You need to use selective packet mode, not full packet mode to use ipsec. On Feb 16, 2014 12:36 PM, "Michel de Nostredame" <[email protected]> wrote:
> On Thu, Dec 19, 2013 at 6:43 AM, Eugeniu Patrascu <[email protected]> > wrote: > > On Thu, Dec 19, 2013 at 4:25 PM, Tom Storey <[email protected]> wrote: > > > >> FWIW the situation I am picturing would not require NAT or IPSEC or > >> other services like that, just packet shifting with ACLs, some routing > >> protocols (IS-IS/BGP), and something like VRRP for gateway redundancy. > >> > > You can still use IPSec. I'm not sure about NAT, but most probably you > will > > get it the old JUNOS way (no security zones). > > > > Could you share the full IPsec configuration when running J/SRX in > packet-mode? > Those documents I read from Juniper are describing IKE & IPSEC config > under [edit security], but system refuse to take them when running in > packet-mode. > > Thanks, > ~Michel~ > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
