Ethernet Switching
Ethernet Switching

VME virtual port?

‎03-28-2017 03:31 PM

version 15.1X53-D55.5


I'd like to be able to get into the management remotly using http or ssh.

I have enabled both and applied an ip address to the management interface.

I can use both the HTTPS or SSH when I am plugged into the management port, If I plug into any other port I'm not able to. I was thinking tha the vme was also a virtual port, am I wrong...


What do I need to do, if I can, to be able to access the switch for management without plugging an ethernet cable into the management port in the back?  Or do I just need to use that?


Ethernet Switching

Re: VME virtual port?

‎03-28-2017 08:22 PM



VME port's use is entirely different. You can refer to the KB below for the same:


I don't think you can achieve what you want to using VME port.






Ethernet Switching

Re: VME virtual port?

‎03-28-2017 10:13 PM

... agree as the VME is a VIP of all ME -ports




if you want inband access you can create a L3-interface for a vlan using the irb (ELS-syntax) or vlan (EX syntax) interface.

Together with a static route to a gateway, if the access is from a foreign network, inband access will be possible





Ethernet Switching
Accepted by topic author Cyuber
‎04-07-2017 05:35 PM

Re: VME virtual port?

‎03-29-2017 02:43 AM

The physical management port on the back of your switch is called em0 on a QFX or EX4600 or me0 on an EX3200, 3300, 3400, 4200 or 4300.


The port is only for out-of-band management meaning you cannot reach it from any of the front-facing interfaces, nor assign it to any VLANs etc.


When you have multiple switches joined together in a virtual-chassis, all me/em interfaces are represented by a single virtual interface called vme (virtual me) - the IP address assigned to vme then floats between and is reachable via all connected me0/em0 interfaces, regardless of which device is the current Master routing-engine.  


To manage the switch in-band, you will need to configure an L3 interface on the VLAN that all your ports are connected to.


Given your software version is 15.1X53, I'm assuming you must be running either an EX2300 or an EX3400 in which case you'll need to do the following:


# Assign an IP address to an interface
set interfaces irb unit 1 family inet address

# Assuming you are using a factory default config, bind the above IRB to the default VLAN
set vlans default vlan-id 1
set vlans default l3-interface irb.1

# Enable https web-management on irb.1
set system services web-management https system-generated-certificate
set system services web-management https interface irb.1

Hope this helps!


Ben Dale
Juniper Ambassador
Follow me @labelswitcher