junos

GRE Tunnel Interface が Dest-route-down

root@TSUTSUJIGAOKA> show interfaces gr-0/0/0 Physical interface: gr-0/0/0, Enabled, Physical link is Up Interface index: 647, SNMP ifIndex: 503 Type: GRE, Link-level type: GRE, MTU: Unlimited, Speed: 800mbps Device flags : Present Running …

IPsecのProposalによるパフォーマンスの違い

SRX380で IPsecの暗号化のProposalで 1400Byte AES-GCMだと4.79Gbps AES 256-SHA256だとd3.88Gbps IMIX AES GCM だと 1.2Gbps(518kpps) AES256, SHA256 だと 1.1Gbps(429kpps) IMIXで90kppsぐらいの違いが出るそうな。 GCMは暗号化のライブラリを1度Callすれ…

Juniper SRX IPsec NO_PROPOSAL_CHOSEN error

If you get NO_PROPOSAL_CHOSEN error when set up IPsec.Please check external-interface in your ike configuration. Error status on Initiator side; [edit security ike]regress@vsrx2# run show security ipsec inactive-tunnels Total inactive tunn…

Ansible JUNOS環境のDockerfile

python3.6環境で整備しなおした。 FROM centosMAINTAINER お名前@ドメインRUN yum -y install epel-release && yum clean all RUN yum -y install \kernel-devel \ kernel-headers \ gcc-c++ \ patch \ libyaml-devel \ libffi-devel \ autoconf \ automake …