08-12-2009 08:13 AM
Hi guys,
I have an ISG 1000 running v. 6.1.0r2 which I need to get some VIP's working on it.
We have 3 vsys firewalls configured and connected to a new Virtual Router with a new Untrust Zone
When I try setting up a VIP I get an error message.
GUI : Vsys > Enter > Network > Interfaces > Edit > VIP > "Same as the interface IP address"
Error : set interface ethernet2/2.3:1 vip x.x.x.x
unknown keyword vip
Any advice would be gratefully received
08-13-2009 04:46 AM
Hi,
I found this KB for you:
http://kb.juniper.net/KB5521
Basically it states:
The NetScreen 1000 only supports Virtual IP (VIP) on the Root Virtual System (VSYS). Mapped IP (MIP) can be used on VSYS instead of VIPs for inbound connections when Network Address Translation (NAT) is being used.
Thanks,
Nemanja