Re: [j-nsp] MS-DPC and netflow.

2010-07-16 Thread Peter Krupl
Hi Chris, Luca, David (Posted a reply off list), Im running Junos 10.1R1.8. The current configuration im using is shown below. The configuration is accepted, and I see some flow exports to my collector. But the traffic received at the collector is arriving at an interval og about 60 seconds,

Re: [j-nsp] MS-DPC and netflow.

2010-07-16 Thread bit gossip
Peter, the config provided is working fine on 10.2R1.8 Sampling must indeed be enabled at logical interface level with something like this: ge-3/0/7 { link-mode full-duplex; unit 0 { family inet { sampling { input; } address

Re: [j-nsp] Juniper RANCID

2010-07-16 Thread David DeSimone
Stefan Schlesinger s...@ono.at wrote: I'm trying to get RANCID to work with jlogin on my SRX100. I configured my router.db and .cloginrc. The following command can login to the router, but it doesn't backup anything. $ bin/jlogin -f .cloginrc 192.168.0.13 Check what's in rancid's

Re: [j-nsp] Juniper RANCID

2010-07-16 Thread Stefan Fouant
-Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of David DeSimone Sent: Friday, July 16, 2010 3:40 AM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Juniper RANCID 99% of rancid's problems stem from failing

Re: [j-nsp] MS-DPC and netflow.

2010-07-16 Thread Paolo Lucente
Hi Peter, On Fri, Jul 16, 2010 at 08:01:34AM +0200, Peter Krupl wrote: 2. As my box is running as PE, I think the mpls-ipv4 template is the one to use, am I correct ? It depends what you are trying to do with the NetFlow export; if you are a SP and are sampling public internet traffic

Re: [j-nsp] Juniper RANCID

2010-07-16 Thread Stefan Schlesinger
On Jul 16, 2010, at 03:11 , ck wrote: your output is expected behavior. jlogin is just an expect script that logs into the devices. if you're configuration is complete (with cron job/etc and you just want to test you can run the following /blah/blah/rancid/bin/rancid-run to run rancid

[j-nsp] SRX CPU utilization reaches 100%

2010-07-16 Thread Fahad Khan
Hi folks, I faced that SRX CPU utilization reaches to 100% suddenly after configuring three policies with address groups of 90 addresses. And then the telnet session was also broken for 2 mins approx but resume after that time. has any body experienced this? I am using junos 10.0R3.10

[j-nsp] MX240 running 10.1R1.8

2010-07-16 Thread Philip Palanchi
Two weeks ago we fired up two new mx240's running 10.1R1.8 and shortly after I noticed a large (and growing!) log file: file list /var/log/pfed_event_trace.log Well it seems to be a bug in EX series with backup RE. However it must be more widespread because we have MX with no backup RE!

Re: [j-nsp] SRX CPU utilization reaches 100%

2010-07-16 Thread Fahad Khan
Yes, it came back to normal with in this time and this is SRX3600 in chassis cluster. regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global Technology Services, IBM fa...@pk.ibm.com +92-301-8247638 Skype: fahad-ibm http://www.linkedin.com/in/muhammadfahadkhan On Fri, Jul 16,

[j-nsp] Enumerate All Possible VPN Tunnels? Really?

2010-07-16 Thread Crist Clark
I've got what I think should be a fairly vanilla hub-and-spoke VPN configuration. The hub is a Cisco ASA (really, it eventually should be dual hub, but wait until I get one working before I worry about that) and one of the spokes is a SRX (10.1). I can get a single tunnel up between the SRX and