[j-nsp] J-series stateful firewall / NAT architecture

2008-04-15 Thread Campbell, Alex
We currently have two J4350s running as border routers for our hosting network (multihomed to various ISPs and IXs). Because of the inevitable asymmetry in the traffic going through our border routers, we can't run stateful firewall filters on our border routers. For this reason I am looking to p

Re: [j-nsp] Juniper EX

2008-04-15 Thread Olaf Baumert - JNSP
On Tue, 15 Apr 2008 17:34:25 -0700, Jonathan Crawford <[EMAIL PROTECTED]> wrote: Hi, > Nope, only virtual* present is the virtual-chassis config. oh dear, i made a mistake ;). You are right. I had a look to an ERX instead of an EX. My fault. Best regards, Olaf _

Re: [j-nsp] Juniper EX

2008-04-15 Thread David Ball
I sat through the EX presentation given by our account team a month or 2 ago. To me, they look to have tremendous potential. However, the lack of features currently supported for an SP environment are what's keeping it out of our network for now (never mind MPLS...they can't even do QinQ yet).

Re: [j-nsp] Juniper EX

2008-04-15 Thread Rubens Kuhl Jr.
Juniper confirmed routing-instances is not supported today on the EX. It will be supported with or without MPLS with the same software release that will support MPLS. I'm still curious about how other SPs feel with the positioning and future of the EX regarding Metro Ethernet networks... Rubens

Re: [j-nsp] VPN between Cisco Concentrator and SSG50

2008-04-15 Thread Ivan c
sorry all it is a SSG20 On Tue, Apr 15, 2008 at 3:29 PM, Ivan c <[EMAIL PROTECTED]> wrote: > Hi, > > Has anyone setup a IPSec tunnel between a Cisco VPN Concentrator and a SSG50? > > Any gotchas or other issues? > > I have seen this, but its between IOS and a Netscreen, just wondering > if the

Re: [j-nsp] Juniper EX

2008-04-15 Thread Jonathan Crawford
Nope, only virtual* present is the virtual-chassis config. [EMAIL PROTECTED] edit virt? Possible completions: > virtual-chassis Virtual chassis configuration Under this version of JUNOS virtual routers live under routing-instances as instance-type virtual-router. -Jonathan -Original

Re: [j-nsp] Juniper EX

2008-04-15 Thread Olaf Baumert - JNSP
On Tue, 15 Apr 2008 15:38:08 -0700, Jonathan Crawford <[EMAIL PROTECTED]> wrote: Hi, > It has this nice error in the config block when you add it... > [EMAIL PROTECTED]> show configuration routing-instances what about virtual-routers? IIRC the ERX considers Layer1-Layer2 to the "context" default

Re: [j-nsp] Juniper EX

2008-04-15 Thread Jonathan Crawford
Rubens, It has this nice error in the config block when you add it... [EMAIL PROTECTED]> show configuration routing-instances ## ## Warning: configuration block ignored: unsupported platform (ex4200-24t) ## So I'd say that is a no... might just be a currently unsupported thing though. -Jonathan

[j-nsp] Juniper EX

2008-04-15 Thread Rubens Kuhl Jr.
I'm considering Juniper EX series for a new Metro Ethernet project, but the specs on the site haven't answered some doubts. - Does the EX has some "VRF-Lite" capability, i.e., multiple routing tables, attachment of interfaces and protocol instances to different contexts ? No MPLS involved, just pl

Re: [j-nsp] (no subject)

2008-04-15 Thread Stefan Fouant
When you do address shifting, the Netscreen will consistently translate the original source IP to a particular address from the DIP pool. So in your case, shifting from 10.1.1.5 to 1.1.10.2 1.1.10.20 will give you the following mappings: 10.1.1.5--1.1.10.2 10.1.1.6--

[j-nsp] Is it possible to include L2TP client ip address in radius accouting packet?

2008-04-15 Thread Joe Shen
hi, Is it possible to include L2Tp client IP address in radius accouting packets? we use Juniper E320 as LAC which authenticate VPDN customer with radius server. we found there is NO L2TP client IP in radius accouting packets. Is is possible to include that information as that of dial-up

Re: [j-nsp] (no subject)

2008-04-15 Thread Niels Bakker
* [EMAIL PROTECTED] (cscosunny) [Tue 15 Apr 2008, 15:29 CEST]: >I have a routing question > >I have a firewall 5gt Ethernet1 is 192.168.30.1/16 and mail server is >192.168.0.240/16 > >5gt pings mail server and vice versa in my pc I have 192.168.30.10/16 >and I have connectivity to the mail server

[j-nsp] Syslog message

2008-04-15 Thread Phil Palanchi
One of our m10i's generated the following syslog message. Slot 0, Pic slot 3 is Adaptive Services II pic. We opened a case with JTAC but haven't had a response yet. Any details would be appreciated. Apr 3 11:13:15 xxx.runet.rutgers.net Slot 0, PIC Slot 3) FUZZ: %PFE-4: L1$ single bit

[j-nsp] (no subject)

2008-04-15 Thread cscosunny
Hello I have a routing question I have a firewall 5gt Ethernet1 is 192.168.30.1/16 and mail server is 192.168.0.240/16 5gt pings mail server and vice versa in my pc I have 192.168.30.10/16 and I have connectivity to the mail server but when mask is /24 in my pc I cannot ping mail server. I un

Re: [j-nsp] weird subinterfaces on T640

2008-04-15 Thread Chuck Anderson
On Tue, Apr 15, 2008 at 12:48:05PM +0800, Plz wrote: > Alex, is there any reference about these autocreated interfaces, including > the lo0.16385 as Alain mentioned ? > i googled but got nth. I found this note in: http://www.juniper.net/techpubs/software/junos/junos73/swcmdref73-interfaces/downlo

[j-nsp] (no subject)

2008-04-15 Thread cscosunny
Hello If the set int eth3 dip 5 shift-from 10.1.1.5 1.1.10.2 1.1.10.20 How is the address assignment handled? for lets say 10.1.1.7 what ip address will he have? Thanks ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.

[j-nsp] RE : RE : LDP issue between M10i and ERX

2008-04-15 Thread samuel.gay
I have found this in the Juniper documentation. It seems interesting: https://www.juniper.net/techpubs/software/erx/junose90/swconfig-bgp-mpls/html/mpls-config13.html#2124222 Regards, Samuel De: [EMAIL PROTECTED] de la part de [EMAIL PROTECTED] Date: mar. 15/04

[j-nsp] RE : LDP issue between M10i and ERX

2008-04-15 Thread samuel.gay
> I enabled LDP on loopback (but only on the M10i side) but the result is the > same. Dont you think that running LDP on loopback is required for > establishing directed/targeted LDP session? You have to activate LDP on loopback if you want use Enhanced LDP, what is useful if you configure Ma

Re: [j-nsp] LDP issue between M10i and ERX

2008-04-15 Thread Junaid
Iftikhar and Oliver, Many thanks for your inputs. I enabled LDP on loopback (but only on the M10i side) but the result is the same. Dont you think that running LDP on loopback is required for establishing directed/targeted LDP session? Is there something I am missing on the ERX side? Regards, Ju

Re: [j-nsp] LDP issue between M10i and ERX

2008-04-15 Thread Schmidt Oliver
Woking configuration: protocols { mpls { interface ge-0/1/0.2; } ldp { interface ge-0/1/0.2; interface lo0.0; } You need the lo0 interface to establish the ldp session (Hello packages). -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EM

Re: [j-nsp] M320

2008-04-15 Thread angel
[EMAIL PROTECTED] wrote: >> I think you read this a bit differently than I. I think the issue was >> how few components are required to power up and boot an RE in an M320. >> > > I think the person who asked the question in the first place needs to > clarify it. > > >> I don't know the ans

Re: [j-nsp] LDP issue between M10i and ERX

2008-04-15 Thread Junaid
A little help required people :( Regards, Junaid On Mon, Apr 14, 2008 at 8:28 PM, Junaid <[EMAIL PROTECTED]> wrote: > Hi, > > I am trying to enable MPLS between ERX1440 and M10i routers. The > routers are connected via an Ethernet switch. I have three Cisco > routers on the same subnet a