[j-nsp] J-4300 NAT and Bootp
    GIULIANO (UOL) 
    giulianocm at uol.com.br
       
    Sat Jan  5 14:26:17 EST 2008
    
    
  
Hello,
We have a Juniper router J-4300 and the following situation:
0------------0----------------[]
Cable       Router            LAN
Basically we have 3 problems ...
First:
The WAN interface of the router connected to the cable modem
is fe-0/0/1
The cable modem is configured with DHCP Server Option ...
so:
system {
    autoinstallation {
        interfaces {
            fe-0/0/1 {
                bootp;
            }
        }
    }
Is it correct ?   Is there any other option for DHCP Client
using JUNOS ?
Without the next configuration (bellow) ... the router does
not install the default route:
Why ???  Isn't boot ?
routing-options {
    static {
        defaults {
            install;
        }
        route 0.0.0.0/0 {
            next-hop 189.7.36.1; --> STATIC DEFAULT ROUTE
??? 
            install;
            active;
        }
    }
}
Second:
Its impossible to fix a pool address for NAT option.
Ex:
    nat {
        pool jweb-nat-pool {
            address-range low 189.7.37.57 high 189.7.37.57;
--> IP changes every time !!!
            port automatic;
        }
        rule jweb-nat-to-wan {
            match-direction output;
            term jweb-nat-term {
                then {
                    translated {
                        source-pool jweb-nat-pool;
                        translation-type {
                            source dynamic;
                        }
                    }
                }
            }
        }
    }
... because the IP address of the WAN interface CHANGEs
every time !!!
How can I get the WAN interface IP [VAR] to install it in
address-range in an auto mode  ?
And finally ... when we apply the statefull firewall rules
... the BOOTIP stop to work !!!
    fe-0/0/1 {
        unit 0 {
            family inet {
                service {
                    input {
                        service-set
jweb-wan-sfw-service-set;
                    }
                    output {
                        service-set
jweb-wan-sfw-service-set;
                    }
                }
            }
        }
    }
How can I solve it ?
Does anyone could help ?
    
    
More information about the juniper-nsp
mailing list