[j-nsp] v6-in-v4 tunnels without tunnel PIC?
Richard A Steenbergen
ras at e-gerbil.net
Tue Sep 28 22:50:23 EDT 2004
On Thu, Sep 23, 2004 at 09:17:12PM -0400, Joe Abley wrote:
>
> I tried this out.
>
> It looks very much to me like this works in as far as you can reach the
> RE at the other end of the tunnel, and it responds to pings as you'd
> expect. I have not been able to convince a packet sent down the tunnel
> towards an "ipip" termination to continue out a real interface, though.
>
> It seems likely/possible that this is an architectural problem, and the
> solution to it is "buy a tunnel PIC".
sysctl -w net.pfe.transit_re=1
Note: You do this at your own risk, as excessive traffic can cause your RE
to blow up. Of course, as an intelligent thinking person, I think you are
perfectly capable of weighing the possible consequences and making that
decision for yourself. :)
--
Richard A Steenbergen <ras at e-gerbil.net> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
More information about the juniper-nsp
mailing list