How to configure Security Zones on a Juniper SRX

[@nadeemkhan10oct]

Sir please make a video on dhcp snooping trust

[@aggregate93]

Hell yeah Jon. Thank you 🙏🏻

[@jongreenit]

Happy to help!

[@attiahebenezer6]

Jon green please is there adifference between network engineer and network administrator

[@jongreenit]

Yeah so while both roles share similar responsibilities a network engineer primarily designs and deploys networks where as a network admin manages and provides support for an existing network(s)

[@ThePlanetoide]

Hi my friend., excuse me . which version of SRX have you ?

[@jongreenit]

Hi the version used in the video is 19.4R1

[@willo7380]

Is there a way to put an irb.10 into security zones? I keep getting an error that it can't be in mix modes.

[@jongreenit]

On Juniper devices, Integrated Routing and Bridging (IRB) interfaces cannot be assigned to security zones. However, you can configure services on a per-zone basis to allow host-inbound traffic for device management. This allows you to control the type of traffic that can reach the device from interfaces bound to a specific zone. Security zones are logical entities that can contain one or more interfaces with similar security requirements. Interfaces act as a doorway through which traffic enters and exits a Juniper device, and zones regulate packets coming into or going out of the router. You can define multiple security zones based on your network needs, and the security zone type is implicitly set from the first interface configured for the zone. A security zone can be either a Layer 2 or Layer 3 zone, but it cannot contain a mix of both.

[@willo7380]

@jongreenit I'm guessing you can't do that on Eve-ng, because at my place of work. U can put an irb.10 into security zones.