Juniper SSG320M need help setting up vlan tagging for outbound internet traffic

Posted on 2012-09-08
Last Modified: 2012-09-09
We recently acquired a Juniper SSG320M for a new site our company is opening. I have traffic connecting the two sites through an mpls line but need help getting on to the internet.  I was told that the ISP requires traffic to be vlan tagged with 525. I did my best to set it up but it's still not working so any help would be greatly appreciated. Config attached.

Question by:MagTechs
    1 Comment
    LVL 18

    Accepted Solution

    I did a similar setup for my ssg-140 a couple of months ago. My outbound interface is ethernet0/0 and i have to blocks of static IPs from ISP metroE circuit. Each block is tagged 1001 and 1002 respectively.

    To utilize the static IPs I created two sub-interfaces ethernet0/0.1 and ethernet0/0.2 with the correct VLAN tags. My default gateway is in VLAN 1002 so my route statement to send traffic to the ineternet is as follows

    *      ethernet0/0.2      S      20      1      Root

    I then created the appropriate turst-untrust policy to allow web surfing

    note my original ethernet0/0 interface has no IP configured.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
    Let’s list some of the technologies that enable smooth teleworking. 
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now