JN0-351 Layer 2 Switching or VLANs

Layer 2 Switching or VLANs Detailed Explanation

Layer 2 switching and VLANs are foundational concepts in networking.

1. Layer 2 Switching

What is Layer 2 Switching?

Layer 2 switching operates at the Data Link Layer (Layer 2) of the OSI model. Its main job is to forward data (frames) between devices in the same network segment based on their MAC addresses.

• MAC Address: A unique hardware identifier for network devices, like your computer or phone.
• Switch: A device that connects multiple devices in a local area network (LAN) and forwards frames intelligently using MAC addresses.

How Does Layer 2 Switching Work?

1. Learning MAC Addresses:

   • When a switch receives a frame, it reads the source MAC address and associates it with the port the frame arrived on. This information is stored in a table called the MAC address table.
   • Example: If a frame from MAC AA:BB:CC:DD:EE:FF arrives on port 1, the switch learns that AA:BB:CC:DD:EE:FF is reachable via port 1.

2. Forwarding Frames:

   • The switch examines the destination MAC address in the frame.
   • If the destination MAC is in the MAC address table, the switch forwards the frame to the correct port.
   • If it’s not in the table, the switch floods the frame to all ports, except the one it arrived on.

3. Avoiding Loops:

   • Loops can occur when there are multiple paths between switches. Layer 2 switching uses protocols like Spanning Tree Protocol (STP) to prevent loops.

2. VLAN (Virtual LAN)

What is a VLAN?

A Virtual Local Area Network (VLAN) is a way to divide a single physical network into multiple logical networks. Devices in the same VLAN can communicate with each other as if they are on the same physical network, even if they are not.

• Why Use VLANs?
  • Improved Security: Devices in different VLANs cannot directly communicate unless explicitly allowed.
  • Better Network Efficiency: Reduces unnecessary broadcast traffic, as broadcasts stay within the VLAN.
  • Simplified Network Management: You can group devices by function, department, or security needs, regardless of their physical location.

How VLANs Work

• VLANs are configured on Layer 2 switches.
• Each VLAN is identified by a unique VLAN ID (1-4094).
• Ports on a switch can be assigned to a VLAN, and only devices in the same VLAN can communicate.

3. Detailed Knowledge

Bridging Components

Switches use the following components for Layer 2 operations:

• MAC Address Table: Maps MAC addresses to switch ports.
• Learning Process: As devices communicate, the switch dynamically builds its MAC address table.
• Aging: Entries in the MAC table expire after some time to ensure it remains accurate.

Frame Processing

Frames are units of data exchanged at Layer 2. The switch processes frames as follows:

1. Encapsulation:
   • Before data is sent, it is wrapped (encapsulated) with headers, including source and destination MAC addresses.
2. De-encapsulation:
   • When a frame is received, the switch reads the headers to determine where to forward the frame.
3. Broadcast Frames:
   • Sent to all devices in the VLAN when the destination MAC is unknown (e.g., ARP requests).

VLAN Configuration

Switch ports can be configured for VLANs in several ways:

1. Access Port:
   • Assigned to a single VLAN.
   • Typically used for end devices like computers or printers.
2. Trunk Port:
   • Carries traffic for multiple VLANs between switches or between a switch and a router.
   • Uses 802.1Q tagging to identify which VLAN each frame belongs to.

Voice VLANs

• A voice VLAN is a special VLAN configured for VoIP traffic (like phones).
• Separating voice and data traffic improves call quality and prioritizes voice communication.

Native VLANs

• The native VLAN is the default VLAN for untagged traffic on a trunk port.
• Example: If VLAN 1 is the native VLAN, any untagged traffic received on the trunk port is assumed to belong to VLAN 1.

Double-Tagged VLANs (QinQ)

• QinQ allows multiple VLAN tags to be added to a frame.
• Commonly used in service provider networks to encapsulate customer VLAN traffic.

Inter-VLAN Routing

Devices in different VLANs cannot communicate by default. Inter-VLAN routing is required to enable communication between VLANs. This is done using:

1. Layer 3 Switches:
   • Combine switching and routing capabilities.
   • Route traffic between VLANs internally.
2. Routers:
   • Use a single trunk link to connect to the switch and provide routing for multiple VLANs.

VLAN Tagging

• VLAN tagging uses the 802.1Q standard to mark frames with VLAN IDs.
• Tagged frames include an additional header with the VLAN ID.
• Untagged frames are assigned to the native VLAN by default.

Key Takeaways

• Layer 2 Switching efficiently forwards traffic based on MAC addresses.
• VLANs improve network segmentation, security, and efficiency.
• Understanding VLAN configuration (access/trunk ports, tagging) is essential for modern networking.
• To enable communication between VLANs, routing is required, often via Layer 3 switches.

Layer 2 Switching or VLANs (Additional Content)

1. Juniper-Specific VLAN Configuration Syntax (CLI Focus)

Juniper’s configuration model differs significantly from Cisco's flat-style VLAN configuration. VLANs and Layer 2 forwarding are configured under structured hierarchies using logical interfaces (called "units") and families.

Typical Access Port Configuration for VLAN

To assign a physical interface to a VLAN in Junos:

set interfaces ge-0/0/1 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members SALES

• ethernet-switching: Enables Layer 2 bridging on the interface.

• interface-mode access: Makes the port an access port.

• vlan members SALES: Assigns the interface to the VLAN named "SALES".

Trunk Port Example

set interfaces ge-0/0/2 unit 0 family ethernet-switching interface-mode trunk
set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members [ SALES HR ]

• Multiple VLANs can be allowed on trunk ports using a list.

VLAN Definition

VLANs themselves must be defined under the vlans hierarchy:

set vlans SALES vlan-id 10

2. Bridge Domain in Junos (Service Provider Scenarios)

While traditional enterprise switching uses ethernet-switching family, bridge-domains are used in provider-style Layer 2 VPNs and advanced VLAN separation scenarios.

What is a Bridge Domain?

A bridge domain is a logical Layer 2 broadcast domain that may contain one or more VLANs or interfaces.

Sample Bridge-Domain Configuration

set bridge-domains BD-100 domain-type bridge
set bridge-domains BD-100 vlan-id 100
set bridge-domains BD-100 interface ge-0/0/1.0

This structure is typically used when implementing EVPN, VPLS, or routing instances that require Layer 2 segmentation without using ethernet-switching.

Exam Note

• While not always directly tested, bridge domain terminology may appear in configuration recognition questions.

• You should understand that bridge-domain represents a more flexible, service-provider style L2 segment than basic vlan.

3. VLAN Mapping and Translation (QinQ Concepts)

Overview

In service provider environments, it's often necessary to map customer VLANs (C-VLANs) into provider VLANs (S-VLANs), a process known as VLAN translation or VLAN mapping.

• This is a subset of QinQ (802.1ad) tunneling.

• Not heavily tested in JN0-351, but understanding the purpose helps when encountering QinQ-related terms.

Conceptual Flow

Customer Side	Service Provider Side
C-VLAN (e.g., 100)	S-VLAN (e.g., 2000)

Packets are encapsulated with an additional 802.1Q tag, creating a double-tagged frame.

Example CLI Concept

set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan-id 100
set interfaces ge-0/0/1 unit 0 input-vlan-map push dot1q vlan-id 2000

4. IRB Interfaces for Inter-VLAN Routing

In Juniper, Inter-VLAN Routing is performed using IRB (Integrated Routing and Bridging) interfaces, which combine Layer 2 and Layer 3 functionality.

Purpose of IRB

• An IRB interface is used as the Layer 3 gateway for VLANs.

• It enables routing between VLANs using a virtual interface.

VLAN with IRB Configuration

set vlans SALES vlan-id 10
set vlans SALES l3-interface irb.10

set interfaces irb unit 10 family inet address 192.168.10.1/24

• irb.10 is the logical Layer 3 interface bound to VLAN 10.

• Each VLAN requiring Layer 3 routing must be assigned a unique IRB unit.

Exam Tip

• In multiple-choice questions, IRB interfaces are Juniper's equivalent of SVI (Switched Virtual Interfaces) in Cisco.

• You should be able to identify irb.10 as the default gateway for VLAN 10.

Summary of Key Juniper-Specific Enhancements for L2/VLAN Topics

Feature	Purpose	Junos Term / Feature
VLAN assignment	Bind interfaces to VLANs	family ethernet-switching
Bridge domains	SP-style L2 segmentation	bridge-domains hierarchy
VLAN translation	Customer-to-provider VLAN mapping	input-vlan-map, QinQ
IRB	Inter-VLAN routing (L3 gateway)	irb.10, l3-interface