[j-nsp] SSG5 tunnel can't be bound to ip-less interface?

[Stefan Fouant]

I am pretty sure this is by design.  Perhaps you can either number the
tunnel interface, or perhaps specify the Trust side interface (assuming it
is statically configured) for the number binding.

Cheers,

Stefan Fouant
On Feb 8, 2008 1:27 AM, Sven Juergensen (KielNET) <s.juergensen at kielnet.de>
wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi list,
>
> using a route-based vpn and binding
> the tunnel.x unnumbered interface to
> the untrust interface e0/0 fails
> unless it has a (dummy) ip address.
> when trying to bind it like this:
> ~ set interface tunnel.1 ip unnumbered interface ethernet0/0
> the e0/0 doesn't show up. This is
> somewhat disturbing when using PPPoE
> to get an ip address assigned.
>
> What seems to work is to just connect
> the pppoe session or put a dummy ip
> address onto e0/0 and configure the
> tunnel binding afterwards but this
> can't be the way it is done - or is it?
>
> Thanks and regards,
>
> sven03
>
> Mit freundlichen Gruessen
>
> i. A. Sven Juergensen
>
> - --
> Fachbereich
> Informationstechnologie
>
> KielNET GmbH
> Gesellschaft fuer Kommunikation
> Preusserstr. 1-9, 24105 Kiel
>
> Telefon : 0431 / 2219-053
> Telefax : 0431 / 2219-005
> E-Mail  : s.juergensen at kielnet.de
> Internet: http://www.kielnet.de
>
> AS# 25295
>
> Key fingerprint:
> 65B6 90FC 010A 39CE DCA5  336D 9C45 3B7A B02D E132
>
> "221 2.7.0 Error: I can break rules, too. Goodbye."
>
> Geschaeftsfuehrer Eberhard Schmidt
> HRB 4499 (Amtsgericht Kiel)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.7 (GNU/Linux)
>
> iD8DBQFHq/ZpnEU7erAt4TIRAhrkAKCXgCd1hgq1QPXraDHcgpcJv+bLQgCg6k3h
> e9QLdmltnFEN37tx67Z4JVQ=
> =DmVw
> -----END PGP SIGNATURE-----
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>