The solution of SSG 556 Public Network access

The solution of SSG 556 Public Network access

Question:

Juniper firewall can only support 4 equivalent routes at most. When the number of public network connections exceeds 4, access routes cannot be established, resulting in public network lines being blocked.

Solution:

Establish a TRUST-VR-to-UNTRUST-VR route by using the virtual router UNTRUST-VR to achieve links with more than 4 lines

Steps:

1. Migrate the second Netcom line to UNTRUST-VR (in order to reduce the number of equivalent routes of TRUST-VR to 3, otherwise there are no extra routes to establish routes to UNTRUST-VR)

2. Establish a default route to UNTRUST-VR on TRUST-VR, and note that the priority is the same as other default routes, as shown in the figure:

3. Establish a default route for access on the UNTRUST-VR

4. Establish routes to each network segment