Help needed for configuring intervsys communication

[How to run the NSM GUI under Mac OS X]

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

[sg.nospam]

Hi,

After having looked for documentation on the internet, forums, JNPR KB, ScreenOS cookbook, and various other references, I finally chose to try to make a working configuration based on the official JNPR screeonos 6.2 manual.

My goal is very simple in theory : Making communication possible between two subnets one on  VSYS-A and the other on VSYS-B. Subnet A is 192.168.100.0/24 and subnet B is 192.168.200.0/24.

Here is my configuration :

set vsys vsys-A
set interface ethernet2/1import
set interface ethernet2/1 zone trust-vsys-A
set interface ethernet2/1 ip 192.168.100.1/24
set route 0.0.0.0/0 vr trust-vr
set vrouter trust-vr route 192.168.100.0/24 vr trust-vsys-A
set policy from trust-vsys-A to untrust any any any permit
set policy from untrust to trust-vsys-A any any any permit

set vsys vsys-B
set interface ethernet2/2import
set interface ethernet2/2 zone trust-vsys-B
set interface ethernet2/2 ip 192.168.200.1/24
set route 0.0.0.0/0 vr trust-vr
set vrouter trust-vr route 192.168.200.0/24 vr trust-vsys-B
set policy from trust-vsys-B to untrust any any any permit
set policy from untrust to trust-vsys-B any any any permit

I was expecting this to work, but it is not.
 
I would really appreciate any feedback, or an example working configuration.

Thank you

[sg.nospam]

Hi All,

As I didn't found any response about this but finally succeeded to implement a working configuration, I posted here (http://itbowl.blogspot.com/2010/06/configuring-routing-between-2-custom.html) the configuration example for those who may need it.

Cheers

•      Forum/Home
•      Store
•      Articles
•        Tech Articles
•        Industry News
•        Site News
•      Knowledgebase
•        JUNOS/Routing
•        NS/ISG/SSG/NSM
•        SSL VPN
•      Downloads

Please consider donating if we've saved you time or money. It helps pay for the bandwidth, equipment, and hosting charges to keep this site running

Submit Article/KB - Do not submit questions here.

[Today]

• www.nikeaaashoes.com.cn s... by kelly110 [Today at 01:58:21 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:55:29 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:53:25 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:52:19 PM]
• www.nikeaaashoes.com.cn s... by kelly110 [Today at 01:49:14 PM]
• www.nikeaaashoes.com.cn s... by kelly110 [Today at 01:42:22 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:23:43 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:21:58 PM]
• www.holesale shoes clothe... by kelly110 [Today at 01:21:15 PM]
• www. nikeaaashoes.com.cn ... by kelly110 [Today at 01:20:08 PM]

Members

• Total Members: 22551
• Latest: barneb01

Stats

• Total Posts: 40719
• Total Topics: 11389
• Online Today: 82
• Online Ever: 393
• (August 06, 2008, 07:40:57 AM)

Users Online

Users: 0
Guests: 56
Total: 56