Virtual Router Configurations For Root And Vsys Overview; Zone Configurations For Root And Vsys Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Virtual Router Configurations for Root and Vsys Overview

Table 61: Virtual Router Configuration for Root and Vsys
Virtual Routers
Shared root-level virtual routers
Non-sharable vsys-level virtual
router
Related
Documentation

Zone Configurations for Root and Vsys Overview

Table 62: Zone Configuration for Root and Vsys
Zones
All shared zones
Shared Null zone
Trust-vsys_name zone
Untrust-Tun-vsys_name
zone
Copyright © 2010, Juniper Networks, Inc.
At the root level, you can configure a virtual router as shareable, enabling that VR to be
used by all vsys. By default, the untrust-vr is shared. To unshare a VR, you must remove
all assigned vsys from a shared VR.
At the vsys level, you can configure the virtual routers as described in Table 61 on page 251.
Description
By default, the root and vsys share the untrust-vr. However, you can configure a vsys to use
any VR that is shared at the root-level.
This is a vsys-specific virtual router that, by default, maintains the routing table for the
Trust-vsysname zone. By default, a vsys-level virtual router is named vsysname-vr (you can
also customize the name to make it more meaningful). All vsys-level virtual routers are
nonsharable.
Zone Configurations for Root and Vsys Overview on page 251
Vsys Configurations in NSM Overview on page 250
Interface Configurations for Root and Vsys Overview on page 252
At the root-level, you can configure a zone as shareable, enabling that zone to be used
by all vsys. To share a zone, the zone must be in a shared virtual router; however, a shared
virtual router can contain both shared and unshared zones.
NOTE: For details on configuring zones in L2V mode, see "L2V VLAN Groups
in NSM Overview" on page 260.
At the vsys level, zones are automatically created or inherited as described in Table 62
on page 251.
Description
These zones are inherited from the root device.
This zone is inherited from the root device.
This zone is created by default when you create the vsys.
This zone is created by default when you create the vsys.
Chapter 8: Configuring VPNs
251