Advanced Junos Enterprise Switching

10.b

Lab Diagrams

Worldwide Education Services

1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Course Number: EDU-JUN-AJEX

This document is produced by Juniper Networks, Inc. This document or any part thereof may not be reproduced or transmitted in any form under penalty of law, without the prior written permission of Juniper Networks Education Services. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Advanced Junos Enterprise Switching Lab Diagrams, Revision 10.b Copyright 2011 Juniper Networks, Inc. All rights reserved. Printed in USA. Revision History: Revision 10.aApril 2011 Revision 10.bJune 2011 The information in this document is current as of the date listed above. The information in this document has been carefully verified and is believed to be accurate for software Release 10.4R3.4. Juniper Networks assumes no responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental, or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. YEAR 2000 NOTICE Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The Junos operating system has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. SOFTWARE LICENSE The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should consult the software license for further details.

Management Network Diagram

X = Pod (A, B, C, or D) srxX-1 Management Network

Serial Console Connections

Terminal Server srxX-2

___.___.___.___/___

Student Workstations

exX-1

exX-2

Management Addressing
Server srxX-1 srxX-2 ____________/___ exX-1 ____________/___ exX-2 Term Server ____________/___ Server ___________/___ ___________/___ ___________/___

Note: Your instructor will provide address and access information.

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net

Lab 1: Network Diagram

X = Pod (A, B, C, or D) Q-in-Q Access Port
Customer B id Bridge ge-0/0/6 vr20

Q-in-Q Access Port Trunk Ports

Customer B id Bridge

.1
exX-1 Access Ports

vr10

ge-0/0/6 ge-0/0/12

exX-2

.2
172.27.100.0/24 CVLAN ID = 100 SVLAN ID = 200

172.27.100.0/24

CVLAN ID = 100 SVLAN ID = 200

vr11 vr12
172.23.12.101/24V LAN Name = v12 VLAN ID = 12

vr21
172.23.11.102/24 VLAN Name = v11 VLAN ID = 11 VLAN Name = v15 VLAN ID = 15

vr22
172.23.12.102/24 VLAN Name = v11 VLAN ID = 12

Parts 2, , 4, , and 5

172.23.11.101/24 VLAN Name = v11 VLAN ID = 11

VLAN Name = v15 VLAN ID = 15

Parts 2, 4, and 5

Part 3

172.24.50.1/24 Community = finance VLAN ID = 41

172.24.50.2 /24 Community = sales VLAN ID = 42

172.24.50.3/24 PVLAN Details Name = pvlan-50 Community = finance VLAN ID = 41 PVLAN ID = 50

172.24.50.4 /24 Community = sales VLAN ID = 42

Part 3

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net

Lab 2: Network Diagram

srxX-1
ge-0/0/1

srxX-2

Qi QA Q-in-Q Access Port P Trunk Ports exX-1 Access Ports

ge-0/0/12

Qi QA Q-in-Q Access Port P t

Customer Bridge

.1

Customer Bridge

.2
exX-2
ge-0/0/6 ge 0/0/6 vr20 CVLAN ID = 100 SVLAN ID = 200 172 27 100 0/24 172.27.100.0/24

vr10

ge-0/0/6 ge 0/0/6

CVLAN ID = 100 SVLAN ID = 200 172 27 100 0/24 172.27.100.0/24

vr11 vr12 172.23.12.101/24 VLAN Name = v12 VLAN ID = 12

vr21 172.23.11.102/24 VLAN Name = v11 VLAN ID = 11 VLAN Name = v15 VLAN ID = 15

vr22 172.23.12.102/24 VLAN Name = v11 VLAN ID = 12

172.23.11.101/24 VLAN Name = v11 VLAN ID = 11

VLAN Name = v15 VLAN ID = 15

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net

Lab 3: Network Diagram

srxX-1
ge-0/0/1

srxX-2

Trunk Ports exX-1 Access Ports

ge-0/0/12

Mgmt Network RADIUS Server

me0 0 me0.0

exX-2

me0 0 me0.0

Mgmt Network RADIUS Server

vr11 vr12 172.23.12.101/24 VLAN Name = v12 VLAN ID = 12

MAC: 00:26:88:02:74:88

vr21 172.23.11.102/24 VLAN Name = v11 VLAN ID = 11

MAC: 00:26:88:02:6b:87

vr22 172.23.12.102/24 VLAN Name = v11 VLAN ID = 12

MAC: 00:26:88:02:6b:88

172.23.11.101/24 VLAN Name = v11 VLAN ID = 11

MAC: 00:26:88:02:74:87

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net

Labs 4 & 5: Network Diagram

srxX-1
ge-0/0/1

srxX-2

Trunk Ports exX 1 exX-1 Access Ports

ge-0/0/12

exX 2 exX-2

vr10 vr11

vr20 VLAN: v10 / VID: 10 (172.23.10.102/24) VLAN: voice /VID: 25 (172.23.25.20/24)

vr21 VLAN: v11 / VID: 11 (172.23.11.102/24) VLAN: voice /VID: 25 (172.23.25.21/24)

Port-based P b d Assignment

VLAN: v10 / VID: 10 (172.23.10.101/24)

VLAN: v11 / VID: 11 (172.23.11.101/24) VLAN: voice /VID: 25 (172.23.25.11/24)

Voice VLAN Assignment

VLAN: voice /VID: 25 (172.23.25.10/24)

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net

Lab 6: Network Diagram

ae1 g 0/0/1 ge-0/0/1 ae1 ge-0/0/2 ae0

srxX-1
ae0

srxX-2

Trunk Ports exX-1 Access Ports

ge-0/0/12

sFlow Collector

ge 0/0/13 ge-0/0/13

exX-2

ge-0/0/13

sFlow Collector

vr10 vr11

vr20 VLAN: v10 / VID: 10 (172.23.10.102/24)

vr21 VLAN: v11 / VID: 11 (172.23.11.102/24)

VLAN: v10 / VID: 10 (172.23.10.101/24)

VLAN: v11 / VID: 11 (172.23.11.101/24)

2011 Juniper Networks, Inc. All rights reserved.

Worldwide Education Services

www.juniper.net