multiple IP ranges with juniper netscreen 5GT

hi experts,

I have a juniper netscreen 5GT at home running in "trusted untrusted" mode.
that is my ISP modem (in bridging mode) connected to untrusted interface
and my wifi access point connected to trusted interface (number 4)

all my home devices are able to access wifi access point, get an IP via DHCP from trusted interface in IP range 192.168.2.X

all working good so far.
here is the trouble and my question
I want one particular laptop to get an IP in 10.X.X.X range.

is this possible?
how?

i tried the following without success but that is because i had no idea what i am doing
1. creating a sub interface of trusted interface
2. enable additional DHCP server on this sub-interface to hand out IPs  in 10.X.X.X range
3. create a reservation in above DHCP server to hand out an IP in 10.X.X.X range based on my particular laptop's MAC address

as you probably guessed already, this did not work for me

Can you please enlighten me?


Thanks Experts
sherrysidhuAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Sanga CollinsSystems AdminCommented:
What you should do is find out of your wifi router support vlan tags. I did a similar setup for work by creating a sub interface with new ip range and vlan tag = 2. Then on my wifi I created a new ssid with vlan tag = 2. Any device that connects to wifi ssid#2 would get dhcp from the sub interface.

My ap is dlink dwl3200
My juniper is ns 5gt WLAN in trust untrust mode.

If money is not an object you can also purchase ns5gt WLAN on eBay for about $150. Since its end of life juniper won't support it directly, but the performance and feature set is worth it.
0
sherrysidhuAuthor Commented:
thx for you comment buddy but my wifi router does not support vlan tags.
is there a way to do it still?
0
Sanga CollinsSystems AdminCommented:
ok without vlan tagging you will not be able to get dhcp from the sub interface. but you may be able to configure you laptop with a static ip in the 10.x.x.x range. Id have to test it myself to be sure that it will work, but that is an option that is available.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

sherrysidhuAuthor Commented:
let me try this today and get back to you with results
0
sherrysidhuAuthor Commented:
so i tried this.
i gave my laptop a static IP in 10.x.x.x range
created a sub-interface for trusted interface.
gave this sub-interface the IP 10.0.0.1

still can't ping 10.0.0.1 or anything beyond from my laptop.

however when i tried a different approach then it worked
i undid all my above changes on netscreen
and configured the trust interface with a secondary IP 10.0.0.1
at this point my laptop was able to browse internet.

so, bottom line
it works with secondary IP configured in 10.x.x.x range
but does not work with sub-interface.

is it somehow possible to get this working with using sub-interface instead of secondary IP ?
0
Sanga CollinsSystems AdminCommented:
i believe the reason the sub interface does not work and the secondary interface does is because of vlan tagging. Without the vlan tags im not sure who the juniper is supposed to handle the presence of two network gateways on the same port. I sent an email to one of my juniper account reps to see if he can shed more light on the issue.
0
sherrysidhuAuthor Commented:
thx buddy. really appreciate your help.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.