Re: [j-nsp] lsp required for vpls?

2009-08-09 Thread Masood Shah
After the last post I feel it's worth mentioning that both vendors (juniper/cisco) are supporting LDP/RSVP. So what makes you think you can use either LDP or RSVP for transport layer signaling. Even you can use both of thm lke when you run LDP over LSPs established by RSVP nd there is much more

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Bill Blackford
So, I have it working now, but it doesn't seem that is a very elegant solution. I added an account to 'system login user' that corresponds to an account in AD. Seems that when the switch receives a login for a locally configured user, it then (based on my authentication-order) first checks to s

Re: [j-nsp] lsp required for vpls?

2009-08-09 Thread Derick Winkworth
MPLS does not "depend" on RSVP. MPLS itself has "multiple" layers. The most basic model is the "transport" layer underneath an "application" layer. This is the model many service providers use. Each "layer" has its own signaling. So, for instance, the transport layer in a service provider

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Masood Ahmad Shah
JUNOS gives you very flexible AAA services. I would suggest you should not use remote user template on live production Box. Configuring a single remote user template account requires that all users (once again keep in mind ALL users) without individual configuration entries share the same class and

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Walaa Abdel razzak
Hi Please check if you are hitting the tacacs from your router, also check the source address, security rule on the tacacs. Walaa Abdel Razzak | Snr. Networks Consultant -Original Message- From: Bill Blackford [mailto:bblackf...@nwresd.k12.or.us] Sent: Sunday, August 09, 2009 5:59 P

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Nalkhande Tarique Abbas
Do you have a remote user configured? Pls try to add this .. system { login { user remote { full-name "All remote users"; uid 2001; class super-user; } } } Thanks & Regards, Tarique A. Nalkhande -Original Message- From: juni

Re: [j-nsp] lsp required for vpls?

2009-08-09 Thread sthaug
> According to this document, MPLS depends on RSVP... > > http://www.juniper.net/techpubs/software/nog/nog-mpls-model/html/mpls-model2.html#1035142 > > I'm really confused and want to figure out exactly what the dependency is... MPLS depends on label switched paths (LSPs). These LSPs can be impl

Re: [j-nsp] lsp required for vpls?

2009-08-09 Thread Simon Chen
According to this document, MPLS depends on RSVP... http://www.juniper.net/techpubs/software/nog/nog-mpls-model/html/mpls-model2.html#1035142 I'm really confused and want to figure out exactly what the dependency is... Thanks. -Simon On Fri, Aug 7, 2009 at 10:25 AM, snort bsd wrote: > > I think

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Bill Blackford
authentication-order [ tacplus password ]; -b -Original Message- From: Walaa Abdel razzak [mailto:wala...@bmc.com.sa] Sent: Sunday, August 09, 2009 7:51 AM To: Bill Blackford; juniper-nsp@puck.nether.net Subject: RE: [j-nsp] tacplus on EX3200 Hi Did you check the authentication order

Re: [j-nsp] tacplus on EX3200

2009-08-09 Thread Walaa Abdel razzak
Hi Did you check the authentication order on the router? Tacacs log on the server? BR, Walaa Abdel Razzak This email and any attached files are confidential and intended solely for the use of the individual to whom they are addressed. If you received this email in error or you are not the name

[j-nsp] tacplus on EX3200

2009-08-09 Thread Bill Blackford
I'm struggling with getting tacplus working on my EX's and was hoping someone on the list has successfully done this. tacplus-server { ###.###.###.### { port 49; secret ""; ## SECRET-DATA timeout 5; single-connection; } } I cu