Re: [j-nsp] Traceroute for ECMP destinations

2010-09-07 Thread Richard A Steenbergen
On Wed, Sep 08, 2010 at 03:03:03PM +1200, Thedin Guruge wrote: > Hi, > > I'm wondering if it's possible to view all possible paths for an ECMP > destination from "traceroute" or "traceroute mpls ldp" > commands?default behavior seem to select one path arbitrarily. The default behavior of classi

[j-nsp] sub-interface polling

2010-09-07 Thread Yagnesh Kishor Dave
Hi Everybody, I have seen a problem with MRTG polling. When I poll the interface I get the traffic stats properly but at the same time I don't see any traffic for the sub interfaces under the main interface. Does anyone know how to get the sub-interface traffic stats on the MRTG? Regards, Yagn

[j-nsp] Traceroute for ECMP destinations

2010-09-07 Thread Thedin Guruge
Hi, I'm wondering if it's possible to view all possible paths for an ECMP destination from "traceroute" or "traceroute mpls ldp" commands?default behavior seem to select one path arbitrarily. Thanks Thedin ___ juniper-nsp mailing list juniper-nsp@puck.

[j-nsp] poor Performace of C20000 redirect server

2010-09-07 Thread Joe Shen
hi, we use Juniper C2000 to provide captive portal for wlan access. in past months, the service speed of redirect server on C2k degrade a lot. Usually, client pc has to wait one minute or more to see redirect page. On C2k it seems some requests are rejected. ad...@c2k-1> show redirect-server

Re: [j-nsp] Screening logs on SRX

2010-09-07 Thread Crist Clark
Which will show up in the NSM logs as a semi-useless "Self log" like PFE_FW_SYSLOG_IP messages or actually be parsed? On 9/7/2010 at 4:45 PM, Ben Dale wrote: > You aren't the only ones! > > Fortunately the "screen logs" feature is being introduced in JUNOS 10.4 > which will log when a screen

Re: [j-nsp] Screening logs on SRX

2010-09-07 Thread Ben Dale
You aren't the only ones! Fortunately the "screen logs" feature is being introduced in JUNOS 10.4 which will log when a screen threshold is reached: Sep 8 09:43:31 rtlogd: receives log RT_SCREEN_TCP from RT_IDS at severity 3, miscellaneous string=Port scan! source: 172.16.10.23:54326, destina

Re: [j-nsp] 10.3 on MX960 with MPC only?

2010-09-07 Thread bas
Hello Gerhard, On Tue, Sep 7, 2010 at 11:26 AM, Prochaska Gerhard wrote: > I was at the Juniper LAB in Amsterdam last week for a POC LAB on MPC2 (2 MIC > with 4x10G) and 16x10G MPC on Junos > 10.2p2. I asked the same question and wanted to know why we do the POC LAB on > 10.2 and not the alread

[j-nsp] GRE over IPSec VPN between SRX and Cisco Router

2010-09-07 Thread Muhammad Atif Jauhar
Hi, I need to establish GRE over IPSec between SRX and Cisco Router in my Lab, kindly suggest configuration for both devices. Kindly find attached LAB Topology. I need Communication between 192.168.1.0/24 and 172.16.10.0/24, 172.16.20.0/24. -- Regards, Atif __

Re: [j-nsp] Screening logs on SRX

2010-09-07 Thread Jérôme Fleury
Hi Fahad, that's a good question. I've been searching for a long time, and could not find neither... I'm not even able to see them on my STRM, which defeats completely the purpose of this appliance. On Tue, Sep 7, 2010 at 12:02, Fahad Khan wrote: > Hi Folks, > > Can some body tell me that how ca

Re: [j-nsp] remote ssh command to an EX series switch

2010-09-07 Thread Phil Shafer
>Le Monday 06 September 2010 17:32:43 Jens Rosenboom, vous avez =E9crit=A0: >> Note the double "ssh-rsa", once for the key type, the second as part of the >> public key string itself. The key is that whatever value you put as the ssh-rsa or ssh-dsa statement will be written directly to the .ssh/au

Re: [j-nsp] remote ssh command to an EX series switch

2010-09-07 Thread Phil Shafer
Emmanuel Halbwachs writes: >unixbox$ cat opmode-commands | ssh router >unixbox$ cat confmode-commands | ssh router You can also do this with semi-colons: ssh router "show foo; show bar ; show baz" ssh router "configure ; set system host-name foo; commit" Thanks, Phil _

Re: [j-nsp] Inter-Area MPLS TE

2010-09-07 Thread Patrick Okui
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 7 Sep, 2010, at 3:01 PM, Eric Van Tol wrote: My question was more about going from one ISIS area to another (say, 49.0001 to 49.0002), but this information could help me out as well. LSPs in ISIS are limited in flooding scope by Level not by

Re: [j-nsp] Inter-Area MPLS TE

2010-09-07 Thread Mark Tinka
On Tuesday, September 07, 2010 08:01:36 pm Eric Van Tol wrote: > My question was more about going from one ISIS area to > another (say, 49.0001 to 49.0002), but this information > could help me out as well. Right, but what I was asking was whether you were going to be setting up the tunnels bet

Re: [j-nsp] remote ssh command to an EX series switch

2010-09-07 Thread Emmanuel Halbwachs
Hello, Just in case I'm not the only ignorant fool... Emmanuel Halbwachs a écrit (Mon, Sep 06, 2010 at 05:33:13PM +0200) : > Generally speaking, I think rancid's [1] jlogin is what you're looking > for to run arbitrary commands remotely, e.g. > > jlogin -c "sh arp" myrouter I just discovered

Re: [j-nsp] Inter-Area MPLS TE

2010-09-07 Thread Eric Van Tol
> -Original Message- > From: Mark Tinka [mailto:mti...@globaltransit.net] > Sent: Sunday, September 05, 2010 12:54 AM > To: juniper-nsp@puck.nether.net > Cc: Eric Van Tol > Subject: Re: [j-nsp] Inter-Area MPLS TE > > > Are you trying to setup TE tunnels between different levels > across a

Re: [j-nsp] remote ssh command to an EX series switch

2010-09-07 Thread Laurent HENRY
Le Monday 06 September 2010 17:32:43 Jens Rosenboom, vous avez écrit : > On Mon, Sep 06, 2010 at 04:04:33PM +0200, Laurent HENRY wrote: > ... > > > Is someone know a good doc pointer helping me how to configure ssh keys > > to launch remote command from or to an EX ? > > You can attach your public

[j-nsp] Screening logs on SRX

2010-09-07 Thread Fahad Khan
Hi Folks, Can some body tell me that how can I see the logs of the attack packets generated by some source for let say "port scan", "IP spoof" etc Thanks in adv, regards, Muhammad Fahad Khan JNCIP - M/T # 834 IT Specialist Global Technology Services, IBM fa...@pk.ibm.com +92-301-8247638 Skype:

Re: [j-nsp] 10.3 on MX960 with MPC only?

2010-09-07 Thread Prochaska Gerhard
Hi Bas ! I was at the Juniper LAB in Amsterdam last week for a POC LAB on MPC2 (2 MIC with 4x10G) and 16x10G MPC on Junos 10.2p2. I asked the same question and wanted to know why we do the POC LAB on 10.2 and not the already released 10.3. From what i understood there are no relevant bugfixes w