Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Supported Topologies

 

Policy Enforcer supports the following deployment topologies:

  • Client to Layer 2 switch to Layer 3 SRX (IRB)

  • Client to Layer 2 switch to Layer 3 switch (IRB)

  • Client to Layer 2/Layer 3 switch (IRB)

Figure 1 illustrates the Policy Enforcer deployment topologies.

Figure 1: Policy Enforcer Deployment Topologies
Policy
Enforcer Deployment Topologies

Table 1 provides information on the deployment topologies.

Table 1: Policy Enforcer Supported Topologies

Topology 1

Topology 2

Topology 3

EX Series or QFX Series device as Layer 2 switch

EX Series or QFX Series device (access switch) as Layer 2 switch.

EX Series or QFX Series device (aggregation switch) as Layer 3 switch

EX Series or QFX Series device as Layer 2/Layer 3 switch

SRX Series device as firewall in Layer 3 mode

SRX Series device as firewall in Layer 3 mode

SRX Series device as firewall in Layer 3 mode

IRB / VLAN tagging on SRX Series device

IRB / VLAN tagging on EX Series or QFX Series device (aggregation switch)

IRB / VLAN tagging on EX Series or QFX Series switch