[j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread George
Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a problem when setting up a VPN on this one due to firmware version thus I need to upgrade it. The question is how do I upgrade this firmware, challenge being that it is running live services and if the

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread masood
Are you using both of the firewalls as n active/active or active/passive; if yes thn you can try upgrading one of them while the other will take care of your production services. Regards, Masood Hi there, I have two juniper netscreens one is Firmware 5.0.0r8.1 . Now I have encountered a

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread George
Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall.

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread George
Sorry guys, The two firewalls are in completely two different networks and in no way work together. The reason I mentioned the two is because I tried the same VPN on the other Firewall with a higher firmware and it worked within minutes of set-up. So i really want to upgrade this firewall.

Re: [j-nsp] Juniper (M20) - GRe Tunnel - Cisco(7206)

2009-07-13 Thread Steven Brenchley
PR55687 was fixed a long time ago, unless your running ancient code you should be fine. It was fixed in 7.3 and later codes. On Sat, Jul 11, 2009 at 5:22 PM, raymondh (NSP) raymondh@gmail.comwrote: Hi Simon, Based on your config, I assumed you do have an AS / MS PIC (only the AS or MS

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread Tim Eberhard
George, It's not possible to preform any kind of hitless upgrade.. The Netscreen must reboot once the new code is loaded. So you must factor in the time it will take for the firewall to reload in addition to the hit it will take when the wall comes back online and the traffic starts to flood

Re: [j-nsp] MX960 NSR Problem

2009-07-13 Thread David Ball
I agree. I ran into PR 434162 which was causing my BGP sessions to constantly reset on my backup RE, breaking ISSU (on T-series, however). The fix is making it into 9.3R4 and 9.4R3, and I think 9.4R3 is due later this week. Might be a different issue than you were hitting, but is related to

[j-nsp] (no subject)

2009-07-13 Thread Brendan Regan
Hi, Has anyone come across an M20 which suddenly looses communication and after coming back online it looks like the chassis has restarted for some reason. See messages below. Jul 10 18:38:06 tnp_scb mpc106 machine check caused by error on the Processor Bus Jul 10 18:38:09 CHASSISD_SHUTDOWN:

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread George
Thanks Guys, Sure I had planned to upgrade to above 5.2 , are these firmwares available for download? So the next question is really about the configs, Once a reboot is done all the previous setting take in effect, is that so? And for a rollback the do I just scroll for the image? Regards

Re: [j-nsp] MX960 NSR Problem

2009-07-13 Thread Walaa Abdel razzak
OK, That's why I see BGP session reset on the new Backup RE but not on the new master because of resync process and we can say this behaviour is normal. But why the BFD, ISIS sessions was reset on the new master and affected neighbours state? Best Regards, Walaa Abdel Razzak -Original

Re: [j-nsp] MX960 NSR Problem

2009-07-13 Thread Harry Reynolds
From the docs. Based on distributed or the timeout when not, you can have bfd timeouts during a nsr; for a gres I believe that bfd is not supported and a session reset is also expected. When a BFD session is distributed to the Packet Forwarding Engine, BFD packets continue to be sent during a

Re: [j-nsp] How to upgrade junos 5.0.0r8.1

2009-07-13 Thread Tim Eberhard
You configuration will remain after the upgrade/reboot. Downgrading is the same process as upgrading as long as you're going from say 5.2 to 5.0. Just load the 5.0 image and reboot. The 5.0 image is blown away when you load the newer screenOS. Good luck, -Tim Eberhard On Mon, Jul 13, 2009 at

[j-nsp] BGP import policy not refreshing properly

2009-07-13 Thread Will Orton
I have 2 POPs each with a connection to a common upstream. The upstream is sending me MEDs, but lots of routes have (missing or 0) MEDs and I want to reset those to a fixed value so I can tweak them later. So I have an import policy on each BGP session like so: term setall-meds { from

[j-nsp] Frame-relay Switching on J-Series

2009-07-13 Thread Hoogen
Hi Guys, I have a lab that I am trying to setup, some basics here. I would like to setup a J-Series to act like a Frame-relay switch. Could anyone direct me to some configurations? I am using T1 ports here and would like to get some p2p and p2m configurations. So some configurations would