Re: [j-nsp] MX960 PEMs and 3 phase power

2023-03-22 Thread Julien Goodwin via juniper-nsp
On 23/3/23 2:27 am, Tom Storey via juniper-nsp wrote: My thought is one PEM on one phase, such that if that phase drops, you drop that PEM entirely. Or is it worthwhile spreading across phases to keep even half of a PEM alive and supplying the chassis? Start by going back to "if that phase drop

[j-nsp] Kernel errors on EX2200-C

2019-05-15 Thread Julien Goodwin
My home EX2200-C has started logging a few kernel errors per hour, persisting after a reboot, and an upgrade to the latest 14.1 release (I'd have tried a downgrade to the latest 12.3 release suggested, except that release isn't available to me on the download site for some reason) /kernel: kuackm

Re: [j-nsp] Use cases for IntServ in MPLS backbones

2018-10-02 Thread Julien Goodwin
On 02/10/18 20:26, Saku Ytti wrote: > On Tue, 2 Oct 2018 at 13:21, Julien Goodwin wrote: > >> The trouble is, some providers might use a bit to mean something like >> "prefer cheap EU paths" for Asia->AU traffic, leaving it set then causes >> hundreds o

Re: [j-nsp] Use cases for IntServ in MPLS backbones

2018-10-02 Thread Julien Goodwin
On 02/10/18 20:10, Saku Ytti wrote: > Hey Mark, > >> We remark all incoming Internet traffic DSCP values to 0. >> >> A few years ago, not doing this led to issues where customers were handling >> the DSCP values in such a way that any traffic marked as such was being >> dropped. Took weeks to

Re: [j-nsp] Forced password resets?

2018-04-19 Thread Julien Goodwin
On 19/04/18 19:14, Saku Ytti wrote: > Anyone up for some IETF fun? I think this PW problem can be mostly > solved by an standard API. I imagine that you have some credentials > wallet which supports the API, browser which supports the API and HTTP > server which supports the API. You have some wa

[j-nsp] Forced password resets?

2018-04-19 Thread Julien Goodwin
"To help ensure your trust and security on www.juniper.net, we are asking all our users to change their passwords every 180 days" This is considered to not be good practice[1], and as this is new, makes me wonder whether something has happened that Juniper don't want to admit to yet. A general re

Re: [j-nsp] Going Juniper

2018-04-18 Thread Julien Goodwin
On 18/04/18 17:52, Gert Doering wrote: > Hi, > > On Wed, Apr 18, 2018 at 08:37:51AM +0100, adamv0...@netconsultings.com wrote: >> Ha, I really wish Juniper would look at what XR did on whole host of things >> :) > > Judging from the recent threads on JunOS upgrade pains, seems they did... > > "N

Re: [j-nsp] Going Juniper

2018-04-11 Thread Julien Goodwin
On 11/04/18 19:31, Saku Ytti wrote: > I suspect more correct reason is that they don't see sufficient market > potential in device like MX104. I think Cisco and Juniper are very > confused about market, they appear to think entire market consists > solely of large scale DC providers. That only addr

Re: [j-nsp] MX204 and copper SFP?

2018-04-05 Thread Julien Goodwin
On 05/04/18 05:09, Niall Donaghy wrote: > Even more sad to see that 1G ports retain their xe- naming rather than > changing to ge- as you would hope and expect. Isn't the first time that's happened, IIRC 10g PICs on T640s presented as ge-x/x/x. Newer kit seemed to be converging on et-x/x/x for an

Re: [j-nsp] Juniper UDP Amplification Attack - UDP port 111 ?

2018-03-26 Thread Julien Goodwin
On 26/03/18 17:31, Chris Adams wrote: > Got an MX204 - all the things left running on the Wind River Linux VM > host are pretty embarrassing (even if there's no actual network access > and so not a security issue). I have no need on a router for RPC, BIND, > Gluster, NFS, Zeroconf, Postfix, or dns

[j-nsp] Turns out lldpd leaks after a few years

2017-02-25 Thread Julien Goodwin
Somehow I've had stable power at home for almost 4 years ... and also forgotten to upgrade this thing. ... or fix the now very out of date interface descriptions. root@ex2200-c> show log messages | last Feb 25 22:21:58 ex2200-c newsyslog[49500]: logfile turned over due to -F request Feb 25 22:2

Re: [j-nsp] DHCPv6 client on SRX210 - IPv6 forwarding breaks at lease expiration

2015-08-01 Thread Julien Goodwin
On 02/08/15 02:28, Chris Woodfield wrote: TL;DR: IPv6 forwarding breaks when my DHCPv6 client lease expires, even though CLI output claims it’s been renewed. I have an SRX210 as my home gateway, running 12.1X46-D35.1. This is running dual stack to Comcast, receiving a /56 DHCPv6 delegation and

[j-nsp] SMB != Server Message Block

2015-07-10 Thread Julien Goodwin
Because I know a bunch of juniper staff read this list. In the datasheet for both the QFX10k & PTX1k is an error, I pointed it out back when the QFX10k launched, but it's not fixed and the PTX1k sheet has the same error. In both of them the Sub-Miniature B connectors used for timing have the

Re: [j-nsp] Junos BGP update generation inefficiency -cause for concern?

2015-05-18 Thread Julien Goodwin
On 18/05/15 21:49, Saku Ytti wrote: > The update-groups are created dynamically in JunOS as far as I know. > That is if you have BGP group where neighbors have unique export > policies, you will have multiple update-groups in configuration group. > But I guess if you have two neighbors with same ex

Re: [j-nsp] Juniper MX Upgrade / Configuration question

2014-10-16 Thread Julien Goodwin
On 16/10/14 21:07, Saku Ytti wrote: > On (2014-10-16 09:52 +0200), Sebastian Wiesinger wrote: > > Hi Sebastian, > >>> I was wondering if anyone knows where a MX router stores the boot >>> configuration its going to use after you load a new version of code >>> on the router. > >> a software upgra

Re: [j-nsp] Small P Router Recommendations

2014-06-05 Thread Julien Goodwin
On 05/06/14 22:22, Mark Tinka wrote: > On Thursday, June 05, 2014 01:58:50 PM Julien Goodwin wrote: > >> Sure there's not the redundancy of a PTX, but given that >> you can buy a pair of 5100's at list and I'm fairly sure >> would still be cheaper than the P

Re: [j-nsp] Small P Router Recommendations

2014-06-05 Thread Julien Goodwin
On 05/06/14 13:30, Ben Dale wrote: > > On 5 Jun 2014, at 12:00 pm, Geoff Crawford wrote: > >> Hi guys! >> >> I'm a Juniper fan too, but I'll take a non-Juniper answer today. Seems to be >> an MPLS heavily oriented list, so I figured you guys would know. >> >> I'm sure we'd all love an EX3200 ta

Re: [j-nsp] poll physical GigE and all its VLAN sub-interfaces counters over SNMP with single SNMP GetRequest query

2014-05-06 Thread Julien Goodwin
On 06/05/14 01:41, Martin T wrote: ... > ..it appears that VLAN sub-interfaces counters are not included. Is it > possible to request GigE and all its VLAN sub-interfaces counters over > SNMP with single SNMP GetRequest query? Or is the only option to poll > all the sub-interfaces and add the count

Re: [j-nsp] Junos: snapshot ?

2014-03-04 Thread Julien Goodwin
On 04/03/14 20:39, R S wrote: > A customer of mine runs MX960 (dual RE), SRX5800 and SRX3600 (cluster with > dual RE), EX8200 (dual RE) and EX4200 (in VC), in the weekend will run a > disaster recovery test powering off those devices. > I’d like to avoid any problem with files corruptions, which

Re: [j-nsp] proposed changes to "clear bgp neighbor"

2014-02-27 Thread Julien Goodwin
On 28/02/14 00:48, Phil Shafer wrote: > Sorry if I'm venturing toward shameless self promotion here, but > this really is an area we try to work at. That's part of the > movation for asking if this one specific case is sufficiently > irritating to break our own rules. But it's not "one specific c

[j-nsp] Juniper finally launches a route reflector platform

2014-02-24 Thread Julien Goodwin
And in a sensible form factor too. http://www.juniper.net/us/en/products-services/routing/cse2000/ Can think of plenty of other use cases for the box as well. signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-n

Re: [j-nsp] Power issues on 10Gig link

2014-01-24 Thread Julien Goodwin
On 24/01/14 12:39, Skeeve Stevens wrote: > Hmmm.. Is there actually a way on Juniper to adjust the output power though? I'm not aware of any MSA optics (SFP, XFP, GBIC, CFP, etc.) that have controllable power levels. Certainly if you're using a transmission system there's probably an adjustable at

Re: [j-nsp] Power issues on 10Gig link

2014-01-24 Thread Julien Goodwin
r.com/networkceoau> > linkedin.com/in/alisumsam > > > The Experts Who The Experts Call > Juniper - Cisco - Cloud > _______ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Julien Goodwin Studio4

Re: [j-nsp] Heterogeneous LACP link

2013-09-16 Thread Julien Goodwin
On 16/09/13 11:52, Laurent CARON wrote: > Current setup: 2 VCs (one on each site) each composed of 2xEX4200-24T > > I have the possibility of having a redundant connection between 2 > buildings distant of ~10/15 km. > > The main link is a pair of dark fibers on which I'll use 40 km XFP modules. >

[j-nsp] LN2600: an 8SFP Branch SRX

2013-08-02 Thread Julien Goodwin
Saw this come through on my RSS reader, it's worth a shout out as I'm sure more people than just me have been wanting a branch SRX with decent SFP density there's finally an option. http://www.juniper.net/us/en/products-services/routing/ln-series/ln2600/ I'm assuming it runs the same branch SRX i

Re: [j-nsp] EX3200 Power supplies

2013-07-27 Thread Julien Goodwin
On 26/07/13 01:52, Doug McIntyre wrote: > On Thu, Jul 25, 2013 at 09:01:15AM -0400, Paulhamus, Jon wrote: >> Power Supply in EX3200 Switches >> The power supply in EX3200 switches is a hot-removable and hot-insertable >> field-replaceable unit (FRU) that you can install on the rear panel without

Re: [j-nsp] Advice on a 100Gbps+ environment

2013-07-02 Thread Julien Goodwin
On 03/07/13 00:56, Darius Jahandarie wrote: > On Tue, Jul 2, 2013 at 9:55 AM, Drew Weaver wrote: >> And what is wrong with the MX80 as a peering/transit router for up to 80Gbps >> of traffic? > > The lack of redundant REs + inability to have an external RE. Other than the amount of CPU capacity

Re: [j-nsp] SRX 3600 dropped packets - how to debug?

2013-05-28 Thread Julien Goodwin
so that DNS queries can only go to trusted DNS servers which can run something that doesn't break on a malformed query. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature _

Re: [j-nsp] MX - Changing MAC address on different unit of the same interface

2013-04-05 Thread Julien Goodwin
se which can easily lead to a request to do per-VLAN mac's. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.n

[j-nsp] EX2200-C SNMP traps

2013-03-26 Thread Julien Goodwin
I upgraded a new EX2200-c to 12.3 the other day (was shipped with a broken release of 11.4), and every hour I'm getting clearly BS traps: CHASSISD_SNMP_TRAP6: SNMP trap generated: Power Supply Removed (jnxContentsContainerIndex 2, jnxContentsL1Index 2, jnxContentsL2Index 1, jnxContentsL3Index 0

Re: [j-nsp] RAM Type for SRX240

2013-03-24 Thread Julien Goodwin
book.com/eintellegonetworks ; <http://twitter.com/networkceoau> > linkedin.com/in/skeeve > > twitter.com/networkceoau ; blog: www.network-ceo.net > > > The Experts Who The Experts Call > Juniper - Cisco - Cloud > ___________ &

Re: [j-nsp] MX80 BGP performance after reboot

2013-02-14 Thread Julien Goodwin
has a salubrious interaction with our loose rpf check. > spontaneous reboots aren't quite adjustable like that. This. Why Juniper don't implement (or scream from the rooftops if there is) an iBGP-settle ability I don't know. -- Julien Goodwin Studio442 "Blue Sky Solutioneerin

[j-nsp] L2ALM errors on SRX?

2013-01-18 Thread Julien Goodwin
I've just started dumping syslog on my permanent lab devices at home, and the SRX210 is regularly throwing this: L2ALM: trying master connection, status 61, attempt 5000 The attempt increases, but the message is only logged very rarely (this is shortly after a reboot). I now see this on 11.4R2.1

Re: [j-nsp] SRX doing IPv6 on DSL

2012-12-10 Thread Julien Goodwin
niper - Cisco – IBM - Brocade - Cloud > - > Check out our Juniper promotion website! eintellego.mx > Free Apple products during this promotion!!! > ___________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://pu

Re: [j-nsp] Error while validating a JunOS

2012-12-03 Thread Julien Goodwin
ad > "domestic" JunOS for J-series, which I did previously have. > > I have retained "domestic" download access for SRX. It's probably the new download page, there's a dropdown for domestic vs worldwide that's a little non-obvious. -- Julien Goodwin

Re: [j-nsp] Weird SRX flow timeout issue

2012-11-13 Thread Julien Goodwin
I would > say, is something related to broken routing. > > 13.11.2012 10:08 пользователь "Julien Goodwin" > mailto:jgood...@studio442.com.au>> написал: > > On 12/11/12 16:03, Tim Eberhard wrote: > > Benny, > > > > I'

Re: [j-nsp] Weird SRX flow timeout issue

2012-11-12 Thread Julien Goodwin
On 12/11/12 16:03, Tim Eberhard wrote: > Benny, > > I've been working with the SRX since before it was in beta loading it > up on a SSG550-M and netscreen previous to that. TCP keep alives, or > any tcp packet that transverses that session has ALWAYS reset the > timeout. The only time where you wo

Re: [j-nsp] Weird SRX flow timeout issue

2012-11-12 Thread Julien Goodwin
doesn't (or at least a few years ago didn't) consider TCP keepalives sufficient to keep the session open. I found any form of application keepalive sufficient. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature __

Re: [j-nsp] MX - DWDM no link

2012-11-07 Thread Julien Goodwin
IRC you should see the wavelength listed here, but I don't have a tunable to hand (yay! excuse to buy a lab toy, shame I have no money for such) -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___

Re: [j-nsp] Security bugs in documentation

2012-10-31 Thread Julien Goodwin
On 30/10/12 20:21, Bjørn Mork wrote: > Using an open source viewer, all I see in that document is a single page > displaying > > "For the best experience, open this PDF portfolio in > Acrobat 9 or Adobe Reader 9, or later." > > and a link to "Get Adobe Reader Now!". And sure enough, inspectin

Re: [j-nsp] MX5 to MX80 virtual chassis feature

2012-10-22 Thread Julien Goodwin
d be unsurprised if VC on MX80 turns out like LNS support, where "it's coming" becomes "we'll never do it" and then "here's the OS image supporting it" -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenP

Re: [j-nsp] QFX3500-48S4Q-ACR

2012-09-27 Thread Julien Goodwin
sons why? (other than the whole locked optics thing) -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] LACP Load Balance

2012-08-28 Thread Julien Goodwin
which side is uneven you might find help in: EX: http://kb.juniper.net/InfoCenter/index?page=content&id=KB22943&smlogin=true MX: http://www.juniper.net/techpubs/en_US/junos10.3/topics/concept/layer-2-services-load-balancing-and-link-aggregation.html -- Julien Goodwin Studio442 &q

Re: [j-nsp] MX960 AC power strip

2012-08-23 Thread Julien Goodwin
__ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature

Re: [j-nsp] root-login via ssh and 11.x

2012-06-26 Thread Julien Goodwin
(No, nobody I've every worked for has that, at least on Juniper kit) -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper Networks fail to protect Linx from outage

2012-06-04 Thread Julien Goodwin
ing what truly happened, not very classy at all > (especially if it turns out to be operator error). Except that Juniper pretty much built this (according to friends-of-friends), so it's either Juniper engineer error or JunOS bug. At the very least Juniper would be fully aware of the config.

Re: [j-nsp] vmember limits in EX series stack

2012-05-29 Thread Julien Goodwin
On 01/05/12 13:15, Naveen Nathan wrote: > I'm attempting to retire a cisco 6509 setup, replacing it with an EX4200 > virtual chassis configuration (8 linecards). I've run into a warning > when committing the configuration: > > warning: Exceeded vmember threshold limit, it is recommended to > have

Re: [j-nsp] Extremely high failure rate of SCB-E?

2012-05-28 Thread Julien Goodwin
be new and should be expected to have higher failure rates, at least until the first few production runs are sold through. As they don't have large SRAM/TCAM there shouldn't be the typical first run of a new RAM process issues. -- Julien Goodwin Studio442 "Blue Sky Solutioneering&qu

Re: [j-nsp] what would you put in this PoP

2012-05-22 Thread Julien Goodwin
_ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] 10ge wan phy with stm-64

2012-05-22 Thread Julien Goodwin
On 22/05/12 23:00, JA wrote: > Hi > > Can anyone please confirm if below connectivity would work with 10ge wan > phy router port at one side while other end router with stm-64 port? No this won't work. > rtr[10ge.wan.phy] --- sdh[stm64] --- dwdm.ring --- sdh[stm64] --- rtr[stm64] WAN-PHY doesn'

Re: [j-nsp] MTBF of M-serie nodes and PICs

2012-05-14 Thread Julien Goodwin
ll be: - Moving parts: fans, hard drives - Memory - Optical modules Once you get past that you're into rare territory. MTBF is a horrible measurement for network kit, you really only care if you need redundency and if so how much, and MTBF doesn't actually tell you very much of that. --

Re: [j-nsp] Regular maintenance advice

2012-04-03 Thread Julien Goodwin
On 04/04/12 00:28, Skeeve Stevens wrote: > 1. Show log messages > > a. Look at last few days for anything suspicious > > i. Interfaces flapping "show int | match flap" is your friend. Also chassisd > 2. Show interfaces terse > > a. Anything down that shouldn’t b

[j-nsp] 12.1 and a bunch of new product details out

2012-03-29 Thread Julien Goodwin
df There's also a bunch of T4000 docs up now. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Only announce BGP learned networks

2012-02-20 Thread Julien Goodwin
ller networks with few edge BGP speakers, larger networks should use their existing confederation / reflector boundries as points to inject that regions self into BGP) -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature _

Re: [j-nsp] Hash algorithms for LAG

2012-01-21 Thread Julien Goodwin
#x27;t have to be a juniper patent. They may have licensed it from someone. > In fact this may explain their secrecy - they may want to downplay that they > bought in tech! *cough* Broadcom Trident(+) *cough* -- Julien Goodwin Studio442 "Blue Sky Solutioneering" sign

Re: [j-nsp] Hash algorithms for LAG

2012-01-20 Thread Julien Goodwin
point of a patent is that you publish your invention in a way that others can replicate once it expires (true that rarely happens these days) -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature

Re: [j-nsp] QFX3500 optics lock?

2012-01-07 Thread Julien Goodwin
On 07/01/12 15:50, Salman Zahid wrote: > 2. In terms of 3rd party optics support , we are evaluating the support > for 3rd party optics . Please continue to check the Juniper documentation and > talk to your account team for roadmap information . My ire has cooled considerably since reading

Re: [j-nsp] QFX3500 optics lock?

2012-01-06 Thread Julien Goodwin
On 07/01/12 13:34, Chuck Anderson wrote: > To clarify my original question, does anyone know of any such > server/storage/NIC/HBA vendors out there that insist you use their DAC > cables? I want to be sure not to buy those either, because last I > checked, you can't put SFP+ DAC Vendor A on one en

Re: [j-nsp] JUNOS 9.6R3.8 on MX

2011-12-14 Thread Julien Goodwin
quot;Insane in the Control Plane" -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J-Series Router Options

2011-11-07 Thread Julien Goodwin
to open them anyway for RAM doing both makes sense. Most likely you'd build the new image & config in the lab and send out RAM+CF to be upgraded on site. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature

Re: [j-nsp] TCAM full on EX8200?

2011-10-16 Thread Julien Goodwin
On 16/10/11 13:28, Richard A Steenbergen wrote: > Of course the traditional router vendors are also realizing that they > won't be able to compete on price given the massive volumes that third > party ASIC makers are doing, so they've already started building systems > around those chips. The

Re: [j-nsp] TCAM full on EX8200?

2011-10-15 Thread Julien Goodwin
-haul applications require actual Sonet (well, usually SDH). Fortunately those are few enough that a lack of density compared to 10g ethernet isn't a massive issue. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.a

Re: [j-nsp] TCAM full on EX8200?

2011-10-15 Thread Julien Goodwin
he MX is > just as capable of doing everything T does w/MPLS as a core router, but > at 1/4 the price), they aren't ACTUALLY trying to make a cheaper LSR. :) I do object to the "still vaporware", "not due to ship until the end of the year" is closer. The main threat t

Re: [j-nsp] JUNOS and 128.0.0.0 martian (JFYI)

2011-10-10 Thread Julien Goodwin
On 10/10/11 23:39, Tima Maryin wrote: > Hello! > > > Recently RIPE NCC started to allocate addresses from 128/8 to end users, > example: > > https://apps.db.ripe.net/whois/lookup/ripe/inetnum/128.0.0.0-128.0.7.255.html > inet.0: > 128.0.0.0/16 orlonger -- disallowed It's only the

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Julien Goodwin
uld be a profitable side-business for someone). -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper MX SCBE-MX-R

2011-08-11 Thread Julien Goodwin
On 08/11/11 19:00, Daniel Roesen wrote: > On Wed, Aug 10, 2011 at 11:29:23PM -0400, Rakesh Shetty wrote: >> What I got from juniper is that the enhanced SCB will only be >> supported in 11.4 which is April 2012. > > We're hearing 11.4 is due end of 2011. At the rate Juniper is slipping these day

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Julien Goodwin
like implementation for the MX80, although I don't know if that went anywhere. Now that they have the XRE200 what about letting us install Junos64 on it and making it a reflector platform. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Desc

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Julien Goodwin
problem. As I understand it, the flash is soldered on similar to the EX's instead of just using an internal CF or SD slot which would have helped. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature __

Re: [j-nsp] MX, Nat + BGP

2011-05-17 Thread Julien Goodwin
ly SRX, but with an SRX just announce the NAT pool as a route (static and readvertise, for whatever reason just adding a pool isn't enough to make it eligible for redist), don't need to assign it to an interface at all. -- Julien Goodwin Studio442 "Blue Sky Solutioneering&quo

Re: [j-nsp] Changing SSH port on EX switches, M routers

2011-04-03 Thread Julien Goodwin
On 03/04/11 02:13, Jesus Alvarez wrote: > It should be trivial to implement a configurable SSH port in the Junos True. > firmware and this would help in securing the router. Practically all I doubt it. > scanners attempt SSH logins when port 22 is available but very few check > all available po

Re: [j-nsp] VPLS scalability question.. OTV answer?

2011-03-27 Thread Julien Goodwin
The short answer is: http://www.juniper.net/techpubs/software/junos/junos92/swconfig-vpns/configuring-vpls-without-a-tunnel-services-pic.html This is meant to just need recent-ish pic's facing the MPLS cloud. On 28/03/11 09:53, Chris Evans wrote: > All the communication that we've received from J

Re: [j-nsp] virtual router, M or J?

2011-03-10 Thread Julien Goodwin
the MX80 covers a lot, but wouldn't suit your needs due to (current) lack of services. If and when Juniper launch SONET MIC's I think that will be the end of the smaller M's. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP

Re: [j-nsp] virtual router, M or J?

2011-03-09 Thread Julien Goodwin
On 10/03/11 16:50, Julien Goodwin wrote: > It sounds like what you really want is just an SRX (Probably 2x240, 650 > or 1400). Scratch the 240's, from the data sheet: Maximum security zones: - SRX240 - 32 - SRX650 - 128 - SRX3k - 256 (1k should be the same, but not listed on it&#

Re: [j-nsp] virtual router, M or J?

2011-03-09 Thread Julien Goodwin
one is better in this > particular setup? M is hardware based, J is software based. But J seems to > support more features although they are both based on the same software. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital sig

Re: [j-nsp] Difference between M320 and T320

2011-03-08 Thread Julien Goodwin
ea if it works but it's certainly not supported. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] J2350 & Dual fast ethernet PIM

2011-03-03 Thread Julien Goodwin
uniper.net/techpubs/hardware/junos-jseries/junos-jseries96/junos-jseries-hardware-guide/hw-hardware-features-j2320-j2350.html#hw-hardware-features-j2320-j2350 -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenP

Re: [j-nsp] SRX advice

2011-02-03 Thread Julien Goodwin
fussy? I don't run SRX's in HA, the only issues I've had in production are firmware related (note that you can't do an online firmware upgrade of a HA cluster, there's still a hit). I would suggest an SRX650 over the SRX240, would be far more confident in that handlin

Re: [j-nsp] Sync-E and PTP (1588v2) support on Juniper equipment

2011-01-21 Thread Julien Goodwin
On 21/01/11 23:02, Timo Mallas wrote: > It would be great if somebody who has got some experience with this could > shed a little light on frequency (and ToD/phase) synchronization protocol > like Sync-E and 1588v2 support on Juniper equipment? > > A customer of ours is considering to migrante fr

Re: [j-nsp] Routing to tunnel interfaces on M10i

2011-01-18 Thread Julien Goodwin
On 19/01/11 01:35, Alexander Shikoff wrote: > On Wed, Jan 19, 2011 at 01:20:00AM +1100, Julien Goodwin wrote: >> 2. Do you have a tunnel pic? >> - Some quick googling does seem to confirm IPIP needs a tunnel pic >> - However traffic to the RE may still work without one >

Re: [j-nsp] Routing to tunnel interfaces on M10i

2011-01-18 Thread Julien Goodwin
te the IGP, then try to send the encapsulated traffic over the tunnel itself (JunOS will do this with both SRX and ES-pic IPSec), static /32's can help here -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature

Re: [j-nsp] logical-systems & loopback's

2011-01-03 Thread Julien Goodwin
While I'm on the topic of things which aren't quite right, why does commiting an aggregated-sonet or ethernet connection without setting device count (chassis -> aggregated-devices) not throw at least a warning that this will silently fail? -- Julien Goodwin Studio442 "Blue

[j-nsp] logical-systems & loopback's

2011-01-03 Thread Julien Goodwin
interfaces as1 unit 0 family inet unnumbered-address] 'lo0.0' referred interface must have address configured under family inet error: configuration check-out failed: (statements constraint check failed) Which seems right, so there's clearly something special happening. --

Re: [j-nsp] Cisco 7206 replacement

2010-12-28 Thread Julien Goodwin
tform would still be great, although I doubt Juniper will launch one as it would likely just cannibalise sales of the MX80 (Something with just the interfaces from an SRX1400-10G would be awesome). -- Julien Goodwin Studio442 "Blue Sky Solutioneering" ___

[j-nsp] On upgrading an M5

2010-12-26 Thread Julien Goodwin
ck (at lest in a 9.3 -> 10.0 upgrade) PIC's: P-style pic's still work without alarm, at least as of 10.0R2.10. Just remember to add some form of ejector *before* installing into the chassis, or at least mount it next to a PE pic. -- Julien Goodwin Studio442 "Blue Sky Solutioneer

Re: [j-nsp] Juniper SRX and ssh freeze

2010-12-23 Thread Julien Goodwin
On 23/12/10 21:34, Florian Weimer wrote: > * Julien Goodwin: > >> For my SRX at the office back when I installed it (9.6 IIRC) *TCP* >> keepalives would not extend session timeouts, but *SSH* keepalives >> worked very well, that's the ServerAliveInterval setting in

Re: [j-nsp] Juniper SRX and ssh freeze

2010-12-21 Thread Julien Goodwin
en a connection *does* drop. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX unsupported filter policer and actions on loopback lo0

2010-12-18 Thread Julien Goodwin
: https://sites.google.com/site/ipv6implementors/2010/agenda -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] l2tp sessions on MX

2010-12-13 Thread Julien Goodwin
he other platforms with LNS support? -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] l2tp sessions on MX

2010-12-13 Thread Julien Goodwin
On 13/12/10 17:21, Amos Rosenboim wrote: > L2TP termination is not currently supported on the MX. > According to an SE I work with this is on their radar but no committed date > yet. More to the point it's publicly advertised in the marketing materials for the Trio boards &

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-09 Thread Julien Goodwin
On 09/11/10 20:12, Keegan Holley wrote: > > On Mon, Nov 8, 2010 at 10:26 PM, Julien Goodwin > mailto:jgood...@studio442.com.au>> wrote: > > On 09/11/10 14:17, Keegan Holley wrote: > > BGP full feed on an SRX650 is fine, if you disable flow mode > (

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Julien Goodwin
On 09/11/10 14:17, Keegan Holley wrote: > BGP full feed on an SRX650 is fine, if you disable flow mode (as much as > you can, don't forget the ALG's). > > > What's the point of doing BGP on a firewall with firewallling turned off? Because they're cheaper then the J-series. signature.

Re: [j-nsp] EX4200 JunOS Recommendation

2010-11-08 Thread Julien Goodwin
e main reason I haven't is that I currently have one feature working that shouldn't. If Juniper actually delivered on their promise of IPv6 equality this wouldn't be an issue (and that's enough for anyone who cares to figure out what I mean). -- Julien Goodwin Studio442 &qu

Re: [j-nsp] Using SRX's for BGP and Firewalling

2010-11-08 Thread Julien Goodwin
t the ALG's). BGP with a default inbound and advertising a few routes is fine with firewalling. Combining a full feed with firewalling is a bad idea, at least on the branch kit, and probably the SRK1k and 3k. -- Julien Goodwin Studio442 "Blue Sk

Re: [j-nsp] Fwd: router recommendation

2010-10-25 Thread Julien Goodwin
January) in 1g of ram. With flow-mode I've had to up ours to 3GB (above Juniper spec) at which point they handle three full tables with plenty to spare. -- Julien Goodwin Studio442 "Blue Sky Solutioneering" ___ juniper-nsp mailing list j

Re: [j-nsp] SRX650 10GbE Interfaces

2010-10-20 Thread Julien Goodwin
hen remember it's (essentially) a 2x10g module for a router that doesn't just do ethernet (even if that's all anyone does use them for) and so a lot of bits that are included as standard in ethernet-only gear is on the module. -- Julien Goodwin Studio442 "Blue Sky

[j-nsp] Non-M SSG5X0 & JunOS

2010-10-03 Thread Julien Goodwin
actual hardware change? -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] OSPF default-lsa

2010-07-27 Thread Julien Goodwin
On 27/07/10 18:42, Luca Tosolini wrote: > the default-lsa is not generated because of Junos 'active backbone > detection' > > http://www.juniper.net/techpubs/software/junos/junos94/swconfig-routing/configuring-the-backbone-area-and-other-areas.html > > "Active backbone detection is implemented to

[j-nsp] OSPF default-lsa

2010-07-26 Thread Julien Goodwin
ies may be? -- Julien Goodwin Studio442 "Blue Sky Solutioneering" signature.asc Description: OpenPGP digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX 4200 stability with BGP and OSPF redistribution ?

2010-06-22 Thread Julien Goodwin
mit. Under heavy BGP load, and although it won't admit it I strongly believe heavy memory pressures (two full feeds, plus four other feeds totalling ~50k routes on a 1GB system in 10.0R2, RAM has been ordered and the second full feed turned off). -- Julien Goodwin Studio442 "Blue Sky S

Re: [j-nsp] MX80 L2TP Functions

2010-06-10 Thread Julien Goodwin
Vlachos wrote: > > According to the pricelist the ms-dpc is not supported on the MX80 > > > -Original Message- > From: juniper-nsp-boun...@puck.nether.net > [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of OBrien, Will > Sent: Friday, June 11, 2010 7:18 A

  1   2   >