Source Interface-Based Routes Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Related
Documentation

Source Interface-Based Routes Overview

Copyright © 2010, Juniper Networks, Inc.
Add the first routing entry. In the Source-Based Routing Table area, click the Add icon.
5.
The New Source Routing Table dialog box appears.
Configure the following options:
6.
For IP Address, enter 10.1.1.0.
For Network Mask, enter 24.
For Interface, select ethernet1.
For Gateway, enter the IP address 1.1.1.1.
Click OK to save the new routing entry.
Add the second routing entry. In the Source-Based Routing Table area, click the Add
7.
icon. The New Source Routing Table dialog box appears.
Configure the following options:
8.
For IP Address, enter 10.1.2.0.
For Network Mask, enter 24.
For Interface, select ethernet2.
For Gateway, enter the IP address 2.2.2.2.
Click OK to save the new routing entry.
Click OK to save your changes to the device.
9.
Route Types Overview on page 295
Virtual Routers Overview on page 296
Virtual Router General Properties Overview on page 297
Access List Overview on page 298
Some security devices also enable you to configure a route entry based on the source
interface (the interface on which a data packet arrives). You can use Source
Interface-Based Routing (SIBR) to enable traffic from users on a specific subnet to be
forwarded on one path while traffic from users on a different subnet is forwarded on
another path.
NOTE: SIBR is supported in ScreenOS 5.1 and later.
SIBR can be used in conjunction with the source-based routing feature, which enables
traffic to be forwarded based on the source IP address of a data packet. When a security
device performs route lookup, the source interface-based routing table is checked first.
Chapter 10: Routing
309