Screen OS

 View Only
last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
Back to discussions
Expand all | Collapse all

SSG140 - change interface's zone and IP address with VSI configured

  • 1.  SSG140 - change interface's zone and IP address with VSI configured

    Posted 03-12-2022 20:10
    Hello team,

    we are trying to reconfigure one of our SSG140 interfaces from DMZ to Untrust zones. Physical interface has a VSI 

    Actual configuration:
    set interface "ethernet0/8" zone "DMZ"
    set interface ethernet0/8 ip x.x.x.z/24
    set interface ethernet0/8 route
    set interface ethernet0/8:1 ip x.x.x.y/29
    set interface ethernet0/8:1 route

    Desirable configuration:
    set interface "ethernet0/8" zone "Untrust"
    set interface ethernet0/8 ip a.b.c.d/29
    set interface ethernet0/8 route
    set interface ethernet0/8:1 ip 1a.b.c.e/29
    set interface ethernet0/8:1 route

    But when i type <set interface "ethernet0/8" zone "Untrust">, i get the below error:

    "ethernet0/8 has VSI with IP. Unset vsi ip first"

    The same log is shown at web-config

    So, do i need to "delete" the vsi (eth0/8:1) completely? How can i proceed?  Versión is 6.3.0r23

    Thank you beforehand

    ------------------------------
    RAUL FIGUERUELO
    ------------------------------