vlans
List of Syntax
Syntax (QFX Series, QFabric, NFX Series and EX4600)Syntax (QFX Series, NFX Series and EX4600)Syntax (SRX Series and EX Series)Syntax (SRX Series)Syntax (vSRX)Syntax (QFX Series, QFabric, NFX Series and EX4600)
vlans {
vlan-name {
dot1q-tunneling {
customer-vlans (id | range);
}
mapping (policy | tag push | native
push);
}
no-local-switching;
no-mac-learning;
vlan-range vlan-id-low-vlan-id-high;
}
}
Syntax (QFX Series, NFX Series and EX4600)
vlans {
vlan-name {
dhcp-security {
interface interface-name {
}
no-option82;
trusted;
untrusted;
}
}
circuit-id {
prefix {
host-name;
logical-system-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
use-interface-description (device | logical);
}
vendor-id {
use-string string;
}
}
}
(fcoe-trusted | no-fcoe-trusted;)
}
}
}
multicast-snooping-options {
flood-groups [group-names];
forwarding-cache {
threshold {
reuse threshold;
suppress threshold;
}
}
graceful-restart {
disable;
restart-duration duration;
}
host-outbound-traffic {
dot1p bits;
forwarding-class forwarding-class;
}
multichassis-lag-replicate-state;
nexthop-hold-time time;
options {
syslog {
mark interval;
upto level;
}
}
traceoptions {
file filename {
files number;
no-world-readable;
size file-size;
world-readable;
}
}
}
switch-options {
interface interface-name {
}
}
}
inner value;
outer value;
}
}
}
Syntax (SRX Series and EX Series)
vlans {
vlan-name {
egress;
mapping (native (push | swap) | policy |
tag (push
| swap));
}
}
}
Syntax (SRX Series)
vlans {
vlan name {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-mac;
use-string use-string;
}
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-mac;
use-string use-string;
}
}
interface interface-name {
ip-address {
mac-address;
}
}
static-ipv6 {
ip-address {
mac-address;
}
}
}
}
ipv6-source-guard;
neighbor-discovery-inspection;
host-name;
logical-system-name;
}
use-vlan-id;
}
use-interface-description (device | logical);
}
}
}
}
interface interface-name;
mcae-mac-flush;
mcae-mac-synchronize;
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
static-mac mac-address {
vlan-id value;
}
}
mac-table-aging-time seconds;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
Syntax (vSRX)
vlans {
vlan name {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-mac;
use-string use-string;
}
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-mac;
use-string use-string;
}
}
interface interface-name {
static-ipv6 {
ip-address;
}
}
}
ipv6-source-guard;
light-weight-dhcpv6-relay;
neighbor-discovery-inspection;
host-name;
logical-system-name;
}
use-vlan-id;
}
use-interface-description (device | logical);
}
}
}
}
interface interface-name;
mcae-mac-synchronize;
no-irb-layer-2-copy;
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
disable;
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-pinning;
no-mac-learning;
static-mac mac-address {
vlan-id value;
}
}
mac-statistics;
mac-table-aging-time seconds;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
Hierarchy Level
[edit routing-instances routing-instance-name]
Release Information
Statement introduced in Junos OS Release
9.0 for EX Series switches.
Statement introduced in Junos OS Release 11.1 for the QFX Series.
Statements for private VLANs and Q-in-Q tunneling introduced
in Junos OS Release 12.1 for the QFX Series.
Statement introduced in Junos OS Release 13.2 for the QFX Series.
Statement introduced in Junos OS Release 15.1X49-D10.
Description
Configure VLAN properties.
On EX Series switches and SRX Series devices (including vSRX),
the following configuration guidelines apply:
Only private VLAN (PVLAN) firewall filters can be used
when the VLAN is enabled for Q-in-Q tunneling.
An S-VLAN tag is added to the packet if the VLAN is Q-in-Q-tunneled
and the packet is arriving from an access interface.
You cannot use a firewall filter to assign an integrated
routing and bridging (IRB) interface or a routed VLAN interface (RVI)
to a VLAN.
VLAN assignments performed using a firewall filter override
all other VLAN assignments.
Default
If you use the default factory configuration, all switch
interfaces become part of the VLAN default.
Options
vlan-name—Name
of the VLAN. The name can include letters, numbers, hyphens (-), and
periods (.) and can contain up to 255 characters long.
The remaining statements are explained separately. See CLI Explorer.
The remaining statements are described separately.
Required Privilege Level
routing—To view this statement in the
configuration.
routing–control—To add this statement to the configuration.
system—To view this statement in the configuration.
system–control—To add this statement to the configuration.
