[j-nsp] v6-in-v4 tunnels without tunnel PIC?

Richard A Steenbergen ras at e-gerbil.net
Tue Sep 28 22:50:23 EDT 2004


On Thu, Sep 23, 2004 at 09:17:12PM -0400, Joe Abley wrote:
> 
> I tried this out.
> 
> It looks very much to me like this works in as far as you can reach the 
> RE at the other end of the tunnel, and it responds to pings as you'd 
> expect. I have not been able to convince a packet sent down the tunnel 
> towards an "ipip" termination to continue out a real interface, though.
> 
> It seems likely/possible that this is an architectural problem, and the 
> solution to it is "buy a tunnel PIC".

sysctl -w net.pfe.transit_re=1

Note: You do this at your own risk, as excessive traffic can cause your RE 
to blow up. Of course, as an intelligent thinking person, I think you are 
perfectly capable of weighing the possible consequences and making that 
decision for yourself. :)

-- 
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)


More information about the juniper-nsp mailing list