ScreenOS Firewalls (NOT SRX)
Reply
Visitor
Camspol-NetTeam
Posts: 1
Registered: ‎08-12-2009
0

ISG 1000 vsys vip not working

Hi guys,

 

I have an ISG 1000 running v. 6.1.0r2 which I need to get some VIP's working on it.

 

We have 3 vsys firewalls configured and connected to a new Virtual Router with a new Untrust Zone

 

When I try setting up a VIP I get an error message.

 

GUI : Vsys > Enter > Network > Interfaces > Edit > VIP > "Same as the interface IP address" 

Error :  set interface ethernet2/2.3:1 vip x.x.x.x

            unknown keyword vip

 

Any advice would be gratefully received

 

Trusted Contributor
Nemanja
Posts: 23
Registered: ‎03-17-2009
0

Re: ISG 1000 vsys vip not working

Hi,

 

I found this KB for you:

http://kb.juniper.net/KB5521

 

Basically it states:

The NetScreen 1000 only supports Virtual IP (VIP) on the Root Virtual System (VSYS). Mapped IP (MIP) can be used on VSYS instead of VIPs for inbound connections when Network Address Translation (NAT) is being used.

 

Thanks,

Nemanja

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.