Method used to configure the router-on-a-stick on USG firewalls

The router-on-a-stick can address the limited physical interface resources issue. By configuring multiple subinterfaces, corresponding to different VLANs, for a physical interface, a physical interface can enable different VLANs to communicate with each other.

For example, you can configure the router-on-a-stick on the USG2000, USG5000, and USG6000 as follows:
[USG] interface GigabitEthernet1/0/3.1//Configure subinterface 1.
[USG-GigabitEthernet1/0/3.1] vlan-type dot1q 10//Terminate VLAN 10.
[USG-GigabitEthernet1/0/3.1] ip address 10.3.1.1 255.255.255.0//Configure the IP address for the subinterface.
[USG-GigabitEthernet1/0/3.1] quit
[USG] interface GigabitEthernet1/0/3.2//Configure subinterface 2.
[USG-GigabitEthernet1/0/3.2] vlan-type dot1q 20//Terminate VLAN 20.
[USG-GigabitEthernet1/0/3.2] ip address 10.3.1.1 255.255.255.0//Configure the IP address for the subinterface.

Scroll to top