Juniper SRX 210 vlan接口配置

Question

亲爱的，

我是网络新手，我需要你的帮助来解决我在juniper srx210设备中设置vlan接口时所面临的一个问题。

MY-PC ---> Cisco 3750 -- > srx.210 ( vlan interface)
root# show vlans MGMT {
vlan-id 101;
l3-interface vlan.

oot# show interfaces vlan    unit 0 {
family inet {

    address 192.168.10.1/24;
}
show interfaces ge-0/0/1 unit 0 {
family ethernet-switching {
    port-mode trunk;
    vlan {
        members MGMT;
    }
}

root# show security zones security-zone MGMT interfaces {
vlan.101 {
    host-inbound-traffic {
        system-services {
            all;
        }
    }
}

}

思科交换机

接口FastEthernet1 1/0/1交换机中继线允许vlan 101

PC端口

接口FastEthernet1 1/0/2交换端口接入vlan 101

Answer 1

vlan是在Cisco交换机上创建的吗？您已经标记了它，但是您仍然需要创建它。您还在主干端口上设置了封装吗？

是否在SRX上的区域之间创建了策略？就像下面这样简单的测试？

set security policies from-zone ZONE1 to-zone ZONE2 policy POLICY1 match source-address any
set security policies from-zone ZONE1 to-zone ZONE2 policy POLICY1 match destination-address any
set security policies from-zone ZONE1 to-zone ZONE2 policy POLICY1 match application any
set security policies from-zone ZONE1 to-zone ZONE2 policy POLICY1 then permit