Re: [j-nsp] [c-nsp] Help with an IPSec scenario

Excuse the long post, but I just want all this out in the open in case someone else finds it useful. :-) Here are my Cisco and Juniper configs for the IPSec portion. Add in the EEM script to help with updating the tunnel destination IP on the Cisco, and you'll need some kind of event script for th

Re: [j-nsp] [c-nsp] Help with an IPSec scenario

For anyone else that wants to do something like this, I whipped up a EEM applet: event manager applet update_tunnel0_dest authorization bypass event none event timer watchdog time 60 action 1.0 set ifname "Tunnel0" action 1.1 set tundest "dyndns.hostname" action 2.0 cli command "show interfac

Re: [j-nsp] [c-nsp] Help with an IPSec scenario

Hi Nick, Yeah, I dont believe Juniper support NHRP, thats a Cisco thing. I just tried replacing my Tunnel config with a Virtual-Template config, I now get an IPSec SA, and a Virtual-Access interface is created and seems to be receiving packets if I run a ping from the Juniper...! How to get an I

Re: [j-nsp] [c-nsp] Help with an IPSec scenario

Hi Tom, Try with 'general-ikeid' on SRX side under the definition of ike gateway. You might need to upgrade Junos to have that option. host@srx# set security ike gateway general-ikeid HTH, Ivan, On Fri, Mar 13, 2015 at 3:35 PM, Tom Storey wrote: > Hi everyone, > > Trying to establish an IP

[j-nsp] Help with an IPSec scenario

Hi everyone, Trying to establish an IPSec tunnel (route based) between a Juniper SRX and a Cisco IOS router. The topology is two routers with DSL services, the SRX is on a dynamic IP, the Cisco on a static. No NAT is involved in the path between the two routers. Heres the configs Im working on:

Re: [j-nsp] how to see users

* "Aaron" > I have a user "a" I've config'd. I see that I can view it within the > config. > > Also, I see that I can see users actively logged in. > > But how do I show users that are configured without viewing it in the > config file? file show /etc/passwd | match "/cli$" Tore ___

[j-nsp] MX/Trio, mirror IRB egress traffic with VLANs

Hey, Consider traffic flow: MPLS_core => irb => virtual-switch => IFL As far as I can see, there is no way to mirror this traffic with VLAN headers intact? a) irb output filter sees traffic, but not VLAN b) virtual-switch forwarding-options filter input does not see IRB traffic c) IFL famil