Description

This article outlines the basic configuration to add an SRX to a switched network and set connection with Mist to add the rest of the configuration.

Symptoms

  • Customer has an SRX connected over a switch and wants the SRX to be reachable over this network. 

Solution

1) Configure interfaces: 

set interfaces <interface-name> family inet address <ip-address> 

2) Configure a security zone and add interface to the zone: 

set security zones security-zone <zone-name> host-inbound-traffic system-services <services-to-allow> 

set security zones security-zone <zone-name> host-inbound-traffic protocols <protocols-to-allow> 

set security zones security-zone <zone-name> interface <interface-name>

Notes: In this example the customer wants to add basic configuration so that he can access the SRX over Mist and add the rest of the configuration over Mist. No security policies are needed since no transit traffic will be passing the SRX. 

If the SRX is connected to a switch and the switchport is already tagged with a VLAN-id, there is no need to add a VLAN-id to the interface on the SRX. 

With the configuration outlined above the customer should be able to connect to the SRX through Mist.

Modification History

Changed status to non-validated
11-9-2023: Title corrected to be more specific with the KB content.
12/7/2023: Formatting corrections made