View Only
last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  Setting Up Layer 2 on SRX Ports

    Posted 03-01-2024 16:28

    Good Afternoon,

    I'm fairly new to Juniper so forgive any questions that may seem simple.

    My organization currently utilizes the Juniper Mist platform for our site configurations.  Usually we'll have a FW, Switch, and AP's.  However, we have some Micro Sites where we need to be able to setup a PoE firewall and a single AP43.  No Switching.  We also have a wired printer for the wireless clients.

    We typically create 3 VLANs to separate 'internal' wifi, 'guest' wifi, and the management traffic for the AP. 

    Thus far, I've been unable to come up with a design that allows Wifi clients to communicate with our printer.  Initially, I attempted creating application policies within Mist to allow traffic over layer 3 between networks (created a network just for the printer), but could not get that to work.  Then I read up on options to turn the SRX interfaces into layer 2 switched ports.  I've been fighting with that for over a week thus far with various errors.  I also reached out to support and got nowhere after 90 minutes on a call.

    Does anyone currently use a design like this that could offer some insight?


  • 2.  RE: Setting Up Layer 2 on SRX Ports

    Posted 03-02-2024 05:20

    Hi Nicholas, 

    Can you share the config and error messages off the SRX?.  You should be able to route traffic between VLANs using  IRB interfaces configured as L3 interface for each VLAN.  



    Emanuel Solano

  • 3.  RE: Setting Up Layer 2 on SRX Ports

    Posted 03-04-2024 15:34

    Hi Emmanuel,

    I'm actually trying to avoid using routing for traffic to and from the printer.  I'd like to have the printer available at layer 2 on the same VLAN (10) being pushed out by our inside Wifi network.


  • 4.  RE: Setting Up Layer 2 on SRX Ports

    Posted 03-05-2024 03:50


    I gave you an answer in the other thread you created about this question:

    please have a look in the other thread. I think this will solve your issue


    Marcel ten Berg