SRX Services Gateway
SRX Services Gateway

Config on WAN

‎10-23-2019 04:55 PM

Hi we have a requirement




Vlan x and y are extended from service provider on single WAN port. Vlan x is native vlan. 

On LAN,  requirement is few ports are in private subnet and they are to be natted out from vlan X which looks straight forward and there is  an additional requirement to extend vlan y to one of the port on LAN and also restrict this vlan y BW to 100 Mbs.


How can this be achieved?




SRX Services Gateway

Re: Config on WAN

‎10-23-2019 05:33 PM

You will need a trunk port facing this SP port with native vlan set on the appropriate one.


Add all the LAN interfaces plus the LAN vlan from the SP to the same vlan


Create the virtual interface either vlan.x or irb.x depending on model SRX for your public wan and internal lan ip address.


The nat and security policies then get build as needed from here.


Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)