ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

Track-IP configuration

04.06.11   |  
‎04-06-2011 04:26 AM


Guys, Can somebody confirm , is this the minimum required configuration to activate Track-ip on interface so that when the physical media is down(like DSL , but interface remains up) , routes accociated with this interface are also deactivated.


set interface ethernet0/3 monitor track-ip ip x.x.x.x  weight 10

set interface ethernet0/3 monitor track-ip threshold 5

set interface ethernet0/3 monitor track-ip


Where x.x.x.x is any public ip






ScreenOS Firewalls (NOT SRX)

Re: Track-IP configuration

04.06.11   |  
‎04-06-2011 05:09 AM



To configure Track IP do the following entering the necessary information:


Track IP: Enter the IP address for the new Track IP entry.


Method: Select the method by which the NetScreen device is to poll a remote device.


  • Ping: The NetScreen device checks connectivity by pinging the target device at periodic intervals.
  • ARP: The NetScreen device checks connectivity by sending ARP requests to the target device at periodic intervals.

Weight: Enter a weight from 1 to 255 (the default is 1). By applying a weight, or a value, to a tracked IP address, you can adjust the importance of connectivity to that address in relation to reaching other tracked addresses. You can assign greater weights to relatively more important addresses, and lesser weights to relatively less important addresses. The assigned weights come into play when a tracked IP failure threshold is reached. For example, exceeding the tracked IP failure threshold for an address weighted 100 brings the master closer to device failover than would a tracked IP failure for an address weighted 10.


Interval (sec): Enter a time interval to occur between ping or ARP requests. You can set an interval between 1 and 200 seconds.


Threshold: Enter a threshold number from 1 to 200 (the default value is 3).The threshold represents the number of consecutive failures to elicit a ping or ARP response from a specific IP address required to be considered a failed attempt. Not exceeding the threshold indicates an acceptable level of connectivity with that address; exceeding it indicates an unacceptable level.


Interface: The interface from which the ping or ARP request is sent. Use “auto” to send a  request from all available interfaces until a response is received.


VSD Group ID: You can configure a tracked IP address for a specific VSD group or for the entire device.


Click OK to save your configuration and you are good to go.