} services { dhcp { pool 10.0.20.0/24 { address-range low 10.0.20.10 high 10.0.20.199; router { 10.0.20.1; } } propagate-settings vlan.3; } } } interfaces { interface-range interfaces-trust { member fe-0/0/1; member fe-0/0/2; member fe-0/0/3; member fe-0/0/4; member fe-0/0/5; member fe-0/0/7; } } fe-0/0/7 { unit 0 { family ethernet-switching { port-mode trunk; vlan { members [ Home Office ]; } native-vlan-id 10; } } } } vlan { unit 1 { family inet { address 192.168.1.254/24; } } unit 3 { description "Home VLAN"; family inet { address 10.0.20.1/24; } } unit 4 { description "Office VLAN"; family inet { address 192.168.1.1/24; } } } } nat { source { rule-set nsw_srcnat { from zone trust; to zone Internet; rule nsw-src-interface { match { source-address [ 192.168.1.0/24 10.0.20.0/24 ]; destination-address 0.0.0.0/0; } then { source-nat { interface; } } } } } policies { from-zone trust to-zone Home { policy CAS_LAN_to_HOME_LAN { match { source-address CAS_LAN; destination-address HOME_LAN; application junos-ping; } then { permit; } } } zones { } security-zone Office { address-book { address CAS_LAN 192.168.1.0/24; } interfaces { vlan.4; } } security-zone Home { address-book { address HOME_LAN 10.0.20.0/24; } interfaces { vlan.3; } } } } vlans { Home { vlan-id 10; l3-interface vlan.3; } Office { vlan-id 20; l3-interface vlan.4; } vlan1 { vlan-id 3; l3-interface vlan.1; } }