Re: [j-nsp] Full table inside VRF - J Series

2010-06-20 Thread Deon Vermeulen
Hi Rolf, Truman is correct. I just found that the J4350 you are referring to (Just so that the forum knows, Rolf and I work for the same company) has 1Gig RAM installed on it but is already 81% Utilized. ...@> show chassis routing-engine Routing Engine status: Temperature

Re: [j-nsp] Full table inside VRF - J Series

2010-06-20 Thread Truman Boyes
Yes you can do this on a J-series. If you can handle the full table in inet.0, you can handle this full table in a VRF. Just make sure you have enough RAM to hold a full table (regardless of the type of routing-instance) ... Truman On 20/06/2010, at 4:53 PM, Rolf Mendelsohn wrote: > Hi All,

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Derick Winkworth
i wonder what the real world performance implications are on an ASIC forwarding platform... We really haven't seen any issues with the way we are doing it. I think I prefer the flexibility for later From: "Richmond, Jeff" To: Addy Mathur Cc: Derick Winkworth

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Richmond, Jeff
I agree. One thing that we do fairly often is create a multifield classifier like this to just accept a couple of values to place into the appropriate forwarding-class, then for a default action reset to BE forwarding-class for all non-matching traffic. This works well in situations where you ma

Re: [j-nsp] EX4200 "Notprsnt" VC members after reboot (filesystem corruption)

2010-06-20 Thread Chuck Anderson
On Sun, Jun 20, 2010 at 04:35:40PM +1000, Dale Shaw wrote: > Has anyone had problems with EX4200s and filesystem corruption > relating to ungraceful power-downs, routine reboots (i.e. for JUNOS > upgrades or whatever), or anything else? Does anyone know of any > tricks to access a switch in this st

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Mark Tinka
On Sunday 20 June 2010 10:55:10 pm Chris Evans wrote: > Agreed I asked juniper for the same thing but got blown > off. You can remark/rewrite on ingress but: - only to 'dscp 0'/'dscp be' - only on some platforms (M320, T-series, MPC MX cards) So it's not quite there. Cheers,

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Chris Evans
Agreed I asked juniper for the same thing but got blown off. Egress remarking rewrites everything not just what I want. On Jun 20, 2010 10:52 AM, "Mark Tinka" wrote: On Sunday 20 June 2010 05:15:45 pm Derick Winkworth wrote: > I > would use a rewrite rule to modif... I still prefer the IOS w

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Mark Tinka
On Sunday 20 June 2010 05:15:45 pm Derick Winkworth wrote: > I > would use a rewrite rule to modify DSCP on egress, so > that its consistent across platforms. I still prefer the IOS way, where TOS byte values are re- written on ingress (I believe we began a small petition for this capability a

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Addy Mathur
I personally think Dale's firewall configuration is better. The config allows for a packet to exit fw filter evaluation once a match condition is met, by being subjected to a single action. Derick's FW filter forces a packet to traverse all terms regardless of a match, and is subjected to at leas

[j-nsp] Recommended sampling rates on MS-500 pic

2010-06-20 Thread tim tiriche
Hello, I would like to know what is the recommended sampling rates to use on a network and what can the juniper support. In addition, what factors determine what sampling rate to use. Thanks you! --tim ___ juniper-nsp mailing list juniper-nsp@puck.neth

Re: [j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Derick Winkworth
This is probably better: term BEST-EFFORT thenforwarding-class best-effort next-term term DSCP-EF fromdscp ef thenforwarding-class expedited-forwarding next-term term default-accept thenaccept You can insert additional terms later to modify loss-priority, sampling, etc... after the classificati

[j-nsp] Setting forwarding-class in firewall filter, non-match behaviour

2010-06-20 Thread Dale Shaw
Hi all, Re: setting the forwarding-class of a packet through a firewall filter. Many (almost all) of the examples I've looked at do not include a catch-all term to handle packets not matched by any explicitly-defined terms. At the risk of exposing myself as a J-noob... Is it safe to assume that,