ssg20 adsl0/1 set up with two external IP addresses

Posted on 2009-04-21
Last Modified: 2012-05-06
We am new to Juniper and we have an SSG-20. We have been trying to setup the ADSL on this system.

We are running a server with Small Business Server 2003 on which includes MS-Exchange, the server has 2 network cards which one is the LAN and the other is for the WAN Access, the LAN is using an internal IP address range of

Our WAN network card on the server is : IP address 81.x.x.62 with a subnet mask of and the default gateway as the SSG-20  (internal) IP address of

The adsl 0/1 has an external IP address of 81.x.x.61

Our ISP issued us with 2 ip addresses which on my previous router I could connect to one ip address to the router and the other we could use Remote Desktop Connection to connect to the server.

We have our emails directed to IP address 81.x.x.62 (which is the WAN Network Card address on the server) but currently can not receive email, although I can send them out.

We currently have the LAN and the WAN Network card connect to the SSG-20 in to ethernet ports 0/2 and 0/3 which are assigned to bgroup0

We need a urgent help on this subject as we can not see where we are going wrong.

Many thanks

Question by:MahargNala
    LVL 18

    Accepted Solution

    im not a big fan of using SBS with the dual NIC configuration it forces all network traffic to route through the server which can have mixed results depending on the health and performance of the server itself. Now that you have introduced a juniper into your network you may want to retire the dual NIC configuration.

    unless there is a specific reason why you need two nics on the server, this is what you should do.

    first disbale the dual NIC config
    on the juniper WAN port, configure your ip information from the ISP.(the ip that was connected to your router)
    on the juniper LAN port configure the IP address information for you private network (
    plug the switch where your server and all your workstations are connected into the LAN port of the juniper.
    on the juniper configure a MIP (mapped IP) to map the second public ip from your ISP to the private IP of your server.
    then finally create a policy to allow traffic from the WAN to the configured MIP and allow RDP and SMTP services.

    this is a basci overview on how i've done it at serveral of my remote offices. if you need details on any specific step just let us know


    Author Comment

    Hi thanks for the reply, I take it that we need to add the MIP to the adsl0/1 port?
    LVL 18

    Assisted Solution

    I echo sangamc here, get rid of the dual NIC on the SBS.

    And yes, add the MIP to the ADSL port

    Points to note here tho, is the specific policies to be created for the SBS server.

    From untrust to trust any src > MIP address smtp/RDP permit log

    If you dont specify the MIP as the destination, things will not work
    LVL 18

    Expert Comment

    by:Sanga Collins
    deimark again!!!!

    i thought i was the only one who likes juniper devices on EE, good to know that there are others.
    LVL 18

    Expert Comment

    Apologies sangamc,didn't mean to steal your thunder. :P  Just trying to help :)


    Author Closing Comment

    Hi Sangamc & Deimark

    Thanks for your assitance it worked!

    You will see I have allocated the points 480/20 I hope this is acceptable

    Thanks again MahargNala

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Suggested Solutions

    Title # Comments Views Activity
    Weird Issues with AD GPOs 5 67
    Slow Network 51 56
    pfSense IP Helper 4 24
    NIC card with 2 RJ45 ports doesnt detect second port 1 21
    Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
    PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now