Solved

Problems getting Juniper SRX210 to communicate with Cisco3560

Posted on 2013-02-06
5
767 Views
Last Modified: 2013-04-12
Can someone send me steps to communicate with Cisco3560 interface gig0/1 with Juniper srx210 ge-0/0/0 unit 0 family inet address 192.168.10.1/27.  Can someone show me how to communicate through vlan example vlan 21 as well as trucking from Cisco3560 on another interface gig0/7 example to fe-0/0/7.
0
Comment
Question by:Alvin70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 18

Expert Comment

by:deimark
ID: 38860531
An example of normal layer 3 interface config, ie only one IP address and no VLAN

ge-0/0/0 {
    unit 0 {
        family inet {
            address 192.168.254.1/24;
        }
    }
}

For a layer 3 interface with VLANs (to connect to a switch trunk port)

ge-0/0/0 {
    vlan-tagging;
    unit 10 {
        vlan-id 10;
        family inet {
            address 10.1.1.1/24;
        }
    }
    unit 20 {
        vlan-id 20;
        family inet {
            address 10.2.2.1/24;
        }
    }
}

Basically we set the interface to VLAN tagging and then create logical units underneath with VLAN IDs and IP addresses.  I would recommend keeping the logical unit number the same as the VLAN ID

We can acheive the same kind of results by configuring the interface in layer 2 mode , ie family ethernet-switching port mode trunk and then assign all required vlans to it.

This will also mean that you need to create vlan interfaces if you need layer 3 routing on the SRX.

HTH
0
 

Author Comment

by:Alvin70
ID: 38862448
For testing purposes what needs to be setup on the cisco 3560...Here is the information below I have on  Switch A
 
switchA(config)#interface gigbbit 0/1
switchA(config-if)#switchport mode trunk
switchA(config-if)#switchport trunk encapsulation dot1q
switchA(config-if)#switchport trunk native vlan 21
switchA(config-if)#switchport trunk allowed vlan 21,101

I have a test setup with my laptop.  I have my cat6 cable coming out of my laptop plugged into srx210 ge-0/0/0.   The Cisco switch 3560 interface gig0/1 is plugged  into ge-0/0/1 on srx210.  I also have a connection coming out of fe-0/0/7 to Cisco 3560 interface gig0/7.  I would like to get these interfaces communicating with trunking and static routes.  Any ip address can be used.


Thanks
0
 
LVL 18

Expert Comment

by:deimark
ID: 38863032
OK, so ge-0/0/0 is the normal layer 3 connection fro your laptop, so have this set up as foillows:

ge-0/0/0 {
    unit 0 {
        family inet {
            address 192.168.254.1/24;
        }
    }
}

For ge-0/0/1 connecting to the switch trunk configure it as follows:

ge-0/0/1 {
    vlan-tagging;
    unit 21{
        vlan-id 21;
        family inet {
            address 10.1.1.1/24;
        }
    }
    unit 101{
        vlan-id 101;
        family inet {
            address 10.2.2.1/24;
        }
    }
}

A similar set up for fe-0/0/7 and gig0/7 on the cisco would also do here.  Ensure that the VLANs and IPs are set correctly though.

Static routes can be added on the SRX under [ edit routing-options static ] similar to


[edit routing-options]
test@test# show
static {
    route 0.0.0.0/0 next-hop at-1/0/0.0;
    route 192.168.20.0/22 next-hop 10.1.2.2;
}

etc
0
 

Author Comment

by:Alvin70
ID: 38865917
The information above is not working. I am receiving the following error VLAN-ID must be specified on tagged ethernet interface.  

Can you please give me the configuration of what needs to be on the Cisco 3560?  No information was given concerning the connection

Here is my current setup:
1-I have a connection from srx210 ge0/0/0 to Cisco 3560gig0/1.
2-Connection from laptop...The ip address of the laptop is (192.168.254.5) with a gateway of (192.168.254.1) to SRX210 ge0/0/1
3-Connection from srx210 fe-0/0/7 to Cisco3560 Gig0/7.

What is the best way to get these devices talking.  I am missing something and I don't know what.  I am new to Juniper.

I also set fe-0/0/7 to trusted and ge-0/0/0 to untrusted.

Can someone just give me any generic ip address setup with the information above please.

Thanks for your continued support.  Sorry to be a headache.  
I am use to Cisco gear only.  
Once I get this test working I can then hookup srx650 and both srx210 for testing.
0
 
LVL 18

Accepted Solution

by:
deimark earned 500 total points
ID: 38865936
For the interface connected to ge-0/0/0 this just needs to be a normal layer 3 port (sorry havent used Cisco for years but if I recall its simply adding an IP address when configuring the interface)

For the ge-0/0/0 connecting to the cisco trunk, configure the cisco as a switch port with trunk mode and then allow the vlans
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question