Re: [j-nsp] Config help for basic MPLS setup

2012-09-25 Thread Chris Kawchuk
I've always had troubles using an EX4200 as a "P" router.

The only way Ive gotten it to "kinda" work is to build an LSP with the endpoint 
having protocols { mpls { explicit-null; }}, so any EX4200 in the middle 
doesn't try to 'pop' the outer label if it happens to be the penultimate… 
although my memory is sketchy on this… (I *think* I got it working across an 
EX4200 as a "P" this way.. Your Mileage May Vary) 

The only MPLS thing Ive ever seen in use is to make CCC's. i.e. think of using 
an EX4200 device as an olds-style "ATM Edge" Device, where it turns ethernet 
into a PVC/RFC1483..cough.cough.. I meant an LSP/CCC. Thats about the only 
application I have found. LDP is a no-go as well, so L2CKT/Martini isn't 
possible either…

- CK.

On 2012-09-25, at 5:51 PM, Phil Mayers  wrote:

> On 09/25/2012 03:16 AM, Tim Jackson wrote:
>> I'm pretty sure this is the case. EX4200 will not forward anything with > 1
>> label.
> 
> Just... wow. What is MPLS even *for* on those boxes?

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] MX80 bridge-domain QinQ question

2012-09-25 Thread Jeff Wheeler
On Sun, Sep 23, 2012 at 6:28 AM, Robert Hass  wrote:
> Could you paste working configuration here if you find solution ? As
> I'm also interested in same configuration.

Sorry, Robert (and others who might find this thread in The Google)
small update:

The previous configuration I pasted did not work because we need to
manipulate the VLAN tags.  On my EX-facing interface we had to make
the following config:

root@CR3.1250RL# show interfaces xe-0/0/3.423
description "CUSTXP xxx Internet";
encapsulation vlan-bridge;
vlan-id 423;
input-vlan-map {
push;
vlan-id 1428;
}
output-vlan-map pop-swap;
family bridge;


Notice above I am adding input-vlan-map and output-vlan-map.  We
tested this today and it works.  I am not sure if we can do a
swap-swap or similar in order to connect to more CE that have
different outer-tags, though.  :/
-- 
Jeff S Wheeler 
Sr Network Operator  /  Innovative Network Concepts
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] How to configure two Tacacs servers with different keys in the same router ?

2012-09-25 Thread Abdullah Baheer
Hi,
About question No. 2, if you configure authentication order [tacplus password] 
you will be authenticated locally if tacplus is reachable and doesn't 
authenticate...in case you configure authentication order as [tacplus], you 
will only be authenticated locally if the tacplus server is not reachable...
ThanksAbdullah Baheer

--- On Mon, 9/24/12, hani ibrahim  wrote:

From: hani ibrahim 
Subject: [j-nsp] How to configure two Tacacs servers with different keys in the 
same router ?
To: juniper-nsp@puck.nether.net
Date: Monday, September 24, 2012, 6:01 PM

Dear All,

Kindly, appreciate you help ,

i tired to configure two different tacacs servers on the same routes but i
observed the below :

1- the first configured server is authenticating , but the 2nd one is not ?
so is it possible to authenticate  using both servers ?
2- i can authenticate locally + tacacs although I'm configuring
authentication-order [tacplus password] ? so why ?

config sample :
tacplus-server {
        10.10.10.1 {=>this server
is authenticating first
            port 49;
            secret "$898%&asdertynkll*&8778%^"; ## SECRET-DATA
            timeout 10;
            single-connection;
            source-address 11.11.11.1;
        }
        20.20.20.1 {> this one is
not authenticating
            port 49
            secret "$9$-vdY46tyh890dr%%@3df"; ## SECRET-DATA
            timeout 10;
            source-address 21.21.21.1;
}

 user admin  {=>this user is used
for both servers on the router
            uid 2010;
            class super-user;

BR,
Hany
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Config help for basic MPLS setup

2012-09-25 Thread Phil Mayers

On 09/25/2012 03:16 AM, Tim Jackson wrote:

I'm pretty sure this is the case. EX4200 will not forward anything with > 1
label.


Just... wow. What is MPLS even *for* on those boxes?
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp