IPIP is possible on the SRX but not in cluster (virtual chassis mode)
Being able to setup a single or even multiple IPIP tunnels is not suffcient to be a member of the AMPRnet IPIP mesh. See what Brian wrote:
This is a mesh network, not a star, so there is no default route; you need a separate tunnel route to each gateway you want to communicate with,
Marius has written a very nice script to get it working on a MikroTik router, but most other commercial routers lack the scripting capabilities to pull this off on their own. Someone wrote a script to use a Cisco router but it requires a separate machine to run it.
Rob
No so sure about that, it is not very difficult to create complex scripts on a SRX or even compile software for the platform (freebsd)
So saying doing it on the SRX is impossible is just as saying its impossible on a mikrotik.
--- 73 Rudy pd0zry
On 2017-05-18 19:34, Rob Janssen wrote:
(Please trim inclusions from previous messages) _______________________________________________
IPIP is possible on the SRX but not in cluster (virtual chassis mode)
Being able to setup a single or even multiple IPIP tunnels is not suffcient to be a member of the AMPRnet IPIP mesh. See what Brian wrote:
This is a mesh network, not a star, so there is no default route; you need a separate tunnel route to each gateway you want to communicate with,
Marius has written a very nice script to get it working on a MikroTik router, but most other commercial routers lack the scripting capabilities to pull this off on their own. Someone wrote a script to use a Cisco router but it requires a separate machine to run it.
Rob
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
Hmmmm. Not as simple as I was hoping.
Does the amprgw act as the actual gateway between the 44 Net and the rest of the internet? I assume so.
I will have to look into scripting the SRX to make this work. As people pointed out, the scripting will be the key and I am not a script expert by any stretch. If I were to provide the Junos commands needed to create the tunnel for a node, would someone be able to write a script to process the encap file?
The commands to create the tunnel interface are : set interfaces ip-0/0/0 unit 0 tunnel source 96.86.86.53 set interfaces ip-0/0/0 unit 0 tunnel destination 169.228.66.251 set interfaces ip-0/0/0 unit 0 family inet address 44.44.7.17/29
The "unit" number needs to be incremented for each entry.
Thanks
Craig
On Thu, May 18, 2017 at 1:38 PM, Rudy Hardeman (PD0ZRY) pd0zry@pd0zry.nl wrote:
(Please trim inclusions from previous messages) _______________________________________________ No so sure about that, it is not very difficult to create complex scripts on a SRX or even compile software for the platform (freebsd)
So saying doing it on the SRX is impossible is just as saying its impossible on a mikrotik.
73 Rudy pd0zry
On 2017-05-18 19:34, Rob Janssen wrote:
(Please trim inclusions from previous messages) _______________________________________________
IPIP is possible on the SRX but not in cluster (virtual chassis mode)
Being able to setup a single or even multiple IPIP tunnels is not suffcient to be a member of the AMPRnet IPIP mesh. See what Brian wrote:
This is a mesh network, not a star, so there is no default route; you
need a separate tunnel route to each gateway you want to communicate with,
Marius has written a very nice script to get it working on a MikroTik router, but most other commercial routers lack the scripting capabilities to pull this off on their own. Someone wrote a script to use a Cisco router but it requires a separate machine to run it.
Rob
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
Craig,
This could possibly get you started http://forums.juniper.net/t5/Junos-Automation-Scripting/How-do-I-get-a-quick...
--- 73 Rudy pd0zry
Craig,
We'd have to know a lot about the underlying of JunOS.
- First, is it possible to FTP or HTTP files to JunOS? - Does Juniper offer a SDK/Toolchain to compile your own software? - Is there an available list of basic tools/packages on a JunOS instance? - Is there "Userspace" or command shell (to access the Kernel, not JUST the router config/show console) available? - Can you set files as executable? - Can you execute files or scripts on JunOS? - Can you run commands from userspace?
- Lynwood KB3VWG
If I were to provide the Junos commands needed to create the tunnel for a node, would someone be able to write a script to process the encap file?
If anyone is interested i can provide some vSRX and vMX trail images to play with (these are a bit different from the hardware but should give more feeling with the platform)
- First, is it possible to FTP or HTTP files to JunOS?
SCP/SFTP it runs a standard ssh daemon
- Does Juniper offer a SDK/Toolchain to compile your own software?
Not officially as far as i know but it should not be to hard
- Is there an available list of basic tools/packages on a JunOS
instance?
Everything has to go true the Junos commands i could check the Juniper KB
- Is there "Userspace" or command shell (to access the Kernel, not
JUST the router config/show console) available?
You can even use standard tools to modify routing tables for example
- Can you set files as executable?
Yes
- Can you execute files or scripts on JunOS?
Yes you can execute various scripts and utils
- Can you run commands from userspace?
Yes
--- 73 Rudy pd0zry
Rudy,
...ummm, are you saying it *might* be possible to compile ampr-ripd for JunOS to work in compatibility with:
- his kmod-ipip-like interface(s) - and JunOS-like route tables?
Because, that's probably the easiest available method.
73,
- Lynwood KB3VWG
On 05/18/2017 07:02 PM, Rudy Hardeman (PD0ZRY) wrote:
- Does Juniper offer a SDK/Toolchain to compile your own software?
Not officially as far as i know but it should not be to hard
There is an open source SDK for Junos, but I'm not sure how it works. Juniper's OpenLab is in New Jersey somewhere.
That being said, the BSD shell that you can access as root does have shell scripting, curl, ftp, awk, sed, grep, scp, etc.
So, i would think that a simple shell script that can FTP the encap file down and then parse it into the necessary Junos commands would probably do the trick. Heck, they even have cron so you schedule the job. Perl is not installed on an SRX in case anyone is interested.
Thanks
Craig
On Thu, May 18, 2017 at 8:12 PM, lleachii--- via 44Net < 44net@hamradio.ucsd.edu> wrote:
(Please trim inclusions from previous messages) _______________________________________________ Rudy,
...ummm, are you saying it *might* be possible to compile ampr-ripd for JunOS to work in compatibility with:
- his kmod-ipip-like interface(s)
- and JunOS-like route tables?
Because, that's probably the easiest available method.
73,
- Lynwood
KB3VWG
On 05/18/2017 07:02 PM, Rudy Hardeman (PD0ZRY) wrote:
- Does Juniper offer a SDK/Toolchain to compile your own software?
Not officially as far as i know but it should not be to hard
Lynwood,
I expect you could have more luck by looking in to SLAX scripting as it should not be to hard to do this fully from the junos api's
I did not check this but i don't think the ipip driver would be standard.
--- 73 Rudy pd0zry
Hello Craig,
I'm a bit late to the thread but JUNOS is actually very open to automation. Shell scripts and Python is available via the shell in JUNOS and either using the "cli" command or the CLI's "load merge" command, you can do about anything you want. There is Junoscript which might be the best solution for this simple task but there is also full SDK APIs for JUNOS as well as OpenConfig support. I know that JUNOS on the MX/PTX supports but I don't think the SRX supports it just yet.
If you have problems getting this going, message me offline and I can get you in touch with someone who can help.
--David KI6ZHD
On 05/18/2017 11:43 AM, Craig Brauckmiller wrote:
(Please trim inclusions from previous messages) _______________________________________________ Hmmmm. Not as simple as I was hoping.
Does the amprgw act as the actual gateway between the 44 Net and the rest of the internet? I assume so.
I will have to look into scripting the SRX to make this work. As people pointed out, the scripting will be the key and I am not a script expert by any stretch. If I were to provide the Junos commands needed to create the tunnel for a node, would someone be able to write a script to process the encap file?
The commands to create the tunnel interface are : set interfaces ip-0/0/0 unit 0 tunnel source 96.86.86.53 set interfaces ip-0/0/0 unit 0 tunnel destination 169.228.66.251 set interfaces ip-0/0/0 unit 0 family inet address 44.44.7.17/29
The "unit" number needs to be incremented for each entry.
Thanks
Craig
On Thu, May 18, 2017 at 1:38 PM, Rudy Hardeman (PD0ZRY) pd0zry@pd0zry.nl wrote:
(Please trim inclusions from previous messages) _______________________________________________ No so sure about that, it is not very difficult to create complex scripts on a SRX or even compile software for the platform (freebsd)
So saying doing it on the SRX is impossible is just as saying its impossible on a mikrotik.
73 Rudy pd0zry
On 2017-05-18 19:34, Rob Janssen wrote:
(Please trim inclusions from previous messages) _______________________________________________
IPIP is possible on the SRX but not in cluster (virtual chassis mode)
Being able to setup a single or even multiple IPIP tunnels is not suffcient to be a member of the AMPRnet IPIP mesh. See what Brian wrote:
This is a mesh network, not a star, so there is no default route; you
need a separate tunnel route to each gateway you want to communicate with,
Marius has written a very nice script to get it working on a MikroTik router, but most other commercial routers lack the scripting capabilities to pull this off on their own. Someone wrote a script to use a Cisco router but it requires a separate machine to run it.
Rob
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net
44Net mailing list 44Net@hamradio.ucsd.edu http://hamradio.ucsd.edu/mailman/listinfo/44net