Advanced Junos Enterprise Switching 10.b
Lab Diagrams
Worldwide Education Services 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Course Number: EDU-JUN-AJEX
This document is produced by Juniper Networks, Inc. This document or any part thereof may not be reproduced or transmitted in any form under penalty of law, without the prior written permission of Juniper Networks Education Services. Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Advanced Junos Enterprise Switching Lab Diagrams, Revision 10.b Copyright © 2011 Juniper Networks, Inc. All rights reserved. Printed in USA. Revision History: Revision 10.a—April 2011 Revision 10.b—June 2011 The information in this document is current as of the date listed above. The information in this document has been carefully verified and is believed to be accurate for software Release 10.4R3.4. Juniper Networks assumes no responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental, or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. YEAR 2000 NOTICE Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The Junos operating system has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. SOFTWARE LICENSE The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should consult the software license for further details.
Server
exX-2
exX-1
srxX-2
srxX-1
© 2011 Juniper Networks, Inc. All rights reserved.
Note: Your instructor will provide address and access information.
Terminal Server
Serial Console Connections
Student Workstations
Term Server ____________/___ Server
www.juniper.net
___________/___
____________/___ exX-2
srxX-2
Worldwide Education Services
___________/___
____________/___ exX-1
srxX-1
___________/___
Management Addressing
___.___.___.___/___
Management Network
X = Pod (A, B, C, or D)
Management Network Diagram
vr10
172.24.50.1/24 Community = finance VLAN ID = 41
VLAN Name = v15 VLAN ID = 15
vr12
172.24.50.2 /24 Community = sales VLAN ID = 42
172.23.12.101/24V LAN Name = v12 VLAN ID = 12
exX-1
© 2011 Juniper Networks, Inc. All rights reserved.
Part 3
Parts 2,, 4,, and 5
vr11
ge-0/0/6
172.23.11.101/24 VLAN Name = v11 VLAN ID = 11
CVLAN ID = 100 SVLAN ID = 200
172.27.100.0/24
.1
Customer B id Bridge
Q-in-Q Access Port
VLAN Name = v15 VLAN ID = 15
172.23.11.102/24 VLAN Name = v11 VLAN ID = 11
vr21
Worldwide Education Services
172.24.50.4 /24 Community = sales VLAN ID = 42
vr20
.2
www.juniper.net
Part 3
Parts 2, 4, and 5
CVLAN ID = 100 SVLAN ID = 200
172.27.100.0/24
172.23.12.102/24 VLAN Name = v11 VLAN ID = 12
vr22
ge-0/0/6
Customer B id Bridge
Q-in-Q Access Port
exX-2
172.24.50.3/24 PVLAN Details Name = pvlan-50 Community = finance VLAN ID = 41 PVLAN ID = 50
Access Ports
ge-0/0/12
Trunk Ports
X = Pod (A, B, C, or D)
Lab 1: Network Diagram
vr10
ge-0/0/6 ge 0/0/6
172.23.12.101/24 VLAN Name = v12 VLAN ID = 12
172.23.11.101/24 VLAN Name = v11 VLAN ID = 11
© 2011 Juniper Networks, Inc. All rights reserved.
VLAN Name = v15 VLAN ID = 15
vr12
exX-1
vr11
CVLAN ID = 100 SVLAN ID = 200 172 27 100 0/24 172.27.100.0/24
.1
Customer Bridge
Qi QA Q-in-Q Access Port P
srxX-1
VLAN Name = v15 VLAN ID = 15
vr22
ge-0/0/6 ge 0/0/6
.2
www.juniper.net
CVLAN ID = 100 SVLAN ID = 200 172 27 100 0/24 172.27.100.0/24
vr20
Customer Bridge
Qi QA Q-in-Q Access Port P t
172.23.12.102/24 VLAN Name = v11 VLAN ID = 12
exX-2
172.23.11.102/24 VLAN Name = v11 VLAN ID = 11
vr21
srxX-2
Worldwide Education Services
Access Ports
ge-0/0/12
Trunk Ports
ge-0/0/1
Lab 2: Network Diagram
172.23.12.101/24 VLAN Name = v12 VLAN ID = 12
172.23.11.101/24 VLAN Name = v11 VLAN ID = 11
© 2011 Juniper Networks, Inc. All rights reserved.
ge-0/0/1
Worldwide Education Services
vr22
me0 0 me0.0
www.juniper.net
Mgmt Network RADIUS Server
MAC: 00:26:88:02:6b:88
172.23.12.102/24 VLAN Name = v11 VLAN ID = 12
exX-2
172.23.11.102/24 VLAN Name = v11 VLAN ID = 11
vr21
srxX-2
MAC: 00:26:88:02:6b:87
Access Ports
ge-0/0/12
Trunk Ports
MAC: 00:26:88:02:74:88
vr12
exX-1
vr11
me0 0 me0.0
MAC: 00:26:88:02:74:87
Mgmt Network RADIUS Server
srxX-1
Lab 3: Network Diagram
VLAN: voice /VID: 25 (172.23.25.10/24)
Voice VLAN Assignment
© 2011 Juniper Networks, Inc. All rights reserved.
VLAN: v10 / VID: 10 (172.23.10.101/24)
Port-based P b d Assignment
vr10
exX 1 exX-1
VLAN: voice /VID: 25 (172.23.25.20/24)
Worldwide Education Services
VLAN: voice /VID: 25 (172.23.25.11/24)
vr20
srxX-2
VLAN: v10 / VID: 10 (172.23.10.102/24)
Access Ports
ge-0/0/12
Trunk Ports
ge-0/0/1
VLAN: v11 / VID: 11 (172.23.11.101/24)
vr11
srxX-1
Labs 4 & 5: Network Diagram
exX 2 exX-2
www.juniper.net
VLAN: voice /VID: 25 (172.23.25.21/24)
VLAN: v11 / VID: 11 (172.23.11.102/24)
vr21
vr10
ge 0/0/13 ge-0/0/13
exX-1
© 2011 Juniper Networks, Inc. All rights reserved.
VLAN: v10 / VID: 10 (172.23.10.101/24)
sFlow Collector
ae0
ae1
vr20
srxX-2 ae0
exX-2
Worldwide Education Services
VLAN: v10 / VID: 10 (172.23.10.102/24)
Access Ports
ge-0/0/12
Trunk Ports
ge-0/0/2
g 0/0/1 ge-0/0/1
VLAN: v11 / VID: 11 (172.23.11.101/24)
vr11
srxX-1
ae1
Lab 6: Network Diagram
sFlow Collector
www.juniper.net
VLAN: v11 / VID: 11 (172.23.11.102/24)
vr21
ge-0/0/13