Re: [j-nsp] Loopback VPN termination High End SRX

2014-01-26 Thread Phil Fagan
Looks like the keywords here are anchoring VPN to an SPU. I think this involves the way RG mappings occur on SPU(s). Anyone with info/links on that mapping please share. On Wed, Jan 22, 2014 at 3:08 PM, Morgan McLean wrote: > Hi all, > > Quick question regarding terminating IKE on a lo0 interfa

Re: [j-nsp] MX-480 BGP Open message error with unknown subcode.

2014-01-26 Thread Mark Tinka
On Sunday, January 26, 2014 06:54:07 PM Misak Khachatryan wrote: > No, separate subnets. Th example above was from peering > with Mikrotik. Short of a software issue on either side of the link, might you have any reason to suspect that the remote router has physically moved farther into its ne

Re: [j-nsp] M-series IPSEC / SP interface and VRF

2014-01-26 Thread Scott Harvanek
So I finally got some time to work on this again and we found the problem it appears to be was the destination match, needed to switch to any/any matching instead. It would appear that destination address and next-hop don't mean the same thing, the actual destination needs to match the destination

Re: [j-nsp] MX-480 BGP Open message error with unknown subcode.

2014-01-26 Thread Misak Khachatryan
No, separate subnets. Th example above was from peering with Mikrotik. Sent from my iPad > On 25 հնվ, 2014 թ., at 19:29, Mark Tinka wrote: > > On Friday, January 24, 2014 03:37:33 PM Misak Khachatryan > wrote: > >> Yes, that's why it's weird. As additional info, the peers >> are Mikrotik rout