hello,

 

is it possible to isolate the ports of the QFX, so that they can only communicate with the uplink port and not with each other? I tried private-vlans, but it doesn't work with my configuration.

 

##############

My configuration:

VLAN:

uplinkVlan {
    interface ge-0/0/47.1111;
    interface ge-0/0/0.1111;
    interface ge-0/0/1.1111;

}

#####

Ports:

 ge-0/0/0 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 10;
            input-vlan-map {
                swap-push;
                inner-vlan-id 100;
            }
            output-vlan-map pop-swap;
        }
    }

 

 ge-0/0/1 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 10;
            input-vlan-map {
                swap-push;
                inner-vlan-id 101;
            }
            output-vlan-map pop-swap;
        }
    }

####

Uplink port:

ge-0/0/47 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 1111;
        }

}

 

Thanks in advance for your help.