Screen OS

Can this be done? I can't seem to see anything in the docs thats that specific. A pointer in the right direction?

Hi,

 

You can do round robin load balancing using ECMP (equal cost multipath). This is where you will have two 0.0.0.0/0 routes and enable ECMP on the virtual router, which means that both routes will be active.

 

The other thing that you can do is PBR (policy based routing) which allows you to say which taffic goes down which connection. e.g. http down one link and e-mail down the other. More information about this can be found in the Concepts and Examples manual.

http://www.juniper.net/techpubs/software/screenos/

 

Hope this helps.

 

Regards

 

Andy

Thanks for the quick reply. I did see the the stuff on ECMP in the manual but the following blurb made me wonder if it would help.

 

"When ECMP is enabled and the outgoing interfaces are different and in NAT
mode, applications, such as HTTP, that create multiple sessions will not work
correctly. Applications, such as telnet or SSH, that create one session should work
correctly."

 

Now I will have two different interfaces but they will be in route mode (static ips that others connect to) however most traffic to the out side world will have policy based sourse address translation turned on.... where does that leave me?

Have a look at the following thread

 

http://forums.juniper.net/jnet/board/message?board.id=Firewalls&thread.id=577&page=1

 

Regards

 

Andy

So the answer comes back as No the SSG5 will not do load balancing for standard http trafic.

 

There are ways to work around it useing sourse based routing but not a dynamic solution.

 

Thanks for the help!