Re: [j-nsp] JNCIP Case Study - 1 Pg 42 - archive size and files

2009-09-10 Thread Stefan Fouant
On Thu, Sep 10, 2009 at 11:00 PM, Yue Min wrote: > Actually I feel the way ( all community in all routers rather than > specific community in specific router ) would save your time not waste > your time. > I guess it depends on what you are doing. Doing a copy and paste of a bunch of community

Re: [j-nsp] JNCIP Case Study - 1 Pg 42 - archive size and files

2009-09-10 Thread Yue Min
Actually I feel the way ( all community in all routers rather than specific community in specific router ) would save your time not waste your time. On 9/10/09, Stefan Fouant wrote: > On Thu, Sep 10, 2009 at 4:28 AM, Stevanus wrote: > >> Sorry for a little bit OOT. So suppose I configure bgp co

[j-nsp] radius accounting on MX

2009-09-10 Thread Marlon Duksa
Hi - can someone point me to some more info, somewhere I can find more on radius accounting for subscriber access. I did enabled it on MX but I can't find any info one where sta stats are stored and which statistics are accounted for? For example, I'd like to collect number of packets for the subsc

Re: [j-nsp] bad packets

2009-09-10 Thread Serge Vautour
We run OSPF & BGP with no MPLS. Our standard protect RE filter does: -Allow OSPF, BGP, VRRP, BFD -Drop all first fragments & trailing fragments -Allow ICMP, TACACS, SSH, Telnet, SNMP, DNS, FTP -Drop everything else Appropriate entries permit only certain source/destinations. This has been worki

Re: [j-nsp] bad packets

2009-09-10 Thread sthaug
> My point of view in this case is the following: > - the network should have standard MTU configured on both side of all > links; should there be a non standard, this is a misconfiguration. Agree about the "should" - however, the real world isn't always that nice. In our case we have standardized

Re: [j-nsp] JNCIP Case Study - 1 Pg 42 - archive size and files

2009-09-10 Thread Stefan Fouant
On Thu, Sep 10, 2009 at 4:28 AM, Stevanus wrote: > Sorry for a little bit OOT. So suppose I configure bgp community > attributes for all routers instead of all EBGP peering routers as required > in the exam, then I won't lose any points? > Thanks > > - Stevanus - > Again, you could do this, unl

Re: [j-nsp] bad packets

2009-09-10 Thread Bit Gossip
My point of view in this case is the following: - the network should have standard MTU configured on both side of all links; should there be a non standard, this is a misconfiguration. - in the loopback firewall filter, fragments are dropped with the count and log option so that we can see what is

Re: [j-nsp] bad packets

2009-09-10 Thread Danny Vernals
On Thu, Sep 10, 2009 at 12:40 PM, Alexandre Snarskii wrote: > On Thu, Sep 10, 2009 at 01:06:16PM +0200, Bit Gossip wrote: >> Experts, >> on the ground that only the following protocols are allowed to reach the >> RE: >> - BGP (runs PMTU so should not fragment packets) >> - ISIS is only L2 so it is

Re: [j-nsp] bad packets

2009-09-10 Thread Alexandre Snarskii
On Thu, Sep 10, 2009 at 01:06:16PM +0200, Bit Gossip wrote: > Experts, > on the ground that only the following protocols are allowed to reach the > RE: > - BGP (runs PMTU so should not fragment packets) > - ISIS is only L2 so it is not blocked by a firewall filter > - OSPF, LDP, RSVP, PIM, IGMP, BF

Re: [j-nsp] bad packets

2009-09-10 Thread sthaug
> on the ground that only the following protocols are allowed to reach the > RE: > - BGP (runs PMTU so should not fragment packets) > - ISIS is only L2 so it is not blocked by a firewall filter > - OSPF, LDP, RSVP, PIM, IGMP, BFD, VRRP: don't know about them > - ssh, snmp, tacacs, ntp, Icmp, domain

[j-nsp] bad packets

2009-09-10 Thread Bit Gossip
Experts, on the ground that only the following protocols are allowed to reach the RE: - BGP (runs PMTU so should not fragment packets) - ISIS is only L2 so it is not blocked by a firewall filter - OSPF, LDP, RSVP, PIM, IGMP, BFD, VRRP: don't know about them - ssh, snmp, tacacs, ntp, Icmp, domain I

Re: [j-nsp] JNCIP Case Study - 1 Pg 42 - archive size and files

2009-09-10 Thread Stevanus
Sorry for a little bit OOT. So suppose I configure bgp community attributes for all routers instead of all EBGP peering routers as required in the exam, then I won't lose any points? Thanks - Stevanus - Stefan Fouant wrote: On Mon, Sep 7, 2009 at 1:20 PM, Hoogen wrote: But since this wa