Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
hopefully this works...first time posting to the list one option might be to do an L2VPN or VPLS type solution where you tunnel the MPLS traffic over a GRE tunnel (only necessary if the intermediate network can't/doesn't run MPLS). I think someone might have mentioned that previously as well. The only problem you might run into is MTU and fragmentation related because of the extra overhead of the MPLS labels and GRE tunnel over the intermediate network. If you leave the MTU at the defaults, packets with the DF bit set will be dropped and so far as I can tell (unless it changed with 10.0+), a J-Series or SRX can not clear the DF bit as it enters a GRE tunnel. I think the higher end M / MX can though if you are using those. However if you can raise the MTU of all the intermediate links, then you can alleviate that problem. I have a config example of this working if you need one. good luck, whichever route you choose Will On Jun 4, 2010, at 9:00 AM, juniper-nsp-requ...@puck.nether.net wrote: Date: Fri, 4 Jun 2010 07:41:16 +0200 From: Peter Krupl To: Derick Winkworth , "juniper-nsp@puck.nether.net" Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? Message-ID: <4a66e92b3fbf8541a78cd11d1c0e3cfcc5cfdea...@wp-ex02.hq.webpartner.dk> Content-Type: text/plain; charset="us-ascii" Hi Group, Well I have a slight confession to make. When I initially asked the question, it was based on the assumption that Cisco provided this. But they don't. I had played with bridging over frame relay way back, and somehow this became GRE in my mind. Sorry about the mistake. So now im looking into L2TP as an alternative. But the One-Access 1221 & 1424 are supporting ethernet over GRE. Kind Regards, Peter Krupl ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
I believe this feature was supported on older ios but they killed this feature to push towards new technology. OTV is the new feature coming out for the nexus 7k to bridge server farms together. It won't be here until the 5.1 release. On Jun 4, 2010 6:04 AM, "Derick Winkworth" wrote: Cisco does support this on the Nexus and in the next rls of XE. From: Peter Krupl To: Derick Winkworth ; "juniper-nsp@puck.nether.net" < juniper-nsp@puck.nether.net> Sent: Fri, June 4, 2010 12:41:16 AM Subject: RE: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? Hi Group, Well I have a slight confession to make. When I initially asked the question, it was bas... ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
Cisco does support this on the Nexus and in the next rls of XE. From: Peter Krupl To: Derick Winkworth ; "juniper-nsp@puck.nether.net" Sent: Fri, June 4, 2010 12:41:16 AM Subject: RE: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? Hi Group, Well I have a slight confession to make. When I initially asked the question, it was based on the assumption that Cisco provided this. But they don't. I had played with bridging over frame relay way back, and somehow this became GRE in my mind. Sorry about the mistake. So now im looking into L2TP as an alternative. But the One-Access 1221 & 1424 are supporting ethernet over GRE. Kind Regards, Peter Krupl -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Derick Winkworth Sent: Friday, June 04, 2010 4:58 AM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? This sounds like what Cisco is doing with OTV. They are using ethernet over GRE w/multicast to transport ethernet... It is being marketed as a better alternative to VPLS. From: Pekka Savola To: Patrik Olsson Cc: "juniper-nsp@puck.nether.net" Sent: Thu, June 3, 2010 4:59:26 AM Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? On Thu, 3 Jun 2010, Patrik Olsson wrote: > Have you tried looking for L2TP with PPP over BCP intestead PPP over IPCP? > > If you want to encapsulate the whole ethernetframe and send over a GRE > tunnel so you get a bridged enviroment, is it called Ethernet over IP > (EOIP). Dont remeber the rfc, but is not supported by Juniper. Only > supported by a small Latvian vendor I think... I wonder if you refer to rfc3378. I recall support for it was recently added in Linux as well. But I don't see why encapsulaitng whole ethernet frames in GRE could not work if vendors just chose to support it. Then as 'ether type' in GRE header you could put 0x6558 or 0x8100 (IEEE 802.1q VLAN-tagged frames *). The former is also supported in Linux [http://lwn.net/Articles/303062/] *) http://www.iana.org/assignments/ethernet-numbers -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
Hi Group, Well I have a slight confession to make. When I initially asked the question, it was based on the assumption that Cisco provided this. But they don't. I had played with bridging over frame relay way back, and somehow this became GRE in my mind. Sorry about the mistake. So now im looking into L2TP as an alternative. But the One-Access 1221 & 1424 are supporting ethernet over GRE. Kind Regards, Peter Krupl -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Derick Winkworth Sent: Friday, June 04, 2010 4:58 AM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? This sounds like what Cisco is doing with OTV. They are using ethernet over GRE w/multicast to transport ethernet... It is being marketed as a better alternative to VPLS. From: Pekka Savola To: Patrik Olsson Cc: "juniper-nsp@puck.nether.net" Sent: Thu, June 3, 2010 4:59:26 AM Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? On Thu, 3 Jun 2010, Patrik Olsson wrote: > Have you tried looking for L2TP with PPP over BCP intestead PPP over IPCP? > > If you want to encapsulate the whole ethernetframe and send over a GRE > tunnel so you get a bridged enviroment, is it called Ethernet over IP > (EOIP). Dont remeber the rfc, but is not supported by Juniper. Only > supported by a small Latvian vendor I think... I wonder if you refer to rfc3378. I recall support for it was recently added in Linux as well. But I don't see why encapsulaitng whole ethernet frames in GRE could not work if vendors just chose to support it. Then as 'ether type' in GRE header you could put 0x6558 or 0x8100 (IEEE 802.1q VLAN-tagged frames *). The former is also supported in Linux [http://lwn.net/Articles/303062/] *) http://www.iana.org/assignments/ethernet-numbers -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
This sounds like what Cisco is doing with OTV. They are using ethernet over GRE w/multicast to transport ethernet... It is being marketed as a better alternative to VPLS. From: Pekka Savola To: Patrik Olsson Cc: "juniper-nsp@puck.nether.net" Sent: Thu, June 3, 2010 4:59:26 AM Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? On Thu, 3 Jun 2010, Patrik Olsson wrote: > Have you tried looking for L2TP with PPP over BCP intestead PPP over IPCP? > > If you want to encapsulate the whole ethernetframe and send over a GRE > tunnel so you get a bridged enviroment, is it called Ethernet over IP > (EOIP). Dont remeber the rfc, but is not supported by Juniper. Only > supported by a small Latvian vendor I think... I wonder if you refer to rfc3378. I recall support for it was recently added in Linux as well. But I don't see why encapsulaitng whole ethernet frames in GRE could not work if vendors just chose to support it. Then as 'ether type' in GRE header you could put 0x6558 or 0x8100 (IEEE 802.1q VLAN-tagged frames *). The former is also supported in Linux [http://lwn.net/Articles/303062/] *) http://www.iana.org/assignments/ethernet-numbers -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
On Thu, 3 Jun 2010, Patrik Olsson wrote: Have you tried looking for L2TP with PPP over BCP intestead PPP over IPCP? If you want to encapsulate the whole ethernetframe and send over a GRE tunnel so you get a bridged enviroment, is it called Ethernet over IP (EOIP). Dont remeber the rfc, but is not supported by Juniper. Only supported by a small Latvian vendor I think... I wonder if you refer to rfc3378. I recall support for it was recently added in Linux as well. But I don't see why encapsulaitng whole ethernet frames in GRE could not work if vendors just chose to support it. Then as 'ether type' in GRE header you could put 0x6558 or 0x8100 (IEEE 802.1q VLAN-tagged frames *). The former is also supported in Linux [http://lwn.net/Articles/303062/] *) http://www.iana.org/assignments/ethernet-numbers -- Pekka Savola "You each name yourselves king, yet the Netcore Oykingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
Hi! Have you tried looking for L2TP with PPP over BCP intestead PPP over IPCP? If you want to encapsulate the whole ethernetframe and send over a GRE tunnel so you get a bridged enviroment, is it called Ethernet over IP (EOIP). Dont remeber the rfc, but is not supported by Juniper. Only supported by a small Latvian vendor I think... Patrik Peter Krupl wrote: > Hi, > > That would not be an option form me. > > As I have several CPE devices (One-Access 1221 & 1424), supporting bridged > GRE deployed. But I think there is some hope, I could try to find a cheap > tunnels services module for our ERX310's. > > > Med venlig hilsen > > Peter Krupl > > Netværksspecialist > Teknik > > Kundeservice +45 7026 2300 > Fax +45 7026 2301 > > Siminn Danmark A/S > > Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk > > > -Original Message- > From: Truman Boyes [mailto:tru...@suspicious.org] > Sent: Tuesday, June 01, 2010 11:25 PM > To: Peter Krupl > Cc: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? > > How about VPLS over MPLS/GRE interfaces? This will work. > > On 1/06/2010, at 2:35 PM, Peter Krupl wrote: > >> Hi, >> >> I have looked through the Juniper doc's for GRE with bridging. But it doesn't >> seem to exist at all. >> >> Is is possible ? Can I do it on a MX/MS-DPC or another Juniper box ? >> >> Med venlig hilsen >> >> Peter Krupl >> >> Netværksspecialist >> Teknik >> Direkte +45 3525 4752 >> Mobil >> Kundeservice +45 7026 2300 >> Fax +45 7026 2301 >> >> >> Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk >> >> >> ___ >> juniper-nsp mailing list juniper-nsp@puck.nether.net >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- //Patrik Webkom http://www.webkom.se +46 (0)709 35 22 99 +46 (0)8 559 26 488 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
Hi, That would not be an option form me. As I have several CPE devices (One-Access 1221 & 1424), supporting bridged GRE deployed. But I think there is some hope, I could try to find a cheap tunnels services module for our ERX310's. Med venlig hilsen Peter Krupl Netværksspecialist Teknik Kundeservice +45 7026 2300 Fax +45 7026 2301 Siminn Danmark A/S Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk -Original Message- From: Truman Boyes [mailto:tru...@suspicious.org] Sent: Tuesday, June 01, 2010 11:25 PM To: Peter Krupl Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ? How about VPLS over MPLS/GRE interfaces? This will work. On 1/06/2010, at 2:35 PM, Peter Krupl wrote: > Hi, > > I have looked through the Juniper doc's for GRE with bridging. But it doesn't > seem to exist at all. > > Is is possible ? Can I do it on a MX/MS-DPC or another Juniper box ? > > Med venlig hilsen > > Peter Krupl > > Netværksspecialist > Teknik > Direkte +45 3525 4752 > Mobil > Kundeservice +45 7026 2300 > Fax +45 7026 2301 > > > Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk > > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] GRE & Bridging, is it possible with a Juniper box ?
How about VPLS over MPLS/GRE interfaces? This will work. On 1/06/2010, at 2:35 PM, Peter Krupl wrote: > Hi, > > I have looked through the Juniper doc's for GRE with bridging. But it doesn't > seem to exist at all. > > Is is possible ? Can I do it on a MX/MS-DPC or another Juniper box ? > > Med venlig hilsen > > Peter Krupl > > Netværksspecialist > Teknik > Direkte +45 3525 4752 > Mobil > Kundeservice +45 7026 2300 > Fax +45 7026 2301 > > > Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk > > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] GRE & Bridging, is it possible with a Juniper box ?
Hi, I have looked through the Juniper doc's for GRE with bridging. But it doesn't seem to exist at all. Is is possible ? Can I do it on a MX/MS-DPC or another Juniper box ? Med venlig hilsen Peter Krupl Netværksspecialist Teknik Direkte +45 3525 4752 Mobil Kundeservice +45 7026 2300 Fax +45 7026 2301 Stationsparken 25 . 2600 Glostrup . Danmark . siminn.dk ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
