FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
cmaheu
Staff
Staff
Article Id 191432

Description

 
This article describes that if ports are configured in an interface range, unexpected results can occur, such as unexpectedly removing ports from a VLAN.
 
Access ports on Juniper switches can be configured per individual interface or interface range. The appliance modifies VLAN access on individual access ports only. Modifying ports in an interface range is not supported.

Note: As of this writing, Juniper switches managed by the Mist Cloud are configured in an interface rage configuration. 
 
Scope
 
Version: 8.x and above.

Solution
 
Ensure that all the interfaces have the VLAN set in the interface configuration.
 
 
Juniper CLI Examples:
 
Supported:
 
{
                "name" : "ge-0/0/4",
                "unit" : [
                {
                    "name" : 0,
                    "family" : {
                        "ethernet-switching" : {
                            "interface-mode" : "access",
                            "vlan" : {
                                "members" : ["vlan_25"]
                            }
                        }
                    }
                }
 
Not Supported:


"interfaces" : {
            "interface-range" : [
            {
                "name" : "vlan_25",
                "member" : [
                {
                    "name" : "ge-0/0/0"
                },
                {
                    "name" : "ge-0/0/1"
                },
                {
                    "name" : "ge-0/0/2"
                },
                {
                    "name" : "ge-0/0/3"
                }
                ],
                "unit" : [
                {
                    "name" : 0,
                    "family" : {
                        "ethernet-switching" : {
                            "interface-mode" : "access",
                            "vlan" : {
                                "members" : ["25"]
                            }
                        }
                    }
                }
                ]
            }