Re: [j-nsp] What's the latest code you're running on a mx?

2010-04-30 Thread Amjad Barakat
I am using 10.1R1.8 and it's been very stable but using it primarily for L2-bridging on none 3D Trio hardware. -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Derick Winkworth Sent: Friday, April 30, 2010 5:15 PM To:

Re: [j-nsp] What's the latest code you're running on a mx?

2010-04-30 Thread Derick Winkworth
Ahh, so 10.1 is needed then for the MX80 I'm guessing... We'll be testing those soon in a POC where they will run VPLS, RSVP, COS, BGP, and L3VPNs... From: Richard A Steenbergen To: Bj?rn Tore Cc: "juniper-nsp@puck.nether.net" Sent: Fri, April 30, 2010 3

Re: [j-nsp] What's the latest code you're running on a mx?

2010-04-30 Thread Richard A Steenbergen
On Fri, Apr 30, 2010 at 09:55:23AM +0200, Bj?rn Tore wrote: > We're running 10.0R2.10 on MX. Works quite well. We just tested 10.0R3 on MX and it was a giant hot steaming mess. Among other problems, they broke "| last" in cli, isis overload timeout no longer functions (would never time out, stayed

Re: [j-nsp] ex-series and RSPAN ?

2010-04-30 Thread Thomas Burnett
I have in configured remote span to work across a lag (junos 9.3) The important thing to remember is the output vlan can only egress the switch on one logical port. If you allow all vlan on a trunk, the span vlan is now trying to egress on two logical ports. ae5 { description "SW1

[j-nsp] Load Balancing of vlan-ccc

2010-04-30 Thread Alexander Koch
Gentlefolk, it is a long time I had to think or worry about this kind of thing. I am familiar with l2circuits, and the fact that engineering them is a bit painful I clearly remember. I also know 'protocol connections' and like that approach as well as you need the added control sometimes. I am c

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Derick Winkworth
Can you share a sanitized config? From: Nick Ryce To: "juniper-nsp@puck.nether.net" Sent: Fri, April 30, 2010 4:08:21 AM Subject: [j-nsp] Juniper IPSEC VPN Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an 1812 where t

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Chris Evans
I haven't worked on then series at ll but I believe it is a full software based processing router. The CPU is stony enough to handle the ipsec tunnel count but that doesn't mean it can push the throughput. On Apr 30, 2010 7:21 AM, "Nick Ryce" wrote: Spec sheets say it should be able to hand a c

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Just found JXH-HC2-S Might give that a try but its an expensive 'punt' Nick From: Chris Evans [mailto:chrisccnpsp...@gmail.com] Sent: 30 April 2010 12:13 To: Nick Ryce Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Juniper IPSEC VPN The asa has a hardware encryption engine in it. I don't

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Spec sheets say it should be able to hand a couple of hundred vpn tunnels so not sure if that would be? Is there a hardware encryption module for the junipers? Nick From: Chris Evans [mailto:chrisccnpsp...@gmail.com] Sent: 30 April 2010 12:13 To: Nick Ryce Cc: juniper-nsp@puck.nether.net Subje

Re: [j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Chris Evans
The asa has a hardware encryption engine in it. I don't believe that the j series router has one. That is the root of your problem I would say. On Apr 30, 2010 5:13 AM, "Nick Ryce" wrote: Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an 1812 where the ipsec

[j-nsp] Juniper IPSEC VPN

2010-04-30 Thread Nick Ryce
Is there a default speed that a juniper ipec tunnel runs at? We have an asa5510 and an 1812 where the ipsec tunnel was running near full speed on a 10 meg link. We swapped the 1812 with a 2320 running 9.6R2.8 and we are seeing lost packets and slow throughput. The tunnel does not drop once es

Re: [j-nsp] What's the latest code you're running on a mx?

2010-04-30 Thread Bjørn Tore
OBrien, Will skrev: Anyone using any 10. Code yet? I get to annoy my juniper reps later so input is appreciated. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp We're running 10.0R2.10 o