I have managed to configure a number of EX3300 switches (using virtual chassis) with vlans and the appropriate layer-3 configurations for RVIs.

I can get the traffic to flow internally on the switches, however, I'm having difficulties get traffic to go out of the firewall in a way I would like.

Currently, I have been able to set up a trunk port that sends traffic through the firewall but I have to set the firewall as the default gateway. If I'm not mistaken, in this scenario the firewall is actually doing the routing.

My thought is to create another vlan to connect to the firewall with a regular access port. But I'm not sure how to route the traffic out of my RVIs through the new vlan.

Am I going in the right direction? What am I missing? I feel like it's something relatively simple.


1 Answer 1


Create a L3 interface and route over that interface to the firewall using a routing protocol or static routes.

interface ge-0/0/2 {
    unit 0 {
        family inet {
  • How do I route over the new interface? What routing protocol would I use? Or, what static routes, one for each of the other L3 interfaces? set routing-options static route next-hop something like this?
    – Mozy
    Commented Sep 17, 2017 at 4:06
  • As, a follow up to my previous comment/questions. I also, have a point to point VPN to another location through the firewall. Do I need to do anything special to route back into my other L3 interfaces?
    – Mozy
    Commented Sep 17, 2017 at 15:58
  • These questions are too broad. I would humbly suggest learning more about routing in general, as this will answer all of your questions. Commented Sep 17, 2017 at 18:18
  • Thank you for your time and pointing me in the right direction.
    – Mozy
    Commented Sep 17, 2017 at 22:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.