LAN Interfaces

Navigating to a LAN Configuration

You'll find LANs on the configuration page for your WAN Edge templates (for spokes), hub profiles, and individually managed devices.

For a WAN Edge template—From the left menu, select Organization > WAN > WAN Edge Templates. Click a template, or create one. Scroll down to the LAN section.
For a hub profile—From the left menu, select Organization > WAN > Hub Profiles. Click a profile, or create a new one. Scroll down to the LAN section.
For an individually managed WAN Edge device—From the left menu, select WAN Edges > WAN Edges. Click a device. Scroll down to the LAN section.

LAN Settings Overview

Associate your LAN with the appropriate port on the device, and add network services as needed.

The LAN section of the configuration includes these sub-sections:

IP Config
DHCP Config
Custom VR
LAN Configurations

IP Config

In the IP Config section, you see the networks, IP addresses, and redirect gateways (applicable to Session Smart Routers only) for the LANs that you've defined. To add a LAN, click Add IP Config, enter the settings in the side panel, and then click Add at the bottom of the panel.

Table 1: Settings in the IP Config Panel
Field	Description
Network	Select an available network from the drop-down menu. This list includes all networks that you previously added on the Networks page. For help, see Network Settings.
IP Address	Enter the IPv4 address for this interface.
Prefix Length	Enter the prefix length for the interface.
Redirect Gateway (SSR Only)	(For Session Smart Routers only) Enter the IP address of redirect gateway .

DHCP Config

In the DHCP Config section, you can enable or disable DHCP and see the DHCP configs that you've defined. To add a DHCP config, click Add DHCP Config, enter the settings in the side panel, and then click Add at the bottom of the panel.

Table 2: Settings in the DHCP Config Panel
Field	Description
Network	Select an available network from the drop-down menu. This list includes all networks that you previously added on the Networks page. For help, see Network Settings.
DHCP Type	Select DHCP Server or DHCP Relay. Then complete the asterisked fields.
DHCP Relay Settings
Servers	Enter a comma-separated list of IP addresses for the relay servers.
DHCP Server Settings
IP Start, IP End	Use these two fields to specify the range of IP addresses to use.
Gateway	Enter the IP address of the network gateway.
Maximum Lease Time	Specify the maximum duration of a DHCP lease, from 3600 seconds (1 hour) to 604800 seconds (1 week).
DNS Servers	Enter IP address of the Domain Name System (DNS) server.
Server Options	The Server Options table displays the server options that you've already defined. Click an existing option to edit, or click Add Option. The settings include: Code—Select a code from the list. The list displays the option numbers with brief descriptions. The description indicates the type of value you will need to enter in the Value field. Type—This becomes a read-only field based on what you already selected in the Code field (this field indicates the requirements for the selected code). For example, if you selected Option 15 (domain-name), the type is FQDN, which requires a fully qualified domain name in the Value field. Value—Enter an appropriate value. For example, if you selected Option 67 (boot-file-name) for the code, the type is string, and the value must be a string that specifies the boot file name. After completing the fields, click the check mark in the Add Server Option title bar.
Static Reservations	This section lists the addresses in the DHCP range that are reserved for devices that require static IP addresses. Click an existing reservation to edit, or click Add Reservation. The settings include: Name—Enter a descriptive name to identify this reservation. The name can include up to 64 characters. It can contain only letters, numbers, underscores, and dashes. MAC Address—Enter the MAC address of the device that will use this static IP address. IP Address—Enter the IP address to be reserved. This address must be within the range that you identified in the IP Start and IP End fields (near the top of the DHCP Config panel). After completing the fields, click the check mark in the Add Static Reservation title bar.

Custom VR

If you've set up Virtual Routing and Forwarding (VRF) instances for your WAN, you also can configure VRF Route Leaking (propagation) to share route information across these instances. It provides route isolation and segmentation from other routes. A common implementation of this feature is to isolate guest, PCI, or IoT network. Put each network in a separate VRF instance.

Table 3: Settings for the Custom VR Panel
Field	Description
Name	Enter a descriptive name to identify this virtual router.
Network	Select an available network from the drop-down menu. This list includes all networks that you previously added on the Networks page. For help, see Network Settings.
Extra Routes	This section lists the extra routes that you've defined for this VR. Click an existing route to edit, or click Add Extra Routes. The settings include: Prefix—Enter the prefix IP address in the following format: xxx.xxx.xxx.xxx/xx. Gateway—Enter the IP address of the gateway.

LAN Configurations

The LAN section lists the LANs that you've defined. To add a LAN, click Add LANs, enter the settings in the side panel, and then click Add at the bottom of the panel.

Table 4: Settings for the LAN Configuration Panel
Field	Description
Interface	Enter the interface. Example: ge-0/0/3. Then select additional interface options as needed: Disabled— Administratively disable the LAN port. If you disable a physical interface (for example, ge-0/0/1), all associated sub-interfaces or VLAN interfaces (for example, ge-0/0/1.200 and ge-0/0/1.100) will go down. If you disable an aggregated Ethernet interface (for example, ae1) on an SSR device, only the ae interface will go down; the underlying physical interfaces in the ae bundle will remain up. Port Aggregation—Group Ethernet interfaces to form a single link layer interface. You can use this for Link Aggregation Control Protocol (LACP) configuration. Disable LACP—Disable LACP interface. Enable Force Up—Choose this option prior to onboarding a device that is connected to the LAN port via Link Aggregation Control Protocol (LACP). For example, when onboarding a new switch to the Mist cloud, the switch is not already provisioned for LACP. Setting Enable Force Up forces the first Ethernet interface of the LACP on the WAN Edge device to the up state, which in turn allows the switch to connect to the Mist cloud using zero-touch provisioning (ZTP), where it will retrieve the configuration files needed to complete the onboarding. Redundant— Enable redundancy. Then enter the Redundant Index and Redundant Group (SRX only) and the Primary Node. The drop-down list includes the nodes specified in the IP Config section of the configuration. Enable "Up/Down Port" Alert Type—Select this option to designate this interface as a critical WAN Edge port for alerts. After you save this configuration, you also need to enable the Critical WAN Edge Port Up and Critical WAN Edge Port Down alerts on the Alerts Configuration page. Then you'll receive alerts whenever this port goes down or comes back up. For more information, see the Alerts chapter of the Juniper Mist AI-Native Operations Guide.
Description	Enter a description to identify this interface.
Network	Select a network from the list. When you do, the remaining configuration is filled in automatically. The Network list includes all networks that you previously added on the Networks page. For help, see Network Settings.
Untagged VLAN Network (SRX Only)	If this interface is for an SRX, select the network to use for untagged VLAN traffic.