[j-nsp] MIP issue
SunnyDay
cscosunny at gmail.com
Tue Sep 2 10:37:42 EDT 2008
I have tried the policy config like you say but no luck.
The loopback is in the untrust zone in untrust vr
The testing zone is in VR-test. You suggest to put in the untrust vr a route
192.168.90.2 pointing to the VR-test?
-----Original Message-----
From: Stefan Fouant [mailto:sfouant at gmail.com]
Sent: Tuesday, September 02, 2008 5:06 PM
To: SunnyDay
Cc: Juniper-Nsp
Subject: Re: [j-nsp] MIP issue
On Wed, Jun 1, 2005 at 12:09 AM, SunnyDay <cscosunny at gmail.com> wrote:
> The policy is from untrust to global with source any destination MIP
> And no I dont have route.i don't understand the use of the route or what
> route to configure.
When the incoming ICMP echo-requests come into the device, does the
device know how to reach the network where those requests are coming
from so it can respond with the echo-replies?
Have you tried changing the policy from 'untrust to global' to
'untrust to testing' zone... check and see if that makes a difference.
--
Stefan Fouant
Principal Network Engineer
NeuStar, Inc. - http://www.neustar.biz
GPG Key ID: 0xB5E3803D
More information about the juniper-nsp
mailing list