Re: [j-nsp] CoS Marking/Rewrite Theory

On Sun, 5 Oct 2008, Chris Evans wrote: Yea I don't want to assign them to seperate queues, but I do not want packets that already have a DSCP bit assigned to be rewritten. If I have more differentiated traffic then classes available on the box, I'm out of luck essentially. Also I'm not using the

Re: [j-nsp] two questions regarding the virtualized resource isolation

Hello Simon, 1) Depending on the PIC, there are 4 or 8 queues per physical interface. If you create subinterfaces they will share the same 4 (or 8 queues). Depending on the configuration of the queues, traffic in subinterface A can starve traffic in subinterface B. 2) Logical routers each

[j-nsp] SSG Issue

Hi All Not sure if this is really the place, but i'm stumped. I have a dialup vpn set up with netscreen remote. All auths fine and netscreen remote says its connected. The bi-directional vpn policy is set, exactly as in the docs, to tunnel traffic. ID From To Src-address

Re: [j-nsp] SSG Issue

On Mon, Oct 6, 2008 at 1:00 PM, Dan Goscomb [EMAIL PROTECTED] wrote: Hi All Not sure if this is really the place, but i'm stumped. I have a dialup vpn set up with netscreen remote. All auths fine and netscreen remote says its connected. The bi-directional vpn policy is set, exactly as in

[j-nsp] Junos Equiv to Network Statement

This may sound like a dumb question, but in Junos, what is the preferred method for getting a network into BGP? The equivalent of the Cisco network statement... All of the examples I can find basically redistribute other routing protocols into BGP... which for some reason strikes me as

Re: [j-nsp] Junos Equiv to Network Statement

The JUNOS software allows you to export any active(*) routes from your routing table to any peer. You choose the routes to export via a policy statement. The default policy is to export routes received from other BGP peers. (Obviously, it won't reflect routes received from one iBGP peer to

Re: [j-nsp] Junos Equiv to Network Statement

In addition, although it looks like redistribute route into BGP in the Cisco's view, but it's not exact the same. As we know in Cisco redistribute a route into BGP will cause it's Origin atttribute set to ?(incompetele) And if you use 'export' in Junos environment it's attribute just set to I(if

Re: [j-nsp] SSG Issue

On Mon, Oct 06, 2008 at 01:23:02PM -0400, Stefan Fouant wrote: Can you issue the following: debug flow basic set ffilter ip 10.1.2.6 clear dbuf clear sessions Be careful when issuing commands in the order listed above - you can easily brick your device if the session rampup rate is high,

Re: [j-nsp] SSG Issue

While I am in agreement with you that it would be considered best practice in the majority of cases to specify the ffilter first, I didn't think he'd have to worry too much in this case as the traffic was only coming from a single Dial-Up VPN host... Still playing Devil's advocate is probably wise