Blog update

August 15th, 2007

I’m going to change my weblog a bit i don’t like the Font i’m using plus i don’t like it to have technical stuff between my other posts. http://tech.ten-berg.nl will be my weblog with techtalk in a few day’s Old postings will remain in this weblog new stuff will go in a new thingie :) So get back in a few day’s and you will find some stuff changed

Tech, Work

Netscreen IPv6 Configuration

April 24th, 2007

IPv6 is possible on a Netscreen device. JTAC only gives support on the bigger models ( I used an 5gt-wireless to setup a tunnel)

Be advised that the IPv6 part of the webinterface is buggy.

I build the tunnel between an Juniper M7i and a Netscreen 5gt-wireless
You only will find the config to configure your Netscreen device in this document.

First step to do is to enable ipv6 in the device. You have to do this on the commandline (serialconsole/telnet/ssh).

Config needs to be done on the command line of your netscreen device


set envar ipv6=yes

Save your config and reset the device.

Some Background info:

  • Trust interface 10.10.10.1 – Trust
  • Untrust interface – Untrust
  • IPv6 broker (choose any you like. SixXs is preffered) – 213.204.x.x
  • IPv6 subnet – 2001:960:2000::/48

First configure the Trust interface:


set interface "Trust" ipv6 mode "router"
set interface "Trust" ipv6 ip 2001:960:2000::2/48
set interface "Trust" ipv6 enable
unset interface Trust ipv6 ra link-address
set interface Trust ipv6 ra transmit
set interface Trust ipv6 nd nud

The trust interface is configured with the IPv6 subnet, also auto configuration of other devices behind the trust interface should be working.

Time to configure the tunnel:


set interface "tunnel.6" zone "Untrust"
set interface tunnel.6 ip unnumbered interface Untrust
set interface "tunnel.6" ipv6 mode "host"
set interface "tunnel.6" ipv6 enable
set interface tunnel.6 tunnel encap ip6in4 manual
set interface tunnel.6 tunnel local-if bgroup2 dst-ip 213.204.x.x

Next step is to setup a static route towards the far end side:


set route ::/0 interface tunnel.6 gateway :: preference 20

Now we need a policy to allow traffic in/out:


set policy id 77 from "Trust" to "Untrust" "Any-IPv6" "Any-IPv6" "ANY" permit log
set policy id 77
set policy id 78 from "Untrust" to "Trust"  "Any-IPv6" "Any-IPv6" "ANY" permit log
set policy id 78

Use these policy’s at your own risk. Your IPv6 network is now fully open. You need to configure strict policy’s to keep your network safe.

NOTE: Do not ask me questions how to configure your clients behind a netscreen. Google is your friend.
I’m not a tunnel-broker so stop bugging me with questions to get an IPv6 Tunnel !!!!

Read more…

Netscreen, Networking, Work

My life changed.

February 3rd, 2007

Time to post again, i have been quiet for a long time. Some things changed in my life. The relationship i had for almost 7 years crashed. We have decided to go each our own way in the summer of 2006. I can tell you from the bottom of my hart if was the most special relationship i have had. We got a beatiful daughter who did not liked they idea of her mom and dad not living together anymore. I can tell you that hurts more then anything in the world.
I’m glad she it is going well with all three of us. We are trying to move on with our lives and make the life of our daughter as easy as possible, but when you look at your child you can see how hard it is for her. In my opinion she does not understand why this happend. It is hard to see you daughter trying to understand all of it.
The best thing for her is that mom and dad don’t fight but are close friends and help each other and have fun together. I can tell one thing my exgirlfriend will allways be in my hart and she will be my best friend.
Enough for now somethings will be told on an other moment or not :>

Daily, Private

Kerst

December 25th, 2006

Hmmpf het is weer kerst, weer tijd om eens een keer iets op mijn blog te posten. Er is nogal wat gebeurd de laatste tijd, daar zal ik op een later moment een
keer overschrijven. Kinderen weten hoe ze hun ouders blij kunnen maken. Ik kreeg een hele mooie ster voor in de kerstboom met een mooi gedichtje van mijn dochter.
Hoe blij kan je een ouder maken met zoiets kleins en bijzonders.

Dank je wel prinses voor je mooie gedichtje :-)

Private

Stilte

July 5th, 2006

Jaaa het is weer eens zo ver, ik heb al een tijdje niks gepost. Te druk met van aller hande zaken. Opzich is er genoeg te melden dus dat zal ik later op de dag eens gaan doen.
Op dit moment heb ik er weinig zin in, het is gewoon nog te vroeg om iets te posten :-)

Daily