Configuring A Backup Untrust Zone Interface - Juniper Networks NETSCREEN-5GT ADSL Guía De Usuario

Chapter 2 Configuring the Device

Configuring a Backup Untrust Zone Interface

By default, the adsl1 interface is the primary connection to an outside network. Each port
mode available on the NetScreen-5GT ADSL device allows you the option of connecting
either the Untrusted Ethernet port or the Modem port as a backup connection to the
outside network (see
interface to the Untrust zone and configure the interface appropriately.
Note: You can configure only one backup interface, using either the Untrusted Ethernet
port or Modem port connection. If you use the Untrusted port for the backup connection,
configure the untrust interface in Trust-Untrust port mode or the ethernet3 interface for
other port modes. If you use the Modem port for the backup connection, configure the serial
interface for all port modes.
For example, to bind the Untrust interface to the Untrust zone:
WebUI
Network > Interfaces > Edit (for the untrust interface): Select Untrust from the Zone
Name drop-down list, and then click OK.
CLI
set interface untrust zone untrust
save
You also need to set a static IP address for the Untrust interface, or specify whether the
IP address for the interface is obtained via either DHCP or PPPoE. See the "Interfaces"
chapter in the "Fundamentals" volume of the NetScreen Concepts & Examples ScreenOS
Reference Guide for ScreenOS 5.0.0 for more information about configuring interface
parameters.
When the adsl1 interface and either the Ethernet interface (named untrust or ethernet3,
depending upon the port mode) or the serial interface is bound to the Untrust zone,
interface failover is automatically configured. That is, if the adsl1 interface becomes
unavailable, the NetScreen device automatically sends traffic to the backup interface. The
device automatically sends traffic to the adsl1 interface when the adsl1 interface is again
available.
Note: Only the adsl1 interface is affected by failover. That is, if you have also configured
ADSL subinterfaces, the subinterfaces do not fail over to the backup interface.
You can also manually force failover and failback on the adsl1 interface. For more
information, see the "Interface Redundancy" chapter in the "High Availability" volume of
the NetScreen Concepts & Examples ScreenOS Reference Guide for ScreenOS 5.0.0.
22
"Changing the Port Mode" on page 20). You must bind the backup
User's Guide