Two PCs are attached to a hub, which is attached to port ge-0/0/0 on your EX Series switch. You
must separate the incoming traffic from the PCs into two VLANs.
What should you use to accomplish this task?
A.
dynamic VLAN registration with MVRP
B.
private VLAN
C.
filter-based VLAN
D.
guest VLAN
http://forums.juniper.net/t5/Ethernet-Switching/quot-filter-based-VLANs-quot/td-p/141799
Filter-based VLAN assignment is very flexible compared to the port-based vlan assignment(static) .
This feature can be used in scenarios that include multiple devices attached to a single switch port through an attached hub or passive switch.
Let’s say that two PCs are attached to a hub and then to the switch port ge-0/0/0 ,from then to the upstream cloud. If we go by port-based vlan assignment method , both PCs will be part of same VLAN(11 in the example below) . If our requirement is to separate them into two vlans(11 and 22) , we can use filter-based VLAN .
Step 1 :
set vlans v11 vlan-id 11
set vlans v11 interface ge-0/0/0.0
set vlans v22 vlan-id 22
set vlans v22 interface ge-0/0/0.0 mapping policy
Step 2:
set firewall family ethernet-switching filter separate-vlans term 1 from source-address
set firewall family ethernet-switching filter separate-vlans term 1 then vlan v22
set firewall family ethernet-switching filter separate-vlans term 2 then accept
Step 3:
set interface ge-0/0/0.0 family ethernet-switching filter input separate-vlans
Because of term 1 , PC2 will now be part of v22 and because of term 2 , PC1 will be part of v11.