[j-nsp] Vpn with rsa

2008-07-16 Thread sunnyday
I need to configure (if possible ) a vpn with rsa authentication.i have some tokens which generate the tokens codes and have setup the securID server. I already have a IPSEC vpn. I need to know what steps to take to use rsa tokens to authenticate when requesting access to the vpn. Any help

Re: [j-nsp] Tunnel Services

2008-07-16 Thread sthaug
I think Erdem is right in that the ASM is optional in the M7i chassis. I'm not sure that many customers took the option of the M7i without the ASM, but the option was definitely there. The absence of the ASM does not automatically mean that a discreet Tunnel PIC *will* be installed,

[j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Abhi
Hi Everybody I have been the the JNCIS book and preparing for the exam to i came across the L2 VPNS section. Finding it difficult to identify the real world application of such L2 vpns using FR and ATM. Can anyone explain me where these are used and why. Thanks regards abhijeet.c

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Mark Tinka
On Wednesday 16 July 2008 19:21:50 Abhi wrote: I have been the the JNCIS book and preparing for the exam to i came across the L2 VPNS section. Finding it difficult to identify the real world application of such L2 vpns using FR and ATM. Can anyone explain me where these are used and why.

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Farhan Jaffer
Hi Abhi, We are providing connectivity over MPLS cloud for customers on Ethernet via L2 VPN, by separate VLAN IDs. Other type of L2 VPNs are also there deployed in many n/ws. -FJ On Wed, Jul 16, 2008 at 4:21 PM, Abhi [EMAIL PROTECTED] wrote: Hi Everybody I have been the the JNCIS book and

Re: [j-nsp] Best practice to manage log information

2008-07-16 Thread a . dhingra
According to the PR... a work around exists, and the PR is closed? What is the workaround? Thanks Anand Beny D Setyawan [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 07/15/2008 11:58 PM To [EMAIL PROTECTED], [EMAIL PROTECTED], juniper-nsp@puck.nether.net cc Subject Re: [j-nsp] Best

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Simon Chen
I have to jump in, since I am also interested :-) My question is, what do you think the cost/benefit of L2VPN over VPLS? It seems that L2VPN is restricted to point-to-point and there is a separate vrf (and a routing table) for each link, while VPLS maintains a single vrf and routing table. Have

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Abhi
And how well do L2 VPN and L2 Ciruit scale up in the SP environment and which are more preferred ones for deploying these services. thanks regards abhijeet.c - Original Message From: Farhan Jaffer [EMAIL PROTECTED] To: Abhi [EMAIL PROTECTED] Cc: Juniper Puck

Re: [j-nsp] NSRP through 802.1Q trunks

2008-07-16 Thread Stefan Fouant
You'll be fine as long as you are not expecting the Netscreen to tag the frames. Otherwise, the HA interfaces (or pseudo-HA interfaces that you've designated as such) look like regular Ethernet interfaces, so as long as you've got a normal Ethernet handoff with end-to-end L2 connectivity between

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Guy Davies
Hi Simon, Your statement that there is a separate routing table for each p2p link is not quite true. With l2vpn (as opposed to l2circuit - aka martini) there is a single routing-table for each collection of p2p links associated with a single group of customer sites which belong to a single

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread sthaug
I have to jump in, since I am also interested :-) My question is, what do you think the cost/benefit of L2VPN over VPLS? It seems that L2VPN is restricted to point-to-point and there is a separate vrf (and a routing table) for each link, while VPLS maintains a single vrf and routing table.

Re: [j-nsp] Vpn with rsa

2008-07-16 Thread Stefan Fouant
For dial-up VPN applications, you can configure an Auth or L2TP user and authenticate them against the SecurID database. I would recommend configuring an Auth user as the SecurID cannot assign remote settings to an L2TP user. Once you've configured your Auth user account and set up

Re: [j-nsp] Vpn with rsa

2008-07-16 Thread sunnyday
I have an working ipsec vpn with xauth.i use the shrew soft vpn client. can I just forward the requests to the RSA authentication manager instead of the local database? I tried it but with luck. -Original Message- From: Stefan Fouant [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 16,

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Ian MacKinnon
Steinar, Do you have any decent refs or axamples for getting started with L2circuit? ie we have an existing pure L3 set up, what do we need to do to add L2 fuctionality across multiple sites? Thanks [EMAIL PROTECTED] wrote: I have to jump in, since I am also interested :-) My question is,

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Simon Chen
Thanks a lot, guys. I definitely learned a lot from all of you :-) -Simon On Wed, Jul 16, 2008 at 10:16 AM, [EMAIL PROTECTED] wrote: I have to jump in, since I am also interested :-) My question is, what do you think the cost/benefit of L2VPN over VPLS? It seems that L2VPN is restricted to

Re: [j-nsp] Vpn with rsa

2008-07-16 Thread Stefan Fouant
Whoops, sorry I forgot to mention that you can use an IKE/XAuth account as well. Yep, if you've got it already set up, you should just be able to forward the authentication requests toward the RSA server as opposed to the local database and you should be good to go. As I mentioned before

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Mark Tinka
On Wednesday 16 July 2008 22:21:57 Ian MacKinnon wrote: Steinar, Do you have any decent refs or axamples for getting started with L2circuit? ie we have an existing pure L3 set up, what do we need to do to add L2 fuctionality across multiple sites? Apart from study guides and such, I've

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread Mark Tinka
On Wednesday 16 July 2008 21:19:47 Abhi wrote: And how well do L2 VPN and L2 Ciruit scale up in the SP environment and which are more preferred ones for deploying these services. This is likely to start a heated debate, but I guess scaling of L2VPN's comes down to the signaling +

[j-nsp] Action taken for excess traffic in a QoS voice queue

2008-07-16 Thread David Ball
Hey gang. Hoped to get a sense for how others handle excess traffic in a given queue in a QoS environment. For example, if you allocate a customer 50Mbps bronze, 30Mbps silver, 20Mbps gold service (and policers enforce these limits), do you folks opt to drop any 'gold' traffic in excess of

Re: [j-nsp] Application of L2 VPN in Real World Scenario

2008-07-16 Thread David Ball
We've been using L2VPN exclusively for PtP customers and it works just fine. Haven't tested the scalability much yet, as we have less than 100 of them on our busiest box, and it's a T-series with ample resources. I dabbled in L2Circuits recently, and found that I liked them as well, especially

Re: [j-nsp] NSRP through 802.1Q trunks

2008-07-16 Thread Ivan c
Doesn't seem to be the case though, even though logic would dictate that the switch should just pass the frames I am starting to suspect that the Nortel do not recognise the frames and thus are dropping it, as the HA interface MAC only appears on the access port and not on the trunk port.