Re: [j-nsp] LAG load balance hash algorithm on EX4200

2010-08-18 Thread Felix Schueren
Charlie, what L2 load balancing hashing is done on the EX 4200 series? There is no forwarding-options hash-key configuration statement. I have two interfaces, ae0 and ae1 that run BGP in a 2 member VC stack. Behind the VC stack is a row of PCs with their own LAG aeX's. Will ae0 and

[j-nsp] mirror-flash-on-disk on M320 routers with JUNOS 9.5R3

2010-08-18 Thread Muruganandham M
Dear All, Today i configured '*mirror-flash-on-disk*' on 2 M320 routers and i rebooted the routing engines in order for the configuration to take effect. But it didnt take effect. But when i did the same thing in the MX routers it worked fine. JUNOS: 9.5R3.7 Is there any known

Re: [j-nsp] LAG load balance hash algorithm on EX4200

2010-08-18 Thread Charlie Allom
On Wed, Aug 18, 2010 at 11:11:35AM +0200, Felix Schueren felix.schue...@hosteurope.de wrote: I don't quite understand your config. You have different BGP neighbours on ae0 and ae1 in a virtual chassis, that is, you have layer3 connections on these interfaces? Please elaborate, maybe add a

Re: [j-nsp] One or more stream blocked

2010-08-18 Thread Tarique A. Nalkhande - BMC
Ross, As aware, in the MX DPC there is a chip called the IChip (this is where all the data forwarding take place). Earlier there were some cases where IChip was dropping the packets. To recover the chip from the 'wedge' state Juniper implemented a self-healing mechanism as a response to PR

[j-nsp] IPSEC VPN Issues on SRX3600

2010-08-18 Thread Fahad Khan
Dear Folks, I am running various IPSEC VPN tunnels on SRX, but seeing a strange behavior with 1 or 2 tunnels suddenly, that is the tunnel remains up, but traffic stops passing. has any one experienced this ever?? please share regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global

Re: [j-nsp] IPSEC VPN Issues on SRX3600

2010-08-18 Thread Tim Eberhard
Muhammad, When asking for help it would be worth while to give as much information as possible. What type of tunnel? What is the far end of the VPN? What code version? Have to searched the PR's for this type of issue? I will say if it's pre 10.0 I have seen *lots* of ipsec issues and behaviors

[j-nsp] Flow accounting on an M7i

2010-08-18 Thread Andy M.
I'm trying to enable flow accounting on one of our M7is. JunOS version is 9.1R8. No matter what I do, I can't get a flow to export. I'd appreciate any input to obvious errors, or tips on other things to try. I've also tried removing sampling from the interface and doing it with a

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Stefan Fouant
-Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of Andy M. Sent: Wednesday, August 18, 2010 11:43 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Flow accounting on an M7i I'm trying to enable flow accounting

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Andy M.
I do, I meant to include that. a...@er01 show ntp status status=0644 leap_none, sync_ntp, 4 events, event_peer/strat_chg, version=ntpd 4.2.0-a Fri Apr 25 07:34:52 UTC 2008 (1), processor=i386, system=JUNOS9.1R1.8, leap=00, stratum=2, precision=-19, rootdelay=46.515, rootdispersion=14.961,

Re: [j-nsp] JUNOS OID

2010-08-18 Thread Jonathan Lassoff
On Wed, Aug 18, 2010 at 12:06 AM, Bjørn Tore b...@paulen.net wrote: You'll find it under   jnxOperatingBuffer,  1.3.6.1.4.1.2636.3.1.13.1.11 And you can find which index to use under that tree (in case you want to monitor PICs or multiple RE's) by examining the contents of jnxOperatingDescr (

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread sthaug
I'm trying to enable flow accounting on one of our M7is. JunOS version is 9.1R8. No matter what I do, I can't get a flow to export. I'd appreciate any input to obvious errors, or tips on other things to try. I've also tried removing sampling from the interface and doing it with a

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Nathan Sipes
Did you set the services for the card under the chassis section.. fpc 1 { pic 2 { adaptive-services { service-package layer-3; } } On Wed, Aug 18, 2010 at 12:32 PM, Andy M. a...@ctdam.com wrote: I do, I meant to include that. a...@er01 show ntp status

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Andy M.
I tried both layer-3 and layer-2-3 with no effect. I also manually took the PIC offline and brought it back up. -Andy On Aug 18, 2010, at 2:49 PM, Nathan Sipes wrote: Did you set the services for the card under the chassis section.. fpc 1 { pic 2 { adaptive-services {

Re: [j-nsp] IPSEC VPN Issues on SRX3600

2010-08-18 Thread Fahad Khan
Its SRX3600 running in cluster, with Junos version 10.0R3.10 (recommended one), route based VPN tunnel, remote end device is SSG140 Thanks and regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global Technology Services, IBM fa...@pk.ibm.com +92-301-8247638 Skype: fahad-ibm

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Nilesh Khambal
Is there any logical unit created under sp- interface? You seem to have defined only physical interface without any logical unit to go with under forwarding-output. -Original Message- From: Andy M. [a...@ctdam.com] Received: 18/08/2010 12:40 To: Nathan Sipes [nathan.si...@gmail.com]

Re: [j-nsp] IPSEC VPN Issues on SRX3600

2010-08-18 Thread OBrien, Will
I've seen it with monitoring and st interfaces inside vrs - routing instances that is. Will O'Brien On Aug 18, 2010, at 10:35 AM, Fahad Khan fahad.k...@gmail.com wrote: Dear Folks, I am running various IPSEC VPN tunnels on SRX, but seeing a strange behavior with 1 or 2 tunnels suddenly,

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Doan Nguyen
Starting JUNOS a requirement for cflowd to work is to configure NTP as Stefan pointed out a few emails earlier. --- On Wed, 8/18/10, sth...@nethelp.no sth...@nethelp.no wrote: From: sth...@nethelp.no sth...@nethelp.no Subject: Re: [j-nsp] Flow accounting on an M7i To: a...@ctdam.com Cc: