Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 1675

Meaning
Related
Documentation
Example: Configuring a Private VLAN on a Single EX Series Switch
Requirements
Overview and Topology
Copyright © 2010, Juniper Networks, Inc.
ge-0/0/14.0, tagged, trunk
ge-0/0/12.0, untagged, access
ge-0/0/13.0, untagged, access
The output indicates that Q-in-Q tunneling is enabled and that the VLAN is tagged and
shows the associated customer VLANs.
Configuring Q-in-Q Tunneling (CLI Procedure) on page 1608
For security reasons, it is often useful to restrict the flow of broadcast and unknown
unicast traffic and to even limit the communication between known hosts. The private
VLAN (PVLAN) feature on EX Series switches allows an administrator to split a broadcast
domain into multiple isolated broadcast subdomains, essentially putting a VLAN inside
a VLAN.
This example describes how to create a PVLAN on a single EX Series switch:
NOTE: Configuring a voice over IP (VoIP) VLAN on PVLAN interfaces is not
supported.
Requirements on page 1571
Overview and Topology on page 1571
Configuration on page 1572
Verification on page 1576
This example uses the following hardware and software components:
One EX Series switch
Junos OS Release 9.3 or later for EX Series switches
Before you begin configuring a PVLAN, make sure you have created and configured the
necessary VLANs. See "Configuring VLANs for EX Series Switches (CLI Procedure)" on
page 1600 or "Configuring VLANs for EX Series Switches (J-Web Procedure)" on page 1597.
In a large office with multiple buildings and VLANs, you might need to isolate some
workgroups or other endpoints for security reasons or to partition the broadcast domain.
This configuration example shows a simple topology to illustrate how to create a PVLAN
with one primary VLAN and two community VLANs, one for HR and one for finance, as
well as two isolated ports; one for the mail server and the other for the backup server.
Table 230 on page 1572 lists the settings for the example topology.
Chapter 64: Examples: Bridging and VLAN Configuration
1571