Vlan tagging with Juniper Netscreen SSG5

Here are the steps to create sub-interfaces on a Netscreen SSG5 to tag VLANs :

    1. Create zone (optional, you may prefer to use an existing zone) :

set zone name myLab

  • Apply the VLAN and the zone to the sub-interface.  Here, I’m tagging VLAN 100 on interface 6 :

 

set int eth0/6 zone null
set interface ethernet0/6.3 tag 100 zone "myLab"

  • Configure IP on sub-interface:
    set interface ethernet0/6.3 ip 10.1.100.1/24
  • Adjust your policies if required.
  • Configure the device that will use interface 6 accordingly.