Re: [j-nsp] EX Series issue - Update!

2009-02-11 Thread Mark Tinka
On Monday 29 December 2008 06:26:42 pm Felix Schueren wrote: which version of JUNOS-EX did you use? We saw similiar effects with 9.1 and (to a lesser extent) with 9.2. Debugged for a good while, everything 100% correct, reboot, everything worked. We later learned that restart

[j-nsp] NSM

2009-02-11 Thread SunnyDay
Hello Any one knows how can i configure a j series router so i can import it to Netscreen Security Manager? ( NSM ) Thank You ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] ERX dhcp-local: set siaddr or other dhcp options

2009-02-11 Thread Martin Lorentz
Hi, it's my first post, hello everyone. My employer uses ERXes since 2006. Currently we're exploring how to migrate from PPPoE to DHCP. So is there any way to have the dhcp-local standalone server in JUNOSe (I have 7.3.0p2) answer with specific siaddr (like ISC dhcpd's next-server statement) or

Re: [j-nsp] Upgrade from M10i?

2009-02-11 Thread Alexandre Snarskii
On Tue, Feb 03, 2009 at 12:49:10PM -0600, Richard A Steenbergen wrote: On Tue, Feb 03, 2009 at 06:35:34PM +0100, sth...@nethelp.no wrote: Given the requirement of full BGP routes, I don't believe the EX platform is an acceptable alternative... Well, that all depends what you want to do

Re: [j-nsp] NSM

2009-02-11 Thread Masood Ahmad Shah
Check if you can find something similar while sitting at your J series :) set system services outbound-ssh client nsm Regards, Masood -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of SunnyDay Sent: Wednesday,

[j-nsp] L2VPN Across MX480

2009-02-11 Thread Joseph Soricelli
All- Got a simple L2VPN setup with some 7609 as CE and MX480 (9.2R3) as PE (no P boxes). 7609MX480-1MX480-27609 CE PE PE CE L2VPN comes up with no issues. In troubleshooting some intermittent ping and L3 issues from the 7609 side I

Re: [j-nsp] transfer between 2 ns2000's is slow

2009-02-11 Thread Masood Ahmad Shah
I would suggest check CRC and duplex mismatch twice :) if everything goes fine then you better play with the following TCP tweaks.. flow no-tcp-seq-check flow tcp-syn-check flow tcp-syn-bit-check Regards, Masood -Original Message- From: juniper-nsp-boun...@puck.nether.net

Re: [j-nsp] Native ScreenOS / J-Series / SSG-M

2009-02-11 Thread Stefan Fouant
I am fairly certain with a swap of the CF (with appropriate image) you can convert your J4350/J6350 to an SSG-350M/SSG-550M, however I believe the same cannot be said for the J2320/J2350. On 2/11/09, Joseph Soricelli j...@proteus.net wrote: All- Looking for a little verification here. I know

Re: [j-nsp] Native ScreenOS / J-Series / SSG-M

2009-02-11 Thread Ben Dale
Hi Joe, There is an equivalant ScreenOS-based box for each of the JUNOS-based platforms: SSG320M - J2320 SSG350M - J2350 SSG520M - J4350 SSG550M - J6350 and an associated J-Series to SSG conversion kit available for each of them (Part No: Jx3x0-SSG-CONV-S). There are also kits to convert

Re: [j-nsp] Native ScreenOS / J-Series / SSG-M

2009-02-11 Thread Joseph Soricelli
Stefan- Thanks! Kinda what I figured. -joe PS - Long time no see. I missed you in Herndon the other month. ;-) Joseph Soricelli JNCIE #14/ CCIE #4803 703-980-3999 j...@proteus.net On Feb 11, 2009, at 5:43 PM, Stefan Fouant wrote: I am fairly certain with a swap of the CF (with

Re: [j-nsp] Native ScreenOS / J-Series / SSG-M

2009-02-11 Thread Stefan Fouant
Well then - guess I was wrong! Thanks Ben for the clarification. On 2/11/09, Ben Dale bd...@comlinx.com.au wrote: Hi Joe, There is an equivalant ScreenOS-based box for each of the JUNOS-based platforms: SSG320M - J2320 SSG350M - J2350 SSG520M - J4350 SSG550M - J6350 and an associated

Re: [j-nsp] transfer between 2 ns2000's is slow

2009-02-11 Thread Tim Eberhard
Leslie, please issue the get perf cpu all detail command to see if which CPU is going up. I suspect you're hitting an ALG or this is going to CPU for some odd reason. -Tim Eberhard On Tue, Feb 10, 2009 at 1:46 PM, Leslie les...@craigslist.org wrote: I'm having a strange problem that I haven't

Re: [j-nsp] transfer between 2 ns2000's is slow

2009-02-11 Thread Leslie
It's always the flow cpu that spikes up Tim Eberhard wrote: Leslie, please issue the get perf cpu all detail command to see if which CPU is going up. I suspect you're hitting an ALG or this is going to CPU for some odd reason. -Tim Eberhard On Tue, Feb 10, 2009 at 1:46 PM, Leslie

Re: [j-nsp] transfer between 2 ns2000's is slow

2009-02-11 Thread Tim Eberhard
Can you debug the traffic and send me the output? 'debug tag info' is sufficient. On Wed, Feb 11, 2009 at 5:20 PM, Leslie les...@craigslist.org wrote: It's always the flow cpu that spikes up Tim Eberhard wrote: Leslie, please issue the get perf cpu all detail command to see if which CPU

Re: [j-nsp] L2VPN Across MX480

2009-02-11 Thread Dan Evans
Joe, You should be able to pass BPDU's through without any configuration tweaks. From the 9.2 docs: http://www.juniper.net/techpubs/software/junos/junos92/swconfig-vpns/transmitting-nonstandard-bpdus.html#id-10110163 HTH -Dan On Wed, Feb 11, 2009 at 5:39 PM, Joseph Soricelli j...@proteus.net

Re: [j-nsp] L2VPN Across MX480

2009-02-11 Thread David Ball
Using 'encapsulation ethernet-ccc' on your MX ints for transparency ? David B 2009/2/11 Joseph Soricelli j...@proteus.net: All- Got a simple L2VPN setup with some 7609 as CE and MX480 (9.2R3) as PE (no P boxes). 7609MX480-1MX480-27609 CE PE PE

Re: [j-nsp] L2VPN Across MX480

2009-02-11 Thread Joe Soricelli
David- Yeah, I guess done details are in order. Sent the first email in a hurry. The unit is set for vlan 572 and encap vlan-ccc. The physical is set with encap flexible-ethernet-services since vlan 4000 us being used as an IP interface. -joe On Feb 11, 2009, at 7:46 PM, David Ball

Re: [j-nsp] transfer between 2 ns2000's is slow

2009-02-11 Thread Brad Henshaw
Leslie wrote: Basically my setup is host 1 - fw1 - dedicated 1gige link (~25ms lag) - router2 - fw2 - host 2 I can blast udp across this pipe without a problem, but tcp traffic seems to be limited to about 3 mbyte/s -- I can make multiple sessions that are all transferring at this speed,

Re: [j-nsp] EX Series issue - Update!

2009-02-11 Thread Sven Juergensen (KielNET)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hm, nothing I can correlate regarding those issues showing up on the 9.4 release notes: http://www.juniper.net/techpubs/en_US/junos9.4/information-products/topic-collections/release-notes/9.4/frameset.html Perhaps a stealth fix ;) Any news from

Re: [j-nsp] Native ScreenOS / J-Series / SSG-M

2009-02-11 Thread Joseph Soricelli
Ben- Great info, thanks! The customer is looking for this down the road but I personally think they've just gotten frustrated working with 8.5 on their J2320. I definitely plan on doing my best to keep them on JUNOS-ES!! ;-) Thanks, Joe Joseph Soricelli JNCIE #14/ CCIE #4803 703-980-3999

Re: [j-nsp] EX Series issue - Update!

2009-02-11 Thread Mark Tinka
On Thursday 12 February 2009 03:03:14 pm Sven Juergensen (KielNET) wrote: nothing I can correlate regarding those issues showing up on the 9.4 release notes: Same here - the issue doesn't appear to be mentioned in the release notes. Perhaps a stealth fix ;) Perhaps. Any news from JTAC?