KB: Enable multiple Netscreen Ethernet interfaces with IP addresses in the same subnet

Problem: Interfaces cannot have overlapping subnet by default. For example in testing environment, a “Dual-Untrust”port mode configuration connected to the same subnet as DHCP clients, the second interface cannot be enabled:

DHCP client on interface ethernet3 was offered IP xxx.xxx.xxx.xxx/255.255.224.0 and did not proceed with DHCPREQUEST. Reason — Interface: Illegal overlapping subnet

 

Resolution: 

1) Configure the network into different subnets

2) Enable overlapping subnet by the following command:

set vrouter trust-vr ignore-subnet-conflict