Screen OS

VLAN for SSG140

 

I wonder how to make a VLAN on a SSG5. Using the GUI

 

Thank you very much

Never made a VLAN for the SSG5...... However, if by that you mean getting a dot1q trunk across, then that is easy to set up:-

 

Just open up - network / interfaces / list

Create a new sub-IF from the drop down list (top right)

 

Choose the number you require (e0/0.1 for example)

 

There will be a tag check box. Type in the VLAN number here.

 

Enter rest of details as required

Thank you very much for your answer.

 

In this Sub-If I can create reserved addresses for DHCP?

 

regards

 

I haven't really completed the reserved addresses before, just the DHCP relay agent, but if you go into:-

 

network / DHCP

 

It brings up the interfaces and you can then assign DHCP options to those interfaces, including sub-interfaces. I cannot try that here on our systems to let you know the results as they are all now in production.

 

If I get a chance, I will have a good look when no-one is around  🙂

 

 

Well, well, well 

 

Only I had a question: When creating the Sub-IF in which network interface connect the Juniper SSG5? Does anyone?

 

¿Setting Up an IP address in the Sub-IF and configuring a computer, I can output to the internet?

 

I deeply appreciate the support you offer me 

Yes, it is all possible.

 

If you utilise, oh, lets say ethernet0/0 (normally untrusted) for the "onward" connectivity, then you can select subinterfaces for that interface.

 

So, let's say you use the following:-

 

ethernet0/0.1 as a subinterface, then your actual connection will be on ethernet0/0, but you will be utilising the subinterface of ethernet0/0.1 virtually, if that makes sense. So your physical interface will be ethernet0/0 (where you will attach the rj45 connection, but the virtual interface will be ethernet0/0.1, and there you will assign ip address etc etc. The most important point here is that your onward device (next hop device) will be pointing at the subinterface address, not a physical address as that port (ethernet0/0) is unlikely to have an address assigned to it.

 

It works very similar to a router on a stick.

Perfect.

 

Really really appreciate you support. Believe me that is very helpful for what I have to do these days.

 

Accepted as a solution 

Yes, you can use sub-interfaces the same way you use regular interfaces. DHCP reservations (up to about 60) work as well.