Hello,
my network topology contains two pc . the first is in a vlan 10 (trusted zone) and the second I used it as if it is the internet network (untrust zone) with the ip address 172.162.254.0/32 the problem is that the irb100 interface of vlan 100 is not enabled. and when I try to assign an address pool it gives me an address contribution error. I can't see the problem
my configuration is :
show |display set| match vlans
set vlans vlan-HOSTED vlan-id 20
set vlans vlan-HOSTED l3-interface irb.20
set vlans vlan-HQ vlan-id 10
set vlans vlan-HQ l3-interface irb.10
set vlans vlan-INTERNET vlan-id 100
set vlans vlan-INTERNET l3-interface irb.100
show |display set| match zones
set security zones security-zone HQ host-inbound-traffic system-services http
set security zones security-zone HQ interfaces irb.10
set security zones security-zone INTERNET host-inbound-traffic system-services all
set security zones security-zone INTERNET interfaces irb.100
show |display set| match interfaces
set security zones security-zone HQ interfaces irb.10
set security zones security-zone INTERNET interfaces irb.100
set interfaces ge-0/0/0 unit 0 family ethernet-switching interface-mode access
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members vlan-HQ
set interfaces irb unit 10 family inet address 192.168.2.1/24
set interfaces irb unit 100 family inet address 172.162.254.1/32
When i try to assign an adress pool to this vlan i have thi error ' 'Address range is outside the network defined for pool '100' ''
i did :
set access address-assignment pool 100 family inet network 172.162.254.0/32
set access address-assignment pool 100 family inet range range1 low 172.162.254.2
set access address-assignment pool 100 family inet range range1 high 172.162.254.5
set access address-assignment pool 100 family inet dhcp-attributes maximum-lease-time 43200
set access address-assignment pool 100 family inet dhcp-attributes router 172.162.254.1
------------------------------
sakura aiss
------------------------------