SRX Services Gateway
Reply
Contributor
jmartinez
Posts: 45
Registered: ‎09-28-2009
0

Fxp0 and Public IP's question

Hi to all,

 

I have two questions about SRX, the first is that i only can get access to interface fxp0.0 (ge-0/0/0 in my srx240) if i'm in the same subnet of the configured ip, even if a have configured a backup-router statetement or even if i am accessing to the primary device, is this situation correct?

 

The other question is if a i have 2 public IP's (assigned to me from my ISP) can i configure this IP's in two differents interfaces of the firewall, even if they're in the same subnet? i think that to do this is not possible with SCREENOS.

 

Thanks and regards.

Distinguished Expert
aarseniev
Posts: 1,740
Registered: ‎08-21-2009

Re: Fxp0 and Public IP's question

Hello there,

To answer Your questions:

Answer #1:

--You have to configure specific static routes with next-hop on fxp0.0-attached subnet to be able to route traffic out of master RE's fxp0.0 beyond 1st hop. "backup-router" knob only works when RPD is not up on master RE, or on backup RE.

Answer #2:

--usually JUNOS issues a warning when You assign two IP@ from same subnet to two different logical interfaces inside the same routing-instance but commits the config nevertheless. Beware though that outgoing interface choice between two interfaces with IP@ from the same subnet, and residing inside the same routing-instance (be it inet.0 or otherwise) is not deterministic: if you configure a static route with next-hop residing on said subnet, the outgoing interface choice may change between interface flaps or reboots or RPD restarts.

HTH

Regards

Alex

 

___________________________________
Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Contributor
jmartinez
Posts: 45
Registered: ‎09-28-2009
0

Re: Fxp0 and Public IP's question

Thanks for the reply!!!

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.