Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 328

Configuring ScreenOS Devices Guide
304
Configure the route map:
6.
In the virtual router navigation tree, select Route Map, and then click the Add icon
in the main display area. The New Route Map dialog box appears.
For Name, enter rtmap1.
In the Route Map Entry area, click the Add icon. The New Route-Map Entry dialog
box appears.
Configure the following way:
7.
For Sequence Number, enter 10.
For Action, select permit.
In the Match Properties area, in the access list table, select 2.
Leave all other defaults and click OK to save the new route map entry.
Configure the export rule:
8.
In the virtual router navigation tree, select Export Rules, and then click the Add icon
in the main display area. The New Export Rule dialog box appears.
For Export to Virtual Router, select untrust-vr.
For Route Map, select rtmap1.
For Protocol, select OSPF.
Click OK to save the new export rule.
9.
Click OK to save your changes to the virtual router, and then click OK again to save
10.
your changes to the device configuration.
In this example, you configure the trust-vr to automatically export all routes to the
untrust-vr. You also configure a route map on the untrust-vr to permit only internal OSPF
routes.
To configure trust-vr:
In the NSM navigation tree, select Device Manager > Devices. Double-click the device
1.
object to open the device configuration.
In Device Manager, double-click a device icon to open the device configuration. In the
2.
device navigation tree, select Network > Virtual Routers.
Configure the export rule for the trust-vr:
3.
Double-click the trust-vr virtual router. The General Properties screen appears.
Select Auto-export route to untrust-vr.
Click OK to save your changes to the trust-vr.
Configure the route map for the untrust-vr.
4.
Double-click the trust-vr virtual router. The General Properties screen appears.
Copyright © 2010, Juniper Networks, Inc.