Juniper Networks Netscreen Support for Multiple ISP's

Posted on 2007-08-09
Last Modified: 2013-11-16
I am considering the purchase of a Juniper Networks Netscreen-25. However, after reading through the documentation I'm still slightly confused about some of the Netscreen's capabilities. So here's my question:

I'd like the ability to support multiple ISP's. We currently have a T-1 supporting our office of about 25 people. The T-1 also supports a IPSEC VPN with our remote office. Generally, the T-1 works well - but it gets bogged down with "junk" traffic (YouTube, internet radio, etc...). We're in advertising so, believe it our not, YouTube and similar sites are actually work-related when performing research and what not - blocking them isn't an option.

Is it possible, with the Netscreen-25 to use multiple ISP's (T-1 for mission critical application traffic, etc... and Cable or DSL for web browsing)? Are the routing capabilities of the Netscreen-25 able to utilize these multiple connections? I'd rather not have multiple gateways on my LAN, I'd like all clients to point to the Netscreen and have it handle the routing. Specifically:

1. Can the Netscreen send traffic to a specified gateway/ ISP based on protocol? (http to one ISP, and SMTP to another ISP for example)
2. Can the Netscreen route traffic to a specified gateway/ ISP based on source IP address? ( would use the T-1, all other hosts would use the cable connection)

Also, I'd like to know how complicated implementing any of the above mentioned scenarios would be.
Question by:david_brunelle
    LVL 7

    Expert Comment

    From the juniper 25 Datasheet, it only supports source based routing. It means that you can route traffic based on the source, and not protocol.
    You need policy based routing.
    I would recommend Cisco ASA 55xx

    Author Comment

    Source based routing could prove to work fine for what I'm trying to accomplish, as long as the Netscreen does it well, and it's easy to configure. Even after years of assisting in the administration of Cisco products, I still feel that the IOS and the command line in particular, requires too much specific knowledge and consumes too much time.

    I've been receiving the impression that managing the Netscreen is a bit less complex, and more intuitive. Any more specific experience about implementing source based routing and multiple ISP's on the Netscreen?
    LVL 7

    Accepted Solution

    I have never configured source based routing on a netscreen. I am logged into a netscreen right now and I can say it is very simple.
    You just provide ip address/subnet mask and then the gateway. Thats it.

    Author Comment

    Thanks Knightrider - additionally, it appears that as of ScreenOS 5.4 the NetScreen will support policy-based-routing. There's some info on policy-based-routing here: in the Concepts & Examples ScreenOS Reference Guide: Vol 7.

    Can you confirm that setting up PBR is really as simple as it sounds? Also - how would you rate your experience with Netscreen?
    LVL 7

    Expert Comment

    Hello David

    Netscreen is a reliable device and handles traffic very good. And from the command reference of netscreen, PBR looks easy to configure.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Suggested Solutions

    There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
    Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now