Security

 View Only
last person joined: 3 days ago 

Ask questions and share experiences with Juniper Connected Security. Discuss Advanced Threat Protection, SecIntel, Secure Analytics, Secure Connect, Security Director, and all things related to Juniper security technologies.
  • 1.  what is the command that allow configure MTU 1336 for st0

    Posted 27 days ago
      |   view attached

    hello

    show ospf interface extensive           ( srx 100)         

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            1

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2======>  the problem  how to configure this with mtu MTU: 1336

      Adj count: 0

      Hello: 10, Dead: 40, ReXmit: 5, Not Stub

      Auth type: None

      Protection type: None

      Topology default (ID 0) -> Cost: 2

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0

      Type: P2P, Address: 172.16.7.2, Mask: 255.255.255.252, MTU: 1336, Cost: 2

      Adj count: 0, Passive

      Hello: 10, Dead: 40, ReXmit: 5, Not Stub

      Auth type: None

      Protection type: None

      Topology default (ID 0) -> Passive, Cost: 2

    SRX100

    what the command  that allow  configure MTU  1336 for st0

    st0.0              

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2=========>  msut  will be MTU : 1336

    like

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0

      Type: P2P, Address: 172.16.7.2, Mask: 255.255.255.252, MTU: 1336, Cost: 2================>  this is ok

    because the ospf neigbhor is extract bewtenn fortigate and srx  100

    Dans  le srx93



    ------------------------------
    Dhikra Marghli
    ------------------------------


  • 2.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 27 days ago

    For the st0 interfaces the mtu gets set down at the unit level per instances.  For example

    set interfaces st0 unit 0 family inet mtu 1336



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 26 days ago

    i have  configured this command  but the problem ospf is stil exstart and also 

    st0.0              

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2====>   still  9192  msut  will be MTU : 1336

    how  i can  edit  MTU: 9192  to MTU 1336  because  it is  SRX100 H . 

    how i can force  edit MTU in Address: 0.0.0.0  ??

    I wait a reply

    regards 



    ------------------------------
    Dhikra Marghli
    ------------------------------



  • 4.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 26 days ago

    I'm able to configure and see the assigned mtu on an SRX100H in my lab.

    root@steve> show configuration interfaces st0

    unit 0 {

        family inet {

            mtu 1336;

        }

    }

    root@steve> show interfaces st0 

    Physical interface: st0, Enabled, Physical link is Up

      Interface index: 130, SNMP ifIndex: 503

      Type: Secure-Tunnel, Link-level type: Secure-Tunnel, MTU: 9192

      Device flags   : Present Running

      Interface flags: Point-To-Point

      Input rate     : 0 bps (0 pps)

      Output rate    : 0 bps (0 pps)

      Logical interface st0.0 (Index 85) (SNMP ifIndex 507)

        Flags: Point-To-Point SNMP-Traps Encapsulation: Secure-Tunnel

        Input packets : 0

        Output packets: 0

        Security: Zone: Null

        Protocol inet, MTU: 1336

          Flags: Sendbcast-pkt-to-re, User-MTU



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------