ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

ISG 1000 vsys vip not working

08.12.09   |  
‎08-12-2009 08:13 AM

Hi guys,


I have an ISG 1000 running v. 6.1.0r2 which I need to get some VIP's working on it.


We have 3 vsys firewalls configured and connected to a new Virtual Router with a new Untrust Zone


When I try setting up a VIP I get an error message.


GUI : Vsys > Enter > Network > Interfaces > Edit > VIP > "Same as the interface IP address" 

Error :  set interface ethernet2/2.3:1 vip x.x.x.x

            unknown keyword vip


Any advice would be gratefully received


ScreenOS Firewalls (NOT SRX)

Re: ISG 1000 vsys vip not working

08.13.09   |  
‎08-13-2009 04:46 AM



I found this KB for you:


Basically it states:

The NetScreen 1000 only supports Virtual IP (VIP) on the Root Virtual System (VSYS). Mapped IP (MIP) can be used on VSYS instead of VIPs for inbound connections when Network Address Translation (NAT) is being used.