Security

 View Only
last person joined: 15 days ago 

Ask questions and share experiences with Juniper Connected Security. Discuss Advanced Threat Protection, SecIntel, Secure Analytics, Secure Connect, Security Director, and all things related to Juniper security technologies.
  • 1.  what is the command that allow configure MTU 1336 for st0

    Posted 08-13-2024 16:20
      |   view attached

    hello

    show ospf interface extensive           ( srx 100)         

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            1

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2======>  the problem  how to configure this with mtu MTU: 1336

      Adj count: 0

      Hello: 10, Dead: 40, ReXmit: 5, Not Stub

      Auth type: None

      Protection type: None

      Topology default (ID 0) -> Cost: 2

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0

      Type: P2P, Address: 172.16.7.2, Mask: 255.255.255.252, MTU: 1336, Cost: 2

      Adj count: 0, Passive

      Hello: 10, Dead: 40, ReXmit: 5, Not Stub

      Auth type: None

      Protection type: None

      Topology default (ID 0) -> Passive, Cost: 2

    SRX100

    what the command  that allow  configure MTU  1336 for st0

    st0.0              

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2=========>  msut  will be MTU : 1336

    like

    st0.0               PtToPt  0.0.0.0         0.0.0.0         0.0.0.0            0

      Type: P2P, Address: 172.16.7.2, Mask: 255.255.255.252, MTU: 1336, Cost: 2================>  this is ok

    because the ospf neigbhor is extract bewtenn fortigate and srx  100

    Dans  le srx93



    ------------------------------
    Dhikra Marghli
    ------------------------------


  • 2.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 08-13-2024 19:54

    For the st0 interfaces the mtu gets set down at the unit level per instances.  For example

    set interfaces st0 unit 0 family inet mtu 1336



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 08-14-2024 08:42

    i have  configured this command  but the problem ospf is stil exstart and also 

    st0.0              

      Type: P2P, Address: 0.0.0.0, Mask: 0.0.0.0, MTU: 9192, Cost: 2====>   still  9192  msut  will be MTU : 1336

    how  i can  edit  MTU: 9192  to MTU 1336  because  it is  SRX100 H . 

    how i can force  edit MTU in Address: 0.0.0.0  ??

    I wait a reply

    regards 



    ------------------------------
    Dhikra Marghli
    ------------------------------



  • 4.  RE: what is the command that allow configure MTU 1336 for st0

    Posted 08-14-2024 16:29

    I'm able to configure and see the assigned mtu on an SRX100H in my lab.

    root@steve> show configuration interfaces st0

    unit 0 {

        family inet {

            mtu 1336;

        }

    }

    root@steve> show interfaces st0 

    Physical interface: st0, Enabled, Physical link is Up

      Interface index: 130, SNMP ifIndex: 503

      Type: Secure-Tunnel, Link-level type: Secure-Tunnel, MTU: 9192

      Device flags   : Present Running

      Interface flags: Point-To-Point

      Input rate     : 0 bps (0 pps)

      Output rate    : 0 bps (0 pps)

      Logical interface st0.0 (Index 85) (SNMP ifIndex 507)

        Flags: Point-To-Point SNMP-Traps Encapsulation: Secure-Tunnel

        Input packets : 0

        Output packets: 0

        Security: Zone: Null

        Protocol inet, MTU: 1336

          Flags: Sendbcast-pkt-to-re, User-MTU



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------