In this scenario, we need to configure the SRX Series device so that devices in the Local zone (VLAN

10, 10.1.1.0/24 network) can communicate with each other but not with other networks or the SRX

itself. Additionally, you must be able to apply security policies to traffic flows between the devices in

the Local zone.

Explanation of Answer A (Assigning Interface to Security Zone):

You need to assign the interface ge-0/0/1.0 to the Local security zone. This is crucial because the SRX

only applies security policies to interfaces assigned to security zones. Without this, traffic between

devices in the Local zone won't be processed by security policies.

Configuration:

set security zones security-zone Local interfaces ge-0/0/1.0

Explanation of Answer B (Configuring Ethernet-Switching for VLAN 10):

Since we are using Layer 2 switching between devices in VLAN 10, we need to configure the interface

to operate in Ethernet switching mode and assign it to VLAN 10.

Configuration:

set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan-members 10

Explanation of Answer D (Transparent Bridging Mode for Layer 2):

The global mode for Layer 2 switching on the SRX device must be set to transparent-bridge. This

ensures that the SRX operates in Layer 2 mode and can switch traffic between devices without

routing.

Configuration:

set protocols l2-learning global-mode transparent-bridge

Summary:

Interface Assignment: Interface ge-0/0/1.0 is assigned to the Local zone to allow policy enforcement.

Ethernet-Switching: The interface is configured for Layer 2 Ethernet switching in VLAN 10.

Transparent Bridging: The SRX is configured in Layer 2 transparent-bridge mode for switching

between devices.

Juniper Security Reference:

Layer 2 Bridging and Switching Overview: This mode allows the SRX to act as a Layer 2 switch for

forwarding traffic between VLAN members without routing. Reference: Juniper Transparent Bridging

Documentation.