Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Interfaces Configuration

 

Configuring Gigabit Ethernet Interfaces (J-Web Procedure)

You can configure specific properties on your Ethernet interface to ensure optimal performance of your network in a high-traffic environment.

To configure properties on a Gigabit Ethernet interface, a 10-Gigabit Ethernet interface, and a 40-Gigabit Ethernet interface on an EX Series switch:

  1. Select Interfaces > Ports.

    The page that is displayed lists Gigabit Ethernet, 10-Gigabit Ethernet interfaces, and 40-Gigabit Ethernet interfaces, and their link statuses.

    Note

    After you make changes to the configuration on this page, you must commit the changes immediately for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes (J-Web Procedure) for details about all commit options.

  2. Select the interface you want to configure. For an EX8200 Virtual Chassis configuration, select the member and the FPC slot if the interface you want to configure is not listed under Ports in the top table on the page.

    Details for the selected interface, such as administrative status, link status, speed, duplex, and flow control, are displayed in the Details of port table on the page.

    Note

    You can select multiple interfaces and modify their settings at the same time. However, while doing this, you cannot modify the IP address or enable or disable the administrative status of the selected interfaces.

    Note

    In the J-Web interface, you cannot configure interface ranges and interface groups.

  3. Click Edit and select the set of options you want to configure first:
    • Port Role—Enables you to assign a profile for the selected interface.

      Note

      When you select a particular port role, preconfigured port security parameters are set for the VLAN that the interface belongs to. For example, if you select the port role Desktop, the port security options examine-dhcp and arp-inspection are enabled on the VLAN that the interface belongs to. If there are interfaces in the VLAN that have static IP addresses, those interfaces might lose connectivity because those static IP addresses might not be present in the DHCP pool. Therefore, when you select a port role, ensure that the corresponding port security settings for the VLAN are applicable to the interface.

      For basic information about port security features such as DHCP snooping (CLI option examine-dhcp) or dynamic ARP inspection (DAI) (CLI option arp-inspection), see Configuring Port Security (J-Web Procedure). For detailed descriptions of port security features, see the Port Security topics in the EX Series documentation at https://www.juniper.net/documentation/.

      Click Details to view the configuration parameters for the selected port role.

    • VLAN—Enables you to configure VLAN options for the selected interface.

    • Link—Enables you to modify the following link options for the selected interface:

      • Speed

      • MTU

      • Autonegotiation

      • Flow Control

      • Duplex

      • Media Type

    • IP—Enables you to configure an IP address for the interface.

  4. Configure the interface by configuring options in the selected option set. See Table 54 for details of the options.
  5. Repeat Steps 3 and 4 for the remaining option sets that you want to configure for the interface.Note

    To enable or disable the administrative status of a selected interface, click Enable Port or Disable Port.

Table 54: Port Edit Options

Field

Function

Your Action

Port Role Options

Port Role

Specifies a profile (role) to assign to the interface.

Note: After a port role is configured on the interface, you cannot specify VLAN options or IP options.

Note: Port roles are not supported by the et interfaces (40-Gigabit Ethernet interfaces) on EX4300 and EX4550 switches.

Note: Only the following port roles can be applied on EX8200 switch interfaces:

  • Default

  • Layer 2 uplink

  • Routed uplink

 

Default

Applies the default role.

The interface family is set to ethernet-switching, port mode is set to access, and RSTP is enabled.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security-arp-inspection will be configured.

  1. Click Details to view CLI commands for this role.
  2. Click OK.

Desktop

Applies the desktop role.

The interface family is set to ethernet-switching, port mode is set to access, RSTP is enabled with the edge and point-to-point options, and port security parameters (MAC limit =1; dynamic ARP inspection and DHCP snooping enabled) are set.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security groups and forwarding-options dhcp-security-arp-inspection will be configured.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface.
  2. Click Details to view CLI commands for this role.
  3. Click OK.

Desktop and Phone

Applies the desktop and phone role.

The interface family is set to ethernet-switching, port mode is set to access, port security parameters (MAC limit =1; dynamic ARP Inspection and DHCP snooping enabled) are set, and recommended class-of-service (CoS) parameters are specified for forwarding classes, schedulers, and classifiers. See Table 55 for more CoS information.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security groups and forwarding-options dhcp-security-arp-inspection will be configured.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface.

    You can also select an existing VoIP VLAN configuration or a new VoIP VLAN configuration to be associated with the interface.

    Note: VoIP is not supported on EX8200 switches.

  2. Click Details to view CLI commands for this role.
  3. Click OK.

Wireless Access Point

Applies the wireless access point role.

The interface family is set to ethernet-switching, port mode is set to access, and RSTP is enabled with the edge and point-to-point options.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface. Type the VLAN ID for a new VLAN.
  2. Click Details to view CLI commands for this role.
  3. Click OK.

Routed Uplink

Applies the routed uplink role.

The interface family is set to inet, and recommended CoS parameters are set for schedulers and classifiers. See Table 55 for more CoS information.

To specify an IPv4 address:

  1. Select the IPv4 address check box.
  2. Type an IP address—for example: 10.10.10.10.
  3. Enter the subnet mask or address prefix. For example, 24 bits represents 255.255.255.0.
  4. Click OK.

To specify an IPv6 address:

  1. Select the IPv6 address check box.
  2. Type an IP address—for example: 2001:ab8:85a3::8a2e:370:7334.
  3. Enter the subnet mask or address prefix.
  4. Click OK.

    Note: IPv6 is not supported on EX2200 VC switches.

Layer 2 Uplink

Applies the Layer 2 uplink role.

The interface family is set to ethernet-switching, port mode is set to trunk, RSTP is enabled with the point-to-point option, and trusted DHCP is configured for port security.

  1. For this port role, you can select a VLAN member and associate a native VLAN with the interface.
  2. Click Details to view CLI commands for this role.
  3. Click OK.

None

Specifies that no port role is configured for the selected interface.

 

Note: For an EX8200 switch, dynamic ARP inspection and DHCP snooping parameters are not configured.

VLAN Options

Port Mode

Specifies the mode of operation for the interface: trunk or access.

If you select Trunk, you can:

  1. Click Add to add a VLAN member.
  2. Select the VLAN and click OK.
  3. (Optional) Associate a native VLAN with the interface.
  4. Click OK.

If you select Access, you can:

  1. Select the VLAN member to be associated with the interface.
  2. (Optional) Associate a VoIP VLAN with the interface. Only a VLAN with a VLAN ID can be associated as a VoIP VLAN.

    Note: VoIP is not supported on EX8200 switches.

  3. Click OK.

Link Options

MTU (bytes)

Specifies the maximum transmission unit size (MTU) for the interface.

Type a value from 256 through 9216. The default MTU size for Gigabit Ethernet interfaces is 1514.

Speed

Specifies the speed for the mode.

Select one of the following values: 10 Mbps, 100 Mbps, 1000 Mbps, or Auto-Negotiation.

Note: EX4300 switches support Auto-Negotiation 10M-100M apart from the values mentioned above.

Duplex

Specifies the link mode.

Select one: automatic, half, or full.

Note:

  • For EX4300 switches’ link-mode setting, see Configuring Gigabit Ethernet Interfaces (CLI Procedure) for EX Series Switches with ELS support.

Description

Describes the link.

Note: If the interface is part of a link aggregation group (LAG), only the Description option is enabled. Other Port Edit options are unavailable.

Enter a brief description for the link.

Enable Auto Negotiation

Enables or disables autonegotiation.

Select the check box to enable autonegotiation, or clear the check box to disable it. By default, autonegotiation is enabled.

Enable Flow Control

Enables or disables flow control.

Select the check box to enable flow control to regulate the amount of traffic sent out of the interface, or clear the check box to disable flow control and permit unrestricted traffic. Flow control is enabled by default.

Media Type

Specifies the media type selected.

Select the check box to enable the media type. Then select Copper or Fiber.

IP Options

IPv4 Address

Specifies an IPv4 address for the interface.

Note: If the IPv4 Address check box is cleared, the interface still belongs to the inet family.

  1. Select the IPv4 address check box to specify an IPv4 address.
  2. Type an IP address—for example: 10.10.10.10.
  3. Enter the subnet mask or address prefix. For example, 24 bits represents 255.255.255.0.
  4. Click OK.

IPv6 Address

Specifies an IPv6 address for the interface.

Note: If the IPv6 Address check box is cleared, the interface still belongs to the inet family.

  1. Select the IPv6 address check box to specify an IPv6 address.
  2. Type an IP address—for example: 2001:ab8:85a3::8a2e:370:7334.
  3. Enter the subnet mask or address prefix.
  4. Click OK.

    Note: IPv6 address is not supported on EX2200 and EX4500 switches.

Table 55: Recommended CoS Settings for Port Roles

CoS Parameter

Recommended Settings

Forwarding Classes

There are four forwarding classes:

  • voice—Queue number is set to 7.

  • expedited-forwarding—Queue number is set to 5.

  • assured-forwarding—Queue number is set to 1.

  • best-effort—Queue number is set to 0.

Schedulers

The schedulers and their settings are:

  • Strict-priority—Transmission rate is set to 10 percent and buffer size to 5 percent.

  • Expedited-scheduler—Transmission rate is set to 30 percent, buffer size to 30 percent, and priority to low.

  • Assured-scheduler—Transmission rate is set to 25 percent, buffer size to 25 percent, and priority to low.

  • Best-effort scheduler—Transmission rate is set to 35 percent, buffer size to 40 percent, and priority to low.

Scheduler maps

When a desktop and phone, routed uplink, or Layer 2 uplink role is applied on an interface, the forwarding classes and schedulers are mapped using the scheduler map.

ieee-802.1 classifier

Imports the default ieee-802.1 classifier configuration and sets the loss priority to low for the code point 101 for the voice forwarding class.

dscp classifier

Imports the default dscp classifier configuration and sets the loss priority to low for the code point 101110 for the voice forwarding class.

Configuring Aggregated Ethernet Interfaces (J-Web Procedure)

Note

This topic applies only to the J-Web Application package.

For J-Web Application package Release 14.1X53-A2, on EX4600 switches the maximum number of link aggregation group (LAG) devices supported is 1000.

Use the link aggregation feature to aggregate one or more Ethernet interfaces to form a virtual link or LAG on an EX Series switch. The MAC client can treat this virtual link as if it were a single link. Link aggregation increases bandwidth, provides graceful degradation when failure occurs, and increases availability. You can use the J-Web interface to configure LAGs, on the switch.

Note

Interfaces that are already configured with MTU, duplex, flow control, or logical interfaces are listed but are not available for aggregation.

To configure a LAG:

  1. Select Configure > Interfaces > Link Aggregation.

    The list of aggregated interfaces is displayed.

    Note

    After you make changes to the configuration on this page, you must commit the changes immediately for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes (J-Web Procedure) for details about all commit options.

  2. Select one of the following:
    • Add—Creates a LAG. Enter information as specified in Table 56.

    • Edit—Modifies a selected LAG.

      • Aggregation—Modifies settings for the selected LAG. Enter information as specified in Table 56.

      • VLAN—Specifies VLAN options for the selected LAG. Enter information as specified in Table 57.

      • IP Option—Specifies IP options for the selected LAG. Enter information as specified in Table 58.

    • Delete—Deletes the selected LAG.

    • Disable Port or Enable Port—Disables or enables the administrative status on the selected interface.

    • Device Count—Configures the number of aggregated logical devices available to the switch. Select the number and click OK.

Table 56: Aggregated Ethernet Interface Options

Field

Function

Your Action

Aggregated Interface

Specifies the name of the aggregated interface.

None. The name is supplied by the software.

LACP Mode

Specifies the mode in which Link Aggregation Control Protocol (LACP) packets are exchanged between the interfaces. The modes are:

  • None—Indicates that no mode is applicable.

  • Active—Indicates that the interface initiates transmission of LACP packets

  • Passive—Indicates that the interface responds only to LACP packets.

Select from the list.

Description

Specifies a description for the LAG.

Enter a description.

Interface

Specifies the interfaces in the LAG.

To add interfaces to the LAG, select the interfaces and click Add. For an EX8200 Virtual Chassis configuration, select the member, FPC, and the interface from the list. Click OK.

To remove an interface from the LAG, select the interface and click Remove.

Note: Only interfaces that are configured with the same speed can be selected together for a LAG.

Enable Log

Specifies whether to enable generation of log entries for the LAG.

Select the check box to enable log generation, or clear the check box to disable log generation.

Table 57: VLAN Options

Field

Function

Your Action

Port Mode

Specifies the mode of operation for the port: trunk or access.

If you select Trunk, you can:

  1. Click Add to add a VLAN member.
  2. Select the VLAN and click OK.
  3. (Optional) Associate a native VLAN ID with the port.

If you select Access, you can:

  1. Select the VLAN member to be associated with the port.
  2. (Optional) Associate a VoIP VLAN with the interface. Only a VLAN with a VLAN ID can be associated as a VoIP VLAN.

Click OK.

Table 58: IP Options

Field

Function

Your Action

IPv4 Address

Specifies an IPv4 address for the selected LAG.

  1. Select the check box IPv4 address.
  2. Type an IP address—for example, 10.10.10.10.
  3. Enter the subnet mask or address prefix. For example, 24 bits represents 255.255.255.0.
  4. Click OK.

IPv6 Address

Specifies an IPv6 address for the selected LAG.

  1. Select the check box IPv6 address.
  2. Type an IP address—for example, 2001:ab8:85a3::8a2e:370:7334.
  3. Enter the subnet mask or address prefix.
  4. Click OK.

Configuring PoE (J-Web Procedure)

Note

This topic applies only to the J-Web Application package.

J-Web Application package Release 14.1X53-A2 does not support Power over Ethernet (PoE) on EX4600 switches.

PoE (and PoE+) ports supply electric power over the same ports that are used to connect network devices to EX Series switches. You can use these ports to plug in devices that require both network connectivity and electric power, such as VoIP phones, wireless access points, and some IP cameras. Using the Power over Ethernet (PoE) Configuration page in the J-Web interface, you can modify the settings of all interfaces that are PoE-enabled.

This topic includes:

Configuring PoE on EX2200, EX2200-C, EX3200, EX3300, EX4200, and EX4300 Switches

To configure PoE:

  1. Select Configure > Power over Ethernet.

    The page displays a list of all PoE-capable interfaces except uplink ports. Specific operational details about an interface are displayed in the Details section of the page. The details include the PoE operational status and port class.

    Note

    If you are configuring a Virtual Chassis, the PoE configuring option is displayed if any member of the Virtual Chassis supports PoE, even if the Virtual Chassis master does not support PoE.

    Note

    After you make changes to the configuration on this page, you must commit the changes for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes for details about all commit options.

  2. Select one of the following options:
    • Edit—Changes PoE settings for the selected port as described in Table 59.

    • System Settings—Modifies general PoE settings as described in Table 60.

Table 59: PoE Edit Settings

Field

Description

Your Action

Enable PoE

Specifies that PoE is enabled on the interface.

Select this option to enable PoE or PoE+ on the interface.

Priority

Lists the power priority (low or high) configured on the interface enabled for PoE.

Set the priority as High or Low.

Maximum Power

Specifies the maximum PoE wattage available to provision the active PoE interface on the switch.

Select a value in watts. If no value is specified, the default is 15.4 for PoE interfaces and 30.0 for PoE+ interfaces.

Table 60: System Settings

Field

Description

Your Action

PoE Management

Specifies the power management mode. The options are: static and class.

Note: When the power management mode is set to class, the maximum power value is overridden by the maximum power value of the class of the powered device that is connected to the switch on the PoE port. When the power management mode is set to static, you can specify the maximum power for each PoE interface.

By default, the power management mode is class. Select static to change the power management mode.

Guard Band (watts)

Specifies the amount of power reserved for power spikes from the PoE power budget of the switch.

Enter a value to set the guard band value in watts. The default value is 0.

Configuring PoE on EX6200 Switches

To configure PoE:

  1. Select Configure > Power over Ethernet.

    The page displays a list of all PoE-capable interfaces for each FPC. Specific operational details about an interface are displayed in the Details section of the page. The details include the PoE operational status and port class.

    Note

    After you make changes to the configuration on this page, you must commit the changes for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes (J-Web Procedure) for details about all commit options.

  2. Select one of the following options:
    • Edit—Changes PoE settings for the selected port as described in Table 61.

    • FPC Settings—Changes PoE settings of PoE-capable FPCs.

      To configure FPC settings, select one of the following options:

      • Add—Adds a PoE setting for an FPC as described in Table 62.

      • Edit—Modifies a PoE setting for an FPC as described in Table 62.

      • Delete—Deletes an existing PoE settings for an FPC.

Table 61: Edit PoE Settings

Field

Description

Your Action

Enable PoE

Specifies that PoE is enabled on the interface.

Select this option to enable PoE or PoE+ on the interface.

Type

Specifies whether the interface is PoE or PoE+.

Select an option from the list.

Priority

Lists the power priority (low or high) configured on the interface enabled for PoE.

Set the priority as High or Low.

Maximum Power

Specifies the maximum PoE wattage available to provision active PoE ports on the switch.

Select a value in watts. If no value is specified, the default is 15.4 for PoE interfaces and 30.0 for PoE+ interfaces.

Table 62: FPC PoE Settings

Field

Description

Your Action

FPC

Specifies the FPC number.

Select a value from the list.

PoE Management

Specifies the power management mode. The options are static and class.

Note: When the power management mode is set to class, the maximum power value is overridden by the maximum power value for the interface that is connected to the switch on the PoE port. When the power management mode is set to static, you can specify the maximum power for each PoE interface.

By default, the power management mode is class. Select static to change the power management mode.

Guard Band (watts)

Specifies the amount of power reserved for power spikes from the PoE power budget of the switch.

Enter a value to set the guard band value in watts. The default value is 0.

Maximum Power

Specifies the maximum PoE wattage available to provision active PoE ports on the FPC. For example, if you specify 1000 W, the PoE controller is limited to a power budget of 1000 W to distribute to the PoE ports.

Select a value in watts.

Release History Table
Release
Description
For J-Web Application package Release 14.1X53-A2, on EX4600 switches the maximum number of link aggregation group (LAG) devices supported is 1000.
J-Web Application package Release 14.1X53-A2 does not support Power over Ethernet (PoE) on EX4600 switches.