ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Trouble creating another vland interface SSG 5

‎01-20-2011 11:42 PM

Hi, I'm a bit new to vlans, and I'm trying to create another vlan (we need 2 vlans in our firm) When I log on to the console and try to make another vlan I only get the error message : Set interface "vlan2 zone vlan" unknown keyword vlan2


As I said, I'm really new to vlans, so any bit of information would be of great help.


Thanks in advance


-Henning F.

ScreenOS Firewalls (NOT SRX)

Re: Trouble creating another vland interface SSG 5

‎01-21-2011 04:04 AM

The interface vlan1 is for transparrent mode only.



To set a vlan on an interface, use:

unset int e0/0 ip

unset int e0/0 zone

unset int vlan1 ip

set zone name vlan10

set zone name vlan20

set interface ethernet0/0.1 tag 10 zone vlan10

set interface ethernet0/0.2 tag 20 zone vlan20

set interface ethernet0/0.1 ip

set interface ethernet0/0.2 ip


and so on.

Obviously chanage eth0/0 to the interface you actually want to trunk on, and change the tags and IPs to your environment.