On Thu, Dec 19, 2013 at 6:43 AM, Eugeniu Patrascu <[email protected]> wrote: > On Thu, Dec 19, 2013 at 4:25 PM, Tom Storey <[email protected]> wrote: > >> FWIW the situation I am picturing would not require NAT or IPSEC or >> other services like that, just packet shifting with ACLs, some routing >> protocols (IS-IS/BGP), and something like VRRP for gateway redundancy. >> > You can still use IPSec. I'm not sure about NAT, but most probably you will > get it the old JUNOS way (no security zones). >
Could you share the full IPsec configuration when running J/SRX in packet-mode? Those documents I read from Juniper are describing IKE & IPSEC config under [edit security], but system refuse to take them when running in packet-mode. Thanks, ~Michel~ _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
