[prev in list] [next in list] [prev in thread] [next in thread] 

List:       juniper-nsp
Subject:    Re: [j-nsp] v6-in-v4 tunnels without tunnel PIC?
From:       Richard A Steenbergen <ras () e-gerbil ! net>
Date:       2004-09-29 2:50:23
Message-ID: 20040929025023.GY729 () overlord ! e-gerbil ! net
[Download RAW message or body]

On Thu, Sep 23, 2004 at 09:17:12PM -0400, Joe Abley wrote:
> 
> I tried this out.
> 
> It looks very much to me like this works in as far as you can reach the 
> RE at the other end of the tunnel, and it responds to pings as you'd 
> expect. I have not been able to convince a packet sent down the tunnel 
> towards an "ipip" termination to continue out a real interface, though.
> 
> It seems likely/possible that this is an architectural problem, and the 
> solution to it is "buy a tunnel PIC".

sysctl -w net.pfe.transit_re=1

Note: You do this at your own risk, as excessive traffic can cause your RE 
to blow up. Of course, as an intelligent thinking person, I think you are 
perfectly capable of weighing the possible consequences and making that 
decision for yourself. :)

-- 
Richard A Steenbergen <ras@e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
http://puck.nether.net/mailman/listinfo/juniper-nsp
[prev in list] [next in list] [prev in thread] [next in thread]