[j-nsp] nagios ssh check seems to whomp ssh daemon

2008-05-14 Thread Randy Bush
junos 8.5R1.14 on an m5 May 14 16:35:11 psg1 inetd[4215]: /usr/sbin/sshd[4815]: exited, status 255 May 14 16:40:10 psg1 inetd[4215]: /usr/sbin/sshd[4817]: exited, status 255 May 14 16:45:10 psg1 inetd[4215]: /usr/sbin/sshd[4819]: exited, status 255 May 14 16:50:10 psg1 inetd[4215]: /usr/sbin/sshd[

Re: [j-nsp] Which Router

2008-05-14 Thread Blake Willis
Hi there, A few performance evaluation papers on the J-Series are available from Iometrix: http://www.iometrix.com/site/pdfs/CA-Iometrix-Juniper-J4350.pdf http://www.iometrix.com/site/pdfs/CA-Iometrix-Juniper-J6350.pdf In general it is as important to be as aware of performance

[j-nsp] Juniper IDP Questions

2008-05-14 Thread GIULIANO (UOL)
Does someone uses Juniper IDP products ? Is it possible to block Live MSN contacts using JUNIPER IDP solution ? The main idea is to block only some contacts inside the MSN group. For example: - The user Paul can only have 2 contacts: John and Robert Beside this solution, I would like

[j-nsp] Burst Reset question on Juniper M5

2008-05-14 Thread Dave D
Hello all, So a customer of mine has been asking me about burst-size-limit on Juniper routers. Before I begin, I have a Juniper M5 running 7.6R4.3. My customer has the burst size limit set on his port, but he is asking me some questions I can't find the answers to. This was a page from Juni

Re: [j-nsp] Which Router

2008-05-14 Thread Peter E. Fry
- Original Message - From: Eric Van Tol <[EMAIL PROTECTED]> To: "'Lee Hetherington'" <[EMAIL PROTECTED]> Cc: "juniper-nsp@puck.nether.net" Subject: Re: [j-nsp] Which Router Date: Wed, 14 May 2008 06:23:02 -0400 > I can attest that a J2350 with 1G of RAM can take two full > tables and run

Re: [j-nsp] [nn] netscreen Vpn

2008-05-14 Thread Stefan Fouant
He may be trying to dynamically assign an IP address to the tunnel, in which case he'll need to use XAuth or L2TP over IPSec. But otherwise, I agree, if you can use local-id or an email address for purposes of identity, there is not much benefit to using XAuth for dialup VPNs and it certainly adds

Re: [j-nsp] T-640 management ports

2008-05-14 Thread German Martinez
On Tue May 06, 2008, [EMAIL PROTECTED] wrote: Hello Alain, > You must be careful using the Aux port. > The cabling like you've seen is not completely the same as on the console > port. According to the juniper documentation both ports are the same. http://www.juniper.net/techpubs/hardware/t640

Re: [j-nsp] netscreen Vpn

2008-05-14 Thread M.Mihailidis
Is there another free vpn client that I can use except netscreen remote? -Original Message- From: Stefan Fouant [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 14, 2008 5:34 PM To: M.Mihailidis Cc: Juniper-Nsp; [EMAIL PROTECTED] Subject: Re: [j-nsp] netscreen Vpn IIRC, XAuth has to take p

Re: [j-nsp] netscreen Vpn

2008-05-14 Thread Stefan Fouant
IIRC, XAuth has to take place *after* Phase 1 establishment but *prior to* Phase 2 negotiations. Therefore I believe you are seeing this message because the XAuth authentication needs to be completed before Phase 2 can begin. If you only saw the error once it just means the XAuth packet wasn't re

Re: [j-nsp] Which Router

2008-05-14 Thread Jose Madrid
You are absolutely correct. Ok, no issues with the J2320 :) This has made my day, thanks for the info. > show version Hostname: PR1.LGA0 Model: j2320 JUNOS Software Release [8.5R2.10] > show system processes extensive | except 0.00 last pid: 25415; load averages: 0.21, 0.22, 0.18 up 21+16:

Re: [j-nsp] Which Router

2008-05-14 Thread Phil Dyer
On 05/14/08 09:06, Jose Madrid wrote: about 492K routes, and it averages 72% CPU utilization. >> show chassis routing-engine > Routing Engine status: > DRAM 1024 MB > Memory utilization 75 percent > CPU utilization: > User 8

Re: [j-nsp] Which Router

2008-05-14 Thread Alexandre Snarskii
On Wed, May 14, 2008 at 09:06:27AM -0400, Jose Madrid wrote: > I think I am the only one having issues with my J2320. I use it as a > peering device and have 91 BGP peers on there. It has 1GB of RAM, > about 492K routes, and it averages 72% CPU utilization. Traffic-wise, > it does about 38Mbps t

[j-nsp] netscreen Vpn

2008-05-14 Thread M.Mihailidis
Hello im to set up an ipsec vpn with 5gt using Shrew Soft VPN Client from my pc I have setup correctly the 5gt and during the dial I get the message: KE<85.72.37.175>: XAuth login expired and was terminated for username at <10.32.32.10>.2008-05-14 16:16:49infoIKE: XAuth login was abor

Re: [j-nsp] Which Router

2008-05-14 Thread Jose Madrid
I think I am the only one having issues with my J2320. I use it as a peering device and have 91 BGP peers on there. It has 1GB of RAM, about 492K routes, and it averages 72% CPU utilization. Traffic-wise, it does about 38Mbps to one peering point and 55Mbps to another. It is holding up surprisi

Re: [j-nsp] Which Router

2008-05-14 Thread Eric Van Tol
> -Original Message- > From: [EMAIL PROTECTED] [mailto:juniper-nsp- > [EMAIL PROTECTED] On Behalf Of Lee Hetherington > Sent: Wednesday, May 14, 2008 5:04 AM > To: Eugeniu Patrascu; Campbell, Alex > Cc: juniper-nsp@puck.nether.net; [EMAIL PROTECTED] > Subject: Re: [j-nsp] Which Router > > T

Re: [j-nsp] Which Router

2008-05-14 Thread Lee Hetherington
Thanks Eugeniu Think that's going to be the option for now. I can persuade finance to buy more of them this way ;) Thanks for your help guys! Lee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eugeniu Patrascu Sent: 14 May 2008 09:39 To: Campbell, Ale

Re: [j-nsp] Which Router

2008-05-14 Thread Eugeniu Patrascu
Campbell, Alex wrote: > We have J4350s taking several full tables each. Traffic peaks at about > 100mbps and CPU sits constantly at about 10%. I'm not sure how much > slower the CPU on the J2320 is but I would be surprised if it couldn't > comfortably handle our traffic loads with full tables. >