[j-nsp] M120 lt (Logical Tunnel) interface

[Alex]

Hello,
Please have a look into "next-hop-style service-sets" in Juniper techdocs
http://www.juniper.net/techpubs/en_US/junos11.1/topics/example/dynamic-source-nat-as-next-hop-service.html
If you remove NAT from the config and change SFW rule to "match-direction input-output", I think you can accomplish functionality similar to lt-* interface unit pair.
It is going to be more expensive to use sp-* interface unit pair than lt-* interface unit pair though.
HTH
Rgds
Alex

  ----- Original Message ----- 
  From: Mauritz Lewies 
  To: Alex 
  Cc: juniper-nsp at puck.nether.net 
  Sent: Monday, June 06, 2011 3:06 PM
  Subject: Re: [j-nsp] M120 lt (Logical Tunnel) interface


  Hi 


  Thanks for the mail. 
  Yeah I've found that as well, but there were some threads where guys stated you can do the same with a MS-PIC. However it doesn't work...


  I'll look into your suggestion about the sp- interface. You wouldn't by any chance have any docs / links on the topic?


  Tx


  Mauritz


  On 06 Jun 2011, at 3:14 PM, Alex wrote:


    Hello Mauritz,
    You need  a T-PIC on M120 to have lt-* interfaces:

    Logical tunnel (lt-) interfaces provide quite different services depending on the host router:
    On M Series and T Series routers, logical tunnel interfaces allow you to connect logical systems, virtual routers, or VPN instances. The router must be equipped with a Tunnel Services PIC or an Adaptive Services Module (only available on M7i routers).
    http://www.juniper.net/techpubs/en_US/junos11.1/topics/usage-guidelines/services-configuring-logical-tunnel-interfaces.html

    Having said that, I believe You can "emulate" lt-* interface unit pairs with sp-* interface unit pairs+"match input-output allow-all" Stateful Firewall rule to achieve same effect but I never tried that myself...

    HTH
    Rgds
    Alex

    ----- Original Message ----- From: "Mauritz Lewies" <mauritz at three6five.com>
    To: <juniper-nsp at puck.nether.net>
    Sent: Sunday, June 05, 2011 4:18 PM
    Subject: [j-nsp] M120 lt (Logical Tunnel) interface



      Hi



      Does anyone out there have lt- interfaces on a M120 Chassis with a MS-PIC.



      Been Googling for a while and there is conflicting info between users and techpub docs.

      Users saying you need Tunnel/AS or MS-pic. Techpubs saying you need Tunnel pic and that lt- is not supported on the MS-PIC...



      Any realworld users of lt- interfaces out there?



      Mauritz Lewies

      email: mo at three6five.com

      mobile: +27 83 647 4901

      Skype Phone:  +27 11 08 365 02

      three6five network solutions

      www.three6five.com



      _______________________________________________

      juniper-nsp mailing list juniper-nsp at puck.nether.net

      https://puck.nether.net/mailman/listinfo/juniper-nsp