Coming soon - Get a detailed view of why an account is flagged as spam!
view details

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

2
Trunking vlans between Juniper Switch and Router - what am I missing?!
Post Flair (click to view more posts with a particular flair)
Post Body

Hi friends,

Longtime lurker here - looking for some help from those of you who run Juniper kit in your labs.

Many years ago I used to hold the JNCIA cert and the one above it (JNCIS..? I forget!) along with a bunch of Cisco and others, so I have some background and familiarity with Junos, and a good general level of networking nous, albeit my career has evolved away from hands on keyboard network ops. and my knowledge has diminished accordingly.

Throughly fed up with the consumer grade WiFi crap I have in my home, Iā€™ve decided to wire it up for Cat6 throughout, and the logical choice for equipment is, naturally, Juniper. I picked up an EX3300-48P and SRX340 from a local IT recycler, and set about configuring them, thoroughly enjoying refreshing myself on the elegant syntax of Junos.

Now, however, I am stuck. Logically, the configs should line up, yet I cannot get any communication to flow over the trunk link. No DHCP lease offered by the SRX to a laptop plugged into a switch port (ge-0/0/36), although when setting an IP manually it appears in the arp tableā€¦

With the manually set IP on the appropriate subnet (in this case 10.69.10.123) I cannot get an answer from the SRX interface 10.69.10.1 to a ping, or access the management web interface and ssh.

So Iā€™m a bit stuck at this point. Iā€™m sure itā€™s something relatively straightforward that Iā€™ve missed or misconfigured as a result of my lack of recent experienceā€¦ the new jdhcp threw me a little, so there may be similar evidence of cockeyed config items confusing things.

Can anyone help point me in the right direction please? Below are snippets of the config - each side of the trunk. I can paste the entire things up on pastebin or similar if useful.

Iā€™ll be eternally grateful for a steer here, and will of course pay the favours forwards.

Cheers! šŸ»

SRX side of the trunk:

interfaces { 
ge-0/0/7 {                          
        description "Trunk to ST-Coreā€ ";
        vlan-tagging;                   
        unit 10 {                       
            vlan-id 10;                 
            family inet {               
                filter {                
                    input ssh-access-filter;
                }                       
                address 10.69.10.1/24;  
            }                           
        }                               
        unit 20 {                       
            vlan-id 20;                 
            family inet {               
                address 10.69.20.1/24;  
            }                           
        }                               
        unit 30 {                       
            vlan-id 30;                 
            family inet {               
                address 10.69.30.1/24;  
            }                           
        }                               
        unit 40 {                       
            vlan-id 40;                 
            family inet {               
                address 10.69.40.1/24;  
            }                           
        }                               
    }                          

EX side of the trunk:

interfaces { 
ge-0/0/47 {                         
        description "Trunk to ST-Edge"; 
        unit 0 {                        
            family ethernet-switching { 
                port-mode trunk;        
                vlan {                  
                    members [ Main Guest IoT CCTV ];
                }                       
            }                           
        }                               
    }                                   
    vlan {                              
        unit 0 {                        
            family inet {               
                address 10.69.10.2/24;  
            }                           
        }                               
    }                                   
}                                       
vlans {                                 
    CCTV {                              
        vlan-id 40;                     
    }                                   
    Guest {                             
        vlan-id 20;                     
    }                                   
    IoT {                               
        vlan-id 30;                     
    }                                   
    Main {                              
        vlan-id 10;                     
    }                        

Author
Account Strength
50%
Account Age
1 year
Verified Email
Yes
Verified Flair
No
Total Karma
547
Link Karma
46
Comment Karma
501
Profile updated: 1 day ago
Posts updated: 3 hours ago

Subreddit

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.
Posted
11 months ago