Advanced Junos Enterprise

Switching
10.b

Lab Diagrams

Worldwide Education Services

1194 North Mathilda Avenue
Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Course Number: EDU-JUN-AJEX

This document is produced by Juniper Networks, Inc.

This document or any part thereof may not be reproduced or transmitted in any form under penalty of law, without the prior written permission of Juniper Networks
Education Services.
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered
trademarks, or registered service marks are the property of their respective owners.
Advanced Junos Enterprise Switching Lab Diagrams, Revision 10.b
Copyright 2011 Juniper Networks, Inc. All rights reserved.
Printed in USA.
Revision History:
Revision 10.aApril 2011
Revision 10.bJune 2011
The information in this document is current as of the date listed above.
The information in this document has been carefully verified and is believed to be accurate for software Release 10.4R3.4. Juniper Networks assumes no
responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary,
incidental, or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
YEAR 2000 NOTICE
Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The Junos operating system has
no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
SOFTWARE LICENSE
The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an
agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and
agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper
Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should
consult the software license for further details.

Server

exX-2

exX-1

srxX-2

srxX-1

2011 Juniper Networks, Inc. All rights reserved.

Note: Your instructor will provide

address and access information.

Terminal
Server

Serial Console
Connections

Student
Workstations

Term Server ____________/___ Server

www.juniper.net

___________/___

____________/___ exX-2

srxX-2

Worldwide Education Services

___________/___

____________/___ exX-1

srxX-1

___________/___

Management Addressing

___.___.___.___/___

Management
Network

X = Pod (A, B, C, or D)

Management Network Diagram

vr10

172.24.50.1/24
Community = finance
VLAN ID = 41

VLAN Name = v15

VLAN ID = 15

vr12

172.24.50.2 /24
Community = sales
VLAN ID = 42

172.23.12.101/24V
LAN Name = v12
VLAN ID = 12

exX-1

2011 Juniper Networks, Inc. All rights reserved.

Part 3

Parts 2,, 4,,

and 5

vr11

ge-0/0/6

172.23.11.101/24
VLAN Name = v11
VLAN ID = 11

CVLAN ID = 100
SVLAN ID = 200

172.27.100.0/24

.1

Customer
B id
Bridge

Q-in-Q Access Port

VLAN Name = v15

VLAN ID = 15

172.23.11.102/24
VLAN Name = v11
VLAN ID = 11

vr21

Worldwide Education Services

172.24.50.4 /24
Community = sales
VLAN ID = 42

vr20

.2

www.juniper.net

Part 3

Parts 2, 4,
and 5

CVLAN ID = 100
SVLAN ID = 200

172.27.100.0/24

172.23.12.102/24
VLAN Name = v11
VLAN ID = 12

vr22

ge-0/0/6

Customer
B id
Bridge

Q-in-Q Access Port

exX-2

172.24.50.3/24
PVLAN Details
Name = pvlan-50 Community = finance
VLAN ID = 41
PVLAN ID = 50

Access Ports

ge-0/0/12

Trunk Ports

X = Pod
(A, B, C, or D)

Lab 1: Network Diagram

vr10

ge-0/0/6
ge
0/0/6

172.23.12.101/24
VLAN Name = v12
VLAN ID = 12

172.23.11.101/24
VLAN Name = v11
VLAN ID = 11

2011 Juniper Networks, Inc. All rights reserved.

VLAN Name = v15

VLAN ID = 15

vr12

exX-1

vr11

CVLAN ID = 100
SVLAN ID = 200
172 27 100 0/24
172.27.100.0/24

.1

Customer
Bridge

Qi QA
Q-in-Q
Access Port
P

srxX-1

VLAN Name = v15

VLAN ID = 15

vr22

ge-0/0/6
ge
0/0/6

.2

www.juniper.net

CVLAN ID = 100
SVLAN ID = 200
172 27 100 0/24
172.27.100.0/24

vr20

Customer
Bridge

Qi QA
Q-in-Q
Access Port
P t

172.23.12.102/24
VLAN Name = v11
VLAN ID = 12

exX-2

172.23.11.102/24
VLAN Name = v11
VLAN ID = 11

vr21

srxX-2

Worldwide Education Services

Access Ports

ge-0/0/12

Trunk Ports

ge-0/0/1

Lab 2: Network Diagram

172.23.12.101/24
VLAN Name = v12
VLAN ID = 12

172.23.11.101/24
VLAN Name = v11
VLAN ID = 11

2011 Juniper Networks, Inc. All rights reserved.

ge-0/0/1

Worldwide Education Services

vr22

me0 0
me0.0

www.juniper.net

Mgmt Network
RADIUS Server

MAC: 00:26:88:02:6b:88

172.23.12.102/24
VLAN Name = v11
VLAN ID = 12

exX-2

172.23.11.102/24
VLAN Name = v11
VLAN ID = 11

vr21

srxX-2

MAC: 00:26:88:02:6b:87

Access Ports

ge-0/0/12

Trunk Ports

MAC: 00:26:88:02:74:88

vr12

exX-1

vr11

me0 0
me0.0

MAC: 00:26:88:02:74:87

Mgmt Network
RADIUS Server

srxX-1

Lab 3: Network Diagram

VLAN: voice /VID: 25

(172.23.25.10/24)

Voice VLAN
Assignment

2011 Juniper Networks, Inc. All rights reserved.

VLAN: v10 / VID: 10

(172.23.10.101/24)

Port-based
P
b
d
Assignment

vr10

exX 1
exX-1

VLAN: voice /VID: 25

(172.23.25.20/24)

Worldwide Education Services

VLAN: voice /VID: 25

(172.23.25.11/24)

vr20

srxX-2

VLAN: v10 / VID: 10

(172.23.10.102/24)

Access Ports

ge-0/0/12

Trunk Ports

ge-0/0/1

VLAN: v11 / VID: 11

(172.23.11.101/24)

vr11

srxX-1

Labs 4 & 5: Network Diagram

exX 2
exX-2

www.juniper.net

VLAN: voice /VID: 25

(172.23.25.21/24)

VLAN: v11 / VID: 11

(172.23.11.102/24)

vr21

vr10

ge 0/0/13
ge-0/0/13

exX-1

2011 Juniper Networks, Inc. All rights reserved.

VLAN: v10 / VID: 10

(172.23.10.101/24)

sFlow
Collector

ae0

ae1

vr20

srxX-2
ae0

exX-2

Worldwide Education Services

VLAN: v10 / VID: 10

(172.23.10.102/24)

Access Ports

ge-0/0/12

Trunk Ports

ge-0/0/2

g 0/0/1
ge-0/0/1

VLAN: v11 / VID: 11

(172.23.11.101/24)

vr11

srxX-1

ae1

Lab 6: Network Diagram

sFlow
Collector

www.juniper.net

VLAN: v11 / VID: 11

(172.23.11.102/24)

vr21

ge-0/0/13