For When You Can't Have The Real Thing
[ start | index | login ]
start > Juniper > SRX100 > Multiple Networks on Trust Interface

Multiple Networks on Trust Interface

Created by dave. Last edited by dave, 11 years and 43 days ago. Viewed 3,382 times. #1
[edit] [rdf]
labels
attachments
(2013 March 7)

If you have an interface defined with two IP addresses on it:

vlan {
        unit 0 {
            family inet {
                address 192.168.1.1/24;
                address 10.17.0.1/20;
            }
        }
    }

...then you need an explicit trust-to-trust policy to permit traffic to flow between the two subnets:

from-zone trust to-zone trust {
            policy trust-to-trust {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit;
                }
            }
        }

I didn't find this obvious.

no comments | post comment
This is a collection of techical information, much of it learned the hard way. Consider it a lab book or a /info directory. I doubt much of it will be of use to anyone else.

Useful:


snipsnap.org | Copyright 2000-2002 Matthias L. Jugel and Stephan J. Schmidt