This article explains how to configure in-band and out-of-band management access to the SRX device for transparent mode.
The IRB interface is the only layer 3 interface when the device is configured in the transparent/bridge mode. It cannot be configured in a security zone; so all the interfaces that are in layer 2 mode will be part of a security zone. The IRB interface will use the ge-0/0/0 interface to perform the routing. It sends ARP requests via all the interfaces and will detect the interface, which gets the response for the IP configured on ge-0/0/0. This is how it communicates on layer 3.
- Working configuration for in-band management access of the device in transparent mode:
CLI configuration:
Configure IRB and the underlying interface:
root@# show interfaces | match interfaces | display set
set interfaces ge-0/0/1 unit 0 family bridge interface-mode access
set interfaces ge-0/0/1 unit 0 family bridge vlan-id 2
set interfaces irb unit 0 family inet address 1.1.1.1/24
Configure the IRB interface to be in the transparent mode: root@# show bridge-domains | display set
set bridge-domains IRB domain-type bridge
set bridge-domains IRB vlan-id 2
set bridge-domains IRB routing-interface irb.0
Enable the HTTP system service for the underlying interface: root@# show security zones | display set
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http
Note: For Junos 15.1X49 and later release, configuration for IRB interface is different. Please refer to KB31147 - [SRX] Example - Configure Transparent mode on Junos 15.1X49 SRX platform
- Working configuration for out-of-band management access of the device in transparent mode:
The requirement is to use ge-0/0/0 for out-of-band management. Configure ge-0/0/0 interface as family bridge: set interfaces ge-0/0/0 unit 0 family bridge interface-mode access
set interfaces ge-0/0/0 unit 0 family bridge vlan-id 2
Configure the IRB interface to be in the transparent mode:
set bridge-domains IRB domain-type bridge
set bridge-domains IRB vlan-id 2
set bridge-domains IRB routing-interface irb.0
Configure the IRB interface with the out-of-band management IP address: set interfaces irb unit 0 family inet address 172.22.145.190/24
Configure the ge-0/0/0 interface under functional-zone management: set security zones functional-zone management interfaces ge-0/0/0.0
host-inbound-traffic system-services all
Configure the routing-option to add the route for the default gateway: set routing-option static route 0.0.0.0/0 next-hop 172.22.145.1