Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 287

Copyright © 2010, Juniper Networks, Inc.
is unsupported: You cannot import VLAN IDs to vsys devices or VLAN groups to root or
vsys.
To change a neutral root system to VLAN Trunk mode, in the device navigation tree,
select Network > Interfaces, and then double-click the vlan1 interface. In the General
Properties interface screen, select Vlan Trunk. To disable VLAN Trunk mode, clear the
Vlan Trunk option (the device returns to neutral).
To change an L2V root device to VLAN Trunk mode, you must first delete VLAN IDs that
were imported to vsys devices and VLAN groups in the root and vsys devices.
NOTE: To confirm that the device is in neutral mode, ensure that the root
system does not contain a VLAN group, no VLAN IDs have been exported to
a vsys device, vlan1 exists in the root system only, and that the VLAN trunk
mode is disabled.
In this example, you configure a NetScreen-5200 security device in L2V mode and the
vsys " music." The music vsys shares the music-untrust zone with the root system. You
must import the VLANs to a vsys before they can be tagged. Figure 4 on page 263 describes
the single port L2V configuration.
Figure 4: Example Single Port L2V Configuration
Add a NetScreen 5000 line of security device in Transparent mode running ScreenOS
1.
5.0 L2V as the root system, and then configure the network module:
Double-click the device to open the device configuration. In the device navigation
tree, select Network > Slot.
Double-click slot 2 to display the slot configuration dialog box. For Card Type, select
5000-8G SPM.
Chapter 8: Configuring VPNs
263