Routing
Routing

SSG Policy-base Routing

04.16.09   |  
‎04-16-2009 08:50 PM

I have a SSG140 and dual ISP Internet links in office. I would like to utilize both ISP links and I read the manual that I can use PBR to change force default gw for different end-devices according to different information (IP, tcp/udp...). However, my question is when one of my ISP link goes down, is there any solution overriding the PBR in order to avoid the traffics still going to the dead ISP link?

 

Version: 6.0.0r2.0

 

Thx!

4 REPLIES
Routing

Re: SSG Policy-base Routing

04.17.09   |  
‎04-17-2009 02:40 PM
Yes there is. When the outgoing interface for a PBR route is down the routing falls back to destination routing. This means you can create a backup with two 0.0.0.0/0 routes with different matrix or preference.
best regards,

Screenie.
Juniper Ambassador,
JNCIA IDP AC WX JNCIS FW SSL JNCIP SEC ENT SP JNCI

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
Routing

Re: SSG Policy-base Routing

04.18.09   |  
‎04-18-2009 08:43 AM

Hi,

 

Refer to http://forums.juniper.net/jnet/board/message?board.id=Firewalls&message.id=920&query.id=687369#M920

 

HTH

Kashif Rana
JNCIE-SEC, JNCIE-ENT, JNCIE-SP, JNCIS(FWV,SSL),JNCIA(IDP,AC,WX),BIG IP-F5-LTM, CCNP
----------------------------------------------------------------------------------------------------------------------------------------

If this post was helpful, please mark this post as an "Accepted Solution".Kudos are always appreciated!
Routing

Re: SSG Policy-base Routing

04.19.09   |  
‎04-19-2009 06:18 PM

So I can use PBR on both interfaces with "set interface monitor" commands?

When the outside IP of ISP router is unreachable, the interface of SSG will be down then the PBR will be disappeared automatically?

 

Vikko

Routing

Re: SSG Policy-base Routing

04.23.09   |  
‎04-23-2009 09:53 PM

PBR with monitoring settings, does it support stateful fallback/failover?

 

Vikko