[{"data":1,"prerenderedAt":1576},["ShallowReactive",2],{"blog-\u002Fblog\u002Fconfiguration-vlan-avec-junos":3,"blog-\u002Fblog\u002Fconfiguration-vlan-avec-junos-surround":1440,"blog-\u002Fblog\u002Fconfiguration-vlan-avec-junos-certifications":1496},{"id":4,"title":5,"body":6,"categories":1425,"cover":1427,"cover_contain":213,"credly_badge_id":1428,"date":1429,"description":1430,"extension":1431,"meta":1432,"navigation":213,"path":1433,"related_certifications":1434,"seo":1436,"slug":1437,"stem":1438,"__hash__":1439},"blog\u002Fblog\u002Fconfiguration-vlan-avec-junos.md","Configuration de VLAN avec Junos",{"type":7,"value":8,"toc":1415},"minimark",[9,14,18,22,42,58,90,109,114,128,151,248,259,271,307,310,322,500,504,511,514,517,624,627,632,810,813,830,882,891,988,991,1007,1022,1034,1084,1088,1108,1127,1181,1184,1217,1220,1285,1291,1295,1315,1343,1346,1377,1382,1396,1404,1408,1411],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Vous devez segmenter votre réseau d'entreprise : voici comment créer des VLAN, des inter-VLAN et des trunk interfaces sous Junos.",[10,19,21],{"id":20},"junos-virtual-local-area-network-vlan","JunOS : Virtual Local Area Network (VLAN)",[15,23,24,25,29,30,33,34,37,38,41],{},"Un ",[26,27,28],"strong",{},"réseau local virtuel"," (VLAN) est ",[26,31,32],{},"un réseau informatique"," ",[26,35,36],{},"logique"," indépendant, les ",[26,39,40],{},"VLAN"," sont indispensables dans les cas suivants, car ils permettent :",[43,44,45,49,52,55],"ul",{},[46,47,48],"li",{},"Une meilleure gestion réseau.",[46,50,51],{},"D’optimiser la bande passante.",[46,53,54],{},"De réduire les domaines de collisions.",[46,56,57],{},"Renforcer la sécurité.",[15,59,60,61,64,65,67,68,71,72,79,80,85,86,89],{},"L’exemple suivant explique la ",[26,62,63],{},"mise en réseau"," de ",[26,66,40],{}," \u002F ",[26,69,70],{},"taggé"," sous JunOS 12.3R8.7 (norme standard ",[73,74,78],"a",{"href":75,"rel":76},"http:\u002F\u002Ffr.wikipedia.org\u002Fwiki\u002FIEEE_802.1Q",[77],"nofollow","IEEE_802.1Q)"," avec des switchs de niveau 3 (",[73,81,84],{"href":82,"rel":83},"http:\u002F\u002Fwww.juniper.net\u002Fassets\u002Fus\u002Fen\u002Flocal\u002Fpdf\u002Fdatasheets\u002F1000389-en.pdf",[77],"EX3300","). Ici le mode de routage est dit ",[26,87,88],{},"Multilayer Switching",".",[15,91,92,93,96,97,100,101,104,105,108],{},"Dans ce tutoriel nous aborderons certains points tels que :  le VLAN default, les VLAN’s taggués, les liens ",[26,94,95],{},"trunk"," entre ",[26,98,99],{},"deux chassis"," virtuels ",[26,102,103],{},"Juniper"," en ",[26,106,107],{},"SFP","+ (10G).",[110,111,113],"h3",{"id":112},"comprendre-le-vlan-par-défaut-sous-junos","Comprendre le VLAN par défaut sous JunOS",[15,115,116,117,119,120,123,124,127],{},"Par défaut sur un switch Juniper il existe un ",[26,118,40],{}," nommé : ",[26,121,122],{},"default"," et il englobe en mode bridge tous les ports. Par exemple, il permet à des petites entreprises de ne pas avoir pas se soucier de la configuration initiale des ports. Il est directement opérationnel.",[125,126],"br",{},"\nVoici par exemple une configuration initiale (mode configure) :",[129,130,135],"pre",{"className":131,"code":132,"language":133,"meta":134,"style":134},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","show interfaces\n","bash","",[136,137,138],"code",{"__ignoreMap":134},[139,140,143,147],"span",{"class":141,"line":142},"line",1,[139,144,146],{"class":145},"sBMFI","show",[139,148,150],{"class":149},"sfazB"," interfaces\n",[129,152,154],{"className":131,"code":153,"language":133,"meta":134,"style":134},"interfaces {\n    ge-0\u002F0\u002F0 {\n        unit 0 {\n            family ethernet-switching {\n            }\n        }\n\n    ge-0\u002F0\u002F1 {\n        unit 0 {\n            family ethernet-switching;\n        }\n",[136,155,156,164,172,184,195,202,208,215,223,232,243],{"__ignoreMap":134},[139,157,158,161],{"class":141,"line":142},[139,159,160],{"class":145},"interfaces",[139,162,163],{"class":149}," {\n",[139,165,167,170],{"class":141,"line":166},2,[139,168,169],{"class":145},"    ge-0\u002F0\u002F0",[139,171,163],{"class":149},[139,173,175,178,182],{"class":141,"line":174},3,[139,176,177],{"class":145},"        unit",[139,179,181],{"class":180},"sbssI"," 0",[139,183,163],{"class":149},[139,185,187,190,193],{"class":141,"line":186},4,[139,188,189],{"class":145},"            family",[139,191,192],{"class":149}," ethernet-switching",[139,194,163],{"class":149},[139,196,198],{"class":141,"line":197},5,[139,199,201],{"class":200},"sTEyZ","            }\n",[139,203,205],{"class":141,"line":204},6,[139,206,207],{"class":200},"        }\n",[139,209,211],{"class":141,"line":210},7,[139,212,214],{"emptyLinePlaceholder":213},true,"\n",[139,216,218,221],{"class":141,"line":217},8,[139,219,220],{"class":145},"    ge-0\u002F0\u002F1",[139,222,163],{"class":149},[139,224,226,228,230],{"class":141,"line":225},9,[139,227,177],{"class":145},[139,229,181],{"class":180},[139,231,163],{"class":149},[139,233,235,237,239],{"class":141,"line":234},10,[139,236,189],{"class":145},[139,238,192],{"class":149},[139,240,242],{"class":241},"sMK4o",";\n",[139,244,246],{"class":141,"line":245},11,[139,247,207],{"class":200},[15,249,250,251,254,255,258],{},"Pour information, on remarque que le protocole ",[26,252,253],{},"lldp"," est activé pour l’échange d’informations entre les ports. Le protocole ",[26,256,257],{},"rstp"," lui, est également présent dans la configuration initiale (en cas de boucle) :",[129,260,262],{"className":131,"code":261,"language":133,"meta":134,"style":134},"show protocoles\n",[136,263,264],{"__ignoreMap":134},[139,265,266,268],{"class":141,"line":142},[139,267,146],{"class":145},[139,269,270],{"class":149}," protocoles\n",[129,272,274],{"className":131,"code":273,"language":133,"meta":134,"style":134},"}\nrstp;\nlldp {\n    interface all;\n}\n",[136,275,276,281,287,293,303],{"__ignoreMap":134},[139,277,278],{"class":141,"line":142},[139,279,280],{"class":200},"}\n",[139,282,283,285],{"class":141,"line":166},[139,284,257],{"class":145},[139,286,242],{"class":241},[139,288,289,291],{"class":141,"line":174},[139,290,253],{"class":145},[139,292,163],{"class":149},[139,294,295,298,301],{"class":141,"line":186},[139,296,297],{"class":145},"    interface",[139,299,300],{"class":149}," all",[139,302,242],{"class":241},[139,304,305],{"class":141,"line":197},[139,306,280],{"class":200},[15,308,309],{},"Retenez que le VLAN : default n’utilise pas de VLAN-ID (pas de tag) vous pouvez le vérifier avec la commande suivante :",[129,311,313],{"className":131,"code":312,"language":133,"meta":134,"style":134},"show vlans\n",[136,314,315],{"__ignoreMap":134},[139,316,317,319],{"class":141,"line":142},[139,318,146],{"class":145},[139,320,321],{"class":149}," vlans\n",[129,323,325],{"className":131,"code":324,"language":133,"meta":134,"style":134},"Name           Tag     Interfaces\ndefault       \n                       ge-0\u002F0\u002F1.0, ge-0\u002F0\u002F3.0, ge-0\u002F0\u002F4.0, ge-0\u002F0\u002F5.0, ge-0\u002F0\u002F6.0, ge-0\u002F0\u002F7.0, ge-0\u002F0\u002F8.0, ge-0\u002F0\u002F9.0, ge-0\u002F0\u002F10.0, ge-0\u002F0\u002F11.0, ge-0\u002F0\u002F12.0, ge-0\u002F0\u002F13.0, ge-0\u002F0\u002F14.0,\n                       ge-0\u002F0\u002F15.0, ge-0\u002F0\u002F16.0, ge-0\u002F0\u002F17.0, ge-0\u002F0\u002F18.0, ge-0\u002F0\u002F19.0, ge-0\u002F0\u002F20.0, ge-0\u002F0\u002F21.0, ge-0\u002F0\u002F22.0, ge-0\u002F0\u002F23.0, ge-0\u002F0\u002F24.0, ge-0\u002F0\u002F25.0, ge-0\u002F0\u002F26.0, ge-0\u002F0\u002F27.0,\n                       ge-0\u002F0\u002F28.0, ge-0\u002F0\u002F29.0, ge-0\u002F0\u002F30.0, ge-0\u002F0\u002F31.0, ge-0\u002F0\u002F32.0, ge-0\u002F0\u002F33.0, ge-0\u002F0\u002F34.0, ge-0\u002F0\u002F35.0, ge-0\u002F0\u002F36.0, ge-0\u002F0\u002F37.0, ge-0\u002F0\u002F38.0, ge-0\u002F0\u002F39.0, ge-0\u002F0\u002F40.0,\n                       ge-0\u002F0\u002F41.0, ge-0\u002F0\u002F42.0, ge-0\u002F0\u002F43.0, ge-0\u002F0\u002F44.0, ge-0\u002F0\u002F45.0, ge-0\u002F0\u002F46.0, ge-0\u002F0\u002F47.0, ge-1\u002F0\u002F0.0, ge-1\u002F0\u002F1.0, ge-1\u002F0\u002F23.0\n",[136,326,327,338,345,386,427,468],{"__ignoreMap":134},[139,328,329,332,335],{"class":141,"line":142},[139,330,331],{"class":145},"Name",[139,333,334],{"class":149},"           Tag",[139,336,337],{"class":149},"     Interfaces\n",[139,339,340,342],{"class":141,"line":166},[139,341,122],{"class":145},[139,343,344],{"class":200},"       \n",[139,346,347,350,353,356,359,362,365,368,371,374,377,380,383],{"class":141,"line":174},[139,348,349],{"class":145},"                       ge-0\u002F0\u002F1.0,",[139,351,352],{"class":149}," ge-0\u002F0\u002F3.0,",[139,354,355],{"class":149}," ge-0\u002F0\u002F4.0,",[139,357,358],{"class":149}," ge-0\u002F0\u002F5.0,",[139,360,361],{"class":149}," ge-0\u002F0\u002F6.0,",[139,363,364],{"class":149}," ge-0\u002F0\u002F7.0,",[139,366,367],{"class":149}," ge-0\u002F0\u002F8.0,",[139,369,370],{"class":149}," ge-0\u002F0\u002F9.0,",[139,372,373],{"class":149}," ge-0\u002F0\u002F10.0,",[139,375,376],{"class":149}," ge-0\u002F0\u002F11.0,",[139,378,379],{"class":149}," ge-0\u002F0\u002F12.0,",[139,381,382],{"class":149}," ge-0\u002F0\u002F13.0,",[139,384,385],{"class":149}," ge-0\u002F0\u002F14.0,\n",[139,387,388,391,394,397,400,403,406,409,412,415,418,421,424],{"class":141,"line":186},[139,389,390],{"class":145},"                       ge-0\u002F0\u002F15.0,",[139,392,393],{"class":149}," ge-0\u002F0\u002F16.0,",[139,395,396],{"class":149}," ge-0\u002F0\u002F17.0,",[139,398,399],{"class":149}," ge-0\u002F0\u002F18.0,",[139,401,402],{"class":149}," ge-0\u002F0\u002F19.0,",[139,404,405],{"class":149}," ge-0\u002F0\u002F20.0,",[139,407,408],{"class":149}," ge-0\u002F0\u002F21.0,",[139,410,411],{"class":149}," ge-0\u002F0\u002F22.0,",[139,413,414],{"class":149}," ge-0\u002F0\u002F23.0,",[139,416,417],{"class":149}," ge-0\u002F0\u002F24.0,",[139,419,420],{"class":149}," ge-0\u002F0\u002F25.0,",[139,422,423],{"class":149}," ge-0\u002F0\u002F26.0,",[139,425,426],{"class":149}," ge-0\u002F0\u002F27.0,\n",[139,428,429,432,435,438,441,444,447,450,453,456,459,462,465],{"class":141,"line":197},[139,430,431],{"class":145},"                       ge-0\u002F0\u002F28.0,",[139,433,434],{"class":149}," ge-0\u002F0\u002F29.0,",[139,436,437],{"class":149}," ge-0\u002F0\u002F30.0,",[139,439,440],{"class":149}," ge-0\u002F0\u002F31.0,",[139,442,443],{"class":149}," ge-0\u002F0\u002F32.0,",[139,445,446],{"class":149}," ge-0\u002F0\u002F33.0,",[139,448,449],{"class":149}," ge-0\u002F0\u002F34.0,",[139,451,452],{"class":149}," ge-0\u002F0\u002F35.0,",[139,454,455],{"class":149}," ge-0\u002F0\u002F36.0,",[139,457,458],{"class":149}," ge-0\u002F0\u002F37.0,",[139,460,461],{"class":149}," ge-0\u002F0\u002F38.0,",[139,463,464],{"class":149}," ge-0\u002F0\u002F39.0,",[139,466,467],{"class":149}," ge-0\u002F0\u002F40.0,\n",[139,469,470,473,476,479,482,485,488,491,494,497],{"class":141,"line":204},[139,471,472],{"class":145},"                       ge-0\u002F0\u002F41.0,",[139,474,475],{"class":149}," ge-0\u002F0\u002F42.0,",[139,477,478],{"class":149}," ge-0\u002F0\u002F43.0,",[139,480,481],{"class":149}," ge-0\u002F0\u002F44.0,",[139,483,484],{"class":149}," ge-0\u002F0\u002F45.0,",[139,486,487],{"class":149}," ge-0\u002F0\u002F46.0,",[139,489,490],{"class":149}," ge-0\u002F0\u002F47.0,",[139,492,493],{"class":149}," ge-1\u002F0\u002F0.0,",[139,495,496],{"class":149}," ge-1\u002F0\u002F1.0,",[139,498,499],{"class":149}," ge-1\u002F0\u002F23.0\n",[10,501,503],{"id":502},"la-configuration-de-vlan","La configuration de VLAN",[15,505,506,507,510],{},"Nous allons créer différents VLAN taggués (",[26,508,509],{},"VLAN-ID",") tels que présentés dans le tableau ci-dessous :",[15,512,513],{},"Interfacesge-0\u002F0\u002F0ge-0\u002F1\u002F0ge-0\u002F2\u002F0ge-0\u002F3\u002F0ge-0\u002F4\u002F0ge-0\u002F3\u002F0ge-0\u002F4\u002F0VLAN ID10203040506070VLANadminserversprintersuserswirelessvoipinvite",[15,515,516],{},"La création des différents VLAN targués se fait par la commande suivante (mode configure) :",[129,518,520],{"className":131,"code":519,"language":133,"meta":134,"style":134},"set vlans admin vlan-id 10\nset vlans servers vlan-id 20\nset vlans printers vlan-id 30\nset vlans users vlan-id 40\nset vlans wireless vlan-id 50\nset vlans voip vlan-id 60\nset vlans invite vlan-id 70\n",[136,521,522,540,554,568,582,596,610],{"__ignoreMap":134},[139,523,524,528,531,534,537],{"class":141,"line":142},[139,525,527],{"class":526},"s2Zo4","set",[139,529,530],{"class":149}," vlans",[139,532,533],{"class":149}," admin",[139,535,536],{"class":149}," vlan-id",[139,538,539],{"class":180}," 10\n",[139,541,542,544,546,549,551],{"class":141,"line":166},[139,543,527],{"class":526},[139,545,530],{"class":149},[139,547,548],{"class":149}," servers",[139,550,536],{"class":149},[139,552,553],{"class":180}," 20\n",[139,555,556,558,560,563,565],{"class":141,"line":174},[139,557,527],{"class":526},[139,559,530],{"class":149},[139,561,562],{"class":149}," printers",[139,564,536],{"class":149},[139,566,567],{"class":180}," 30\n",[139,569,570,572,574,577,579],{"class":141,"line":186},[139,571,527],{"class":526},[139,573,530],{"class":149},[139,575,576],{"class":149}," users",[139,578,536],{"class":149},[139,580,581],{"class":180}," 40\n",[139,583,584,586,588,591,593],{"class":141,"line":197},[139,585,527],{"class":526},[139,587,530],{"class":149},[139,589,590],{"class":149}," wireless",[139,592,536],{"class":149},[139,594,595],{"class":180}," 50\n",[139,597,598,600,602,605,607],{"class":141,"line":204},[139,599,527],{"class":526},[139,601,530],{"class":149},[139,603,604],{"class":149}," voip",[139,606,536],{"class":149},[139,608,609],{"class":180}," 60\n",[139,611,612,614,616,619,621],{"class":141,"line":210},[139,613,527],{"class":526},[139,615,530],{"class":149},[139,617,618],{"class":149}," invite",[139,620,536],{"class":149},[139,622,623],{"class":180}," 70\n",[15,625,626],{},"Ici, nous devons configurer nos différentes interfaces pour être membre du VLAN sélectionné et pour configurer une interface dans un vlan il existe deux approches :",[43,628,629],{},[46,630,631],{},"Méthode 1 : Via la configuration de l’interface on ajoute le VLAN membre.",[129,633,635],{"className":131,"code":634,"language":133,"meta":134,"style":134},"set interfaces ge-0\u002F0\u002F0 unit 0 family ethernet-switching vlan members admin\nset interfaces ge-0\u002F0\u002F1 unit 0 family ethernet-switching vlan members servers\nset interfaces ge-0\u002F0\u002F2 unit 0 family ethernet-switching vlan members printers\nset interfaces ge-0\u002F0\u002F3 unit 0 family ethernet-switching vlan members users\nset interfaces ge-0\u002F0\u002F4 unit 0 family ethernet-switching vlan members wireless\nset interfaces ge-0\u002F0\u002F5 unit 0 family ethernet-switching vlan members voip\nset interfaces ge-0\u002F0\u002F6 unit 0 family ethernet-switching vlan members invite\n",[136,636,637,666,690,714,738,762,786],{"__ignoreMap":134},[139,638,639,641,644,647,650,652,655,657,660,663],{"class":141,"line":142},[139,640,527],{"class":526},[139,642,643],{"class":149}," interfaces",[139,645,646],{"class":149}," ge-0\u002F0\u002F0",[139,648,649],{"class":149}," unit",[139,651,181],{"class":180},[139,653,654],{"class":149}," family",[139,656,192],{"class":149},[139,658,659],{"class":149}," vlan",[139,661,662],{"class":149}," members",[139,664,665],{"class":149}," admin\n",[139,667,668,670,672,675,677,679,681,683,685,687],{"class":141,"line":166},[139,669,527],{"class":526},[139,671,643],{"class":149},[139,673,674],{"class":149}," ge-0\u002F0\u002F1",[139,676,649],{"class":149},[139,678,181],{"class":180},[139,680,654],{"class":149},[139,682,192],{"class":149},[139,684,659],{"class":149},[139,686,662],{"class":149},[139,688,689],{"class":149}," servers\n",[139,691,692,694,696,699,701,703,705,707,709,711],{"class":141,"line":174},[139,693,527],{"class":526},[139,695,643],{"class":149},[139,697,698],{"class":149}," ge-0\u002F0\u002F2",[139,700,649],{"class":149},[139,702,181],{"class":180},[139,704,654],{"class":149},[139,706,192],{"class":149},[139,708,659],{"class":149},[139,710,662],{"class":149},[139,712,713],{"class":149}," printers\n",[139,715,716,718,720,723,725,727,729,731,733,735],{"class":141,"line":186},[139,717,527],{"class":526},[139,719,643],{"class":149},[139,721,722],{"class":149}," ge-0\u002F0\u002F3",[139,724,649],{"class":149},[139,726,181],{"class":180},[139,728,654],{"class":149},[139,730,192],{"class":149},[139,732,659],{"class":149},[139,734,662],{"class":149},[139,736,737],{"class":149}," users\n",[139,739,740,742,744,747,749,751,753,755,757,759],{"class":141,"line":197},[139,741,527],{"class":526},[139,743,643],{"class":149},[139,745,746],{"class":149}," ge-0\u002F0\u002F4",[139,748,649],{"class":149},[139,750,181],{"class":180},[139,752,654],{"class":149},[139,754,192],{"class":149},[139,756,659],{"class":149},[139,758,662],{"class":149},[139,760,761],{"class":149}," wireless\n",[139,763,764,766,768,771,773,775,777,779,781,783],{"class":141,"line":204},[139,765,527],{"class":526},[139,767,643],{"class":149},[139,769,770],{"class":149}," ge-0\u002F0\u002F5",[139,772,649],{"class":149},[139,774,181],{"class":180},[139,776,654],{"class":149},[139,778,192],{"class":149},[139,780,659],{"class":149},[139,782,662],{"class":149},[139,784,785],{"class":149}," voip\n",[139,787,788,790,792,795,797,799,801,803,805,807],{"class":141,"line":210},[139,789,527],{"class":526},[139,791,643],{"class":149},[139,793,794],{"class":149}," ge-0\u002F0\u002F6",[139,796,649],{"class":149},[139,798,181],{"class":180},[139,800,654],{"class":149},[139,802,192],{"class":149},[139,804,659],{"class":149},[139,806,662],{"class":149},[139,808,809],{"class":149}," invite\n",[15,811,812],{},"Faites une vérification sur votre interface :",[129,814,816],{"className":131,"code":815,"language":133,"meta":134,"style":134},"show configuration interfaces ge-0\u002F0\u002F0\n",[136,817,818],{"__ignoreMap":134},[139,819,820,822,825,827],{"class":141,"line":142},[139,821,146],{"class":145},[139,823,824],{"class":149}," configuration",[139,826,643],{"class":149},[139,828,829],{"class":149}," ge-0\u002F0\u002F0\n",[129,831,833],{"className":131,"code":832,"language":133,"meta":134,"style":134},"unit 0 {\n    family ethernet-switching {\n        vlan {\n            members admin;\n        }\n    }\n}\n",[136,834,835,844,853,860,869,873,878],{"__ignoreMap":134},[139,836,837,840,842],{"class":141,"line":142},[139,838,839],{"class":145},"unit",[139,841,181],{"class":180},[139,843,163],{"class":149},[139,845,846,849,851],{"class":141,"line":166},[139,847,848],{"class":145},"    family",[139,850,192],{"class":149},[139,852,163],{"class":149},[139,854,855,858],{"class":141,"line":174},[139,856,857],{"class":145},"        vlan",[139,859,163],{"class":149},[139,861,862,865,867],{"class":141,"line":186},[139,863,864],{"class":145},"            members",[139,866,533],{"class":149},[139,868,242],{"class":241},[139,870,871],{"class":141,"line":197},[139,872,207],{"class":200},[139,874,875],{"class":141,"line":204},[139,876,877],{"class":200},"    }\n",[139,879,880],{"class":141,"line":210},[139,881,280],{"class":200},[43,883,884],{},[46,885,886,887,890],{},"Méthode 2 : Via la configuration du ",[26,888,889],{},"VLAN membre"," on ajoute l’interface.",[129,892,894],{"className":131,"code":893,"language":133,"meta":134,"style":134},"set vlans admin interface ge-0\u002F0\u002F0\nset vlans servers interface ge-0\u002F0\u002F1\nset vlans printers interface ge-0\u002F0\u002F2\nset vlans users interface ge-0\u002F0\u002F3\nset vlans wirless interface ge-0\u002F0\u002F4\nset vlans voip interface ge-0\u002F0\u002F5\nset vlans invite interface ge-0\u002F0\u002F6\n",[136,895,896,909,922,935,948,962,975],{"__ignoreMap":134},[139,897,898,900,902,904,907],{"class":141,"line":142},[139,899,527],{"class":526},[139,901,530],{"class":149},[139,903,533],{"class":149},[139,905,906],{"class":149}," interface",[139,908,829],{"class":149},[139,910,911,913,915,917,919],{"class":141,"line":166},[139,912,527],{"class":526},[139,914,530],{"class":149},[139,916,548],{"class":149},[139,918,906],{"class":149},[139,920,921],{"class":149}," ge-0\u002F0\u002F1\n",[139,923,924,926,928,930,932],{"class":141,"line":174},[139,925,527],{"class":526},[139,927,530],{"class":149},[139,929,562],{"class":149},[139,931,906],{"class":149},[139,933,934],{"class":149}," ge-0\u002F0\u002F2\n",[139,936,937,939,941,943,945],{"class":141,"line":186},[139,938,527],{"class":526},[139,940,530],{"class":149},[139,942,576],{"class":149},[139,944,906],{"class":149},[139,946,947],{"class":149}," ge-0\u002F0\u002F3\n",[139,949,950,952,954,957,959],{"class":141,"line":197},[139,951,527],{"class":526},[139,953,530],{"class":149},[139,955,956],{"class":149}," wirless",[139,958,906],{"class":149},[139,960,961],{"class":149}," ge-0\u002F0\u002F4\n",[139,963,964,966,968,970,972],{"class":141,"line":204},[139,965,527],{"class":526},[139,967,530],{"class":149},[139,969,604],{"class":149},[139,971,906],{"class":149},[139,973,974],{"class":149}," ge-0\u002F0\u002F5\n",[139,976,977,979,981,983,985],{"class":141,"line":210},[139,978,527],{"class":526},[139,980,530],{"class":149},[139,982,618],{"class":149},[139,984,906],{"class":149},[139,986,987],{"class":149}," ge-0\u002F0\u002F6\n",[15,989,990],{},"La différence ici est que la configuration du VLAN n’est pas disponible sur l’interface mais uniquement via la commande suivante :",[129,992,994],{"className":131,"code":993,"language":133,"meta":134,"style":134},"show vlan admin interface\n",[136,995,996],{"__ignoreMap":134},[139,997,998,1000,1002,1004],{"class":141,"line":142},[139,999,146],{"class":145},[139,1001,659],{"class":149},[139,1003,533],{"class":149},[139,1005,1006],{"class":149}," interface\n",[15,1008,1009,33,1013,1020],{},[1010,1011,1012],"em",{},"Pour conclure, quelle que soit votre méthode cela ne change rien. Nous avons vu comment créer des VLAN et assigner un VLAN à une interface. Désormais l’objectif est de faire",[73,1014,1017],{"href":1015,"rel":1016},"http:\u002F\u002Fwww.youtube.com\u002Fwatch?v=AsItAtTQ3EE",[77],[1010,1018,1019],{},"du routage inter-VLAN",[1010,1021,89],{},[15,1023,1024,1025,33,1028,1030,1031,1033],{},"Astuce : il est possible d’englober ",[26,1026,1027],{},"plusieurs",[26,1029,160],{}," dans un ",[26,1032,40],{}," très simplement, voici un exemple :",[129,1035,1037],{"className":131,"code":1036,"language":133,"meta":134,"style":134},"set interfaces interface-range users unit 0 family ethernet-switching vlan members users\nset interfaces interface-range users member-range ge-0\u002F0\u002F3 to ge-0\u002F0\u002F6\n",[136,1038,1039,1064],{"__ignoreMap":134},[139,1040,1041,1043,1045,1048,1050,1052,1054,1056,1058,1060,1062],{"class":141,"line":142},[139,1042,527],{"class":526},[139,1044,643],{"class":149},[139,1046,1047],{"class":149}," interface-range",[139,1049,576],{"class":149},[139,1051,649],{"class":149},[139,1053,181],{"class":180},[139,1055,654],{"class":149},[139,1057,192],{"class":149},[139,1059,659],{"class":149},[139,1061,662],{"class":149},[139,1063,737],{"class":149},[139,1065,1066,1068,1070,1072,1074,1077,1079,1082],{"class":141,"line":166},[139,1067,527],{"class":526},[139,1069,643],{"class":149},[139,1071,1047],{"class":149},[139,1073,576],{"class":149},[139,1075,1076],{"class":149}," member-range",[139,1078,722],{"class":149},[139,1080,1081],{"class":149}," to",[139,1083,987],{"class":149},[10,1085,1087],{"id":1086},"configuration-des-interfaces-de-routage-inter-vlans","Configuration des interfaces de routage inter-VLANs.",[15,1089,1090,1091,1096,1097,1100,1101,1104,1105,1107],{},"L’explication du routage inter-VLAN ou ",[73,1092,1095],{"href":1093,"rel":1094},"http:\u002F\u002Fwww.juniper.net\u002Ftechpubs\u002Fen_US\u002Fjunos12.1\u002Ftopics\u002Fconcept\u002Fbridging-routed-vlan-interface.html",[77],"routed VLAN interface"," (",[26,1098,1099],{},"RVI",") chez ",[26,1102,1103],{},"Juniper,"," nous permet de faire communiquer des VLAN entre eux. Prenons un exemple avec le ",[26,1106,40],{}," servers et users. Nous souhaitons que les utilisateurs puissent avoir un accès aux serveurs.",[15,1109,1110,1111,1113,1114,1096,1117,1119,1120,1122,1123,1126],{},"Nous allons d’abord créer deux ",[26,1112,160],{}," VLAN avec l’",[26,1115,1116],{},"unité logique",[26,1118,839],{},") de nos ",[26,1121,40],{},"–",[26,1124,1125],{},"ID"," tel que :",[129,1128,1130],{"className":131,"code":1129,"language":133,"meta":134,"style":134},"set interfaces vlan unit 20 family inet address 192.168.20.1\u002F24 \nset interfaces vlan unit 40 family inet address 192.168.40.1\u002F24\n",[136,1131,1132,1159],{"__ignoreMap":134},[139,1133,1134,1136,1138,1140,1142,1145,1147,1150,1153,1156],{"class":141,"line":142},[139,1135,527],{"class":526},[139,1137,643],{"class":149},[139,1139,659],{"class":149},[139,1141,649],{"class":149},[139,1143,1144],{"class":180}," 20",[139,1146,654],{"class":149},[139,1148,1149],{"class":149}," inet",[139,1151,1152],{"class":149}," address",[139,1154,1155],{"class":149}," 192.168.20.1\u002F24",[139,1157,1158],{"class":200}," \n",[139,1160,1161,1163,1165,1167,1169,1172,1174,1176,1178],{"class":141,"line":166},[139,1162,527],{"class":526},[139,1164,643],{"class":149},[139,1166,659],{"class":149},[139,1168,649],{"class":149},[139,1170,1171],{"class":180}," 40",[139,1173,654],{"class":149},[139,1175,1149],{"class":149},[139,1177,1152],{"class":149},[139,1179,1180],{"class":149}," 192.168.40.1\u002F24\n",[15,1182,1183],{},"Désormais, nous pouvons lier nos interfaces VLAN au RVI afin de faire communiquer nos deux VLAN :",[129,1185,1187],{"className":131,"code":1186,"language":133,"meta":134,"style":134},"set vlans serveurs l3-interface vlan.20\nset vlans users l3-interface vlan.40\n",[136,1188,1189,1204],{"__ignoreMap":134},[139,1190,1191,1193,1195,1198,1201],{"class":141,"line":142},[139,1192,527],{"class":526},[139,1194,530],{"class":149},[139,1196,1197],{"class":149}," serveurs",[139,1199,1200],{"class":149}," l3-interface",[139,1202,1203],{"class":149}," vlan.20\n",[139,1205,1206,1208,1210,1212,1214],{"class":141,"line":166},[139,1207,527],{"class":526},[139,1209,530],{"class":149},[139,1211,576],{"class":149},[139,1213,1200],{"class":149},[139,1215,1216],{"class":149}," vlan.40\n",[15,1218,1219],{},"Faites un essai et connectez un hôte dans le VLAN-ID : 20 puis dans le VLAN-ID 40, et lancez la commande :",[129,1221,1223],{"className":131,"code":1222,"language":133,"meta":134,"style":134},"show interfaces terse | match vlan\nvlan                    up    up\nvlan.20                 up    up   inet     192.168.20.1\u002F24\nvlan.40                 up    up   inet     192.168.40.1\u002F24\n",[136,1224,1225,1243,1254,1270],{"__ignoreMap":134},[139,1226,1227,1229,1231,1234,1237,1240],{"class":141,"line":142},[139,1228,146],{"class":145},[139,1230,643],{"class":149},[139,1232,1233],{"class":149}," terse",[139,1235,1236],{"class":241}," |",[139,1238,1239],{"class":145}," match",[139,1241,1242],{"class":149}," vlan\n",[139,1244,1245,1248,1251],{"class":141,"line":166},[139,1246,1247],{"class":145},"vlan                   ",[139,1249,1250],{"class":149}," up   ",[139,1252,1253],{"class":149}," up\n",[139,1255,1256,1259,1261,1264,1267],{"class":141,"line":174},[139,1257,1258],{"class":145},"vlan.20                ",[139,1260,1250],{"class":149},[139,1262,1263],{"class":149}," up",[139,1265,1266],{"class":149},"   inet    ",[139,1268,1269],{"class":149}," 192.168.20.1\u002F24\n",[139,1271,1272,1275,1277,1280,1283],{"class":141,"line":186},[139,1273,1274],{"class":145},"vlan.40                ",[139,1276,1250],{"class":149},[139,1278,1279],{"class":149}," up  ",[139,1281,1282],{"class":149}," inet    ",[139,1284,1180],{"class":149},[15,1286,1287,1288],{},"Vos deux hôtes devraient désormais pouvoir ce joindre via un simple ",[26,1289,1290],{},"ping.",[10,1292,1294],{"id":1293},"configuration-de-liens-trunk","Configuration de liens trunk",[15,1296,1297,1298,64,1301,1303,1304,1307,1308,1311,1312,1314],{},"Dans mon cas, un ",[26,1299,1300],{},"chassis virtuels",[26,1302,84],{}," et un autre de ",[26,1305,1306],{},"EX4200"," reliés en ",[26,1309,1310],{},"SFP+"," (10G).",[125,1313],{},"\nNous allons dans un premier temps configurer l’interface SFP+ (xe) en mode trunk, comme ci-dessous :",[129,1316,1318],{"className":131,"code":1317,"language":133,"meta":134,"style":134},"set interfaces xe-0\u002F1\u002F0 unit 0 family ethernet-switching port-mode trunk\n",[136,1319,1320],{"__ignoreMap":134},[139,1321,1322,1324,1326,1329,1331,1333,1335,1337,1340],{"class":141,"line":142},[139,1323,527],{"class":526},[139,1325,643],{"class":149},[139,1327,1328],{"class":149}," xe-0\u002F1\u002F0",[139,1330,649],{"class":149},[139,1332,181],{"class":180},[139,1334,654],{"class":149},[139,1336,192],{"class":149},[139,1338,1339],{"class":149}," port-mode",[139,1341,1342],{"class":149}," trunk\n",[15,1344,1345],{},"Ensuite nous autoriserons nos différents VLAN à emprunter le lien trunk :",[129,1347,1349],{"className":131,"code":1348,"language":133,"meta":134,"style":134},"set interfaces xe-0\u002F1\u002F0 unit 0 family ethernet-switching vlan members [serveurs users]\n",[136,1350,1351],{"__ignoreMap":134},[139,1352,1353,1355,1357,1359,1361,1363,1365,1367,1369,1371,1374],{"class":141,"line":142},[139,1354,527],{"class":526},[139,1356,643],{"class":149},[139,1358,1328],{"class":149},[139,1360,649],{"class":149},[139,1362,181],{"class":180},[139,1364,654],{"class":149},[139,1366,192],{"class":149},[139,1368,659],{"class":149},[139,1370,662],{"class":149},[139,1372,1373],{"class":200}," [serveurs ",[139,1375,1376],{"class":149},"users]\n",[15,1378,1379],{},[1010,1380,1381],{},"Retenez que du moment que vous n’ajoutez pas explicitement un membre VLAN dans l’interface (xe) aucune donnée TCP\u002FIP ne transitera !",[15,1383,1384,1385,1388,1389,1392,1393,1395],{},"Je vous invite à refaire la même manipulation dans votre ",[26,1386,1387],{},"switch"," ou (",[26,1390,1391],{},"chassis",") pour terminer ce tutoriel et faire transiter vos ",[26,1394,40],{}," !",[15,1397,1398,1399,89],{},"Cet initialisation se termine et pour plus d’informations rendez-vous à cette adresse : ",[73,1400,1403],{"href":1401,"rel":1402},"http:\u002F\u002Fwww.juniper.net\u002Fdocumentation\u002Fen_US\u002Fjunos11.4\u002Ftopics\u002Fconcept\u002Fbridging-ex-series-understanding.html#jd0e202",[77],"Comprendre le mode bridge et les VLANs sur les switch EX",[10,1405,1407],{"id":1406},"conclusion","Conclusion",[15,1409,1410],{},"Ce tutoriel couvre la création de VLAN taggués sous JunOS, leur association aux interfaces selon les deux méthodes disponibles, ainsi que la mise en place du routage inter-VLAN (RVI) et des liens trunk entre chassis. Ces éléments constituent les bases indispensables pour segmenter et faire communiquer un réseau Juniper de façon sécurisée et organisée. Une bonne maîtrise des VLAN et du routage inter-VLAN facilite ensuite la mise en place d'architectures réseau plus complexes.",[1412,1413,1414],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}",{"title":134,"searchDepth":166,"depth":166,"links":1416},[1417,1418,1421,1422,1423,1424],{"id":12,"depth":166,"text":13},{"id":20,"depth":166,"text":21,"children":1419},[1420],{"id":112,"depth":174,"text":113},{"id":502,"depth":166,"text":503},{"id":1086,"depth":166,"text":1087},{"id":1293,"depth":166,"text":1294},{"id":1406,"depth":166,"text":1407},[1426],"Réseau","\u002Fimages\u002Fblog\u002Fconfiguration-vlan-avec-junos\u002F1b4814003c.jpg",null,"2014-11-18","Découvrez comment créer vos VLAN, inter-VLAN et vos trunk interfaces! Lancez-vous dans le multilayer switching avec la série EX de Juniper.","md",{},"\u002Fblog\u002Fconfiguration-vlan-avec-junos",[1435],"certificat-junos-associe-jncia-junos",{"title":5,"description":1430},"configuration-vlan-avec-junos","blog\u002Fconfiguration-vlan-avec-junos","Xbf7keYXa0ZSoKHDONl_f-VrOZ95-Br9SqMhgXtY6G4",[1441,1447,1454,1462,1470,1477,1484,1490],{"title":1442,"path":1443,"stem":1444,"date":1445,"cover":1446,"categories":1428,"children":-1},"Migration vers KVM avec WebVirtMgr","\u002Fblog\u002Fmigration-vers-kvm-avec-webvirtmgr","blog\u002Fmigration-vers-kvm-avec-webvirtmgr","2015-03-02","\u002Fimages\u002Fblog\u002Fmigration-vers-kvm-avec-webvirtmgr\u002F1ecef34685.jpg",{"title":1448,"path":1449,"stem":1450,"date":1451,"cover":1452,"categories":1453,"children":-1},"Configuration d’un chassis virtuel sous Junos","\u002Fblog\u002Fconfiguration-chassis-virtuel-sous-junos","blog\u002Fconfiguration-chassis-virtuel-sous-junos","2014-12-15","\u002Fimages\u002Fblog\u002Fconfiguration-chassis-virtuel-sous-junos\u002F1b4814003c.jpg",[1426],{"title":1455,"path":1456,"stem":1457,"date":1458,"cover":1459,"categories":1460,"children":-1},"Le témoignage de ma formation au Greta-Viva5 de Valence : des anecdotes hallucinantes","\u002Fblog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes","blog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes","2014-12-01","\u002Fimages\u002Fblog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes\u002Fc0ef05db34.jpg",[1461],"Évènement",{"title":1463,"path":1464,"stem":1465,"date":1466,"cover":1467,"categories":1468,"children":-1},"Installer CyanogenMod Unofficial sur OnePlus One","\u002Fblog\u002Finstaller-cyanogenmod-unofficial-sur-oneplus-one","blog\u002Finstaller-cyanogenmod-unofficial-sur-oneplus-one","2014-11-24","\u002Fimages\u002Fblog\u002Finstaller-cyanogenmod-unofficial-sur-oneplus-one\u002F83621431fb.png",[1469],"Google",{"title":1471,"path":1472,"stem":1473,"date":1474,"cover":1475,"categories":1476,"children":-1},"Configuration de base sous Junos","\u002Fblog\u002Fconfiguration-base-sous-junos","blog\u002Fconfiguration-base-sous-junos","2014-09-10","\u002Fimages\u002Fblog\u002Fconfiguration-base-sous-junos\u002F1b4814003c.jpg",[1426],{"title":1478,"path":1479,"stem":1480,"date":1481,"cover":1482,"categories":1483,"children":-1},"Le  témoignage de ma formation au Greta-Viva5 de Valence : l’alternance,  la rentrée, les cours.","\u002Fblog\u002Fle-temoignage-formation-greta-viva5-valence-alternance-rentree-les-cours","blog\u002Fle-temoignage-formation-greta-viva5-valence-alternance-rentree-les-cours","2014-09-01","\u002Fimages\u002Fblog\u002Fle-temoignage-formation-greta-viva5-valence-alternance-rentree-les-cours\u002Fe27f7627f8.jpg",[1461],{"title":1485,"path":1486,"stem":1487,"date":1488,"cover":1489,"categories":1428,"children":-1},"Installation de certificat SSL Gandi avec Pound","\u002Fblog\u002Finstallation-certificat-ssl-gandi-avec-pound","blog\u002Finstallation-certificat-ssl-gandi-avec-pound","2014-08-12","\u002Fimages\u002Fblog\u002Finstallation-certificat-ssl-gandi-avec-pound\u002Fec4618d7ad.jpg",{"title":1491,"path":1492,"stem":1493,"date":1494,"cover":1495,"categories":1428,"children":-1},"Patchs de sécurité et mises à jour sous VMware ESXi 5","\u002Fblog\u002Fpatchs-securite-mises-jour-sous-vmware-esxi","blog\u002Fpatchs-securite-mises-jour-sous-vmware-esxi","2014-07-15","\u002Fimages\u002Fblog\u002Fpatchs-securite-mises-jour-sous-vmware-esxi\u002Fd8c6089e77.png",[1497],{"id":1498,"title":1499,"body":1500,"categories":1565,"cover":1567,"cover_contain":213,"credly_badge_id":1568,"date":1569,"description":1570,"extension":1431,"meta":1571,"navigation":213,"path":1572,"related_certifications":1428,"seo":1573,"slug":1435,"stem":1574,"__hash__":1575},"blog\u002Fblog\u002Fcertificat-junos-associe-jncia-junos.md","Junos Associé (JNCIA-Junos)",{"type":7,"value":1501,"toc":1561},[1502,1504,1507,1513,1550,1556,1558],[10,1503,13],{"id":12},[15,1505,1506],{},"Pour intervenir sereinement sur des équipements Juniper en clientèle, j'ai suivi ce cursus Arrow et obtenu la certification JNCIA-Junos.",[15,1508,1509,1510,1512],{},"Le parcours de formation \"Junos Associé (JNCIA-Junos)\" est dédié aux professionnel IT en charge notamment des réseaux informatiques.",[125,1511],{},"\nLe catalogue de cours aborde les modules suivants :",[43,1514,1515,1520,1525,1530,1535,1540,1545],{},[46,1516,1517],{},[26,1518,1519],{},"Principes fondamentaux de la mise en réseau",[46,1521,1522],{},[26,1523,1524],{},"Principes fondamentaux de Junos OS",[46,1526,1527],{},[26,1528,1529],{},"Interfaces utilisateur",[46,1531,1532],{},[26,1533,1534],{},"Notions de base sur la configuration",[46,1536,1537],{},[26,1538,1539],{},"Surveillance et maintenance des opérations",[46,1541,1542],{},[26,1543,1544],{},"Principes fondamentaux du routage",[46,1546,1547],{},[26,1548,1549],{},"Stratégie de routage et filtres de pare-feu",[15,1551,1552,1553,1555],{},"le temps à accorder à la formation est d'environ 3 jours.",[125,1554],{},"\nIl faut ensuite prévoir environ 1h30 pour le passage de la certification : Junos Associé (JNCIA-Junos).",[10,1557,1407],{"id":1406},[15,1559,1560],{},"Cette formation Arrow couvre les fondamentaux des réseaux et du système Junos OS, de la configuration de base au routage et aux filtres de pare-feu. Elle permet de valider une compréhension solide des équipements réseau Juniper, utile pour tout professionnel en charge de l'administration d'infrastructures réseau. Une certification complémentaire aux compétences déjà acquises sur d'autres environnements.",{"title":134,"searchDepth":166,"depth":166,"links":1562},[1563,1564],{"id":12,"depth":166,"text":13},{"id":1406,"depth":166,"text":1407},[1566,1426],"Certifications","\u002Fimages\u002Fblog\u002Fcertificat-junos-associe-jncia-junos\u002F773018337d.png","907dbe59-515c-4d6b-9ce1-e40082c63c2e","2023-01-17","Junos Associé (JNCIA-Junos) : formation Arrow, suivie pour ma veille professionnelle en cybersécurité et informatique.",{},"\u002Fblog\u002Fcertificat-junos-associe-jncia-junos",{"title":1499,"description":1570},"blog\u002Fcertificat-junos-associe-jncia-junos","FyzhACynI7FC3yrB0ozhuw0OlR2KoUUzw6tZ-4iqqZ0",1786644878888]