KB: Enable multiple Netscreen Ethernet interfaces with IP addresses in the same subnet

Problem: Interfaces cannot have overlapping subnet by default. For example in testing environment, a “Dual-Untrust”port mode configuration connected to the same subnet as DHCP clients, the second interface cannot be enabled:

DHCP client on interface ethernet3 was offered IP xxx.xxx.xxx.xxx/255.255.224.0 and did not proceed with DHCPREQUEST. Reason — Interface: Illegal overlapping subnet

 

Resolution

1) Configure the network into different subnets

2) Enable overlapping subnet by the following command:

set vrouter trust-vr ignore-subnet-conflict

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s