Re: [j-nsp] CGN ob MX5?

2012-04-15 Thread Xu Hu
Many thanks for your information.

Thanks and regards,
Xu Hu

On 13 Apr, 2012, at 21:52, Bill Blackford bblackf...@gmail.com wrote:

 This might also help.
 
 http://www.juniper.net/us/en/local/pdf/implementation-guides/8010076-en.pdf
 
 When testing CGN, there are some general things to keep in mind:
 
 1. Application/Functionality. How do standard applications function
 behind the double-nat?
 
 2. Performance and scale. What's the load on the service PIC? How many
 subs can you expect to nat behind a single, service PIC? At what point
 do you need to throw extra hardware at it?
 
 3. Placement. Where in your network do you place CGN? BNG/BRAS?
 Regional aggregation? Core aggregation? How do you separate dedicated
 Internet and business customers from subscribers? Depending on how far
 upstream your chosen placement might be, how do you handle dual
 egress?
 
 4. Logging/tracking subs. How can we log and track each individual
 subscriber all natting behind a single address? How verbose does that
 logging need to be? There are some nice knobs in 11.2 that
 specifically address some of theses issues.
 
 
 
 -b
 
 
 
 On Fri, Apr 13, 2012 at 12:20 AM, Xu Hu jstuxuhu0...@gmail.com wrote:
 Recently heard so many times about CGN, but i still don't understand what
 is the difference between NAT and CGN, can any expert explain what's the
 CGN.
 
 2012/4/12 Saku Ytti s...@ytti.fi
 
 On (2012-04-12 16:31 +0200), Matthias Brumm wrote:
 
 I would like to know, if no, some or all implementations of CGN will
 be working on a MX5?
 
 This seems in realms of possibility (1ipv6 statically to 1ipv4) for trio.
 But if you know you will need CGN I would assume that MX5 will never get
 it, this way you'll avoid disappointment and possibly need for another box
 while waiting for needed feature to appear.
 
 NAPT (port based, nto1) is not possible as far as I understand on trio,
 then you'd need some service slot in the behind, which also I would assume
 never to exist when making purchase decision.
 
 --
  ++ytti
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 
 
 -- 
 Bill Blackford
 Network Engineer
 
 Logged into reality and abusing my sudo privileges.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] which situation we need Interconnecting two Layer 2 VPN

2012-04-15 Thread bruno
hello , 


i am new to l2vpn, when i read the l2vpn doc ,i am confuse. why we need 
interconnecting two layer vpn. is it for connecting two sp l2vpn customer or 
same service provider customer.  


take this doc for example ,why we need it .  why not connect PE1 and PE5 .then 
the CE1 and CE5 can communicate?


http://www.juniper.net/techpubs/en_US/junos11.4/topics/example/layer-2-vpn-layer-2-vpn-connection-configuring.html
 






--
Best Regards,
Bruno
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Capturing/displaying contents of incoming packets

2012-04-15 Thread Daniel Roesen
On Fri, Apr 13, 2012 at 04:17:51PM +0100, Phil Mayers wrote:
 On 13/04/12 16:11, Jose Madrid wrote:
 Why not just use monitor interface?  I have used it in the past and its a
 tcp-dump like output.

 That just shows control-plane packets.

And only those control-plane packets which go from/to the routing
engine. Packets handled by distributed PPM on the linecards won't show
up. E.g. BFD, LACP, ...

Best regards,
Daniel

PS: ah, and JUNOS also forgets to count those packets, and forgets to
obey to the host-outbound-traffic CoS config so distributed
LACP/BFD/whateverdistributedPPMhandles goes into wrong egress queue.
Workaround: configure ppm centralized, but also lose the scaling...

-- 
CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp