This article describes the interfaces needed for the JSI LWC/vLWC configuration.

There are 3 different interfaces that need to be configured and all three should be in different subnets. The 3 interfaces are - internal, external and captive.

The internal interface needs to be able to connect to the network devices only and should not have access to the internet.

The external interface is used to connect to the cloud.

The captive interface is used to access the UI of the captive portal for the configuration.

These three interfaces need to be in different subnets for the LWC to be working. If not, the connection to the cloud will not go through.

Please refer to the document mentioned below for the same:

https://www.juniper.net/documentation/us/en/software/jsi/vlwc-deploy/vlwc-deploy.pdf#:~:text=The%20third%20interface%20is%20the%20management%20interface,the%20Junos%20devices%20being%20monitored%20by%20JSI.