Hi.
Dont know what is wrong.. But i can get my 2. VLAN to give out any DHCP
here is the config. am i doing something wrong.
## Last changed: 2016-01-26 21:32:06 GMT
version 12.1X44-D35.5;
system {
host-name STORKFW;
time-zone GMT;
root-authentication {
encrypted-password "$1$bfNeVeRJ$u894RU2VufyLKJnoGIqEK1";
}
name-server {
8.8.8.8;
8.8.4.4;
208.67.222.222;
208.67.220.220;
}
login {
user mj {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$D2k/Xtxx$cvlLEegHydvkGKYtYKt2h0";
}
}
}
services {
ssh;
telnet;
web-management {
http {
interface [ ge-0/0/6.0 vlan.1 vlan.0 ];
}
https {
system-generated-certificate;
interface [ ge-0/0/6.0 ge-0/0/0.0 vlan.0 vlan.1 ];
}
session {
idle-timeout 60;
}
}
dhcp {
router {
10.0.1.1;
172.16.48.1;
}
pool 10.0.1.0/24 {
address-range low 10.0.1.50 high 10.0.1.254;
name-server {
8.8.8.8;
8.8.4.4;
}
router {
10.0.1.1;
}
propagate-settings vlan.1;
}
pool 172.16.48.0/24 {
address-range low 172.16.48.50 high 172.16.48.254;
name-server {
8.8.8.8;
8.8.4.4;
}
router {
172.16.48.1;
}
propagate-settings vlan.2;
}
pool 172.16.16.0/24 {
address-range low 172.16.16.50 high 172.16.16.250;
}
pool 10.1.1.0/24 {
address-range low 10.1.1.50 high 10.1.1.200;
}
}
}
syslog {
archive size 100k files 3;
user * {
any emergency;
}
file messages {
any critical;
authorization info;
}
file interactive-commands {
interactive-commands error;
}
}
max-configurations-on-flash 5;
max-configuration-rollbacks 5;
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
}
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
address 188.120.94.162/29;
}
}
}
ge-0/0/5 {
unit 0 {
family inet {
address 172.16.16.1/24;
}
}
}
ge-0/0/6 {
unit 0 {
family inet {
address 10.1.1.1/24;
}
}
}
ge-0/0/7 {
unit 0 {
family ethernet-switching {
port-mode trunk;
vlan {
members default;
}
}
}
}
st0 {
unit 1 {
family inet;
}
}
vlan {
unit 1 {
family inet {
address 10.0.1.1/24;
}
}
unit 2 {
family inet {
address 172.16.48.1/24;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 188.120.94.161;
route 10.100.0.0/24 next-hop st0.1;
}
}
protocols {
stp;
}
security {
screen {
ids-option untrust-screen {
icmp {
ping-death;
}
ip {
source-route-option;
tear-drop;
}
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
}
land;
}
}
}
nat {
source {
rule-set nsw_srcnat {
from zone [ Guest Internal ];
to zone Internet;
rule nsw-src-interface {
match {
source-address 0.0.0.0/0;
destination-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
}
}
policies {
from-zone Internal to-zone Internet {
policy Internal2Internat {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
policy policy_out_NETGROUP {
match {
source-address addr_10_0_1_0_24;
destination-address addr_10_100_0_0_24;
application any;
}
then {
permit;
}
}
}
from-zone Guest to-zone Internet {
policy Guest2Internet {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Guest to-zone Internal {
policy Guest2Internal {
match {
source-address any;
destination-address any;
application any;
}
then {
deny;
}
}
}
from-zone Internal to-zone Guest {
policy Internal2Guest {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Internet to-zone Internal {
policy policy_in_NETGROUP {
match {
source-address addr_10_100_0_0_24;
destination-address addr_10_0_1_0_24;
application any;
}
then {
permit;
}
}
}
}
zones {
security-zone Internal {
address-book {
address addr_10_0_1_0_24 10.0.1.0/24;
}
host-inbound-traffic {
system-services {
all;
}
}
interfaces {
ge-0/0/6.0 {
host-inbound-traffic {
system-services {
ping;
dhcp;
http;
https;
ssh;
telnet;
}
}
}
vlan.1;
}
}
security-zone Guest {
interfaces {
ge-0/0/5.0 {
host-inbound-traffic {
system-services {
ping;
dhcp;
ssh;
}
}
}
}
}
security-zone Internet {
address-book {
address addr_10_100_0_0_24 10.100.0.0/24;
}
host-inbound-traffic {
system-services {
ike;
}
}
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
system-services {
ping;
https;
ssh;
}
}
}
st0.1;
}
}
}
}
vlans {
Guest {
description GuestNet;
vlan-id 2;
l3-interface vlan.2;
}
default {
l3-interface vlan.1;
}
}