juniper subinterface problem

zhousan

RE: SubInterface in NS25, what i im missing ?

Hi,
You do not have to configure 802.1q tagging on your host (except for
testing). Configure the vlan ports and trunk with proper tag option on your
switch.
NS
|
802.1q tagged
|
switch
|     |
non tagged ports
FlO
-----Message d'origine-----
De : nn-bounces <at> qorbit.net [mailto:nn-bounces <at> qorbit.net]De la part de
Benoit Plessis
Envoyé : mardi, 12. octobre 2004 10:19
À : Anthony Laing; NetScreen Mailing List
Objet : Re: [nn] SubInterface in NS25, what i im missing ?
On Mon, 2004-10-11 at 18:24, Anthony Laing wrote:
> Benoit,
>
> Is the PC directly connected on Eth1? If so, are you sure your PC is
sending
> a VLAN tag in its frames?
>
> Also, just to check something, can you give me the output from &quot;get zone
> trust&quot;
>
> Anthony
Hy,
In fact i'm quite sure he doesn't send VLAN tag :) And it was more or
less my initial question:
>> >> >> > What did i missed ? Is something special needed on the
computer ?
I've found the tools to do that under linux,
but it has crashed my 2.6 badly:
802.1Q VLAN Support v1.8 Ben Greear <greearb <at> candelatech.com>
All bugs added by David S. Miller <davem <at> redhat.com>
Unable to handle kernel NULL pointer dereference at virtual address
00000040
printing eip:
c01972e3
*pde = 00000000
Oops: 0000 [#1]
PREEMPT
Modules linked in: 8021q smbfs msr cpuid parport_pc lp parport ipv6 e100
eepro100 mii snd_intel8x0 snd_ac97_codec snd_pcm_oss snd_mixer_oss
snd_pcm snd_timer snd_page_alloc gameport snd_mpu401_uart snd_rawmidi
snd_seq_device snd soundcore ata_piix libata hw_random pci_hotplug
ehci_hcd joydev mousedev tsdev usbhid uhci_hcd usbcore intel_mch_agp
intel_agp agpgart rtc pcspkr floppy evdev eeprom i2c_sensor i2c_i801
i2c_core p4_clockmod speedstep_lib freq_table sd_mod scsi_mod ide_cd
cdrom reiserfs ext2 ext3 jbd mbcache dm_mod ide_generic ide_disk piix
ide_core unix
CPU:    0
EIP:    0060:[<c01972e3>]    Not tainted
EFLAGS: 00010246   (2.6.8-p4)
EIP is at pci_set_power_state&#43;0x12e/0x136
eax: 00000003   ebx: de4b56b8   ecx: 00008947   edx: 00000000
esi: 00000000   edi: 00000000   ebp: de4b5000   esp: daedfea0
ds: 007b   es: 007b   ss: 0068
Process hald (pid: 3126, threadinfo=daede000 task=deeb7260)
Stack: daede000 40283b78 de4b56b8 de4b5220 daedfefc de4b5000 e06d78d2
0000000a
daedff31 00000000 ffffffff daedfeec e06d77b9 daedfefc daedff40
e070956f
ffffffa1 00008947 de4b5000 30687465 00000000 00000000 00000000
08190000
Call Trace:
[<e06d78d2>] speedo_ioctl&#43;0x119/0x155 [eepro100]
[<e06d77b9>] speedo_ioctl&#43;0x0/0x155 [eepro100]
[<e070956f>] vlan_dev_ioctl&#43;0xa8/0xd9 [8021q]
[<e07094c7>] vlan_dev_ioctl&#43;0x0/0xd9 [8021q]
[<c01fc732>] dev_ifsioc&#43;0x354/0x3c2
[<c01fae5f>] dev_load&#43;0x21/0x69
[<c01fc8dc>] dev_ioctl&#43;0x13c/0x292
[<c023238a>] udp_ioctl&#43;0x0/0xb9
[<c02395ae>] inet_ioctl&#43;0x82/0x8f
[<c01f3880>] sock_ioctl&#43;0xeb/0x276
[<c015b175>] sys_ioctl&#43;0x109/0x248
[<c0105dbf>] syscall_call&#43;0x7/0xb
Code: 8b 57 40 e9 f4 fe ff ff 55 89 c5 57 56 53 83 ec 08 85 d2 89
But under MS environement what should i use to connect vlan ?
Thanks,
Benoit
_______________________________________________
nn mailing list
nn <at> qorbit.net
http://www.qorbit.net/mailman/listinfo/nn






To create a subinterface, perform the following procedure:
Open the WebUI. For more information on accessing the WebUI, refer to KB4317 - [ScreenOS] Accessing your Juniper firewall device using the WebUI.

From the NetScreen options menu, click Network, and then Interfaces:




From the List Interfaces drop-down menu, select Sub-IF:


From the Interface drop-down menu, select Sub-IF:

Click New:




From the Zone Name drop-down menu, select a zone to bind to. In the VLAN Tag text box, type a VLAN Tag number.

Note: Do not use a VLAN Tag of 1, as this can cause some conflicts with Cisco switches.


Click OK.

From the Sub-Interface, click Edit:




From Properties, click Track IP Options:




Select the Enable Track IP check box:


Click OK.

To configure a subinterface, use the following commands via the CLI:

>set interface ethernet1/1.1 tag 5 zone &quot;Trust&quot;
>set interface ethernet1/1.1&quot;ip 10.10.10.1/24
>set interface ethernet1/1.1 ip manageable
> set int eth0/1.1 manage-ip 10.10.10.2
>set interface ethernet1/1.1 monitor threshold 255
>set interface ethernet1/1.1 monitor track threshold 1
>set interface ethernet1/1.1 monitor track weight 255
>set interface ethernet1/1.1 monitor track ip

PURPOSE:
Troubleshooting


RELATED LINKS: