Re: [j-nsp] SRX best practices in SP and EP networks

2011-08-14 Thread Nick Ryce
Do you have any figures for throughput required? What functionality do the SRX's need to support? Nick On 14/08/2011 02:41, uk2usa uk2...@gmail.com wrote: Experts, Please share the best practices for SRX deployment in service provider and enterprise networks? Also, recommend SRX options I

[j-nsp] NAT on M120 with MS-PIC

2011-08-14 Thread Mauritz Lewies
Hi I have a M120 with Junos 10.4 R5.5 and a MS-PIC. I'm trying to get one-one static NAT working, but alas no success. This is the relevant config: root@ZMT-ZM-LMY-MSE-001-RE1 show configuration chassis redundancy { routing-engine 0 master; routing-engine 1 backup; failover {

Re: [j-nsp] NAT on M120 with MS-PIC

2011-08-14 Thread Derick Winkworth
You need two rules actually, you have a rule for the input direction, you need a rule for the output direction as well... nat { pool 87 { address 41.72.x.86/32; } rule test-out { match-direction output; term t1 { from {

Re: [j-nsp] management daemon of M20(9.4R4.5) is not running

2011-08-14 Thread Martin T
Cold reboot of the router helped :) regards, martin 2011/8/10 Martin T m4rtn...@gmail.com: I have a Juniper M20 with Junos 9.4R4.5, which all of the sudden doesn't support SSH login: martint@martin:~ ssh 192.168.1.254 Enter passphrase for key '/home/martin/.ssh/id_dsa': --- JUNOS

Re: [j-nsp] NAT on M120 with MS-PIC

2011-08-14 Thread OBrien, Will
10.4r5 seems to need some additional tricks... At least on my mx. We also added a service filter to keep it from grabbing other traffic. Will O'Brien On Aug 14, 2011, at 6:12 PM, Derick Winkworth dwinkwo...@att.net wrote: You need two rules actually, you have a rule for the input direction,

Re: [j-nsp] NAT on M120 with MS-PIC

2011-08-14 Thread Derick Winkworth
no, thats normal... actually if sessions are always being initiated from outside in this case then he doesn't need the input direction rule... Sent from Yahoo! Mail on Android ___ juniper-nsp mailing list juniper-nsp@puck.nether.net