vlans
구문(QFX 시리즈, QFabric, NFX 시리즈 및 EX4600)
vlans {
vlan-name {
description text-description;
dot1q-tunneling {
customer-vlans (id | range);
}
filter input filter-name;
filter output filter-name;
interface interface-name {
isolated;
mapping (policy | tag push | native push);
promiscuous;
}
isolation-vlan-id;
l3-interface vlan.logical-interface-number;
mac-limit number;
no-local-switching;
no-mac-learning;
primary-vlan vlan-name;
pvlan extend-secondary-vlan-id vlan-id;
vlan-id number;
vlan-range vlan-id-low-vlan-id-high;
}
}
구문(QFX 시리즈, NFX 시리즈 및 EX4600)
vlans {
vlan-name {
description text-description;
domain-type bridge;
forwarding-options {
dhcp-security {
arp-inspection;
group group-name {
interface interface-name {
static-ip ip-address {
mac mac-address;
}
}
overrides {
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
no-dhcp-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name hostname;
use-interface-description (device | logical);
use-string string;
}
vendor-id {
use-string string;
}
}
}
fip-security {
examine-vn2vf;
examine-vn2vn {
beacon-period milliseconds;
}
fc-map fc-map-value;
interface interface-name {
(fcoe-trusted | no-fcoe-trusted;)
}
}
}
l3-interface irb.logical-unit-number;
multicast-snooping-options {
flood-groups [group-names];
forwarding-cache {
threshold {
reuse threshold;
suppress threshold;
}
}
graceful-restart {
disable;
restart-duration duration;
}
host-outbound-traffic {
dot1p bits;
forwarding-class forwarding-class;
}
multichassis-lag-replicate-state;
nexthop-hold-time time;
options {
syslog {
level level;
mark interval;
upto level;
}
}
traceoptions {
file filename {
files number;
no-world-readable;
size file-size;
world-readable;
}
flag flag {
disable;
}
}
}
switch-options {
interface interface-name {
interface-mac-limit limit {
packet-action action;
}
static-mac mac-address;
}
interface-mac-limit limit {
packet-action action;
}
mac-move-limit limit {
packet-action action;
}
mac-table-size limit {
packet-action drop;
}
no-mac-learning;
}
}
vlan-id number;
vlan-id-list [vlan-id | vlan-id–vlan-id];
vlan-tags
inner value;
outer value;
}
vxlan {
ingress-node-replication
ovsdb-managed
}
}
}
}
구문(SRX 시리즈 및 EX 시리즈)
vlans {
vlan-name {
description text-description;
dot1q-tunneling {
customer-vlans (id | range)
layer2-protocol-tunneling all | protocol-name {
drop-threshold number;
shutdown-threshold number;
}
}
filter input filter-name;
filter output filter-name;
interface interface-name {
egress;
ingress;
mapping (native (push | swap) | policy | tag (push | swap));
pvlan-trunk;
}
isolation-id id-number;
l3-interface l3-interface-name.logical-interface-number;
l3-interface-ingress-counting layer-3-interface-name;
mac-limit limit action action;
mac-table-aging-time seconds;
no-local-switching;
no-mac-learning;
primary-vlan vlan-name;
vlan-id number;
vlan-prune;
vlan-range vlan-id-low-vlan-id-high;
}
}
구문(SRX 시리즈)
vlans {
vlan name {
(vlan-id (1..3967) | vlan-id-list [ vlan-id-numbers]);
description;
forwarding-options {
dhcp-security {
arp-inspection;
dhcpv6-options {
option-16 {
use-string use-string;
}
option-18 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
option-37 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
}
group group-name {
interface interface-name {
static-ip {
ip-address {
mac-address;
}
}
static-ipv6 {
ip-address {
mac-address;
}
}
}
overrides {
no-dhcpv6-options;
no-option16;
no-option18;
no-option37;
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
ipv6-source-guard;
neighbor-discovery-inspection;
no-dhcp-snooping;
no-dhcpv6-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name;
mac;
use-interface-description (device | logical);
use-string use-string;
}
vendor-id {
use-string use-string;
}
}
}
filter {
input filter-name;
}
flood {
input filter-name;
}
}
interface interface-name;
l3-interface l3-interface-name;
mcae-mac-flush;
mcae-mac-synchronize;
service-id service-id;
switch-options {
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
no-mac-learning;
pseudowire-status-tlv;
static-mac mac-address {
vlan-id value;
}
}
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-table-aging-time seconds;
mac-table-size {
limit;
packet-action {
drop;
}
}
no-mac-learning;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
구문(vSRX 가상 방화벽)
vlans {
vlan name {
(vlan-id (all | none | number) | vlan-id-list [ vlan-id-numbers] | vlan-tags <inner number> outer number);
description;
forwarding-options {
dhcp-security {
arp-inspection;
dhcpv6-options {
option-16 {
use-string use-string;
}
option-18 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
option-37 {
prefix {
host-name;
logical-system-name;
routing-instance-name;
vlan-id;
vlan-name;
}
use-interface-description (device | logical);
use-interface-index (device | logical);
use-interface-mac;
use-interface-name (device | logical);
use-string use-string;
}
}
group group-name {
interface interface-name {
static-ip {
ip-address;
}
static-ipv6 {
ip-address;
}
}
overrides {
no-dhcpv6-options;
no-option16;
no-option18;
no-option37;
no-option82;
trusted;
untrusted;
}
}
ip-source-guard;
ipv6-source-guard;
light-weight-dhcpv6-relay;
neighbor-discovery-inspection;
no-dhcp-snooping;
no-dhcpv6-snooping;
option-82 {
circuit-id {
prefix {
host-name;
logical-system-name;
routing-instance-name;
}
use-interface-description (device | logical);
use-vlan-id;
}
remote-id {
host-name;
mac;
use-interface-description (device | logical);
use-string use-string;
}
vendor-id {
use-string use-string;
}
}
}
filter {
input filter-name;
}
flood {
input filter-name;
}
}
interface interface-name;
l3-interface l3-interface-name;
mcae-mac-synchronize;
no-irb-layer-2-copy;
service-id service-id;
switch-options {
interface name {
action-priority action-priority;
encapsulation-type (ethernet | ethernet-vlan);
ignore-encapsulation-mismatch;
interface-mac-limit {
disable;
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-pinning;
no-mac-learning;
pseudowire-status-tlv;
static-mac mac-address {
vlan-id value;
}
}
interface-mac-limit {
limit;
packet-action (drop | drop-and-log | log | none | shutdown);
}
mac-statistics;
mac-table-aging-time seconds;
mac-table-size {
limit;
packet-action {
drop;
}
}
no-mac-learning;
static-rvtep-mac {
mac mac_addr {
remote-vtep;
}
}
}
}
}
계층 수준
[edit]
[edit routing-instances routing-instance-name]
설명
VLAN 속성을 구성합니다.
EX 시리즈 스위치 및 SRX 시리즈 방화벽(vSRX 가상 방화벽 포함)에서는 다음 구성 지침이 적용됩니다.
VLAN이 Q-in-Q 터널링을 위해 활성화될 때는 프라이빗 VLAN(PVLAN) 방화벽 필터만 사용할 수 있습니다.
VLAN이 Q-in-Q 터널링되고 패킷이 액세스 인터페이스에서 도착하는 경우 S-VLAN 태그가 패킷에 추가됩니다.
방화벽 필터를 사용하여 통합 라우팅 및 브리징(IRB) 인터페이스 또는 라우팅된 VLAN 인터페이스(RVI)를 VLAN에 할당할 수 없습니다.
방화벽 필터를 사용하여 수행된 VLAN 할당은 다른 모든 VLAN 할당을 재정의합니다.
기본
기본 공장 구성을 사용하면 모든 스위치 인터페이스가 VLAN default의 일부가 됩니다.
옵션
vlan-name-VLAN 이름. 이름은 문자, 숫자, 하이픈(-), 기간(.)을 포함할 수 있으며 최대 255자 길이를 포함할 수 있습니다.
나머지 문은 별도로 설명됩니다. CLI 탐색기를 참조하십시오.
나머지 문은 별도로 설명되어 있습니다.
필수 권한 수준
routing - 구성에서 이 명령문을 볼 수 있습니다.
routing–control - 구성에 이 명령문을 추가합니다.
system - 구성에서 이 명령문을 볼 수 있습니다.
system–control - 구성에 이 명령문을 추가합니다.
출시 정보
Junos OS 릴리스 9.0에서 소개된 명령문입니다.
프라이빗 VLAN 및 Q-in-Q 터널링에 대한 문은 QFX 시리즈 Junos OS 릴리스 12.1에서 소개되었습니다.