This article provides information on why the 'vlan-tags' option is not available for AE and Reth interfaces.
The VLAN-tags option is available for the physical interface but not for the AE interface. Please refer to the output below:
root@SRX1# set interfaces ge-0/0/0.0 vlan-? Possible completions: vlan-id Virtual LAN identifier value for 802.1q VLAN tags (0..4094) + vlan-id-list List of VLAN identifiers vlan-id-range Virtual LAN identifier range of form vid1-vid2 > vlan-tags IEEE 802.1q tags root@SRX1# set interfaces ae0.0 vlan-? Possible completions: vlan-id Virtual LAN identifier value for 802.1q VLAN tags (0..4094) + vlan-id-list List of VLAN identifiers vlan-id-range Virtual LAN identifier range of form vid1-vid2
This is expected behavior, as dual tags are not supported on AE and RETH interfaces. For more information, please refer to the following document: Ethernet Port Switching Modes on Security Devices