SRX

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  WAN configuration

    Posted 10-31-2023 06:21

    Hi,

    I try to get a WAN connection to Delta Fiber (Netherlands) working.
    All info that I got from Delta until now is fhe following example config for Cisco:

    vtp mode transparent
    !
    Vlan 107
     name WAN
    !

    interface GigabitEthernet0/9
     description to Delta Fiber ONT
     switchport mode trunk
     switchport trunk allowed vlan 107
    !
    interface Vlan107 description Layer-3 interface to Delta Fiber network
    ip address dhcp

    I have tried to translate this to:

    [security zones]
            security-zone untrust-delta {
                interfaces {
                    irb.107;
                }
            }

    [interfaces]
        ge-0/0/4 {
            unit 0 {
                family ethernet-switching {
                    vlan {
                        members vlan-107-delta;
                    }
                }
            }
        }
        irb {
            unit 107 {
                family inet {
                    dhcp;
                }
            }
        }

    [vlans]
        vlan-107-delta {
            vlan-id 107;
            l3-interface irb.107;
        }

    As far as I understand, Delta wants a switch port. But they require DHCP. How would I configure any permanent next hop to a dhcp address ..
    Also, I have received a fixed IP address and a /29 public subnet for my own use.
    I have a little trouble understanding their requirements.. / possibilities
    Any help appreciated.



    ------------------------------
    MEINDERT UITMAN
    ------------------------------


  • 2.  RE: WAN configuration

    Posted 11-01-2023 03:44

    You will need to enable tagging on the physical interface connected to the provider. 

    The configuration provided has switch port mode trunk enabled. Do the same under 'family ethernet-switching' 

    Use  'interface-mode trunk'

    Let me know how this goes, you should receive a DHCP OFFER then, and we can takle further issues.



    ------------------------------
    GAVIN WHITE
    ------------------------------



  • 3.  RE: WAN configuration

    Posted 11-02-2023 09:47
    Edited by Fubarus 11-02-2023 09:47

    Concur, as Gavin says, you need to configure tagging and trunking.

    You may also need to allow dhcp (and any other desired protocols or services) on that port.

         set security zone security-zone untrust interface irb.107 host-inbound-traffic system-services dhcp



    ------------------------------
    JASON
    ------------------------------



  • 4.  RE: WAN configuration

    Posted 11-07-2023 04:15

    It seems that the issue has resolved itself, as I found the expected IP address on my interface late yesterday. I think my issue has finally been taken up by Delta.

    Irb has Dynamic Host Configuration Protocol client configuration. Relevant security zone has dhcp system services as hosted inbound traffic.



    ------------------------------
    MEINDERT UITMAN
    ------------------------------