[j-nsp] J-4300 NAT and Bootp

GIULIANO (UOL) giulianocm at uol.com.br
Sat Jan 5 14:26:17 EST 2008


Hello,

We have a Juniper router J-4300 and the following situation:


0------------0----------------[]

Cable       Router            LAN


Basically we have 3 problems ...

First:

The WAN interface of the router connected to the cable modem
is fe-0/0/1

The cable modem is configured with DHCP Server Option ...
so:


system {
    autoinstallation {
        interfaces {
            fe-0/0/1 {
                bootp;
            }
        }
    }

Is it correct ?   Is there any other option for DHCP Client
using JUNOS ?

Without the next configuration (bellow) ... the router does
not install the default route:
Why ???  Isn't boot ?

routing-options {
    static {
        defaults {
            install;
        }
        route 0.0.0.0/0 {
            next-hop 189.7.36.1; --> STATIC DEFAULT ROUTE
??? 
            install;
            active;
        }
    }
}


Second:

Its impossible to fix a pool address for NAT option.

Ex:

    nat {
        pool jweb-nat-pool {
            address-range low 189.7.37.57 high 189.7.37.57;
--> IP changes every time !!!
            port automatic;
        }
        rule jweb-nat-to-wan {
            match-direction output;
            term jweb-nat-term {
                then {
                    translated {
                        source-pool jweb-nat-pool;
                        translation-type {
                            source dynamic;
                        }
                    }
                }
            }
        }
    }


... because the IP address of the WAN interface CHANGEs
every time !!!

How can I get the WAN interface IP [VAR] to install it in
address-range in an auto mode  ?

And finally ... when we apply the statefull firewall rules
... the BOOTIP stop to work !!!

    fe-0/0/1 {
        unit 0 {
            family inet {
                service {
                    input {
                        service-set
jweb-wan-sfw-service-set;
                    }
                    output {
                        service-set
jweb-wan-sfw-service-set;
                    }
                }
            }
        }
    }

How can I solve it ?

Does anyone could help ?





More information about the juniper-nsp mailing list