[j-nsp] ISIS (ref-bw & L1 metric)

2010-05-25 Thread Jking T
Hi Experts, I have couple of queries on IS-IS 1) Just wondering what reference-bandwidth value in "show isis overview" indicates?? We have set reference-bandwidth as 1000g for ISIS. (We dont see this output with routers not having reference-bandwidth command) l...@mumbdst1> show isis overvi

Re: [j-nsp] Auto-bandwidth Accuracy

2010-05-25 Thread Richard A Steenbergen
On Tue, May 25, 2010 at 03:23:51PM -0400, Olson, Martin wrote: > Yeah, I found the same behavior. Sometimes the Max AvgBW would go up > by 5X-7X the value it should've, which would lead to really high > reservations after the next adjust-interval. I opened case > 2009-0610-0697 about the issue, a

[j-nsp] no family inet6 for vlan.*-interfaces on 10.1R2.8?

2010-05-25 Thread Volker D. Pallas
Hi, I just realized that there seems to be no "family inet6" anymore for vlan-interfaces since upgrading to junos 10.1R2.8. Fortunately my old config is still active and working, but I cannot modify it: # show interfaces vlan unit 10 family inet { address 172.23.5.1/25; } family inet6 {

Re: [j-nsp] Auto-bandwidth Accuracy

2010-05-25 Thread Olson, Martin
Yeah, I can't view that PR either, and it was our JTAC case that triggered it to be opened. I don't remember all the details of the trigger mechanism. Can anybody get Juniper to make the PR public? -MO -Original Message- From: Phil Bedard [mailto:phil...@gmail.com] Sent: Tuesday, May

Re: [j-nsp] l2circuit communities

2010-05-25 Thread Phil Bedard
On May 25, 2010, at 3:21 AM, Richard A Steenbergen wrote: > On Mon, May 24, 2010 at 07:46:17PM -0400, Phil Bedard wrote: >> A little different scenario but I'm using CBF with a cos next-hop-map >> to set specific lsp-next-hops for CoS classes, also using autobw, and >> I'm not seeing similar beha

Re: [j-nsp] Auto-bandwidth Accuracy

2010-05-25 Thread Phil Bedard
Do you have the detail on PR 457767, it doesn't seem to show up in the system. I tried to duplicate 438157 and could never successfully do so. Thanks, Phil On May 25, 2010, at 3:23 PM, Olson, Martin wrote: > Yeah, I found the same behavior. Sometimes the Max AvgBW would go up by > 5X-7

Re: [j-nsp] Auto-bandwidth Accuracy

2010-05-25 Thread Olson, Martin
Yeah, I found the same behavior. Sometimes the Max AvgBW would go up by 5X-7X the value it should've, which would lead to really high reservations after the next adjust-interval. I opened case 2009-0610-0697 about the issue, and after a while they traced the problem to PRs 438157 and 457767.

Re: [j-nsp] WebVPN Problem / SRX

2010-05-25 Thread Paul Stewart
Thanks - yes, there is a policy almost identical to that.. Missed posting that, sorry. I think the problem has been discovered already though - it appears that XAuth requires Radius and there is no way around it that I've been able to find. Due to the low volume of users on this box we wanted

Re: [j-nsp] WebVPN Problem / SRX

2010-05-25 Thread Tim Jackson
Do you have a policy in place like: security { policies { from-zone untrust to-zone trust { policy leo-vpn { match { source-address any; destination-address any; application any; } then { permit { tunnel { ipsec-vpn leo;

Re: [j-nsp] What's the latest code you're running on a mx?

2010-05-25 Thread Serge Vautour
Hello, I for one am happy to hear this. We're very close to deploying a new MPLS network all on MX960s. We did heavy testing on 10.0R2 earlier this year. Our lab gear has all been updated to 10.0R3 and so far everything seems to work. We're running: -IGP: OSPF (1 area 0, no TED) with OSPF LFA

[j-nsp] WebVPN Problem / SRX

2010-05-25 Thread Paul Stewart
Anyone on here setup WebVPN on Juniper SRX? I've had a JTAC ticket running for quite a while and they haven't been able to figure out why we can't connect. according to the logs the username is getting authenticated and then the session drops for some reason.. I'm about 6-7 hours on the phone wit

Re: [j-nsp] What's the latest code you're running on a mx?

2010-05-25 Thread David Ball
Just a followup on this thread. I've been testing 10.0R3.10 in the lab with MX240, 480 and T640 and have had (somewhat surprisingly) good results. L2VPN, L2ckt, BGP-signalled VPLS (all w/QoS), L3VPN, LDP & RSVP w/FRR (haven't tested much TE yet, mind you), even dabbled in loop-free alternates (

[j-nsp] ISIS Queries (ref-bw & L1 metric)

2010-05-25 Thread Jking T
Hi Experts, I have couple of queries on IS-IS 1) Just wondering what reference-bandwidth value in "show isis overview" indicates?? We have set reference-bandwidth as 1000g for ISIS. (We dont see this output with routers not having reference-bandwidth command) l...@mumbdst1> show isis overview

[j-nsp] Strange Link down problems on M-series

2010-05-25 Thread Joerg Staedele
Hi, i currently don't have any more ideas on a really strange problem: Router A is connected to Router B via a Colt Gigabit-Ethernet Link. The Link is on a dark fiber and only two ADVA converters are installed. The link was working for nearly two years now and suddenly we have big problems. Ro

Re: [j-nsp] Encrypt GRE tunnel with ipsec

2010-05-25 Thread Nick Ryce
Hi Ben, Its 9.6 im using which I believe ES was rolled into this. I will look at the docs provided :) Sounds like exactly what I require. Nick -Original Message- From: Ben Dale [mailto:bd...@comlinx.com.au] Sent: 25 May 2010 12:03 To: Nick Ryce Cc: Jonathan Looney; J NSP Subject: Re:

Re: [j-nsp] EX-4200 Firewall Filter Placement

2010-05-25 Thread Emil Katzarski
Hi, Placing the firewall filter at the L3 interface will not affect any traffic traversing the switch! As I understand there is only one VLAN and only one L3 interface. That means that there is no L3 routing for user traffic. All user traffic is forwarded via Ethernet switching. Only traffic for t

Re: [j-nsp] Encrypt GRE tunnel with ipsec

2010-05-25 Thread Ben Dale
Hi Nick, > Im using a J6350. > > All im trying to to is create a secure tunnel between 2 juniper routers and > route traffic down the tunnel without having to specify what specific source > destination ranges to encrypt. Ie if a packet is destined to go down the > tunnel then encrypt. I'll a

Re: [j-nsp] Auto-bandwidth Accuracy

2010-05-25 Thread Danny Vernals
On Sun, May 23, 2010 at 7:52 AM, Richard A Steenbergen wrote: > Recently I've been noticing some really odd auto-bandwidth behavior on > several different routers, and I'm wondering if anybody knows if this is > a known bug or if I'm doing something really wrong in my autobw config. > > Specifica

Re: [j-nsp] l2circuit communities

2010-05-25 Thread Richard A Steenbergen
On Mon, May 24, 2010 at 07:46:17PM -0400, Phil Bedard wrote: > A little different scenario but I'm using CBF with a cos next-hop-map > to set specific lsp-next-hops for CoS classes, also using autobw, and > I'm not seeing similar behavior. > > One thing I noticed is while the router is doing the