[j-nsp] BGP Blackhole communities

2010-10-20 Thread Nick Ryce
Hi Guys, I am starting to play with BGP and have set up some communities to separate customer, peer and transit routes. I am trying to figure out how to allow customers to send me a blackhole community number and then blackhole this. Does anyone have any examples? I have set up most of my

[j-nsp] SRX650 10GbE Interfaces

2010-10-20 Thread Skeeve Stevens
Hey all, On the Juniper product page for the SRX650 under interfaces it lists: 2 x 10 GbE SFP+ / 10 GbE Base-T Copper I've found some obscure references to the PIM - code SRX-GP-2XE-SFPP-TX Which seems to suggest you get 2 * SFP+ and 2 * 10GBase-T. That is a little odd. Has anyone used

Re: [j-nsp] SRX650 10GbE Interfaces

2010-10-20 Thread Julien Goodwin
On 20/10/10 23:20, Skeeve Stevens wrote: Hey all, On the Juniper product page for the SRX650 under interfaces it lists: 2 x 10 GbE SFP+ / 10 GbE Base-T Copper I've found some obscure references to the PIM - code SRX-GP-2XE-SFPP-TX Which seems to suggest you get 2 * SFP+ and 2 *

Re: [j-nsp] SRX650 10GbE Interfaces

2010-10-20 Thread Joel Jaeggli
10g-base-t phy draws to much power to go in an sfp+ port. Probably looks like dual personality port on a switch, but no, haven't seen one. Joel's widget number 2 On Oct 20, 2010, at 5:20, Skeeve Stevens ske...@eintellego.net wrote: Hey all, On the Juniper product page for the SRX650 under

Re: [j-nsp] Problem of Forwarding on VPN using vrf-table-label.

2010-10-20 Thread Ger, Javier
Hello Harry, Thank you for your valuable help. Your reply covers most of the questions I had related to this topic. Could you possibly give me a feedback about why when the vrf-table-label is not configured the only direct routes (on multi-access) that are advertised are those having an

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread chip
On Wed, Oct 20, 2010 at 7:46 AM, Nick Ryce nick.r...@lumison.net wrote: Hi Guys, I am starting to play with BGP and have set up some communities to separate customer, peer and transit routes. I am trying to figure out how to allow customers to send me a blackhole community number and then

[j-nsp] Interconection of Logical Systems or Routing Instances

2010-10-20 Thread Giuliano Cardozo Medalha
People, We have a M7i with built in Tunnel interface - 800 Mbps. We need to create a logical interface to interconnect the default logical system and a created one ... called R1. Router# set logical-systems R1 We need to establish a BGP connection between the two logical systems using

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread David Ball
There use to be a great page up at www.secsup.org that provided examples of exactly this, but I can't seem to load the page anymore. Anyhow, for your customer, they could add a static route on their router for the block they want to null route, and 'tag' it with, say, 666 (using the 'tag'

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Nick Ryce
Thanks for all the replies and help :) Nick -Original Message- From: Jonas Frey (Probe Networks) [mailto:j...@probe-networks.de] Sent: 20 October 2010 16:03 To: Nick Ryce Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] BGP Blackhole communities Hi, its easy: - you need multihop

Re: [j-nsp] Interconection of Logical Systems or Routing Instances

2010-10-20 Thread Giuliano Cardozo Medalha
Thanks a lot Dave. It works for me. Hi, You could do this... set logical-systems R1 interfaces lt-1/2/0 unit 1 encapsulation ethernet set logical-systems R1 interfaces lt-1/2/0 unit 1 peer-unit 2 set logical-systems R1 interfaces lt-1/2/0 unit 1 family inet address 100.100.100.1/24 and

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Jonas Frey (Probe Networks)
Hi, its easy: - you need multihop on internal bgp sessions - configure dsc: unit 0 { family inet { address 10.10.20.1/32 { destination 10.10.20.2; } } } Add policy for blackhole filter: # show policy-options policy-statement blackholefilter term black {

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Chris Morrow
On 10/20/10 10:45, David Ball wrote: There use to be a great page up at www.secsup.org that provided examples of exactly this, but I can't seem to load the page anymore. former co-worker shutdown the server i think :( boo. I have a rough copy:

Re: [j-nsp] Problem of Forwarding on VPN using vrf-table-label.

2010-10-20 Thread Harry Reynolds
If I follow, by learning a route from the ce whether by static, ospf, bgp, etc, the PE is able to bind that route to the CE next-hop. IIRC, by learning at least one such a route the direct can be advertised when using vrf-target. Note that in the event of a ping (coming in as mpls from the

Re: [j-nsp] Interconection of Logical Systems or Routing Instances

2010-10-20 Thread Dave Curado
Hi, You could do this... set logical-systems R1 interfaces lt-1/2/0 unit 1 encapsulation ethernet set logical-systems R1 interfaces lt-1/2/0 unit 1 peer-unit 2 set logical-systems R1 interfaces lt-1/2/0 unit 1 family inet address 100.100.100.1/24 and then set logical-systems R2 interfaces

[j-nsp] MX240 Fabric Errors

2010-10-20 Thread David DeSimone
I'm trying to understand more about Juniper MX architecture, in response to a failure we recently saw. The event starts with an RE panic, which caused a failure over to the redundant RE. JTAC noticed some fabric errors showing up, and concluded that a failing FPC had caused the RE to panic, and

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Richard A Steenbergen
On Wed, Oct 20, 2010 at 05:03:19PM +0200, Jonas Frey (Probe Networks) wrote: Hi, its easy: - you need multihop on internal bgp sessions On external BGP sessions you mean. The issue is that by default JUNOS doesn't let you arbitrarily rewrite next-hops on regular EBGP learned routes,

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Chris Morrow
On 10/20/10 15:24, Richard A Steenbergen wrote: On Wed, Oct 20, 2010 at 05:03:19PM +0200, Jonas Frey (Probe Networks) wrote: Hi, its easy: - you need multihop on internal bgp sessions On external BGP sessions you mean. The issue is that by default JUNOS doesn't let you arbitrarily

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Richard A Steenbergen
On Wed, Oct 20, 2010 at 04:23:23PM -0400, Chris Morrow wrote: 4) reset next-hop as you ship the route internally to IBGP neighbors (see ... the Wayne Gustavus's (verizon) talk from NANOG32 in Reston: http://www.nanog.org/meetings/nanog32/presentations/soricelli.pdf) there are, as RAS is

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Chris Morrow
On 10/20/10 17:03, Richard A Steenbergen wrote: On Wed, Oct 20, 2010 at 04:23:23PM -0400, Chris Morrow wrote: 4) reset next-hop as you ship the route internally to IBGP neighbors (see ... the Wayne Gustavus's (verizon) talk from NANOG32 in Reston:

[j-nsp] m10 Hard Disk Crashed

2010-10-20 Thread Fernando Atilano
Anybody that can provide as to how to replace a m10 hard disk? one of them failed. any feedback is greatly appreciated. Fernando Atilano| Transtelco| Networking Support MX 52.656.257.1114 US1.915.217.2286 ___ juniper-nsp mailing list

Re: [j-nsp] Problem of Forwarding on VPN using vrf-table-label.

2010-10-20 Thread Ger, Javier
Thanks a lot Harry. Regards. Javier Ger Hornos 690 - Buenos Aires - Argentina Tel +54.11.5530.4531 Cel +54.9.11.3926.5017 j...@cablevision.com.ar www.cablevision.com.ar -Mensaje original- De: Harry Reynolds [mailto:ha...@juniper.net] Enviado el: MiƩrcoles, 20 de Octubre de 2010 12:56

Re: [j-nsp] SRX650 10GbE Interfaces

2010-10-20 Thread Skeeve Stevens
Hey, With the SRX-GP-16GE only being about 2K, I think I will just do 4 etherchannels from the switch to the SRX. There is just no cost justification. ...Skeeve Skeeve Stevens, Chief Executive Officer eintellego Pty Ltd -