Re: [j-nsp] Aggregated Ethernet QoS
Hi Paul, You will apply CoS/QoS configurations on AE interface not on AE members. Regards, Muhammad Farooq From: waller...@hotmail.com To: juniper-nsp@puck.nether.net Date: Fri, 7 May 2010 14:58:29 +1000 Subject: [j-nsp] Aggregated Ethernet QoS Hi all, I can't find any documentation on CoS/QoS configuration on Aggregated Ethernet from Junipers web site, if anyone knows any links pls share. I know what configuration I want to do I'm just not sure where it has to be applied i.e on Gig interface, AE interface or ex interfaces. Regards Paul _ New, Used, Demo, Dealer or Private? Find it at CarPoint.com.au http://clk.atdmt.com/NMN/go/206222968/direct/01/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Hotmail: Trusted email with powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Aggregated Ethernet QoS
Please also find below link covering all required configurations for CoS/QoS in JUNOS. http://jnpr.net/techpubs/en_US/junos10.1/information-products/topic-collections/config-guide-cos/config-guide-cos-TOC.html Regards, Muhammad Farooq From: scorpian...@hotmail.com To: waller...@hotmail.com; juniper-nsp@puck.nether.net Date: Fri, 7 May 2010 05:55:59 + Subject: Re: [j-nsp] Aggregated Ethernet QoS Hi Paul, You will apply CoS/QoS configurations on AE interface not on AE members. Regards, Muhammad Farooq From: waller...@hotmail.com To: juniper-nsp@puck.nether.net Date: Fri, 7 May 2010 14:58:29 +1000 Subject: [j-nsp] Aggregated Ethernet QoS Hi all, I can't find any documentation on CoS/QoS configuration on Aggregated Ethernet from Junipers web site, if anyone knows any links pls share. I know what configuration I want to do I'm just not sure where it has to be applied i.e on Gig interface, AE interface or ex interfaces. Regards Paul _ New, Used, Demo, Dealer or Private? Find it at CarPoint.com.au http://clk.atdmt.com/NMN/go/206222968/direct/01/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Hotmail: Trusted email with powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] EX and mirroring (ideally to GRE)
Hi all, I was wondering if someone has found a good solution to remote mirror/analyze all traffic to/from a single IP? I see that GRE tunnels is now working, but setting it as output to an analyzer is not possible it seems. My Juniper rep. suggested a CCC, but buying 100+ AFLs doesn't seem likely for me. Any suggestions? Cheers, Bjørn ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] XNM Reverse DNS lookup
Hi all, I currently run into the next problem with xnm, maybe you have an idea: If I do a login via xnm, the login takes about 30 secs - which is a little bit long. My idea behind this is, that the router tries to do a reverse lookup of the connecting ip. This fails/runs into an timeout because the router uses the nearest-by nameserver, but the xnm connect comes from a RFC1918 IP on the management interface - the nameserver usually don't know about this and tries to resolve it - up to a timeout. Do you have any idea howto disable reverse lookups on the router? I have no problem to do it globally - but I do not want to remove the nameservers completely.. Thanks for you help, Tom ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Aggregated Ethernet QoS
On May 6, 2010, at 11:58 PM, Paul Waller wrote: I can't find any documentation on CoS/QoS configuration on Aggregated Ethernet from Junipers web site, if anyone knows any links pls share. I know what configuration I want to do I'm just not sure where it has to be applied i.e on Gig interface, AE interface or ex interfaces. Be very careful what version of JunOS you use with AE and CoS. We discovered a software bug in 9.3 on the M10i platform where BA classifiers were not working on AE bundles. In our case, the packets were marked correctly but the classifier was simply throwing everything into the best-effort forwarding-class. The workaround was to configure a MF classifier until the bug could be resolved. Just be sure to TEST the config on a bench with proper hardware before deployment. Be sure to check egress forwarding-class on the non-AE interfaces to make sure your classifiers are working. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] XNM Reverse DNS lookup
On Fri, May 07, 2010 at 02:33:10PM +0200, Thomas Eichhorn wrote: Hi all, I currently run into the next problem with xnm, maybe you have an idea: If I do a login via xnm, the login takes about 30 secs - which is a little bit long. My idea behind this is, that the router tries to do a reverse lookup of the connecting ip. This fails/runs into an timeout because the router uses the nearest-by nameserver, but the xnm connect comes from a RFC1918 IP on the management interface - the nameserver usually don't know about this and tries to resolve it - up to a timeout. Do you have any idea howto disable reverse lookups on the router? set system static-host-mapping xnm-hostname inet rfc1918 address ? I have no problem to do it globally - but I do not want to remove the nameservers completely.. Thanks for you help, Tom ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] MS-DPC Licensing (CLI)
Does anyone know how to show licensing info (through cli specifically for MS-DPC) or know of a doc specifically related to MS-DPC for MX series (again, cli, not marketing)? I can't find any cli command to confirm we have the licenses required, nor do I see any error messages saying that there is a licensing issue. Does MS-DPC hook into 'show system license' ? Additionally, configuring services has proved to be cumbersome. Does anyone know of a guide or two relating to this besides Services Interfaces Configuration Guide. Something with a working explained config would be nice ... -J Scott ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Multicast Streaming Simulation
Hi Experts Is it possible to generate multicast streaming (simulation) from my router to verify multicast configuration? If no, is their any other easy way? Best Regards, Walaa Abdel Razzak ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] JUNOS 10.1 on EX
Hello everyone, Anyone run any EX3200/4200 boxes with 10.1 yet? How good/bad is it? 10.1R1 is a lot of ones :) Need to police some CCCs, and it looks like I need 10.1 for that. Got it running on two lab switches and no major disasters yet... Thanks, Ross -- Ross Vandegrift r...@kallisti.us If the fight gets hot, the songs get hotter. If the going gets tough, the songs get tougher. --Woody Guthrie signature.asc Description: Digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] SRX vs. SSG
Hi, Has anyone heard what Juniper's plan is moving forward with the SSG platform? The SSG still has a much better feature set than the SRX, but is seems that marketing is pushing people to the SRX. I am looking to roll-out of approximately 200-300 VPN tunnels and trying to decide what platform to go with between the two. SSG is more appealing because of some of its feature set and proven stability. I just don't want to be buying equipment that is slated to be phased out sometime in the future. Thanks in advance, /Eric ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] 10.0R3 VSTP on EXs...
Anyone find that making a physical loop with two or more EXs automatically results in a forwarding loop when you use VSTP? We are seeing this right now... I wonder if it affects the MX too. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Multicast Streaming Simulation
Hi Walaa, try VideoLAN - free streaming application. Regards, Tomasz On Fri, May 7, 2010 at 9:05 PM, Walaa Abdel razzak wala...@bmc.com.sawrote: Hi Experts Is it possible to generate multicast streaming (simulation) from my router to verify multicast configuration? If no, is their any other easy way? Best Regards, Walaa Abdel Razzak ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] JUNOS 10.1 on EX
On Fri, May 07, 2010 at 04:35:15PM -0400, Ross Vandegrift wrote: Anyone run any EX3200/4200 boxes with 10.1 yet? How good/bad is it? 10.1R1 is a lot of ones :) Need to police some CCCs, and it looks like I need 10.1 for that. Got it running on two lab switches and no major disasters yet... Get 10.1S1. There is an issue with SFID crashing on 10.1R1, which is supposed to be fixed in 10.1S1. Otherwise, 10.1R1 has been fine for me with L2 features. I don't have any CCC/MPLS configured though, nor any L3 features ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] JUNOS 10.1 on EX
On Fri, May 07, 2010 at 05:45:00PM -0400, Chuck Anderson wrote: On Fri, May 07, 2010 at 04:35:15PM -0400, Ross Vandegrift wrote: Anyone run any EX3200/4200 boxes with 10.1 yet? How good/bad is it? 10.1R1 is a lot of ones :) Need to police some CCCs, and it looks like I need 10.1 for that. Got it running on two lab switches and no major disasters yet... Get 10.1S1. There is an issue with SFID crashing on 10.1R1, which is supposed to be fixed in 10.1S1. Otherwise, 10.1R1 has been fine for me with L2 features. I don't have any CCC/MPLS configured though, nor any L3 features Get 10.1R2 (which was due out a couple days ago), we hit a bug in 10.1S1 on EX8200 where FPCs crashed when updating a prefix-list that was referenced in a firewall filter that is fixed in 10.1R2. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SRX vs. SSG
A few months back when we were looking at the SSG SRX we were told that there were no Immediate plans to phase out the SSG. Juniper projects their product lifelines about 18 months in advance, and at that point the SSG was still in the picture (Note: I believe 18 months was the number given, but I'm not 100% sure). IMO it appears that Juniper is building up the SRX line to replace the SSG line, particularly since the SSG is running ScreenOS. - Chris On Fri, May 7, 2010 at 4:38 PM, Eric Helm helmw...@ruraltel.net wrote: Hi, Has anyone heard what Juniper's plan is moving forward with the SSG platform? The SSG still has a much better feature set than the SRX, but is seems that marketing is pushing people to the SRX. I am looking to roll-out of approximately 200-300 VPN tunnels and trying to decide what platform to go with between the two. SSG is more appealing because of some of its feature set and proven stability. I just don't want to be buying equipment that is slated to be phased out sometime in the future. Thanks in advance, /Eric ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
