Re: [j-nsp] no family inet6 for vlan.*-interfaces on 10.1R2.8?

2010-05-26 Thread Thomas Eichhorn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Volker, on what kind of device? teichh...@testbox.fra# set interfaces vlan.333 family ? Possible completions: + apply-groups Groups from which to inherit configuration data + apply-groups-except Don't inherit configuration data from

Re: [j-nsp] no family inet6 for vlan.*-interfaces on 10.1R2.8?

2010-05-26 Thread Volker D. Pallas
Oh yes, I forgot to mention. It's an SRX-100. I downgraded the box to 10.1R1.8 yesterday and now I have my family inet6 back :-) weird issue! Volker On 05/26/2010 09:20 AM, Thomas Eichhorn wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Volker, on what kind of device?

Re: [j-nsp] no family inet6 for vlan.*-interfaces on 10.1R2.8?

2010-05-26 Thread Menno Kortekaas
Maybe this is because ipv6 works in packet mode, but not really on a vlan interface... I've also placed an IPv6 address on my vlan interface and it is reachable through a family inet interface, but not through a family ethernet-switching interface. I think because something is not really

[j-nsp] IDP8200 Issue -

2010-05-26 Thread Fahad Khan
Dear Folks, I am just shocked to know that IDP8200 does not support Peer Port Modulation for 10 gig links. Does any one know, how can I failover my Firewall properly if the link between Core Switch and IDP is down the diagram is SRX3600---HA---SRX3600 |

Re: [j-nsp] IDP8200 Issue -

2010-05-26 Thread Tim Eberhard
You could always run trackip on the SRX to monitor the path to the switch. Pinging a L3 interface on the core switch itself. Hope this helps -Tim Eberhard On May 26, 2010, at 6:27 AM, Fahad Khan fahad.k...@gmail.com wrote: Dear Folks, I am just shocked to know that IDP8200 does not

Re: [j-nsp] IDP8200 Issue -

2010-05-26 Thread Scott T. Cameron
set chassis cluster redundancy-group # ip-monitoring As with all things, YMMV. On Wed, May 26, 2010 at 7:40 AM, Tim Eberhard xmi...@gmail.com wrote: You could always run trackip on the SRX to monitor the path to the switch. Pinging a L3 interface on the core switch itself. Hope this helps

Re: [j-nsp] IDP8200 Issue -

2010-05-26 Thread Fahad Khan
Ah! great... IP monitoring will work, I ll test it and see.. Thanks Scott. Tim, can you explain how can we do Track-IP on SRX?? or u meant the same thing as scott?? regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global Technology Services, IBM fa...@pk.ibm.com +92-321-2370510

[j-nsp] IDP in single leg

2010-05-26 Thread Fahad Khan
Dear Folks, Can I deploy IDP in single Leg even if I want to use it in inline mode?? Is there any kind of VLAN pairing? Any IDP master guy can help me in IDP design in my network awaiting for reply Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global Technology Services, IBM

[j-nsp] NSR with SRX

2010-05-26 Thread Fahad Khan
Dear Folks, Has any one used Netscreen Remote Client for dialup VPN with SRX device?? I have seen in release notes of 10.1 that SRX does not support NSR. But in security guide, NSR is a dedicated chapter please respond quickly regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist

Re: [j-nsp] IDP8200 Issue -

2010-05-26 Thread Tim Eberhard
IP monitoring is only available at this time on the high end series SRX's. It might be in the 3600 depending on the code version. I would test and see. IP monitoring is track-ip for Junos. If IP monitoring is not available on your platform or code version there are event scripts that mimic the

Re: [j-nsp] no family inet6 for vlan.*-interfaces on 10.1R2.8?

2010-05-26 Thread Johan Borch
On Wed, May 26, 2010 at 11:55 AM, Menno Kortekaas m.kortek...@dataman.nlwrote: Maybe this is because ipv6 works in packet mode, but not really on a vlan interface... I've also placed an IPv6 address on my vlan interface and it is reachable through a family inet interface, but not through a

[j-nsp] What is the XRE200?

2010-05-26 Thread matthew zeier
I noticed this http://www.juniper.net/us/en/products-services/switching/ex-series/options/xre200/ on Juniper's site. Looks new but I'm having a hard time understanding what it does. It mentions EX8200-based Virtual Chassis configurations - does that mean I can finally get VC on the 8200

Re: [j-nsp] What is the XRE200?

2010-05-26 Thread Chris Evans
I haven't looked at the link yet but this is probably the external routing engine for the ex8200 virtual chassis. Much like the tx matrix concept. Chris On May 26, 2010 11:46 AM, matthew zeier mze...@gmail.com wrote: I noticed this

Re: [j-nsp] What is the XRE200?

2010-05-26 Thread Paul Stewart
I noticed that kind of popped up last week - it sounds like you could VC several EX8200's together if I'm understanding it correctly not too clear on that though... Paul -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On

Re: [j-nsp] What is the XRE200?

2010-05-26 Thread matthew zeier
On May 26, 2010, at 8:48 AM, Paul Stewart wrote: I noticed that kind of popped up last week - it sounds like you could VC several EX8200's together if I'm understanding it correctly not too clear on that though... The PDF there gives more insight - looks like you can create up to a

Re: [j-nsp] What is the XRE200?

2010-05-26 Thread Mark Tinka
On Wednesday 26 May 2010 11:38:09 pm matthew zeier wrote: I noticed this http://www.juniper.net/us/en/products-services/switching/ ex-series/options/xre200/ on Juniper's site. Looks new but I'm having a hard time understanding what it does. It mentions EX8200-based Virtual Chassis

Re: [j-nsp] What is the XRE200?

2010-05-26 Thread magno
This is the external control plane device needed to run the virtual chassis configuration on EX8200. Max On Wed, May 26, 2010 at 6:00 PM, Mark Tinka mti...@globaltransit.netwrote: On Wednesday 26 May 2010 11:38:09 pm matthew zeier wrote: I noticed this

[j-nsp] Changing the aging-timer from default of 20 to 240

2010-05-26 Thread Jim Lucas
I have a Juniper M20 running older JunOS 7.5.x I want to change the aging-timer on our arp cache. Should I expect any drop in communication with any connections to or from the router? TIA -- Jim Lucas A: Maybe because some people are too annoyed by top-posting. Q: Why do I not get an answer