Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other
trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.
Junos®OS for EX Series Ethernet Switches Network Interfaces for EX4300 Switches
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the
year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks
software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at
http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of
[edit chassis] Configuration Statement Hierarchy on EX Series Switches . . . . . 105
[edit forwarding-options] Configuration Statement Hierarchy on EX Series
[edit interfaces] Configuration Statement Hierarchy on EX Series Switches . . . 108
[edit interfaces ae] Configuration Statement Hierarchy on EX Series
[edit interfaces et] Configuration Statement Hierarchy on EX Series
[edit interfaces ge] Configuration Statement Hierarchy on EX Series
[edit interfaces interface-range] ConfigurationStatementHierarchyon EX Series
[edit interfaces irb] Configuration Statement Hierarchy on EX Series
To obtain the most current version of all Juniper Networks®technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Supported Platforms
For the features described in this document, the following platforms are supported:
•
EX Series
Using the Examples in This Manual
If you want to use the examples in this manual, you can use the load merge or the load
merge relative command. These commands cause the software to merge the incoming
configuration into the current candidate configuration. The example does not become
active until you commit the candidate configuration.
If the example configuration contains the top level of the hierarchy (or multiple
hierarchies), the example is a full example. In this case, use the load merge command.
If the example configuration does not start at the top level of the hierarchy, the example
is a snippet. In this case, use the load merge relative command. These procedures are
described in the following sections.
Merging a Full Example
To merge a full example, follow these steps:
1. From the HTML or PDF version of the manual, copy a configuration example into a
text file, save the file with a name, and copy the file to a directory on your routing
platform.
For example, copythe following configuration to a fileand namethe fileex-script.conf.
Copy the ex-script.conf file to the /var/tmp directory on your routing platform.
system {
scripts {
commit {
file ex-script.xsl;
}
}
}
interfaces {
fxp0 {
disable;
unit 0 {
family inet {
address 10.0.0.1/24;
}
}
}
}
Merging a Snippet
2. Merge the contents of the file into your routing platform configuration by issuing the
Represents output that appears on the
terminal screen.
•
Introduces or emphasizes important
new terms.
•
Identifies guide names.
•
Identifies RFC and Internet draft titles.
Represents variables (options for which
you substitute a value) in commands or
configuration statements.
Represents names of configuration
statements, commands, files, and
directories;configurationhierarchylevels;
or labels on routing platform
components.
Indicates a choice between the mutually
exclusivekeywords or variables on either
side of the symbol. The set of choices is
often enclosed in parentheses for clarity.
user@host> show chassis alarms
No alarms currently active
•
A policy term is a named structure
that defines match conditions and
actions.
•
Junos OS CLI User Guide
•
RFC 1997, BGP Communities Attribute
Configure the machine’s domain name:
[edit]
root@# set system domain-name
domain-name
•
To configure a stub area, include the
stub statement at the [edit protocols
ospf area area-id] hierarchy level.
•
The console port islabeled CONSOLE.
stub <default-metric metric>;Encloses optional keywords or variables.< > (angle brackets)
broadcast | multicast
(string1 | string2 | string3)
# (pound sign)
[ ] (square brackets)
Indention and braces ( { } )
; (semicolon)
GUI Conventions
Bold text like this
same lineas the configuration statement
to which it applies.
Encloses a variable for which you can
substitute one or more values.
Identifies a level in the configuration
hierarchy.
Identifies a leaf statement at a
configuration hierarchy level.
Representsgraphicaluser interface (GUI)
items you click or select.
rsvp { # Required for dynamic MPLS onlyIndicates a comment specified on the
We encourage you to provide feedback, comments, and suggestions so that we can
improve the documentation. You can provide feedback by using either of the following
methods:
•
Online feedback rating system—On any page at the Juniper Networks Technical
Documentation site at http://www.juniper.net/techpubs/index.html, simply click the
stars to rate the content, and use the pop-upform to provideus withinformation about
your experience. Alternately, you can use the online feedback form at
https://www.juniper.net/cgi-bin/docbugreport/.
•
E-mail—Sendyour comments to techpubs-comments@juniper.net. Include the document
or topic name, URL or page number, and software version (if applicable).
Requesting Technical Support
Technical product supportis available throughthe JuniperNetworks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or JNASC support contract,
or are covered under warranty, and need post-sales technical support, you can access
our tools and resources online or open a case with JTAC.
Separates levels in a hierarchy of menu
selections.
In the configuration editor hierarchy,
select Protocols>Ospf.
•
JTAC policies—For a complete understanding of our JTAC procedures and policies,
review the JTAC User Guide located at
JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
Self-Help Online Tools and Resources
For quick and easy problem resolution, Juniper Networks has designed an online
self-service portal called the Customer Support Center (CSC) that provides you with the
following features:
Download the latest versions of software and review release notes:
http://www.juniper.net/customers/csc/software/
•
Search technical bulletins for relevant hardware and software notifications:
http://kb.juniper.net/InfoCenter/
•
Join and participate in the Juniper Networks Community Forum:
http://www.juniper.net/company/communities/
•
Open a case online in the CSC Case Management tool: http://www.juniper.net/cm/
To verifyservice entitlement by product serial number, use our SerialNumber Entitlement
(SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
Opening a Case with JTAC
You can open a case with JTAC on the Web or by telephone.
•
Use the Case Management tool in the CSC at http://www.juniper.net/cm/.
•
Call 1-888-314-JTAC (1-888-314-5822 toll-free in the USA, Canada, and Mexico).
For international or direct-dial options in countries without toll-free numbers, see
Understanding Interface Naming Conventions on EX Series Switches on page 6
•
Understanding Aggregated Ethernet Interfaces and LACP on page 8
•
Understanding the Algorithm Used to Hash LAG Bundle and Egress Next-Hop ECMP
Traffic on page 11
•
Understanding How Energy Efficient Ethernet Reduces Power Consumption on
Interfaces on page 16
•
Understanding Local Link Bias on page 16
•
Understanding Layer 3 Subinterfaces on page 18
•
Understanding Unicast RPF on page 19
•
Understanding IP Directed Broadcast for EX Series Switches on page 23
•
Understanding Interface Ranges on EX Series Switches on page 24
•
802.1Q VLANs Overview on page 26
EX Series Switches Interfaces Overview
Juniper Networks EX Series Ethernet Switches have two types of interfaces: network
interfaces and special interfaces. This topic provides brief information about these
interfaces. For additional information, see the Junos OS Interfaces Fundamentals
Configuration Guide.
For information about interface-naming conventions on EX Series switches, see
“Understanding Interface Naming Conventions on EX Series Switches” on page 6.
This topic describes:
•
Network Interfaces on page 3
•
Special Interfaces on page 4
Network Interfaces
Network interfaces connect to the network and carry network traffic. Table 3 on page 4
lists the types of network interfaces supported on EX Series switches.
All EX Series switches allow you to group Ethernet interfaces at the physical layer to form a
single link layer interface, also known as a link aggregation group (LAG) or bundle. These
aggregated Ethernet interfaces help to balance traffic and increase the uplink bandwidth.
LAN access interfaces
Power over Ethernet (PoE)
interfaces
Trunk interfaces
Use these EX Series switch interfaces to connect a personal computer, laptop, file server, or
printer to the network. When you power on an EX Series switch and use the factory-default
configuration, the software automatically configures interfaces in access mode for each of the
network ports. The default configuration also enables autonegotiation for both speed and link
mode.
EX Series switches provide PoE network ports with various switch models. These ports can be
used to connect voice over IP (VoIP) telephones, wireless access points, video cameras, and
point-of-sale devices to safely receive power from the same access ports that are used to
connect personal computers to thenetwork.PoE interfaces areenabled by default in thefactory
configuration.
EX Series access switches can be connected to a distribution switch or customer-edge (CE)
switches or routers. To use a port for this type of connection, you must explicitly configure the
network interface for trunk mode. The interfaces from the distribution switch or CE switch to
the access switches must also be configured for trunk mode.
Special Interfaces
Table 4 on page 4 lists the types of special interfaces supported on EX Series switches.
Table 4: Special Interface Types and Purposes
PurposeType
Console port
Each EX Series switch has a serial port, labeled CON or CONSOLE, for connecting tty-type
terminals to the switch using standard PC-type tty cables. The console port does not have a
physical address or IP address associated with it. However, it is an interface in the sense that
it provides access to the switch. On an EX3300 Virtual Chassis, an EX4200 Virtual Chassis, or
an EX4500Virtual Chassis, you canaccessthe master and configure all members of the Virtual
Chassis through any member's console port. For more information about the console port in a
Virtual Chassis, see Understanding Global Management of a Virtual Chassis.
Loopback
Management interface
All EX Series switches have this software-only virtual interface that is always up. The loopback
interface provides a stable and consistent interface and IP address on the switch.
The Juniper Networks Junos operatingsystem (Junos OS) for EX Series switches automatically
createsthe switch's management Ethernet interface, me0. The management Ethernet interface
provides an out-of-band method for connecting to the switch. To use me0 as a management
port, you must configure its logical port, me0.0, with a valid IP address. You can connect to the
management interface over the network using utilities such as SSH or Telnet. SNMP can use
the management interface to gather statistics from the switch. (The management interface
me0 is analogous to the fxp0 interfaces on routers running Junos OS.)
Table 4: Special Interface Types and Purposes (continued)
PurposeType
Integrated Routing and
Bridging (IRB) Interface or
Routed VLAN Interface (RVI)
EX Series switches use an integrated routing and bridging (IRB) interface or Routed VLAN
Interface (RVI) to route traffic from one broadcast domain to another and to perform other
Layer 3 functionssuch astrafficengineering. These functions aretypicallyperformed by a router
interface in a traditional network.
The IRB interface or RVI functions as a logical router, eliminating the need for having both a
switch and a router. These interfaces must be configured as part of a broadcast domain or
virtual private LAN service (VPLS) routing instance for Layer 3 traffic to be routed from.
Chapter 1: Interfaces Overview
Virtual Chassis port (VCP)
interfaces
Virtual Chassis ports (VCPs) are used to interconnect switches in a Virtual Chassis:
•
EX3300 switches—Port 2 and port 3 of the SFP+ uplink portsare preconfigured as VCPs and
can be used to interconnect up to six EX3300 switches in an EX3300 Virtual Chassis. See
Setting an Uplink Port on an EX Series Switch as a Virtual Chassis Port (CLI Procedure).
•
EX4200 and EX4500 switches—Each EX4200 switch or each EX4500 switch with a Virtual
Chassis module installed has two dedicated VCPs onits rear panel. These ports can be used
to interconnect up to ten EX4200 switches in an EX4200 Virtual Chassis, up to ten EX4500
switches in an EX4500 Virtual Chassis, and up to ten switches in a mixed EX4200 and
EX4500 Virtual Chassis. When you power on switches that are interconnected in thismanner,
the software automatically configures the VCP interfaces for the dedicated ports that have
been interconnected. These VCP interfaces are not configurable or modifiable. See
Understanding the High-Speed Interconnection of the Dedicated Virtual Chassis Ports
Connecting EX4200, EX4500, and EX4550 Member Switches.
You can also interconnect EX4200 and EX4500 switches by using uplink module ports.
Using uplink ports allows you to connect switches over longer distances than you can by
using the dedicated VCPs. To use the uplink ports as VCPs, you must explicitly configure the
uplink module ports on the members you want to connect as VCPs. See Setting an Uplink
Port on an EX Series Switch as a Virtual Chassis Port (CLI Procedure) or Setting an Uplink Port
as a Virtual Chassis Port on an EX4500 or EX4550 Switch (CLI Procedure).
•
EX4300 switches—All QSFP+ ports are configured as VCPs, by default. See Understanding
EX4300 Virtual Chassis
You can also interconnect EX4300 switches into a Virtual Chassis by using SFP+ uplink
module ports asVCPs.Using uplinkports as VCPs allowsyou to connect switches over longer
distances than you can by using the QSFP+ ports as VCPs. To use the uplink ports as VCPs,
you must explicitly configure the uplink module ports on the members you want to connect
as VCPs. See Setting an Uplink Port on an EX Series Switch as a Virtual Chassis Port (CLIProcedure).
•
EX8200 switches—EX8200 switches can be connected to an XRE200 External Routing
Engine to create an EX8200 Virtual Chassis. The XRE200 External Routing Engine has
dedicatedVCPsthat connect to ports onthe internalRouting Engines ofthe EX8200switches
and can connect to another XRE200 External Routing Engine for redundancy. These ports
require no configuration.
You can also connect twomembers of an EX8200 Virtual Chassis so that they can exchange
Virtual Chassis Control Protocol (VCCP) traffic. To do so, you explicitly configure network
ports onthe EX8200 switches as VCPs. SeeUnderstanding Virtual Chassis Ports in an EX8200Virtual Chassis.
Virtual management Ethernet
(VME) interface
EX3300, EX4200, EX4300, andEX4500 switches have aVME interface.This is a logical interface
that is used for Virtual Chassis configurations and allows you to manage all the members of
the Virtual Chassis through the master. For more information about the VME interface, see
Understanding Global Management of a Virtual Chassis.
EX8200 switches do not use a VME interface. An EX8200 Virtual Chassis is managed through
the management Ethernet (me0) interface on the XRE200 External Routing Engine.
• Understanding Aggregated Ethernet Interfaces and LACP on page 8
• Understanding Layer 3 Subinterfaces on page 18
Understanding Interface Naming Conventions on EX Series Switches
Juniper Networks EX Series Ethernet Switches use a naming convention for defining the
interfaces that is similar to that of other platforms running under Juniper Networks Junos
operating system (Junos OS). This topic provides brief information about the naming
conventions used for interfaces on EX Series switches. For additional information, see
the Junos OS Network Interfaces Configuration Guide.
This topic describes:
•
Physical Part of an Interface Name on page 6
•
Logical Part of an Interface Name on page 8
•
Wildcard Characters in Interface Names on page 8
Physical Part of an Interface Name
Network interfaces in Junos OS are specified as follows:
type-fpc / pic / port
EX Series switches apply this convention as follows:
•
type—EX Series interfaces use the following media types:
fpc—Flexible PIC Concentrator. EX Series interfaces use the following convention for
the FPC number in interface names:
•
On anEX2200 switch, an EX3200switch, a standaloneEX3300 switch, a standalone
EX4200 switch, a standalone EX4300 switch, a standalone EX4500, and a
standalone EX4550 switch, FPC refers to the switch itself. The FPC number is 0 by
default on these switches.
•
On anEX3300 Virtual Chassis, an EX4200Virtual Chassis, an EX4300Virtual Chassis,
an EX4500 Virtual Chassis, an EX4550 Virtual Chassis, or a mixed Virtual Chassis,
the FPC number indicates the member ID of the switch in the Virtual Chassis.
•
On an EX6200 switch and a standalone EX8200 switch, the FPC number indicates
the slot number of the line card that contains the physical interface. On an EX6200
switch, the FPC number also indicates the slot number of the Switch Fabric and
Routing Engine (SRE) module that contains the uplink port.
•
On an EX8200Virtual Chassis, the FPC number indicates the slot number of the line
card on the Virtual Chassis. The line card slots on Virtual Chassis member 0 are
numbered 0 through 15; on member 1, they are numbered 16 through 31, and so on.
•
pic—EX Series interfaces use the following convention for the PIC (Physical Interface
Card) number in interface names:
•
On EX2200, EX3200, EX3300, EX4200, EX4500 switch, and EX4550 switches, the
PIC number is 0 for all built-in interfaces (interfaces that are not uplink ports).
•
On EX2200, EX3200, EX3300, and EX4200 switches, the PIC number is 1 for uplink
ports.
•
On EX4300 switches, the PIC number is 0 for built-in network ports, 1 for built-in
QSFP+ ports (located onthe rearpanel ofthe switch),and 2for uplinkmodule ports.
•
On EX4500 switches, the PIC number is 1 for ports on the left-hand uplink module
and 2 for ports on the right-hand uplink module.
•
On EX4550switches, the PIC number is 1for ports in theexpansion module or Virtual
Chassis module installed in the module slot on the front panel of the switch and 2
for those in the expansion module or Virtual Chassis module installed in the module
slot on the rear panel of the switch.
•
On EX6200 and EX8200 switches, the PIC number is always 0.
•
port—EX Series interfaces use the following convention for port numbers:
•
On EX2200, EX3200, EX3300, EX4200, EX4300, EX4500, and EX4550 switches,
built-in network portsare numbered from left to right. On modelsthat have two rows
of ports, the ports on the top row start with 0 followed by the remaining
even-numbered ports, and the ports on the bottom row start with 1 followed by the
remaining odd-numbered ports.
•
Uplink ports in EX2200, EX3200, EX3300, EX4200, EX4300, EX4500, and EX4550
switches are labeled from left to right, starting with 0.
On EX6200and EX8200switches, the networkports are numbered from leftto right
on each line card. On line cards that have two rows of ports, the ports on the top row
start with 0 followed by the remaining even-numbered ports, and the ports on the
bottom row start with 1 followed by the remaining odd-numbered ports.
•
Uplink ports on an SRE module in an EX6200 switch are labeled from left to right,
starting with 0.
Logical Part of an Interface Name
The logical unit part of the interface name corresponds to the logical unit number, which
can be a number from 0 through 16384. In the virtual part of the name, a period (.)
separates the port and logical unit numbers: type-fpc/pic/port.logical-unit-number. For
example, if you issue the showethernet-switching interfaces command on a system with
a default VLAN, the resulting display shows the logical interfaces associated with the
VLAN:
Interface State VLAN members Blocking
ge-0/0/0.0 down remote-analyzer unblocked
ge-0/0/1.0 down default unblocked
ge-0/0/10.0 down default unblocked
Wildcard Characters in Interface Names
In the show interfaces and clear interfaces commands, you can use wildcard characters
in the interface-name option to specify groups of interface names without having to type
each name individually. You must enclose all wildcard characters except the asterisk (*)
in quotation marks (" ").
• Configuring Gigabit Ethernet Interfaces (CLI Procedure) on page 32
Understanding Aggregated Ethernet Interfaces and LACP
IEEE 802.3ad link aggregation enables you to group Ethernet interfaces to form a single
link layer interface, also known as a link aggregation group (LAG) or bundle.
Aggregating multiple links between physical interfaces creates a single logical
point-to-point trunk link or a LAG. The LAG balances traffic across the member links
within an aggregated Ethernet bundle and effectively increases the uplink bandwidth.
Another advantage of link aggregation is increased availability, because the LAG is
composed of multiple member links. If one member link fails, the LAG continues to carry
traffic over the remaining links.
Link Aggregation Control Protocol (LACP), a component of IEEE 802.3ad, provides
additional functionality for LAGs.
Link Aggregation Control Protocol (LACP) on page 10
Link Aggregation Group (LAG)
You configure a LAG by specifying the link number as a physical device and then
associating a set of interfaces (ports) with the link. Allthe interfaces must have the same
speed and be in full-duplex mode. Juniper Networks Junos operating system (Junos OS)
for EX Series Ethernet Switches assigns a unique ID and port priority to each interface.
The ID and priority are not configurable.
The number of interfaces that can be grouped into a LAG and the total number of LAGs
supported on a switch varies according to switch model. Table 5 on page 9 lists the EX
Series switches and the maximum number of interfaces per LAG and the maximum
number of LAGs they support. MX Series devices can support up to 64 LAGs.
Table 5: Maximum Interfaces per LAG and Maximum LAGs per Switch
Chapter 1: Interfaces Overview
Chassis
Chassis
Chassis
Chassis, EX4550, andEX4550
Virtual Chassis
Maximum Interfaces per
LAGSwitch
Maximum LAGs
328EX2200
328EX3200
1118EX3300 and EX3300 Virtual
1118EX4200 and EX4200 Virtual
11216EX4300 and EX4300 Virtual
1118EX4500, EX4500 Virtual
1118EX6200
25512EX8200
23912EX8200 Virtual Chassis
When configuring LAGs, consider the following guidelines:
•
You must configure the LAG on both sides of the link.
•
You must set the interfaces on either side of the link to the same speed.
•
You can configure and apply firewall filters on a LAG.
You can optionally configure LACP for link negotiation.
•
You can optionally configure LACP for link protection.
You can combine physical Ethernet ports belonging to different member switches of a
Virtual Chassis configuration to form a LAG. See Understanding EX Series Virtual ChassisPort Link Aggregation and Understanding Link Aggregation in an EX8200 Virtual Chassis.
A LAG hashing algorithm determineshow traffic entering a LAGis placed onto the bundle’s
member links. The LAG hashing algorithm tries to manage bandwidth by evenly
load-balancing all incoming traffic across the member links in the bundle. You can
configure the fields used by the LAG hashing algorithm on some EX series switches. See
“Configuring the Fields in the Algorithm Used To Hash LAG Bundle and ECMP Traffic (CLI
Procedure)” on page 94.
NOTE: The interfaces that are included within a LAG are sometimes referred
to as member interfaces. Do not confuse this term with member switches,
which refers to switches that are interconnected as a Virtual Chassis. It is
possible to create a LAG that is composed of member interfaces that are
located in different member switches of a Virtual Chassis.
A LAG creates a single logical point-to-point connection. A typical deployment for a LAG
would be to aggregate trunk links between an access switch and a distribution switch or
customer edge (CE) router.
Link Aggregation Control Protocol (LACP)
When LACP is configured, it detects misconfigurations on the local end or the remote
end of the link. Thus, LACP can help prevent communication failure:
•
When LACP is not enabled, a local LAG might attempt to transmit packets to a remote
single interface, which causes the communication to fail.
•
When LACP is enabled, a local LAG cannot transmit packets unless a LAG with LACP
is also configured on the remote end of the link.
By default, Ethernet links do not exchange LACP protocol data units (PDUs), which
contain information aboutthe state of thelink. You canconfigure Ethernet linksto actively
transmit LACP PDUs, or you can configure the links to passively transmit them, sending
out LACP PDUs only when the Ethernet link receives them from the remote end. The
transmitting link is known as the actor and the receiving link is known as the partner.
In a scenario where a dual-homed server is deployed with a switch, the network interface
cards form a LAG with the switch. During a server upgrade, the server might not be able
to exchange LACP PDUs. In such a situation, you can configure an interface to be in the
up state even if no PDUs are exchanged. Use the force-up statement to configure an
interfacewhen the peer has limited LACP capability. The interface selects the associated
LAG by default, whether the switch and peer are both in active or passive mode. When
PDUs are not received, the partner is considered to be working in the passive mode.
Therefore, LACP PDU transmissions are controlled by the transmitting link.