Using Interface Protocol; Using Interface Secondary Ip; Enabling Screenos Devices For Interface Monitoring - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual
Configuring screenos devices guide
Hide thumbs
Also See for NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01:
- Manual (340 pages) ,
- Administration manual (1026 pages) ,
- Installation manual (244 pages)
Table of Contents
Advertisement
Using Interface Protocol
Related
Documentation
Using Interface Secondary IP
Related
Documentation
Enabling ScreenOS Devices for Interface Monitoring
Copyright © 2010, Juniper Networks, Inc.
You can enable and configure dynamic routing protocol and multicast protocol operations
on the interface:
For information about dynamic routing protocols (BGP, RIP, OSPF) in the virtual router
and on the interfaces, see "OSPF Protocol Configuration Overview" on page 313.
For information about multicast routing protocols (PIM-SIM, IGMP, IGMP-Proxy) and
multicast route entries, see "Multicast Route Overview" on page 337.
You can also configure RIPng protocol to the interface protocol list. For more
information, see the Concepts & Examples ScreenOS Reference Guide.
Using Interface Secondary IP on page 61
Enabling ScreenOS Devices for Interface Monitoring on page 61
Setting Interface Properties Using the General Properties Screen on page 53
This option is not available for interfaces in the Untrust zone. Each interface has a single,
unique primary IP address. You can also set one or more secondary IP addresses for the
interface.
Setting Interface Properties Using the General Properties Screen on page 53
Example: Assigning TCP/IP Settings for Hosts Using DHCP (NSM Procedure) on page 58
Using Interface Protocol on page 61
You can enable the security device to monitor the reachability of certain IP addresses
through the interface to determine interface failure. For each IP address to be tracked,
specify the following:
Interval at which pings are sent to the tracked address
Number of consecutive unsuccessful ping attempts before the connection to the
address is considered failed
Weight of the failed IP connection
Timeout for the track IP
The Failover Threshold is compared to the sum of the weights of failed IP connections.
Instead of tracking specific IP addresses, you can alternatively set the device to track the
interface's default gateway.
Chapter 3: Network Settings
61
Advertisement
Table of Contents
Need help?
Do you have a question about the NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 and is the answer not in the manual?