Quantcast
Channel: Ethernet Switching topics
Viewing all articles
Browse latest Browse all 2326

vlan ingress filtering

$
0
0

Hello guys!
Here is the issue I faced with.
Imagine, we have a ring topology as depicted. Ports ge-0/0/0 and ge-0/0/2 are uplink trunk ports, port ge-0/0/1 - downlink access port.

Vlan-id 100 is the only one vlan that is allowed to pass ports ge-0/0/0 and ge-0/0/1. 
See configuration snippet bellow.

ge-0/0/0 {
        unit 0 {
                  ethernet-switching {
                  port-mode trunk;
                  vlan {
                             members 100;
                }
          }
     }

}

ge-0/0/1 {
        unit 0 {
                   ethernet-switching {
                  port-mode access;
                  vlan {
                             members 100;
                }
           }
      }
}

ge-0/0/2 {
        unit 0 {
                  ethernet-switching {
                  port-mode trunk;
                  vlan {
                             members 200;
                }
          }
     }

}

 

If sw1 receives ingress packet tagged with vlan-id 100 on its ge-0/0/2 port, switch accepts packet and  send it forward regarding to its vlan-table (ge-0/0/0 and ge-0/0/1 accordingly), this leads to forming unidirectional L2 loop.
I heard that there are two types of packet filtering: egress and ingress. I supposed that Juniper switches use ingress filtering, so I expected that received packet tagged with vlan-id 100 on ge-0/0/2 should be dropped. Am I right? Could you tell me where can I find description of such behavior in case if Junipers uses egress vlan filtering scheme?

Thanks a lot in advance.


Viewing all articles
Browse latest Browse all 2326

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>