Switching
- Configuring VLANs—Quick Configuration
- Configuring a Spanning Tree—Quick Configuration
- Configuring IGMP Snooping—Quick Configuration
- Configuring GVRP—Quick Configuration
Configuring VLANs—Quick Configuration
Each VLAN is a collection of network nodes that are grouped together to form separate broadcast domains. On an Ethernet network that is a single LAN, all traffic is forwarded to all nodes on the LAN. On VLANs, frames whose origin and destination are in the same VLAN are forwarded only within the local VLAN. Frames that are not destined for the local VLAN are the only ones forwarded to other broadcast domains. VLANs thus limit the amount of traffic flowing across the entire LAN, reducing the possible number of collisions and packet retransmissions within a VLAN and on the LAN as a whole.
On an Ethernet LAN, all network nodes must be physically connected to the same network. On VLANs, the physical location of the nodes is not important, so you can group network devices in any way that makes sense for your organization, such as by department or business function, by types of network nodes, or even by physical location. Each VLAN is identified by a single IP subnetwork and by standardized IEEE 802.1Q encapsulation.
To access the VLAN:
- In the J-Web user interface, select Configure>Switching>VLAN.
The VLAN configuration page displays a list of existing VLANs. If you select a specific VLAN, the specific VLAN details are displayed in the details section.
- Click one:
- Add—Creates a VLAN.
- Edit—Edits an existing VLAN configuration.
- Delete—Deletes an existing
VLAN.
Note: If you delete a VLAN, the VLAN configuration for all the associated interfaces is also deleted.
When you are adding or editing a VLAN, enter information as described in Table 71.
- Click one:
- OK—Saves the configuration and returns to the main configuration page, then click Commit Options>Commit.
- Cancel—Cancels your entries and returns to the main configuration page.
Table 71: VLAN Configuration Details
Field | Function | Action |
---|---|---|
General | ||
VLAN Name | Specifies a unique name for the VLAN. | Enter a name. Note: VLAN text field is disabled when vlan-tagging is not enabled. |
VLAN ID/Range | Specifies the identifier or range for the VLAN. | Select one:
|
Description | Describes the VLAN. | Enter a brief description for the VLAN. |
Input Filter | Specifies the VLAN firewall filter that is applied to incoming packets. | To apply an input firewall filter, select the firewall filter from the list. |
Output Filter | Specifies the VLAN firewall filter that is applied to outgoing packets. | To apply an output firewall filter, select the firewall filter from the list. |
Ports | ||
Ports | Specifies the ports to be associated with this VLAN for data traffic. You can also remove the port association. | Click one:
|
IP Address | ||
Layer 3 Information | Specifies IP address options for the VLAN. | Select to enable the IP address options. |
IP Address | Specifies the IP address of the VLAN. | Enter the IP address. |
Subnet Mask | Specifies the range of logical addresses within the address space that is assigned to an organization. | Enter the address, for example, 255.255.255.0. You can also specify the address prefix. |
Input Filter | Specifies the VLAN interface firewall filter that is applied to incoming packets. | To apply an input firewall filter to an interface, select the firewall filter from the list. |
Output Filter | Specifies the VLAN interface firewall filter that is applied to outgoing packets. | To apply an output firewall filter to an interface, select the firewall filter from the list. |
ARP/MAC Details | Specifies the details for configuring the static IP address and MAC. | Click the ARP/MAC Details button. Enter the static IP address and MAC address in the window that is displayed. |
VoIP | ||
Ports | Specifies the ports to be associated with this VLAN for voice traffic. You can also remove the port association. | Click one:
|
Configuring a Spanning Tree—Quick Configuration
Juniper devices provide Layer 2 loop prevention through Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP). You can configure bridge protocols data unit (BPDU) protection on interfaces to prevent them from receiving BPDUs that could result in STP misconfigurations, which could lead to network outages.
You can use the J-Web Quick Configuration to add a spanning tree or to edit or delete an existing spanning tree.
To access the Spanning Tree Quick Configuration:
- In the J-Web user interface, select Configure>Switching>Spanning Tree.
The Spanning Tree Configuration page displays a list of existing spanning trees. If you select a specific spanning tree, the specific spanning tree details are displayed in the General and Interfaces tabs.
- Click one of the following:
- Add—Creates a spanning tree.
- Edit—Edits an existing spanning-tree configuration.
- Delete—Deletes an existing spanning tree.
When you are adding a spanning tree, select a protocol name:
- If you select STP, enter information as described in Table 72.
- If you select RSTP, enter information as described in Table 73.
- If you select MSTP, enter information as described in Table 74.
Select the Ports tab to configure the ports associated with this spanning tree. Click one of the following:
- Add—Creates a new spanning-tree interface configuration.
- Edit—Modifies an existing spanning-tree interface configuration.
- Delete—Deletes an existing spanning-tree interface configuration.
When you are adding or editing a spanning-tree port, enter information as described in Table 75.
- Click one:
- Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.
- click Cancel to cancel the configuration without saving changes.
Table 72: STP Configuration Parameters
Field | Function | Action |
---|---|---|
Protocol Name | Displays the spanning-tree protocol. | View only. |
Disable | Disables STP on the interface. | To enable this option, select the check box. |
BPDU Protect | Specifies that BPDU blocks are to be processed. | To enable this option, select the check box. |
Bridge Priority | Specifies the bridge priority. The bridge priority determines which bridge is elected as the root bridge. If two bridges have the same path cost to the root bridge, the bridge priority determines which bridge becomes the designated bridge for a LAN segment. | Select a value. |
Forward Delay | Specifies the number of seconds an interface waits before changing from spanning-tree learning and listening states to the forwarding state. | Enter a value from 4 through 30 seconds. |
Hello Time | Specifies time interval in seconds at which the root bridge transmits configuration BPDUs. | Enter a value from 1 through 10 seconds. |
Max Age | Specifies the maximum aging time in seconds for all MST instances. The maximum aging time is the number of seconds a switch waits without receiving spanning-tree configuration messages before attempting a reconfiguration. | Enter a value from 6 through 40 seconds. |
Table 73: RSTP Configuration Parameters
Field | Function | Action |
---|---|---|
Protocol Name | Displays the spanning-tree protocol. | View only. |
Disable | Specifies whether RSTP must be disabled on the interface. | To enable this option, select the check box. |
BPDU Protect | Specifies that BPDU blocks are to be processed. | To enable this option, select the check box. |
Bridge Priority | Specifies the bridge priority. The bridge priority determines which bridge is elected as the root bridge. If two bridges have the same path cost to the root bridge, the bridge priority determines which bridge becomes the designated bridge for a LAN segment. | Select a value. |
Forward Delay | Specifies the number of seconds a port waits before changing from its spanning-tree learning and listening states to the forwarding state. | Enter a value from 4 through 30 seconds. |
Hello Time | Specifies the hello time in seconds for all MST instances. | Enter a value from 1 through 10 seconds. |
Max Age | Specifies the maximum aging time in seconds for all MST instances. The maximum aging time is the number of seconds a switch waits without receiving spanning-tree configuration messages before attempting a reconfiguration. | Enter a value from 6 through 40 seconds. |
Table 74: MSTP Configuration Parameters
Field | Function | Action |
---|---|---|
Protocol Name | Displays the spanning-tree protocol. | View only. |
Disable | Specifies whether MSTP must be disabled on the interface. | To enable this option, select the check box. |
BPDU Protect | Specifies that BPDU blocks are to be processed. | To enable this option, select the check box. |
Bridge Priority | Specifies the bridge priority. The bridge priority determines which bridge is elected as the root bridge. If two bridges have the same path cost to the root bridge, the bridge priority determines which bridge becomes the designated bridge for a LAN segment. | Select a value. |
Forward Delay | Specifies the number of seconds a port waits before changing from its spanning-tree learning and listening states to the forwarding state. | Enter a value from 4 through 30 seconds. |
Hello Time | Specifies the hello time in seconds for all MST instances. | Enter a value from 1 through 10 seconds. |
Max Age | Specifies the maximum aging time for all MST instances. The maximum aging time is the number of seconds a switch waits without receiving spanning-tree configuration messages before attempting a reconfiguration. | Enter a value from 6 through 40 seconds. |
Configuration Name | MSTP region name carried in the MSTP bridge protocol data units (BPDUs). | Enter a name. |
Max Hops | Maximum number of hops a BPDU can be forwarded in the MSTP region | Enter a value from 1 through 255. |
Revision Level | Revision number of the MSTP region configuration. | Enter a value from 0 through 65535. |
MSTI tab | ||
MSTI Id | Specifies the multiple spanning-tree instance (MSTI) identifier. MSTI IDs are local to each region, so you can reuse the same MSTI ID in different regions. | Click one:
|
Bridge Priority | Specifies the bridge priority. The bridge priority determines which bridge is elected as the root bridge. If two bridges have the same path cost to the root bridge, the bridge priority determines which bridge becomes the designated bridge for a LAN segment. | Select a value. |
VLAN | Specifies the VLANs for the MSTI. | Click one:
|
Interfaces | Specifies the interface for the MSTP protocol. | Click one:
|
Table 75: Spanning-Tree Ports Configuration Details
Field | Function | Action |
---|---|---|
Interface Name | Specifies the interface for the spanning-tree protocol type. | Select an interface. |
Cost | Specifies the link cost to control which bridge is the designated bridge and which interface is the designated interface. | Enter a value from 1 through 200,000,000. |
Priority | Specifies the interface priority to control which interface is elected as the root port. | Select a value. |
Edge | Configures the interface as an edge interface. Edge interfaces immediately transition to a forwarding state. | Select to configure the interface as an edge interface. |
Mode | Specifies the link mode. | Select one:
|
Configuring IGMP Snooping—Quick Configuration
IGMP snooping regulates multicast traffic in a switched network. With IGMP snooping enabled, the Juniper device monitors the IGMP transmissions between a host (a network device) and a multicast router, keeping track of the multicast groups and associated member interfaces. The Juniper device uses that information to make intelligent multicast-forwarding decisions and forward traffic to the intended destination interfaces.
You can use the J-Web Quick Configuration to add a new IGMP snooping configuration or to edit or delete an existing configuration.
To access the IGMP Snooping Quick Configuration:
- In the J-Web user interface, select Configure>Switching>IGMP Snooping.
The VLAN Configuration page displays a list of existing IGMP snooping configurations.
- Click one:
- Add—Creates an IGMP snooping configuration for the VLAN.
- Edit—Edits an existing IGMP snooping configuration for the VLAN.
- Delete—Deletes member settings for the interface.
Note: If you delete a configuration, the VLAN configuration for all the associated interfaces is also deleted.
- Disable Vlan—Disables IGMP snooping on the selected VLAN.
When you are adding or editing a VLAN, enter information as described in Table 76.
- Click one:
- Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.
- Click Cancel to cancel the configuration without saving changes.
Table 76: IGMP Snooping Configuration Fields
Field | Function | Action |
---|---|---|
VLAN Name | Specifies the VLAN on which to enable IGMP snooping. | Select the VLAN from the list. |
Immediate Leave | Immediately removes a multicast group membership from an interface when it receives a leave message from that interface and suppresses the sending of any group-specific queries for the multicast group | To enable the option, select the check box. To disable the option, clear the check box. |
Query Interval | Configures how frequently the switch sends host-query timeout messages to a multicast group. | Enter a value from 1 through 1024 seconds. |
Query Last Member Interval | Configures the interval between group-specific query timeout messages sent by the switch. | Enter a value from 1 through 1024 seconds. |
Query Response Interval | Configures the length of time the switch waits to receive a response to a specific query message from a host. | Enter a value from 1 through 25 seconds. |
Robust Count | Specifies the number of timeout intervals the switch waits before timing out a multicast group. | Enter a value from 2 through 10. |
Interfaces List | Statically configures an interface as a switching interface toward a multicast router (the interface to receive multicast traffic). |
|
Configuring GVRP—Quick Configuration
As a network expands and the number of clients and VLANs increases, VLAN administration becomes complex, and the task of efficiently configuring VLANs on multiple EX Series switches becomes increasingly difficult. To automate VLAN administration, you can enable GARP VLAN Registration Protocol (GVRP) on the network.
GVRP learns VLANs on a particular 802.1Q trunk port, and adds the corresponding trunk interface to the VLAN if the advertised VLAN is preconfigured or existing already on the switch. For example, a VLAN named “sales” is advertised to trunk interface 1 on the GVRP-enabled switch. The switch adds trunk interface 1 to the sales VLAN if the sales VLAN already exists on the switch.
As individual interfaces become active and send requests to join a VLAN, the VLAN configuration is updated and propagated among the switches. Limiting the VLAN configuration to active participants reduces the network overhead. GVRP also provides the benefit of pruning VLANs to limit the scope of broadcast, unknown unicast, and multicast (BUM) traffic to interested network devices only.
You can use the J-Web Quick Configuration to enable or disable GVRP on an interface.
To access the GVRP Quick Configuration:
- In the J-Web user interface, select Configure>Switching>GVRP.
The GVRP Configuration page displays a list of interfaces on which GVRP is enabled.
- Click one:
- Global Settings—Modifies GVRP timers. Enter the information as described in Table 77.
- Add—Enables GVRP on an interface.
- Disable Port—Disables an interface.
- Delete—Deletes an interface.
- Click one:
- Click OK to check your configuration and save it as a candidate configuration, then click Commit Options>Commit.
- Click Cancel to cancel the configuration without saving changes.
Table 77: GVRP Global Settings
Field | Function | Action |
---|---|---|
Disable GVRP | Disables GVRP on all the interfaces. | Click to select. |
Join Timer | Specifies the number of milliseconds an interface must wait before sending VLAN advertisements. | Enter a value from 0 through 4294967295 milliseconds. |
Leave Timer | Specifies the number of milliseconds an interface must wait after receiving a leave message to remove itself from the VLAN specified in the message. | Enter a value from 0 through 4294967295 milliseconds. |
Leave All Timer | Specifies the interval in milliseconds at which Leave All messages are sent on interfaces. Leave All messages help to maintain current GVRP VLAN membership information in the network. | Enter a value from 0 through 4294967295 milliseconds. |