Re: [j-nsp] Juniper IPSEC VPN

2010-05-06 Thread Nick Ryce
o make a difference. Nick -Original Message- From: Kerry Milestone [mailto:k...@sanger.ac.uk] Sent: 06 May 2010 15:32 To: Nick Ryce Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Juniper IPSEC VPN Hi, i batteed me head on this one... turns out, to get our VPN stable even though the Che

Re: [j-nsp] Juniper IPSEC VPN

2010-05-06 Thread Kerry Milestone
unnel working with an ASA5510? Nick From: Nicholas Oas [mailto:nicholas@gmail.com] Sent: 30 April 2010 13:03 To: Nick Ryce Subject: Re: [j-nsp] Juniper IPSEC VPN -- -- .- Kerry Milestone -. .- Senior Systems Administrator -. .- Networks T

Re: [j-nsp] Juniper IPSEC VPN

2010-05-04 Thread Asad Raza
Dear Nick, You could check your IPSec logs to dig down the exact reason due to which tunnel is dropping. It must be some parameter mismatch. Normally if your establish tunnel between cisco devices and there is a parameter mismatch, the tunnel wont establish. but incase of juniper the tunnel will e

Re: [j-nsp] Juniper IPSEC VPN

2010-05-03 Thread Joe C
Nick, I have set up IPsec tunnels between Juniper SRX 240 (started with 9.6, current one is a 10.x) and Cisco ISR and, the devil hides in the small details. Off the top of my head, I remember the lifetime defaults on both cisco and Juniper don't get along and I found the SRX setting a lifetime

Re: [j-nsp] Juniper IPSEC VPN

2010-05-03 Thread Nick Ryce
: Nick Ryce Subject: Re: [j-nsp] Juniper IPSEC VPN OFF-LIST PRIVATE RESPONSE. Spec sheet of "1000265-en.pdf" indicates a j2320 should be able to do 140mb/s IPsec VPN... Also 1000206-en.pdf says that crypto module you found is for a 2350 only. If you are not pushing more than that

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Derick Winkworth
Can you share a sanitized config? From: Nick Ryce To: "juniper-nsp@puck.nether.net" Sent: Fri, April 30, 2010 4:08:21 AM Subject: [j-nsp] Juniper IPSEC VPN Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Chris Evans
ld be able to hand a couple of hundred vpn tunnels so not sure if that would be? Is there a hardware encryption module for the junipers? Nick *From:* Chris Evans [mailto:chrisccnpsp...@gmail.com] *Sent:* 30 April 2010 12:13 *To:* Nick Ryce *Cc:* juniper-nsp@puck.nether.net *Subject:* Re: [j-ns

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Just found JXH-HC2-S Might give that a try but its an expensive 'punt' Nick From: Chris Evans [mailto:chrisccnpsp...@gmail.com] Sent: 30 April 2010 12:13 To: Nick Ryce Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Juniper IPSEC VPN The asa has a hardware encryption engin

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Subject: Re: [j-nsp] Juniper IPSEC VPN The asa has a hardware encryption engine in it. I don't believe that the j series router has one. That is the root of your problem I would say. On Apr 30, 2010 5:13 AM, "Nick Ryce" mailto:nick.r...@lumison.net>> wrote: Is there a default

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Chris Evans
The asa has a hardware encryption engine in it. I don't believe that the j series router has one. That is the root of your problem I would say. On Apr 30, 2010 5:13 AM, "Nick Ryce" wrote: Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an 1812 where the ipsec

[j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an 1812 where the ipsec tunnel was running near full speed on a 10 meg link. We swapped the 1812 with a 2320 running 9.6R2.8 and we are seeing lost packets and slow throughput. The tunnel does not drop once es