Learn how to a build a cloud-first strategyRegister Now


ssg20 adsl0/1 set up with two external IP addresses

Posted on 2009-04-21
Medium Priority
Last Modified: 2012-05-06
We am new to Juniper and we have an SSG-20. We have been trying to setup the ADSL on this system.

We are running a server with Small Business Server 2003 on which includes MS-Exchange, the server has 2 network cards which one is the LAN and the other is for the WAN Access, the LAN is using an internal IP address range of

Our WAN network card on the server is : IP address 81.x.x.62 with a subnet mask of and the default gateway as the SSG-20  (internal) IP address of

The adsl 0/1 has an external IP address of 81.x.x.61

Our ISP issued us with 2 ip addresses which on my previous router I could connect to one ip address to the router and the other we could use Remote Desktop Connection to connect to the server.

We have our emails directed to IP address 81.x.x.62 (which is the WAN Network Card address on the server) but currently can not receive email, although I can send them out.

We currently have the LAN and the WAN Network card connect to the SSG-20 in to ethernet ports 0/2 and 0/3 which are assigned to bgroup0

We need a urgent help on this subject as we can not see where we are going wrong.

Many thanks

Question by:MahargNala
  • 2
  • 2
  • 2
LVL 18

Accepted Solution

Sanga Collins earned 1920 total points
ID: 24196184
im not a big fan of using SBS with the dual NIC configuration it forces all network traffic to route through the server which can have mixed results depending on the health and performance of the server itself. Now that you have introduced a juniper into your network you may want to retire the dual NIC configuration.

unless there is a specific reason why you need two nics on the server, this is what you should do.

first disbale the dual NIC config
on the juniper WAN port, configure your ip information from the ISP.(the ip that was connected to your router)
on the juniper LAN port configure the IP address information for you private network (
plug the switch where your server and all your workstations are connected into the LAN port of the juniper.
on the juniper configure a MIP (mapped IP) to map the second public ip from your ISP to the private IP of your server.
then finally create a policy to allow traffic from the WAN to the configured MIP and allow RDP and SMTP services.

this is a basci overview on how i've done it at serveral of my remote offices. if you need details on any specific step just let us know


Author Comment

ID: 24196225
Hi thanks for the reply, I take it that we need to add the MIP to the adsl0/1 port?
LVL 18

Assisted Solution

deimark earned 80 total points
ID: 24196297
I echo sangamc here, get rid of the dual NIC on the SBS.

And yes, add the MIP to the ADSL port

Points to note here tho, is the specific policies to be created for the SBS server.

From untrust to trust any src > MIP address smtp/RDP permit log

If you dont specify the MIP as the destination, things will not work
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

LVL 18

Expert Comment

by:Sanga Collins
ID: 24196522
deimark again!!!!

i thought i was the only one who likes juniper devices on EE, good to know that there are others.
LVL 18

Expert Comment

ID: 24196878
Apologies sangamc,didn't mean to steal your thunder. :P  Just trying to help :)


Author Closing Comment

ID: 31572819
Hi Sangamc & Deimark

Thanks for your assitance it worked!

You will see I have allocated the points 480/20 I hope this is acceptable

Thanks again MahargNala

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question