RE: Juniper router Fails

From: Paul Goyette (pgoyette@juniper.net)
Date: Mon Jan 14 2002 - 10:19:13 EST


Try adding "from protocol tcp" to your firewall filter.

-----Original Message-----
From: Dennis Ponne [mailto:dennis@garnierprojects.com]
Sent: Monday, January 14, 2002 7:07 AM
To: juniper-nsp@puck.nether.net
Subject: Juniper router Fails

Hello,

I have a M20 backbone router from juniper and last saturday i have
configured the FXP0 and I was able to ping to it. But today when i started
the router it wouldn't ping on any interface anymore.

I have tried the FastEthernet ports and the gigabit LX interfaces but with
no succes does somebody know what this problem is?

Here is my plain and simple configuration:

version 4.0R3.1;
system {
    host-name ams01;
    domain-name netholding.nl;
    login {
        class All {
            permissions all;
        }
        user test {
            uid 2000;
            class All;
            authentication {
                encrypted-password "$1$V8F2.$mA589tS.yvNbw7S2oOLzh/"; #
SECRET-D
ATA
            }
        }
    }
    services {
        telnet connection-limit 8;
    }
    syslog {
        user * {
            any emergency;
            any emergency;
        }
        file messages {
            any notice;
            authorization info;
        }
    }
}
interfaces {
    fxp0 {
        unit 0 {
            family inet {
                address 194.53.244.128/24 {
                    broadcast 194.53.244.0;
                    primary;
                }
            }
        }
    }
    lo0 {
        unit 0 {
            family inet {
                filter {
                    input Security;
                }
                address 127.0.0.1/32;
            }
        }
    }
}
firewall {
    filter Security {
        term 10 {
            from {
                source-address {
                    194.53.244.18/32;
                }
                destination-port [ telnet ftp ];
            }
            then accept;
        }
    }
}

Thanks in advance,

Dennis Ponne
NetHolding BV



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:38 EDT