ScreenOS Firewalls (NOT SRX)
Showing results for 
Search instead for 
Do you mean 
Reply
Visitor
Posts: 1
Registered: ‎08-12-2009
0 Kudos

ISG 1000 vsys vip not working

Hi guys,

 

I have an ISG 1000 running v. 6.1.0r2 which I need to get some VIP's working on it.

 

We have 3 vsys firewalls configured and connected to a new Virtual Router with a new Untrust Zone

 

When I try setting up a VIP I get an error message.

 

GUI : Vsys > Enter > Network > Interfaces > Edit > VIP > "Same as the interface IP address" 

Error :  set interface ethernet2/2.3:1 vip x.x.x.x

            unknown keyword vip

 

Any advice would be gratefully received

 

Highlighted
Trusted Contributor
Posts: 23
Registered: ‎03-17-2009
0 Kudos

Re: ISG 1000 vsys vip not working

Hi,

 

I found this KB for you:

http://kb.juniper.net/KB5521

 

Basically it states:

The NetScreen 1000 only supports Virtual IP (VIP) on the Root Virtual System (VSYS). Mapped IP (MIP) can be used on VSYS instead of VIPs for inbound connections when Network Address Translation (NAT) is being used.

 

Thanks,

Nemanja