[j-nsp] J series packet mode

Michel de Nostredame d.nostra at gmail.com
Sun Feb 16 15:32:53 EST 2014


On Thu, Dec 19, 2013 at 6:43 AM, Eugeniu Patrascu <eugen at imacandi.net> wrote:
> On Thu, Dec 19, 2013 at 4:25 PM, Tom Storey <tom at snnap.net> wrote:
>
>> FWIW the situation I am picturing would not require NAT or IPSEC or
>> other services like that, just packet shifting with ACLs, some routing
>> protocols (IS-IS/BGP), and something like VRRP for gateway redundancy.
>>
> You can still use IPSec. I'm not sure about NAT, but most probably you will
> get it the old JUNOS way (no security zones).
>

Could you share the full IPsec configuration when running J/SRX in packet-mode?
Those documents I read from Juniper are describing IKE & IPSEC config
under [edit security], but system refuse to take them when running in
packet-mode.

Thanks,
~Michel~


More information about the juniper-nsp mailing list