Re: [j-nsp] juniper cisco switch interconnection
Patrick Dickey dickeypj...@yahoo.com writes: Just a quick note: if you need multiple vlan STP (like what PVST+ has...), use VSTP on the Juniper. Yes, my advide was wrong, I read RSTP as VSTP. I have only tried VSTP against a Cisco, never RSTP. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] juniper cisco switch interconnection
Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Do you use a standard crossover cable? MDIX? Any Layer 2 issues with RSTP and PVST+? Any specific configuration required to make it work? Stability? thanks in advance, Mike ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
harbor235 harbor...@gmail.com writes: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Yes Do you use a standard crossover cable? MDIX? I have only attempted 1Gbps, that just worked with a straight cable. Any Layer 2 issues with RSTP and PVST+? It seems to work so far... Any specific configuration required to make it work? Avoid VLAN 1. You can probably make VLAN 1 work if you try, but for me it was easier to simply not use it. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
Just a quick note: if you need multiple vlan STP (like what PVST+ has...), use VSTP on the Juniper. Ensure that VLAN 1 is on any trunk line between the Cisco and the Juniper. You don't need to have traffic there, but PVST+ uses VLAN 1 and VSTP will listen on VLAN 1 for STP information. If it's not configured, all kinds of strangeness occurs. YMMV -Patrick -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Benny Amorsen Sent: Monday, December 10, 2012 2:16 PM To: harbor235 Cc: Juniper List Subject: Re: [j-nsp] juniper cisco switch interconnection harbor235 harbor...@gmail.com writes: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Yes Do you use a standard crossover cable? MDIX? I have only attempted 1Gbps, that just worked with a straight cable. Any Layer 2 issues with RSTP and PVST+? It seems to work so far... Any specific configuration required to make it work? Avoid VLAN 1. You can probably make VLAN 1 work if you try, but for me it was easier to simply not use it. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
Hi Patrick, On Tue, Dec 11, 2012 at 8:20 AM, Patrick Dickey dickeypj...@yahoo.com wrote: Just a quick note: if you need multiple vlan STP (like what PVST+ has...), use VSTP on the Juniper. Ensure that VLAN 1 is on any trunk line between the Cisco and the Juniper. You don't need to have traffic there, but PVST+ uses VLAN 1 and VSTP will listen on VLAN 1 for STP information. If it's not configured, all kinds of strangeness occurs. Your comment reminded me of some VSTP strangeness I'd seen previously. Do you know if VSTP wants VLAN 1 even in a pure Juniper environment? Or is this only required for Cisco PVST+ interop? Cheers, Dale ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
Hi Dale- As far as I know, it's a Cisco interop issue. Cisco only sends certain info to the standard multicast address on VLAN 1. On all other VLANs, it sends info only to the Cisco multicast address (not the standard RFC address). At least that's how I remember the problem could be wrong. Patrick -Original Message- From: dale.s...@gmail.com [mailto:dale.s...@gmail.com] On Behalf Of Dale Shaw Sent: Monday, December 10, 2012 2:50 PM To: Patrick Dickey Cc: Juniper List Subject: Re: [j-nsp] juniper cisco switch interconnection Hi Patrick, On Tue, Dec 11, 2012 at 8:20 AM, Patrick Dickey dickeypj...@yahoo.com wrote: Just a quick note: if you need multiple vlan STP (like what PVST+ has...), use VSTP on the Juniper. Ensure that VLAN 1 is on any trunk line between the Cisco and the Juniper. You don't need to have traffic there, but PVST+ uses VLAN 1 and VSTP will listen on VLAN 1 for STP information. If it's not configured, all kinds of strangeness occurs. Your comment reminded me of some VSTP strangeness I'd seen previously. Do you know if VSTP wants VLAN 1 even in a pure Juniper environment? Or is this only required for Cisco PVST+ interop? Cheers, Dale ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
Hi, I also came across issues when running PVST on Cisco switches RSTP on Juniper. Had to change the Spanning Tree mode to MSTP on all the Cisco and Juniper switches and that's been working fine. Regards, Saba On Tue, Dec 11, 2012 at 6:05 AM, harbor235 harbor...@gmail.com wrote: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Do you use a standard crossover cable? MDIX? Any Layer 2 issues with RSTP and PVST+? Any specific configuration required to make it work? Stability? thanks in advance, Mike ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
you can bcast storm your network to a halt if you are not careful. Use VSTP on juniper side to match the cisco PVST+. I believe Juniper's RSTP uses one instance of spanning tree over the physical network not an instance per vlan like cisco's implementation. I would also watch out for vlan 1. - Original Message - From: Benny Amorsen benny+use...@amorsen.dk To: harbor235 harbor...@gmail.com Cc: Juniper List juniper-nsp@puck.nether.net Sent: Monday, December 10, 2012 3:16:10 PM Subject: Re: [j-nsp] juniper cisco switch interconnection harbor235 harbor...@gmail.com writes: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Yes Do you use a standard crossover cable? MDIX? I have only attempted 1Gbps, that just worked with a straight cable. Any Layer 2 issues with RSTP and PVST+? It seems to work so far... Any specific configuration required to make it work? Avoid VLAN 1. You can probably make VLAN 1 work if you try, but for me it was easier to simply not use it. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
Here is a quick summary of the JUNOS RSTP/VSTP interop behavior. If you enable RSTP on the Juniper side, and do NOT set any native-vlans on any of the cisco ports connected to juniper, then JUNOS will interop with the cisco RSTP frames sent untagged, and VLAN1 will block correctly. The cisco devices will see each other via PVST on all other VLANs and block those accordingly. If you only enable VSTP on the Juniper side and you define VLAN 1 on the Juniper side with a vlan tag of 1 specified, then bad things happen prior to 12.1r2/12.2 software. This is due to the fact that JUNOS transmits/expects tagged packets for VLAN1 and drops all untagged STP frames. While the cisco device will transmit untagged STP frames to both the STP MAC and the PVST MAC, but both are untagged. So basically the Juniper and the Cisco will not see each other on the wire. With 12.1r2 and 12.2 software, JUNOS will behave similarly to the cisco side, in that it will transmit the VSTP(PVST) frames untagged. If you enable both RSTP and VSTP on the Juniper side and you define VLAN 1 on the Juniper side with a VLAN tag of 1 specified, the behavior is the same as above, as RSTP won't be transmitted out the interface because all VLANs have VLAN-IDs associated with them. Again 12.1r2/12.2 and beyond address this. If you enable RSTP and VSTP on the Juniper side and you define VLAN 1 WITHOUT a VLAN id defined, then all is well, as the Juniper will interoperate with Cisco on all VLANs other than VLAN1 using VSTP/PVST, and it will interoperate with the Cisco on VLAN1 using RSTP. This behavior can be used on all releases prior to 12.1r2/12.2 based on what I've seen in the past. There is a minimum release in which to run RSTP+VSTP, but I don't remember that off the top of my head, probably a low 10.x release. Joe -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Mike Azevedo Sent: Monday, December 10, 2012 3:28 PM To: Benny Amorsen Cc: Juniper List Subject: Re: [j-nsp] juniper cisco switch interconnection you can bcast storm your network to a halt if you are not careful. Use VSTP on juniper side to match the cisco PVST+. I believe Juniper's RSTP uses one instance of spanning tree over the physical network not an instance per vlan like cisco's implementation. I would also watch out for vlan 1. - Original Message - From: Benny Amorsen benny+use...@amorsen.dk To: harbor235 harbor...@gmail.com Cc: Juniper List juniper-nsp@puck.nether.net Sent: Monday, December 10, 2012 3:16:10 PM Subject: Re: [j-nsp] juniper cisco switch interconnection harbor235 harbor...@gmail.com writes: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Yes Do you use a standard crossover cable? MDIX? I have only attempted 1Gbps, that just worked with a straight cable. Any Layer 2 issues with RSTP and PVST+? It seems to work so far... Any specific configuration required to make it work? Avoid VLAN 1. You can probably make VLAN 1 work if you try, but for me it was easier to simply not use it. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] juniper cisco switch interconnection
ooh VSTP/PVST+ interop. Boy have we had some fun here over the years.. Cisco PVST+ sends IEEE and Cisco BPDUs on the *native* VLAN and Cisco BPDUs for each VLAN that is tagged on an interface. Juniper VSTP only sends IEEE BPDUs on the native VLAN 1 (or did as of 11.4) but sends Cisco BPDUs for each tagged VLAN. A gotcha to watch out for is if you are using default VLAN in Junos as your native, you need to manually set the VLAN-ID to 1 or the VSTP config will not pick it up: set vlan default vlan-id 1 There is a change in 12.2 regarding something similar to this: VSTP compatibility with Cisco PVST+—When you configure VSTP using the set protocol vstp vlan all configuration mode command, VLAN ID 1 is now excluded, thus making Junos OS VSTP compatible with Cisco PVST+. To include VLAN ID 1 in the VSTP VLAN, you must now add it explicitly using the set protocol vstp vlan 1 configuration mode command. If you're in a pure Juniper environment, you don't need to worry too much though - as long as you have a common native VLAN (or even if you have none) everything generally works pretty well provided you make sure you're not running an EX software version affected by this bad boy: http://kb.juniper.net/InfoCenter/index?page=contentid=KB22111cat=EX_SERIESactp=LISTsmlogin=true If your VLAN count is getting up over 100, consider MSTP - the CPU thrashing on a 3550 or 3750 when they all reconverge has some NASTY side-effects (like delaying the sending of BPDUs, causing the issue to spiral even further). On 11/12/2012, at 7:28 AM, Mike Azevedo mikea...@iristransport.com wrote: you can bcast storm your network to a halt if you are not careful. Use VSTP on juniper side to match the cisco PVST+. I believe Juniper's RSTP uses one instance of spanning tree over the physical network not an instance per vlan like cisco's implementation. I would also watch out for vlan 1. - Original Message - From: Benny Amorsen benny+use...@amorsen.dk To: harbor235 harbor...@gmail.com Cc: Juniper List juniper-nsp@puck.nether.net Sent: Monday, December 10, 2012 3:16:10 PM Subject: Re: [j-nsp] juniper cisco switch interconnection harbor235 harbor...@gmail.com writes: Has anyone connected a Juniper EX series switch with a Cisco switch (I have a 3550)? Yes Do you use a standard crossover cable? MDIX? I have only attempted 1Gbps, that just worked with a straight cable. Any Layer 2 issues with RSTP and PVST+? It seems to work so far... Any specific configuration required to make it work? Avoid VLAN 1. You can probably make VLAN 1 work if you try, but for me it was easier to simply not use it. /Benny ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
