Re: [j-nsp] MPLS books

2009-12-06 Thread Ivan c
thanks all, appreciated Ivan On Tue, Dec 1, 2009 at 4:41 PM, Stefan Fouant sfou...@shortestpathfirst.net wrote: -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of Mark Tinka Sent: Monday, November 30, 2009 11:00 PM

[j-nsp] MPLS books

2009-11-30 Thread Ivan c
Hi, Anyone have some book recommendations on MPLS in general? cheers Ivan ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ScreenOS and VoIP and NAT

2009-11-23 Thread Ivan c
thanks Tony, I have read those examples. In the eg. the phone on one side is a SIP client/server and on the other side there is a SIP proxy and handset. My scenario is different as I have a alcatel omni box which talks SIP to the remote cisco call manager, and then hands off the RTP stream to the

Re: [j-nsp] ScreenOS and VoIP and NAT

2009-11-22 Thread Ivan c
hi Tony, thanks for replying. The problem I have is that we use a Alcatel voip system and every handset needs to talk directly rather being proxy-ed So I have a SIP server and the voip handset on my side and a partner has a sip and handsets on there side. The Recipe 8.2. Configure Hide NAT

Re: [j-nsp] ScreenOS and VoIP and NAT

2009-11-22 Thread Ivan c
was configured (all phones hide behind the same IP of 1.1.1.100) the firewall translates to the correct internal phone, in this case 192.168.1.1. On Mon, Nov 23, 2009 at 4:14 PM, Ivan c ivann...@gmail.com wrote: hi Tony, thanks for replying. The problem I have is that we use a Alcatel voip system

Re: [j-nsp] ScreenOS and VoIP and NAT

2009-11-22 Thread Ivan c
to handset? Do you actually talk SIP handset to handset, or just RTP handset to handset? -Original Message- From: Ivan c [mailto:ivann...@gmail.com] Sent: Monday, 23 November 2009 16:25 To: Tony Frank; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] ScreenOS and VoIP and NAT I am

Re: [j-nsp] ScreenOS and VoIP and NAT

2009-11-15 Thread Ivan c
if the reverse connection is desired as well: KB11901 - [Outbound direction] How to configure Source Network Address Translation (NAT-src) and source Port Address Translation (PAT). http://kb.juniper.net/KB12835 On Fri, Nov 13, 2009 at 4:38 PM, Ivan c ivann...@gmail.com wrote: Hey, I have

[j-nsp] ScreenOS and VoIP and NAT

2009-11-12 Thread Ivan c
Hey, I have a query on NAT interaction for VoIP protocols. I'll attempt some ascii art 10.0.0.0/8 192.168.1.0/30 Internal subnet Internal

Re: [j-nsp] Verifying NAT translation

2009-11-03 Thread Ivan c
hey try #show services stateful-firewall flows cheers Ivan On Fri, Oct 23, 2009 at 8:04 PM, techt...@gmail.com wrote: Hi, I have configured an SRX machine with source NAT and destination NAT as followed: set security nat source pool WAN_Address address x.x.x.x/32 set security nat

Re: [j-nsp] Juniper Traffic Monitoring

2009-10-12 Thread Ivan c
take a look at Opsview, its built on Nagios very nice cheers Ivan On Tue, Oct 13, 2009 at 7:39 AM, Paolo Lucente pl+l...@pmacct.net wrote: Hi Brendan, On Sun, Oct 11, 2009 at 11:24:36PM -0400, Brendan Mannella wrote: I have a project to gain some much needed visibility into my network. All

[j-nsp] JunOS, MPLS and WXC ISM 200

2009-10-06 Thread Ivan c
Hi, not sure if this questions was posted, trying again. Looking into enabling MPLS for some testing, but I haven't been able to find any info as to whether a WXC card will function once a J6350 (v9.4) has had MPLS enabled? I am assuming that since the WXC operates in session mode, the enabling

[j-nsp] JunOS, MPLS and WXC ISM 200

2009-10-04 Thread Ivan c
Hi, Looking into enabling MPLS for some testing, but I haven't been able to find any info as to whether a WXC card will function once a J6350 (v9.4) has had MPLS enabled? I am assuming that since the WXC operates in session mode, the enabling of MPLS and packet mode would stop the WXC from

[j-nsp] Junos 9.3r3.8 BGP

2009-07-21 Thread Ivan c
Hi Having a issue getting my J6350 to play BGP with a partners Cisco router. I defined the local loopback address in the bgp config and also with the router-id statement, but I am seeing a strange error defined below - bascially the local address can't be found. The traces just show the

Re: [j-nsp] Junos 9.3r3.8 BGP

2009-07-21 Thread Ivan c
: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] Im Auftrag von Ivan c Gesendet: Dienstag, 21. Juli 2009 09:04 An: juniper-nsp@puck.nether.net Betreff: [j-nsp] Junos 9.3r3.8 BGP Hi Having a issue getting my J6350 to play BGP with a partners Cisco router. I

Re: [j-nsp] Juniper SA appliance - IPSec tunneling

2008-10-29 Thread Ivan c
anyone have any experience with the SSL and IPSec capabilities on the following: Check Point Connectra Fortinet thanks Ivan On Thu, Oct 30, 2008 at 2:10 AM, Brandon Bennett [EMAIL PROTECTED] wrote: On Tue, Oct 28, 2008 at 7:40 PM, Ivan c [EMAIL PROTECTED] wrote: Further to that query, can

Re: [j-nsp] Juniper SA appliance - IPSec tunneling

2008-10-28 Thread Ivan c
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan c Sent: Monday, October 27, 2008 7:54 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Juniper SA appliance - IPSec tunneling Hi, Can anyone with Juniper SA experience tell me if they support

[j-nsp] Juniper SA appliance - IPSec tunneling

2008-10-27 Thread Ivan c
Hi, Can anyone with Juniper SA experience tell me if they support IPSec tunneling? I like the look of the client-less SSL stuff, but whether they can support tunneling to other IPSec devices is just as important. Thanks Ivan ___ juniper-nsp mailing

Re: [j-nsp] NSRP through 802.1Q trunks

2008-07-16 Thread Ivan c
Ethernet handoff with end-to-end L2 connectivity between both pair of devices it should work. Heck, I suppose you could even run NSRP over an L2VPN if you wanted, not sure why one would want to do so, but it's possible... HTHs. On Tue, Jul 15, 2008 at 8:54 PM, Ivan c [EMAIL PROTECTED] wrote

[j-nsp] NSRP through 802.1Q trunks

2008-07-15 Thread Ivan c
Hey, anyone have any experience with running active/passive NSRP betwen datacentres via 802.1Q trunks? specially through Nortel 5520 switches? I can't find any specific info on NSRP protocol requirements, only from the screenos cookbook, which states The only requirement is that the Layer 2

[j-nsp] VPN between Cisco Concentrator and SSG50

2008-04-14 Thread Ivan c
Hi, Has anyone setup a IPSec tunnel between a Cisco VPN Concentrator and a SSG50? Any gotchas or other issues? I have seen this, but its between IOS and a Netscreen, just wondering if there are any issues with a Concentrator?

Re: [j-nsp] Upgrade without PCMCIA card?

2008-01-08 Thread Ivan c
add the no-copy flag into your line root request system software add non-validate no-copy reboot /var/tmp/jinstall-8.5R1.14-export-signed.tgz cheers On 12/20/07, chiel [EMAIL PROTECTED] wrote: Hi all, I want to upgrade a M5 from 6.2R2.4 to 8.5R1.14. But I don't have a PCMCIA card, see

[j-nsp] frame-relay J6350 to Cisco 2611

2007-09-12 Thread Ivan c
Hi All, Looking for a little help with a frame-relay connection between a Cisco 2611 and a Juniper J6350. This is the serial interface on the J6350, which I hope can play frame-relay with IETF? http://www.juniper.net/products/jseries/dsheet/100116.pdf This is the Cisco 2611 side of the

[j-nsp] Juniper Cflow, IPFix which one

2007-08-07 Thread Ivan c
Hi All, Which standard does Juniper do? Sflow, NetFlow, IPFix, CFlow etc..? And does anyone have a open source tools to interrogate the information out of the Juniper for traffic accounting? Thanks Ivan ___ juniper-nsp mailing list

Re: [j-nsp] Juniper TACACS using Cisco ACS 3.2

2007-04-27 Thread Ivan c
! Thanks -Ashok -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ivan c Sent: Monday, April 23, 2007 1:41 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Juniper TACACS using Cisco ACS 3.2 Hi, Just wanted to see if anyway has Cisco ACS tacacs

Re: [j-nsp] Juniper TACACS using Cisco ACS 3.2

2007-04-23 Thread Ivan c
awesome, thanks and appreciate the help. cheers Ivan On 4/24/07, Brandon Bennett [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ivan c wrote: Hi -Ashok Thanks for that. Where do you place the TACACS Configuration? Is it down via the CSUtil.exe in cisco acs