D
D
Dmitry Batin2015-03-05 00:25:10
Computer networks
Dmitry Batin, 2015-03-05 00:25:10

How to route network to wan interface of JUNIPER SRX 240H?

The following config has been compiled.
pastebin.com/QisSh2xU
Check if possible - maybe I made a mistake where?
-
Juniper srx 240 h is available.
-
local net 2 = 192.168.11.0/255 (server net)
local net 2 = 192.168.22.0/255 (work net 1)
local net 3 = 192.168.33.0/255 (work net 2)
local net 4 = 192.168.44.0/ 255 ( wi fi guest)
-
WAN 1 = 1.1.1.1 (ISP1)
arp = 2.2.2.2 (ISP1)
arp = 3.3.3.3 (ISP1)
arp= 4.4.4.4 (ISP1)
GW = 5.5.5.5 (ISP1)
-
WAN 2 = 11.22.33.44 (ISP2)
GW2 = 22.22.22.22 (ISP2)
=
I read a lot, didn't understand that I need to use VR? to route traffic. Or PBR???
=
Please show with an example how you can turn the local network of servers by default to 1,1,1,1
How to turn a separate IP from the network of servers (NAT) to 2,2,2,2 ?
-,
I will later separately try to compile a config for the rest (with rules and policies, and you check if I made a mistake where?
Help with this question. Please.
=
If possible, throw me a link on the practical application in junos of various options routing?
-
Similar functionality is implemented on D-LINK DFL 210 HERE ME
I can not transfer the logic to the juniper.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Ah Aa, 2015-03-13
@plukanin

If I understand the question correctly, then you can do it like this:
routing-options {
static {
route 0.0.0.0/0 {
next-hop 5.5.5.5;
qualified-next-hop 22.22.22.22 {
preference 100;
}
}
And provide automatic switching with RPM:
services {
rpm {
probe test {
test int-ping {
target address 5.5.5.5;
probe count 4;
probe-interval 10;
test-interval 10;
source address 1.1.1.1;
thresholds {
successive-loss 4;
total-loss 4;
rtt 2000000;
}
}
}
}
ip-monitoring {
WAN policy {
match {
rpm-probe test;
}
then {
preferred-route {
route 0.0.0.0/0 {
next-hop 22.22.22.22;
}
}
}
}

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question