Description

The secure wire configuration statements have been changed for Junos OS version 15.1 and later. This article highlights the difference in the approach.

Symptoms

When you use the following secure wire configuration with Junos OS 12.3X48, the commit check fails -

set vlans secure-wire-a vlan-id 10
set interfaces ge-0/0/9 unit 0 family ethernet-switching port-mode access vlan members secure-wire-a
set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode access vlan members secure-wire-a
set security forwarding-options secure-wire secure-a interface [ge-0/0/9.0 ge-0/0/10.0]
set security zones security-zone zoneA interfaces ge-0/0/9.0
set security zones security-zone zoneB interfaces ge-0/0/10.0
 
root# commit check
[edit security forwarding-options]
  'secure-wire secure-a'
    Error: secure-wire secure-a interfaces ge-0/0/9.0 & ge-0/0/10.0 must both be layer-2 interfaces and configured for same vlan(s)
error: configuration check-out failed

Solution

The following configuration commands for secure wire are applicable for Junos OS 15.1 and later:

set interfaces ge-0/0/9 unit 0 family ethernet-switching port-mode access
set interfaces ge-0/0/9 unit 0 family ethernet-switching vlan members secure-wire-a
set interfaces ge-0/0/10 unit 0 family ethernet-switching port-mode access
set interfaces ge-0/0/10 unit 0 family ethernet-switching vlan members secure-wire-a

For the version of 12.3X48, please use the following configuration commands for secure wire-

set interfaces ge-0/0/9 unit 0 family bridge interface-mode access
set interfaces ge-0/0/9 unit 0 family bridge vlan-id 10
set interfaces ge-0/0/10 unit 0 family bridge interface-mode access
set interfaces ge-0/0/10 unit 0 family bridge vlan-id 10​