Juniper JUNOS OS 10.3 - SOFTWARE Manual page 1445

Verification
Purpose
Action
Meaning
Related
Documentation
Example: Configuring a Private VLAN on an EX Series Switch
Copyright © 2010, Juniper Networks, Inc.
user@switch> show configuration vlans qinqvlan
vlan-id 4001;
dot1q-tunneling {
customer-vlans [ 1-100 201-300 ];
}
To confirm that the configuration is working properly, perform these tasks:
Verifying That Q-in-Q Tunneling Was Enabled on page 1349
Verifying That Q-in-Q Tunneling Was Enabled
Verify that Q-in-Q tunneling was properly enabled on the switch.
Use the command:
show vlans
user@switch> show vlans qinqvlan extensive
VLAN: qinqvlan, Created at: Thu Sep 18 07:17:53 2008
802.1Q Tag: 4001, Internal index: 18, Admin State: Enabled, Origin: Static
Dot1q Tunneling Status: Enabled
Customer VLAN ranges:
1-100
201-300
Protocol: Port Mode
Number of interfaces: Tagged 2 (Active = 0), Untagged
ge-0/0/11.0, tagged, trunk
ge-0/0/14.0, tagged, trunk
ge-0/0/12.0, untagged, access
ge-0/0/13.0, untagged, access
The output indicates that Q-in-Q tunneling is enabled and that the VLAN is tagged and
shows the associated customer VLANs.
Configuring Q-in-Q Tunneling (CLI Procedure) on page 1386
For security reasons, it is often useful to restrict the flow of broadcast and unknown
unicast traffic and to even limit the communication between known hosts. The private
VLAN (PVLAN) feature on EX Series switches allow an administrator to split a broadcast
domain into multiple isolated broadcast subdomains, essentially putting a VLAN inside
a VLAN.
This example describes how to create a private VLAN primary VLAN and secondary
VLANs:
Chapter 58: Examples: Bridging and VLAN Configuration
4 (Active = 0)
1349