juniper acs lab stack e4200 config 11 12 2014

8/9/2019 Juniper Acs Lab Stack e4200 Config 11 12 2014

1/32

## Last commit: 2014-08-26 15:03:03 PDT by adminversion 10.1R1.8;system { host-name ex4200; domain-name mgmt.acsportal.com; domain-search [ mgmt.acsportal.com acsportal.com ]; backup-router 10.10.0.129;

time-zone America/Los_Angeles; root-authentication { encrypted-password "$1$oYsi6/o5$vhBeaMqXOoKI03Q19u3oZ/"; ## SECRET-DATA } name-server { 192.168.15.5; 192.168.15.6; } login { user admin { full-name ACSAdministrator; uid 2001;

class super-user; authentication { encrypted-password 6baLvdAQfZe2U; ## SECRET-DATA } } user josh { uid 1099; class super-user; authentication { encrypted-password "$1$5VKlZWlj$/blr4binK0jsSICLwUIjW/"; ## SECRET-DATA } }

} services { ssh; telnet; web-management { http { port 80; } https { port 443; local-certificate cert; }

} dhcp { default-lease-time 86400; domain-name acsportal.com; name-server { 192.168.15.5; 192.168.15.6; } domain-search { acsportal.com; mgmt.acsportal.com; } }

} ntp { server 192.168.15.5 prefer;


2/32

server 192.168.15.6; }}chassis { aggregated-devices { ethernet { device-count 16;

} } fpc 0 { pic 0 { sfpplus { pic-mode 10g; } } pic 1 { sfpplus { pic-mode 10g; }

} } fpc 2 { pic 0 { sfpplus { pic-mode 10g; } } pic 1 { sfpplus { pic-mode 10g; } }

}}interfaces { ge-0/0/0 { mtu 1514; ether-options { auto-negotiation; flow-control; link-mode automatic; speed { auto-negotiation; } } unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } } ge-0/0/1 { mtu 1514; ether-options {

auto-negotiation; flow-control; link-mode automatic;


3/32

speed { auto-negotiation; } } unit 0 { family ethernet-switching { port-mode access;

vlan { members DMZ; } } } } ge-0/0/2 { unit 0 { family ethernet-switching { port-mode access; vlan { members DMZ;

} } } } ge-0/0/3 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } }

} ge-0/0/4 { mtu 1514; ether-options { auto-negotiation; no-flow-control; link-mode full-duplex; speed { 100m; } } unit 0 { family ethernet-switching { port-mode access; vlan { members Internet; } } } } ge-0/0/5 { unit 0 { family ethernet-switching { port-mode access; vlan {

members TLD; } }


4/32

} } ge-0/0/6 { unit 0 { family ethernet-switching { port-mode access; vlan {

members DMZ; } } } } ge-0/0/7 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; }

} } } ge-0/0/8 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } }

ge-0/0/9 { unit 0 { family ethernet-switching; } } ge-0/0/10 { unit 0 { family ethernet-switching; } } ge-0/0/11 { unit 0 { family ethernet-switching { port-mode trunk; native-vlan-id TLD; } } } ge-0/0/12 { description 3par; unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999;

} } }


5/32

} ge-0/0/13 { unit 0 { family ethernet-switching; } } ge-0/0/14 {

unit 0 { family ethernet-switching; } } ge-0/0/15 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members VLAN-999; } native-vlan-id native;

} } } ge-0/0/16 { unit 0 { family ethernet-switching; } } ge-0/0/18 { ether-options { 802.3ad ae12; } }

ge-0/0/19 { ether-options { 802.3ad ae12; } } ge-0/0/20 { description "Sun x86 Blade BL3"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ ESX_Mgmt ESX_VMotion IP_Storage Internet STORAGE VLAN-1036 VLAN-55 vmotion Server_Subnet ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/21 { apply-macro juniper-port-profile { Default; } } ge-0/0/22 { ether-options {

802.3ad ae1; } }


6/32

ge-0/0/23 { ether-options { 802.3ad ae2; } } ge-0/0/24 { unit 0 {

family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-0/0/25 { enable; unit 0 { family ethernet-switching {

port-mode access; } } } ge-0/0/26 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } }

} ge-0/0/27 { unit 0 { family ethernet-switching { port-mode access; } } } ge-0/0/28 { description max; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-0/0/29 { description max; unit 0 { family ethernet-switching { port-mode trunk;

vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ];


7/32

} } } } ge-0/0/30 { description entity; unit 0 {

family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-0/0/31 { description entity; unit 0 {

family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-0/0/32 { description "Sun x86 Blade BL2"; unit 0 { family ethernet-switching {

port-mode trunk; vlan { members [ ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/33 { description "Sun x86 Blade BL2"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/34 { unit 0 { family ethernet-switching { port-mode trunk;

vlan { members [ ESX_VMotion IP_Storage ]; }


8/32

native-vlan-id ESX_Mgmt; } } } ge-0/0/35 { unit 0 { family ethernet-switching {

port-mode trunk; vlan { members [ STORAGE TLD ]; } } } } ge-0/0/36 { enable; unit 0 { family ethernet-switching { port-mode trunk;

vlan { members [ STORAGE TLD ]; } } } } ge-0/0/37 { enable; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ STORAGE TLD ];

} } } } ge-0/0/38 { description "Sun x86 Blade BL6"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/39 { description "Sun x86 Blade BL6"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; }

native-vlan-id ESX_Mgmt; } }


9/32

} ge-0/0/40 { description "Sun x86 Blade BL7"; unit 0 { family ethernet-switching { port-mode trunk; vlan {

members [ ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/41 { description "Sun x86 Blade BL7"; unit 0 { family ethernet-switching { port-mode trunk; vlan {

members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-0/0/42 { ether-options { 802.3ad ae0; } } ge-0/0/44 {

ether-options { 802.3ad ae3; } } ge-0/0/45 { ether-options { 802.3ad ae4; } } ge-0/0/46 { ether-options { link-mode full-duplex; speed { auto-negotiation; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ VLAN-999 VLAN-55 ]; } } } }

ge-0/0/47 { apply-macro juniper-port-profile { "Layer 2 Uplink";


10/32

} unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ DMZ Internet STORAGE TLD ]; }

} } } xe-0/1/0 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ TLD DMZ vmotion STORAGE ]; } } }

} xe-0/1/2 { ether-options { 802.3ad ae8; } } ge-1/0/0 { apply-macro juniper-port-profile { Default; } unit 0 { family ethernet-switching { port-mode access;

} } } ge-1/0/1 { unit 0 { family ethernet-switching { port-mode access; vlan { members DMZ; } } } } ge-1/0/2 { unit 0 { family ethernet-switching { port-mode access; vlan { members DMZ; } } } } ge-1/0/3 { unit 0 {

family ethernet-switching { port-mode access; vlan {


11/32

members TLD; } } } } ge-1/0/4 { unit 0 {

family ethernet-switching { port-mode access; vlan { members Internet; } } } } ge-1/0/5 { unit 0 { family ethernet-switching { port-mode access;

vlan { members TLD; } } } } ge-1/0/6 { unit 0 { family ethernet-switching { port-mode access; vlan { members DMZ; }

} } } ge-1/0/7 { apply-macro juniper-port-profile { Default; } } ge-1/0/8 { unit 0 { family ethernet-switching { port-mode access; vlan { members STORAGE; } } } } ge-1/0/9 { unit 0 { family ethernet-switching { port-mode access; } } }

ge-1/0/10 { unit 0 { family ethernet-switching;


12/32

} } ge-1/0/11 { unit 0 { family ethernet-switching { port-mode trunk; vlan {

members [ DMZ STORAGE TLD VLAN-55 ESX_Mgmt ESX_VMotion IP_Storage ]; } } } } ge-1/0/12 { unit 0 { family ethernet-switching { port-mode access; } }

} ge-1/0/13 { unit 0 { family ethernet-switching; } } ge-1/0/14 { unit 0 { family ethernet-switching { port-mode access; vlan { members Server_Subnet; }

} } } ge-1/0/15 { unit 0 { family ethernet-switching { port-mode access; vlan { members STORAGE; } } } } ge-1/0/16 { unit 0 { family ethernet-switching; } } ge-1/0/17 { unit 0 { family ethernet-switching; } } ge-1/0/18 { ether-options {

802.3ad ae12; } }


13/32

ge-1/0/19 { ether-options { 802.3ad ae12; } } ge-1/0/20 { description "Sun x86 Blade BL3";

unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-1/0/21 {

unit 0 { family ethernet-switching { port-mode access; } } } ge-1/0/22 { ether-options { 802.3ad ae1; } } ge-1/0/23 { ether-options {

802.3ad ae2; } } ge-1/0/24 { unit 0 { family ethernet-switching; } } ge-1/0/25 { unit 0 { family ethernet-switching { port-mode access; } } } ge-1/0/26 { unit 0 { family ethernet-switching; } } ge-1/0/27 { unit 0 { family ethernet-switching { port-mode access; }

} } ge-1/0/28 {


14/32

description max; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ];

} } } } ge-1/0/29 { description max; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ];

} } } } ge-1/0/30 { description entity; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; }

} } } ge-1/0/31 { description entity; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-1/0/32 { description "Sun x86 Blade BL2"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt;

} } }


15/32


16/32

} native-vlan-id ESX_Mgmt; } } } ge-1/0/39 { description "Sun x86 Blade BL6";

unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-1/0/40 {

description "Sun x86 Blade BL7"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-1/0/41 { description "Sun x86 Blade BL7";

unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet Cloud_Subnet DMZ Internet STORAGE VLAN-1036 VLAN-55 vmotion ESX_Mgmt ESX_VMotion IP_Storage ]; } native-vlan-id ESX_Mgmt; } } } ge-1/0/42 { ether-options { 802.3ad ae0; } } ge-1/0/44 { ether-options { 802.3ad ae3; } } ge-1/0/45 { ether-options { 802.3ad ae4; }

} ge-1/0/46 { ether-options {


17/32

link-mode full-duplex; speed { 1g; } } unit 0 { family ethernet-switching;

} } ge-1/0/47 { apply-macro juniper-port-profile { "Layer 2 Uplink"; } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ DMZ Internet STORAGE TLD ]; }

} } } ge-2/0/0 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } }

ge-2/0/1 { unit 0 { family ethernet-switching { port-mode access; vlan { members Internet; } } } } ge-2/0/2 { unit 0 { family ethernet-switching { port-mode access; vlan { members DMZ; } } } } ge-2/0/3 { unit 0 { family ethernet-switching { port-mode access; vlan {

members DMZ; } }


18/32

} } ge-2/0/4 { unit 0 { family ethernet-switching { port-mode trunk; vlan {

members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-2/0/5 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet T

LD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-2/0/6 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; }

} } } ge-2/0/7 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-2/0/8 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } }

ge-2/0/9 { unit 0 { family ethernet-switching {


19/32

port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } }

} ge-2/0/10 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } }

ge-2/0/11 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Client_Subnet DMZ Internet STORAGE Server_Subnet TLD VLAN-999 vmotion VLAN-1036 ]; } } } } ge-2/0/12 { description "SB6240 ESXi";

ether-options { 802.3ad ae7; } } ge-2/0/13 { description "SB6240 ESXi"; ether-options { 802.3ad ae7; } } ge-2/0/14 { unit 0 { family ethernet-switching { port-mode access; vlan { members Server_Subnet; } } } } ge-2/0/15 { unit 0 { family ethernet-switching { port-mode access; vlan {

members STORAGE; } }


20/32


members STORAGE; } } } } ge-2/0/17 { description 3par; unit 0 { family ethernet-switching { port-mode access; vlan { members Client_Subnet;

} } } } ge-2/0/18 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } }

} ge-2/0/19 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-2/0/20 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-2/0/21 { unit 0 { family ethernet-switching { port-mode access;

vlan { members TLD; }


21/32

} } } ge-2/0/22 { ether-options { 802.3ad ae1; }

} ge-2/0/23 { ether-options { 802.3ad ae2; } } ge-2/0/24 { ether-options { 802.3ad ae5; } } ge-2/0/25 {

unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-2/0/26 { ether-options { 802.3ad ae5; }

} ge-2/0/27 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } } ge-2/0/28 { ether-options { 802.3ad ae5; } } ge-2/0/29 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ STORAGE TLD ]; } } }

} ge-2/0/30 { unit 0 {


22/32

family ethernet-switching { port-mode access; } } } ge-2/0/31 { unit 0 {

family ethernet-switching { port-mode access; vlan { members VLAN-888; } } } } ge-2/0/32 { unit 0 { family ethernet-switching { port-mode access;

vlan { members TLD; } } } } ge-2/0/33 { unit 0 { family ethernet-switching { port-mode access; } } }

ge-2/0/34 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } } ge-2/0/35 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } } ge-2/0/36 { unit 0 { family ethernet-switching { port-mode access; vlan {

members VLAN-999; } }


23/32


members VLAN-999; } } } } ge-2/0/38 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; }

} } } ge-2/0/39 { unit 0 { family ethernet-switching { port-mode access; vlan { members VLAN-999; } } } }

ge-2/0/40 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-2/0/41 { unit 0 { family ethernet-switching { port-mode access; vlan { members TLD; } } } } ge-2/0/42 { description "e4a interface on NetApp"; unit 0 { family ethernet-switching { port-mode access;

vlan { members IP_Storage; }


24/32

} } } ge-2/0/43 { description "e4a interface on NetApp"; unit 0 { family ethernet-switching {

port-mode access; vlan { members IP_Storage; } } } } ge-2/0/44 { unit 0 { family ethernet-switching { port-mode trunk; }

} } ge-2/0/45 { unit 0 { family ethernet-switching { port-mode trunk; } } } ge-2/0/46 { unit 0 { family ethernet-switching { port-mode access;

vlan { members TLD; } } } } xe-2/1/0 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ TLD STORAGE DMZ vmotion ]; } } } } xe-2/1/2 { ether-options { 802.3ad ae8; } } ae0 { description x4500; aggregated-ether-options { lacp {

active; } }


25/32

unit 0 { family ethernet-switching { port-mode access; vlan { members STORAGE; } }

} } ae1 { description power; aggregated-ether-options { lacp { active; periodic slow; } } unit 0 { family ethernet-switching {

port-mode trunk; vlan { members [ TLD IP_Storage ]; } } } } ae2 { description slave; aggregated-ether-options { lacp { active; periodic slow;

} } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ TLD IP_Storage ]; } } } } ae3 { description power-storage; aggregated-ether-options { lacp { active; periodic slow; } } unit 0 { family ethernet-switching { port-mode access; vlan { members STORAGE; }

} } }


26/32

ae4 { description slave-storage; aggregated-ether-options { lacp { active; periodic slow; }

} unit 0 { family ethernet-switching { port-mode access; vlan { members STORAGE; } } } } ae5 { description M3000;

aggregated-ether-options { lacp { active; } } unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ STORAGE TLD VLAN-55 ]; } } }

} ae7 { description "X6240 ESXi"; unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ STORAGE TLD ]; } } } } ae8 { description "vPC to Nexus 7k core"; aggregated-ether-options { lacp { passive; } } unit 0 { description Server-VLAN-30; family ethernet-switching { port-mode trunk; vlan { members [ C1000v-980-control C1000v-981-data C1000v-982-pack

et Client_Subnet DMZ ESX_Mgmt ESX_VMotion IP_Storage STORAGE Server_Subnet TLD VLAN-1036 VLAN-55 VLAN-999 vmotion ]; }


27/32

} } } ae12 { description "ironbar aggregate"; aggregated-ether-options { lacp {

active; } } unit 0 { family ethernet-switching { vlan { members TLD; } } } } ae13 {

disable; } me0 { unit 0 { family inet { address 10.10.0.135/23; } } } vlan { unit 25 { family inet { address 192.168.25.1/24;

} } unit 26 { family inet { address 192.168.55.1/24; } } unit 27 { family inet { address 10.10.30.1/23; } } unit 28 { family inet { address 10.10.32.1/23; } } unit 29 { family inet { address 10.10.36.1/23; } } unit 30 { family inet { address 10.10.10.1/24;

} } }


28/32

}forwarding-options { helpers { bootp { server 192.168.25.29; interface { vlan.28;

vlan.27; vlan.30; } } }}routing-options { static { route 0.0.0.0/0 next-hop 192.168.25.2; route 10.10.0.0/25 next-hop 192.168.25.2; }}

protocols { rstp { interface ge-0/0/47.0 { mode point-to-point; } interface ge-1/0/47.0 { mode point-to-point; } interface ae8.0 { mode point-to-point; } }}

policy-options { prefix-list NWA { 4.20.0.0/16; 69.0.0.0/8; 187.0.0.0/8; } prefix-list net-dot-35; policy-statement WarrenG { term Regulatorz { from { prefix-list-filter NWA exact reject; } then accept; } }}class-of-service { classifiers { dscp juniper_dscp_classifier { import default; forwarding-class voice { loss-priority low code-points 101110; } } ieee-802.1 juniper_ieee_classifier {

import default; forwarding-class voice { loss-priority low code-points 101;


29/32

} } } forwarding-classes { class voice queue-num 7; class expedited-forwarding queue-num 5; class assured-forwarding queue-num 1;

class best-effort queue-num 0; } interfaces { ge-0/0/47 { unit 0 { classifiers { dscp juniper_dscp_classifier; ieee-802.1 juniper_ieee_classifier; } } } ge-1/0/47 {

unit 0 { classifiers { dscp juniper_dscp_classifier; ieee-802.1 juniper_ieee_classifier; } } } } scheduler-maps { juniper-port-profile-map { forwarding-class voice scheduler strict-priority-scheduler; forwarding-class expedited-forwarding scheduler expedited-scheduler; forwarding-class assured-forwarding scheduler assured-scheduler;

forwarding-class best-effort scheduler best-effort-scheduler; } } schedulers { strict-priority-scheduler { transmit-rate percent 10; buffer-size percent 5; priority strict-high; } expedited-scheduler { transmit-rate percent 30; buffer-size percent 30; priority low; } assured-scheduler { transmit-rate percent 25; buffer-size percent 25; priority low; } best-effort-scheduler { transmit-rate percent 35; buffer-size percent 40; priority low; } }

}security { certificates {


30/32

local { cert { "Yo Yo!\n "; ## SECRET-DATA } } }}

ethernet-switching-options { inactive: secure-access-port { interface ge-0/0/47.0 { dhcp-trusted; } interface ge-1/0/47.0 { dhcp-trusted; } vlan native { arp-inspection; examine-dhcp; }

} voip;}vlans { C1000v-980-control { vlan-id 980; } C1000v-981-data { vlan-id 981; } C1000v-982-packet { vlan-id 982; }

Client_Subnet { vlan-id 1032; l3-interface vlan.28; } Cloud_Subnet { vlan-id 1034; } DMZ { vlan-id 15; } ESX_Mgmt { description "Management VLAN for vSphere service console"; vlan-id 1010; l3-interface vlan.30; } ESX_VMotion { vlan-id 1011; } IP_Storage { vlan-id 1012; } Internet { description "Between router & FW"; vlan-id 67; }

STORAGE { vlan-id 65; }


31/32

Server_Subnet { vlan-id 1030; l3-interface vlan.27; } TLD { vlan-id 25; interface {

ge-0/0/9.0; ge-0/0/10.0; ge-0/0/11.0; ge-0/0/13.0; ge-0/0/14.0; ge-0/0/16.0; ge-1/0/10.0; ge-1/0/13.0; ge-1/0/16.0; ge-1/0/17.0; ge-0/0/47.0; ge-1/0/46.0;

ge-1/0/47.0; ge-1/0/12.0; } l3-interface vlan.25; } VLAN-1036 { description "CNSA PXE network"; vlan-id 1036; l3-interface vlan.29; } VLAN-55 { description "Upstairs OoB Managment"; vlan-id 55;

l3-interface vlan.26; } VLAN-888 { description TEST; vlan-id 888; } VLAN-889; VLAN-999 { description "Downstairs Management Network"; vlan-id 999; interface { ge-1/0/0.0; } } mgmt; native { vlan-id 1; } vmotion { description "VMotion across Juniper and Cisco"; vlan-id 85; }}virtual-chassis { preprovisioned;

no-split-detection; member 1 { role routing-engine;


32/32

serial-number BP0208110883; } member 2 { role routing-engine; serial-number BP0208110905; } member 0 {

role line-card; serial-number BP0208110861; }}

juniper acs lab stack e4200 config 11 12 2014

Documents