Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Configuring Gigabit Ethernet Interfaces (J-Web Procedure)

You can configure specific properties on your Ethernet interface to ensure optimal performance of your network in a high-traffic environment.

To configure properties on a Gigabit Ethernet interface, a 10-Gigabit Ethernet interface, and a 40-Gigabit Ethernet interface on an EX Series switch:

  1. Select Interfaces > Ports.

    The page that is displayed lists Gigabit Ethernet, 10-Gigabit Ethernet interfaces, and 40-Gigabit Ethernet interfaces, and their link statuses.

    Note:

    After you make changes to the configuration on this page, you must commit the changes immediately for them to take effect. To commit all changes to the active configuration, select Commit Options > Commit. See Using the Commit Options to Commit Configuration Changes (J-Web Procedure) for details about all commit options.

  2. Select the interface you want to configure. For an EX8200 Virtual Chassis configuration, select the member and the FPC slot if the interface you want to configure is not listed under Ports in the top table on the page.

    Details for the selected interface, such as administrative status, link status, speed, duplex, and flow control, are displayed in the Details of port table on the page.

    Note:

    You can select multiple interfaces and modify their settings at the same time. However, while doing this, you cannot modify the IP address or enable or disable the administrative status of the selected interfaces.

    Note:

    In the J-Web interface, you cannot configure interface ranges and interface groups.

  3. Click Edit and select the set of options you want to configure first:

    • Port Role—Enables you to assign a profile for the selected interface.

      Note:

      When you select a particular port role, preconfigured port security parameters are set for the VLAN that the interface belongs to. For example, if you select the port role Desktop, the port security options examine-dhcp and arp-inspection are enabled on the VLAN that the interface belongs to. If there are interfaces in the VLAN that have static IP addresses, those interfaces might lose connectivity because those static IP addresses might not be present in the DHCP pool. Therefore, when you select a port role, ensure that the corresponding port security settings for the VLAN are applicable to the interface.

      For basic information about port security features such as DHCP snooping (CLI option examine-dhcp) or dynamic ARP inspection (DAI) (CLI option arp-inspection), see Configuring Port Security (J-Web Procedure). For detailed descriptions of port security features, see the Port Security topics in the EX Series documentation at https://www.juniper.net/documentation/.

      Click Details to view the configuration parameters for the selected port role.

    • VLAN—Enables you to configure VLAN options for the selected interface.

    • Link—Enables you to modify the following link options for the selected interface:

      • Speed

      • MTU

      • Autonegotiation

      • Flow Control

      • Duplex

      • Media Type

    • IP—Enables you to configure an IP address for the interface.

  4. Configure the interface by configuring options in the selected option set. See Table 1 for details of the options.
  5. Repeat Steps 3 and 4 for the remaining option sets that you want to configure for the interface.
    Note:

    To enable or disable the administrative status of a selected interface, click Enable Port or Disable Port.

Table 1: Port Edit Options

Field

Function

Your Action

Port Role Options

Port Role

Specifies a profile (role) to assign to the interface.

Note:

  • After a port role is configured on the interface, you cannot specify VLAN options or IP options.

  • Port roles are not supported by the et interfaces (40-Gigabit Ethernet interfaces) on EX4550 switches.

  • Only the following port roles can be applied on EX8200 switch interfaces:

    • Default

    • Layer 2 uplink

    • Routed uplink

  

Default

Applies the default role.

The interface family is set to ethernet-switching, port mode is set to access, and RSTP is enabled.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security-arp-inspection will be configured.

  1. Click Details to view CLI commands for this role.

  2. Click OK.

Desktop

Applies the desktop role.

The interface family is set to ethernet-switching, port mode is set to access, RSTP is enabled with the edge and point-to-point options, and port security parameters (MAC limit =1; dynamic ARP inspection and DHCP snooping enabled) are set.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security groups and forwarding-options dhcp-security-arp-inspection will be configured.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface.

  2. Click Details to view CLI commands for this role.

  3. Click OK.

Desktop and Phone

Applies the desktop and phone role.

The interface family is set to ethernet-switching, port mode is set to access, port security parameters (MAC limit =1; dynamic ARP Inspection and DHCP snooping enabled) are set, and recommended class-of-service (CoS) parameters are specified for forwarding classes, schedulers, and classifiers. See Table 2 for more CoS information.

To enable security configuration, select the Enable Security Configuration check box. The forwarding-options dhcp-security groups and forwarding-options dhcp-security-arp-inspection will be configured.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface.

    You can also select an existing VoIP VLAN configuration or a new VoIP VLAN configuration to be associated with the interface.

    Note:

    VoIP is not supported on EX8200 switches.

  2. Click Details to view CLI commands for this role.

  3. Click OK.

Wireless Access Point

Applies the wireless access point role.

The interface family is set to ethernet-switching, port mode is set to access, and RSTP is enabled with the edge and point-to-point options.

  1. Select an existing VLAN configuration or type the name of a new VLAN configuration to be associated with the interface. Type the VLAN ID for a new VLAN.

  2. Click Details to view CLI commands for this role.

  3. Click OK.

Routed Uplink

Applies the routed uplink role.

The interface family is set to inet, and recommended CoS parameters are set for schedulers and classifiers. See Table 2 for more CoS information.

To specify an IPv4 address:

  1. Select the IPv4 address check box.

  2. Type an IP address—for example: 10.10.10.10.

  3. Enter the subnet mask or address prefix. For example, 24 bits represents 255.255.255.0.

  4. Click OK.

To specify an IPv6 address:

  1. Select the IPv6 address check box.

  2. Type an IP address—for example: 2001:ab8:85a3::8a2e:370:7334.

  3. Enter the subnet mask or address prefix.

  4. Click OK.

    Note:

    IPv6 is not supported on EX2200 VC switches.

Layer 2 Uplink

Applies the Layer 2 uplink role.

The interface family is set to ethernet-switching, port mode is set to trunk, RSTP is enabled with the point-to-point option, and trusted DHCP is configured for port security.

  1. For this port role, you can select a VLAN member and associate a native VLAN with the interface.

  2. Click Details to view CLI commands for this role.

  3. Click OK.

None

Specifies that no port role is configured for the selected interface.

  
Note:

For an EX8200 switch, dynamic ARP inspection and DHCP snooping parameters are not configured.

VLAN Options

Port Mode

Specifies the mode of operation for the interface: trunk or access.

If you select Trunk, you can:

  1. Click Add to add a VLAN member.

  2. Select the VLAN and click OK.

  3. (Optional) Associate a native VLAN with the interface.

  4. Click OK.

If you select Access, you can:

  1. Select the VLAN member to be associated with the interface.

  2. (Optional) Associate a VoIP VLAN with the interface. Only a VLAN with a VLAN ID can be associated as a VoIP VLAN.

    Note:

    VoIP is not supported on EX8200 switches.

  3. Click OK.

Link Options

MTU (bytes)

Specifies the maximum transmission unit size (MTU) for the interface.

Type a value from 256 through 9216. The default MTU size for Gigabit Ethernet interfaces is 1514.

Speed

Specifies the speed for the mode.

Select one of the following values: 10 Mbps, 100 Mbps, 1000 Mbps, or Auto-Negotiation.

EX4400, EX4100, and EX4100-F switches support 10 Gbps, 40 Gbps, and 100 Gbps apart from the values mentioned above. Specific switch supported speeds are displayed.

Note:

The switches with mge ports also supports 2.5 Gbps and 5 Gbps apart from the values mentioned above.

Duplex

Specifies the link mode.

Select one: automatic, half, or full.

Description

Describes the link.

Note:

If the interface is part of a link aggregation group (LAG), only the Description option is enabled. Other Port Edit options are unavailable.

Enter a brief description for the link.

Enable Auto Negotiation

Enables or disables autonegotiation.

Select the check box to enable autonegotiation, or clear the check box to disable it. By default, autonegotiation is enabled.

Enable Flow Control

Enables or disables flow control.

Select the check box to enable flow control to regulate the amount of traffic sent out of the interface, or clear the check box to disable flow control and permit unrestricted traffic. Flow control is enabled by default.

Media Type

Specifies the media type selected.

Select the check box to enable the media type. Then select Copper or Fiber.

IP Options

IPv4 Address

Specifies an IPv4 address for the interface.

Note:

If the IPv4 Address check box is cleared, the interface still belongs to the inet family.

  1. Select the IPv4 address check box to specify an IPv4 address.

  2. Type an IP address—for example: 10.10.10.10.

  3. Enter the subnet mask or address prefix. For example, 24 bits represents 255.255.255.0.

  4. Click OK.

IPv6 Address

Specifies an IPv6 address for the interface.

Note:

If the IPv6 Address check box is cleared, the interface still belongs to the inet family.

  1. Select the IPv6 address check box to specify an IPv6 address.

  2. Type an IP address—for example: 2001:ab8:85a3::8a2e:370:7334.

  3. Enter the subnet mask or address prefix.

  4. Click OK.

    Note:

    IPv6 address is not supported on EX2200 and EX4500 switches.
Table 2: Recommended CoS Settings for Port Roles

CoS Parameter

Recommended Settings

Forwarding Classes

There are four forwarding classes:

  • voice—Queue number is set to 7.

  • expedited-forwarding—Queue number is set to 5.

  • assured-forwarding—Queue number is set to 1.

  • best-effort—Queue number is set to 0.

Schedulers

The schedulers and their settings are:

  • Strict-priority—Transmission rate is set to 10 percent and buffer size to 5 percent.

  • Expedited-scheduler—Transmission rate is set to 30 percent, buffer size to 30 percent, and priority to low.

  • Assured-scheduler—Transmission rate is set to 25 percent, buffer size to 25 percent, and priority to low.

  • Best-effort scheduler—Transmission rate is set to 35 percent, buffer size to 40 percent, and priority to low.

Scheduler maps

When a desktop and phone, routed uplink, or Layer 2 uplink role is applied on an interface, the forwarding classes and schedulers are mapped using the scheduler map.

ieee-802.1 classifier

Imports the default ieee-802.1 classifier configuration and sets the loss priority to low for the code point 101 for the voice forwarding class.

dscp classifier

Imports the default dscp classifier configuration and sets the loss priority to low for the code point 101110 for the voice forwarding class.

Related Documentation