O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

21.4. Create a Transparent Mode VSYS

Problem

You want to create Layer 2 VSYS using 802.1Q VLAN tags for traffic separation.

Solution

Creating transparent mode VSYS is the same as in route mode. However, the interfaceand zone configurations differ. Using Figure 21-4 as a sample Layer 2 VSYS topology, create the Layer 2 VSYS:

	ns5400-> set hostname L2-Root
	L2-Root-> set vsys gaming
	L2-Root(gaming)-> set admin name gameadmin
	<system message-Change Password>
	L2-Root(gaming)->set admin password juniper123
Layer 2 VSYS example

Figure 21-4. Layer 2 VSYS example

Next, configure the VLAN group, zones, and interfaces:

	L2-Root(gaming)-> set vlan import 20 29
	L2-Root(gaming)-> set vlan group name gamers
	L2-Root(gaming)-> set vlan group gamers 20 29 
	L2-Root(gaming)-> set zone name L2-gamers-trust L2 
	L2-Root(gaming)-> set zone name L2-gamers-untrust L2 
	L2-Root(gaming)-> set vlan port e2/4 group gamers zone L2-gamers-trust
	Changed to pure l2 mode
	L2-Root(gaming)->set vlan port e2/1 group gamers zone L2-gamers-untrust

Now, configure the management interface and service options:

	L2-Root(gaming)-> set interface vlan29 zone vlan
	L2-Root(gaming)-> set interface vlan29 ip 10.54.0.29/24
	L2-Root(gaming)-> unset interface vlan29 manage
	L2-Root(gaming)-> set interface vlan29 manage web
	L2-Root(gaming)-> set interface vlan29 manage ssh
	L2-Root(gaming)-> set interface vlan29 manage ping
	L2-Root(gaming)->set route 0.0.0.0/0 interface vlan29 ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required