Re: [j-nsp] Add vlan to multiple interfaces on EX series

Sigh...from everyone's answers it appears the short answer to this question is no. I guess I'll take this up with my account team. Thanks everyone! -- matt On 7/2/09 12:25 PM, "Matt Stevens" wrote: > Is there an easy way to add a new VLAN to multiple interfaces on t

[j-nsp] Add vlan to multiple interfaces on EX series

Is there an easy way to add a new VLAN to multiple interfaces on the EX series switches? I'd like to be able to use a port range for both adding vlans to trunk ports and putting access ports into a specific vlan. Both seem to only allow actions to be performed on a single port at a time. -- matt

Re: [j-nsp] Firewall filter on IPSec tunnel

rvice-pic point of view. So what is “input” for service-pic on any interface is actually “output” for PFE on that interface and vice-versa. Hope this helps. Thanks, Nilesh On 1/28/09 10:44 AM, "Matt Stevens" wrote: That's in the services ipsec-vpn rule:

Re: [j-nsp] Firewall filter on IPSec tunnel

puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Matt Stevens Sent: Wednesday, January 28, 2009 10:24 AM To: Stefan Fouant Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Firewall filter on IPSec tunnel These are next-hop ipsec sets. For example: service-set ashburn2 {

Re: [j-nsp] Firewall filter on IPSec tunnel

er.net] On Behalf Of Matt Stevens Sent: Wednesday, January 28, 2009 10:07 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Firewall filter on IPSec tunnel Hello everyone. I'm trying to apply a filter to traffic that's entering a router via an IPSec tunnel. It doesn't seem like a

Re: [j-nsp] Firewall filter on IPSec tunnel

-gateway has been changed to protect the innocent... -- matt Stefan Fouant wrote: On Wed, Jan 28, 2009 at 1:17 PM, Matt Stevens <mailto:m...@elevate.org>> wrote: Well, the fact that I'm terminating the tunnel helps. :-) Basically, I want to apply an output filter on the tu

Re: [j-nsp] Firewall filter on IPSec tunnel

Well, the fact that I'm terminating the tunnel helps. :-) Basically, I want to apply an output filter on the tunnel interface to filter packets leaving the tunnel towards a local subnet. -- matt Stefan Fouant wrote: On Wed, Jan 28, 2009 at 1:06 PM, Matt Stevens <mailto:m...@ele

[j-nsp] Firewall filter on IPSec tunnel

Hello everyone. I'm trying to apply a filter to traffic that's entering a router via an IPSec tunnel. It doesn't seem like applying the filter to the services interfaces has any effect. I've thought about using the from interface condition in the filter, but I have a fair number of IPSec inter

Re: [j-nsp] Application Definitions

groups Groups from which to inherit configuration data |Pipe through a command [edit] l...@sizzle-re0# show groups junos-defaults applications Thanks, Nilesh On 1/23/09 2:04 PM, "Matt Stevens" wrote: Does anyone know if there's a way to see the

[j-nsp] Application Definitions

Does anyone know if there's a way to see the configuration for the "default" applications that are defined in JunOS? Ie. all the junos-XXX applications. I can't seem to find a show command that enumerates what exactly they match. -- matt ___ juniper-n

[j-nsp] J-Series Compact Flash

Just wondering what everyone else is using for Compact Flash in the J-Series. I've been using the SanDisk SDCFB-1024-A10 1GB cards that are on the Juniper compatibility list, but I've had at least two routers start complaining about corruption on the flash. I have one that's currently inacce

[j-nsp] Injecting a route into OSPF

Hi, I have a /32 that I'd like to redistribute via OSPF, the /32 is part of a larger /24 that's directly connected to an interface of the router. I don't want to advertise the whole /24 for various reasons, just the route for the singe host. Right now I have a static route: static { rou

Re: [j-nsp] J-Series 1-port SFP ePIM

That's sort of my issue as well. We have a couple of these cards being used for telco connections in colos. One seemed to work fine to a certain carrier, once we got them to enable autonegotiation on their end. Now we're trying to bring up another link, with a different carrier, and running in

[j-nsp] J-Series 1-port SFP ePIM

Is there anyone out there that can verify whether or not the 1-port SFP ePIM for the J-Series supports manually configuring the speed/duplex (disabling autonegotiation)? Apparently the 6-port uPIM does not support this, and we're running into issues getting an LX link up with a Cisco 6500. Pos

[j-nsp] Strange J-Series IPSec Issue

I'm trying to build a site-to-site IPSec tunnel with two J-4350's, but I'm running into a strange issue. The tunnel appears to be up, the two routers see each other as neighbors in OSPF, I can even ping between the two routers. In addition a host on one side can ping a host on the other side. T

Re: [j-nsp] Static NAT

tion static; > } > } > } > } > } > } > } > > Don't forget to match on applications in the rule, if necessary, to > activate ALGs. > > Now, you just add the new rule to the existing

[j-nsp] Static NAT

I'm a recent Cisco convert - trying to wrap my head around the Juniper was of dealing with NAT. I'm trying to get a setup working where I can allow inbound traffic through the NAT to specific internal machines. Ideally I'd like to be able to map things at a port level - ie. port 80 on external

[j-nsp] J-Series RAM

I'm dipping my toes into the Juniper pond for the first time - after years of dealing with Cisco. I'm looking at using the J4350 as a border router for some machines we have colo'd. From reading the archives it looks like the 4350's use pretty standard DRAM. But I can't find any mention of the