[j-nsp] cacti plugin for SCU/DCU

2013-06-24 Thread Matjaž Straus Istenič
Dear list,
any recommendations for a Cacti plugin for a Juniper SCU/DCU graphing?

Thanks!
Kind regards,
Matjaž

---
Matjaž Straus Istenič, Arnes
matjaz.str...@arnes.si
Tel: +386 1 4798877 Mob: +386 40 200403 Fax: +386 1 4798878
MS6745-RIPE
PGP 490F3B4F 2009-10-21
Fingerprint = 6172 7BF8 B0B7 1F09 47B3  AFA3 0946 1701 490F 3B4Fa
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] cacti plugin for SCU/DCU

2013-06-24 Thread Mark Tinka
On Monday, June 24, 2013 11:28:17 AM Matjaž Straus Istenič 
wrote:

 Dear list,
 any recommendations for a Cacti plugin for a Juniper
 SCU/DCU graphing?

When we wanted to do this 3 years ago, we couldn't find a 
decent plugin.

So we ended up using an elaborate scheme of DCU and firewall 
filters, and then walked

http://www.oidview.com/mibs/2636/JUNIPER-FIREWALL-MIB.html

so that we can graph the firewall filter counters and create 
graphs for the same.

It would be nice if Juniper could associate this with queues 
like Cisco do, because you can then just graph the queues. 
But then again, there are probably other use-cases for 
DCU/SCU in Juniper like there are for QPPB in Cisco.

Mark.


signature.asc
Description: This is a digitally signed message part.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] similar ASA feature (RRI) on SRX

2013-06-24 Thread Alberto Santos
Hi there,

I'm swapping a cisco ASA and I found myself stuck on how configure any
similar to cisco RRI(reverse route injection) feature on junos,I'm load
balacing with a BigIP between them and I need to know where the tunnel is
active in order to advertise it on OSPF, has anyone experience any in the
past? please send your thoughts, just keep in my that I can't run any IGP
over the tunnel .


BR/Alberto
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] similar ASA feature (RRI) on SRX

2013-06-24 Thread OBrien, Will
https://kb.juniper.net/InfoCenter/index?page=contentid=KB24362

On Jun 24, 2013, at 8:38 AM, Alberto Santos wrote:

 Hi there,
 
 I'm swapping a cisco ASA and I found myself stuck on how configure any
 similar to cisco RRI(reverse route injection) feature on junos,I'm load
 balacing with a BigIP between them and I need to know where the tunnel is
 active in order to advertise it on OSPF, has anyone experience any in the
 past? please send your thoughts, just keep in my that I can't run any IGP
 over the tunnel .
 
 
 BR/Alberto
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] cacti plugin for SCU/DCU

2013-06-24 Thread Phil Shafer
Mark Tinka writes:
 any recommendations for a Cacti plugin for a Juniper
 SCU/DCU graphing?

Assuming that cacti can load a CSV file, you can use
accounting profiles to create (and upload) such a file.

https://www.juniper.net/techpubs/software/junos/junos93/feature-guide/id-10377050.html
https://www.juniper.net/techpubs/software/junos/junos93/feature-guide/id-10350348.html#id-10328159

Thanks,
 Phil

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] cacti plugin for SCU/DCU

2013-06-24 Thread Matjaž Straus Istenič
On 24. jun. 2013, at 18:22, Phil Shafer p...@juniper.net wrote:

 Mark Tinka writes:
 any recommendations for a Cacti plugin for a Juniper
 SCU/DCU graphing?
 
 Assuming that cacti can load a CSV file, you can use
 accounting profiles to create (and upload) such a file.

Thanks, this is an interesting workaround, but I would rather use SNMP polling 
based on JUNIPER-SCU/DCU-MIBs. I just do not want to reinvent the wheel :-).

 https://www.juniper.net/techpubs/software/junos/junos93/feature-guide/id-10377050.html
 https://www.juniper.net/techpubs/software/junos/junos93/feature-guide/id-10350348.html#id-10328159
 
 Thanks,
 Phil

Kind regards,
Matjaž
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] KRT queue stalls fixed in 11.4R8?

2013-06-24 Thread Rob Foehl
According to the release notes for 11.4R8, the KRT queue stall issue 
(PR836197) has been marked as resolved.  Has anyone had a chance to 
confirm this on a suitably session-heavy MX?


-Rob
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] KRT queue stalls fixed in 11.4R8?

2013-06-24 Thread Grzegorz Janoszka
On 24-06-13 21:07, Rob Foehl wrote:
 According to the release notes for 11.4R8, the KRT queue stall issue
 (PR836197) has been marked as resolved.  Has anyone had a chance to
 confirm this on a suitably session-heavy MX?

You still have to wait a while for all the prefixes, but at least there
is no blackholing now.

-- 
Grzegorz Janoszka
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] similar ASA feature (RRI) on SRX

2013-06-24 Thread OBrien, Will
You can just point the route at the st0.x interface. When it's down, the route 
won't install in the table.


On Jun 24, 2013, at 3:57 PM, Alberto Santos wrote:

Hi,

it looks like a possibility, but the remote IP address keeps changing because 
it is dialup connection. can't monitor the next hop.


BR


Alberto Santos
CCIE #26648
JNCIS-SP - ITIL-F
...Fix your DNS, make it dual-stack, take your mail server and make it 
dual-stack, take your web server and make it dual-stack... by Randy Bush/RIPE 
IPv6


On 24 June 2013 13:15, OBrien, Will 
obri...@missouri.edumailto:obri...@missouri.edu wrote:
https://kb.juniper.net/InfoCenter/index?page=contentid=KB24362

On Jun 24, 2013, at 8:38 AM, Alberto Santos wrote:

 Hi there,

 I'm swapping a cisco ASA and I found myself stuck on how configure any
 similar to cisco RRI(reverse route injection) feature on junos,I'm load
 balacing with a BigIP between them and I need to know where the tunnel is
 active in order to advertise it on OSPF, has anyone experience any in the
 past? please send your thoughts, just keep in my that I can't run any IGP
 over the tunnel .


 BR/Alberto
 ___
 juniper-nsp mailing list 
 juniper-nsp@puck.nether.netmailto:juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp



___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] similar ASA feature (RRI) on SRX

2013-06-24 Thread Ben Dale

On 25/06/2013, at 7:08 AM, OBrien, Will obri...@missouri.edu wrote:

 You can just point the route at the st0.x interface. When it's down, the 
 route won't install in the table.
 
 

Just watch this in 11.4R5.5 (and others nearby) - there was a bug introduced 
that kept the state of the tunnel sub-interface up even once the security 
associations were cleared.  Fixed in 12.1R4 (at least).



 On Jun 24, 2013, at 3:57 PM, Alberto Santos wrote:
 
 Hi,
 
 it looks like a possibility, but the remote IP address keeps changing because 
 it is dialup connection. can't monitor the next hop.
 
 
 BR
 
 
 Alberto Santos
 CCIE #26648
 JNCIS-SP - ITIL-F
 ...Fix your DNS, make it dual-stack, take your mail server and make it 
 dual-stack, take your web server and make it dual-stack... by Randy 
 Bush/RIPE IPv6
 
 
 On 24 June 2013 13:15, OBrien, Will 
 obri...@missouri.edumailto:obri...@missouri.edu wrote:
 https://kb.juniper.net/InfoCenter/index?page=contentid=KB24362
 
 On Jun 24, 2013, at 8:38 AM, Alberto Santos wrote:
 
 Hi there,
 
 I'm swapping a cisco ASA and I found myself stuck on how configure any
 similar to cisco RRI(reverse route injection) feature on junos,I'm load
 balacing with a BigIP between them and I need to know where the tunnel is
 active in order to advertise it on OSPF, has anyone experience any in the
 past? please send your thoughts, just keep in my that I can't run any IGP
 over the tunnel .
 
 
 BR/Alberto
 ___
 juniper-nsp mailing list 
 juniper-nsp@puck.nether.netmailto:juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 
 
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp
 


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] similar ASA feature (RRI) on SRX

2013-06-24 Thread Alberto Santos
Hi,

it looks like a possibility, but the remote IP address keeps changing
because it is dialup connection. can't monitor the next hop.


BR


*Alberto Santos *
CCIE #26648
JNCIS-SP - ITIL-F
*...Fix your DNS, make it dual-stack, take your mail server and make it
dual-stack, take your web server and make it dual-stack... by Randy
Bush/RIPE IPv6*


On 24 June 2013 13:15, OBrien, Will obri...@missouri.edu wrote:

 https://kb.juniper.net/InfoCenter/index?page=contentid=KB24362

 On Jun 24, 2013, at 8:38 AM, Alberto Santos wrote:

  Hi there,
 
  I'm swapping a cisco ASA and I found myself stuck on how configure any
  similar to cisco RRI(reverse route injection) feature on junos,I'm load
  balacing with a BigIP between them and I need to know where the tunnel is
  active in order to advertise it on OSPF, has anyone experience any in the
  past? please send your thoughts, just keep in my that I can't run any IGP
  over the tunnel .
 
 
  BR/Alberto
  ___
  juniper-nsp mailing list juniper-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp


___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] KRT queue stalls fixed in 11.4R8?

2013-06-24 Thread Sebastian Wiesinger
* Grzegorz Janoszka grzeg...@janoszka.pl [2013-06-24 21:57]:
 On 24-06-13 21:07, Rob Foehl wrote:
  According to the release notes for 11.4R8, the KRT queue stall issue
  (PR836197) has been marked as resolved.  Has anyone had a chance to
  confirm this on a suitably session-heavy MX?
 
 You still have to wait a while for all the prefixes, but at least there
 is no blackholing now.

Hi,

can you elaborate on that? All I read from the PR is that they fixed
starving in the krt queue scheduler. Is it all gone?

Regards

Sebastian

-- 
GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A  9D82 58A2 D94A 93A0 B9CE)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
-- Terry Pratchett, The Fifth Elephant
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp