Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Access port without ethernet-switching

$
0
0

Hi!

 

I need to generate the following configuration:

 

pc -> fw -> router

 

All three are on the same vlan (ip on the same network)

So:

 

pc: 10.10.10.2/24 fw: ge-0/0 / 1.0 10.10.1 / 24 ge-0/0/0 / .10 ... no ip .. vlan-tagged vlan 10 Rt: 10.10.10.3/24

 

If I put a VLAN tag on the PC (vlan 10) with this configuration I can ping the router from the PC and vice versa:

ge-0/0/0 { vlan-tagging; unit 10 { vlan-id 10; } } ge-0/0/1 { unit 0 { family inet { address 10.10.10.0/24; } } }


But I need it to work without TAGing the pc. I have tried with these settings:

ge-0/0/0 { unit 0 { family ethernet-switching { interface-mode trunk; vlan { members vlan10; } } } } ge-0/0/1 { unit 0 { family ethernet-switching { interface-mode access; vlan { members vlan10; } } } } irb { unit 10 { family inet { address 10.10.10.0/24 } } }

I have tested only access ge-0/0 / 1.0 and ge-0/0 / 0.10 in vlan-tagging ... PC can ping FW and Router to FW but not PC to FW.

It does not route ..

 

Is there a way to add a tag to the traffic coming through ge-0/0 /1.0 (access-mode) without using ethernet-switching?

Could someone explain me the difference between family inet an ethernet-switching, I've been looking but can totally understand..

 

Thank you very much
A greeting!


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>