Re: [j-nsp] Document Update - EX Features
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There will never be an EX2500 in that document. This is a junos document, and the ex2500 doesn't run junos. Tom Am 04.05.2012 06:18, schrieb Skeeve Stevens: Hey, Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html With the EX2500's in it. *Skeeve Stevens, CEO* eintellego Pty Ltd ske...@eintellego.net ; www.eintellego.net http://www.eintellego.net.au Phone: 1300 753 383 ; Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego twitter.com/networkceoau ; www.linkedin.com/in/skeeve PO Box 7726, Baulkham Hills, NSW 1755 Australia The Experts Who The Experts Call Juniper - Cisco – IBM ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+jnJgACgkQrUvjMoak8ZeCwwCdGnsVWGhqa5pd6pBuL8LzSUzH o0gAn2d9Vv80ZGJLpjqowdt8Zpa5dkNw =lRwW -END PGP SIGNATURE- ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Document Update - EX Features
Skeeve, This document shows when features became available in a version of Junos. The EX2500 does not run Junos; hence it's omission from the document. If you need a 10Gb switch, look at the EX4500 (or the SFX3500 if you need a 1RU footprint). HTH -- Graham Brown Twitter - @mountainrescuer https://twitter.com/#!/mountainrescuer LinkedIn http://www.linkedin.com/in/grahamcbrown On Fri, May 4, 2012 at 5:18 AM, Skeeve Stevens skeeve+juniper...@eintellego.net wrote: Hey, Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html With the EX2500's in it. *Skeeve Stevens, CEO* eintellego Pty Ltd ske...@eintellego.net ; www.eintellego.net http://www.eintellego.net.au Phone: 1300 753 383 ; Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego twitter.com/networkceoau ; www.linkedin.com/in/skeeve PO Box 7726, Baulkham Hills, NSW 1755 Australia The Experts Who The Experts Call Juniper - Cisco – IBM ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Document Update - EX Features
Hi Skeeve, On May 4, 2012 2:24 PM, Skeeve Stevens skeeve+juniper...@eintellego.net wrote: Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html With the EX2500's in it. What update are you after? The EX2500 doesn't run JUNOS, if that's why you were suggesting the doc needed an update. Cheers, Dale *Skeeve Stevens, CEO* ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Document Update - EX Features
Apologies, I meant the QFX3500. Graham On Fri, May 4, 2012 at 9:34 AM, Graham Brown juniper-...@grahambrown.infowrote: Skeeve, This document shows when features became available in a version of Junos. The EX2500 does not run Junos; hence it's omission from the document. If you need a 10Gb switch, look at the EX4500 (or the SFX3500 if you need a 1RU footprint). HTH -- Graham Brown Twitter - @mountainrescuer https://twitter.com/#!/mountainrescuer LinkedIn http://www.linkedin.com/in/grahamcbrown On Fri, May 4, 2012 at 5:18 AM, Skeeve Stevens skeeve+juniper...@eintellego.net wrote: Hey, Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html With the EX2500's in it. *Skeeve Stevens, CEO* eintellego Pty Ltd ske...@eintellego.net ; www.eintellego.net http://www.eintellego.net.au Phone: 1300 753 383 ; Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego twitter.com/networkceoau ; www.linkedin.com/in/skeeve PO Box 7726, Baulkham Hills, NSW 1755 Australia The Experts Who The Experts Call Juniper - Cisco – IBM ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Document Update - EX Features
On Thu, May 3, 2012 at 9:18 PM, Skeeve Stevens skeeve+juniper...@eintellego.net wrote: Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html Use the Rate and give feedback widget at the top of the page - it has worked for me in the past. :w ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] (no subject)
off ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] policer
Just looking for clarification on the policer use. If I have a whole subnet of ips in say a 10 megabit policer is each ip int eh subnet limited to 10 meg or is the whole subnet limited as a total of all the ips bandwidth? Mark Jones Operations Managed Network Systems London Desk 519-679-5207 Windsor Desk 519-258-2333 x8417 Cell 519-521-8222 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] policer
This depends on how you apply the policer. If you apply a firewall filter at the logical-unit level with a match clause that lists specific IPs, or subsets of the prefix to which you refer, then the policer you call in that firewall filter will only apply to those IPs listed in your match clause. If, on the other hand, you apply a policer at the logical-unit level, it'll apply to all interface IP blocks on the entire logical unit, and the 10Mbps would be shared across all IPs in that subnet, not 10Mbps per IP. David On 3 May 2012 12:44, Mark Jones mjo...@mnsi.net wrote: Just looking for clarification on the policer use. If I have a whole subnet of ips in say a 10 megabit policer is each ip int eh subnet limited to 10 meg or is the whole subnet limited as a total of all the ips bandwidth? Mark Jones Operations Managed Network Systems London Desk 519-679-5207 Windsor Desk 519-258-2333 x8417 Cell 519-521-8222 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] Document Update - EX Features
Some of the Juniper document maintainers peruse this list regularly. I once complained here about a VPLS document not quite being right, and I was emailed within days by someone who could facilitate such a change. They even solicited my feedback on how the wording should be structured. David On 4 May 2012 00:18, Skeeve Stevens skeeve+juniper...@eintellego.netwrote: Hey, Does anyone know who we hassle to get a document updated? Specifically: http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/concept/ex-series-software-features-overview.html With the EX2500's in it. *Skeeve Stevens, CEO* eintellego Pty Ltd ske...@eintellego.net ; www.eintellego.net http://www.eintellego.net.au Phone: 1300 753 383 ; Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego twitter.com/networkceoau ; www.linkedin.com/in/skeeve PO Box 7726, Baulkham Hills, NSW 1755 Australia The Experts Who The Experts Call Juniper - Cisco – IBM ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] policer
Policers are pretty flexible. It really has to do with how you apply them to the IFD and IFL. There are options in the firewall filters and policers to aggregate or deaggregate traffic. If you want to police traffic per IP, there's something called a prefix-action that will let you define various prefix lengths. For example you can create an individual logical policer for every /32 in a /25 network. http://www.juniper.net/techpubs/software/junos/junos94/swconfig-policy/pref ix-action.html Thank you, -- Doug Hanks - JNCIE-ENT #213, JNCIE-SP #875 Sr. Systems Engineer Juniper Networks Twitter: @douglashanksjr On 5/3/12 9:44 AM, Mark Jones mjo...@mnsi.net wrote: Just looking for clarification on the policer use. If I have a whole subnet of ips in say a 10 megabit policer is each ip int eh subnet limited to 10 meg or is the whole subnet limited as a total of all the ips bandwidth? Mark Jones Operations Managed Network Systems London Desk 519-679-5207 Windsor Desk 519-258-2333 x8417 Cell 519-521-8222 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] problems with srx240
Hi, My SRX240 box started showing the following error in the logs: May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254 May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300 May 5 00:36:08 srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550 May 5 00:36:08 srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c May 5 00:36:08 srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34 May 5 00:36:08 srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8 May 5 00:36:18 srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread) ran for 1572 ms without yielding May 5 00:36:18 srx240-lab srx240-lab Scheduler Oinker May 5 00:36:18 srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254 May 5 00:36:18 srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc May 5 00:36:18 srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c May 5 00:36:18 srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0 May 5 00:36:18 srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34 May 5 00:36:18 srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8 The box isn't heavy loaded - just about 1-2megs of trafiic per sec. What might be the problem here? All best, mjb ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] problems with srx240
I have observed this on both an srx240 and srx210h. Jtac advised turning off utm and idp (on 210), yet those were enabled before with no issues. The 240 was fresh out of the box getting initial config (IP, Nat, zones, policies, I.e. nothing amazing). I'll be waiting to see the answers too! On May 5, 2012 7:56 AM, Maciej Jan Broniarz gau...@gausus.net wrote: Hi, My SRX240 box started showing the following error in the logs: May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254 May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300 May 5 00:36:08 srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550 May 5 00:36:08 srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c May 5 00:36:08 srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34 May 5 00:36:08 srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8 May 5 00:36:18 srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread) ran for 1572 ms without yielding May 5 00:36:18 srx240-lab srx240-lab Scheduler Oinker May 5 00:36:18 srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254 May 5 00:36:18 srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc May 5 00:36:18 srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c May 5 00:36:18 srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0 May 5 00:36:18 srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34 May 5 00:36:18 srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8 The box isn't heavy loaded - just about 1-2megs of trafiic per sec. What might be the problem here? All best, mjb ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] problems with srx240
If I recall correctly, I looked into this previously and found that this was due to idp being enabled (which it is by default) but not being used by policy. I want to say the fix to stop these non-impacting albeit annoying log messages is to just disable IDP all together. Hope that helps, -Tim Eberhard On Fri, May 4, 2012 at 5:38 PM, Maciej Jan Broniarz gau...@gausus.net wrote: Hi, My SRX240 box started showing the following error in the logs: May 5 00:36:08 srx240-lab srx240-lab Frame 00: sp = 0x49202a58, pc = 0x08020254 May 5 00:36:08 srx240-lab srx240-lab Frame 01: sp = 0x49202b00, pc = 0x0800c1fc May 5 00:36:08 srx240-lab srx240-lab Frame 02: sp = 0x49202b70, pc = 0x0800d300 May 5 00:36:08 srx240-lab srx240-lab Frame 03: sp = 0x49202b90, pc = 0x082cb550 May 5 00:36:08 srx240-lab srx240-lab Frame 04: sp = 0x49202be8, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 05: sp = 0x49202c10, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 06: sp = 0x49202c38, pc = 0x080198c0 May 5 00:36:08 srx240-lab srx240-lab Frame 07: sp = 0x49202c60, pc = 0x08019a2c May 5 00:36:08 srx240-lab srx240-lab Frame 08: sp = 0x49202c98, pc = 0x0801fc34 May 5 00:36:08 srx240-lab srx240-lab Frame 09: sp = 0x49202cc0, pc = 0x09dc54c8 May 5 00:36:18 srx240-lab srx240-lab SCHED: Thread 14 (Forwarding Thread) ran for 1572 ms without yielding May 5 00:36:18 srx240-lab srx240-lab Scheduler Oinker May 5 00:36:18 srx240-lab srx240-lab Frame 00: sp = 0x491b8c68, pc = 0x08020254 May 5 00:36:18 srx240-lab srx240-lab Frame 01: sp = 0x491b8d10, pc = 0x0800c1fc May 5 00:36:18 srx240-lab srx240-lab Frame 02: sp = 0x491b8d80, pc = 0x088b3c8c May 5 00:36:18 srx240-lab srx240-lab Frame 03: sp = 0x491b8dd0, pc = 0x088b76d0 May 5 00:36:18 srx240-lab srx240-lab Frame 04: sp = 0x491b8e50, pc = 0x0801fc34 May 5 00:36:18 srx240-lab srx240-lab Frame 05: sp = 0x491b8e78, pc = 0x09dc54c8 The box isn't heavy loaded - just about 1-2megs of trafiic per sec. What might be the problem here? All best, mjb ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
