Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Modifying the Link Aggregation for Security Devices


You can combine multiple Ethernet interfaces to form a single link layer interface, known as a Link Aggregation Group (LAG). This page enables you to create, edit, and delete LAG configuration profiles and also includes Global Settings, AE Interface, Logical Interface, Admin Status, Link status, VLAN Tagging, and so on.


Refer to the Junos OS documentation (available at for a particular release and device. There you can find detailed information on the configuration parameters for that device.

To modify Link Aggregation profile:

  1. Select Devices > Security Devices.

    The Security Devices page appears.

  2. Select a device to modify the configuration.
  3. From the More or right-click menu, select Configuration > Modify Configuration.

    The Modify Configuration page appears.

  4. Click the Link Aggregation link in the left-navigation menu.

    The Link Aggregation page is displayed. The existing Link Aggregation profiles if any are displayed in the table.

    See Table 1 for the list of actions that you can perform in this page.

  5. After modifying the configuration, you can cancel the changes, save the changes, preview the changes, or save the changes and deploy the configuration on the device. See Modifying the Configuration of Security Devices.

Table 1: Link Aggregation Actions



Global Settings

Click to add a Global Settings to a Link Aggregation profile.

The Global Settings page appears. Complete the configuration according to the guidelines provided in Table 2 and click OK.

Add Logical Interface

Click to add a logical interface for the security devices. You can add an Aggregated Ethernet (AE) interface followed by a logical interface to a device.

The Add Logical Interface page appears. Complete the configuration according to the guidelines provided in Table 3 and click OK.


Click to enable or disable an existing Link Aggregation profile.

Create an Aggregated Ethernet (AE) Interface

Click + to add an AE Interface. The Add AE Interface page appears.

Complete the configuration according to the guidelines provided in Table 4 and click OK.

Modify an AE Interface

Select a Link Aggregation profile and click the pencil icon.

The Modify AE Interface page appears, which shows the same fields as create a SSL Initiation Profile. You can modify some of the fields on this page. See Table 4 for more details on the fields. Click OK to save the changes.

Delete an AE Interface

Select one or more interfaces that you want to delete, and click the bin icon to delete the profiles.

The Warning page appears. Click Yes to confirm the deletion.

Show Hide Columns

Select to show or hide various parameters in the grid.

Table 2: Global Settings Action



Device Count

Enter the device count. This is the number of Aggregated Ethernet devices.

Note: The range is 1 through 128.

Table 3: Logical Interface Settings




AE Interface Name

Displays the AE Interface name that you have selected from the table.

Logical Interface Unit

Enter a valid logical interface. The range is 0 to 65535.

Note: By default, the value will be 0, unless VLAN tagging is enabled. You must enable VLAN tagging if you want to enter a value greater than zero.


Enter a valid description for logical interface. The maximum limit being 255 characters.


Enter the VLAN ID. The range is 0 to 4094.

Note: If the VLAN tagging is enabled, then the VLAN ID is mandatory.

IPV4 Address 

Add an IPV4 Address

Select + to add an IPV4 address for the logical interface.

IPV4 Address

Enter a valid IPV4 address.

Subnet Mask

Enter a valid subnet mask for IPV4 address.

IPV6 Address 

Add an IPV6 Address

Select + to add an IPV6 address for logical interface.

IPV6 Address

Enter a valid IPV6 address.

Subnet Mask

Enter a valid subnet mask for IPV6 address.

Table 4: AE Interface Settings



Global Settings

AE Name

Enter the name of the aggregated interface. If an aggregated interface already exists, then the field is displayed as read-only.


Select the interface available for aggregation and move to Selected column using right arrow.

Note: Only interfaces that are configured with the same speed can be selected together for a LAG.

Advanced Settings

LACP Configuration

Specifies global Link Aggregation Control Protocol configuration.


Select the mode in which Link Aggregation Control Protocol packets are exchanged between the interfaces. The modes are:

  • Active—Indicates that the interface initiates transmission of LACP packets

  • Passive—Indicates that the interface only responds to LACP packets.


Select transmission rates of link aggregation control PDUs. The options are:

  • Fast—Transmits link aggregation control PDUs every second.

  • Slow—Transmits link aggregation control PDUs every 30 seconds.

System Priority

Select the priority level that you associate with the LAG. Select the priority level that you want to associate with the LAG by clicking the arrow button.

The range is 0 to 65535.

Link Protection

Enable the option to protect the link. You can configure only two member links for an aggregated Ethernet interface, that is, one active and one standby.

Non Revertive

Select an option. It specifies not to switch links when higher priority link is available.


Enter a description of the LAG.

VLAN Tagging

Select to enable VLAN tagging for a LAG.