Sunday, December 10, 2017

Inter-VLAN Routing Configuration




Before this configuration kindly see my HA, VC & Lag configuration as I don't mention this configuration in this scenario.

------------------SRX340-----------------
# Create a subinterface with vlan tagging do the following(Optional)
set interfaces reth1 vlan-tagging
set interfaces reth1 unit 105 vlan-id 105
set interfaces reth1 unit 105 family inet address 192.168.200.245/24
set interfaces reth1 unit 106 vlan-id 106
set interfaces reth1 unit 106 family inet address 192.168.201.245/24

set security policies from-zone Trusted to-zone Trusted policy any-to-any match source-address any
set security policies from-zone Trusted to-zone Trusted policy any-to-any match destination-address any
set security policies from-zone Trusted to-zone Trusted policy any-to-any match application any
set security policies from-zone Trusted to-zone Trusted policy any-to-any then permit
set security zones security-zone Trusted host-inbound-traffic system-services all
set security zones security-zone Trusted host-inbound-traffic protocols all


set security zones security-zone Trusted interfaces reth1.105
set security zones security-zone Trusted interfaces reth1.106

----------------Qfx5100-48s-------------------

set vlans Level-5 vlan-id 105
set vlans Level-6 vlan-id 106
set interfaces ae2 unit 0 family ethernet-switching interface-mode access vlan members 105
set interfaces ae3 unit 0 family ethernet-switching interface-mode access vlan members 106
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk vlan members [105 106]
set interfaces ae1 unit 0 family ethernet-switching interface-mode trunk vlan members [105 106]


----------------EX3300-48T-------------------

set vlans Level-5 vlan-id 105
set interfaces ae0 unit 0 family ethernet-switching port-mode access vlan members 105

----------------EX3300-48T-------------------

set vlans Level-6 vlan-id 106
set interfaces ae0 unit 0 family ethernet-switching port-mode access vlan members 106