Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

Router - Juniper SRX: Difference between revisions

Content deleted Content added
Law99 (talk | contribs)
Added IPv6 config for SRX110 using internal VDSL2/ADSL-POTS modem
Reedy (talk | contribs)
m clean up
 
(One intermediate revision by the same user not shown)
Line 16: Line 16:
|ZyXEL P660R in bridge mode
|ZyXEL P660R in bridge mode
|[[User:Nhumfrey|Nhumfrey]]
|[[User:Nhumfrey|Nhumfrey]]
|✗
|✗
|✗ PADI sent but no PADO response
| PADI sent but no PADO response
|-
|-
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx100/ SRX100B]
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx100/ SRX100B]
Line 23: Line 23:
|BT Provided Huawei HG612 [[FTTC Modem]]
|BT Provided Huawei HG612 [[FTTC Modem]]
|[[User:Nhumfrey|Nhumfrey]]
|[[User:Nhumfrey|Nhumfrey]]
|✗
|✗
|✓ Working 2015-01-13
| Working 2015-01-13
|-
|-
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx100/ SRX100B]
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx100/ SRX100B]
Line 30: Line 30:
|BT Provided Huawei HG612 [[FTTC Modem]]
|BT Provided Huawei HG612 [[FTTC Modem]]
|[[User:Nhumfrey|Nhumfrey]]
|[[User:Nhumfrey|Nhumfrey]]
|✓
|✓
|✓ Working 2015-03-22
| Working 2015-03-22
|-
|-
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx210/ SRX210H]
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx210/ SRX210H]
Line 37: Line 37:
|Vigor 130 modem
|Vigor 130 modem
|
|
|✓
|✓
|✓ Working 2015-09-20
| Working 2015-09-20
|-
|-
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx110/ SRX110H-VA]
|[http://www.juniper.net/uk/en/products-services/security/srx-series/srx110/ SRX110H-VA]
Line 44: Line 44:
|Internal VDSL2/ADSL-POTS
|Internal VDSL2/ADSL-POTS
|
|
|✓
|✓
|✓ Working 2016-02-19
| Working 2016-02-19
|-
|-
|}
|}
Line 78: Line 78:


7. Finally, if you want to be able to ping hosts on your internal network, then see the '''ping6-to-trust''' policy in the example config below.
7. Finally, if you want to be able to ping hosts on your internal network, then see the '''ping6-to-trust''' policy in the example config below.



Note that the first time you enable IPv6 based routing (the '''security forwarding-options'''), you will have to reboot the router.
Note that the first time you enable IPv6 based routing (the '''security forwarding-options'''), you will have to reboot the router.




== Dual-stack Example Config ==
== Dual-stack Example Config ==
Line 91: Line 88:
* Pinging (ICMPv6) from untrusted to trusted hosts is enabled
* Pinging (ICMPv6) from untrusted to trusted hosts is enabled


<pre>

<source>
## Last changed: 2015-03-29 17:42:36 BST
## Last changed: 2015-03-29 17:42:36 BST
version 12.1X46-D30.2;
version 12.1X46-D30.2;
Line 361: Line 357:
}
}
}
}
</source>
</pre>


== Native IPv6 dual stack SRX110H-VA configuration ==
== Native IPv6 dual stack SRX110H-VA configuration ==
Line 367: Line 363:
The following is an example of a Juniper SRX110H-VA native IPv6 configuration using the inbuilt modem for VDSL connectivity, PPPoE, DHCPv6, & IPv4.
The following is an example of a Juniper SRX110H-VA native IPv6 configuration using the inbuilt modem for VDSL connectivity, PPPoE, DHCPv6, & IPv4.


<b>Please note:</b>
'''Please note:'''


* You must use Junos version 12.1X46-D10.2 or greater for DHCPv6 support. (The example configuration used 12.1X46-D40.2)
* You must use Junos version 12.1X46-D10.2 or greater for DHCPv6 support. (The example configuration used 12.1X46-D40.2)
Line 373: Line 369:
* WAN address for IPv4 is auto-negotiated
* WAN address for IPv4 is auto-negotiated
* IPv4 does not include NAT configuration which in this example will be required for WAN connectivity
* IPv4 does not include NAT configuration which in this example will be required for WAN connectivity
<source>
<pre>
interfaces {
interfaces {
fe-0/0/0 {
fe-0/0/0 {
Line 474: Line 470:
}
}
}
}
</source>
</pre>


To check DHCPv6 binding from operational mode run the command
To check DHCPv6 binding from operational mode run the command
Line 481: Line 477:


Output:
Output:
<source>
<pre>
Client Interface: pp0.0
Client Interface: pp0.0
Hardware Address: 54:e0:32:d2:39:20
Hardware Address: 54:e0:32:d2:39:20
Line 499: Line 495:
Name: dns-recursive-server, Value: 2001:8b0::2020,2001:8b0::2021
Name: dns-recursive-server, Value: 2001:8b0::2020,2001:8b0::2021


</source>
</pre>


== Higher MTU values ==
== Higher MTU values ==