Re: [j-nsp] In case you missed it...

2008-09-16 Thread Andrea Montefusco
Stefan Fouant wrote: Juniper just released the SRX platform. 120 Gbps / 15Mpps of firewalling, 30 Gbps of IPS, and 4 Million concurrent sessions! Holy crap - this box looks sweet. I've wanted to talk about this box for so long but was restricted due to NDA. Can't wait to take a more detailed

[j-nsp] 802.1ah/802.1ad on MX-Series

2008-09-16 Thread Sven Juergensen (KielNET)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, did anyone get to play with 802.1ah/802.1ad on the MX-Series yet? I would like to know if the implementation is stable and can be de- ployed in production environments. Thanks and best regards, Sven Mit freundlichen Gruessen i. A. Sven

Re: [j-nsp] Multihoming servers to two Virtual Chassises

2008-09-16 Thread Tore Anderson
* Chuck Anderson What software release were you testing with? 9.1R3 has a fix scheduled for PR 295093 which describes a problem of lost connectivity over a virtual chassis fiber link caused by not properly flooding unknown frames over the fiber link. Plain stacks (no VC fiber links) worked

Re: [j-nsp] Multihoming servers to two Virtual Chassises

2008-09-16 Thread Tore Anderson
Hi, * Tim Durack Linux ethernet bonding/teaming does not need to be switch assisted. If you configure one of the non-802.3ad modes (TLB etc) and put the two NICs on the same broadcast domain, everything will work. We use TLB mode, which gives 2x outbound, 1x inbound, due to the way arp

Re: [j-nsp] In case you missed it...

2008-09-16 Thread Stefan Fouant
JUNOS-ES docs are at the same location where the normal JUNOS docs can be found ;) On 9/16/08, Andrea Montefusco [EMAIL PROTECTED] wrote: Stefan Fouant wrote: Juniper just released the SRX platform. 120 Gbps / 15Mpps of firewalling, 30 Gbps of IPS, and 4 Million concurrent sessions! Holy

Re: [j-nsp] In case you missed it...

2008-09-16 Thread Andrea Duey
Hello, http://www.juniper.net/techpubs/software/junos-es/ Regards, Andrea Duey [EMAIL PROTECTED] 1-888-314-JTAC 07:00 AM - 03:00 PM MDT (UTC - 0600) Monday - Friday Please CC: [EMAIL PROTECTED] To have your case reassigned to another engineer please email [EMAIL PROTECTED] with your case

[j-nsp] EX Series Firewall Filter Configuration

2008-09-16 Thread Stefan Fouant
Folks, I'm curious if anyone here can answer a question about firewall filter implementation on the EX Series switches. For input packets traversing through the switch, the switch process packets through the Port-Based Firewall Filter (PACL), then the VLAN-Based Firewall Filter (VACL), and

Re: [j-nsp] EX Series Firewall Filter Configuration

2008-09-16 Thread Jared Gull
Stefan, Processing continues even if there is match and an accept/reject on a preceeding filter. Jared --- On Tue, 9/16/08, Stefan Fouant [EMAIL PROTECTED] wrote: From: Stefan Fouant [EMAIL PROTECTED] Subject: [j-nsp] EX Series Firewall Filter Configuration To: Juniper-Nsp

Re: [j-nsp] EX Series Firewall Filter Configuration

2008-09-16 Thread Jared Gull
From what I understand and what i've seen, processing continues even if the action is 'discard'. --- On Tue, 9/16/08, Stefan Fouant [EMAIL PROTECTED] wrote: From: Stefan Fouant [EMAIL PROTECTED] Subject: Re: [j-nsp] EX Series Firewall Filter Configuration To: [EMAIL PROTECTED] Cc:

[j-nsp] dhcp-relay on MX

2008-09-16 Thread Marlon Duksa
HiDoes anyone know why DHCP discover packets are not relayed through an MX from my client to en external DHCP server that resides on the same network as one on the interfaces on MX (I can ping this DHCP server from the MX). I see DHCP Discover packet come in from the client side but nothing going