Route more than 1 public IP address through Juniper Netscreen 5gt firewall

Posted on 2009-04-17
Last Modified: 2012-05-06
We have our web services set up at a hosted facility who has given us a block of IP addresses.  Currently we are only using 1 of the IP addresses to come through our Juniper Netscreen-5gt firewall and routed to our servers.  We are adding a website to our services and want to know if its possible to use the same IP address that we're using now and route it through the Juniper firewall.
Any help is appreciated.
Thank You.
Question by:sliknick1028
    LVL 18

    Accepted Solution

    on the netscreen 5gt you can use a VIP to route a public ip to any equipment on your LAN. you can also use a MIP (mapped ip) since you have a block of static ips available. IMO Mip is a better way to go. you get more felxibility.

    post more info if you'd like specific info on getting this working

    Author Comment

    -Firewall set up in trust-untrust mode

    If we want to add another IP address route policy into the firewall configuration for the 2nd website to hit the new web servers, where exactly would we do that in the Juniper configuration?  would I need to add it in another interface (the only options for that are Loopback IF, Tunnel IF, or VSI IF) would I need to add another routing entry?  

    Another thought, I have multiple ports open in the firewall, could I plug in another connection and then another interface in the router configuration will become available??


    Author Comment

    You can disregard my last comment.  We figured it out by creating a new MIP to route to the server private IP address.  So you were correct, thank you.  
    We have it working when we set it to an internal IP address.  However it completely stops working when we use an internal IP address that is setup as an NLB cluster.  We can hit the NLB cluster internally with no problem, but externally it won't reach the page.

    Do you know what the reason for this would be?
    LVL 18

    Expert Comment

    by:Sanga Collins
    im not sure i have enough experience with NLB (network load balancing is what you meant right?) clusters to give you the exact answer.

    ill check in a couple of the juniper forums to see if anyone has more info. i put the links below as well. both sites are great assets for juniper users who do not want to pay extortion money for support.

    Author Comment

    Yes, Network load balancing.

    Thanks for checking the forums for me!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Give your grad a cloud of their own!

    With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

    Hello to you all, I hear of many people congratulate AWS (Amazon Web Services) on how easy it is to spin up and create new EC2 (Elastic Compute Cloud) instances, but then fail and struggle to connect to them using simple tools such as SSH (Secure…
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    794 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now