In this example we look at the vQFX “Collapsed-Core” – so a 2-Device EVPN-VXLAN Setup with another vQFX connected to it (called other-vQFX here).
Topology:
Core-Switch No. 1 – “ EVPN-Core-01″:
set version 20.3R1.8
set system host-name EVPN-Core-01
set system root-authentication encrypted-password "$6$iOHCqldH$4Bv5iM.SYPDCPExs15aDwLgKfad9fLWfdv53fovFYghTXlJ9rQVFxA9yoIUOf58hSJrXKANdZ.3L2ZWXBPs1T0"
set system root-authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system login user vagrant uid 2000
set system login user vagrant class super-user
set system login user vagrant authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system services ssh root-login allow
set system services netconf ssh
set system services rest http port 8080
set system services rest enable-explorer
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system extensions providers juniper license-type juniper deployment-scope commercial
set system extensions providers chef license-type juniper deployment-scope commercial
set chassis aggregated-devices ethernet device-count 10
set interfaces xe-0/0/0 mtu 9100
set interfaces xe-0/0/0 unit 0 description Crosslink
set interfaces xe-0/0/0 unit 0 family inet address 192.168.100.1/30
set interfaces xe-0/0/3 description "Downlink to other vQFX"
set interfaces xe-0/0/3 ether-options 802.3ad ae11
set interfaces ae11 description "other vQFX"
set interfaces ae11 mtu 9200
set interfaces ae11 esi 00:11:11:11:11:11:11:11:11:01
set interfaces ae11 esi all-active
set interfaces ae11 aggregated-ether-options lacp active
set interfaces ae11 aggregated-ether-options lacp periodic fast
set interfaces ae11 aggregated-ether-options lacp system-id 00:40:00:00:00:01
set interfaces ae11 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-201
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-202
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-101
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-102
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-301
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-302
set interfaces em0 unit 0 family inet dhcp
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 101 virtual-gateway-accept-data
set interfaces irb unit 101 description Wired-Employee
set interfaces irb unit 101 family inet address 192.168.101.2/24 virtual-gateway-address 192.168.101.1
set interfaces irb unit 102 virtual-gateway-accept-data
set interfaces irb unit 102 description Wireless-Employee
set interfaces irb unit 102 family inet address 192.168.102.2/24 virtual-gateway-address 192.168.102.1
set interfaces irb unit 201 virtual-gateway-accept-data
set interfaces irb unit 201 description Guest-Wired-Subnet
set interfaces irb unit 201 family inet address 192.168.201.2/24 virtual-gateway-address 192.168.201.1
set interfaces irb unit 202 virtual-gateway-accept-data
set interfaces irb unit 202 description Guest-Wireless-Subnet
set interfaces irb unit 202 family inet address 192.168.202.2/24 virtual-gateway-address 192.168.202.1
set interfaces irb unit 301 virtual-gateway-accept-data
set interfaces irb unit 301 description Wired-IOT-Subnet
set interfaces irb unit 301 family inet address 192.168.210.2/24 virtual-gateway-address 192.168.210.1
set interfaces irb unit 302 virtual-gateway-accept-data
set interfaces irb unit 302 description Wireless-IOT-subnet
set interfaces irb unit 302 family inet address 192.168.212.2/24 virtual-gateway-address 192.168.212.1
set interfaces lo0 unit 0 family inet address 192.168.255.11/32
set forwarding-options storm-control-profiles default all
set policy-options policy-statement UNDERLAY-EXPORT term LOOPBACK from route-filter 192.168.255.0/24 orlonger
set policy-options policy-statement UNDERLAY-EXPORT term LOOPBACK then accept
set policy-options policy-statement UNDERLAY-EXPORT term DEFAULT then reject
set policy-options policy-statement UNDERLAY-IMPORT term LOOPBACK from route-filter 192.168.255.0/24 orlonger
set policy-options policy-statement UNDERLAY-IMPORT term LOOPBACK then accept
set policy-options policy-statement UNDERLAY-IMPORT term DEFAULT then reject
set policy-options policy-statement ecmp_policy then load-balance per-packet
set policy-options policy-statement ecmp_policy then accept
set routing-instances JNPR_1_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.191.1
set routing-instances JNPR_1_VRF routing-options auto-export
set routing-instances JNPR_1_VRF description "VRF for Guest Access"
set routing-instances JNPR_1_VRF instance-type vrf
set routing-instances JNPR_1_VRF interface ge-0/0/20.0
set routing-instances JNPR_1_VRF interface irb.201
set routing-instances JNPR_1_VRF interface irb.202
set routing-instances JNPR_1_VRF interface lo0.101
set routing-instances JNPR_1_VRF route-distinguisher 192.168.255.11:101
set routing-instances JNPR_1_VRF vrf-target target:1:65001
set routing-instances JNPR_1_VRF vrf-table-label
set routing-instances JNPR_2_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.192.1
set routing-instances JNPR_2_VRF routing-options auto-export
set routing-instances JNPR_2_VRF description "VRF for Employee Access"
set routing-instances JNPR_2_VRF instance-type vrf
set routing-instances JNPR_2_VRF interface irb.101
set routing-instances JNPR_2_VRF interface irb.102
set routing-instances JNPR_2_VRF interface lo0.102
set routing-instances JNPR_2_VRF route-distinguisher 192.168.255.11:102
set routing-instances JNPR_2_VRF vrf-target target:2:65001
set routing-instances JNPR_2_VRF vrf-table-label
set routing-instances JNPR_3_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.193.1
set routing-instances JNPR_3_VRF routing-options auto-export
set routing-instances JNPR_3_VRF description "VRF for IOT Access"
set routing-instances JNPR_3_VRF instance-type vrf
set routing-instances JNPR_3_VRF interface irb.301
set routing-instances JNPR_3_VRF interface irb.302
set routing-instances JNPR_3_VRF interface lo0.103
set routing-instances JNPR_3_VRF route-distinguisher 192.168.255.11:103
set routing-instances JNPR_3_VRF vrf-target target:3:65001
set routing-instances JNPR_3_VRF vrf-table-label
set routing-options forwarding-table export ecmp_policy
set routing-options router-id 192.168.255.11
set routing-options autonomous-system 65100
set protocols bgp group UNDERLAY type external
set protocols bgp group UNDERLAY description EBGP-UNDERLAY
set protocols bgp group UNDERLAY import UNDERLAY-IMPORT
set protocols bgp group UNDERLAY family inet unicast
set protocols bgp group UNDERLAY authentication-key "$9$TF6CO1hKMXtuMX7-2gTz3"
set protocols bgp group UNDERLAY export UNDERLAY-EXPORT
set protocols bgp group UNDERLAY local-as 65013
set protocols bgp group UNDERLAY multipath multiple-as
set protocols bgp group UNDERLAY bfd-liveness-detection minimum-interval 5000
set protocols bgp group UNDERLAY bfd-liveness-detection multiplier 3
set protocols bgp group UNDERLAY neighbor 192.168.100.2 peer-as 65012
set protocols bgp group EVPN_FABRIC type internal
set protocols bgp group EVPN_FABRIC description IBGP-OVERLAY
set protocols bgp group EVPN_FABRIC local-address 192.168.255.11
set protocols bgp group EVPN_FABRIC family evpn signaling
set protocols bgp group EVPN_FABRIC authentication-key "$9$noae9t0EclLxdBIxdbsJZn/C"
set protocols bgp group EVPN_FABRIC local-as 65100
set protocols bgp group EVPN_FABRIC multipath
set protocols bgp group EVPN_FABRIC neighbor 192.168.255.12
set protocols bgp bfd-liveness-detection minimum-interval 5000
set protocols evpn encapsulation vxlan
set protocols evpn default-gateway no-gateway-community
set protocols evpn extended-vni-list 5101
set protocols evpn extended-vni-list 5102
set protocols evpn extended-vni-list 5201
set protocols evpn extended-vni-list 5202
set protocols evpn extended-vni-list 5301
set protocols evpn extended-vni-list 5302
set protocols evpn no-core-isolation
set protocols lldp interface all
set protocols igmp-snooping vlan default
set protocols igmp-snooping vlan VLAN-201 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-202 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-101 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-301 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-102 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-302 interface ae11.0 multicast-router-interface
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 192.168.255.11:1
set switch-options vrf-target target:999:999
set switch-options vrf-target auto
set vlans VLAN-101 description Employee-Wired-VLAN
set vlans VLAN-101 vlan-id 101
set vlans VLAN-101 l3-interface irb.101
set vlans VLAN-101 vxlan vni 5101
set vlans VLAN-102 description Employee-Wireless-VLAN
set vlans VLAN-102 vlan-id 102
set vlans VLAN-102 l3-interface irb.102
set vlans VLAN-102 vxlan vni 5102
set vlans VLAN-201 description Guest-Wired-VLAN
set vlans VLAN-201 vlan-id 201
set vlans VLAN-201 l3-interface irb.201
set vlans VLAN-201 vxlan vni 5201
set vlans VLAN-202 description Guest-Wireless-VLAN
set vlans VLAN-202 vlan-id 202
set vlans VLAN-202 l3-interface irb.202
set vlans VLAN-202 vxlan vni 5202
set vlans VLAN-301 description IOT-Wired-VLAN
set vlans VLAN-301 vlan-id 301
set vlans VLAN-301 l3-interface irb.301
set vlans VLAN-301 vxlan vni 5301
set vlans VLAN-302 description IOT-Wireless-VLAN
set vlans VLAN-302 vlan-id 302
set vlans VLAN-302 l3-interface irb.302
set vlans VLAN-302 vxlan vni 5302
set vlans default vlan-id 1Core-Switch No. 2 – “EVPN-Core-02”:
set version 20.3R1.8
set system host-name EVPN-Core-02
set system root-authentication encrypted-password "$6$iOHCqldH$4Bv5iM.SYPDCPExs15aDwLgKfad9fLWfdv53fovFYghTXlJ9rQVFxA9yoIUOf58hSJrXKANdZ.3L2ZWXBPs1T0"
set system root-authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system login user vagrant uid 2000
set system login user vagrant class super-user
set system login user vagrant authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system services ssh root-login allow
set system services netconf ssh
set system services rest http port 8080
set system services rest enable-explorer
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system extensions providers juniper license-type juniper deployment-scope commercial
set system extensions providers chef license-type juniper deployment-scope commercial
set chassis aggregated-devices ethernet device-count 10
set interfaces xe-0/0/0 mtu 9100
set interfaces xe-0/0/0 unit 0 description Crosslink
set interfaces xe-0/0/0 unit 0 family inet address 192.168.100.2/30
set interfaces xe-0/0/3 description "Downlink to other vQFX"
set interfaces xe-0/0/3 ether-options 802.3ad ae11
set interfaces ae11 description "other vQFX"
set interfaces ae11 mtu 9200
set interfaces ae11 esi 00:11:11:11:11:11:11:11:11:01
set interfaces ae11 esi all-active
set interfaces ae11 aggregated-ether-options lacp active
set interfaces ae11 aggregated-ether-options lacp periodic fast
set interfaces ae11 aggregated-ether-options lacp system-id 00:40:00:00:00:01
set interfaces ae11 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-201
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-202
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-101
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-102
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-301
set interfaces ae11 unit 0 family ethernet-switching vlan members VLAN-302
set interfaces em0 unit 0 family inet dhcp
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 101 virtual-gateway-accept-data
set interfaces irb unit 101 description Wired-Employee
set interfaces irb unit 101 family inet address 192.168.101.3/24 virtual-gateway-address 192.168.101.1
set interfaces irb unit 102 virtual-gateway-accept-data
set interfaces irb unit 102 description Wireless-Employee
set interfaces irb unit 102 family inet address 192.168.102.3/24 virtual-gateway-address 192.168.102.1
set interfaces irb unit 201 virtual-gateway-accept-data
set interfaces irb unit 201 description Guest-Wired-Subnet
set interfaces irb unit 201 family inet address 192.168.201.3/24 virtual-gateway-address 192.168.201.1
set interfaces irb unit 202 virtual-gateway-accept-data
set interfaces irb unit 202 description Guest-Wireless-Subnet
set interfaces irb unit 202 family inet address 192.168.202.3/24 virtual-gateway-address 192.168.202.1
set interfaces irb unit 301 virtual-gateway-accept-data
set interfaces irb unit 301 description Wired-IOT-Subnet
set interfaces irb unit 301 family inet address 192.168.210.3/24 virtual-gateway-address 192.168.210.1
set interfaces irb unit 302 virtual-gateway-accept-data
set interfaces irb unit 302 description Wireless-IOT-subnet
set interfaces irb unit 302 family inet address 192.168.212.3/24 virtual-gateway-address 192.168.212.1
set interfaces lo0 unit 0 family inet address 192.168.255.12/32
set forwarding-options storm-control-profiles default all
set policy-options policy-statement UNDERLAY-EXPORT term LOOPBACK from route-filter 192.168.255.0/24 orlonger
set policy-options policy-statement UNDERLAY-EXPORT term LOOPBACK then accept
set policy-options policy-statement UNDERLAY-EXPORT term DEFAULT then reject
set policy-options policy-statement UNDERLAY-IMPORT term LOOPBACK from route-filter 192.168.255.0/24 orlonger
set policy-options policy-statement UNDERLAY-IMPORT term LOOPBACK then accept
set policy-options policy-statement UNDERLAY-IMPORT term DEFAULT then reject
set policy-options policy-statement ecmp_policy then load-balance per-packet
set policy-options policy-statement ecmp_policy then accept
set routing-instances JNPR_1_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.191.1
set routing-instances JNPR_1_VRF routing-options auto-export
set routing-instances JNPR_1_VRF description "VRF for Guest Access"
set routing-instances JNPR_1_VRF instance-type vrf
set routing-instances JNPR_1_VRF interface ge-0/0/20.0
set routing-instances JNPR_1_VRF interface irb.201
set routing-instances JNPR_1_VRF interface irb.202
set routing-instances JNPR_1_VRF interface lo0.101
set routing-instances JNPR_1_VRF route-distinguisher 192.168.255.12:101
set routing-instances JNPR_1_VRF vrf-target target:1:65001
set routing-instances JNPR_1_VRF vrf-table-label
set routing-instances JNPR_2_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.192.1
set routing-instances JNPR_2_VRF routing-options auto-export
set routing-instances JNPR_2_VRF description "VRF for Employee Access"
set routing-instances JNPR_2_VRF instance-type vrf
set routing-instances JNPR_2_VRF interface irb.101
set routing-instances JNPR_2_VRF interface irb.102
set routing-instances JNPR_2_VRF interface lo0.102
set routing-instances JNPR_2_VRF route-distinguisher 192.168.255.12:102
set routing-instances JNPR_2_VRF vrf-target target:2:65001
set routing-instances JNPR_2_VRF vrf-table-label
set routing-instances JNPR_3_VRF routing-options static route 0.0.0.0/0 next-hop 192.168.193.1
set routing-instances JNPR_3_VRF routing-options auto-export
set routing-instances JNPR_3_VRF description "VRF for IOT Access"
set routing-instances JNPR_3_VRF instance-type vrf
set routing-instances JNPR_3_VRF interface irb.301
set routing-instances JNPR_3_VRF interface irb.302
set routing-instances JNPR_3_VRF interface lo0.103
set routing-instances JNPR_3_VRF route-distinguisher 192.168.255.12:103
set routing-instances JNPR_3_VRF vrf-target target:3:65001
set routing-instances JNPR_3_VRF vrf-table-label
set routing-options forwarding-table export ecmp_policy
set routing-options router-id 192.168.255.12
set routing-options autonomous-system 65100
set protocols bgp group UNDERLAY type external
set protocols bgp group UNDERLAY description EBGP-UNDERLAY
set protocols bgp group UNDERLAY import UNDERLAY-IMPORT
set protocols bgp group UNDERLAY family inet unicast
set protocols bgp group UNDERLAY authentication-key "$9$yzpeMLdb2GDkxNDk.P3nylK"
set protocols bgp group UNDERLAY export UNDERLAY-EXPORT
set protocols bgp group UNDERLAY local-as 65012
set protocols bgp group UNDERLAY multipath multiple-as
set protocols bgp group UNDERLAY bfd-liveness-detection minimum-interval 5000
set protocols bgp group UNDERLAY bfd-liveness-detection multiplier 3
set protocols bgp group UNDERLAY neighbor 192.168.100.1 peer-as 65013
set protocols bgp group EVPN_FABRIC type internal
set protocols bgp group EVPN_FABRIC description IBGP-OVERLAY
set protocols bgp group EVPN_FABRIC local-address 192.168.255.12
set protocols bgp group EVPN_FABRIC family evpn signaling
set protocols bgp group EVPN_FABRIC authentication-key "$9$tm5O01ElK8db2cyb24aiHtuO"
set protocols bgp group EVPN_FABRIC local-as 65100
set protocols bgp group EVPN_FABRIC multipath
set protocols bgp group EVPN_FABRIC neighbor 192.168.255.11
set protocols evpn encapsulation vxlan
set protocols evpn default-gateway no-gateway-community
set protocols evpn extended-vni-list 5101
set protocols evpn extended-vni-list 5102
set protocols evpn extended-vni-list 5201
set protocols evpn extended-vni-list 5202
set protocols evpn extended-vni-list 5301
set protocols evpn extended-vni-list 5302
set protocols evpn no-core-isolation
set protocols lldp interface all
set protocols igmp-snooping vlan default
set protocols igmp-snooping vlan VLAN-201 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-202 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-101 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-102 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-301 interface ae11.0 multicast-router-interface
set protocols igmp-snooping vlan VLAN-302 interface ae11.0 multicast-router-interface
set switch-options vtep-source-interface lo0.0
set switch-options route-distinguisher 192.168.255.12:1
set switch-options vrf-target target:999:999
set switch-options vrf-target auto
set vlans VLAN-101 description Employee-Wired-VLAN
set vlans VLAN-101 vlan-id 101
set vlans VLAN-101 l3-interface irb.101
set vlans VLAN-101 vxlan vni 5101
set vlans VLAN-102 description Employee-Wireless-VLAN
set vlans VLAN-102 vlan-id 102
set vlans VLAN-102 l3-interface irb.102
set vlans VLAN-102 vxlan vni 5102
set vlans VLAN-201 description Guest-Wired-VLAN
set vlans VLAN-201 vlan-id 201
set vlans VLAN-201 l3-interface irb.201
set vlans VLAN-201 vxlan vni 5201
set vlans VLAN-202 description Guest-Wireless-VLAN
set vlans VLAN-202 vlan-id 202
set vlans VLAN-202 l3-interface irb.202
set vlans VLAN-202 vxlan vni 5202
set vlans VLAN-301 description IOT-Wired-VLAN
set vlans VLAN-301 vlan-id 301
set vlans VLAN-301 l3-interface irb.301
set vlans VLAN-301 vxlan vni 5301
set vlans VLAN-302 description IOT-Wireless-VLAN
set vlans VLAN-302 vlan-id 302
set vlans VLAN-302 l3-interface irb.302
set vlans VLAN-302 vxlan vni 5302
set vlans default vlan-id 1Access-Switch “other-vQFX”:
set version 20.3R1.8
set system host-name other-vQFX
set system root-authentication encrypted-password "$6$iOHCqldH$4Bv5iM.SYPDCPExs15aDwLgKfad9fLWfdv53fovFYghTXlJ9rQVFxA9yoIUOf58hSJrXKANdZ.3L2ZWXBPs1T0"
set system root-authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system login user vagrant uid 2000
set system login user vagrant class super-user
set system login user vagrant authentication ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"
set system services ssh root-login allow
set system services netconf ssh
set system services rest http port 8080
set system services rest enable-explorer
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system extensions providers juniper license-type juniper deployment-scope commercial
set system extensions providers chef license-type juniper deployment-scope commercial
set chassis aggregated-devices ethernet device-count 12
set interfaces xe-0/0/3 description "to Core 01"
set interfaces xe-0/0/3 ether-options 802.3ad ae11
set interfaces xe-0/0/4 description "to Core 02"
set interfaces xe-0/0/4 ether-options 802.3ad ae11
set interfaces ae11 aggregated-ether-options lacp active
set interfaces ae11 aggregated-ether-options lacp periodic fast
set interfaces ae11 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae11 unit 0 family ethernet-switching vlan members 101-102
set interfaces ae11 unit 0 family ethernet-switching vlan members 201-202
set interfaces ae11 unit 0 family ethernet-switching vlan members 301-302
set interfaces em0 unit 0 family inet dhcp
set interfaces em1 unit 0 family inet address 169.254.0.2/24
set interfaces irb unit 101 family inet address 192.168.101.10/24
set interfaces irb unit 102 family inet address 192.168.102.10/24
set interfaces irb unit 201 family inet address 192.168.201.10/24
set interfaces irb unit 202 family inet address 192.168.202.10/24
set interfaces irb unit 301 family inet address 192.168.210.10/24
set interfaces irb unit 302 family inet address 192.168.212.10/24
set forwarding-options storm-control-profiles default all
set protocols igmp-snooping vlan default
set vlans VLAN-101 description Employee-Wired-VLAN
set vlans VLAN-101 vlan-id 101
set vlans VLAN-101 l3-interface irb.101
set vlans VLAN-102 description Employee-Wireless-VLAN
set vlans VLAN-102 vlan-id 102
set vlans VLAN-102 l3-interface irb.102
set vlans VLAN-201 description Guest-Wired-VLAN
set vlans VLAN-201 vlan-id 201
set vlans VLAN-201 l3-interface irb.201
set vlans VLAN-202 description Guest-Wireless-VLAN
set vlans VLAN-202 vlan-id 202
set vlans VLAN-202 l3-interface irb.202
set vlans VLAN-301 description IOT-Wired-VLAN
set vlans VLAN-301 vlan-id 301
set vlans VLAN-301 l3-interface irb.301
set vlans VLAN-302 description IOT-Wireless-VLAN
set vlans VLAN-302 vlan-id 302
set vlans VLAN-302 l3-interface irb.302
set vlans default vlan-id 1