Re: [j-nsp] Juniper MX80 IRB

2010-07-28 Thread Mark Tinka
On Tuesday, July 27, 2010 10:31:18 pm Chuck Anderson wrote:

 Finally, JTAC/ATAC can't even figure out the above!!!  I
 have a case open and they *still* haven't come to the
 solution because they haven't realized that Today Trio
 only supports the old style config and what that really
 means.

The disconnect between JTAC and the core of the development 
team has always been there, in my opinion. It took a whole 
year of back-and-forth with JTAC on a case that, when it was 
finally escalated to a senior engineer within Juniper, was 
resolved in 30 minutes. No, seriously...

It's easy to assume that just because JTAC work for Juniper, 
they're familiar with JUNOS and the Juniper hardware. But 
this, as I've seen time  time again, really isn't the case.

Mark.


signature.asc
Description: This is a digitally signed message part.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper MX80 IRB

2010-07-28 Thread Addy Mathur
On Wednesday, July 28, 2010, Mark Tinka mti...@globaltransit.net wrote:
 On Tuesday, July 27, 2010 10:31:18 pm Chuck Anderson wrote:

 Finally, JTAC/ATAC can't even figure out the above!!!  I
 have a case open and they *still* haven't come to the
 solution because they haven't realized that Today Trio
 only supports the old style config and what that really
 means.

 The disconnect between JTAC and the core of the development
 team has always been there, in my opinion. It took a whole
 year of back-and-forth with JTAC on a case that, when it was
 finally escalated to a senior engineer within Juniper, was
 resolved in 30 minutes. No, seriously...

 It's easy to assume that just because JTAC work for Juniper,
 they're familiar with JUNOS and the Juniper hardware. But
 this, as I've seen time  time again, really isn't the case.

 Mark.


Although it doesn't answer the specific question raised via this
thread, the following link dose offer some general guidance on Trio
chipset features.  Should mostly be applicable to the MX80 as well.

http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/reference/general/mpc-mx-series-features.html

Regards,
Addy.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-28 Thread Tim Vollebregt

All,

Thanks a lot for your comments, seems that there are more occasions 
where this problem is occurring.

We are having the MX80-48T which has the Trio chip.

It was a bit strange while building the configuration, at some point it 
seemed to work the 10.x way. There was ARP, but no connectivity.

The system is now live with the following configuration and performing well:

ge-1/0/0 {
encapsulation ethernet-bridge;
gigether-options {
no-flow-control;
}
unit 0;

  irb {
description med-srvrs;
unit 0 {
description ALL;
family inet {
address x.x.x.x/29;
address x.x.x.x/27;

bridge-domains {
all {
domain-type bridge;
vlan-id none;
interface ge-1/0/0.0;
routing-interface irb.0

Regards,

Tim







On 28-07-10 15:49, Addy Mathur wrote:

On Wednesday, July 28, 2010, Mark Tinkamti...@globaltransit.net  wrote:
   

On Tuesday, July 27, 2010 10:31:18 pm Chuck Anderson wrote:

 

Finally, JTAC/ATAC can't even figure out the above!!!  I
have a case open and they *still* haven't come to the
solution because they haven't realized that Today Trio
only supports the old style config and what that really
means.
   

The disconnect between JTAC and the core of the development
team has always been there, in my opinion. It took a whole
year of back-and-forth with JTAC on a case that, when it was
finally escalated to a senior engineer within Juniper, was
resolved in 30 minutes. No, seriously...

It's easy to assume that just because JTAC work for Juniper,
they're familiar with JUNOS and the Juniper hardware. But
this, as I've seen time  time again, really isn't the case.

Mark.

 

Although it doesn't answer the specific question raised via this
thread, the following link dose offer some general guidance on Trio
chipset features.  Should mostly be applicable to the MX80 as well.

http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/reference/general/mpc-mx-series-features.html

Regards,
Addy.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
   

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-27 Thread Tim Vollebregt

On Jul 26, 2010, at 11:25 PM, Chuck Anderson wrote:

 On Mon, Jul 26, 2010 at 06:52:14PM +0200, Tim Vollebregt wrote:
 We have just received a Juniper MX80 and are building the configuration.
 The machine is running Junos 10.2 R1.8
 
 The issue we are experiencing is that the IRB interface seems to be 
 not working, although it seems to be configured correctly. 
 Configuration:
 
 Try configuring it the old 9.2 way and let us know if it works:
 
 ge-1/0/0 {
   unit 200 {
   encapsulation vlan-bridge;
vlan-id 200;
 
 irb {
unit 200 {
family inet {
address x.x.x.x/27;
address x.x.x.x/29;
 
 bridge-domains {
VLAN200 {
domain-type bridge;
vlan-id 200;
   interface ge-1/0/0.200;
routing-interface irb.200;
 
 Thanks.
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


Hi Chuck,

I'm getting errors when changing to this configuration. It is only possible to 
use encapsulation vlan-bridge on unit 0. And when I change it to unit 0:

messageVLAN Encapsulation: Not allowed on untagged interfaces/message
/xnm:error

source-daemondcd/source-daemon
edit-path[edit interfaces ge-1/0/0]/edit-path
statementunit 0/statement
message invalid encapsulation/message
/xnm:error
error: configuration check-out failed

This issue seems to be really strange as we have it working the 10.x way on 
another router. When I configure Ge-1/0/0 as a routed interface it works fine.

Regards,

Tim




___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-27 Thread Addy Mathur
On Tuesday, July 27, 2010, Tim Vollebregt t...@interworx.nl wrote:

 On Jul 26, 2010, at 11:25 PM, Chuck Anderson wrote:

 On Mon, Jul 26, 2010 at 06:52:14PM +0200, Tim Vollebregt wrote:
 We have just received a Juniper MX80 and are building the configuration.
 The machine is running Junos 10.2 R1.8

 The issue we are experiencing is that the IRB interface seems to be
 not working, although it seems to be configured correctly.
 Configuration:

 Try configuring it the old 9.2 way and let us know if it works:

 ge-1/0/0 {
       unit 200 {
           encapsulation vlan-bridge;
            vlan-id 200;

 irb {
        unit 200 {
            family inet {
                address x.x.x.x/27;
                address x.x.x.x/29;

 bridge-domains {
    VLAN200 {
        domain-type bridge;
        vlan-id 200;
       interface ge-1/0/0.200;
        routing-interface irb.200;

 Thanks.
 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


 Hi Chuck,

 I'm getting errors when changing to this configuration. It is only possible 
 to use encapsulation vlan-bridge on unit 0. And when I change it to unit 0:

 messageVLAN Encapsulation: Not allowed on untagged interfaces/message
 /xnm:error

 source-daemondcd/source-daemon
 edit-path[edit interfaces ge-1/0/0]/edit-path
 statementunit 0/statement
 message invalid encapsulation/message
 /xnm:error
 error: configuration check-out failed

 This issue seems to be really strange as we have it working the 10.x way on 
 another router. When I configure Ge-1/0/0 as a routed interface it works fine.

 Regards,

 Tim




 ___
 juniper-nsp mailing list juniper-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp


Tim:

Could you please paste in your entire ge-1/0/0 interface and
bridge-domain VLAN200 configuration at the time you do get the commit
error?

Thanks,
Addy.

___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-27 Thread Emmanuel Halbwachs
Hello,

Tim Vollebregt a écrit (Tue, Jul 27, 2010 at 10:40:54AM +0200) :
 I'm getting errors when changing to this configuration. It is only
 possible to use encapsulation vlan-bridge on unit 0. And when I
 change it to unit 0:
 
 messageVLAN Encapsulation: Not allowed on untagged interfaces/message
 /xnm:error
 
 source-daemondcd/source-daemon
 edit-path[edit interfaces ge-1/0/0]/edit-path
 statementunit 0/statement
 message invalid encapsulation/message
 /xnm:error
 error: configuration check-out failed
 
 This issue seems to be really strange as we have it working the 10.x
 way on another router. When I configure Ge-1/0/0 as a routed
 interface it works fine.

This configuration is working for us (MX240, 10.1R1.8):

interfaces {
ge-1/0/7 {
flexible-vlan-tagging;
native-vlan-id 1;
encapsulation extended-vlan-bridge;
unit 1 {
vlan-id 1;
family bridge;
}
unit 210 {
vlan-id 210;
family bridge;
}
unit 240 {
vlan-id 240;
family bridge;
}
}
irb {
unit 210 {
family inet {
address x.x.x.x/24;
}
}
unit 240 {
family inet {
address x.x.x.x/23;
address x.x.x.x/24;
}
}
bridge-domains {
VLAN-1 {
domain-type bridge;
vlan-id 1;
interface ge-1/0/7.1;
}
VLAN-210 {
domain-type bridge;
vlan-id 210;
interface ge-1/0/7.210;
routing-interface irb.210;
}
VLAN-240 {
domain-type bridge;
vlan-id 240;
interface ge-1/0/7.240;
routing-interface irb.240;
}
}

HTH,

-- 
Emmanuel Halbwachs   Observatoire de Paris-Meudon
Resp. Réseau/Sécurité   5 Place Jules Janssen
tel  :  +33 1 45 07 75 54F 92195 MEUDON CEDEX
fax  :  +33 1 45 07 01 89   véhicules : 11 av. Marcelin Berthelot
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-27 Thread Chuck Anderson
On Tue, Jul 27, 2010 at 10:40:54AM +0200, Tim Vollebregt wrote:
 I'm getting errors when changing to this configuration. It is only 
 possible to use encapsulation vlan-bridge on unit 0. And when I 
 change it to unit 0:
 
 messageVLAN Encapsulation: Not allowed on untagged interfaces/message
 /xnm:error

This following commits for me.  The point of the exercise is to see if 
MPC Trio cards *require* 9.2-style configurations: using separate 
logical units for each VLAN, encapsulation vlan-bridge, refer to all 
the logical unit interfaces in bridge-domain in order to actually 
function.  I.e. do they not work with 9.5+ style VLAN Bundles: family 
bridge, interface-mode access/trunk, vlan-id-list?  In my experience 
with testing some new MPC Trio cards, this conclusion is true.  A 
perfectly working VLAN Bundle bridging configuration on DPC cards 
failed miserably when copied over to MPC cards until it was 
reconfigured the 9.2 non-VLAN Bundled way.

ge-2/0/1 {
flexible-vlan-tagging;
native-vlan-id 200;
encapsulation flexible-ethernet-services;
unit 200 {
encapsulation vlan-bridge;
vlan-id 200;
}
}
irb {
unit 200 {
family inet {
address 10.11.12.13/24;
}
}
}
VLAN200 {
domain-type bridge;
vlan-id 200;
interface ge-2/0/1.200;
routing-interface irb.200;
}

 This issue seems to be really strange as we have it working the 10.x 
 way on another router. When I configure Ge-1/0/0 as a routed 
 interface it works fine.

Does the other router where this works have the new MPC Trio cards?  
Or is it using the older DPC cards?
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-27 Thread Chuck Anderson
On Tue, Jul 27, 2010 at 03:46:41PM +0200, magno wrote:
 Today Trio only supports the old style config. in the near future, the
 new style config will be supported as well.

I have several problems with the way Juniper handled this:

1. The configuration commits without any warnings or errors.  There is 
no indication that what you have configured is unsupported.  No logs, 
no alarms, no nothing.

2. I've seen MPCs crash/go into a reboot loop when configuring them 
the new VLAN Bundle way.  (For the OP: do your MPC's go into a reboot 
loop, alternately showing offline/online under show chassis fpc 
pic-status?)  They should gracefully fail to work when doing something 
unsupported and make loud noises when you do.

3. Documentation is severely lacking.  In the 10.2 Release Notes, no 
where does it say today Trio only supports JUNOS 9.2 features 
(except when talking about the MX80 specifically, and some other 
specific features--nothing about the other Trio cards or about 
bridging/VLAN Bundles specifically).  I've only heard that from 
statements made by my Juniper reps.  Even then, you have to really dig 
deep in the Network Interfaces guide and Layer 2 Configuration Guide 
to find references to 9.5+ required on VLAN Bundles and other 
configuration statements and features.  The 10.x Release Notes really 
ought to say In this release, Trio only supports JUNOS 9.2 features 
and configurations on the following cards and platforms and then list 
out *exactly* which hardware and configuration statements this applies 
to.  The rest of the configuration guides ought to have warnings 
sprinkled throughout saying Not supported on Trio! with pointers to 
the old way that works on Trio.  These warnings should stay in the 
documentation and Release Notes until the limitations no longer apply.

The current situation is a horrible landmine for customers wishing to 
migrate/upgrade from DPC to Trio, as well as brand new customers like 
myself who haven't read the 9.2 documentation and earlier Release 
Notes.  Why should I have to go back 7 releases worth of documentation 
to configure my brand new hardware that is only supported at all under 
10.0/10.1 and only supported under 10.2 when mixed with DPC cards?

Finally, JTAC/ATAC can't even figure out the above!!!  I have a case 
open and they *still* haven't come to the solution because they 
haven't realized that Today Trio only supports the old style config 
and what that really means.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] Juniper MX80 IRB

2010-07-26 Thread Chuck Anderson
On Mon, Jul 26, 2010 at 06:52:14PM +0200, Tim Vollebregt wrote:
 We have just received a Juniper MX80 and are building the configuration.
 The machine is running Junos 10.2 R1.8
 
 The issue we are experiencing is that the IRB interface seems to be 
 not working, although it seems to be configured correctly. 
 Configuration:

Try configuring it the old 9.2 way and let us know if it works:

ge-1/0/0 {
   unit 200 {
encapsulation vlan-bridge;
vlan-id 200;

irb {
unit 200 {
family inet {
address x.x.x.x/27;
address x.x.x.x/29;

bridge-domains {
VLAN200 {
domain-type bridge;
vlan-id 200;
interface ge-1/0/0.200;
routing-interface irb.200;

Thanks.
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp