Junos & VLANS

[Enfield]

Hi guys,

I recently bought a Juniper EX2200-C-12P and am having some issues setting it up correctly. I've set up two trunk ports; one for the port connected to the router - ge/0/0/11 - and another - ge/0/0/6 - connected to my AP which has three VLANS set up on it. I do have another VLAN on another port but it's not imPORTant (sorry).

From the switches console I am unable to ping the router, presumably due to the trunk, not really an issue but an annoyance. I also cannot use any of the other ports without associating them to a VLAN; not getting an IP from DHCP server (router). I cannot access my AP settings by simply plugging in a cable into the switch which isn't associated to a VLAN (default config). I would hazard a guess that these issues are related.

Also am unable to use all three VLANS on the AP.

Any pointers?

P.S. I bought this managed switch to learn about networks - it was quite cheap (and brand new).

 

[Caged]

Can you put descriptions on the relevant ports and VLANs and then paste the config here?

 

[Enfield]

Sure, here it is:

version 12.3R12-S15;
system {
    host-name ex2200;
    time-zone Europe/London;
    root-authentication {
        encrypted-password ## SECRET-DATA
    }
    services {
        ssh {
            protocol-version v2;
        }
        netconf {
            ssh;
        }
        web-management {
            http;
        }
        dhcp {
            traceoptions {
                file dhcp_logfile;
                level all;
                flag all;
           }                           
        }
    }
    syslog {
        user * {
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
        file interactive-commands {
            interactive-commands any;
        }
    }
}
chassis {
    auto-image-upgrade;
}
interfaces {
    ge-0/0/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/1 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/2 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/3 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/4 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/5 {
        unit 0 {                       
            family ethernet-switching;
        }
    }
    ge-0/0/6 {
        description "connection to ap";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members [ WORK KIDS OTHER ];
                }
            }
        }
    }
    ge-0/0/7 {
        description "unmanaged switch";
        unit 0 {
            family ethernet-switching {
                vlan {
                    members GS308;
                }
            }
        }                               
    }
    ge-0/0/8 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/9 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/10 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/0/11 {
        description "connection to router";
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members all;       
                }
            }
        }
    }
    ge-0/1/0 {
        unit 0 {
            family ethernet-switching;
        }
    }
    ge-0/1/1 {
        unit 0 {
            family ethernet-switching;
        }
    }
    vlan {
        unit 0 {
            family inet {
                address 192.168.2.2/24;
            }
        }
    }
}
routing-options {                       
    static {
        route 0.0.0.0/0 next-hop 192.168.2.1;
    }
}
protocols {
    igmp-snooping {
        vlan all;
    }
    rstp {
        disable;
    }
    lldp {
        interface all;
    }
    lldp-med {
        interface all;
    }
}
ethernet-switching-options {
    voip;
    storm-control {
        interface all;
    }                                   
}
vlans {
    GS308 {
        vlan-id 70;
    }
    KIDS {
        vlan-id 61;
    }
    OTHER {
        vlan-id 62;
    }
    WORK {
        vlan-id 60;
    }
    default {
        l3-interface vlan.0;
    }
}
poe {
    interface all;
}

 

[Caged]

You've not got a native VLAN declared - is your router tagging all the traffic or should untagged traffic be handled by this switch as well?

See https://kb.juniper.net/InfoCenter/index?page=content&id=KB17419

and

https://kb.juniper.net/InfoCenter/index?page=content&id=KB10972&cat=EX4200_1&actp=LIST

 

[Enfield]

I'm not sure what you mean to be honest, did read that first link yesterday but also confused by something else I read about native vlans and them being a Cisco thing.

For now, would like to keep router set up as it is with switch just being layer 2 for now.

What do I need to do?

Edit: This morning, only one VLAN was showing on the AP, had to revert to another switch this morning.

Edit2: I've set up native vlans as per first link but still unable to ping the router from the switch.