ScreenOS Firewalls (NOT SRX)
Showing results for 
Search instead for 
Do you mean 
Reply
Contributor
Posts: 27
Registered: ‎01-12-2011
0 Kudos
Accepted Solution

Juniper ns25 VPN ospf monitor

Hello !

 

Juniper ns25. Configured OSPF. I need to configure the VPN connection uninterruptible multiple ns5gt.
At ethernet2 and ethernet3 Juniper ns25 connected unlimited Internet, now all the tunnels dynamically constructed ethernet2. Tell me how with the loss of connection to the through the ethernet2, VPN tunnels automatically started to work through the ethernet3, it is turned off tunnels that go through the ethernet2, and included tunnels going through the ethernet3.

 

Thank you!

Recognized Expert
Posts: 484
Registered: ‎03-15-2012
0 Kudos

Re: Juniper ns25 VPN ospf monitor

Hi,

 

It is difficult to check on this without the configuration.

Can you please share the config file?

 

Thanks.

Hardeep

Distinguished Expert
Posts: 4,041
Registered: ‎03-30-2009
0 Kudos

Re: Juniper ns25 VPN ospf monitor

If you are trying to achieve automatic VPN link failover using OSPF for the two tunnels, I have a configuration posted in the "Configuration Library" forum.

 

http://forums.juniper.net/t5/Configuration-Library/ScreenOS-Dual-WAN-VPN-with-OSPF/m-p/82768#M241

 

This shows how to use OSPF preferences to choose a primary tunnel and then failover to the secondary tunnel automatically.  The configuraiton shows two circuits at both sites.  But if only one site has the dual circuits you simply have the other site use two VPN tunnel interfaces and two tunnels on the same circuit to the remote site.

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA
JNCIA-ER JNCIA-EX JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV JNCIS-SSL JNCDA
JNCIS-SP
ACE PanOS 6
MCP - Managing Server 2003 MCP - Windows XP Professional
MCTS Windows 7
http://puluka.com/home
Contributor
Posts: 27
Registered: ‎01-12-2011
0 Kudos

Re: Juniper ns25 VPN ospf monitor