This article explains how to configure in-band and out-of-band management access to the SRX device for transparent mode.

The IRB interface is the only layer 3 interface when the device is configured in the transparent/bridge mode. It cannot be configured in a security zone; so all the interfaces that are in layer 2 mode will be part of a security zone. The IRB interface will use the ge-0/0/0 interface to perform the routing. It sends ARP requests via all the interfaces and will detect the interface, which gets the response for the IP configured on ge-0/0/0. This is how it communicates on layer 3.

1. Working configuration for in-band management access of the device in transparent mode:
   

   CLI configuration:
   
   Configure IRB and the underlying interface:

   root@# show interfaces | match interfaces | display set
set interfaces ge-0/0/1 unit 0 family bridge interface-mode access
set interfaces ge-0/0/1 unit 0 family bridge vlan-id 2
set interfaces irb unit 0 family inet address 1.1.1.1/24

   
   Configure the IRB interface to be in the transparent mode:

   root@# show bridge-domains | display set
set bridge-domains IRB domain-type bridge
set bridge-domains IRB vlan-id 2
set bridge-domains IRB routing-interface irb.0

   Enable the HTTP system service for the underlying interface:

   root@# show security zones | display set
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http

   Note: For Junos 15.1X49 and later release, configuration for IRB interface is different. Please refer to KB31147 - [SRX] Example - Configure Transparent mode on Junos 15.1X49 SRX platform



2. Working configuration for out-of-band management access of the device in transparent mode:
   
   The requirement is to use ge-0/0/0 for out-of-band management. Configure ge-0/0/0 interface as family bridge:

   set interfaces ge-0/0/0 unit 0 family bridge interface-mode access
set interfaces ge-0/0/0 unit 0 family bridge vlan-id 2



   Configure the IRB interface to be in the transparent mode:
   
         set bridge-domains IRB domain-type bridge
      set bridge-domains IRB vlan-id 2
      set bridge-domains IRB routing-interface irb.0

   Configure the IRB interface with the out-of-band management IP address:

   set interfaces irb unit 0 family inet address 172.22.145.190/24

   Configure the ge-0/0/0 interface under functional-zone management:

   set security zones functional-zone management interfaces ge-0/0/0.0
host-inbound-traffic system-services all

   Configure the routing-option to add the route for the default gateway:

   set routing-option static route 0.0.0.0/0 next-hop 172.22.145.1