Datasheet

8 Copyright © 2010, Juniper Networks, Inc.
APPLICATION NOTE - Configuring the CX111 for the SSG Series
set zone “Trust” vrouter “trust-vr”
set zone “Untrust” vrouter “trust-vr”
set zone id 100 “Management”
set interface “ethernet0/0” zone “Untrust”
set interface “ethernet0/1” zone “Untrust”
set interface “ethernet0/1.1” tag 3900 zone “Management”
set interface “bgroup0” zone “Trust”
set interface bgroup0 port ethernet0/2
set interface bgroup0 port ethernet0/3
set interface bgroup0 port ethernet0/4
set interface bgroup0 port ethernet0/5
set interface bgroup0 port ethernet0/6
set interface ethernet0/0 ip 198.1.1.1/24
set interface ethernet0/1 dhcp client enable
set interface ethernet0/1.1 ip 192.168.0.10/24
set interface bgroup0 ip 192.168.1.1/24
set interface ethernet0/0 monitor track-ip ip
set interface ethernet0/0 monitor track-ip ip 198.0.0.1 interval 5
set interface ethernet0/0 monitor track-ip ip 198.0.0.1 weight 255
set interface ethernet0/0 backup interface ethernet0/1 type track-ip
set interface bgroup0 dhcp server service
set interface bgroup0 dhcp server enable
set interface bgroup0 dhcp server option dns1 192.168.1.1
set interface bgroup0 dhcp server ip 192.168.1.2 to 192.168.1.20
Figure 5: Backup interface using track-ip
When using track-ip, the backup interface connecting to the CX111 will be disabled as long as the primary link is active
(that is, as long as the probes are responding). This is useful when using on-demand mode, as it will guarantee that
the modem will be disconnected while the primary link is up.
192.168.1.0/24
Trust Zone
CX111
SSG Series
e0/0
198.0.0.1
e0/1
OFFICE
INTERNET
Backup Scenario
e0/0 is used as the primary link (static public IP).
e0/1 connects to the CX111 (DHCP) and is used as a backup.
TRACK-IP
Monitored server used to test the primary link