Routepoint configuration archive
Typical definition for an HP routepoint:
Configuration for vlan 1731 (cscloudinet); 2010-11-18
On "dc-cs2"
router vrrp
vlan 1731
name cscloudinet
ip address 129.97.173.129/26
ip helper-address 129.97.15.253
tagged trk1
forbid trk2,trk3
ip ospf area 4
ip ospf passive
vrrp vrid 247
owner
virtual-ip-address 129.97.173.129/26
enable
exit
exit
On "dc-cs1"
router vrrp
vlan 1731
name cscloudinet
ip address 129.97.173.130/26
ip helper-address 129.97.15.253
tagged trk1
forbid trk3
ip ospf area 4
ip ospf passive
vrrp vrid 247
backup
virtual-ip-address 129.97.173.129/26
enable
exit
exit
Another HP example
Configuration for VLAN 469 (sec-net-dc2); 2010-1-27
on dc-cs2:
config
router vrrp
vlan 469
name sec-net-dc2
ip address 172.19.4.1/28 // on master dc-cs2, DNS name dc-cs2-sec-net-dc2
ip helper-address 129.97.15.253
tagged trk1
forbid trk2,trk3
ip ospf area 4
ip ospf passive
vrrp vrid 250
owner // on master dc-cs2
virtual-ip-address 172.19.4.1/28
enable
exit
exit
write memory
exit
logout
on dc-cs1:
config
router vrrp
vlan 469
name sec-net-dc2
ip address 172.19.4.2/28 // on backup dc-cs1, DNS name dc-cs1-sec-net-dc2
ip helper-address 129.97.15.253
tagged trk1
forbid trk3
ip ospf area 4
ip ospf passive
vrrp vrid 250
backup // on backup dc-cs1
virtual-ip-address 172.19.4.1/28
enable
exit
exit
write memory
exit
logout
Typical Netscreen routepoint definition
Configuration for VLAN 170 (csclient3net); 2010-4-30
Notes
This network is routed on the Netscreen firewall dc-csfw1. It is a /23 network covering the Maintain zone csclient3 (129.97.170.0 to 129.97.171.238; the balance of the CIDR block being allocated to the dynamic host facility).
Configuration
set interface "redundant2.2" tag 170 zone Zone4
set interface "Redundant2.2" ip 129.97.170.2/23
set interface "Redundant2.2" route
set interface "Redundant2.2" ip manageable
set interface "redundant2.2" manage ping
set interface "Redundant2.2" protocol rip
set interface "Redundant2.2" protocol rip enable
set interface "Redundant2.2:1" ip 129.97.170.1/23
set interface "Redundant2.2:1" route
set interface "Redundant2.2:1" ip manageable
set interface "redundant2.2:1" manage ping
set interface "Redundant2.2:1" protocol rip
set interface "Redundant2.2:1" protocol rip enable
set vrouter untrust-vr access-list 2 permit ip 129.97.170.0/23 10
set vrouter trust-vr
set access-list 3
set access-list 3 permit ip 129.97.170.0/23 1
set route-map name "rtmap1" permit 3
set match interface "redundant2.2:1"
set match ip 3
exit
exit
set interface redundant2.2:1 dhcp relay server-name "129.97.15.253"
set interface redundant2.2:1 dhcp relay server-name "129.97.15.250"
set interface redundant2.2:1 dhcp relay service
save config
Another Netscreen example
Configuration for VLAN 26 (csresearch2); 2010-9-20
Notes
This network is routed on the Netscreen firewall dc-csfw1.
Configuration
set interface "Redundant2.18" tag 26 zone Zone5
set interface "Redundant2.18" ip 129.97.26.2/24
set interface "Redundant2.18" route
set interface "Redundant2.18" ip manageable
set interface "Redundant2.18" manage ping
set interface "Redundant2.18" protocol rip
set interface "Redundant2.18" protocol rip enable
set interface "Redundant2.18:1" ip 129.97.26.1/24
set interface "Redundant2.18:1" route
set interface "Redundant2.18:1" ip manageable
set interface "Redundant2.18:1" manage ping
set interface "Redundant2.18:1" protocol rip
set interface "Redundant2.18:1" protocol rip enable
set vrouter untrust-vr access-list 2 permit ip 129.97.26.0/24 12
set vrouter trust-vr
set access-list 18
set access-list 18 permit ip 129.97.26.0/24 1
set route-map name "rtmap1" permit 18
set match interface "Redundant2.18:1"
set match ip 18
exit
exit
set interface "redundant2.18" dhcp relay server-name "129.97.15.253"
set interface "redundant2.18" dhcp relay server-name "129.97.128.9"
set interface "redundant2.18" dhcp relay server-name "129.97.129.9"
set interface "redundant2.18" dhcp relay service
set interface "redundant2.18:1" dhcp relay server-name "129.97.15.253"
set interface "redundant2.18:1" dhcp relay server-name "129.97.128.9"
set interface "redundant2.18:1" dhcp relay server-name "129.97.129.9"
set interface "redundant2.18:1" dhcp relay service
save config