[j-nsp] VPLS issue...

2010-10-21 Thread Derick Winkworth
All:

We have a two site VPLS setup using virtual-switches.  Site A has an IRB in 
the bridge-domain in the virtual-switch configuration.  All is good when the 
two 
PEs have a BGP session and the LSPs are up between the two PEs.

However, when Site B becomes unreachable, then the IRB and local interface at 
site A go down and the customer can no longer route out using the IRB.  I 
need 
this irb and the local interface to stay up so Site A can still route out the 
IRB even if Site B goes down...  


I tried the connectivity-type irb knob, but it doesn't help.  

Running 10.0S8 on MX240s...


Any thoughts?
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] Weird Port Problem

2010-10-21 Thread Paul Stewart
Hi there..

 

We have a customer we migrated off a Cisco 7600 over to an MX480.

 

Long story short we're having performance issues and have isolated it down
to some questions ;)

 

This is a 20GE+2X10GE linecard - customer port is using a copper 10/100/1000
SFP.  Port is hard coded to 100/full on both sides.

 

  MAC statistics:  Receive Transmit

Total octets 586682576135778876

Total packets   616114   506951

Unicast packets 616114   506616

Broadcast packets0  335

Multicast packets00

CRC/Align errors  98950

FIFO errors  104900

MAC control frames   00

MAC pause frames 00

Oversized frames 0

Jabber frames0

Fragment frames682

VLAN tagged frames   0

Code violations  0

  Filter statistics:

Input packet count  616114

Input packet rejects  9895

Input DA rejects 0

Input SA rejects 0

Output packet count  506951

Output packet pad count   0

Output packet error count 0

CAM destination filters: 0, CAM source filters: 0

 

 

Opened ticket with JTAC and so far not getting anywhere despite requesting
an escalation - they have been analyzing this for over 24 hours now with
no idea.

 

According to some docs, FIFO errors mean replace the PIC immediately which
I find hard to believe - this could be a classic cat5 issue or an SFP issue
but before knocking the customer down would rather get some feedback
please..

 

Customer side is a watchguard firewall unfortunately

 

Thanks,


Paul

 

 

 

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Weird Port Problem

2010-10-21 Thread Christian
Just to be sure, if you want the port to be forced also disable auto-neg 
on the combo interface.

Looks like a duplex mismatch at first sight.

Christian


Le 21/10/2010 18:26, Paul Stewart a écrit :

Hi there..



We have a customer we migrated off a Cisco 7600 over to an MX480.



Long story short we're having performance issues and have isolated it down
to some questions ;)



This is a 20GE+2X10GE linecard - customer port is using a copper 10/100/1000
SFP.  Port is hard coded to 100/full on both sides.



   MAC statistics:  Receive Transmit

 Total octets 586682576135778876

 Total packets   616114   506951

 Unicast packets 616114   506616

 Broadcast packets0  335

 Multicast packets00

 CRC/Align errors  98950

 FIFO errors  104900

 MAC control frames   00

 MAC pause frames 00

 Oversized frames 0

 Jabber frames0

 Fragment frames682

 VLAN tagged frames   0

 Code violations  0

   Filter statistics:

 Input packet count  616114

 Input packet rejects  9895

 Input DA rejects 0

 Input SA rejects 0

 Output packet count  506951

 Output packet pad count   0

 Output packet error count 0

 CAM destination filters: 0, CAM source filters: 0





Opened ticket with JTAC and so far not getting anywhere despite requesting
an escalation - they have been analyzing this for over 24 hours now with
no idea.



According to some docs, FIFO errors mean replace the PIC immediately which
I find hard to believe - this could be a classic cat5 issue or an SFP issue
but before knocking the customer down would rather get some feedback
please..



Customer side is a watchguard firewall unfortunately



Thanks,


Paul







___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] VPLS issue...

2010-10-21 Thread Derick Winkworth




- Forwarded Message 
From: Derick Winkworth dwinkwo...@att.net
To: Daniel Hilj daniel.h...@ipnett.se
Sent: Thu, October 21, 2010 1:24:12 PM
Subject: Re: [j-nsp] VPLS issue...


I need the local interface to remain up too.






From: Daniel Hilj daniel.h...@ipnett.se
To: Derick Winkworth dwinkwo...@att.net
Sent: Thu, October 21, 2010 11:26:49 AM
Subject: Re: [j-nsp] VPLS issue...

Hi,

To get around the fact of not having a local interface UP that you need for the 
IRB to be UP you can configure an lt-interface and add it to you instance.


Best Regards/Med vänliga hälsningar

Daniel Hilj


21 okt 2010 kl. 18:22 skrev Derick Winkworth dwinkwo...@att.net:

 All:
 
 We have a two site VPLS setup using virtual-switches.  Site A has an IRB in 
 the bridge-domain in the virtual-switch configuration.  All is good when the 
two 

 PEs have a BGP session and the LSPs are up between the two PEs.
 
 However, when Site B becomes unreachable, then the IRB and local interface 
 at 

 site A go down and the customer can no longer route out using the IRB.  I 
need 

 this irb and the local interface to stay up so Site A can still route out the 
  IRB even if Site B goes down...  
 
 
 I tried the connectivity-type irb knob, but it doesn't help.  
 
 Running 10.0S8 on MX240s...
 
 
 Any thoughts?
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp 
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
See cluepon:

http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash

Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano:
 Anybody that can provide as to how to replace a m10 hard disk? one of them 
 failed.
 
 any feedback is greatly appreciated.
 
 Fernando Atilano| Transtelco| Networking  Support
 MX 52.656.257.1114
 US1.915.217.2286
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


signature.asc
Description: This is a digitally signed message part
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Fernando Atilano
Thank you Jonas !!

Fernando Atilano| Transtelco| Networking  Support
MX 52.656.257.1114
US1.915.217.2286

On Oct 21, 2010, at 3:59 PM, Jonas Frey (Probe Networks) 
j...@probe-networks.de 
  wrote:

 See cluepon:

 http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash

 Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano:
 Anybody that can provide as to how to replace a m10 hard disk? one  
 of them failed.

 any feedback is greatly appreciated.

 Fernando Atilano| Transtelco| Networking  Support
 MX 52.656.257.1114
 US1.915.217.2286

 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Giuliano Cardozo Medalha

What are the commands you need to use to upgrade the hard disk ?

Somethin like:

request system snapshot media ... ?

Anyone knows how to do that ?

Thanks a lot,



Thank you Jonas !!

Fernando Atilano| Transtelco| Networking  Support
MX 52.656.257.1114
US1.915.217.2286

On Oct 21, 2010, at 3:59 PM, Jonas Frey (Probe 
Networks)j...@probe-networks.de
wrote:


See cluepon:

http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash

Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano:

Anybody that can provide as to how to replace a m10 hard disk? one
of them failed.

any feedback is greatly appreciated.

Fernando Atilano| Transtelco| Networking  Support
MX 52.656.257.1114
US1.915.217.2286

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] Rate Shaping on a J2350

2010-10-21 Thread TiM
Quick question about policing.

Basically I'd like to know if this config will work.  I'm pretty sure it
will and the Juniper docs seems to agree with me, but the collective
wisdom of JNSP would be appreciated.

Router in question is a Juniper J2350.

Basically I want to say:

192.168.0.0/24 is in total allowed 50Mb/s of bandwidth.  This is the
global limit that shouldn't be exceeded, regardless of what individual
customers are doing.

Then, under that, individiual customers (allocated a /30) are given a
maximum limit.  That is, they can move traffic up to the rate they've
purchased, assuming the /24 still has capacity.

This is the config I have.  The key bit of my question involves the use of
the term next statement:

term Global-Shape{
from {
destination-address {
192.168.0.0/24;
}
}
then {
policer rl-50;
next term;  -  Valid? Will this work as intended?
}
}
term Customer1 {
from {
destination-address {
192.168.0.0/30;
}
}
then {
policer rl-10;  This customer gets 10Mb/s total.
count Customer1;
}
}
term Customer2 {
from {
destination-address {
192.168.0.4/30;
}
}
then {
policer rl-20;  This customer gets 20Mb/s total.
count Customer2;
}
}

Assume there's another 20 customers all configured the same.

Basically: If the sum of the /30's policers is say, 150Mb/s will the above
config limit the /24 to 50Mb/s?

Thanks for any pointers you can provide.

Kind Regards,

Tim H

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
See:

http://www.mail-archive.com/juniper-nsp@puck.nether.net/msg06658.html

request system partition hard-disk
request system snapshot partition
request system snapshot



Am Donnerstag, den 21.10.2010, 20:16 -0200 schrieb Giuliano Cardozo
Medalha:
 What are the commands you need to use to upgrade the hard disk ?
 
 Somethin like:
 
 request system snapshot media ... ?
 
 Anyone knows how to do that ?
 
 Thanks a lot,
 
 
  Thank you Jonas !!
 
  Fernando Atilano| Transtelco| Networking  Support
  MX 52.656.257.1114
  US1.915.217.2286
 
  On Oct 21, 2010, at 3:59 PM, Jonas Frey (Probe 
  Networks)j...@probe-networks.de
  wrote:
 
  See cluepon:
 
  http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash
 
  Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano:
  Anybody that can provide as to how to replace a m10 hard disk? one
  of them failed.
 
  any feedback is greatly appreciated.
 
  Fernando Atilano| Transtelco| Networking  Support
  MX 52.656.257.1114
  US1.915.217.2286
 
  ___
  juniper-nsp mailing list juniper-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp
  ___
  juniper-nsp mailing list juniper-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


signature.asc
Description: This is a digitally signed message part
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Rate Shaping on a J2350

2010-10-21 Thread Alex
I did a similar exercise a while ago on T-series and it works, I would 
expect it to work the same way on J-series.

Some tips:
1/ if you want to limit two or more customers to, say, 10Mbps each, don't 
configure a filter-specific policer, configure a regular 10Mbps policer.
By default, a regular policer is term-specific and two or more customers can 
be separately rate-limited by the different instances of the same regular 
policer in different FW filter terms.
2/ filter-specific policer would come into play when you want to give a 
shared (sub)bandwidth to two or more customers. If a policer is referenced 
only once inside the FW filter, there is no difference between 
filter-specific and default (term-specific) policer.
3/ with your example config, it is not possible to discriminate between 
customers sharing 50Mbps bandwith - e.g. 1st customer could be clogging the 
pipe up to own policer limit and all others will be forced to use what's 
left of bandwidth delta (50Mbps less 1st customer policer limit). 
Shaping+scheduling could be a better approach.

Rgds
Alex


- Original Message - 
From: TiM t...@muppetz.com

To: juniper-nsp@puck.nether.net
Sent: Thursday, October 21, 2010 11:07 PM
Subject: [j-nsp] Rate Shaping on a J2350



Quick question about policing.

Basically I'd like to know if this config will work.  I'm pretty sure it
will and the Juniper docs seems to agree with me, but the collective
wisdom of JNSP would be appreciated.

Router in question is a Juniper J2350.

Basically I want to say:

192.168.0.0/24 is in total allowed 50Mb/s of bandwidth.  This is the
global limit that shouldn't be exceeded, regardless of what individual
customers are doing.

Then, under that, individiual customers (allocated a /30) are given a
maximum limit.  That is, they can move traffic up to the rate they've
purchased, assuming the /24 still has capacity.

This is the config I have.  The key bit of my question involves the use of
the term next statement:

term Global-Shape{
   from {
   destination-address {
   192.168.0.0/24;
   }
   }
   then {
   policer rl-50;
   next term;  -  Valid? Will this work as intended?
   }
}
term Customer1 {
   from {
   destination-address {
   192.168.0.0/30;
   }
   }
   then {
   policer rl-10;  This customer gets 10Mb/s total.
   count Customer1;
   }
}
term Customer2 {
   from {
   destination-address {
   192.168.0.4/30;
   }
   }
   then {
   policer rl-20;  This customer gets 20Mb/s total.
   count Customer2;
   }
}

Assume there's another 20 customers all configured the same.

Basically: If the sum of the /30's policers is say, 150Mb/s will the above
config limit the /24 to 50Mb/s?

Thanks for any pointers you can provide.

Kind Regards,

Tim H

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] SRX for MPLS

2010-10-21 Thread Giuliano Cardozo Medalha

People,

Does anyone uses SRX routers for MPLS (VPLS) Transport ?

We are thinking about the use of SRX220 under some conditions:

- Use it in a not a good environment without air conditioning and a lot 
of dust ... external box temperature rises from 35 to 42 Celsius.
- Be the point to interconnect POPs using point to point radios 
(100~1000 Mbps)
- Using it to provide a VPLS infrastructure for L2 transport and client 
isolation until the start of the backbone (M7i and MX80 Routers)

- SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.

The figure showed at the following link tries to resume it at all:

http://www.wztech.com.br/JUNIPER/Topology.png

It is possible to use this box in a such project ?  Do you have any 
experience using it to do this type of topology ?


Is is possible that SRX220 can work fine under so strength environment 
conditions ?  Could it blow up or goes down ?


If someone has implemented this kind of environment can please share the 
experiences ?


Thanks a lot,

Giuliano







___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] SRX for MPLS

2010-10-21 Thread Giuliano Cardozo Medalha

People,

Does anyone uses SRX routers for MPLS (VPLS) Transport ?

We are thinking about the use of SRX220 under some conditions:

- Use it in a not a good environment without air conditioning and a lot 
of dust ... external box temperature rises from 35 to 42 Celsius.
- Be the point to interconnect POPs using point to point radios 
(100~1000 Mbps)
- Using it to provide a VPLS infrastructure for L2 transport and client 
isolation until the start of the backbone (M7i and MX80 Routers)

- SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.

The figure showed at the following link tries to resume it at all:

http://www.wztech.com.br/JUNIPER/Topology.png

It is possible to use this box in a such project ?  Do you have any 
experience using it to do this type of topology ?


Is is possible that SRX220 can work fine under so strength environment 
conditions ?  Could it blow up or goes down ?


If someone has implemented this kind of environment can please share the 
experiences ?


Thanks a lot,

Giuliano
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] SRX for MPLS

2010-10-21 Thread Jai Chandra Gundapaneni
Hi Giuliano,

We do not support MPLS on SRX platforms.



Thanks  Regards,
 Jai 

- Original Message -
From: juniper-nsp-boun...@puck.nether.net juniper-nsp-boun...@puck.nether.net
To: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net
Sent: Thu Oct 21 19:48:46 2010
Subject: [j-nsp] SRX for MPLS

People,

Does anyone uses SRX routers for MPLS (VPLS) Transport ?

We are thinking about the use of SRX220 under some conditions:

- Use it in a not a good environment without air conditioning and a lot 
of dust ... external box temperature rises from 35 to 42 Celsius.
- Be the point to interconnect POPs using point to point radios 
(100~1000 Mbps)
- Using it to provide a VPLS infrastructure for L2 transport and client 
isolation until the start of the backbone (M7i and MX80 Routers)
- SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.

The figure showed at the following link tries to resume it at all:

http://www.wztech.com.br/JUNIPER/Topology.png

It is possible to use this box in a such project ?  Do you have any 
experience using it to do this type of topology ?

Is is possible that SRX220 can work fine under so strength environment 
conditions ?  Could it blow up or goes down ?

If someone has implemented this kind of environment can please share the 
experiences ?

Thanks a lot,

Giuliano







___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] SRX for MPLS

2010-10-21 Thread Tim Eberhard
I don't believe that's the case. You can do MPLS (I can't say I've ever done
it, but I know the config is possible) the major catch with that is the SRX
will be switched to packet mode (vs flow) and you loose the flow
capabilities of the SRX platform. Basically you can turn the SRX into a
branch router and do MPLS but the MPLS router+firewall isn't possible.

security {
forwarding-options {
family {
mpls {
mode packet-based;
}
}
}
}

Hope this clears things up,
-Tim Eberhard

On Thu, Oct 21, 2010 at 9:59 PM, Jai Chandra Gundapaneni 
jaichan...@juniper.net wrote:

 At least not yet I should say.

 Thanks  Regards,
  Jai

 - Original Message -
 From: Jai Chandra Gundapaneni
 To: 'giulian...@uol.com.br' giulian...@uol.com.br; '
 juniper-nsp@puck.nether.net' juniper-nsp@puck.nether.net
 Sent: Thu Oct 21 19:57:52 2010
 Subject: Re: [j-nsp] SRX for MPLS

 Hi Giuliano,

 We do not support MPLS on SRX platforms.



 Thanks  Regards,
  Jai

 - Original Message -
 From: juniper-nsp-boun...@puck.nether.net 
 juniper-nsp-boun...@puck.nether.net
 To: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net
 Sent: Thu Oct 21 19:48:46 2010
 Subject: [j-nsp] SRX for MPLS

 People,

 Does anyone uses SRX routers for MPLS (VPLS) Transport ?

 We are thinking about the use of SRX220 under some conditions:

 - Use it in a not a good environment without air conditioning and a lot
 of dust ... external box temperature rises from 35 to 42 Celsius.
 - Be the point to interconnect POPs using point to point radios
 (100~1000 Mbps)
 - Using it to provide a VPLS infrastructure for L2 transport and client
 isolation until the start of the backbone (M7i and MX80 Routers)
 - SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.

 The figure showed at the following link tries to resume it at all:

 http://www.wztech.com.br/JUNIPER/Topology.png

 It is possible to use this box in a such project ?  Do you have any
 experience using it to do this type of topology ?

 Is is possible that SRX220 can work fine under so strength environment
 conditions ?  Could it blow up or goes down ?

 If someone has implemented this kind of environment can please share the
 experiences ?

 Thanks a lot,

 Giuliano







 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] SRX for MPLS

2010-10-21 Thread Jai Chandra Gundapaneni
Sorry for the confusion. The top end SRX don't yet support the MPLS feature as 
yet. The top end SRX don't work in packet mode.  

--Original Message--
From: EXT - xmi...@gmail.com
To: Jai Chandra Gundapaneni
Cc: giulian...@uol.com.br
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] SRX for MPLS
Sent: Oct 22, 2010 08:43

I don't believe that's the case. You can do MPLS (I can't say I've ever done 
it, but I know the config is possible) the major catch with that is the SRX 
will be switched to packet mode (vs flow) and you loose the flow capabilities 
of the SRX platform. Basically you can turn the SRX into a branch router and do 
MPLS but the MPLS router+firewall isn't possible. security {     
forwarding-options {         family {             mpls {                 mode 
packet-based;                 }             }         } } Hope this clears 
things up, -Tim Eberhard On Thu, Oct 21, 2010 at 9:59 PM, Jai Chandra 
Gundapaneni jaichan...@juniper.net wrote: At least not yet I should say. 
Thanks  Regards,  Jai - Original Message - From: Jai Chandra 
Gundapaneni To: 'giulian...@uol.com.br' giulian...@uol.com.br; 
'juniper-nsp@puck.nether.net' juniper-nsp@puck.nether.net Sent: Thu Oct 21 
19:57:52 2010 Subject: Re: [j-nsp] SRX for MPLS Hi Giuliano, We do not support 
MPLS on SRX platforms. Thanks  Regards,  Jai - Original Message - 
From: juniper-nsp-boun...@puck.nether.net juniper-nsp-boun...@puck.nether.net 
To: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net Sent: Thu Oct 21 
19:48:46 2010 Subject: [j-nsp] SRX for MPLS People, Does anyone uses SRX 
routers for MPLS (VPLS) Transport ? We are thinking about the use of SRX220 
under some conditions: - Use it in a not a good environment without air 
conditioning and a lot of dust ... external box temperature rises from 35 to 42 
Celsius. - Be the point to interconnect POPs using point to point radios 
(100~1000 Mbps) - Using it to provide a VPLS infrastructure for L2 transport 
and client isolation until the start of the backbone (M7i and MX80 Routers) - 
SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients. The 
figure showed at the following link tries to resume it at all: 
http://www.wztech.com.br/JUNIPER/Topology.png It is possible to use this box in 
a such project ?  Do you have any experience using it to do this type of 
topology ? Is is possible that SRX220 can work fine under so strength 
environment conditions ?  Could it blow up or goes down ? If someone has 
implemented this kind of environment can please share the experiences ? Thanks 
a lot, Giuliano ___ juniper-nsp 
mailing list juniper-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/juniper-nsp 
___ juniper-nsp mailing list 
juniper-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/juniper-nsp 
Thanks  Regards,
 Jai 
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] SRX for MPLS

2010-10-21 Thread Barny Sanchez
High-end SRXs (SRX3000s and SRX5000s) do not support packet-based only 
processing.  

Branch SRX (SRX100s, SRX200s, SRX650s) support either packet-based only, 
flow-based only or mixed mode (selective packet services).  Please refer to the 
following app note for some great examples:  
https://www.juniper.net/us/en/local/pdf/app-notes/3500192-en.pdf
 

Thanks,

Barny Sanchez
Sr. Consulting Engineer, Security Products  Solutions
Juniper Networks



On Oct 21, 2010, at 9:13 PM, Tim Eberhard wrote:

I don't believe that's the case. You can do MPLS (I can't say I've ever done
it, but I know the config is possible) the major catch with that is the SRX
will be switched to packet mode (vs flow) and you loose the flow
capabilities of the SRX platform. Basically you can turn the SRX into a
branch router and do MPLS but the MPLS router+firewall isn't possible.

security {
   forwarding-options {
   family {
   mpls {
   mode packet-based;
   }
   }
   }
}

Hope this clears things up,
-Tim Eberhard

On Thu, Oct 21, 2010 at 9:59 PM, Jai Chandra Gundapaneni 
jaichan...@juniper.net wrote:

 At least not yet I should say.
 
 Thanks  Regards,
 Jai
 
 - Original Message -
 From: Jai Chandra Gundapaneni
 To: 'giulian...@uol.com.br' giulian...@uol.com.br; '
 juniper-nsp@puck.nether.net' juniper-nsp@puck.nether.net
 Sent: Thu Oct 21 19:57:52 2010
 Subject: Re: [j-nsp] SRX for MPLS
 
 Hi Giuliano,
 
 We do not support MPLS on SRX platforms.
 
 
 
 Thanks  Regards,
 Jai
 
 - Original Message -
 From: juniper-nsp-boun...@puck.nether.net 
 juniper-nsp-boun...@puck.nether.net
 To: juniper-nsp@puck.nether.net juniper-nsp@puck.nether.net
 Sent: Thu Oct 21 19:48:46 2010
 Subject: [j-nsp] SRX for MPLS
 
 People,
 
 Does anyone uses SRX routers for MPLS (VPLS) Transport ?
 
 We are thinking about the use of SRX220 under some conditions:
 
 - Use it in a not a good environment without air conditioning and a lot
 of dust ... external box temperature rises from 35 to 42 Celsius.
 - Be the point to interconnect POPs using point to point radios
 (100~1000 Mbps)
 - Using it to provide a VPLS infrastructure for L2 transport and client
 isolation until the start of the backbone (M7i and MX80 Routers)
 - SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.
 
 The figure showed at the following link tries to resume it at all:
 
 http://www.wztech.com.br/JUNIPER/Topology.png
 
 It is possible to use this box in a such project ?  Do you have any
 experience using it to do this type of topology ?
 
 Is is possible that SRX220 can work fine under so strength environment
 conditions ?  Could it blow up or goes down ?
 
 If someone has implemented this kind of environment can please share the
 experiences ?
 
 Thanks a lot,
 
 Giuliano
 
 
 
 
 
 
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] VPLS issue...

2010-10-21 Thread Derick Winkworth


I found three ways to keep the local interface up so it can hit the irb 
interface even if all remote PEs for the VPLS instance are lost:



1.  Use two physical ports to the PE from the CE, one for VPLS and one for L3. 
You could put a switch in front of your PE to accomplish this.  I think this is 
the cleanest way.

2.  Plug a cable into two ports on the same PE (both ends of cable going into 
same box).  Build a bridge-group for the VLAN.  Put one end of the cable into 
the bridge group.  In the same bridge-group put the VLAN coming in from the 
CE.  
The other end of the cable put into the VPLS switch instance.  Traffic coming 
from CE will be bridged to the one end of the cable then come back around into 
the VPLS instance.  The irb interface is specified in the bridge-group.  The 
irb 
interface can exist in any routing-instance.

3.  Make an lt-x/x/x interface pair.  Build a bridge-group for the VLAN, put 
the 
VLAN coming from the CE into the bridge-group.  Put one of the lt interfaces 
into the bridge group.  This lt interface should be encapsulation vlan.  The 
other lt interface should be encapsulation vlan-vpls and put this into the 
VPLS instance.  The irb interface is specified in the bridge-group.  The irb 
interface can exist in any routing-instance.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp