[j-nsp] IPSEC dynamic peers in JUNOS

2007-11-13 Thread Wink
All: First, whats up Tray? Second, what experience do you all have with dynamic IPSec peers in JUNOS? Looking at the documentation, it seems we would practically need a public IP for every remote dynamic peer customer, since we can't share the same key with multiple customers per our security

Re: [j-nsp] Measuring Fast Reroute

2007-11-13 Thread Andy Lamontagne
Imran, The "show mpls lsp extensive" will give you a history of the 50 most recent state events - this probably will not be enough however. If you have the traceoptions set, you should be able to see additional information. [edit protocols rsvp] set traceoptions file rsvp.log set traceoptions fl

[j-nsp] Measuring Fast Reroute

2007-11-13 Thread Imran Moin
Hello everyone, I have a situation where I need to remove Fast Reroute through the RSVP signalled MPLS backbone. However, before doing that, I would like to know how many times Bypass LSPs have been used for forwarding traffic in the last 30 days or so. Is there a way to find this out on Juniper r

Re: [j-nsp] JUNOSe: something like 'soft shutdown' ?

2007-11-13 Thread Alexandre Snarskii
On Tue, Nov 13, 2007 at 10:03:16AM +0100, Olaf Baumert wrote: > > To dont't let new sessions come online, you may use a domain-map with > user override to a user which don't authorize. > > like > aaa domain-map some-domain.tld > override-user name foo password bar > > this should'nt affect acit

Re: [j-nsp] Fw: BRAS- No queues

2007-11-13 Thread Bryan Phillips
It appears tc-voice queue is not using a statistics profile. I just prefer to not assign a statistics-profile to any queue and that way the queues will use the default statistics-profile. Within the statistics-profile you can change the rate-period to change how fast or slow you want to see that th

Re: [j-nsp] SNMPD_AUTH_FAILURE

2007-11-13 Thread Eric Van Tol
> Are you using snmp v3 ? I'm not using v3 yet on this router, but I will keep this in mind, as it's some good info. -evt > -Original Message- > From: Samuel [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 13, 2007 9:44 AM > To: Eric Van Tol; juniper-nsp@puck.nether.net > Subject:

Re: [j-nsp] SNMPD_AUTH_FAILURE

2007-11-13 Thread Samuel
Hi Eric, I have already got this kind of problem. Are you using snmp v3 ? My problem was next : When we change a RE, you have to generate again the MD5 password : # set snmp v3 usm local-engine user TOTO authentication-md5 authentication-password PASSWORD # commit For exemple is you have this

[j-nsp] SNMPD_AUTH_FAILURE

2007-11-13 Thread Eric Van Tol
Hello, We replaced an old M5 with an M10i last week and ever since then, we get the following in syslog every day: Nov 13 07:38:21 snmpd[3317]: SNMPD_AUTH_FAILURE: agent_io_reader: failed input interface authorization from 172.26.26.5 to unknown (3) The IP is our NMS. There are only two ways to

Re: [j-nsp] JUNOSe: something like 'soft shutdown' ?

2007-11-13 Thread Olaf Baumert
On 13/11/07 11:31 +0800, ?? wrote: Hi, > per my understanding, you can delete the ip pool from config to achieve > your goal. if you deconfigure the local ip pool (no ip local pool foo ...) any active session which has an ip out of this pool will be disconnected. To dont't let new sessions