Solved

eX4500 port forward

Posted on 2014-12-10
8
195 Views
Last Modified: 2015-04-07
is there any possible way to forward all 587 port traffic to an email gateway and get the traffic back to default vlan on Ex4500
0
Comment
Question by:Cahit Eyigunlu
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 32

Expert Comment

by:dpk_wal
ID: 40498666
We would need to use routing instances and yes then we can redirect all traffic on port 587 to email gateway IP address.

Please have a look at link below:
http://www.juniper.net/techpubs/en_US/junos14.2/topics/topic-map/filter-based-forwarding-policy-based-routing.html

Please implement and update.

Thank you.
0
 

Author Comment

by:Cahit Eyigunlu
ID: 40498809
the port mentioned in the test is not an ip port it is ethernet port ,
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 40498868
If you look at the link posted; there are configuration example for both, to a specific outgoing interface also specific destination IP.

Please implement and update.

Thank you.
0
Increase Agility with Enabled Toolchains

Connect your existing build, deployment, management, monitoring, and collaboration platforms. From Puppet to Chef, HipChat to Slack, ServiceNow to JIRA, Splunk to New Relic and beyond, hand off data between systems to engage the right people.

Connect with xMatters.

 

Author Comment

by:Cahit Eyigunlu
ID: 40499179
i am not looking for interface forwarding i am looking for smtp port amreked packets forwarding
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 40499662
Hi Cahit,

Did you look at the link at all.

We create a firewall filter and do then based on the match criteria forward traffic on port 587; protocol as you specify to a specific IP or specific port.

If this is not what you want please clearly state your requirements so we can help.

Thank you.
0
 

Author Comment

by:Cahit Eyigunlu
ID: 40517037
should you please send a sample config for this
0
 
LVL 32

Accepted Solution

by:
dpk_wal earned 500 total points
ID: 40521430
Let's say you want the UDP 587 traffic to egress out of port ge-0/0/23 and rest of traffic out through port ge-0/0/22.
You wish to configure this filtering on port ge-0/0/0 till ge-0/0/9

Configure firewall filter:
set firewall family ethernet-switching filter filterUDP587 term t1 from protocol udp destination-port 587
set firewall family ethernet-switching filter filterUDP587 term t1 then interface ge-0/0/23.0
set firewall family ethernet-switching filter filterUDP587 term t2 then interface ge-0/0/22.0

Set filter1 on ingress:
set ge-0/0/0.0 family ethernet-switching filter input filterUDP587
set ge-0/0/1.0 family ethernet-switching filter input filterUDP587
set ge-0/0/2.0 family ethernet-switching filter input filterUDP587
set ge-0/0/3.0 family ethernet-switching filter input filterUDP587
set ge-0/0/4.0 family ethernet-switching filter input filterUDP587
set ge-0/0/5.0 family ethernet-switching filter input filterUDP587
set ge-0/0/6.0 family ethernet-switching filter input filterUDP587
set ge-0/0/7.0 family ethernet-switching filter input filterUDP587
set ge-0/0/8.0 family ethernet-switching filter input filterUDP587
set ge-0/0/9.0 family ethernet-switching filter input filterUDP587

Please implement and update.

Thank you.
0
 

Author Closing Comment

by:Cahit Eyigunlu
ID: 40710814
Thank you
0

Featured Post

Revamp Your Training Process

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question