Re: Juniper SRX Configuration

2013-05-23 Thread Jayapal Reddy Uradi
lt [mailto:fgaudrea...@cloudops.com] >>> Sent: Wednesday, 22 May 2013 8:17 PM >>> To: >>> Cc: Jayapal Reddy Uradi >>> Subject: Re: Juniper SRX Configuration >>> >>> >>> Hi, >>>> In network offering if you select ZONE

Re: Juniper SRX Configuration

2013-05-23 Thread Francois Gaudreault
-Original Message- From: Francois Gaudreault [mailto:fgaudrea...@cloudops.com] Sent: Wednesday, 22 May 2013 8:17 PM To: Cc: Jayapal Reddy Uradi Subject: Re: Juniper SRX Configuration Hi, In network offering if you select ZONE wide source NAT then source rules are not configured by

RE: Juniper SRX Configuration

2013-05-22 Thread Jayapal Reddy Uradi
audrea...@cloudops.com] > Sent: Wednesday, 22 May 2013 8:17 PM > To: > Cc: Jayapal Reddy Uradi > Subject: Re: Juniper SRX Configuration > > > Hi, > > In network offering if you select ZONE wide source NAT then source rules > are not configured by cloudstack. Admin/User has to

Re: Juniper SRX Configuration

2013-05-22 Thread Francois Gaudreault
Hi, In network offering if you select ZONE wide source NAT then source rules are not configured by cloudstack. Admin/User has to manually select source NAT ip and configure the source NAT rules. Ok, thanks for the precision. When you configure firewall rules, firewall filter rules on srx g

Re: Juniper SRX Configuration

2013-05-21 Thread Venkata SwamyBabu Budumuru
currently we only support SourceNat Type : Per zone and in this case, you need to manually configure source NAT in case of per Zone source NAT. On 21-May-2013, at 11:56 PM, Francois Gaudreault wrote: > Jayapal, > > I added the SRX now, I can get the basic stuff working (private interface > c

Re: Juniper SRX Configuration

2013-05-21 Thread Jayapal Reddy Uradi
In network offering if you select ZONE wide source NAT then source rules are not configured by cloudstack. Admin/User has to manually select source NAT ip and configure the source NAT rules. When you configure firewall rules, firewall filter rules on srx get configured. Please try configuring t

Re: Juniper SRX Configuration

2013-05-21 Thread Francois Gaudreault
Jayapal, I added the SRX now, I can get the basic stuff working (private interface created), but it looks like the source nat rules are not being created. Also, when I create firewall rules, they are not being created on the SRX. However, I can get the destination nat (port-forwarding) work

Re: Juniper SRX Configuration

2013-05-14 Thread Francois Gaudreault
For private interface just enable the vlan tagging. when guest network is created cloudstack will configure the interface with vlan and ip. Minimal config is. 1. set management interface with ip and use this ip for while add ing srx into cloudstack. 2. enable vlan tagging on private interfac

Re: Juniper SRX Configuration

2013-05-14 Thread Francois Gaudreault
Francois, When you finally get this up and working, will you update the wiki the pertinent bits? --David Not a bad idea :) I will. Thanks! -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect fgaudrea...@cloudops.com 514-629-6775 - - - CloudOps 420 rue Guy Montréa

Re: Juniper SRX Configuration

2013-05-14 Thread David Nalley
On Tue, May 14, 2013 at 1:03 PM, Francois Gaudreault wrote: > Hi Jayapal, > >> To add SRX device into cloudstack, you need to preconfigure the srx. SRX >> needs 3 interfaces to add into cloudstack >> 1. management interface >> 2. private/guest network interface >> 3.public interace. > > Ok. It co

Re: Juniper SRX Configuration

2013-05-14 Thread Jayapal Reddy Uradi
For private interface just enable the vlan tagging. when guest network is created cloudstack will configure the interface with vlan and ip. Minimal config is. 1. set management interface with ip and use this ip for while add ing srx into cloudstack. 2. enable vlan tagging on private interface

Re: Juniper SRX Configuration

2013-05-14 Thread Francois Gaudreault
Hi Jayapal, To add SRX device into cloudstack, you need to preconfigure the srx. SRX needs 3 interfaces to add into cloudstack 1. management interface 2. private/guest network interface 3.public interace. Ok. It confirms what I understood :) Please find the below config. It is bit old clouds

Re: Juniper SRX Configuration

2013-05-14 Thread Jayapal Reddy Uradi
Hi, To add SRX device into cloudstack, you need to preconfigure the srx. SRX needs 3 interfaces to add into cloudstack 1. management interface 2. private/guest network interface 3.public interace. Please find the below config. It is bit old cloudstak config on SRX, but it will give you idea. Yo

Juniper SRX Configuration

2013-05-14 Thread Francois Gaudreault
Hi, I saw in the wiki there is a page for SRX configuration to integrate with CloudStack. However, the steps are not really clear, and the example config link is kinda broken. Does someone have a copy of this example config somewhere? Thanks! -- Francois Gaudreault Architecte de Solution