SRX

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about the SRX Series.
  • 1.  SRX VLAN Logical Interfaces

    Posted 10-05-2022 06:42
    Hello, 
    my network topology contains two pc . the first is in a vlan 10 (trusted zone) and the second I used it as if it is  the internet network (untrust zone) with the ip address 172.162.254.0/32 the problem is that the irb100 interface of vlan 100 is not enabled. and when I try to assign an address pool it gives me an address contribution error. I can't see the problem

    my configuration is :
    show |display set| match vlans
    set vlans vlan-HOSTED vlan-id 20
    set vlans vlan-HOSTED l3-interface irb.20
    set vlans vlan-HQ vlan-id 10
    set vlans vlan-HQ l3-interface irb.10
    set vlans vlan-INTERNET vlan-id 100
    set vlans vlan-INTERNET l3-interface irb.100

    show |display set| match zones
    set security zones security-zone HQ host-inbound-traffic system-services http
    set security zones security-zone HQ interfaces irb.10
    set security zones security-zone INTERNET host-inbound-traffic system-services all
    set security zones security-zone INTERNET interfaces irb.100

    ​ show |display set| match interfaces
    set security zones security-zone HQ interfaces irb.10
    set security zones security-zone INTERNET interfaces irb.100
    set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode access
    set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan-HQ
    set interfaces irb unit 10 family inet address 192.168.2.1/24
    set interfaces irb unit 100 family inet address 172.162.254.1/32

    When i try to assign an adress pool to this vlan i have thi error ' 'Address range is outside the network defined for pool '100' ''
     i did :
    set access address-assignment pool 100 family inet network 172.162.254.0/32
    set access address-assignment pool 100 family inet range range1 low 172.162.254.2
    set access address-assignment pool 100 family inet range range1 high 172.162.254.5
    set access address-assignment pool 100 family inet dhcp-attributes maximum-lease-time 43200
    set access address-assignment pool 100 family inet dhcp-attributes router 172.162.254.1




    ------------------------------
    sakura aiss
    ------------------------------


  • 2.  RE: SRX VLAN Logical Interfaces

    Posted 10-05-2022 06:51
    Your address choice is  172.162.254.0/32 which is just a single address. 

    You will need at least a /31 to have a device connected to the SRX and likely more if you want to hand out a dhcp pool range of more than one address.


    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------