Creating a VLAN Trunk on a Netscreen Firewall

Thursday, 31 December 2009 16:14

Firewalls - Juniper - Netscreen

Below shows you the basic configuration on how to create a VLAN trunk on a Nertscreen Firewall.
A VLAN trunk is a term used to describe a collection of logical interfaces, each one being able to receive and decapsulate VLAN tagged packets for its relevant VLAN.

In this example our trunk will consist of 2 logical interfaces. 1 interface being for VLAN 10 and the other for VLAN 20.

set zone id 100 "Int-VLAN10"
set zone id 101 "DMZ-VLAN20"

set interface ethernet0/0.10 tag 10 zone "Int-VLAN10"
set interface ethernet0/0.10 ip 172.16.10.100/24
set interface ethernet0/0.10 route

set interface ethernet0/0.20 tag 20 zone "DMZ-VLAN20"
set interface ethernet0/0.20 ip 172.16.20.100/24
set interface ethernet0/0.20 route