[j-nsp] E120 Configure single domain to authenticate from a different RADIUS

2009-08-12 Thread Jason Alex
Dear All, How can i configure on the E120 Router to make some users with a specific doman (i.e .com) to authenticate from a different RADIUS Servers using pppoe other than the RADIUS Server used by all the other users Appreciate your help Thanks

Re: [j-nsp] E120 Configure single domain to authenticate from adifferent RADIUS

2009-08-12 Thread Masood Shah
You can use one RADIUS server (cluster as well) for all the domains and decide on the RADIUS instead of RAS/BRAS. You can use your primary RADIUS as n proxy for particular domain,user,subnet to redirect/out-source the auth,authrozn,acc of dial-in user,realm etc to another RADIUS server, which

[j-nsp] Hardware issue with M7i

2009-08-12 Thread Brendan Mannella
All, My juniper m7i suddently rebooted today. The logs show the following. Can someone tell me what exactly failed. It appears the onboard hard disk was the issue, but i just wanted to verify. Aug 12 10:08:11  ibr1.pit /kernel: ata0: resetting devices .. Aug 12 10:08:11  ibr1.pit

[j-nsp] M7i Hard Disk Replacement

2009-08-12 Thread Brendan Mannella
Hello, I was wondering if anyone has successfully replaced a hard disk on a M7i RE-5.0. If so with what model disk, and once installed what is the procedure to get the disk back to working/formatted condition. Thanks, Brendan ___ juniper-nsp mailing

Re: [j-nsp] MPLS VPN Load-balancing

2009-08-12 Thread Christian Martin
Thanks, Harry. I just checked our routing and noticed that the traffic was entering the Juniper via a transit MPLS link to another PE, so the VPN label is the only label on the stack due to PHP. As such, if what Steven mentions is true re: ABC-chip hardware, then there is no entropy as

Re: [j-nsp] MPLS VPN Load-balancing

2009-08-12 Thread Harry Reynolds
I think the issue is that on ABC/M-series we can either do a MPLS hash (up to two labels), or an IP/L4 hash. It does not seems that you can do both, but I read somewhere if you only do a 1 label hash then abc/m series can hash on the IP. Its so hard to keep this straight. Good thing there is

Re: [j-nsp] M7i Hard Disk Replacement

2009-08-12 Thread Kevin Oberman
Date: Wed, 12 Aug 2009 12:19:41 -0400 From: Brendan Mannella bmanne...@teraswitch.com Sender: juniper-nsp-boun...@puck.nether.net Hello, I was wondering if anyone has successfully replaced a hard disk on a M7i RE-5.0. If so with what model disk, and once installed what is the procedure

Re: [j-nsp] MPLS VPN Load-balancing

2009-08-12 Thread Christian Martin
We made the traffic change and now the balancing is even. I am going to change the config to label-1 payload ip (only) and then shift it back and see if we can in fact hash on the single label and the iP header. Hopefully this will suffice! Cheers, Chris On Aug 12, 2009, at 12:50 PM,

[j-nsp] AS-path

2009-08-12 Thread Fahad Khan
Dear Folks, what should be the As-path reg expression for getting the routes transiting AS 100 and not originating from AS 100 regards -- Muhammad Fahad Khan IT Specialist Global Technology Services, IBM fa...@pk.ibm.com +92-321-2370510 +92-301-8247638

Re: [j-nsp] MPLS VPN Load-balancing

2009-08-12 Thread Daniel Verlouw
Hi Harry, On Aug 12, 2009, at 6:50 PM, Harry Reynolds wrote: T-series platforms with e-fpcs and MX can hash on multiple MPLS labels while *also* hashing on L3 and l4. This seems to jive with the docs at:

Re: [j-nsp] AS-path

2009-08-12 Thread Judah Scott
Without testing It seems like: set as-path 100not1000orig .* 100 .* (!1000)$ should work. Thanks, J Scott On Wed, Aug 12, 2009 at 11:24 AM, Fahad Khan fahad.k...@gmail.com wrote: Dear Folks, what should be the As-path reg expression for getting the routes transiting AS 100 and not

Re: [j-nsp] AS-path

2009-08-12 Thread Scott Morris
Oops. just realized wrong syntax, assumed this was for a different list. ;) So disregard my last reply! Anyway, in this answer, you have one THOUSAND in paren instead of 100. Scott Judah Scott wrote: Without testing It seems like: set as-path 100not1000orig .* 100 .* (!1000)$ should

Re: [j-nsp] MPLS VPN Load-balancing

2009-08-12 Thread Harry Reynolds
From what I know, I-chip is like T-series (lmnr) wrt hashing. http://www.juniper.net/techpubs/en_US/junos9.6/information-products/topic-collections/config-guide-policy/policy-configuring-load-balancing-based-on-mpls-labels.html I'm pretty sure that mx can do mpls plus ip payload, as per above.