Hello, Please have a look into "next-hop-style service-sets" in Juniper techdocs http://www.juniper.net/techpubs/en_US/junos11.1/topics/example/dynamic-source-nat-as-next-hop-service.html If you remove NAT from the config and change SFW rule to "match-direction input-output", I think you can accomplish functionality similar to lt-* interface unit pair. It is going to be more expensive to use sp-* interface unit pair than lt-* interface unit pair though. HTH Rgds Alex
----- Original Message ----- From: Mauritz Lewies To: Alex Cc: [email protected] Sent: Monday, June 06, 2011 3:06 PM Subject: Re: [j-nsp] M120 lt (Logical Tunnel) interface Hi Thanks for the mail. Yeah I've found that as well, but there were some threads where guys stated you can do the same with a MS-PIC. However it doesn't work... I'll look into your suggestion about the sp- interface. You wouldn't by any chance have any docs / links on the topic? Tx Mauritz On 06 Jun 2011, at 3:14 PM, Alex wrote: Hello Mauritz, You need a T-PIC on M120 to have lt-* interfaces: Logical tunnel (lt-) interfaces provide quite different services depending on the host router: On M Series and T Series routers, logical tunnel interfaces allow you to connect logical systems, virtual routers, or VPN instances. The router must be equipped with a Tunnel Services PIC or an Adaptive Services Module (only available on M7i routers). http://www.juniper.net/techpubs/en_US/junos11.1/topics/usage-guidelines/services-configuring-logical-tunnel-interfaces.html Having said that, I believe You can "emulate" lt-* interface unit pairs with sp-* interface unit pairs+"match input-output allow-all" Stateful Firewall rule to achieve same effect but I never tried that myself... HTH Rgds Alex ----- Original Message ----- From: "Mauritz Lewies" <[email protected]> To: <[email protected]> Sent: Sunday, June 05, 2011 4:18 PM Subject: [j-nsp] M120 lt (Logical Tunnel) interface Hi Does anyone out there have lt- interfaces on a M120 Chassis with a MS-PIC. Been Googling for a while and there is conflicting info between users and techpub docs. Users saying you need Tunnel/AS or MS-pic. Techpubs saying you need Tunnel pic and that lt- is not supported on the MS-PIC... Any realworld users of lt- interfaces out there? Mauritz Lewies email: [email protected] mobile: +27 83 647 4901 Skype Phone: +27 11 08 365 02 three6five network solutions www.three6five.com _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
