[j-nsp] completely disable session (flow) in netscreen

[Michel de Nostredame]

Hi Tony,

I just put the two parameters,

set flow reverse-route clear-text prefer
set flow reverse-route tunnel prefer

into those 3 SSG boxes, but no luck there. I am re-read all documents and
wish I can find something.


Regards,
--
Michel~



On Mon, Mar 8, 2010 at 4:43 AM, Tony Frank <tony.frank at ericsson.com> wrote:

> Hi Michel,
>
> > I do have following settings in my config that related to "flow", but I
> am not sure if something I still missing...
>
> If you have not already tried, the command 'get flow' gives details of flow
> configuration.
>
> Some in particular:
>
> set flow reverse-route clear-text prefer
> set flow reverse-route tunnel prefer
>
> I believe default is 'always' and that results in dropped packets if return
> path is different.
> This should relax the route lookup rules when creating session, which may
> help your scenario.
>
> Regards,
> Tony
>
>