Memorise

Howto Assign Multiple Public IP Addresses on Juniper SSG

Sharing Internet with Multiple public IP from same ISP:

ISP Router running in bridge mode
Juniper SSG5 eth0/0 doing ppoe to connect ADSL.
ISP assign Public IP block as: 217.214.17.120/29
Network range will be: 217.214.17.120- 217.214.17.127. Using /29 on 2 untrust interface will give you an error, IP overlapping. To use these IP on 2 untrust interface we will need divide these to 2 IP block of /30
i.e: 217.214.17.120/30
Network range: 217.214.17.120 – 217.214.17.123
and 217.214.17.124/30
Network range: 217.214.17.124 – 217.214.17.127

on the Juniper you will need to go to Network > Zones > Edit the untrust interface and remove tick mark from ‘Block Intra-Zone Traffic’ and in Network > Routing > Routing Entries destination route 0.0.0.0/0 going to interface that doing ADSL as the Gateway.

Tagged with:

Categorised as: Juniper, Networking