Solved

Problems getting Juniper SRX210 to communicate with Cisco3560

Posted on 2013-02-06
5
735 Views
Last Modified: 2013-04-12
Can someone send me steps to communicate with Cisco3560 interface gig0/1 with Juniper srx210 ge-0/0/0 unit 0 family inet address 192.168.10.1/27.  Can someone show me how to communicate through vlan example vlan 21 as well as trucking from Cisco3560 on another interface gig0/7 example to fe-0/0/7.
0
Comment
Question by:Alvin70
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 18

Expert Comment

by:deimark
ID: 38860531
An example of normal layer 3 interface config, ie only one IP address and no VLAN

ge-0/0/0 {
    unit 0 {
        family inet {
            address 192.168.254.1/24;
        }
    }
}

For a layer 3 interface with VLANs (to connect to a switch trunk port)

ge-0/0/0 {
    vlan-tagging;
    unit 10 {
        vlan-id 10;
        family inet {
            address 10.1.1.1/24;
        }
    }
    unit 20 {
        vlan-id 20;
        family inet {
            address 10.2.2.1/24;
        }
    }
}

Basically we set the interface to VLAN tagging and then create logical units underneath with VLAN IDs and IP addresses.  I would recommend keeping the logical unit number the same as the VLAN ID

We can acheive the same kind of results by configuring the interface in layer 2 mode , ie family ethernet-switching port mode trunk and then assign all required vlans to it.

This will also mean that you need to create vlan interfaces if you need layer 3 routing on the SRX.

HTH
0
 

Author Comment

by:Alvin70
ID: 38862448
For testing purposes what needs to be setup on the cisco 3560...Here is the information below I have on  Switch A
 
switchA(config)#interface gigbbit 0/1
switchA(config-if)#switchport mode trunk
switchA(config-if)#switchport trunk encapsulation dot1q
switchA(config-if)#switchport trunk native vlan 21
switchA(config-if)#switchport trunk allowed vlan 21,101

I have a test setup with my laptop.  I have my cat6 cable coming out of my laptop plugged into srx210 ge-0/0/0.   The Cisco switch 3560 interface gig0/1 is plugged  into ge-0/0/1 on srx210.  I also have a connection coming out of fe-0/0/7 to Cisco 3560 interface gig0/7.  I would like to get these interfaces communicating with trunking and static routes.  Any ip address can be used.


Thanks
0
 
LVL 18

Expert Comment

by:deimark
ID: 38863032
OK, so ge-0/0/0 is the normal layer 3 connection fro your laptop, so have this set up as foillows:

ge-0/0/0 {
    unit 0 {
        family inet {
            address 192.168.254.1/24;
        }
    }
}

For ge-0/0/1 connecting to the switch trunk configure it as follows:

ge-0/0/1 {
    vlan-tagging;
    unit 21{
        vlan-id 21;
        family inet {
            address 10.1.1.1/24;
        }
    }
    unit 101{
        vlan-id 101;
        family inet {
            address 10.2.2.1/24;
        }
    }
}

A similar set up for fe-0/0/7 and gig0/7 on the cisco would also do here.  Ensure that the VLANs and IPs are set correctly though.

Static routes can be added on the SRX under [ edit routing-options static ] similar to


[edit routing-options]
test@test# show
static {
    route 0.0.0.0/0 next-hop at-1/0/0.0;
    route 192.168.20.0/22 next-hop 10.1.2.2;
}

etc
0
 

Author Comment

by:Alvin70
ID: 38865917
The information above is not working. I am receiving the following error VLAN-ID must be specified on tagged ethernet interface.  

Can you please give me the configuration of what needs to be on the Cisco 3560?  No information was given concerning the connection

Here is my current setup:
1-I have a connection from srx210 ge0/0/0 to Cisco 3560gig0/1.
2-Connection from laptop...The ip address of the laptop is (192.168.254.5) with a gateway of (192.168.254.1) to SRX210 ge0/0/1
3-Connection from srx210 fe-0/0/7 to Cisco3560 Gig0/7.

What is the best way to get these devices talking.  I am missing something and I don't know what.  I am new to Juniper.

I also set fe-0/0/7 to trusted and ge-0/0/0 to untrusted.

Can someone just give me any generic ip address setup with the information above please.

Thanks for your continued support.  Sorry to be a headache.  
I am use to Cisco gear only.  
Once I get this test working I can then hookup srx650 and both srx210 for testing.
0
 
LVL 18

Accepted Solution

by:
deimark earned 500 total points
ID: 38865936
For the interface connected to ge-0/0/0 this just needs to be a normal layer 3 port (sorry havent used Cisco for years but if I recall its simply adding an IP address when configuring the interface)

For the ge-0/0/0 connecting to the cisco trunk, configure the cisco as a switch port with trunk mode and then allow the vlans
0

Featured Post

Now Available: Firebox Cloud for AWS and FireboxV

Firebox Cloud brings the protection of WatchGuard’s leading Firebox UTM appliances to public cloud environments. It enables organizations to extend their security perimeter to protect business-critical assets in Amazon Web Services (AWS).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question