Re: [j-nsp] EVPN -VXLAN in production

[Alexander Bochmann]

...on Tue, Nov 22, 2016 at 03:28:44PM +, Jackson, William wrote:

 > On 22/11/2016, 15:02, "juniper-nsp on behalf of Amos Rosenboim" 
 >  wrote:
 >> We are considering EVPN-VXLAN for extending L2 between rows (we failed 
 >> convincing the server guys that they don’t need this).
 >> We are wondering if anyone has any experience with this technology in 
 >> production yet ?
 >> Specifically with QFX5100 and with QFX10002.
 > Yes I have two small pods setup using VXLAN/EVPN with IP Fabric. ( eBGP 
 > underlay/iBGP overlay )
 > D40 is the place to be on code and seems to have fixed most of the problems 
 > I had.

I assume you're using QFX10002s since I had the impression that the 
QFX5100 can not do egress VXLAN routing (due to Trident II limitations)? 

Or has there been some development in that regard that I have missed?

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX45xx as datacenter interconnect?

[Alexander Bochmann]

...on Wed, Sep 25, 2013 at 12:15:38PM +0200, Alexander Bochmann wrote:

  We've even been floating the idea of dropping in a Virtual Chassis 
  distributed 
  over both sites as interconnection - which seems quite charming, as it 

Turns out someone else asked just that question on the Juniper forums a 
couple of days ago, with helpful answers from Ben Dale:

http://forums.juniper.net/t5/Ethernet-Switching/Stretched-VC-as-data-center-interconnect/m-p/209353/highlight/false#M8925

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] EX45xx as datacenter interconnect?

[Alexander Bochmann]

Hi -

we're currently discussing how to connect a new location to our current 
server rooms (I'm hesitant to use the term datacenter as we're talking 
two locations with about 20 sparsely populated racks each - containing 
the usual enterprise stuff - unsorted application servers, VMware hosts, 
NetApp storage)... Fiber distance is about 8km.

I don't think we're going to aim for an MPLS/VPLS backbone, as our size 
just doesn't justify the additional operational overhead - so we're talking 
classic layer 2/3, which we've been doing quite successfully with EX4200 /
EX4500 systems (partly clustered in VCs) for the past couple of years. 
FCoE is a topic (as always) - but the server guys are leaning towards 
storage over IP (NFS/iSCSI) with NetApp anyway, so we're probably just going 
to keep the remaining FC infrastructure separated...

From that, I don't really see any big missing features in the EX45 line for 
us - am I missing something obvious?

We've even been floating the idea of dropping in a Virtual Chassis distributed 
over both sites as interconnection - which seems quite charming, as it 
implicitly solves quite a few problems for L2 segments that exist on both 
sides, for example (I know, but it can't be helped for some things)... But 
on the other hand there's little outsite control over traffic flows inside 
the VC, so it's difficult to judge the impact.

So, are we completely insane, and should be looking towards MX routers, 
maybe? (Cisco is proposing Nexus 7k for the interconnect, and the 
unavoidable Nexus 5k in the access layer.)

Thanks for any thoughts,

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 VC PFE crashes

[Alexander Bochmann]

Hi,

...on Mon, Jan 14, 2013 at 08:55:36PM +0100, Dennis Krul | Tilaa wrote:

  So that means thousands of MAC, ARP and v6 neighbour entries in the PFE 
  database (but nowhere near the supported limit of 16k entries).

16k doesn't seem realistic as soon as v6 is involved.

As far as I have heard, the EX4200 on the network for an event I recently 
attended went down with slightly more than 1000 v6 ND entries... In the end 
they had to move all L3 v6 stuff off those switches.

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP BPDU-less situations?

[Alexander Bochmann]

Hi,

...on Fri, Aug 17, 2012 at 11:08:53AM -0400, Clarke Morledge wrote:
  switch accidentally into two of our EX switches.  Traffic will loop
  through the miscreant switch between the two EXs and without BPDUs
  it just looks like MAC addresses keep moving between the real
  source and the two EXs.

Not that I've used it myself yet, but the aptly named MAC Move Limiting 
might help here, though usefulness might depend on the actual topology::

http://www.juniper.net/techpubs/en_US/junos10.4/topics/concept/port-security-mac-limiting-and-mac-move-limiting.html

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] anyone running VC with 2 * EX4500?

[Alexander Bochmann]

Hi,

...on Wed, Feb 22, 2012 at 11:06:55AM +0100, Tore Anderson wrote:
  * Alexander Bochmann
   we've been putting off converting our EX4500s to a virtual 
   chassis for quite some time now. I've seen a few posts about 
   mixed EX4500/4200 setups, but none with several EX4500s. 
  Works For Me; I have a two-node EX4500 VC running 11.1R3.5 (until very
  recently the version recommended by JTAC), and have had no problems with
  it at all.

Thanks for all the answers - seems this is more stable 
than I thought. As I have no test environment for a VC 
with EX4500s, I've maybe been too conservative with my 
deployment plans :)

Best regards,

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] anyone running VC with 2 * EX4500?

[Alexander Bochmann]

Hi,

we've been putting off converting our EX4500s to a virtual 
chassis for quite some time now. I've seen a few posts about 
mixed EX4500/4200 setups, but none with several EX4500s. 

Does anyone run something like that? Any special caveats, 
and should we wait some more before trying it? 

Thanks,

Alex.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp