Re: [j-nsp] Managing MX480 fxp0
You cannot put fxp0 into VRF but could put it into a logical system. And logical system also have a seperate routing table other than inet.0. On Thu, Jul 8, 2010 at 3:16 AM, Jim Devane jdev...@switchnap.com wrote: Hello, I need some ideas/help on a scenario I am sure comes up a lot but having problems with. I have an MX480. I want to be able to manage this MX from an internal (1918) network through the fxp0 port. The internal network is not flat but routed and there are several subnets which may contact the MX for management/polling. I was thinking/hoping to set up a VRF for this port and set routes/default route for the VRF to connect. It turns out I am not able to put fxp0 into a routing-instance. (errors on config checkout) So I put everything production in to a logical system leaving the fxp in the master instance and installing a default route for the master instance. This works, but now the MS-DPC will not export flows if it is in a logical system. So the logical system is out b/c the MS-DPC has to be in the master instance. But I can't but the fxp0 into a logical/routing instance. What is the BCP/recommended method for managing this box if fxp0 is not a public routed interface? Unfortunately, I don't have another port to place into a VRF besides the fxp0 (all other ports are 10G) Thanks for any help/ideas! Jim ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- BR! James Chen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
What we did as we have different IP ranges that access via the Fxp0 was
to NAT on the next-hop router connected to the FXP port. So that all
traffic appears to the fxp as if it was directly connected to it.
Best Regards
William Jackson
Technical Department
Sapphire Networks
-Original Message-
From: juniper-nsp-boun...@puck.nether.net
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Chris Kawchuk
Sent: 08 July 2010 02:33
To: Jim Devane
Cc: juniper-nsp
Subject: Re: [j-nsp] Managing MX480 fxp0
Answer:
interfaces {
fxp0 {
description MANAGEMENT;
speed 100m;
link-mode full-duplex;
unit 0 {
family inet {
address 10.2.1.100/24;
}
}
}
}
routing-options {
static {
route 10.0.0.0/8 {
next-hop 10.2.1.1;
no-readvertise;
}
route 172.16.0.0/12 {
next-hop 10.2.1.1;
no-readvertise;
}
route 192.168.0.0/16 {
next-hop 10.2.1.1;
no-readvertise;
}
}
}
where 10.2.1.1 is some internal router on your management network,
which knows how to get everywhere in your management cloud. RFC1918
stays inside, everything else stays outside. And since you cant go from
transit interface to mamagement (fxp0), there's no way to get from
public-private and vice versa.
No need for a vrf - assuming that all other IPs in use on the
production part of the network are real IPs; as JunOS simply wont
route from, say, xe-0/0/0.0 to fxp0; but management will be allowed.
Breaks if you tend to use private space on your Production 10G
interfaces, tho =)
- Chris.
On 2010-07-07, at 1:16 PM, Jim Devane wrote:
Hello,
I need some ideas/help on a scenario I am sure comes up a lot but
having problems with.
I have an MX480. I want to be able to manage this MX from an internal
(1918) network through the fxp0 port. The internal network is not flat
but routed and there are several subnets which may contact the MX for
management/polling. I was thinking/hoping to set up a VRF for this port
and set routes/default route for the VRF to connect. It turns out I am
not able to put fxp0 into a routing-instance. (errors on config
checkout)
So I put everything production in to a logical system leaving the fxp
in the master instance and installing a default route for the master
instance. This works, but now the MS-DPC will not export flows if it is
in a logical system. So the logical system is out b/c the MS-DPC has to
be in the master instance. But I can't but the fxp0 into a
logical/routing instance.
What is the BCP/recommended method for managing this box if fxp0 is
not a public routed interface?
Unfortunately, I don't have another port to place into a VRF besides
the fxp0 (all other ports are 10G)
Thanks for any help/ideas!
Jim
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Hidden and invisible routes
Hi all, I just had a strange moment on one of my EXes: I had configured a static route, but entered a next-hop which simply doesn't exist. I expected to see the route as hidden marked with 'invalid next-hop' or something like that, but the route simply wasn't shown anywhere except the configuration. Is this a bug of any kind or did I just had a wrong expectation of junos behaviour? Thanks, Tom ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Hidden and invisible routes
did you type show route hidden? The is a hidden route counter for each table, inet.x, itn the top right output of show route On Thu, Jul 8, 2010 at 10:11 AM, Thomas Eichhorn t...@te3networks.de wrote: Hi all, I just had a strange moment on one of my EXes: I had configured a static route, but entered a next-hop which simply doesn't exist. I expected to see the route as hidden marked with 'invalid next-hop' or something like that, but the route simply wasn't shown anywhere except the configuration. Is this a bug of any kind or did I just had a wrong expectation of junos behaviour? Thanks, Tom ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- Phill Jolliffe ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Hidden and invisible routes
Yes, I did. The route is not hidden - it simply doesn't exist in any routing table, which is my problem - I see this as a false behaviour... Tom On 08.07.2010 12:22, Phill Jolliffe wrote: did you type show route hidden? The is a hidden route counter for each table, inet.x, itn the top right output of show route On Thu, Jul 8, 2010 at 10:11 AM, Thomas Eichhorn t...@te3networks.de wrote: Hi all, I just had a strange moment on one of my EXes: I had configured a static route, but entered a next-hop which simply doesn't exist. I expected to see the route as hidden marked with 'invalid next-hop' or something like that, but the route simply wasn't shown anywhere except the configuration. Is this a bug of any kind or did I just had a wrong expectation of junos behaviour? Thanks, Tom ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Hidden and invisible routes
I believe because the route is invalid it won't even put it into the rib as a candidate route. IOS devices work this way as well. On Jul 8, 2010 7:42 AM, Thomas Eichhorn t...@te3networks.de wrote: Yes, I did. The route is not hidden - it simply doesn't exist in any routing table, which is my problem - I see this as a false behaviour... Tom On 08.07.2010 12:22, Phill Jolliffe wrote: did you type show route hidden? The is a hidden... ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
You could also put your production traffic into a VRF (not a logical system). Not sure if MS-DPC will work for VRFs (routing-instances). On Thu, Jul 08, 2010 at 03:54:15PM +0800, Chen Jiang wrote: You cannot put fxp0 into VRF but could put it into a logical system. And logical system also have a seperate routing table other than inet.0. On Thu, Jul 8, 2010 at 3:16 AM, Jim Devane jdev...@switchnap.com wrote: Hello, I need some ideas/help on a scenario I am sure comes up a lot but having problems with. I have an MX480. I want to be able to manage this MX from an internal (1918) network through the fxp0 port. The internal network is not flat but routed and there are several subnets which may contact the MX for management/polling. I was thinking/hoping to set up a VRF for this port and set routes/default route for the VRF to connect. It turns out I am not able to put fxp0 into a routing-instance. (errors on config checkout) So I put everything production in to a logical system leaving the fxp in the master instance and installing a default route for the master instance. This works, but now the MS-DPC will not export flows if it is in a logical system. So the logical system is out b/c the MS-DPC has to be in the master instance. But I can't but the fxp0 into a logical/routing instance. What is the BCP/recommended method for managing this box if fxp0 is not a public routed interface? Unfortunately, I don't have another port to place into a VRF besides the fxp0 (all other ports are 10G) Thanks for any help/ideas! Jim ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
It's not about using the line cards. It's about keeping the fxp0 routes separate and isolated from the production routes. If you happen to have overlapping address ranges between your production and management subnets, you will have a problem that fxp0 routes will interfere with production traffic and vice versa unless you can put one or the other into a VRF. On Thu, Jul 08, 2010 at 05:33:18PM +1000, Truman Boyes wrote: Putting fxpX or meX interfaces into a VRF is not a good idea. I understand that you want to have a management VPN, that idea is fine, but the host routing from the routing engine should not have to rely on other features/line cards of the box that may need to be serviced. I tend to use loopback addresses inside l3vpns that I can reach via my OSS networks, and this works perfectly for basic NMS-type of operations. Even still, a routing-engine that suffers in booting a line card that provides MPLS uplinks would be out of commission if the VRF routing was not working. Cheers, Truman On 8/07/2010, at 6:22 AM, Chris Evans wrote: Send a bitch email to juniper. I have been begging for the capability to put the fxp into a vrf. On Jul 7, 2010 3:53 PM, Jim Devane jdev...@switchnap.com wrote: Hello, I need some ideas/help on a scenario I am sure comes up a lot but having problems with. I have an MX480. I want to be able to manage this MX from an internal (1918) network through the fxp0 port. The internal network is not flat but routed and there are several subnets which may contact the MX for management/polling. I was thinking/hoping to set up a VRF for this port and set routes/default route for the VRF to connect. It turns out I am not able to put fxp0 into a routing-instance. (errors on config checkout) So I put everything production in to a logical system leaving the fxp in the master instance and installing a default route for the master instance. This works, but now the MS-DPC will not export flows if it is in a logical system. So the logical system is out b/c the MS-DPC has to be in the master instance. But I can't but the fxp0 into a logical/routing instance. What is the BCP/recommended method for managing this box if fxp0 is not a public routed interface? Unfortunately, I don't have another port to place into a VRF besides the fxp0 (all other ports are 10G) Thanks for any help/ideas! Jim ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Using hard disk for primary boot device
Hello everyone, I have m7i box with 256 MB CF. I need to upgrade my JunOS. Yet, CF capacity is not enough. Is it possible to use my hard drive as primary boot device and use my router without CF. Thanks ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] Manually installing JunOS on crashed HD (no CF available)
Gentlemen, thank you for all those answers on my previous question, about replacing M7i HD. Just replaced that crashed HD with an IDE one, notebook sized. Haven't found a SSD at good prices, still searching for one. In this new HD I've installed FreeBSD 4.4-mini (minimum install, just default options), trying to mimic partitions and options from other M7i box. To install I plugged the HD at one PC and did install there. Next step was booting at M7i board and going to do jinstall, but it freezes at boot time. I didn't try to run jinstall from outside the box. What am I missing here? I'm attaching output from serial, as I got it from M7i console. I'm not sure if this is any documented procedure. Is there any documentation on how to do this? I do not have a CF card available, so doing this at JunOS CLI isn't an option. Once more, thank you. Kind regards, Felipe Award Modular BIOS v4.51PG, An Energy Star Ally Copyright (C) 1984-98, Award Software, Inc. BIOS Version 1.8 09/18/2003-i440BX-SMC67X-2A69TU00C-00 WARNING: History show a reset caused by the WatchDog Will try to boot from : PCMCIA ATA Flash Card Compact Flash Primary IDE Hard Disk Ethernet Boot Sequence is reseted due to a PowerUp Trying to Boot from PCMCIA ATA Flash Card Trying to Boot from Compact Flash Trying to Boot from Primary IDE Hard Disk o F1 FreeBSD Default: F1 /kernel text=0x29c035 data=0x43d48+0x21e0c syms=[0x4+0x3ac60+0x4+0x408f2] / Hit [Enter] to boot immediately, or any other key for command prompt. Booting [kernel]... Copyright (c) 1992-2001 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 4.4-RELEASE #0: Tue Sep 18 11:57:08 PDT 2001 mur...@builder.freebsd.org:/usr/src/sys/compile/GENERIC Timecounter i8254 frequency 1193182 Hz CPU: Pentium III/Pentium III Xeon/Celeron (397.95-MHz 686-class CPU) Origin = GenuineIntel Id = 0x68a Stepping = 10 Features=0x383f9ffFPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real memory = 268435456 (262144K bytes) avail memory = 256798720 (250780K bytes) Preloaded elf kernel kernel at 0xc048. Pentium Pro MTRR support enabled md0: Malloc disk Using $PIR table, 14 entries at 0xc00fde60 npx0: math processor on motherboard npx0: INT 16 interface pcib0: Intel 82443BX host to PCI bridge (AGP disabled) on motherboard pci0: PCI bus on pcib0 isab0: Intel 82371AB PCI to ISA bridge at device 7.0 on pci0 isa0: ISA bus on isab0 atapci0: Intel PIIX4 ATA33 controller port 0xf000-0xf00f at device 7.1 on pci0 ata0: at 0x1f0 irq 14 on atapci0 uhci0: Intel 82371AB/EB (PIIX4) USB controller port 0xd000-0xd01f irq 11 at device 7.2 on pci0 usb0: Intel 82371AB/EB (PIIX4) USB controller on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered chip1: Intel 82371AB Power management controller port 0x5000-0x500f at device 7.3 on pci0 pcic0: YENTA PCI-CARDBUS Bridge mem 0xe6045000-0xe6045fff irq 15 at device 13.0 on pci0 pccard0: PC Card bus (classic) on pcic0 pcic1: YENTA PCI-CARDBUS Bridge mem 0xe604-0xe6040fff irq 9 at device 13.1 on pci0 pccard1: PC Card bus (classic) on pcic1 fxp0: Intel Embedded 10/100 Ethernet port 0xdc00-0xdc3f mem 0xe602-0xe603,0xe6044000-0xe6044fff irq 9 at device 160 fxp0: Ethernet address 00:a0:a5:**:**:** (protecting my hardware info...) inphy0: i82555 10/100 media interface on miibus0 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp1: Intel Embedded 10/100 Ethernet port 0xe000-0xe03f mem 0xe600-0xe601,0xe6047000-0xe6047fff irq 10 at device 10 fxp1: Ethernet address 00:a0:a5:**:**:** (protecting my hardware info...) inphy1: i82555 10/100 media interface on miibus1 inphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto orm0: Option ROM at iomem 0xc8000-0xd17ff on isa0 fdc0: direction bit not set fdc0: cmd 3 failed at out byte 1 of 3 atkbdc0: Keyboard controller (i8042) at port 0x60,0x64 on isa0 vga0: Generic ISA VGA at port 0x3b0-0x3bb iomem 0xb-0xb7fff on isa0 sc0: System console at flags 0x100 on isa0 **It stuck here, haven't got any further** ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
I do this in my network. It works well.
David
On 7 July 2010 18:33, Chris Kawchuk juniperd...@gmail.com wrote:
Answer:
interfaces {
fxp0 {
description MANAGEMENT;
speed 100m;
link-mode full-duplex;
unit 0 {
family inet {
address 10.2.1.100/24;
}
}
}
}
routing-options {
static {
route 10.0.0.0/8 {
next-hop 10.2.1.1;
no-readvertise;
}
route 172.16.0.0/12 {
next-hop 10.2.1.1;
no-readvertise;
}
route 192.168.0.0/16 {
next-hop 10.2.1.1;
no-readvertise;
}
}
}
where 10.2.1.1 is some internal router on your management network, which
knows how to get everywhere in your management cloud. RFC1918 stays inside,
everything else stays outside. And since you cant go from transit interface
to mamagement (fxp0), there's no way to get from public-private and vice
versa.
No need for a vrf - assuming that all other IPs in use on the production
part of the network are real IPs; as JunOS simply wont route from, say,
xe-0/0/0.0 to fxp0; but management will be allowed.
Breaks if you tend to use private space on your Production 10G interfaces,
tho =)
- Chris.
On 2010-07-07, at 1:16 PM, Jim Devane wrote:
Hello,
I need some ideas/help on a scenario I am sure comes up a lot but having
problems with.
I have an MX480. I want to be able to manage this MX from an internal (1918)
network through the fxp0 port. The internal network is not flat but routed
and there are several subnets which may contact the MX for
management/polling. I was thinking/hoping to set up a VRF for this port and
set routes/default route for the VRF to connect. It turns out I am not able
to put fxp0 into a routing-instance. (errors on config checkout)
So I put everything production in to a logical system leaving the fxp in the
master instance and installing a default route for the master instance. This
works, but now the MS-DPC will not export flows if it is in a logical
system. So the logical system is out b/c the MS-DPC has to be in the master
instance. But I can't but the fxp0 into a logical/routing instance.
What is the BCP/recommended method for managing this box if fxp0 is not a
public routed interface?
Unfortunately, I don't have another port to place into a VRF besides the
fxp0 (all other ports are 10G)
Thanks for any help/ideas!
Jim
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
Putting fxp0 in a LS works from a routing perspective but it breaks NSR GRES - at least it does in 10.0R2. I have a JTAC case pending. Serge - Original Message From: Chen Jiang iloveb...@gmail.com To: Jim Devane jdev...@switchnap.com Cc: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net Sent: Thu, July 8, 2010 4:54:15 AM Subject: Re: [j-nsp] Managing MX480 fxp0 You cannot put fxp0 into VRF but could put it into a logical system. And logical system also have a seperate routing table other than inet.0. On Thu, Jul 8, 2010 at 3:16 AM, Jim Devane jdev...@switchnap.com wrote: Hello, I need some ideas/help on a scenario I am sure comes up a lot but having problems with. I have an MX480. I want to be able to manage this MX from an internal (1918) network through the fxp0 port. The internal network is not flat but routed and there are several subnets which may contact the MX for management/polling. I was thinking/hoping to set up a VRF for this port and set routes/default route for the VRF to connect. It turns out I am not able to put fxp0 into a routing-instance. (errors on config checkout) So I put everything production in to a logical system leaving the fxp in the master instance and installing a default route for the master instance. This works, but now the MS-DPC will not export flows if it is in a logical system. So the logical system is out b/c the MS-DPC has to be in the master instance. But I can't but the fxp0 into a logical/routing instance. What is the BCP/recommended method for managing this box if fxp0 is not a public routed interface? Unfortunately, I don't have another port to place into a VRF besides the fxp0 (all other ports are 10G) Thanks for any help/ideas! Jim ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- BR! James Chen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)
Maybe cheat? Put the old HDD in a working RE, (good CF), do an install-media and from extern flash. The boot, do a request system snapshot Then put the HDD back in foobar'd RE and boot. On Thu, Jul 8, 2010 at 3:34 PM, Felipe Zanchet Grazziotin fel...@starbyte.net wrote: Gentlemen, thank you for all those answers on my previous question, about replacing M7i HD. Just replaced that crashed HD with an IDE one, notebook sized. Haven't found a SSD at good prices, still searching for one. In this new HD I've installed FreeBSD 4.4-mini (minimum install, just default options), trying to mimic partitions and options from other M7i box. To install I plugged the HD at one PC and did install there. Next step was booting at M7i board and going to do jinstall, but it freezes at boot time. I didn't try to run jinstall from outside the box. What am I missing here? I'm attaching output from serial, as I got it from M7i console. I'm not sure if this is any documented procedure. Is there any documentation on how to do this? I do not have a CF card available, so doing this at JunOS CLI isn't an option. Once more, thank you. Kind regards, Felipe ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- Phill Jolliffe ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Managing MX480 fxp0
We put a router in place to do NAT for the local subnet of the fxp. Alternately, you can just put static routes in for specific management subnets pointing out the fxp port... From: Serge Vautour sergevaut...@yahoo.ca To: Chen Jiang iloveb...@gmail.com; Jim Devane jdev...@switchnap.com Cc: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net Sent: Thu, July 8, 2010 10:26:24 AM Subject: Re: [j-nsp] Managing MX480 fxp0 Putting fxp0 in a LS works from a routing perspective but it breaks NSR GRES - at least it does in 10.0R2. I have a JTAC case pending. Serge - Original Message From: Chen Jiang iloveb...@gmail.com To: Jim Devane jdev...@switchnap.com Cc: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net Sent: Thu, July 8, 2010 4:54:15 AM Subject: Re: [j-nsp] Managing MX480 fxp0 You cannot put fxp0 into VRF but could put it into a logical system. And logical system also have a seperate routing table other than inet.0. On Thu, Jul 8, 2010 at 3:16 AM, Jim Devane jdev...@switchnap.com wrote: Hello, I need some ideas/help on a scenario I am sure comes up a lot but having problems with. I have an MX480. I want to be able to manage this MX from an internal (1918) network through the fxp0 port. The internal network is not flat but routed and there are several subnets which may contact the MX for management/polling. I was thinking/hoping to set up a VRF for this port and set routes/default route for the VRF to connect. It turns out I am not able to put fxp0 into a routing-instance. (errors on config checkout) So I put everything production in to a logical system leaving the fxp in the master instance and installing a default route for the master instance. This works, but now the MS-DPC will not export flows if it is in a logical system. So the logical system is out b/c the MS-DPC has to be in the master instance. But I can't but the fxp0 into a logical/routing instance. What is the BCP/recommended method for managing this box if fxp0 is not a public routed interface? Unfortunately, I don't have another port to place into a VRF besides the fxp0 (all other ports are 10G) Thanks for any help/ideas! Jim ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- BR! James Chen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Hidden and invisible routes
Interestingly you see a hidden route if the static route does a
recursive lookup. See config below and then show route output. The
nexthop interface for 10.0.21.2 is down when the below was executed.
This seems to show that at commit time , unless a static is set to
resolve via indirect next-hops, that the config parser checks for an
active, type direct, route in the same routing-instance that can
resolve statics next-hop. If non is found then the static is not, even
as a hidden, added to the routing-instance.
But if resolve is configured it is added persistently to the
routing-instance to allow routes that might become active in the
future to resolve it's indirect next hop and unhide it.
Makes sense? No point in keeping something in the table if it is not
allowed to be resolved indirectly and no interface can resolve it
directly. Though this would mean when a down interface come up that
this would have to trigger a check if the new direct type route cause
static routes in the config but not the routing-instance to become
resolvable.
[edit routing-options]
l...@w00t# run show route hidden
inet.0: 24 destinations, 25 routes (23 active, 0 holddown, 1 hidden)
+ = Active Route, - = Last Active, * = Both
2.3.4.0/24 [Static/5] 00:07:01
Unusable
[edit routing-options]
l...@w00t# show
static {
route 1.0.0.0/8 next-hop 2.3.4.1;
route 2.3.4.0/24 {
next-hop 10.0.21.2;
resolve;
}
}
resolution {
traceoptions {
file foobar;
flag all;
}
}
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] mlfr
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfaces/html/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is that I
cannot see the device ls-1/2/0:0. Question: At this point, should I be able to
see the status of the device? Even if nothing is connected I am guessing, just
like other interfaces that are configured, I should be able to see the status of
that interface.
Also, I have seen two example of doing this. The first involving the ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't change
anything.
Any help would be great!
TIA
--
Jim Lucas
A: Maybe because some people are too annoyed by top-posting.
Q: Why do I not get an answer to my question(s)?
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)
Jonas, On Thu, Jul 8, 2010 at 2:29 PM, Jonas Frey j...@probe-networks.de wrote: I guess you dont get any more console output since after that last line the system will send all output to VGA only. Before the output was handled by the bios and redirected to the com port. So (i guess) you have to make the freebsd installation to send all console output to the correct com-port...probably ttyd0. See: thanks for your tips, but already had changed /boot/loader.conf to use 'comconsole', before that (vidconsole) I had nothing after Juniper's BIOS. And ttyd0 was enabled too. Using a PC, FreeBSD 4.4 boot messages after the one I got are: sc0: VGA 16 virtual consoles, flags=0x100 sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0 sio0: type 16550A, console sio1: configured irq 3 not in bitmap of probed irqs 0 ppc0: parallel port not found. ad0: 28615MB VBOX HARDDISK [58140/16/63] at ata0-master UDMA33 acd0: DVD-ROM VBOX CD-ROM at ata0-slave using PIO4 acd1: DVD-ROM VBOX CD-ROM at ata1-master using PIO4 Mounting root from ufs:/dev/ad0s1a swapon: adding /dev/ad0s1b as swap device Automatic boot in progress... Maybe it stuck trying to create virtual consoles on serial interface? I really don't know. As in Phill's idea, would be great if I had a spare M7i. Or even a spare RE. Not my case here, unfortunately. http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/serialconsole-setup.html http://www.freebsd.org/doc/en/articles/console-server/freebsd.html Anyway, will take a real read on those documents. Maybe there's some important flag I'm ignoring. [ snip ] Thankfully, Felipe ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)
I guess you dont get any more console output since after that last line the system will send all output to VGA only. Before the output was handled by the bios and redirected to the com port. So (i guess) you have to make the freebsd installation to send all console output to the correct com-port...probably ttyd0. See: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/serialconsole-setup.html http://www.freebsd.org/doc/en/articles/console-server/freebsd.html Regards, Jonas On Thu, 2010-07-08 at 17:42, Phill Jolliffe wrote: Maybe cheat? Put the old HDD in a working RE, (good CF), do an install-media and from extern flash. The boot, do a request system snapshot Then put the HDD back in foobar'd RE and boot. On Thu, Jul 8, 2010 at 3:34 PM, Felipe Zanchet Grazziotin fel...@starbyte.net wrote: Gentlemen, thank you for all those answers on my previous question, about replacing M7i HD. Just replaced that crashed HD with an IDE one, notebook sized. Haven't found a SSD at good prices, still searching for one. In this new HD I've installed FreeBSD 4.4-mini (minimum install, just default options), trying to mimic partitions and options from other M7i box. To install I plugged the HD at one PC and did install there. Next step was booting at M7i board and going to do jinstall, but it freezes at boot time. I didn't try to run jinstall from outside the box. What am I missing here? I'm attaching output from serial, as I got it from M7i console. I'm not sure if this is any documented procedure. Is there any documentation on how to do this? I do not have a CF card available, so doing this at JunOS CLI isn't an option. Once more, thank you. Kind regards, Felipe ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Jim,
What kind of Service PIC are you using for this purpose. Is it Link Services
PIC or Adaptive Service PIC configured in Layer-2 mode under [edit chassis]?
You need either link services or adaptive service PIC (with L2 mode) to
create the ls- or lsq- interface.
Thanks,
Nilesh.
On 7/8/10 9:30 AM, Jim Lucas li...@cmsws.com wrote:
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfaces/h
tml/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and
read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this
point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is that
I
cannot see the device ls-1/2/0:0. Question: At this point, should I be able
to
see the status of the device? Even if nothing is connected I am guessing,
just
like other interfaces that are configured, I should be able to see the status
of
that interface.
Also, I have seen two example of doing this. The first involving the
ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't change
anything.
Any help would be great!
TIA
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote:
Jim,
What kind of Service PIC are you using for this purpose. Is it Link Services
PIC or Adaptive Service PIC configured in Layer-2 mode under [edit chassis]?
You need either link services or adaptive service PIC (with L2 mode) to
create the ls- or lsq- interface.
I found in one other PDF that suggested adding this. So, now I have this
j...@x show configuration chassis fpc 1 pic 2
adaptive-services {
service-package layer-2;
}
mlfr-uni-nni-bundles 5;
Didn't make a difference.
Here is the current status of each T1 interface
j...@x show interfaces t1-1/1/0:0
Physical interface: t1-1/1/0:0, Enabled, Physical link is Up
Interface index: 444, SNMP ifIndex: 310
Description: Test MLFR (1/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal, Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:54 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/1/0:0.0 (Index 394) (SNMP ifIndex 429)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
j...@x show interfaces t1-1/0/0:19
Physical interface: t1-1/0/0:19, Enabled, Physical link is Up
Interface index: 501, SNMP ifIndex: 211
Description: Test MLFR (2/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal, Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:53 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/0/0:19.0 (Index 389) (SNMP ifIndex 625)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
Thanks for the assistance
Jim
Thanks,
Nilesh.
On 7/8/10 9:30 AM, Jim Lucas li...@cmsws.com wrote:
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfaces/h
tml/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and
read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this
point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is that
I
cannot see the device ls-1/2/0:0. Question: At this point, should I be able
to
see the status of the device? Even if nothing is connected I am guessing,
just
like other interfaces that are configured, I should be able to see the status
of
that interface.
Also, I have seen two example of doing this. The first involving the
ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't change
anything.
Any help would be great!
TIA
--
Jim Lucas
A: Maybe because some people are too annoyed by top-posting.
Q: Why do I not get an answer to my question(s)?
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
Re: [j-nsp] mlfr
Do you have show chassis hardware output?
- Nilesh
On 7/8/10 12:37 PM, Jim Lucas li...@cmsws.com wrote:
Nilesh Khambal wrote:
Jim,
What kind of Service PIC are you using for this purpose. Is it Link Services
PIC or Adaptive Service PIC configured in Layer-2 mode under [edit chassis]?
You need either link services or adaptive service PIC (with L2 mode) to
create the ls- or lsq- interface.
I found in one other PDF that suggested adding this. So, now I have this
j...@x show configuration chassis fpc 1 pic 2
adaptive-services {
service-package layer-2;
}
mlfr-uni-nni-bundles 5;
Didn't make a difference.
Here is the current status of each T1 interface
j...@x show interfaces t1-1/1/0:0
Physical interface: t1-1/1/0:0, Enabled, Physical link is Up
Interface index: 444, SNMP ifIndex: 310
Description: Test MLFR (1/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal, Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:54 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/1/0:0.0 (Index 394) (SNMP ifIndex 429)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
j...@x show interfaces t1-1/0/0:19
Physical interface: t1-1/0/0:19, Enabled, Physical link is Up
Interface index: 501, SNMP ifIndex: 211
Description: Test MLFR (2/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal, Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:53 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/0/0:19.0 (Index 389) (SNMP ifIndex 625)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
Thanks for the assistance
Jim
Thanks,
Nilesh.
On 7/8/10 9:30 AM, Jim Lucas li...@cmsws.com wrote:
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfaces
/h
tml/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and
read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this
point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is
that
I
cannot see the device ls-1/2/0:0. Question: At this point, should I be able
to
see the status of the device? Even if nothing is connected I am guessing,
just
like other interfaces that are configured, I should be able to see the
status
of
that interface.
Also, I have seen two example of doing this. The first involving the
ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't
change
anything.
Any help would be great!
TIA
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote:
Do you have show chassis hardware output?
Yes, what specifically are you looking for?
- Nilesh
On 7/8/10 12:37 PM, Jim Lucas li...@cmsws.com wrote:
Nilesh Khambal wrote:
Jim,
What kind of Service PIC are you using for this purpose. Is it Link Services
PIC or Adaptive Service PIC configured in Layer-2 mode under [edit chassis]?
You need either link services or adaptive service PIC (with L2 mode) to
create the ls- or lsq- interface.
I found in one other PDF that suggested adding this. So, now I have this
j...@x show configuration chassis fpc 1 pic 2
adaptive-services {
service-package layer-2;
}
mlfr-uni-nni-bundles 5;
Didn't make a difference.
Here is the current status of each T1 interface
j...@x show interfaces t1-1/1/0:0
Physical interface: t1-1/1/0:0, Enabled, Physical link is Up
Interface index: 444, SNMP ifIndex: 310
Description: Test MLFR (1/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal,
Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:54 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/1/0:0.0 (Index 394) (SNMP ifIndex 429)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
j...@x show interfaces t1-1/0/0:19
Physical interface: t1-1/0/0:19, Enabled, Physical link is Up
Interface index: 501, SNMP ifIndex: 211
Description: Test MLFR (2/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal,
Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:53 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/0/0:19.0 (Index 389) (SNMP ifIndex 625)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
Thanks for the assistance
Jim
Thanks,
Nilesh.
On 7/8/10 9:30 AM, Jim Lucas li...@cmsws.com wrote:
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfaces
/h
tml/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and
read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this
point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is
that
I
cannot see the device ls-1/2/0:0. Question: At this point, should I be
able
to
see the status of the device? Even if nothing is connected I am guessing,
just
like other interfaces that are configured, I should be able to see the
status
of
that interface.
Also, I have seen two example of doing this. The first involving the
ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't
change
anything.
Any help would be great!
TIA
--
Jim Lucas
A: Maybe because some people are too annoyed by top-posting.
Q: Why do I not get an answer to
Re: [j-nsp] mlfr
What kind of PIC do you have in FPC slot 1 PIC slot 2?
- Nilesh
On 7/8/10 2:12 PM, Jim Lucas li...@cmsws.com wrote:
Nilesh Khambal wrote:
Do you have show chassis hardware output?
Yes, what specifically are you looking for?
- Nilesh
On 7/8/10 12:37 PM, Jim Lucas li...@cmsws.com wrote:
Nilesh Khambal wrote:
Jim,
What kind of Service PIC are you using for this purpose. Is it Link
Services
PIC or Adaptive Service PIC configured in Layer-2 mode under [edit
chassis]?
You need either link services or adaptive service PIC (with L2 mode) to
create the ls- or lsq- interface.
I found in one other PDF that suggested adding this. So, now I have this
j...@x show configuration chassis fpc 1 pic 2
adaptive-services {
service-package layer-2;
}
mlfr-uni-nni-bundles 5;
Didn't make a difference.
Here is the current status of each T1 interface
j...@x show interfaces t1-1/1/0:0
Physical interface: t1-1/1/0:0, Enabled, Physical link is Up
Interface index: 444, SNMP ifIndex: 310
Description: Test MLFR (1/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal,
Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:54 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/1/0:0.0 (Index 394) (SNMP ifIndex 429)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
j...@x show interfaces t1-1/0/0:19
Physical interface: t1-1/0/0:19, Enabled, Physical link is Up
Interface index: 501, SNMP ifIndex: 211
Description: Test MLFR (2/2)
Link-level type: Multilink-FR-UNI-NNI, MTU: 1518, Clocking: Internal,
Speed:
T1, Loopback: None, FCS: 16, Mode: C/Bit parity, Framing: ESF
Device flags : Present Running
Interface flags: Point-To-Point SNMP-Traps Internal: 0x4000
Link flags : None
CoS queues : 4 supported, 4 in use
Last flapped : 2010-07-06 21:09:53 GMT (1d 22:12 ago)
Input rate : 0 bps (0 pps)
Output rate: 0 bps (0 pps)
DS1 alarms : None
DS3 alarms : None
DS1 defects : None
DS3 defects : None
Logical interface t1-1/0/0:19.0 (Index 389) (SNMP ifIndex 625)
Flags: Hardware-Down Point-To-Point SNMP-Traps Encapsulation:
Multilink-FR-UNI-NNI
Protocol mfr, Multilink bundle: lsq-1/2/0:0, MTU: 0
Flags: None
Thanks for the assistance
Jim
Thanks,
Nilesh.
On 7/8/10 9:30 AM, Jim Lucas li...@cmsws.com wrote:
Equipment:
1 Juniper M20 running JunOS 7.5R1.12
2 Cisco 2611 running 12.4.23 IOS
Multiple T1 connections between the above devices
Background: I have read the following literature.
http://www.juniper.net/techpubs/software/junos/junos56/swconfig56-interfac
es
/h
tml/interfaces-multilink-config25.html
and I have downloaded all the PDFs available on the documentation site and
read
all the sections that talk about setting up MLFR
Goal: I need to setup MLFR between the two devices listed above. At this
point,
I am simply trying to get the Juniper side configured so I can see the
interfaces involved.
What I have done so far:
Here is an example config from the Juniper
[edit]
j...@x# show chassis fpc 1 pic 2
mlfr-uni-nni-bundles 5;
[edit]
j...@x# show interfaces ls-1/2/0:0
description Test MLFR interface;
dce;
encapsulation multilink-frame-relay-uni-nni;
unit 16 {
dlci 16;
family inet {
address 66.39.177.129/32 {
destination 66.39.177.130;
}
}
}
unit 17 {
dlci 17;
family inet {
address 10.100.100.1/32 {
destination 10.100.100.2;
}
}
}
[edit]
j...@x# show interfaces t1-1/1/0:0
description Test MLFR leg (1/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
[edit]
j...@x# show interfaces t1-1/0/0:19
description Test MLFR leg (2/2);
encapsulation multilink-frame-relay-uni-nni;
unit 0 {
family mlfr-uni-nni {
bundle ls-1/2/0:0;
}
}
After issuing commit the first thing I notice when I exit edit mode is
that
I
cannot see the device ls-1/2/0:0. Question: At this point, should I be
able
to
see the status of the device? Even if nothing is connected I am guessing,
just
like other interfaces that are configured, I should be able to see the
status
of
that interface.
Also, I have seen two example of doing this. The first involving the
ls-x/x/x:0
interface and the other using lsq-x/x/x:0. I have tried both. Didn't
change
[j-nsp] 1000 VRRP instances per IFD and IRB
Hey guys, Accoridng to our account team, VRRP scales to about 1000 instances per IFD. Not that I want to scale beyond Juniper's tested specs, but has anyone pushed on this? Anyone have any experience on many VRRP instances per IFD? How many? We're planning on doing vrrp inheritance so only a single IFL is actually sending keepalives to keep that work to a minimum. Is there any way to get more IRB IFDs? Per-interface limits aren't a major problem for ethernet interfaces - this is a datacenter, we run a few more cables. But it's crippling for virtual interfaces. We'd love to toss 4000 or so customer VLANs into individual VPLS with IRB, but we can't justify the cost of 4 pairs of MXes to get more IFDs for VRRP instances. Ross -- Ross Vandegrift r...@kallisti.us If the fight gets hot, the songs get hotter. If the going gets tough, the songs get tougher. --Woody Guthrie signature.asc Description: Digital signature ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)
Hi,
just to keep this information archived to others, even it sounds obvious:
don't try to boot FreeBSD directly at Juniper. :)
What I did to have it working?
Got HD back to PC, pkg_add on jinstall package, once it asked me to reboot,
turn off PC ('halt' does it fine).
Put HD on RE, have it boot on Juniper and you are set. It will upgrade to
Juniper's kernel and in a few minutes you will have a functional M7i again.
Thanks everybody!
On Thu, Jul 8, 2010 at 2:53 PM, Felipe Zanchet Grazziotin
fel...@starbyte.net wrote:
Jonas,
On Thu, Jul 8, 2010 at 2:29 PM, Jonas Frey j...@probe-networks.de wrote:
I guess you dont get any more console output since after that last line
the system will send all output to VGA only. Before the output was
handled by the bios and redirected to the com port.
So (i guess) you have to make the freebsd installation to send all
console output to the correct com-port...probably ttyd0.
See:
thanks for your tips, but already had changed /boot/loader.conf to use
'comconsole', before that (vidconsole) I had nothing after Juniper's BIOS.
And ttyd0 was enabled too.
Using a PC, FreeBSD 4.4 boot messages after the one I got are:
sc0: VGA 16 virtual consoles, flags=0x100
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A, console
sio1: configured irq 3 not in bitmap of probed irqs 0
ppc0: parallel port not found.
ad0: 28615MB VBOX HARDDISK [58140/16/63] at ata0-master UDMA33
acd0: DVD-ROM VBOX CD-ROM at ata0-slave using PIO4
acd1: DVD-ROM VBOX CD-ROM at ata1-master using PIO4
Mounting root from ufs:/dev/ad0s1a
swapon: adding /dev/ad0s1b as swap device
Automatic boot in progress...
Maybe it stuck trying to create virtual consoles on serial interface? I
really don't know.
As in Phill's idea, would be great if I had a spare M7i. Or even a spare
RE.
Not my case here, unfortunately.
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/serialconsole-setup.html
http://www.freebsd.org/doc/en/articles/console-server/freebsd.html
Anyway, will take a real read on those documents. Maybe there's some
important flag I'm ignoring.
[ snip ]
Thankfully,
Felipe
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote: What kind of PIC do you have in FPC slot 1 PIC slot 2? FPC 0FPC PIC 0 4x F/E, 100 BASE-TX PIC 1 1x G/E, 1000 BASE-LX PIC 2 1x G/E, 1000 BASE-LX PIC 3 4x T3 FPC 1FPC PIC 0 4x CT3 PIC 1 4x CT3 PIC 2 4x CT3 FPC 2FPC PIC 0 1x Multi Link(32) PIC 2 1x G/E, 1000 BASE-LX PIC 3 1x G/E, 1000 BASE-LX After your last email, I got to thinking if their was something in ls-/1/2/0 would it conflict with was trying to do. So, I changed my interface to ls-1/3/0:0 (currently empty) and updated the associated T1 interface bundle references. Still no change. - Nilesh -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer to my question(s)? A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Jim, You need a Physical service PIC in slot 1/2 (or 1/3 as per your below comment) to do ls- or lsq-. On J-series platform these interfaces are created by software but on M20, you need a physical service PIC (either Link Services or Adaptive Services configured with layer-2 package) to get ls- or lsq- interface respectively. How are you using Multilink PIC ins FPC slot 2 PIC slot 0? Can you check with below command if it has ls- interfaces created on the router with this multilink PIC? - show interface terse ls-2/0/0* Please remove the configuration under [edit chassis] for FPC 1 PIC 2 (or PIC 3). It will not work. Thanks, Nilesh. On 7/8/10 3:33 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: What kind of PIC do you have in FPC slot 1 PIC slot 2? FPC 0FPC PIC 0 4x F/E, 100 BASE-TX PIC 1 1x G/E, 1000 BASE-LX PIC 2 1x G/E, 1000 BASE-LX PIC 3 4x T3 FPC 1FPC PIC 0 4x CT3 PIC 1 4x CT3 PIC 2 4x CT3 FPC 2FPC PIC 0 1x Multi Link(32) PIC 2 1x G/E, 1000 BASE-LX PIC 3 1x G/E, 1000 BASE-LX After your last email, I got to thinking if their was something in ls-/1/2/0 would it conflict with was trying to do. So, I changed my interface to ls-1/3/0:0 (currently empty) and updated the associated T1 interface bundle references. Still no change. - Nilesh ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote: Jim, You need a Physical service PIC in slot 1/2 (or 1/3 as per your below comment) to do ls- or lsq-. On J-series platform these interfaces are created by software but on M20, you need a physical service PIC (either Link Services or Adaptive Services configured with layer-2 package) to get ls- or lsq- interface respectively. Good to know How are you using Multilink PIC ins FPC slot 2 PIC slot 0? Can you check with below command if it has ls- interfaces created on the router with this multilink PIC? - show interface terse ls-2/0/0* No results Please remove the configuration under [edit chassis] for FPC 1 PIC 2 (or PIC 3). It will not work. Instead of removing, I ... edit chassis rename fpc 1 to fpc 2 edit fpc 2 rename pic 2 to pic 0 up up rename interface ls-1/2/0:0 to ls-2/0/0:0 set interfaces t1-1/0/0:19 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 set interfaces t1-1/1/0:0 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 commit ran show interface terse ls-2/0/0* with no results again. Thanks for all the help and input! Jim Thanks, Nilesh. On 7/8/10 3:33 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: What kind of PIC do you have in FPC slot 1 PIC slot 2? FPC 0FPC PIC 0 4x F/E, 100 BASE-TX PIC 1 1x G/E, 1000 BASE-LX PIC 2 1x G/E, 1000 BASE-LX PIC 3 4x T3 FPC 1FPC PIC 0 4x CT3 PIC 1 4x CT3 PIC 2 4x CT3 FPC 2FPC PIC 0 1x Multi Link(32) PIC 2 1x G/E, 1000 BASE-LX PIC 3 1x G/E, 1000 BASE-LX After your last email, I got to thinking if their was something in ls-/1/2/0 would it conflict with was trying to do. So, I changed my interface to ls-1/3/0:0 (currently empty) and updated the associated T1 interface bundle references. Still no change. - Nilesh -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer to my question(s)? A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Sorry...my bad. With Multi-link pic look for ml-2/0/0 interfaces. However, I am not sure if ml- interfaces supports FRF.16 configuration that you are trying to achieve. I know it can do FRF.15 but not sure about FRF.16. You can try and see if it works. I will see if I can confirm it. Thanks, Nilesh. On 7/8/10 4:43 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: Jim, You need a Physical service PIC in slot 1/2 (or 1/3 as per your below comment) to do ls- or lsq-. On J-series platform these interfaces are created by software but on M20, you need a physical service PIC (either Link Services or Adaptive Services configured with layer-2 package) to get ls- or lsq- interface respectively. Good to know How are you using Multilink PIC ins FPC slot 2 PIC slot 0? Can you check with below command if it has ls- interfaces created on the router with this multilink PIC? - show interface terse ls-2/0/0* No results Please remove the configuration under [edit chassis] for FPC 1 PIC 2 (or PIC 3). It will not work. Instead of removing, I ... edit chassis rename fpc 1 to fpc 2 edit fpc 2 rename pic 2 to pic 0 up up rename interface ls-1/2/0:0 to ls-2/0/0:0 set interfaces t1-1/0/0:19 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 set interfaces t1-1/1/0:0 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 commit ran show interface terse ls-2/0/0* with no results again. Thanks for all the help and input! Jim Thanks, Nilesh. On 7/8/10 3:33 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: What kind of PIC do you have in FPC slot 1 PIC slot 2? FPC 0FPC PIC 0 4x F/E, 100 BASE-TX PIC 1 1x G/E, 1000 BASE-LX PIC 2 1x G/E, 1000 BASE-LX PIC 3 4x T3 FPC 1FPC PIC 0 4x CT3 PIC 1 4x CT3 PIC 2 4x CT3 FPC 2FPC PIC 0 1x Multi Link(32) PIC 2 1x G/E, 1000 BASE-LX PIC 3 1x G/E, 1000 BASE-LX After your last email, I got to thinking if their was something in ls-/1/2/0 would it conflict with was trying to do. So, I changed my interface to ls-1/3/0:0 (currently empty) and updated the associated T1 interface bundle references. Still no change. - Nilesh ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
I think Multilink PIC does not support FRF.16 configuration ( mlfr-uni-nni bundle or multiple DLCIs in a single bundle). You will need LS PIC or AS/AS2 PIC (with Layer-2 package) to do that. If you need it only for Layer2 purpose you can also go for AS-2 Layer 2 Services only PIC. The current ML PIC in your router will only support FRF.15 (One DLCI per Bundle). Thanks, Nilesh On 7/8/10 4:48 PM, Nilesh Khambal nkham...@juniper.net wrote: Sorry...my bad. With Multi-link pic look for ml-2/0/0 interfaces. However, I am not sure if ml- interfaces supports FRF.16 configuration that you are trying to achieve. I know it can do FRF.15 but not sure about FRF.16. You can try and see if it works. I will see if I can confirm it. Thanks, Nilesh. On 7/8/10 4:43 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: Jim, You need a Physical service PIC in slot 1/2 (or 1/3 as per your below comment) to do ls- or lsq-. On J-series platform these interfaces are created by software but on M20, you need a physical service PIC (either Link Services or Adaptive Services configured with layer-2 package) to get ls- or lsq- interface respectively. Good to know How are you using Multilink PIC ins FPC slot 2 PIC slot 0? Can you check with below command if it has ls- interfaces created on the router with this multilink PIC? - show interface terse ls-2/0/0* No results Please remove the configuration under [edit chassis] for FPC 1 PIC 2 (or PIC 3). It will not work. Instead of removing, I ... edit chassis rename fpc 1 to fpc 2 edit fpc 2 rename pic 2 to pic 0 up up rename interface ls-1/2/0:0 to ls-2/0/0:0 set interfaces t1-1/0/0:19 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 set interfaces t1-1/1/0:0 unit 0 family mlfr-uni-nni bundle ls-2/0/0:0 commit ran show interface terse ls-2/0/0* with no results again. Thanks for all the help and input! Jim Thanks, Nilesh. On 7/8/10 3:33 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: What kind of PIC do you have in FPC slot 1 PIC slot 2? FPC 0FPC PIC 0 4x F/E, 100 BASE-TX PIC 1 1x G/E, 1000 BASE-LX PIC 2 1x G/E, 1000 BASE-LX PIC 3 4x T3 FPC 1FPC PIC 0 4x CT3 PIC 1 4x CT3 PIC 2 4x CT3 FPC 2FPC PIC 0 1x Multi Link(32) PIC 2 1x G/E, 1000 BASE-LX PIC 3 1x G/E, 1000 BASE-LX After your last email, I got to thinking if their was something in ls-/1/2/0 would it conflict with was trying to do. So, I changed my interface to ls-1/3/0:0 (currently empty) and updated the associated T1 interface bundle references. Still no change. - Nilesh ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote: Sorry...my bad. With Multi-link pic look for ml-2/0/0 interfaces. However, I am not sure if ml- interfaces supports FRF.16 configuration that you are trying to achieve. I know it can do FRF.15 but not sure about FRF.16. You can try and see if it works. I will see if I can confirm it. Thanks, Nilesh. Oh, yeah, we have a number of clients configured on ml-2/0/0:X. But it will not work, because I need the ability to set multiple DLCIs with different networks defined. -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer to my question(s)? A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote: I think Multilink PIC does not support FRF.16 configuration ( mlfr-uni-nni bundle or multiple DLCIs in a single bundle). You will need LS PIC or AS/AS2 PIC (with Layer-2 package) to do that. If you need it only for Layer2 purpose you can also go for AS-2 Layer 2 Services only PIC. So, you are saying that since this is an M20 I cannot do this in software, that I must have a physical device (equivalent to the multilink in fpc 2 pic 0) to perform the service of the FRF.16? Thanks for the information. The current ML PIC in your router will only support FRF.15 (One DLCI per Bundle). Thanks, Nilesh -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer to my question(s)? A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
That is correct. Just to summarize, there are 2 things needed to get this FRF.16 working - M20 needs a hardware based Services PIC to create ls- or lsq- interfaces - ML PIC which you currently have in your M20 can only do MLPPP and FRF.15 style MLFR. Hence you will need either LS PIC or AS/AS2 PIC to do FRF.16. Thanks, Nilesh. On 7/8/10 5:04 PM, Jim Lucas li...@cmsws.com wrote: Nilesh Khambal wrote: I think Multilink PIC does not support FRF.16 configuration ( mlfr-uni-nni bundle or multiple DLCIs in a single bundle). You will need LS PIC or AS/AS2 PIC (with Layer-2 package) to do that. If you need it only for Layer2 purpose you can also go for AS-2 Layer 2 Services only PIC. So, you are saying that since this is an M20 I cannot do this in software, that I must have a physical device (equivalent to the multilink in fpc 2 pic 0) to perform the service of the FRF.16? Thanks for the information. The current ML PIC in your router will only support FRF.15 (One DLCI per Bundle). Thanks, Nilesh ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] mlfr
Nilesh Khambal wrote: That is correct. Just to summarize, there are 2 things needed to get this FRF.16 working - M20 needs a hardware based Services PIC to create ls- or lsq- interfaces - ML PIC which you currently have in your M20 can only do MLPPP and FRF.15 style MLFR. Hence you will need either LS PIC or AS/AS2 PIC to do FRF.16. Thanks, Nilesh. Nilesh, Ok, sounds good. Thank you for your assistance today in solving this problem. -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer to my question(s)? A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] 1000 VRRP instances per IFD and IRB
-Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of Ross Vandegrift Sent: Thursday, July 08, 2010 6:09 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] 1000 VRRP instances per IFD and IRB Hey guys, Accoridng to our account team, VRRP scales to about 1000 instances per IFD. Not that I want to scale beyond Juniper's tested specs, but has anyone pushed on this? Anyone have any experience on many VRRP instances per IFD? How many? We're planning on doing vrrp inheritance so only a single IFL is actually sending keepalives to keep that work to a minimum. Is there any way to get more IRB IFDs? Per-interface limits aren't a major problem for ethernet interfaces - this is a datacenter, we run a few more cables. But it's crippling for virtual interfaces. We'd love to toss 4000 or so customer VLANs into individual VPLS with IRB, but we can't justify the cost of 4 pairs of MXes to get more IFDs for VRRP instances. See if you can push your account team to discuss their Stratus convergence strategy on the MX and their other data center products - their so-called 3-2-1 Data Center network architecture strategy. You might be surprised to find that you probably won't have to run VRRP in the very near future... Stefan Fouant, CISSP, JNCIEx2 www.shortestpathfirst.net GPG Key ID: 0xB5E3803D ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
