Re: [j-nsp] BGP and OSPF ECMP

2008-07-17 Thread Harry Reynolds
Hmm. Normally for LB we expect to see a ulst next hop, which in turn contains two or more ucst NHs. The FT display indicates that a single NH is installed for that prefix. Can you describe the nature of the test traffic? If its all one flow I'd expect all to take the same NH even when LB is in

Re: [j-nsp] NSRP through 802.1Q trunks

2008-07-17 Thread Ivan c
I tried to hard code the peer MAC for probes and it hasnt taken exec nsrp probe interface [ mac_addr ] I still see the default NSRP MAC for the destination On Thu, Jul 17, 2008 at 9:01 AM, Ivan c <[EMAIL PROTECTED]> wrote: > Doesn't seem to be the case though, even though logic would dictate > th

Re: [j-nsp] BGP and OSPF ECMP

2008-07-17 Thread Marlon Duksa
I tried this on MX960 and it seams that load balancing is on by default. How do I turn load balancing off? In the RT I can see both next hops: 2.2.2.2/32 *[OSPF/10] 02:21:29, metric 1 to 10.0.2.2 via ge-8/0/5.0 > to 10.0.3.2 via ge-5/1/0.0 In the

Re: [j-nsp] IPSEC into VRF

2008-07-17 Thread Bryan Phillips
I know you only asked about the J and MX series. The ERX platform will terminate a tunnel in the VRF. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Benny Amorsen Sent: Monday, July 14, 2008 4:08 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] IPSEC i

Re: [j-nsp] JUNOScript API error

2008-07-17 Thread Simon Chen
My experience is that JUNOScript would try to initiate the connection to a weird port - I cannot remember which port that it, but you can find out easily by doing a tcpdump. Basically what I did was locating that port number in the source code and changing it to 22. Hope this helps. -Simon On T

[j-nsp] test please ignoring

2008-07-17 Thread nan.li.juniper
ignore . ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] JUNOScript API error

2008-07-17 Thread Boyd, Benjamin R
All, I'm playing with JUNOScript and after installation I get the following error: [get_chassis_inventory]# perl get_chassis_inventory.pl x.x.x.x -m ssh login: * password: ERROR[1]: recv failed: EOF ERROR[2]: initial handshake with JUNOScript server failed Has anyone seen this or know th

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Scott Morris
Fair enough. I simply read the scenario involving two routers sharing a frame-relay p2p link. :) Scott -Original Message- From: Jesper Skriver [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2008 9:27 AM To: Scott Morris Cc: 'Farhan Jaffer'; 'Juniper Puck'; [EMAIL PROTECTED] Subje

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Jesper Skriver
On Thu, Jul 17, 2008 at 07:49:09AM -0400, Scott Morris wrote: > There is no ARP in frame-relay. More specifically, on a P2P subinterface, > there's no mapping either. I think you're mis understanding my suggestion, I was suggesting that router A could only reach router B because the router in th

Re: [j-nsp] Tunnel Services

2008-07-17 Thread Daniel Roesen
On Wed, Jul 16, 2008 at 11:59:44AM +0200, [EMAIL PROTECTED] wrote: > - *May* use an explicit tunnel PIC in one of the 4 PIC slots (but since > there is always a built-in tunnel PIC, why would you want to?). If I remember correctly, the onboard "Tunnel PIC" gives you only ~150mbps throughput. I may

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Farhan Jaffer
Thanks for all. It was one mistake from my side. I used management interface ip address for routes on Juniper :) It's working fine now. Thanks again. -FJ On Thu, Jul 17, 2008 at 4:06 PM, Farhan Jaffer <[EMAIL PROTECTED]> wrote: > Hi, > > There is an interesting situation, let me discuss the s

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Scott Morris
There is no ARP in frame-relay. More specifically, on a P2P subinterface, there's no mapping either. The assumption is that if it's not MY address it must be yours. So as long as you believe the other side is within the defined subnet, then you're good. If you have 10.1.1.1/24 on one side, and

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Scott Morris
The PVC being "up" is a signaling of LMI telling you that it's in an ACTIVE state. It's more like you can call me on the telephone. But if you speak japanese and I do not, we really can't have much of a conversation yet the "link" is still up! HTH, Scott -Original Message- From: Ma

Re: [j-nsp] Load balancing: hash algorithm

2008-07-17 Thread Paul Goyette
The specific algorithm differs on different chipsets, and is generally considered to be a "trade secret" of Juniper. This decision was made several years ago when I suggested filing a patent application for one of the chipset's algorithm. Paul Goyette Juniper Networks Customer Service JTAC Senior

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Jesper Skriver
Let me guess, on Cisco Router A you got an ARP entry for Cisco Router B's address when you put a Cisco router in the middle, as the Cisco router has proxy-arp enabled by default. Or to put it more clearly the IP addresses used FR p2p pvc is a subset of the IP addresses used on the link between Cis

Re: [j-nsp] PtP link over FR

2008-07-17 Thread Scott Morris
On your Cisco router, when you look at "show frame map" what do you see as the encapsulation? Is it CISCO or IETF? Juniper routers (like most other vendors) does not do CISCO frame encapsulation, so if you change to IETF on the Cisco side you should be fine. Note, this is different than Cisco LM

[j-nsp] PtP link over FR

2008-07-17 Thread Farhan Jaffer
Hi, There is an interesting situation, let me discuss the scenario first, Cisco Router A (same n/w) Juniper Router -(FR point-to-point pvc) --- Cisco Router B. PVC is Active & point to point connectivity is OK. But the ping response from cisco router A to B via FR is unreachable

Re: [j-nsp] Vpn with rsa

2008-07-17 Thread sunnyday
I don't understand how to assign remote settings shrewsoft only has xauth not auth as an option.i have tried it from trust to untrust with authentication applied on the policy for a specific user And when he requested internet service he got a prompt to enter username and password I entered the us

Re: [j-nsp] Load balancing: hash algorithm

2008-07-17 Thread samuel.gay
In the Juniper documentation I can read: "By default, or if you specify only the layer-3 statement, the router uses the incoming interface index as well as the following Layer 3 information in the packet header to load balance traffic: - Source IP address - Destination IP address - Protocol" A

Re: [j-nsp] Load balancing: hash algorithm

2008-07-17 Thread samuel.gay
> The hash algorithm uses the source IP address, the destination IP address, > the Protocol field and the Incoming Interface Index in order to generate a > key. Thanks David. How is chosen the next-hop with this generate key? I am looking for this algorithm. Regards, Samuel -Message d

Re: [j-nsp] Load balancing: hash algorithm

2008-07-17 Thread david.roy
Hi, The hash algorithm uses the source IP address, the destination IP address, the Protocol field and the Incoming Interface Index in order to generate a key. Regards David -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de [EMAIL PROTECTED] Envoyé : j

[j-nsp] Load balancing: hash algorithm

2008-07-17 Thread samuel.gay
Hi Group, Do you know how work hash algorithm used in load balancing (only layer-3)? Is there some documentation about it? Thanks, Samuel ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp