Different Subnet using vlan configuration

[mdella_]

Hi everybody,

I am trying to do something like that:

I have a SRX with reth1.1 (192.168.1.1 and vlan-id 1) and reth1.12 (192.168.12.1 and vlan-id 12).

Both interfaces are in the same zone but the subnet 192.168.12.0 was created for Junos Pulse users with DHCP pool defined in Resources Policies using the range 192.168.12.101-125.

The MAG is in the subnet 192.168.1.0 using IP 192.168.1.1 in the internal port.

Between SRX and MAG and have just a EX 4200. I created a Vlan Port in the MAG using vlan-id 12, IP 192.168.12.10, gtw 192.168.12.1. In the role I selected Vlan/source ip.

I put the interface of EX in mode trunk and chose vlan-id 1 as native-vlan and vlan-id 12 as vlan member but i lost the connection to the MAG.

What else? Do i need to change something in default vlan on MAG?

Thanks

[zanyterp_ · Accepted solution]

The MAG internal port, if that is what you are asking/doing, does not do tagged traffic except for the role if you enable it.
Did you enable the option to use the vlan, as it is not enabled by default (users>user roles>roleName>general)?

[jayLaiz_]

Hi,

The internal port will remain in the default VLAN. Which means the untagged traffic will be sent over the default VLAN with a VLAN ID 1 and tagged traffic will be sent over the VLAN you have created.

Can you check 2 things :

check if the traffic for vlan1 is tagged on the switch,if yes please untag it and try

Under system--->virtual systems-->root-->verify if the vlan is added and the vlan ip pool is defined

Please mark this as an accepted solution if it resolves your query

Regards,

Jay

[mdella_]

I forgot to enable vlan in role general.

Thanks for your help.

[zanyterp_]

You are welcome; glad to hear it was something "simple" to get setup for you.