Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 106

Configuring ScreenOS Devices Guide
82
Table 25: VSI IP Addresses
VSi IP Address
redundant1 210.1.1.1/24
redundant2 10.1.1.1/24
In this example, if the cable from ethernet1/1 becomes disconnected, the port fails over
to ethernet1/2. Consequently, all the traffic to and from devices A and B passes through
switch B. Reconnecting the cable from ethernet1/1 on device A to switch A automatically
causes that interface to regain its former priority.
To configure a redundant interface:
Add the cluster and member devices:
1.
For cluster, specify NetScreen-500 security devices running ScreenOS 5.1.
Add member Device A.
Add member Device B.
Create a VSD definition for the cluster:
2.
Double-click the Office 1 Cluster to open the cluster configuration.
In the cluster navigation tree, select Members.
In the VSD Definitions area, click the Add icon.
Enter 2, and then click OK to save the new VSD definition.
Configure the cluster network module (slot1):
3.
In the cluster navigation tree, select Network > Slot.
Double-click slot 1 to display the slot configuration dialog box. For Card Type, select
2 Interfaces (10/100).
Click OK to save the slot configuration. Repeat process to add a new network module
for slot 2.
Configure the redundant1 interface:
4.
In the cluster navigation tree, select Network > Interface.
Click the Add icon and select Redundant Interface. The General Properties screen
appears.
Configure the following options, and then click OK:
5.
For Zone, select Untrust.
For IP address/netmask, enter 210.1.1.1/24.
VSI IP Address
redundant1:1 210.1.1.2/24
redundant2:1 10.1.1.2/24
Copyright © 2010, Juniper Networks, Inc.