[j-nsp] Asymmetric flow, session reset, breaking SSH

2012-08-08 Thread Tom Storey
Hi all, hoping there is someone familiar with J Series flow handling that can help me out with this. I have a network situation (deliberate by design, not accidental in any sense) that results in asymmetric data flow. There are 3 devices involved, a PC, J2320, and a Cisco 1811. The PC is plugged

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

2012-08-08 Thread Mark Menzies
We can go about this in one of 2 ways here. 1. Remove the cisco SVI and force all the traffic to be passed through the J series 2. Add interface NAT to the initial SSH session when passing the SYN through to ge-0/0/2.10. This achieves the same aim as 1 by forcing the reply traffic back

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

2012-08-08 Thread Tom Storey
NAT is evil. :-) Removing the SVI from the Cisco seems the cleanest solution to me, allowing packets to just route naturally. Thanks. On 8 August 2012 15:08, Mark Menzies m...@deimark.net wrote: We can go about this in one of 2 ways here. 1. Remove the cisco SVI and force all the traffic to

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

2012-08-08 Thread Mark Menzies
NAT isnt evil, its just misunderstood. :) On 8 August 2012 16:06, Tom Storey t...@snnap.net wrote: NAT is evil. :-) Removing the SVI from the Cisco seems the cleanest solution to me, allowing packets to just route naturally. Thanks. On 8 August 2012 15:08, Mark Menzies m...@deimark.net