Moreover I have tryed the bridge domain Vlan Although I have not lucky. I think that this operation is only to Switchs becouse I have the next code
interfaces {
fe-0/0/0 {
unit 0 {
family inet {
dhcp;
}
}
}
fe-0/0/1 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members vlan16;
}
}
}
}
fe-0/0/2 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members vlan10;
}
}
}
}
fe-0/0/3 {
unit 0 {
family ethernet-switching {
port-mode access;
vlan {
members vlan16;
}
}
}
}
fe-0/0/4 {
unit 0 {
family ethernet-switching {
port-mode access;
}
}
}
fe-0/0/5 {
unit 0 {
family ethernet-switching {
port-mode access;
}
}
}
fe-0/0/6 {
encapsulation ethernet-bridge;
unit 0 {
family bridge;
}
}
fe-0/0/7 {
unit 0 {
family ethernet-switching {
port-mode trunk;
vlan {
members all;
}
}
}
}
vlan {
unit 2 {
family inet {
targeted-broadcast;
address 192.168.15.254/23;
}
}
unit 10 {
family inet {
targeted-broadcast;
address 192.168.1.254/23;
}
}
unit 11 {
family inet {
targeted-broadcast;
address 192.168.3.254/23;
}
}
unit 12 {
family inet {
targeted-broadcast;
address 192.168.5.254/23;
}
}
unit 13 {
family inet {
targeted-broadcast;
address 192.168.7.254/23;
}
}
unit 16 {
family inet {
targeted-broadcast;
address 192.168.13.254/23;
}
}
unit 17 {
family inet {
targeted-broadcast;
address 192.168.17.254/23;
}
}
}
irb {
unit 100 {
family inet {
address 192.168.11.254/23;
}
}
unit 200 {
family inet {
address 192.168.9.254/23;
}
}
}
}
protocols {
stp;
}
security {
screen {
ids-option untrust-screen {
icmp {
ping-death;
}
ip {
source-route-option;
tear-drop;
}
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
}
land;
}
}
}
policies {
from-zone Internet to-zone Monitoring {
policy All_Internet_Monitoring {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Monitoring to-zone Internet {
policy All_Monitoring_Internet {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Monitoring to-zone Monitoring {
policy All_Monitoring_Monitoring {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
}
zones {
security-zone Monitoring {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
interfaces {
vlan.10 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
vlan.11 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
vlan.12 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
vlan.13 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
vlan.16 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
vlan.17 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
fe-0/0/7.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
fe-0/0/6.0 {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
}
}
}
security-zone Internet {
host-inbound-traffic {
system-services {
ping;
http;
https;
}
}
interfaces {
fe-0/0/0.0 {
host-inbound-traffic {
system-services {
ping;
dhcp;
https;
http;
}
}
}
}
}
}
}
vlans {
default {
l3-interface vlan.17;
}
vlan10 {
vlan-id 10;
l3-interface vlan.10;
}
vlan11 {
vlan-id 11;
l3-interface vlan.11;
}
vlan12 {
vlan-id 12;
l3-interface vlan.12;
}
vlan13 {
vlan-id 13;
l3-interface vlan.13;
}
vlan16 {
vlan-id 16;
l3-interface vlan.16;
}
vlan2 {
vlan-id 2;
l3-interface vlan.2;
}
}
bridge-domains {
vlan14 {
vlan-id 14;
routing-interface irb.100;
}
vlan15 {
vlan-id 15;
interface fe-0/0/6.0;
routing-interface irb.200;
}
}
and I have received the next message
There were error(s) delivering the configuration.
Error(s):
'unit 0, unit 0'
1) interface needs to be in a bridge-domain to support family bridge
2) Bridge family cannot be configured in route mode or for an interface with inet family
3) configuration check-out failed
I have used the next page,
http://networkengineering.stackexchange.com/questions/3709/adding-a-simple-vlan-on-a-juniper-mx
I am sure that I have done any wrong (Concept, code ...)
Thanks.
Regards.