How To Configure Routable VLAN Interfaces On Juniper (IRB Interfaces)
ฝัง
- เผยแพร่เมื่อ 8 ก.ย. 2024
- #Juniper #Juniper Networks #Junos
In this tutorial we will be showing you how to create VLANs on Juniper switches, and how to configure routable VLAN interfaces (IRB interfaces) to allow for inter-VLAN communication between hosts situated in different networks. We will use virtual QFX switches on EVE NG, and virtual Windows Servers for this demonstration.
Doing inter-VLAN routing Juniper switches is very easy and simple, and this tutorial will show you exactly how to do it.
![[TH] 2024 PMSL SEA Finals D2 | Fall | ต้องรักษาฟอร์ม อย่ายอมให้ใครแซง](http://i.ytimg.com/vi/x38QsGn7A3M/mqdefault.jpg)
Great Tutorial , thanks from South Korea.
thanks for knowledge sharing!! nice explanation
Great job! Keep it coming.
Thanks! New videos will start again soon and on a regular basis
Phenomenal tutorial! Keep it up!
Thanks for the kind words, appreciate it
Nice one!
Thank you! Cheers!
Awesome tutorial, thank you
Thanks! Coming from Cisco I presume?
@@lameaveragetechies1040 Yes, I've done Cisco for the long time, and now I'm falling in love with Juniper. I have added 5 X SRX-240, 2 X EX3200 switches, 2 X 4200 switches stacked into a VC, and 1 X EX2200. I guess I serious about learning Juniper :)
Hello there - I have a little bit of an issue and wanted to know if you could help me. I have the same setup lab you have in the video and using the same commands as you on eve-ng with this image version Model: vqfx-10000 Junos: 20.3R1.8 limited. and also this version Junos: 18.1R3-S5.3 limited but for some weird reason when I issue the command show interface terse I don't see the xe-0/0/x interfaces showing up
Nice, i'm getting a L3-inteface must be a vlan.xx interface error... I'm using an SRX 110
Yeah, replace irb.xxx with vlan.xxx SRX 110 is still old software so no ELS support, so instead of IRB interfaces they use vlan. interfaces. Rest of the config should be the same, except it doesnt use interface-mode but port mode when setting access or trunk 👍
thanks for your work, i am facing one issue where pc are not pinging each other in my virtual lab.. i had tried all the images,
if you can share the images or tell us how you did your setup..
Very good video..
Thank you, much appreciated!
by default there is no interface added in vlan 1 like cisco ? so no device will communicate even we assign manual ip address to the pcs unless we put them in some vlan ?
If the switch config has been deleted, then no. But if the switch is brand new and out of the box with the default config, it should have a default VLAN where all interfaces are part of. It depends on what version the switch ships with as I have found some of them have the interfaces pre-configured, and some of them dont.
good tutorial. what you use software simulator?
Thanks! We use EVE-NG for the labs.
Interesting thing I discovered on Juniper EX2300 switches (not sure about others) is that if you set a description on an interface, it removes the port number from the LLDP information. So if it normally reads ge-0/0/3 but you set a description of "HOST 3" it will no longer give you the port number if you look at LLDP.
I found this out by plugging in a Netscout Linkrunner to a port to check my work.
If it's not too much trouble, would you be able to do a quick How-To tutorial on setting up a private VLAN? On the older Arubas we have, it's trivial, but the process on the Junipers is not so simple.
Interesting, will test this out in my lab!
Yeah sure, will setup a lab for Private VLAN and do a tutorial on that 👍
After following this procedure, I'm getting an error while committing i.e.,
'l3-interface vlan.10'
"Interface must already be defined under {edit interfaces]"
Please help me with this. I'm using the EX3300 switch.
Could you tell me what I'm doing wrong?
If you specify vlan.10 as the interface under vlans then you need to configure an interface vlan.10 under edit interfaces as well. The EX3300 uses IRB interfaces as well so just make everything irb.10 instead of vlan.10 and it should work.
This is like cisco encapsulates dot1q. L3 Layer switch
100% yeah!
do you describe anywhere your EVE-NG setup? do you have a github account with configurations used in the video demos? Is this the best way to contact you?
Hi, currently we dont have our configs stored on any repositories, but we will be working on a Patreon model where these will be made available.
Can we configure multiple irb interfaces in Junos?
Yeah, you can configure up to 4095 IRB interfaces on most Junos devices
Hello, I have a question. The term ge-0/0 and the term xe-0/0 are different in what way?
Hi, ge- refers to 1gbps interfaces, and xe- refers to 10gbps interfaces. In our lab the QFX only has xe interfaces but if you connect it to a device with a 1gbps interface it will work. In practical deployments these interface speeds obviously need to be the same, but in the virtual lab it doesnt really matter
Hello there. I really like this format.
Despite following your tutorial and some others, I still have an issue, I'm using an EX switch for my home lab, I've setup the inet address for irb's, I've linked the vlans to the irb's and obviously put each vlan as members of the interfaces needed but I'm still unable to communicate in between VLAN's. I can't even ping the irb of a different VLAN from my PC. I've tried setting up static routes without success. I've learned network through Cisco CLI so Juniper is still a bit confusing to me and besides using the show commands you've demonstrated I don't really know what to use to troubleshoot. The vlans themselves work properly. Maybe I shouldn't even bother since I have a firewall after the switch and I could probably do the routing there but I'd still like to understand my mistake
Do you want to send me your config to my email address in my info tab? Will have a look at it quickly and see if I spot anything. If you can include a simple drawing as well that will be great!
@@lameaveragetechies1040 Thanks again mate. Can"t wait for the Fortinet content.
Use vqfx 18 not 20.
do the following.. as these is issue with virtual labs.
Drop into shell by using "start shell"
Run "ps -aux | grep olive"
Look at the PID for the process running olive-ultimate.elf
Run "kill -9
This will reload the FPC and connectivity will work again.
would there be any reason why this method of routing traffic would be used in the whole entire WAN?
Might sound like a dumb question, but I've seen a network that uses IRBs to route traffic thru the entire network and I never understood it. is it because of the simplicity or is it cutting corners or because of a low budget for proper networking equipment?
thank you!
@@dylanmorin8174 Hi, well, it depends on the design and the equipment used, but usually the WAN should have redundant links and for that you would use AE interfaces, not IRB. But you can also use IRB interfaces throughout if you need to share a physical link with multiple services, although there are better ways to do this than with IRB interfaces. In the ideal world you would have dedicated transit links, and those would use /30 or /31 addresses on the interfaces, and would be the only interfaces used for transit. But when you have multiple services using a single device / link then this might be used. Realistically you should only use IRB interfaces on switch interfaces that have multiple devices in the same bridge domain or VLAN, but on dedicated routers.
TLDR: Yes, you technically can use it throughout your entire WAN, but there are better ways to do it, depending on the requirements and design.
@@lameaveragetechies1040 hm ive never heard of these AE interfaces. Maybe I don’t know enough of the anatomy of the network but from what I’ve seen it has core nodes that route traffic using irbs. Sorry if it sound’s confusing I’m still kind new to this job 😅
AE interfaces are aggregated ethernet, or LAG interfaces for redundancy, so instead of irb.x you’ll use ae0.x etc 👍
The qualtity of video is really ver bad
What about it specifically is bad? I’ve had nothing but good feedback regarding this video so genuinely curious what you found bad about this video? Maybe it’s something we can improve on.
I'd suggest checking to see if TH-cam automatically set your resolution low, like 360p. These videos are actually pretty damn good TBH.