<html><head><title>Re: [j-nsp] Load Balancing on 2x MSPIC 100 for NAT</title>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
</head>
<body>
<span style=" font-family:'Courier New'; font-size: 9pt;">Very nice trick:)<br>
Even found on juniper-nsp<br>
</span><a style=" font-family:'Courier New'; font-size: 9pt;" href="http://puck.nether.net/pipermail/juniper-nsp/2006-February/006094.html">http://puck.nether.net/pipermail/juniper-nsp/2006-February/006094.html</a><br>
<br>
<span style=" font-family:'Courier New'; font-size: 9pt;">Thanks guys!<br>
<br>
Peter<br>
</span><table>
<tr>
<td width=10 bgcolor= #0000ff><br>
</td>
<td width=1106><br><br>
<span style=" font-family:'courier new'; font-size: 9pt;">5) Create the service-filters:<br>
<br>
set firewall family inet service-filter SS_PART1_FILTER term part1 from source-<br>
address </span><a style=" font-family:'courier new'; font-size: 9pt;" href="http://10.100.0.0/17">10.100.0.0/17</a><br>
<span style=" font-family:'courier new'; font-size: 9pt;">set firewall family inet service-filter SS_PART1_FILTER term part1 then service<br>
set firewall family inet service-filter SS_PART1_FILTER term default then skip<br>
set firewall family inet service-filter SS_PART2_FILTER term part2 from source-<br>
address </span><a style=" font-family:'courier new'; font-size: 9pt;" href="http://10.100.128.0/17">10.100.128.0/17</a><br>
<span style=" font-family:'courier new'; font-size: 9pt;">set firewall family inet service-filter SS_PART2_FILTER term part2 then service<br>
set firewall family inet service-filter SS_PART2_FILTER term default then skip<br>
<br>
<br>
There's a trick to reach more accurate manual LB. Something like:<br>
<br>
set firewall family inet service-filter SS_PART1_FILTER term part1 from source-address </span><a style=" font-family:'courier new'; font-size: 9pt;" href="http://10.100.0.0/255.255.0.1">10.100.0.0/255.255.0.1</a><br>
<span style=" font-family:'courier new'; font-size: 9pt;">...<br>
set firewall family inet service-filter SS_PART2_FILTER term part1 from source-address </span><a style=" font-family:'courier new'; font-size: 9pt;" href="http://10.100.0.1/255.255.0.1">10.100.0.1/255.255.0.1</a><br>
<br>
<span style=" font-family:'courier new'; font-size: 9pt;">Even addresses go left, odd ones go right. Does not matter how your 10.100/16 is divided into subnets, how many subscribers you have in each half or whatever.</td>
</tr>
</table>
<br><br>
<br>
<br>
<span style=" font-family:'arial'; color: #c0c0c0;"><i>-- <br>
Best regards,<br>
Pajlatek </i></span><a style=" font-family:'arial';" href="mailto:pajlatek@widzew.net">mailto:pajlatek@widzew.net</a></body></html>