Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
Expand all | Collapse all

Unable to set internal interface IP as a Manage IP, it asking different IP for manage IP in SSG20?

  • 1.  Unable to set internal interface IP as a Manage IP, it asking different IP for manage IP in SSG20?

    Posted 07-13-2009 23:00

    Hi,

     I have configured my Internal interface(bgroup0) as 10.147.189.51, i want to use the same ip for  Manage IP. but i cannot set the same IP. It is asking different IP from same subnet like 10.147.189.52. Please help me to resolve....

     

    This is my current setting from GUI:

     

    Name        IP/Netmask           Zone  Type Link    PPPoE   Configure

    bgroup0    10.147.189.51/24 Trust   Layer3           Up      - Edit            

    ethernet0/3       Down - Edit            

    ethernet0/4       Up - Edit

     

    From CLI:

    set interface "ethernet0/0" zone "Untrust"
    set interface "ethernet0/1" zone "DMZ"
    set interface "ethernet0/2" zone "Partner"
    set interface "bgroup0" zone "Trust"
    set interface "serial1/0" zone "Untrust"
    set interface "tunnel.1" zone "Untrust"
    set interface bgroup0 port ethernet0/3
    set interface bgroup0 port ethernet0/4
    set interface "serial1/0" encap cisco-hdlc
    unset interface vlan1 ip
    set interface ethernet0/2 ip 1xx.xxx.x.51/24
    set interface ethernet0/2 route
    set interface bgroup0 ip 10.147.189.51/24
    set interface bgroup0 route
    set interface serial1/0 ip 2X1.X2X.XX.XXX/30
    set interface serial1/0 route
    set interface tunnel.1 ip unnumbered interface serial1/0
    set interface serial1/0 mtu 1500
    set interface tunnel.1 mtu 1500
    unset interface vlan1 bypass-others-ipsec
    unset interface vlan1 bypass-non-ip
    set interface bgroup0 manage-ip 10.147.189.2 ------->  i want this is to be 10.147.189.51
    set interface ethernet0/2 ip manageable
    set interface bgroup0 ip manageable
    set interface serial1/0 ip manageable
    set interface ethernet0/0 manage ping
    set interface ethernet0/0 manage web
    set interface ethernet0/2 manage ping
    set interface serial1/0 manage ping
    set interface serial1/0 manage ssh
    set interface serial1/0 manage telnet
    set interface serial1/0 manage ssl
    set interface serial1/0 manage web

     

    Thanks In advance

       Sona



  • 2.  RE: Unable to set internal interface IP as a Manage IP, it asking different IP for manage IP in SSG20?

    Posted 07-13-2009 23:07

    you just need to run  the following:

     

     set interface bgroup0 manage (that will make the manage ip the same as interface ip).

     

    then jus turn off the options you do not need.

     

    Or you can configure using the webUI. just check the "Manageable" box. That will enable the interface IP as manage-ip



  • 3.  RE: Unable to set internal interface IP as a Manage IP, it asking different IP for manage IP in SSG20?
    Best Answer

    Posted 07-13-2009 23:36
    Thanks WL!  It works!