Solved

Juniper failover scenario

Posted on 2011-09-26
2
558 Views
Last Modified: 2012-05-12
We have an office that has 2 internet ISPs, a comcast circuit their primary and another one that is an integrated voice/data circuit that I would like to use as a failover.  

Would i just create 2 routes, one to the comcast and one to the integrated voice/data and give the comcast one a lower administrative distance value so that it is primary?  or is it not quite that easy?
0
Comment
Question by:techlinden
2 Comments
 

Accepted Solution

by:
techlinden earned 0 total points
Comment Utility
nevermind.  i think i see how to do this.  i found this online.  http://kb.juniper.net/InfoCenter/index?page=content&id=KB8704
0
 
LVL 18

Expert Comment

by:Sanga Collins
Comment Utility
I do the same thing a little differently. By putting the secondary interface in a custom zone in the untrust-vr. You can have both interfaces active at the same time. each VR can have its own default route. and in the trust-vr i make the failover route as follows: 0.0.0.0/0 --> untrust-vr, metric = 25.

When primary interface goes down, the new default route will send traffic to the untrust-vr and out to the internet. It allows me to use both connections for different services like web traffic out of connection #1 and server traffic out of vpn on connection #2 while still providing failover. You can also do the same default route 0.0.0.0/0 --> trust-vr, metric = 25 to have failover in both directions!
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
Optimal Xbox 360 connectivity requires "OPEN NAT". If you use Juniper Netscreen or SSG firewall products in a home setting, the following steps will allow you get rid of the dreaded warning screen below and achieve the best online gaming environment…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

6 Experts available now in Live!

Get 1:1 Help Now