Configuring Virtual Security Interfaces; Example: Configuring A Redundant Interface (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Configuring Virtual Security Interfaces

Related
Documentation

Example: Configuring a Redundant Interface (NSM Procedure)

80
Configure the loopback interface:
2.
a. In the device navigation tree, select Network > Interface.
b. Click the Add icon and select Loopback Interface. The General Properties screen
appears.
c. Configure the following:
For zone, select Untrust.
For IP Address/Netmask, enter 1.1.1.27/24.
Ensure that Manageable is enabled.
Ensure that the Management IP is 1.1.1.27.
d. Click OK to save the new interface.
e. Click OK to save your changes to the device.
Setting Interface Properties Using the General Properties Screen on page 53
Example: Configuring a Multilink Interface (NSM Procedure) on page 78
Example: Configuring an Aggregate Interface (NSM Procedure) on page 77
Virtual security interfaces (VSIs) are the virtual interfaces that two security devices
forming a virtual security device (VSD) share when operating in high availability (HA)
mode. Network and VPN traffic use the IP address and virtual MAC address of a VSI. The
VSD then maps the traffic to the physical interface, subinterface, or redundant interface
to which you have previously bound the VSI. When two security devices are operating in
HA mode, you must bind security zone interfaces that you want to provide uninterrupted
service in the event of a device failover to one or more VSDs. When you bind an interface
to a VSD, the result is a VSI.
For more information about VSIs, see "NSRP Clusters Overview" on page 363.
Setting Interface Properties Using the General Properties Screen on page 53
Interface Network Address Translation Methods on page 62
Example: Configuring a Loopback Interface (NSM Procedure) on page 79
A redundant interface combines two physical interfaces to create one redundant interface,
which you can then bind to a security zone. One of the two physical interfaces acts as
the primary interface and handles all the traffic directed to the redundant interface; the
other physical interface is the secondary interface and stands by. If the primary interface
Copyright © 2010, Juniper Networks, Inc.