flem10
asked on
How do I configure Layer-3 Wake on Lan on Juniper SSG140
Hi,
I have a problem with a SSG140 and Wake on Lan.
The problem is, that I can`t get Layer-3 Wake-On-LAN (WOL) to work across a Juniper ScreenOS firewall.
I have a policy which allows everything
Without Juniper (works fine)
Altirisserver 10.111.x.x (wol server) sending packets to x-side on Selma
(10.112.1.x)
Vlan 111 (10.111.0.0/16)
(10.111.0.1)
Router routes til 10.112.0.1
(10.112.0.1)
Vlan 112 (10.112.0.0/16)
Switch
Client PC (10.112.1.x)
With Juniper (doesn`t work)
Altirisserver 10.111.x.x (wol server) sending packets to a-side (10.211.3.x)
Vlan 111 (10.111.0.0/16)
(10.111.0.1)
Router unkown routes to 10.110.0.2
(10.110.0.1)
Vlan 110 (10.110.0.0/16)
Juniper trust-VR Eth0/8 (10.110.0.2)
Juniper a-side VR Eth0/9 (10.211.1.1) Policy allows everything from Altiris t0 10.211.3.x
Vlan 211 (10.211.0.0/16)
Switch
Client PC (10.211.3.x)
Everything else from Altiris til a-side clients is working fine, so there is connection through.
I have created at static arp entry "set arp 10.211.3.255 ffffffffffff interface eth0/9"
I have a problem with a SSG140 and Wake on Lan.
The problem is, that I can`t get Layer-3 Wake-On-LAN (WOL) to work across a Juniper ScreenOS firewall.
I have a policy which allows everything
Without Juniper (works fine)
Altirisserver 10.111.x.x (wol server) sending packets to x-side on Selma
(10.112.1.x)
Vlan 111 (10.111.0.0/16)
(10.111.0.1)
Router routes til 10.112.0.1
(10.112.0.1)
Vlan 112 (10.112.0.0/16)
Switch
Client PC (10.112.1.x)
With Juniper (doesn`t work)
Altirisserver 10.111.x.x (wol server) sending packets to a-side (10.211.3.x)
Vlan 111 (10.111.0.0/16)
(10.111.0.1)
Router unkown routes to 10.110.0.2
(10.110.0.1)
Vlan 110 (10.110.0.0/16)
Juniper trust-VR Eth0/8 (10.110.0.2)
Juniper a-side VR Eth0/9 (10.211.1.1) Policy allows everything from Altiris t0 10.211.3.x
Vlan 211 (10.211.0.0/16)
Switch
Client PC (10.211.3.x)
Everything else from Altiris til a-side clients is working fine, so there is connection through.
I have created at static arp entry "set arp 10.211.3.255 ffffffffffff interface eth0/9"
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Cheers,
rsivanandan