Re: [FW-1] IPSO 4.2 Source Routing Capability

2007-12-21 Thread Tom Louis
as far as I know there is now source routing on a Nokia. I just looked in my docs for version 4.1 and I see nothing for it. If you were to provide some example of what you are needing to accomplish maybe we can assist in helping design a work around. =

[FW-1] IPSO 4.2 Source Routing Capability

2007-12-21 Thread Miguel Angel Gutierrez
Browsing previous messages from 2004, I was able to understand that NOKIA was not able to handle "source routing" on 3.2 releases... I've spend a couple of days with web reference, local providers, etc. trying to investigate if today this can be accomplished. Has any of you guys been in this posi

[FW-1] AW: [FW-1] AW: [FW-1] Office-Mode egress filtering

2007-12-21 Thread Jörg Weber
Hi Ray, > You're asking for the firewall to route Office Mode IP pool addresses > outbound but only if a particular address is assigned and in use at that > moment. Exactly ;) > You could drop the Office Mode subnet on your border router if you manage > it. Since the Office Mode addresses are enc

Re: [FW-1] AW: [FW-1] Office-Mode egress filtering

2007-12-21 Thread Ray
You're asking for the firewall to route Office Mode IP pool addresses outbound but only if a particular address is assigned and in use at that moment. I'd do a Request for Enhancement if you need that functionality built into the firewall. You could drop the Office Mode subnet on your border ro

Re: [FW-1] Slow https performance from edge nets in star VPN community

2007-12-21 Thread Reinhard Stich
hi, can you try to disable SD and AV for http as much as possible to see if it's faster then? br reinhard At 09:00 21.12.2007, you wrote: Hi all; The config is as follows: 12 Edge devices in VPN star community routing all internet traffic to the center gateway, center gateway running SPLAT,

[FW-1] AW: [FW-1] Office-Mode egress filtering

2007-12-21 Thread Jörg Weber
Ray, Reinhard, thanks for your replies! Ray, > Since you can use any IP range at all for Office Mode, it would be tough. > Why is this an issue? Because this means that a) Routing Loops can happen in complicated environments and b) Traffic can spill to the internet as far as the upstream provid

[FW-1] Slow https performance from edge nets in star VPN community

2007-12-21 Thread A. Stephen Joseph
Hi all; The config is as follows: 12 Edge devices in VPN star community routing all internet traffic to the center gateway, center gateway running SPLAT, NGX R61. At least one of the edge devices is running latest firmware. Problem: https access from the edge networks to any site on the internet i