Junos OS

 View Only
last person joined: 3 days ago 

Ask questions and share experiences about Junos OS.
  • 1.  SSH TUNNEL TRHOUGH JUNOS VIA BY USING SPECIFIC VRF

    Posted 23 days ago

    Hi everybody 

    I have my local machine from which I want to access a web server located at different clients' sites. The intermediate machine is an MX204 running version 20, and the client's web server is located in a dedicated VRF. How can I specify the VRF via SSH? Or is there a technique to remotely access this web server without having a direct interface in the client's VRF?"

    ssh   -vv -x -L 443:"ssh USER@X.X.X.X. routing-instance XXXX :443"  user@X.X.X.X 

    Thanks 



    ------------------------------
    junos
    ------------------------------


  • 2.  RE: SSH TUNNEL TRHOUGH JUNOS VIA BY USING SPECIFIC VRF

    Posted 22 days ago

    Not sure I follow the configuration but, to use SSH from the MX you need an ip address inside the routing instance in order to source the connection.  If there are no interfaces you could create a loopback interface inside the routing instance and specify that as the source.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: SSH TUNNEL TRHOUGH JUNOS VIA BY USING SPECIFIC VRF

    Posted 22 days ago

    thanks for reponses , yes I do have loopback on the specified routing instance ?  but i initiate the connection from my localhost -> PE(vrf) -> CE

    i tried many command without succes . the question how would you process to give with your ssh command the name of the vrf to use ? 

    Do i need to activate system services ssh tcp-forwarding ? (20.4R3-S3.4) , activating it does imply security risk ? 

    thanks 



    ------------------------------
    junos
    ------------------------------



  • 4.  RE: SSH TUNNEL TRHOUGH JUNOS VIA BY USING SPECIFIC VRF

    Posted 21 days ago

    On the MX Junos cli the connection would need to connect from the routing instance where server you are attempting to connect has a route.

    example:

    ssh x.x.x.x interface lo.x routing-instance name

    The connection then sources on the MX from inside that routing instance using the loopback as the source address.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------