Interface Failover In Screenos Devices; Example: Configuring Modem Connections (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide

Interface Failover in ScreenOS Devices

Related
Documentation

Example: Configuring Modem Connections (NSM Procedure)

Table 30: Parameters for Serial Link
Parameters
Speed (BPS)
142
Interface Failover in ScreenOS Devices on page 142
The Failover is only available for some security devices. Use the Failover option to configure
the security device to switch over traffic from the primary interface to the backup interface,
and from the backup to the primary when there are both primary and backup interfaces
bound to the Untrust zone. An interface failover can occur when ScreenOS detects a
physical link problem on the primary interface connection, such as an unplugged cable.
You can also define the following types of interface failover:
When certain IP addresses become unreachable through a given interface using IP
tracking
When certain VPN tunnels on the primary untrust interface become unreachable using
VPN tunnel monitoring
You can also configure the security device to automatically switch to the backup interface
if ScreenOS detects a failure on the primary interface connection. When the connection
through the primary interface is restored, ScreenOS automatically switches traffic from
the backup interface to the primary.
By default, there is a 30-second interval before the failover occurs (the hold-down time).
You can change this interval.
For more detailed explanation about interface failover on security devices, see the "High
Availability" volume in the Concepts & Examples ScreenOS Reference Guide.
Configuring a PPPoA Client Instance on page 141
Example: Configuring Modem Connections (NSM Procedure) on page 142
Example: Creating Modem Settings (NSM Procedure) on page 143
The modem is only available for some security devices. Use the Modem option to configure
the security device for operation with an external modem. You can connect an external
modem to the RS-232 serial port on certain security devices to enable the device to
establish a PPP connection to an ISP. This provides a backup serial interface for traffic
to the Untrust zone if there is a failure on the connection through the primary interface.
You can configure the parameters for the serial link as described in Table 30 on page 142.
Range Value
The maximum baud rate for the serial link (the default rate is 115,200 bps).
Copyright © 2010, Juniper Networks, Inc.