Technical Documentation



vlans {
vlan-name {
description text-description;
dot1q-tunneling {
customer-vlans (id | range)
layer2-protocol-tunneling all | protocol-name {
drop-threshold number;
shutdown-threshold number;
filter input filter-name;
filter output filter-name;
interface interface-name {
mapping (native (push | swap) | policy | tag (push | swap));
l3-interface vlan.logical-interface-number;
mac-limit number;
mac-table-aging-time seconds;
primary-vlan vlan-name;
vlan-id number;
vlan-range vlan-id-low-vlan-id-high;

Hierarchy Level


Release Information

Statement introduced in JUNOS Release 9.0 for EX Series switches.

Options dot1q-tunneling, no-local-switching, and primary-vlan introduced in JUNOS Release 9.3 for EX Series switches.

Periods (.) in VLAN names introduced in JUNOS Release 9.4 for EX Series switches.

Option no-mac-learning introduced in JUNOS Release 9.5 for EX Series switches.

Option mapping introduced in JUNOS Release 9.6 for EX Series switches.

Option swap introduced in JUNOS Release 10.0 for EX Series switches.


Configure VLAN properties on EX Series switches. The following configuration guidelines apply:

  • Only private VLAN (PVLAN) firewall filters can be used when the VLAN is enabled for Q-in-Q tunneling.
  • An S-VLAN tag is added to the packet if the VLAN is dot1q-tunneled and the packet is arriving from an access interface.
  • You cannot use a firewall filter to assign a routed VLAN interface (RVI) to a VLAN.
  • VLAN assignments performed using a firewall filter override all other VLAN assignments.


If you use the default factory configuration, all switch interfaces become part of the VLAN default.


vlan-name—Name of the VLAN. The name can contain letters, numbers, hyphens (-), and periods (.) and can be up to 255 characters long.

The remaining statements are explained separately.

Usage Guidelines

Required Privilege Level

routing—To view this statement in the configuration.

routing–control—To add this statement to the configuration.

Published: 2009-10-08