Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

Subinterfaces vs VLAN interfaces

$
0
0

Getting to the point where I know enough to get myself into trouble Smiley Happy So what I'm trying to figure out now is VLAN setup. I've been reading here and the KB section for a few hours on setting them up and I keep seeing two seemingly different approaches.

 

One is adding a vlan member to a physical interface and then creating a vlan interface.

 

The other is using sub-interfaces on the physical interface.

 

So what's the basic difference - pros vs cons - and given I'm probably going to only have 3-4 vlans and each on it's own port of an SRX210, does that make a difference?

 

What I'm looking at so far for configuration:

  set interfaces ge-0/0/1 description "SRX-210 (ge-0/0/1) to TP-LINK port 1 : Gateway for HOME_LAN"
set interfaces ge-0/0/1 gigether-options auto-negotiation
set interfaces ge-0/0/1 unit 0 family inet address 10.20.15.254/24

set interfaces fe-0/0/6 description "SRX-210 (fe-0/0/6) to ESXi eth2: Gateway for LAB_WORK"
set interfaces fe-0/0/6 fastether-options auto-negotiation
set interfaces fe-0/0/6 unit 0 family inet address 10.1.69.254/24
(or would it be unit 169??)

set interfaces fe-0/0/7 description "SRX-210 (fe-0/0/7) to ESXi eth3: Gateway for LAB_VULN"
set interfaces fe-0/0/7 fastether-options auto-negotiation
set interfaces fe-0/0/7 unit 0 family inet address 10.16.36.254/24

set vlans VLAN_LAB_WORK vlan-id 169 set vlans VLAN_HOME_LAN vlan-id 10 set vlans VLAN_INTERNET vlan-id 172 set vlans VLAN_LAB_VULN vlan-id 1636

Yes I know this configuration won't work but that's all I have right now until I figure out the answer to the sub-interface vs vlan interface question.

 

Thanks for any suggestions/advice!!!


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>