Vsys Limitations Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Vsys Limitations Overview

356
reassigns unused addresses, and automatically assigns IP addresses appropriate for the
subnet on which a host is connected.
NSM allows you to configure DHCP message relay from one or multiple DHCP servers
to clients within a virtual system (vsys). You can configure DHCP message relay on an
interface that is available to a virtual system.
If you have two DHCP servers, server 1 and server 2, a security device, sitting between the
DHCP servers and a client, individually passes DHCP requests to each DHCP server on
different outgoing interfaces. As each DHCP reply is received, the security device passes
them to the root vsys and then forwards them to the appropriate DHCP client within a
vsys.
To configure DHCP with vsys:
Create a vsys.
1.
Enable DHCP for that vsys.
2.
Configure a static route to allow the DHCP server in the root system to access the
3.
vsys.
Set security policies in the vsys.
4.
For more details on DHCP server configuration and settings, see the Concepts & Examples
ScreenOS Reference Guide.
Virtual Routers Overview on page 296
Virtual Router General Properties Overview on page 297
Access List Overview on page 298
Policy-Based Routing Overview on page 351
Vsys Limitations Overview on page 356
Vsys Session Limit Overview on page 358
The global maximum value for any vsys resource is dependent on the security device. If
you do not explicitly set maximum and reserved limits, the default values for the device
are used.
When setting maximum and reserved limits for resources, keep the following in mind:
You cannot set the maximum value higher than the device-dependent global maximum
value.
For all resources except sessions, you cannot set the maximum value lower than the
resources currently being used (actual-use value).
Copyright © 2010, Juniper Networks, Inc.