SRX240 to Asus AP, tag/trunk .

Tagging works, trunk doesn't.

The boxes.....
1 - SRX240B2 junos 11.47x
1 - ASUS RT-AC68u wifi AP

I want to create a trunk and tagging so
that I can use multiple vlans across these.

I understand that a simple setup accepts
different subnets. Trunked.

Example, srx240=192.168.1.1 and,
Asus AP = 192.168.2.2

My question is,,, can I still trunk and tag with
the default settings of the srx240? That is,,,
can I use 192.168.1.x in each device?

1 - srx240 = 192.168.1.1 , vlan2 = 192.168.3.1
2 - Asus AP = 192.168.1.x , vlan2 = 192.168.3.x

The problem is that vlan-id 3 which is vlan-trust is not your regular vlan1. Any trunks I create do not connect.

If it can be done, which I bet it will, what am I doing wrong?

What can I do to make it trunk using ethernet-switching mode?

I have success with tagging, but not trunking as shown.

ge-0/0/14 {
flexible-vlan-tagging;
encapsulation vlan-vpls;
unit 0 {
arp-resp;
vlan-id 0;
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
unit 1 {
arp-resp;
vlan-id 1;
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
unit 2 {
arp-resp;
vlan-id 2;
family ethernet-switching {
vlan {
members vlan-trust;
}
}
}
}

This first config passes the traffic but of course vlan2 has no communication. My setup consists of vlan-trust and an unsuccessful use of vlan2. In the first config the vlan2 traffic passes but won't communicate with vlan2 on the SRX. The internet connects on this config. Vlan-trust does it's job for all three vlans on the AP. Vlan 0, 1 and 2 .

The next config doesn't work at all.

ge-0/0/15 {
unit 0 {
arp-resp;
family ethernet-switching {
port-mode trunk;
vlan {
members [ vlan-trust vlan2 ];
}
}
}
}

I'm avoiding using addresses at the interface.
L3 and ethernet-switching is what I'm using.