TechLibrary

Documentation Quick Links

Table of Contents

Layer 2 Bridging and Transparent Mode Feature Guide for Security Devices

Junos OS Layer 2 Bridging and Switching Library for Security Devices

Overview
Configuration
Administration
Troubleshooting

Bridging and Transparent Mode
Layer 2 Bridging and Transparent Mode Overview

Bridge Domains
Understanding Bridge Domains

IPv6 Flows
Understanding IPv6 Flows in Transparent Mode

Interfaces

Understanding Transparent Mode Conditions

Understanding Layer 2 Interfaces

Understanding VLAN Retagging

Understanding Integrated Routing and Bridging Interfaces

Security Zones and Security Policies

Understanding Security Policies in Transparent Mode

Understanding Layer 2 Security Zones

Understanding Firewall User Authentication in Transparent Mode

Understanding Layer 2 Forwarding Tables

Understanding Layer 2 Transparent Mode Chassis Clusters

Understanding IP Spoofing in Layer 2 Transparent Mode

Transparent Mode Devices

Class of Service Functions in Transparent Mode Overview

Understanding BA Traffic Classification on Transparent Mode Devices

Understanding Rewrite of Packet Headers on Transparent Mode Devices

Related Documentation

Ethernet Port Switching

Bridging and Transparent Mode
Layer 2 Bridging and Transparent Mode Overview

Bridge Domains
Understanding Bridge Domains

IPv6 Flows
Understanding IPv6 Flows in Transparent Mode

Interfaces
Understanding Transparent Mode Conditions Understanding Layer 2 Interfaces Understanding VLAN Retagging Understanding Integrated Routing and Bridging Interfaces

Interfaces

Understanding Transparent Mode Conditions

Understanding Layer 2 Interfaces

Understanding VLAN Retagging

Understanding Integrated Routing and Bridging Interfaces

Security Zones and Security Policies
Understanding Security Policies in Transparent Mode Understanding Layer 2 Security Zones Understanding Firewall User Authentication in Transparent Mode Understanding Layer 2 Forwarding Tables Understanding Layer 2 Transparent Mode Chassis Clusters Understanding IP Spoofing in Layer 2 Transparent Mode

Security Zones and Security Policies

Understanding Security Policies in Transparent Mode

Understanding Layer 2 Security Zones

Understanding Firewall User Authentication in Transparent Mode

Understanding Layer 2 Forwarding Tables

Understanding Layer 2 Transparent Mode Chassis Clusters

Understanding IP Spoofing in Layer 2 Transparent Mode

Transparent Mode Devices
Class of Service Functions in Transparent Mode Overview Understanding BA Traffic Classification on Transparent Mode Devices Understanding Rewrite of Packet Headers on Transparent Mode Devices

Transparent Mode Devices

Class of Service Functions in Transparent Mode Overview

Understanding BA Traffic Classification on Transparent Mode Devices

Understanding Rewrite of Packet Headers on Transparent Mode Devices

Bridge Domains
Example: Configuring Bridge Domains

Interfaces
Example: Configuring Layer 2 Logical Interfaces Example: Configuring VLAN Retagging Example: Configuring an IRB Interface

Interfaces

Example: Configuring Layer 2 Logical Interfaces

Example: Configuring VLAN Retagging

Example: Configuring an IRB Interface

Security Zones and Security Policies
Example: Configuring Layer 2 Security Zones Example: Configuring Security Policies in Transparent Mode Example: Configuring the Default Learning for Unknown MAC Addresses Example: Configuring Redundant Ethernet Interfaces for Layer 2 Transparent Mode Chassis Clusters Configuring IP Spoofing in Layer 2 Transparent Mode

Security Zones and Security Policies

Example: Configuring Layer 2 Security Zones

Example: Configuring Security Policies in Transparent Mode

Example: Configuring the Default Learning for Unknown MAC Addresses

Example: Configuring Redundant Ethernet Interfaces for Layer 2 Transparent Mode Chassis Clusters

Configuring IP Spoofing in Layer 2 Transparent Mode

IPv6 Flows
Enabling Flow-Based Processing for IPv6 Traffic Example: Configuring Transparent Mode for IPv6 Flows

IPv6 Flows

Enabling Flow-Based Processing for IPv6 Traffic

Example: Configuring Transparent Mode for IPv6 Flows

Transparent Mode Devices
Example: Configuring BA Classifiers on Transparent Mode Devices Example: Configuring Rewrite Rules on Transparent Mode Devices

Transparent Mode Devices

Example: Configuring BA Classifiers on Transparent Mode Devices

Example: Configuring Rewrite Rules on Transparent Mode Devices

Configuration Statements
Bridge-Domains Configuration Statement Hierarchy Class-of-Service Configuration Statement Hierarchy Interfaces Configuration Statement Hierarchy authentication-order (Access Profile) bridge bridge-domains (Bridge Domains) bridge-options (Bridge Domains) code-points domain-type (Bridge Domains) destination-address (Security Policies) encapsulation (Interfaces) family inet (Interfaces) family inet6 flow (Security Flow) forwarding-classes (CoS) host-inbound-traffic interface (Bridge Domains) interfaces (CoS) interfaces (Security Zones) inet6 (Security Forwarding Options) loss-priority (CoS Loss Priority) match (Security Policies) native-vlan-id (Interfaces) peer-selection-service pgcp-service policy (Security Policies) port (Access RADIUS) profile (Access) redundancy-group (Interfaces) routing-interface (Bridge Domains) security-zone shaping-rate (CoS Interfaces) source-address (Security Policies) static-mac (Bridge Domains) system-services (Security Zones Interfaces) unframed \| no-unframed (Interfaces) vlan-id vlan-id-list (Bridge Domains) vlan-tagging (Interfaces)

Configuration Statements

Bridge-Domains Configuration Statement Hierarchy

Class-of-Service Configuration Statement Hierarchy

Interfaces Configuration Statement Hierarchy

authentication-order (Access Profile)

bridge

bridge-domains (Bridge Domains)

bridge-options (Bridge Domains)

code-points

domain-type (Bridge Domains)

destination-address (Security Policies)

encapsulation (Interfaces)

family inet (Interfaces)

family inet6

flow (Security Flow)

forwarding-classes (CoS)

host-inbound-traffic

interface (Bridge Domains)

interfaces (CoS)

interfaces (Security Zones)

inet6 (Security Forwarding Options)

loss-priority (CoS Loss Priority)

match (Security Policies)

native-vlan-id (Interfaces)

peer-selection-service

pgcp-service

policy (Security Policies)

port (Access RADIUS)

profile (Access)

redundancy-group (Interfaces)

routing-interface (Bridge Domains)

security-zone

shaping-rate (CoS Interfaces)

source-address (Security Policies)

static-mac (Bridge Domains)

system-services (Security Zones Interfaces)

unframed | no-unframed (Interfaces)

vlan-id

vlan-id-list (Bridge Domains)

vlan-tagging (Interfaces)

Operational Commands
clear security flow ip-action clear security flow session family show igmp-snooping route (View) show igmp-snooping vlans (View) show interfaces (SRX Series) show security flow gate family show security flow ip-action show security flow session family show security flow statistics show security flow status show security policies show security zones

Operational Commands

clear security flow ip-action

clear security flow session family

show igmp-snooping route (View)

show igmp-snooping vlans (View)

show interfaces (SRX Series)

show security flow gate family

show security flow ip-action

show security flow session family

show security flow statistics

show security flow status

show security policies