[j-nsp] Screen OS OSPF Area 0

2010-03-11 Thread Abhi
Hi everybody
need to know weather their is way i can disable the default created OSPF area 0 
on the screen OS ISG1000 firewall after the OSPF is enabled, as i need all the 
interfaces of the firewall in same area x to which it belongs.

Also if i keep this area 0 as it is and dont assign any interface is that ok, 
and rest of the interfaces belong to Area X, should this work fine.

I have not work screen os box and we are currently deciding how this can be 
deployed in the upcoming network.


 
Regards
Abhijeet.C

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Verify loss priority for a forwarding class

2010-03-11 Thread meryem Z

Hello David ,

Thanks for your response, but this command is supported M320 routers and 
T-series routing platforms only..
Is there any equivalent for M7i routers ?


Thank you.


 From: david@orange-ftgroup.com
 To: merye...@hotmail.com
 CC: juniper-nsp@puck.nether.net
 Date: Wed, 10 Mar 2010 14:12:10 +0100
 Subject: RE: [j-nsp] Verify loss priority for a forwarding class
 
 Hi,
 
 You can view drops at the fabric level via the command :
  
  show class-of-service fabric statistics
 
 David
 
 
 
  
 David Roy
 Orange France - RBCI IP Technical Assistance Center
 Tel.   +33(0)299876472
 Mob. +33(0)685522213
 Email. david@orange-ftgroup.com
  
 
 -Message d'origine-
 De : juniper-nsp-boun...@puck.nether.net 
 [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z
 Envoyé : mercredi 10 mars 2010 13:17
 Cc : juniper-nsp@puck.nether.net
 Objet : [j-nsp] Verify loss priority for a forwarding class
 
 
 hello Community,
 
 I configured a forwarding class with high priority loss. Now I need to verify 
 that the traffic sent under this forwarding class ( using a traffic 
 generator) has a high priority loss. The show interface queue  doesn't show 
 this information. is there any other way to do it ?
 
 Thank you.
 
 
 
 _
 Votre messagerie et bien plus où que vous soyez. Passez à Windows Live 
 Hotmail, c'est gratuit !
 https://signup.live.com/signup.aspx?id=60969
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 *
 This message and any attachments (the message) are confidential and 
 intended solely for the addressees. 
 Any unauthorised use or dissemination is prohibited.
 Messages are susceptible to alteration. 
 France Telecom Group shall not be liable for the message if altered, changed 
 or falsified.
 If you are not the intended addressee of this message, please cancel it 
 immediately and inform the sender.
 
 
  
_
Hotmail : une messagerie performante et gratuite avec une sécurité signée 
Microsoft
https://signup.live.com/signup.aspx?id=60969
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Verify loss priority for a forwarding class

2010-03-11 Thread Addy Mathur
Meryem:

Maybe try a firewall filter with a counter on the egress interface?
Something like:

from forwarding-class forwarding-class_name
from loss-priority high
then count fc-blah_lp-high
then accept

--Addy.


On 3/11/10, meryem Z merye...@hotmail.com wrote:

 Hello David ,

 Thanks for your response, but this command is supported M320 routers and
 T-series routing platforms only..
 Is there any equivalent for M7i routers ?


 Thank you.


 From: david@orange-ftgroup.com
 To: merye...@hotmail.com
 CC: juniper-nsp@puck.nether.net
 Date: Wed, 10 Mar 2010 14:12:10 +0100
 Subject: RE: [j-nsp] Verify loss priority for a forwarding class

 Hi,

 You can view drops at the fabric level via the command :

  show class-of-service fabric statistics

 David




 David Roy
 Orange France - RBCI IP Technical Assistance Center
 Tel.   +33(0)299876472
 Mob. +33(0)685522213
 Email. david@orange-ftgroup.com


 -Message d'origine-
 De : juniper-nsp-boun...@puck.nether.net
 [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z
 Envoyé : mercredi 10 mars 2010 13:17
 Cc : juniper-nsp@puck.nether.net
 Objet : [j-nsp] Verify loss priority for a forwarding class


 hello Community,

 I configured a forwarding class with high priority loss. Now I need to
 verify that the traffic sent under this forwarding class ( using a traffic
 generator) has a high priority loss. The show interface queue  doesn't
 show this information. is there any other way to do it ?

 Thank you.


  
 _
 Votre messagerie et bien plus où que vous soyez. Passez à Windows Live
 Hotmail, c'est gratuit !
 https://signup.live.com/signup.aspx?id=60969
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

 *
 This message and any attachments (the message) are confidential and
 intended solely for the addressees.
 Any unauthorised use or dissemination is prohibited.
 Messages are susceptible to alteration.
 France Telecom Group shall not be liable for the message if altered,
 changed or falsified.
 If you are not the intended addressee of this message, please cancel it
 immediately and inform the sender.
 

   
 _
 Hotmail : une messagerie performante et gratuite avec une sécurité signée
 Microsoft
 https://signup.live.com/signup.aspx?id=60969
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


-- 
Sent from my mobile device

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] M20 FE PIC

2010-03-11 Thread David Reader

Hi all,

Can any of you confirm if the P-4FE-TX module for the M20 supports 10-Base-T 
operation, or if it is 100Mbit only?

Thanks,
d.



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] training suggestions for advanced MX router kung fu

2010-03-11 Thread OBrien, Will
Hey guys,
I'd like to hunt down some advanced training for the MX platform. Any 
suggestions/reviews? To give you a feel for what I'm after, mine are border 
gateways with full BGP feeds from I1 and I2 and police traffic per individual 
user ip address to destination ip for a couple of /16s. From there, I generate 
default routes to the rest of my network via OSPF.

From here I'm hoping to collapse some Nortel 8600s into virtual routers and 
possibly replace some of my firewall functionality with a MS-DPC to free up 
some netscreen 5400s (and then put the 5400s into a dual chassis HA mode for 
my data center

Will
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] M20 FE PIC

2010-03-11 Thread Jared Mauch

On Mar 11, 2010, at 9:43 AM, David Reader wrote:

 Can any of you confirm if the P-4FE-TX module for the M20 supports 10-Base-T 
 operation, or if it is 100Mbit only?

100m only.

- Jared
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Verify loss priority for a forwarding class

2010-03-11 Thread meryem Z

it seems a good idea , i will test it.

thank you.



 Date: Thu, 11 Mar 2010 07:14:31 -0500
 Subject: Re: [j-nsp] Verify loss priority for a forwarding class
 From: addy.mat...@gmail.com
 To: merye...@hotmail.com; david@orange-ftgroup.com; 
 juniper-nsp@puck.nether.net
 
 Meryem:
 
 Maybe try a firewall filter with a counter on the egress interface?
 Something like:
 
 from forwarding-class forwarding-class_name
 from loss-priority high
 then count fc-blah_lp-high
 then accept
 
 --Addy.
 
 
 On 3/11/10, meryem Z merye...@hotmail.com wrote:
 
  Hello David ,
 
  Thanks for your response, but this command is supported M320 routers and
  T-series routing platforms only..
  Is there any equivalent for M7i routers ?
 
 
  Thank you.
 
 
  From: david@orange-ftgroup.com
  To: merye...@hotmail.com
  CC: juniper-nsp@puck.nether.net
  Date: Wed, 10 Mar 2010 14:12:10 +0100
  Subject: RE: [j-nsp] Verify loss priority for a forwarding class
 
  Hi,
 
  You can view drops at the fabric level via the command :
 
   show class-of-service fabric statistics
 
  David
 
 
 
 
  David Roy
  Orange France - RBCI IP Technical Assistance Center
  Tel.   +33(0)299876472
  Mob. +33(0)685522213
  Email. david@orange-ftgroup.com
 
 
  -Message d'origine-
  De : juniper-nsp-boun...@puck.nether.net
  [mailto:juniper-nsp-boun...@puck.nether.net] De la part de meryem Z
  Envoyé : mercredi 10 mars 2010 13:17
  Cc : juniper-nsp@puck.nether.net
  Objet : [j-nsp] Verify loss priority for a forwarding class
 
 
  hello Community,
 
  I configured a forwarding class with high priority loss. Now I need to
  verify that the traffic sent under this forwarding class ( using a traffic
  generator) has a high priority loss. The show interface queue  doesn't
  show this information. is there any other way to do it ?
 
  Thank you.
 
 
 
  _
  Votre messagerie et bien plus où que vous soyez. Passez à Windows Live
  Hotmail, c'est gratuit !
  https://signup.live.com/signup.aspx?id=60969
  ___
  juniper-nsp mailing list juniper-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp
 
  *
  This message and any attachments (the message) are confidential and
  intended solely for the addressees.
  Any unauthorised use or dissemination is prohibited.
  Messages are susceptible to alteration.
  France Telecom Group shall not be liable for the message if altered,
  changed or falsified.
  If you are not the intended addressee of this message, please cancel it
  immediately and inform the sender.
  
 
  
  _
  Hotmail : une messagerie performante et gratuite avec une sécurité signée
  Microsoft
  https://signup.live.com/signup.aspx?id=60969
  ___
  juniper-nsp mailing list juniper-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 
 -- 
 Sent from my mobile device
  
_
Hotmail : un service de messagerie gratuit, fiable et complet
https://signup.live.com/signup.aspx?id=60969
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Screen OS OSPF Area 0

2010-03-11 Thread Stefan Fouant
 -Original Message-
 From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
 boun...@puck.nether.net] On Behalf Of Abhi
 Sent: Thursday, March 11, 2010 3:44 AM
 To: Juniper Puck
 Subject: [j-nsp] Screen OS OSPF Area 0
 
 Hi everybody
 need to know weather their is way i can disable the default created
 OSPF area 0 on the screen OS ISG1000 firewall after the OSPF is
 enabled, as i need all the interfaces of the firewall in same area x to
 which it belongs.
 
 Also if i keep this area 0 as it is and dont assign any interface is
 that ok, and rest of the interfaces belong to Area X, should this work
 fine.
 
 I have not work screen os box and we are currently deciding how this
 can be deployed in the upcoming network.

You can just configure new areas and add your interfaces to their respective
areas.  As long as you don't have any interfaces bound to Area 0 you will be
fine.  IIRC you can't delete this default created Area in ScreenOS.

HTHs.

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Shane Ronan

Hello list,

I have exhausted all of my capabilities to figure out the answer to  
this question, so I am hoping you can help.


I have two connections to the same network, which both provide me  
routes via RIP for Multicast sources.


Is there a way for me to prefer the routes I receive via one of the  
connections over there other?


Thanks,
Shane

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] Netscreen NAT and TCP window scaling issues

2010-03-11 Thread chk
I have a client sitting behind a netscreen firewall that is seeing a 
delay when trying to connect via tcp to a server on the internet while 
being natted to the netscreens external IP and TCP window scaling is 
enabled. If I create a one-to-one nat mapping specifically for the 
client the connection is instant.


Here is the tcpdump on the server when the client tries to connect while 
being natted to the netscreens external IP with TCP window scaling enabled


16:23:08.847308 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981609 0,sackOK,eol
16:23:09.755649 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981618 0,sackOK,eol
16:23:10.756198 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981628 0,sackOK,eol
16:23:11.756782 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981638 0,sackOK,eol
16:23:12.757413 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981648 0,sackOK,eol
16:23:13.758127 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981658 0,sackOK,eol
16:23:15.759429 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 153981678 0,sackOK,eol
16:23:19.762105 IP x.x.x.x.42852  y.y.y.177.22: S 
3899166006:3899166006(0) win 65535 mss 1380,sackOK,eol
16:23:19.762130 IP y.y.y.177.22  x.x.x.x.42852: S 
4286889391:4286889391(0) ack 3899166007 win 5840 mss 1460



Here is the tcpdump on the server when the client tries to connect while 
a one-to-one nat is in place with TCP window scaling enabled


17:51:42.373439 IP x.x.x.x.49165  y.y.y.177.22: S 
1731332088:1731332088(0) win 65535 mss 1380,nop,wscale 
3,nop,nop,timestamp 409029697 0,sackOK,eol
17:51:42.438272 IP y.y.y.177.22  x.x.x.49165: S 
1297584268:1297584268(0) ack 1731332089 win 5792 mss 
1460,nop,nop,timestamp 1704280650 409029697,nop,wscale 9


When the client is being natted to the netscreens public IP we see the 
SYN makes it to the server, but the server ignores the SYN if the TCP 
window scale option is set. As soon as the client leaves the window 
scale option unset the server responds with a SYN-ACK. So it appears 
there is an issue with window scaling and we verified that disabling 
window scaling on the client resulted in instant connection. With that 
being said, we also saw that connections were not delayed if windows 
scaling was enabled and the client had a one-to-one mapping on the 
netscreen. Any ideas on why there is an issue with window scaling and 
one-to-many nat mappings?


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Shane Ronan
I tried this, but it seems to set the metric for the route, and does  
cause the router to choose one interface over the other.


Shane

On Mar 11, 2010, at 7:16 PM, Hoogen wrote:


This should work..

set protocols rip group rip neighbor int metric-in metric

-Hoogen

On Thu, Mar 11, 2010 at 3:52 PM, Shane Ronan sro...@fattoc.com  
wrote:

Hello list,

I have exhausted all of my capabilities to figure out the answer to  
this question, so I am hoping you can help.


I have two connections to the same network, which both provide me  
routes via RIP for Multicast sources.


Is there a way for me to prefer the routes I receive via one of the  
connections over there other?


Thanks,
Shane

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Shane Ronan

Should have read does not cause sorry

On Mar 11, 2010, at 9:08 PM, Shane Ronan wrote:


I tried this, but it seems to set the metric for the route, and does
cause the router to choose one interface over the other.

Shane

On Mar 11, 2010, at 7:16 PM, Hoogen wrote:


This should work..

set protocols rip group rip neighbor int metric-in metric

-Hoogen

On Thu, Mar 11, 2010 at 3:52 PM, Shane Ronan sro...@fattoc.com
wrote:
Hello list,

I have exhausted all of my capabilities to figure out the answer to
this question, so I am hoping you can help.

I have two connections to the same network, which both provide me
routes via RIP for Multicast sources.

Is there a way for me to prefer the routes I receive via one of the
connections over there other?

Thanks,
Shane

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Stefan Fouant
 -Original Message-
 From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
 boun...@puck.nether.net] On Behalf Of Shane Ronan
 Sent: Thursday, March 11, 2010 4:53 PM
 To: Juniper Puck
 Subject: [j-nsp] Prefer RIP Neighbor
 
 Hello list,
 
 I have exhausted all of my capabilities to figure out the answer to
 this question, so I am hoping you can help.
 
 I have two connections to the same network, which both provide me
 routes via RIP for Multicast sources.
 
 Is there a way for me to prefer the routes I receive via one of the
 connections over there other?

Real stupid question, but did you try the metric-in statement to adjust the
metric for the route from one of the neighbors, assuming both neighbors are
not on the same interface...

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Shane Ronan
I did, and it seems to set the metric on the route, regardless of  
interface.


On Mar 11, 2010, at 9:28 PM, Stefan Fouant wrote:


-Original Message-
From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
boun...@puck.nether.net] On Behalf Of Shane Ronan
Sent: Thursday, March 11, 2010 4:53 PM
To: Juniper Puck
Subject: [j-nsp] Prefer RIP Neighbor

Hello list,

I have exhausted all of my capabilities to figure out the answer to
this question, so I am hoping you can help.

I have two connections to the same network, which both provide me
routes via RIP for Multicast sources.

Is there a way for me to prefer the routes I receive via one of the
connections over there other?


Real stupid question, but did you try the metric-in statement to  
adjust the
metric for the route from one of the neighbors, assuming both  
neighbors are

not on the same interface...

Stefan Fouant, CISSP, JNCIE-M/T
www.shortestpathfirst.net
GPG Key ID: 0xB5E3803D



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Stefan Fouant
Are you setting the metric-in statement at the global level or the neighbor 
level?

Stefan Fouant
--Original Message--
From: Shane Ronan
To: Stefan Fouant
Cc: 'Juniper Puck'
Subject: Re: [j-nsp] Prefer RIP Neighbor
Sent: Mar 11, 2010 7:32 PM

I did, and it seems to set the metric on the route, regardless of  
interface.

On Mar 11, 2010, at 9:28 PM, Stefan Fouant wrote:

 -Original Message-
 From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
 boun...@puck.nether.net] On Behalf Of Shane Ronan
 Sent: Thursday, March 11, 2010 4:53 PM
 To: Juniper Puck
 Subject: [j-nsp] Prefer RIP Neighbor

 Hello list,

 I have exhausted all of my capabilities to figure out the answer to
 this question, so I am hoping you can help.

 I have two connections to the same network, which both provide me
 routes via RIP for Multicast sources.

 Is there a way for me to prefer the routes I receive via one of the
 connections over there other?

 Real stupid question, but did you try the metric-in statement to  
 adjust the
 metric for the route from one of the neighbors, assuming both  
 neighbors are
 not on the same interface...

 Stefan Fouant, CISSP, JNCIE-M/T
 www.shortestpathfirst.net
 GPG Key ID: 0xB5E3803D




Sent from my Verizon Wireless BlackBerry

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Stefan Fouant
Show us your config for 'protocols rip'.

Stefan Fouant
--Original Message--
From: Shane Ronan
To: sfou...@shortestpathfirst.net
Cc: 'Juniper Puck'
Subject: Re: [j-nsp] Prefer RIP Neighbor
Sent: Mar 11, 2010 7:53 PM

Neighbor level, this is not at all how I expected it to behave.

On Mar 11, 2010, at 9:45 PM, Stefan Fouant wrote:

 Are you setting the metric-in statement at the global level or the  
 neighbor level?

 Stefan Fouant
 --Original Message--
 From: Shane Ronan
 To: Stefan Fouant
 Cc: 'Juniper Puck'
 Subject: Re: [j-nsp] Prefer RIP Neighbor
 Sent: Mar 11, 2010 7:32 PM

 I did, and it seems to set the metric on the route, regardless of
 interface.

 On Mar 11, 2010, at 9:28 PM, Stefan Fouant wrote:

 -Original Message-
 From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
 boun...@puck.nether.net] On Behalf Of Shane Ronan
 Sent: Thursday, March 11, 2010 4:53 PM
 To: Juniper Puck
 Subject: [j-nsp] Prefer RIP Neighbor

 Hello list,

 I have exhausted all of my capabilities to figure out the answer to
 this question, so I am hoping you can help.

 I have two connections to the same network, which both provide me
 routes via RIP for Multicast sources.

 Is there a way for me to prefer the routes I receive via one of the
 connections over there other?

 Real stupid question, but did you try the metric-in statement to
 adjust the
 metric for the route from one of the neighbors, assuming both
 neighbors are
 not on the same interface...

 Stefan Fouant, CISSP, JNCIE-M/T
 www.shortestpathfirst.net
 GPG Key ID: 0xB5E3803D




 Sent from my Verizon Wireless BlackBerry



Sent from my Verizon Wireless BlackBerry

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Prefer RIP Neighbor

2010-03-11 Thread Hoogen
Config with a small snapshot of the routing table would be nice..

-Hoogen

On Thu, Mar 11, 2010 at 6:58 PM, Stefan Fouant 
sfou...@shortestpathfirst.net wrote:

 Show us your config for 'protocols rip'.

 Stefan Fouant
 --Original Message--
 From: Shane Ronan
 To: sfou...@shortestpathfirst.net
 Cc: 'Juniper Puck'
 Subject: Re: [j-nsp] Prefer RIP Neighbor
 Sent: Mar 11, 2010 7:53 PM

 Neighbor level, this is not at all how I expected it to behave.

 On Mar 11, 2010, at 9:45 PM, Stefan Fouant wrote:

  Are you setting the metric-in statement at the global level or the
  neighbor level?
 
  Stefan Fouant
  --Original Message--
  From: Shane Ronan
  To: Stefan Fouant
  Cc: 'Juniper Puck'
  Subject: Re: [j-nsp] Prefer RIP Neighbor
  Sent: Mar 11, 2010 7:32 PM
 
  I did, and it seems to set the metric on the route, regardless of
  interface.
 
  On Mar 11, 2010, at 9:28 PM, Stefan Fouant wrote:
 
  -Original Message-
  From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-
  boun...@puck.nether.net] On Behalf Of Shane Ronan
  Sent: Thursday, March 11, 2010 4:53 PM
  To: Juniper Puck
  Subject: [j-nsp] Prefer RIP Neighbor
 
  Hello list,
 
  I have exhausted all of my capabilities to figure out the answer to
  this question, so I am hoping you can help.
 
  I have two connections to the same network, which both provide me
  routes via RIP for Multicast sources.
 
  Is there a way for me to prefer the routes I receive via one of the
  connections over there other?
 
  Real stupid question, but did you try the metric-in statement to
  adjust the
  metric for the route from one of the neighbors, assuming both
  neighbors are
  not on the same interface...
 
  Stefan Fouant, CISSP, JNCIE-M/T
  www.shortestpathfirst.net
  GPG Key ID: 0xB5E3803D
 
 
 
 
  Sent from my Verizon Wireless BlackBerry



 Sent from my Verizon Wireless BlackBerry

 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] SRX in HA with OSPF failover time

2010-03-11 Thread Techtalm
Hi All,

 

I have configured 2x SRX-3600 in high availability mode in front 2x 6500,
the HA mode is active/passive.

OSPF is running and I have configured graceful restart on the SRX in order
to make the transition between the active and the passive more smoothly.

But still when I take down the active machine it takes like 14 sec before
the network become stable again.

Does anyone has any idea regarding this situation?

 

BR,

Tal M

 

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] M20 FE PIC

2010-03-11 Thread Pekka Savola

On Thu, 11 Mar 2010, Jared Mauch wrote:

On Mar 11, 2010, at 9:43 AM, David Reader wrote:

Can any of you confirm if the P-4FE-TX module for the M20 supports 10-Base-T 
operation, or if it is 100Mbit only?


100m only.


Hmm. I wonder how our PICs work fine with 10mbit/s as well? :-)
Officially it isn't supported, I think, though.

--
Pekka Savola You each name yourselves king, yet the
Netcore Oykingdom bleeds.
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp