You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/blog/posts/2024/srl-vlans.md
+30-10
Original file line number
Diff line number
Diff line change
@@ -612,13 +612,18 @@ All switch interfaces are configured with the `vlan-tagging` **not enabled**, wh
612
612
613
613
Let's see how this configuration affects the traffic between the clients by running our pinger script:
614
614
615
-
```diff
616
-
❯ ./ping.sh all
615
+
```{.bash .no-select}
616
+
sudo ./ping.sh all
617
+
```
618
+
619
+
<divclass="embed-result">
620
+
```{.diff .no-select .no-copy}
617
621
+ Ping to 10.1.0.2 (no tag) was successful.
618
622
+ Ping to 10.1.1.2 (single tag VID: 10) was successful.
619
623
+ Ping to 10.1.2.2 (single tag VID: 11) was successful.
620
624
+ Ping to 10.1.3.2 (double tag outer VID: 12, inner VID: 13) was successful.
621
625
```
626
+
</div>
622
627
623
628
Hey, all pings succeeded! And this is because this happened:
624
629
@@ -630,7 +635,7 @@ When the parent interface has not enabled `vlan-tagging`, all the incoming frame
630
635
631
636
Let's now enable `vlan-tagging` on the `ethernet-1/1` interface of both SR Linux switches. To automate the configuration we leverage [gnmic](https://gnmic.openconfig.net) in the CLI mode and run the following command:
632
637
633
-
```bash
638
+
```{.bash .no-select}
634
639
./set-iface.sh single-tag
635
640
```
636
641
@@ -661,13 +666,18 @@ A:srl1# info interface ethernet-1/1
661
666
662
667
This command enables `vlan-tagging` on the `ethernet-1/1` interface and configures a single-tagged VLAN with ID `10` on the `ethernet-1/1.0` subinterface. Re-run the pinger to see how this affects our setup:
663
668
664
-
```diff
665
-
❯ ./ping.sh all
669
+
```{.bash .no-select}
670
+
sudo ./ping.sh all
671
+
```
672
+
673
+
<divclass="embed-result">
674
+
```{.diff .no-select .no-copy}
666
675
- Ping to 10.1.0.2 (no tag) failed.
667
676
+ Ping to 10.1.1.2 (single tag VID: 10) was successful.
668
677
- Ping to 10.1.2.2 (single tag VID: 11) failed.
669
678
- Ping to 10.1.3.2 (double tag outer VID: 12, inner VID: 13) failed.
670
679
```
680
+
</div>
671
681
672
682
Well, entirely different picture now:
673
683
@@ -717,13 +727,18 @@ A:srl1# info interface ethernet-1/1
717
727
718
728
Running the pinger:
719
729
720
-
```diff
721
-
❯ ./ping.sh all
730
+
```{.bash .no-select}
731
+
sudo ./ping.sh all
732
+
```
733
+
734
+
<divclass="embed-result">
735
+
```{.diff .no-select .no-copy}
722
736
- Ping to 10.1.0.2 (no tag) failed.
723
737
+ Ping to 10.1.1.2 (single tag VID: 10) was successful.
724
738
+ Ping to 10.1.2.2 (single tag VID: 11) was successful.
725
739
+ Ping to 10.1.3.2 (double tag outer VID: 12, inner VID: 13) was successful.
726
740
```
741
+
</div>
727
742
728
743
Let's look at the packet diagram to see what happened:
729
744
@@ -738,7 +753,7 @@ But frames without VLAN tags will be dropped, since they don't match the configu
738
753
One last for today. Let's configure the `ethernet-1/1` interface of both SR Linux switches with the `untagged` VLAN encapsulation type. This configuration will accept only untagged frames and will drop all the tagged frames. Let's apply this configuration:
739
754
740
755
```bash
741
-
❯ ./set-iface.sh untagged
756
+
./set-iface.sh untagged
742
757
```
743
758
744
759
///details | Interface configuration
@@ -767,13 +782,18 @@ A:srl1# info interface ethernet-1/1
767
782
768
783
Running the pinger:
769
784
770
-
```diff
771
-
❯ ./ping.sh all
785
+
```{.bash .no-select}
786
+
sudo ./ping.sh all
787
+
```
788
+
789
+
<divclass="embed-result">
790
+
```{.diff .no-select .no-copy}
772
791
+ Ping to 10.1.0.2 (no tag) was successful.
773
792
- Ping to 10.1.1.2 (single tag VID: 10) failed.
774
793
- Ping to 10.1.2.2 (single tag VID: 11) failed.
775
794
- Ping to 10.1.3.2 (double tag outer VID: 12, inner VID: 13) failed.
776
795
```
796
+
</div>
777
797
778
798
Let's look at the packet diagram to see what happened:
0 commit comments