I have managed to configure a number of EX3300 switches (using virtual chassis) with vlans and the appropriate layer-3 configurations for RVIs.

I can get the traffic to flow internally on the switches, however, I'm having difficulties get traffic to go out of the firewall in a way I would like.

Currently, I have been able to set up a trunk port that sends traffic through the firewall but I have to set the firewall as the default gateway. If I'm not mistaken, in this scenario the firewall is actually doing the routing.

My thought is to create another vlan to connect to the firewall with a regular access port. But I'm not sure how to route the traffic out of my RVIs through the new vlan.

Am I going in the right direction? What am I missing? I feel like it's something relatively simple.



Create a L3 interface and route over that interface to the firewall using a routing protocol or static routes.

interface ge-0/0/2 {
    unit 0 {
        family inet {
| improve this answer | |
  • How do I route over the new interface? What routing protocol would I use? Or, what static routes, one for each of the other L3 interfaces? set routing-options static route next-hop something like this? – Mozy Sep 17 '17 at 4:06
  • As, a follow up to my previous comment/questions. I also, have a point to point VPN to another location through the firewall. Do I need to do anything special to route back into my other L3 interfaces? – Mozy Sep 17 '17 at 15:58
  • These questions are too broad. I would humbly suggest learning more about routing in general, as this will answer all of your questions. – Yosef Gunsburg Sep 17 '17 at 18:18
  • Thank you for your time and pointing me in the right direction. – Mozy Sep 17 '17 at 22:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.