SRX

Good Afternoon,

I'm fairly new to Juniper so forgive any questions that may seem simple.

My organization currently utilizes the Juniper Mist platform for our site configurations.  Usually we'll have a FW, Switch, and AP's.  However, we have some Micro Sites where we need to be able to setup a PoE firewall and a single AP43.  No Switching.  We also have a wired printer for the wireless clients.

We typically create 3 VLANs to separate 'internal' wifi, 'guest' wifi, and the management traffic for the AP. 

Thus far, I've been unable to come up with a design that allows Wifi clients to communicate with our printer.  Initially, I attempted creating application policies within Mist to allow traffic over layer 3 between networks (created a network just for the printer), but could not get that to work.  Then I read up on options to turn the SRX interfaces into layer 2 switched ports.  I've been fighting with that for over a week thus far with various errors.  I also reached out to support and got nowhere after 90 minutes on a call.

Does anyone currently use a design like this that could offer some insight?

Hi Nicholas, 

Can you share the config and error messages off the SRX?.  You should be able to route traffic between VLANs using  IRB interfaces configured as L3 interface for each VLAN.  

regards, 

-Emmanuel. 

Good Afternoon,

I'm fairly new to Juniper so forgive any questions that may seem simple.

My organization currently utilizes the Juniper Mist platform for our site configurations.  Usually we'll have a FW, Switch, and AP's.  However, we have some Micro Sites where we need to be able to setup a PoE firewall and a single AP43.  No Switching.  We also have a wired printer for the wireless clients.

We typically create 3 VLANs to separate 'internal' wifi, 'guest' wifi, and the management traffic for the AP. 

Thus far, I've been unable to come up with a design that allows Wifi clients to communicate with our printer.  Initially, I attempted creating application policies within Mist to allow traffic over layer 3 between networks (created a network just for the printer), but could not get that to work.  Then I read up on options to turn the SRX interfaces into layer 2 switched ports.  I've been fighting with that for over a week thus far with various errors.  I also reached out to support and got nowhere after 90 minutes on a call.

Does anyone currently use a design like this that could offer some insight?

Hi Emmanuel,

I'm actually trying to avoid using routing for traffic to and from the printer.  I'd like to have the printer available at layer 2 on the same VLAN (10) being pushed out by our inside Wifi network.

Hi Nicholas, 

Can you share the config and error messages off the SRX?.  You should be able to route traffic between VLANs using  IRB interfaces configured as L3 interface for each VLAN.  

regards, 

-Emmanuel. 

Good Afternoon,

I'm fairly new to Juniper so forgive any questions that may seem simple.

My organization currently utilizes the Juniper Mist platform for our site configurations.  Usually we'll have a FW, Switch, and AP's.  However, we have some Micro Sites where we need to be able to setup a PoE firewall and a single AP43.  No Switching.  We also have a wired printer for the wireless clients.

We typically create 3 VLANs to separate 'internal' wifi, 'guest' wifi, and the management traffic for the AP. 

Thus far, I've been unable to come up with a design that allows Wifi clients to communicate with our printer.  Initially, I attempted creating application policies within Mist to allow traffic over layer 3 between networks (created a network just for the printer), but could not get that to work.  Then I read up on options to turn the SRX interfaces into layer 2 switched ports.  I've been fighting with that for over a week thus far with various errors.  I also reached out to support and got nowhere after 90 minutes on a call.

Does anyone currently use a design like this that could offer some insight?