Even found on juniper-nsp
http://puck.nether.net/pipermail/juniper-nsp/2006-February/006094.html
Thanks guys!
Peter
5) Create the service-filters: set firewall family inet service-filter SS_PART1_FILTER term part1 from source- address 10.100.0.0/17 set firewall family inet service-filter SS_PART1_FILTER term part1 then service set firewall family inet service-filter SS_PART1_FILTER term default then skip set firewall family inet service-filter SS_PART2_FILTER term part2 from source- address 10.100.128.0/17 set firewall family inet service-filter SS_PART2_FILTER term part2 then service set firewall family inet service-filter SS_PART2_FILTER term default then skip There's a trick to reach more accurate manual LB. Something like: set firewall family inet service-filter SS_PART1_FILTER term part1 from source-address 10.100.0.0/255.255.0.1 ... set firewall family inet service-filter SS_PART2_FILTER term part1 from source-address 10.100.0.1/255.255.0.1 Even addresses go left, odd ones go right. Does not matter how your 10.100/16 is divided into subnets, how many subscribers you have in each half or whatever. |
--
Best regards,
Pajlatek mailto:[email protected]
_______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
