Here are the steps to create sub-interfaces on a Netscreen SSG5 to tag VLANs :
- Create zone (optional, you may prefer to use an existing zone) :
set zone name myLab
- Apply the VLAN and the zone to the sub-interface. Here, I’m tagging VLAN 100 on interface 6 :
set int eth0/6 zone null
set interface ethernet0/6.3 tag 100 zone "myLab"
- Configure IP on sub-interface:
set interface ethernet0/6.3 ip 10.1.100.1/24
- Adjust your policies if required.
- Configure the device that will use interface 6 accordingly.