Configuring Layer 2 Bridging and Transparent Mode

For SRX3400, SRX3600, SRX5600, and SRX5800 devices, transparent mode provides full security services for Layer 2 bridging capabilities. This chapter describes how to configure bridge domains on SRX Series devices and how to configure Layer 2 security zones and security policies between these zones.

For information about which devices support the features documented in this chapter, see the Junos OS Feature Support Reference for SRX Series and J Series Devices.

This chapter contains the following topics:

• Layer 2 Bridging and Transparent Mode Overview
• Understanding Bridge Domains
• Understanding Transparent Mode Conditions
• Understanding Layer 2 Interfaces
• Configuring Bridge Domains
• Configuring Layer 2 Logical Interfaces
• Understanding Layer 2 Security Zones
• Understanding Security Policies in Transparent Mode
• Creating Layer 2 Security Zones
• Configuring Security Policies for Transparent Mode
• Understanding VLAN Retagging
• Configuring VLAN Retagging
• Changing the Default Forwarding Behavior
• Understanding Integrated Routing and Bridging Interfaces
• Understanding Firewall User Authentication in Transparent Mode
• Configuring an IRB Interface
• Understanding Layer 2 Forwarding Tables
• Changing the Default Learning for Unknown MAC Addresses
• Understanding Layer 2 Transparent Mode Chassis Clusters
• Configuring Redundant Ethernet Interfaces for Layer 2 Transparent Mode Chassis Clusters
• Overview of Class of Service Functions in Transparent Mode
• Understanding BA Traffic Classification on Transparent Mode Devices
• Configuring and Applying BA Classifiers on Transparent Mode Devices
• Understanding Rewrite of Packet Headers on Transparent Mode Devices
• Configuring and Applying Rewrite Rules on Transparent Mode Devices