Re: [j-nsp] Is there any impact of changing number of aggregated ethernet device?

2008-12-03 Thread Benny Sumitro
Nope, my experience is changing from 2 to 8 aex with no downtime to existing aex nor restarting the box. On Thu, Dec 4, 2008 at 12:03 PM, Mustafa Golam - <[EMAIL PROTECTED]>wrote: > Our current configuration is : > > [EMAIL PROTECTED]> show configuration chassis aggregated-devices > ethernet { >

Re: [j-nsp] Is there any impact of changing number of aggregated ethernet device?

2008-12-03 Thread a. rahman isnaini rst / netsoft
My experience in decreasing the number of aggregated fast ethernet : No Impact [notice that the traffic has been calculated] No need to restart the router, neither need to deactivate/activate the ae.x sub interfaces. a. r. isnaini rangkayo sutan Has anyone has similar experience? Did

[j-nsp] Is there any impact of changing number of aggregated ethernet device?

2008-12-03 Thread Mustafa Golam -
Our current configuration is : [EMAIL PROTECTED]> show configuration chassis aggregated-devices ethernet { device-count 5; } Recent increase in demand and network utilization is asking to make at least 10 aggregated ethernet ports. if we execute:*set chassis aggregated-devices ethernet devic

Re: [j-nsp] New M7i/M10i Enhanced CFEB

2008-12-03 Thread Richard A Steenbergen
On Wed, Dec 03, 2008 at 12:12:27PM +0300, Pavel Lunin wrote: > Hi! > > Mark Tinka wrote: > >They've actually switched to RLDRAM (32MB of it, to be > >exact). > > > Do you have any information regarding the number of active routes it is > able to store? 32MB is the same as on the MX, so if the

[j-nsp] IS-IS route selection

2008-12-03 Thread snort bsd
Hi all: quick question: if an is-is router receives the same route from different adjacencies and all of them have the same metric values besides they all have the same preference, then what is next criteria to select the route for routing table? Start your day with Yahoo!7 and win a

Re: [j-nsp] Juniper uRPF implementation

2008-12-03 Thread Pekka Savola
On Wed, 3 Dec 2008, German Martinez wrote: We have an scenario where we have a bunch of routes in the routing table (RE) but we only let one default route go to the PFE. We achieve that by using forwarding filters. Could someone clarify Juniper's uRPF implementation, when only a default route

Re: [j-nsp] RE : flow export

2008-12-03 Thread Stefan Fouant
On Wed, Dec 3, 2008 at 4:10 PM, Bit Gossip <[EMAIL PROTECTED]> wrote: > If you want to sample all traffic, as it appears from your config, you > don't really need a fw filter but you can use the following simple form: > >ge-0/0/0 { >unit 0 { >family inet { >s

Re: [j-nsp] RE : flow export

2008-12-03 Thread Bit Gossip
If you want to sample all traffic, as it appears from your config, you don't really need a fw filter but you can use the following simple form: ge-0/0/0 { unit 0 { family inet { sampling { input; } } }

Re: [j-nsp] Netscreen SSG src-dest NAT with static mapping problem

2008-12-03 Thread Stefan Fouant
On Wed, Dec 3, 2008 at 6:11 AM, Mark Tech <[EMAIL PROTECTED]> wrote: > Hi > I am having a bit of trouble trying to do the following NAT with static > mapping, i.e: > > src 2.2.2.2 dest 1.1.1.1 (tr) NETSCREEN (dmz) src 10.1.1.254 dest 10.1.1.1 > src 2.2.2.2 dest 1.1.1.2 (tr) NETSCREEN (dmz) src 10.

[j-nsp] Juniper uRPF implementation

2008-12-03 Thread German Martinez
Hello, We have an scenario where we have a bunch of routes in the routing table (RE) but we only let one default route go to the PFE. We achieve that by using forwarding filters. Could someone clarify Juniper's uRPF implementation, when only a default route is installed in the PFE? Are the uRPF

Re: [j-nsp] DPC and DPCE

2008-12-03 Thread Marlon Duksa
'Enhanced' means that the card is based on EZChip RevB. Non 'E' cards are based on EZChip RevA and are retired.Marlon On Wed, Dec 3, 2008 at 5:24 AM, Pavel Lunin <[EMAIL PROTECTED]> wrote: > Hi all, > > Does anyone know what letter 'E' means in DPC codes? Is there any technical > difference betwe

[j-nsp] RE : flow export

2008-12-03 Thread david.roy
Hi, Try to create the filter at the "firewall family inet" hierarchy level. For IPV4 we can create filter at either "firewall" or "firewall family inet" hierarchy level but I don't know if there is some requierements for sampling filter. David De: [EMAIL

[j-nsp] flow export

2008-12-03 Thread Bernard Kwofie
Hi, I am trying to export flow data from my M10i to a linux box for nfsen to graph, but its not working. Can anybody help me out. Thank you in advance. Below is my configuration interfaces { so-0/0/0 { unit 0 { family inet { filter {

Re: [j-nsp] JUNOS RADIUS Authentication

2008-12-03 Thread Eric Van Tol
argh. Nevermind. As usual, i figured it out shortly after sending out a request for help. The 'user' needs to be the same name as the 'class' in order for this to work. So obvious, yet overlooked. -evt > -Original Message- > From: [EMAIL PROTECTED] [mailto:juniper-nsp- > [EMAIL PROT

Re: [j-nsp] DPC and DPCE

2008-12-03 Thread Mustafa Golam -
DPCs provide multiple physical interfaces and Packet Forwarding Engines on a single board that installs in a slot in the Juniper Networks MX-series Ethernet Services Router. A DPC receives incoming packets from the network and sends outgoing packets to the network. The Packet Forwarding Engines on

[j-nsp] JUNOS RADIUS Authentication

2008-12-03 Thread Eric Van Tol
Hi all, I'm trying to configure JUNOS for RADIUS authentication and I've gotten to the point where the user is granted access, but for some reason is immediately logged out of the router: -= 11:35:13 - /home/eric =- [506 - [EMAIL PROTECTED] ssh -l test1 172.16.200.170 [EMAIL PROTECTED]'s passwor

Re: [j-nsp] DPC and DPCE

2008-12-03 Thread Natasa Zivkovic Galjak
Hi, As far as I remember DPCE cards has enhanced ASICs for increased performance and scalability of Layer 2 features. Best regards, Natasa Pavel Lunin wrote: Hi all, Does anyone know what letter 'E' means in DPC cod

[j-nsp] DPC and DPCE

2008-12-03 Thread Pavel Lunin
Hi all, Does anyone know what letter 'E' means in DPC codes? Is there any technical difference between DPCE-R-2XGE-XFP and DPC-R-4XGE-XFP other than just number of ports? -- Kind regards, Pavel ___ juniper-nsp mailing list juniper-nsp@puck.nether.ne

[j-nsp] Netscreen SSG src-dest NAT with static mapping problem

2008-12-03 Thread Mark Tech
Hi I am having a bit of trouble trying to do the following NAT with static mapping, i.e: src 2.2.2.2 dest 1.1.1.1 (tr) NETSCREEN (dmz) src 10.1.1.254 dest 10.1.1.1 src 2.2.2.2 dest 1.1.1.2 (tr) NETSCREEN (dmz) src 10.1.1.254 dest 10.1.1.2 src 2.2.2.2 dest 1.1.1.x (tr) NETSCREEN (dmz) src 10.1.1.2

Re: [j-nsp] New M7i/M10i Enhanced CFEB

2008-12-03 Thread Mark Tinka
On Wednesday 03 December 2008 17:12:27 Pavel Lunin wrote: > Do you have any information regarding the number of > active routes it is able to store? Still waiting to hear from my SE on that. But I understand it's only available later next year. Mark. signature.asc Description: This is a digit

Re: [j-nsp] New M7i/M10i Enhanced CFEB

2008-12-03 Thread Pavel Lunin
Hi! Mark Tinka wrote: They've actually switched to RLDRAM (32MB of it, to be exact). Do you have any information regarding the number of active routes it is able to store? -- Kind regards, Pavel ___ juniper-nsp mailing list juniper-nsp@puck.nethe