Screen OS

Hi,

 

As the topic says, is it possible to assign multiple ports to interfaces on a Netscreen SSG140? So that a single IP adress is attached to two ports?

Regards,

Joris

Yes - the 140 supports what are known as "bridge groups" - if you look on the I/F page you will see bridge group 0/0 to 0/2. Bridge groups allow you to group multiple interfaces together and assign them to a single I/P. You assign interfaces (or remove them) through the bind port option on the I/F config page (assuming you are using the GUI)

Well when i look at the New interfaces list i don't see "Bridge Group".

 

I do however see a Multilink IF and an redundant IF, is that the same?

No - they are not - on the I/F page in the GUI you should see broup0, bgroup1.... with zone null, and no IP - they are built, standard and you should see them. They are not visible in the CLI until you bind them to a zone:

 

set interface bgroup(NUM) zone (ZoneName)

Well they are not visible, all i see is 10 ethernet connections. I know exactly what you mean, since the SSG5 models normally ship with a default bgroup0. All i see is ethernet0/0 to ethernet 0/9.

 

Is there a way to bind a bridgegroup to a zone using the GUI?

Many thanks for helping me out, much appriciated!

I am doing this pretty much from memory - not in my office right now - I will be in later today and will take a look at an actual box - get back to you then!

Its under Network -> Interfaces. In the upper right corner, there is a dropdown list. Pull it down to "BGroup IF" and hit new. Alternatively, you can create a Redundant IF. A description of the differences between the two can be found here: http://www.juniper.net/techpubs/software/screenos/screenos6.2.0/ce_v2.pdf - Chapter 3, Page 36.

Well there's no BGroup IF option there, i guess that is because we're still running on the 5.4 firmware?

 

Multiport IF is something different i guess?

Most likely, the 140 I looked at is running 6.1r6. Per my last conversation with Juniper, that is the firmware they recommend for the 140s 🙂

Ah - 5.4 explains a lot -  bridge groups were added under 6.0 - upgrade and all will be well 🙂

Okay clear to me. Can you explain the difference between a bridge group and a multilink group?

MultiLink I/F's are used on WAN links for support for bonding for frame and PPP links - stuff like that 🙂