Z
Z
zzzzzaq2017-01-31 10:58:39
VPN
zzzzzaq, 2017-01-31 10:58:39

How to configure l2vpn on juniper (provider vlan number)?

Hello!
Faced for the first time with dzhunipers and generally with VPN. It all started with the merger of branches. The provider is the same everywhere, gave ont'eshes in which a certain port is configured for vpn and a vlan number (500) for both branches. I have 2 pcs. srx100. On the first June I write:

fe-0/0/1 {
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members vlan-500;
                }
            }
        }
    }
    fe-0/0/2 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-500;
                }
            }
        }
    }

vlan {
        unit 500 {
            family inet {
                address 192.168.6.153/24;
            }
        }

vlans {
    vlan-500 {
        description RTK;
        vlan-id 500;
        l3-interface vlan.500;
    }
}

added the vlan.500 interface to the trust zone and just in case fe-0/0/1.0. Added a trust-to-trust policy in which everything was allowed.
on the second juniper I write
fe-0/0/1 {
        unit 0 {
            family ethernet-switching {
                port-mode trunk;
                vlan {
                    members vlan-500;
                }
            }
        }
    }
    fe-0/0/2 {
        unit 0 {
            family ethernet-switching {
                vlan {
                    members vlan-500;
                }
            }
        }
    }

vlan {
        unit 500 {
            family inet {
                address 192.168.6.200/24;
            }
        }
    }

vlans {
    vlan-500 {
        description RTKK;
        vlan-id 500;
        interface {
            fe-0/0/1.0;
        }
    }

Also added vlan.500 and fe-0/0/1.0 to the trust zone. I created a trust-to-trust policy, in which I also allowed everything.
I'm trying to ping at least each other from the console of both junipers, i.e. from the first I ping 6.200, and from the second - 6.153. Silence.
Please, help.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
Z
zzzzzaq, 2017-01-31
@zzzzzaq

By the way, on the second juniper in the vlan, I wrote the fe-0/0/1.0 interface, having peeped somewhere in Google. Before that, it was similar to the first juniper i.e. l3-interface vlan.500. But there was no result either.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question