Cisco – VLAN trunking between Juniper EX -> Cisco Catalyst -> and Cisco Router

ciscojuniperswitchtrunk

I have the following scenario:

EX2200 Switch whit

  • ge-0/0/8 set as an access port on VLAN 80
  • ge-0/0/0 set as a trunk
    port connected to a catalyst switch and various vlans allowed to pass includin vlan 80

On the Catalyst Switch.

  • port #3 set up as a trunk port that receives traffic from the EX switch.
  • port 46 is set up also as a trunk port that connects to a cisco router.
    Port #48 is where the host used to be connected

host → EX2200 → Catalyst → Router

the problem is that this EX2200 is a new addition to the network and the host connected previosly to the catalyst switch on GigabitEthernet1/48.

traffic is not getting from the host to the router, but the router can send ARP request to the host.

following is the relevant configuration:

Catalyst Switch:
interface GigabitEthernet1/3 ### trunk to EX2200 Switch
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 69,74,80,82,231,401
switchport mode trunk
!

interface GigabitEthernet1/46
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 80,82,83,93,289
 switchport mode trunk
 mtu 1532
 media-type rj45
 speed 1000
 duplex full
 arp timeout 300
!

interface GigabitEthernet1/48
 switchport access vlan 80
 switchport mode access
 mtu 1532
 media-type rj45
 speed 100
 duplex full
 arp timeout 300
 no cdp enable
!

EX2200 Switch:

ge-0/0/0 {    ###TRUNK TO Catalyst switch on Ge 1/3
    unit 0 {
        family ethernet-switching {
            port-mode trunk;
            vlan {
                members [ 69 74 80 82 231 401 ];
            }
            native-vlan-id 1;
        }
    }
}

root@XXXXX# show vlans 

...
XXXXXXXXXXXXXXX {  ###CONNECTS TO Host that was on cisco Ge 1/48
    vlan-id 80;
    interface {
        ge-0/0/8.0;
    }
}
...

So, to resume the problem, when the host is connected to port 48 of cisco switch, everyting works, but when we move connection to new switch EX2200 on port ge-0/0/8 traffic stops working.

Another note is that VLAN 69 that is configured on the EX2200 switch on ports 3 to 5 works fine.

we did another test and replaced juniper switch with cisco switch, and the traffic flows normally.

Best Answer

You stated that ports 3 and 42 were configured on the Catalyst switch, but then provided configurations for ports 46 and 48. The configuration you posted for port 46 should be applied to port 3 that connects to the EX2200. Your router's connection is unchanged, so hopefully we can assume that configuration is fine.

Now, on the EX2200, the following lines of code would be appropriate to do the following:

ge-0/0/0 - trunk allowing the same vlans as defined above on port 46

ge-0/0/6 - access port on VLAN80

set vlans vlan80 vlan-id 80
set vlans vlan82 vlan-id 82
set vlans vlan83 vlan-id 83
set vlans vlan93 vlan-id 93
set vlans vlan289 vlan-id 289
set interfaces ge-0/0/0 description uplink-to-catalyst 
set interfaces ge-0/0/0 unit 0 family ethernet-switching port-mode trunk
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan80
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan82
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan83
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan93
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan289
set interfaces ge-0/0/6 unit 0 family ethernet-switching port-mode access
set interfaces ge-0/0/6 unit 0 family ethernet-switching vlan members vlan80

Some other suggestions for you:

1) Turn on LLDP on your switch so you can do a show lldp neighbors and see where your connections go.

2) Don't use RSTP for spanning tree on the juniper switch, it doesn't play nice with Cisco that well, use VSTP instead. If you end up with a ton of vlans, you might even need to use MSTP.

3) Turn off chassis alarm for the management ethernet if you're not using it.

On the EX2200:

delete protocols rstp
set protocols vstp vlan all bridge-priority 4k
set protocols lldp interface all
set chassis alarm management-ethernet link-down ignore

On the Catalyst (if it supports it)

lldp run