[j-nsp] SSG5 tunnel can't be bound to ip-less interface?

Sven Juergensen (KielNET) s.juergensen at kielnet.de
Fri Feb 8 01:27:53 EST 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi list,

using a route-based vpn and binding
the tunnel.x unnumbered interface to
the untrust interface e0/0 fails
unless it has a (dummy) ip address.
when trying to bind it like this:
~ set interface tunnel.1 ip unnumbered interface ethernet0/0
the e0/0 doesn't show up. This is
somewhat disturbing when using PPPoE
to get an ip address assigned.

What seems to work is to just connect
the pppoe session or put a dummy ip
address onto e0/0 and configure the
tunnel binding afterwards but this
can't be the way it is done - or is it?

Thanks and regards,

sven03

Mit freundlichen Gruessen

i. A. Sven Juergensen

- --
Fachbereich
Informationstechnologie

KielNET GmbH
Gesellschaft fuer Kommunikation
Preusserstr. 1-9, 24105 Kiel

Telefon : 0431 / 2219-053
Telefax : 0431 / 2219-005
E-Mail  : s.juergensen at kielnet.de
Internet: http://www.kielnet.de

AS# 25295

Key fingerprint:
65B6 90FC 010A 39CE DCA5  336D 9C45 3B7A B02D E132

"221 2.7.0 Error: I can break rules, too. Goodbye."

Geschaeftsfuehrer Eberhard Schmidt
HRB 4499 (Amtsgericht Kiel)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD8DBQFHq/ZpnEU7erAt4TIRAhrkAKCXgCd1hgq1QPXraDHcgpcJv+bLQgCg6k3h
e9QLdmltnFEN37tx67Z4JVQ=
=DmVw
-----END PGP SIGNATURE-----


More information about the juniper-nsp mailing list