Example: Configuring Icmp Router Discovery Protocol (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Related
Documentation

Example: Configuring ICMP Router Discovery Protocol (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
interface periodically or on demand. If the host is configured to listen, you can configure
the security device to send periodic advertisements. If the host explicitly sends router
solicitations, you can configure the security device to respond on demand.
Before a host can send IP datagrams beyond its directly connected subnet, it must
discover the address of at least one operational router on that subnet.IRDP is a router
discovery method that uses a pair of ICMP messages for use on multicast links. The
messages are called router advertisements (RA) and router solicitations (RS). Each
router periodically multicasts an RA from each of its multicast interfaces, announcing
the IP address(es) of that interface. Hosts discover routers simply by listening for
adverstisements. The host may send out router solicitation messages seeking immediate
advertisements at startup, rather than wait for periodic updates.
NOTE: ICMP Router Discovery Protocol (IRDP) is supported on all devices
running ScreenOS 6.3, including the SSG520.
Multicast Route Overview on page 337
Multicast Routing Table Entries Overview on page 346
Multicast Routing Table Preferences Overview on page 346
Example: Configuring Multicast Static Routes (NSM Procedure) on page 347
Example: Configuring ICMP Router Discovery Protocol (NSM Procedure) on page 349
You can enable and disable IRDP and configure or view IRDP settings using NSM. When
you enable IRDP on an interface, NSM initiates an immediate IRDP advertisement to the
network. For information about configuring an interface, see the Network and Security
Manager Administration Guide.
To configure IRDP for the trust interface:
In the NSM navigation tree, select Device Manager > Devices.
1.
Select a security device and then double-click the device on which you want to define
2.
forced timeout. The device configuration appears.
In the device navigation tree, select Network > Interface.
3.
Select a trust interface, and click Edit.
4.
In the interface navigation tree, select Protocol and select the IRDP tab.
5.
Select the Enable IRDP check box.
6.
Click OK to apply the settings.
7.
Table 85 on page 350 lists the IRDP parameters, default values, and available settings.
Chapter 10: Routing
349