All: First, whats up Tray?
Second, what experience do you all have with dynamic IPSec peers in JUNOS? Looking at the documentation, it seems we would practically need a public IP for every remote dynamic peer customer, since we can't share the same key with multiple customers per our security policy (only one pre-shared key per service-set, and only one service-set per public IP). Also since you can't use the same local-gateway in multiple service-sets, and obviously can't map a PIC service-interface to multiple VRFs.... that means a public IP per dynamic peer customer. For us, that would mean a lot of public IPs. Any creative workarounds out there? D _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp