Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Andrew Jones
7;s replies... take care.. > > Paul > > > -Original Message- > From: Ben Dale [mailto:bd...@comlinx.com.au] > Sent: Wednesday, November 03, 2010 4:31 PM > To: Paul Stewart > Cc: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] Static Routing - SRX > > Hi

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Paul Stewart
bject: Re: [j-nsp] Static Routing - SRX Hi Paul, Router-on-a-stick with SRX will break unless you have the following: set security policy from-zone Private to-zone Private policy 1ARM match source-address n192.168.20.0/24 set security policy from-zone Private to-zone Private policy 1ARM

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Ben Dale
Hi Paul, Router-on-a-stick with SRX will break unless you have the following: set security policy from-zone Private to-zone Private policy 1ARM match source-address n192.168.20.0/24 set security policy from-zone Private to-zone Private policy 1ARM match destination-address n172.30.200.0/24 set

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Crist Clark
we have "set routing-options > static route 172.30.200.0/24 next-hop 192.168.20.121". > > Thanks, > > Paul > > > > -Original Message- > From: Michael Damkot [mailto:mdamkot...@gmail.com] > Sent: Wednesday, November 03, 2010 1:55 PM > To: Paul

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Michael Damkot
"set routing-options >> static route 172.30.200.0/24 next-hop 192.168.20.121". >> >> Thanks, >> >> Paul >> >> >> >> -Original Message- >> From: Michael Damkot [mailto:mdamkot...@gmail.com] >> Sent: Wednesday,

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread OBrien, Will
@gmail.com] > Sent: Wednesday, November 03, 2010 1:55 PM > To: Paul Stewart > Cc: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] Static Routing - SRX > > Paul- > > Just to make sure I'm tracking correctly, you've tried installing a static > route and it didn&#x

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Michael Damkot
55.255.0 192.168.20.121". On the SRX we have "set routing-options > static route 172.30.200.0/24 next-hop 192.168.20.121". > > Thanks, > > Paul > > > > -Original Message- > From: Michael Damkot [mailto:mdamkot...@gmail.com] > Sent

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Paul Stewart
.com] Sent: Wednesday, November 03, 2010 1:55 PM To: Paul Stewart Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Static Routing - SRX Paul- Just to make sure I'm tracking correctly, you've tried installing a static route and it didn't work? On Nov 3, 2010, at 11:48 , Paul

Re: [j-nsp] Static Routing - SRX

2010-11-03 Thread Michael Damkot
Paul- Just to make sure I'm tracking correctly, you've tried installing a static route and it didn't work? On Nov 3, 2010, at 11:48 , Paul Stewart wrote: > Hi there. > > > > Can anyone give any suggestion/guidance on the following. > > > > I'm trying to do a static route *out* the same

[j-nsp] Static Routing - SRX

2010-11-03 Thread Paul Stewart
Hi there. Can anyone give any suggestion/guidance on the following. I'm trying to do a static route *out* the same interface that the traffic came *in* on. This is on an SRX-240 Here are the details: "Private": 192.168.20.0/24 "Public": 216.168.x.x/32 Static route: 172.30.200.0/2