Re: [j-nsp] Netscreen 5400 per-UDP-port bandwidth cap?

2010-03-05 Thread Alex
Phil, Do you have UDP flood screen enabled? If yes what is the threshold and UDP packet size you are using? What you descibe below is very similar to how UDP (and ICMP) flood screen operates. Rgds Alex - Original Message - From: Phil Mayers p.may...@imperial.ac.uk To:

Re: [j-nsp] Netscreen 5400 per-UDP-port bandwidth cap?

2010-03-05 Thread Phil Mayers
On 03/05/2010 10:10 AM, Alex wrote: Phil, Do you have UDP flood screen enabled? If yes what is the threshold and UDP packet size you are using? Not on the zones through which the traffic is flowing (Untrust Trust) according to the CLI webUI: set zone Untrust screen tear-drop set zone

Re: [j-nsp] Netscreen 5400 per-UDP-port bandwidth cap?

2010-03-05 Thread Phil Mayers
On 03/05/2010 10:15 AM, Phil Mayers wrote: Damn... wait a minute. I recall something about screen options and vlan sub-ints, in the release notes. Hmm. Blast. Yes - it was the UDP screen. Even though it's applied on a zone bound to a sub-int, evidently it works on a per-physical-interface

Re: [j-nsp] Netscreen 5400 per-UDP-port bandwidth cap?

2010-03-05 Thread Phil Mayers
On 03/05/2010 10:17 AM, Phil Mayers wrote: On 03/05/2010 10:15 AM, Phil Mayers wrote: Damn... wait a minute. I recall something about screen options and vlan sub-ints, in the release notes. Hmm. Blast. Yes - it was the UDP screen. Even though it's applied on a zone bound to a sub-int,

Re: [j-nsp] EX-series automation, NETCONF woes

2010-03-05 Thread Alexandre Snarskii
On Wed, Jan 28, 2009 at 03:40:10PM -0500, Ross Vandegrift wrote: On Wed, Jan 28, 2009 at 11:17:11AM -0800, Derick Winkworth wrote: xpath notation can help you find junos-interface:interfaces no matter where its located. Can you do that without providing a map that maps the abbreviated

Re: [j-nsp] EX-series automation, NETCONF woes

2010-03-05 Thread Ross Vandegrift
On Fri, Mar 05, 2010 at 02:26:59PM +0300, Alexandre Snarskii wrote: On Wed, Jan 28, 2009 at 03:40:10PM -0500, Ross Vandegrift wrote: Can you do that without providing a map that maps the abbreviated namespace back to the fully-qualified namespace? If so, I'd love to know how. Just run