Do not include the "ge-0/0/3" in each of your VLAN statements; as that designates that port to be an access port per se.
You just need to have this: vlans { bgp { vlan-id 12; l3-interface vlan.12; } lan { vlan-id 10; l3-interface vlan.10; } wan { vlan-id 11; l3-interface vlan.11; } } JunOS assumes that you have some trunk ports... somewhere... (as you have declared under the [interfaces ge-0/0/3] stanza) for these VLANs if there's no "untagged ports" associated with them. Regards, - Chris. On 2010-04-08, at 4:05 AM, Morten Isaksen wrote: > Hi! > > I am tryng to setup a vlan on a trunk port on 2 J2320 but I have some > problems to get it to work. The two J2320 are connected to each other > on ge-0/0/3. I can ping the local ip address on vlan 12 but not the ip > address on the other router. > > tcpdump -n -i ge-0/0/3 show no traffic at all on the interface on both > routers. > > Can you please help > > The 2 configurations are here: > > ## Last commit: 2010-04-08 16:58:02 UTC by root > version 9.2R1.10; > system { > host-name bgp-1; > root-authentication { > encrypted-password XXX; > } > services { > ssh; > telnet; > web-management { > http { > interface ge-0/0/0.0; > } > } > } > syslog { > file messages { > any any; > } > } > } > chassis { > fpc 0 { > pic 0 { > ethernet { > pic-mode enhanced-switching; > } > } > } > } > interfaces { > ge-0/0/0 { > unit 0 { > family inet { > address 192.168.1.1/24; > address 10.253.254.101/24; > } > } > } > ge-0/0/3 { > unit 0 { > family ethernet-switching { > port-mode trunk; > vlan { > members [ bgp lan wan ]; > } > } > } > } > vlan { > unit 10 { > family inet { > address 10.253.253.202/24; > } > } > unit 11 { > family inet { > address 178.21.248.2/26; > } > } > unit 12 { > family inet { > address 178.21.250.1/30; > } > } > } > } > security { > zones { > security-zone trust { > tcp-rst; > host-inbound-traffic { > system-services { > any-service; > } > protocols { > all; > } > } > interfaces { > all; > } > } > security-zone vlan.12 { > host-inbound-traffic { > system-services { > ping; > } > } > } > } > policies { > default-policy { > permit-all; > } > } > alg { > dns disable; > ftp disable; > h323 disable; > mgcp disable; > msrpc disable; > sunrpc disable; > real disable; > rsh disable; > rtsp disable; > sccp disable; > sip disable; > sql disable; > talk disable; > tftp disable; > pptp disable; > } > forwarding-options { > family { > inet6 { > mode packet-based; > } > iso { > mode packet-based; > } > } > } > flow { > allow-dns-reply; > tcp-session { > no-syn-check; > no-syn-check-in-tunnel; > no-sequence-check; > } > } > } > vlans { > bgp { > vlan-id 12; > interface { > ge-0/0/3.0; > } > l3-interface vlan.12; > } > lan { > vlan-id 10; > interface { > ge-0/0/3.0; > } > l3-interface vlan.10; > } > wan { > vlan-id 11; > interface { > ge-0/0/3.0; > } > l3-interface vlan.11; > } > } > > ## Last commit: 2010-04-08 17:23:12 UTC by root > version 9.2R1.10; > system { > root-authentication { > encrypted-password XXX; > } > services { > ssh; > telnet; > web-management { > http { > interface ge-0/0/0.0; > } > } > } > syslog { > file messages { > any any; > } > } > } > chassis { > fpc 0 { > pic 0 { > ethernet { > pic-mode enhanced-switching; > } > } > } > } > interfaces { > ge-0/0/0 { > unit 0 { > family inet { > address 10.253.254.102/24; > } > } > } > ge-0/0/3 { > unit 0 { > family ethernet-switching { > port-mode trunk; > vlan { > members bgp; > } > } > } > } > vlan { > unit 12 { > family inet { > address 178.21.250.2/30; > } > } > } > } > security { > zones { > security-zone trust { > tcp-rst; > host-inbound-traffic { > system-services { > any-service; > } > protocols { > all; > } > } > interfaces { > all; > } > } > } > policies { > default-policy { > permit-all; > } > } > alg { > dns disable; > ftp disable; > h323 disable; > mgcp disable; > msrpc disable; > sunrpc disable; > real disable; > rsh disable; > rtsp disable; > sccp disable; > sip disable; > sql disable; > talk disable; > tftp disable; > pptp disable; > } > forwarding-options { > family { > inet6 { > mode packet-based; > } > iso { > mode packet-based; > } > } > } > flow { > allow-dns-reply; > tcp-session { > no-syn-check; > no-syn-check-in-tunnel; > no-sequence-check; > } > } > } > vlans { > bgp { > vlan-id 12; > interface { > ge-0/0/3.0; > } > l3-interface vlan.12; > } > } > > > > > -- > Morten Isaksen > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp