Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  Do I need to create route if both subnet using the same virtual router

    Posted 11-14-2019 19:34

    After created the 2 subnets
    ethernet0/1 192.168.1.0/24 Layer3
    ethernet0/2 192.168.2.0/24 Layer3

    There were 4 route entries auto created
    192.168.1.0/24 ethernet0/1 Protocol C
    192.168.1.1/32 ethernet0/1 Protocol H
    192.168.2.0/24 ethernet0/2 Protocol C
    192.168.2.1/32 ethernet0/2 Protocol H

    Policies for the 2 zones were set. Do I need to create new route for these 2 subnets to reach each other?



  • 2.  RE: Do I need to create route if both subnet using the same virtual router
    Best Answer

     
    Posted 11-14-2019 19:59

    Nothing on the firewall but you need appropriate gateways configured on the hosts in that particular subnet to reach the Firewall and the routing is taken care by the firewall with the routes available as they are directly connected to it.

     

    Thanks and Regards,

    Pradeep Kumar M.



  • 3.  RE: Do I need to create route if both subnet using the same virtual router

    Posted 11-14-2019 20:10

    Thanks pradkm.

    Actually, I set the ethernet interfaces to be the gateway.

    ethernet0/1
Static IP 192.168.1.1 /24
Zone Trust
ethernet0/2
Static IP 192.168.2.1 /24
Zone DMZ

    Is that enough for the computers in the 2 different subnets reach each other?



  • 4.  RE: Do I need to create route if both subnet using the same virtual router

     
    Posted 11-14-2019 22:03

    Yes, that should do.

     

    Thanks and Regards,

    Pradeep Kumar M



  • 5.  RE: Do I need to create route if both subnet using the same virtual router

    Posted 11-17-2019 03:13

    The configuration does cover the routing but this is a firewall too.

     

    So the interfaces need to be assigned to a zone.

     

    If they are in the same zone the default policy is permit.  

    If they are different zones then a policy must be created to permit the traffic.