Solved

Juniper SSG5 - no connectivity

Posted on 2011-03-19
2
662 Views
Last Modified: 2012-05-11
Hi, im am trying to setup a new SSG5. I have been given small /29 subnett with public IP's and I can not get it to work.

I have added a default route, but i cannot reach anything outside fram the inside.
Can anyonw see if have i have done something wrong here?  The Untrust Eth0/0 has this config:
set interface ethernet0/0 ip 87.110.178.210/29

And the default route looks like this:
set route 0.0.0.0/0 interface ethernet0/0 gateway 87.110.178.209


I can not ping anything on the outside.

I also have setup a test D-Link router which is working on IP 87.110.178.214 so i know that the subnet is working.
-cfg-2-.txt
0
Comment
Question by:xcomiii
2 Comments
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
ID: 35173237
Your config seems to be ok. Only note I have is that you have defined the same gateway twice - once for the interface, and another one in the trust-vr vrouter setup. I would only use the interface one, and allow adding the default gateway again:
set vrouter "trust-vr"
set add-default-route
unset route 0.0.0.0/0 interface ethernet0/0 gateway 87.110.178.209
exit

Open in new window

Did you check if policy 1 is hit at all? You have setup session logging, so you should see that.
And of course you checked you can reach your default gateway?!
0
 
LVL 9

Author Comment

by:xcomiii
ID: 35173847
Thanks for your reply.
I did try to remove the second gateway, but "in use" error appeared.
However, you did point me in the right direction so i decided to restore the box to default setting and start over again, this time with only one gateway.

So now it works like dream, thank you.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Hi All,  Recently I have installed and configured a Sonicwall NS220 in the network as a firewall and Internet access gateway. All was working fine until users started reporting that they cannot use the Cisco VPN client to connect to the customer'…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now