Ethernet Switching
Highlighted
Ethernet Switching

Port isolation on QFX5100

‎09-14-2018 12:27 AM

Hello,

 

is it possible to isolate the ports of the QFX, so that they can only communicate with the uplink port and not with each other? I tried private-vlans, but it doesn't work with my configuration.

 

##############

My configuration:

VLAN:

uplinkVlan {
    interface ge-0/0/47.1111;
    interface ge-0/0/0.1111;
    interface ge-0/0/1.1111;

}

#####

Ports:

 ge-0/0/0 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 10;
            input-vlan-map {
                swap-push;
                inner-vlan-id 100;
            }
            output-vlan-map pop-swap;
        }
    }

 

 ge-0/0/1 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 10;
            input-vlan-map {
                swap-push;
                inner-vlan-id 101;
            }
            output-vlan-map pop-swap;
        }
    }

####

Uplink port:

ge-0/0/47 {
        flexible-vlan-tagging;
        encapsulation extended-vlan-bridge;
        unit 1111 {
            vlan-id 1111;
        }

}

 

Thanks in advance for your help.