Re: [j-nsp] dscp classifier doesn't work - junos 9.6

2010-02-16 Thread Nilesh Khambal
Did this work in some other release? Pls also check the "show log messages" output by first removing the classifier from the GigE interface and commit, then apply the classifier and then commit again. This is to see if COSD is spitting out any errors during the commit related to this classifier

[j-nsp] SRX tunnel termination

2010-02-16 Thread OBrien, Will
We ran into an interesting case where we can't terminate tunnel interfaces on virtual routers on a SRX - only the primary. Has anyone else run into this? It's pretty critical to how we deploy our networks to meet PCI. ___ juniper-nsp mailing list junipe

Re: [j-nsp] dscp classifier doesn't work - junos 9.6

2010-02-16 Thread Truman Boyes
On 16/02/2010, at 10:14 PM, meryem Z wrote: > > Hello , > > I have an M7i router with junos 9.6 R3 . > > Below it's hardware config : > > Hardware inventory: > Item Version Part number Serial number Description > ChassisA6156 M7i >

Re: [j-nsp] email from commit or op script?

2010-02-16 Thread Bill Marquette
- "Truman Boyes" wrote: > On 17/02/2010, at 3:57 AM, Phil Shafer wrote: > > > Bill Marquette writes: > >> Is there any way to send email from an op script? > > > > No, sorry. We do snmp, syslog, or transfer, but not email. My > > thoughts were always that email notifications should be don

Re: [j-nsp] H323 ALG on SRX240-hm

2010-02-16 Thread Truman Boyes
The H.323 ALG is only supported on SRX100 / SRX 210 models in 9.6. The H.323 ALG is supported in 10.0 on the SRX240. http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-srx-jseries-support-reference/junos-srx-jseries-support-reference.pdf Kind regards, Truman On

Re: [j-nsp] email from commit or op script?

2010-02-16 Thread Truman Boyes
On 17/02/2010, at 3:57 AM, Phil Shafer wrote: > Bill Marquette writes: >> Is there any way to send email from an op script? > > No, sorry. We do snmp, syslog, or transfer, but not email. My > thoughts were always that email notifications should be done at > a central server to avoid floods. B

[j-nsp] 1GB CF flash in M7i

2010-02-16 Thread TCIS List Acct
Can anyone provide a PN# for a SanDisk or Silicon Image 1GB CF that is confirmed to work in a RE-400 / M7i? --Mike ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] email from commit or op script?

2010-02-16 Thread Phil Shafer
Bill Marquette writes: >Is there any way to send email from an op script? No, sorry. We do snmp, syslog, or transfer, but not email. My thoughts were always that email notifications should be done at a central server to avoid floods. But this is an increasingly common feature request. Thanks,

Re: [j-nsp] L2VPN debugging...

2010-02-16 Thread Hoogen
Hi Dermot, Thank you for the suggestion... I had done it.. but no change... I guess if you see the output from l2vpn connections... It has detected the other site id correctly... also I guess the ctrl status is up... It's just complaining I am assuming about the data plane.. Thanks, Hoogen On Mo

Re: [j-nsp] Juniper Policy based VPN

2010-02-16 Thread George
How about get sa cmd All my other working tunnels are in A/U except this one in A/U and I/U as shown below. Why would be my outgoing SA be Inactive, due to this I cannot tunnel traffic to the specific host. 008d< 192.168.8.8 500 esp:a256/md5 35153af8 3533 unlim A/U 159 0 008d> 192.1

[j-nsp] dscp classifier doesn't work - junos 9.6

2010-02-16 Thread meryem Z
Hello , I have an M7i router with junos 9.6 R3 . Below it's hardware config : Hardware inventory: Item Version Part number Serial number Description ChassisA6156 M7i Midplane REV 05 710-008761 CY8948M7i Midpla

Re: [j-nsp] VRF load balancing between pair of j-MX480 PEs and pair of c-7609 PEs

2010-02-16 Thread Sorilla, Edmar (NSN - AE/Dubai)
Hi Sergio, We already found the issue. The problem lies on the Layer 3 link between MX routers. Because it is a 10G gig link and the link to P is only 1G. The PE routers prefer this link to forward the traffic instead of the link to P router. We modified the OSPF cost of this 10G link to 25 so