Re: [j-nsp] RSTP over logical-system.

2010-11-02 Thread Nilesh Khambal
David, I don't think you can run RSTP in logical routers. As you can see from your outputs below, RSTP instances in all the LRs are using same system MAC. You can probably try MSTP but don't think RSTP will work in LRs. BTW, what JUNOS version is this? Thanks, Nilesh. > n...@mx960-lab-re0> ...g

[j-nsp] RSTP over logical-system.

2010-11-02 Thread David Lockuan
Hi guys, I'm testing the protocols rstp over logical-systems, but when I set the priority over one interface for it work as root, it is not change the status in the protocols rstp and the other interface don't change to Blocking. theirs always keep on Forwarding state. The topology that I am usi

Re: [j-nsp] Good practice for EX-series interface config management

2010-11-02 Thread Keegan Holley
On Nov 2, 2010, at 5:31 PM, Dale Shaw wrote: > Hi all, > > I'm curious about what people have found is the best way to manage > interface configurations on EX-series devices. There are a number of > ways to apply configuration to interfaces -- direct to each interface, > using interface-range

Re: [j-nsp] SRX650 Clustering - IPv6

2010-11-02 Thread Ben Dale
Ah yes this one really annoyed me. In 10.1 and earlier IPv6 is supported on VLAN interfaces. When you upgrade to 10.2 or later they stop you being able to apply this configuration, however EXISTING configuration still works just fine: bd...@srx210# show interfaces vlan.10 description "LAN RVI

Re: [j-nsp] Good practice for EX-series interface config management

2010-11-02 Thread Michel de Nostredame
On Tue, Nov 2, 2010 at 2:31 PM, Dale Shaw wrote: > Hi all, > > I'm curious about what people have found is the best way to manage > interface configurations on EX-series devices. There are a number of > ways to apply configuration to interfaces -- direct to each interface, > using interface-ranges

Re: [j-nsp] Good practice for EX-series interface config management

2010-11-02 Thread Chuck Anderson
On Wed, Nov 03, 2010 at 08:31:27AM +1100, Dale Shaw wrote: > Direct application of config to interfaces, while precise, kind of > feels 'wrong' as JUNOS provides more elegant ways to achieve the same > end result. Maybe in carefully planned, static environments where > access port VLAN assignments

[j-nsp] Good practice for EX-series interface config management

2010-11-02 Thread Dale Shaw
Hi all, I'm curious about what people have found is the best way to manage interface configurations on EX-series devices. There are a number of ways to apply configuration to interfaces -- direct to each interface, using interface-ranges etc. We've been burnt a couple of times with people making

Re: [j-nsp] Dynamic DB

2010-11-02 Thread Pavel Gulchouck
On Wed, Oct 27, 2010 at 11:25:27PM +0400, Pavel Lunin writes: PL> Anyone here uses dynamic-db? Works? or as always? :) We're using dynamic-db for prefix-lists, it works good. On 9.5 there was a fault with corrupted dynamic.db and mpd coredump. Now on 10.3 there were no faults (yet?). Quick commit

Re: [j-nsp] SRX650 Clustering - IPv6

2010-11-02 Thread Paul Stewart
Found it .. sorry folks - there was a document on their site that explained limitations on 10.2 and IPv6 clustered WAS listed there as not implemented. Now I find new information at http://www.juniper.net/us/en/community/junos/releases/10-2/#security IPv6 Release 10.2 adds several new IPv6 ca

Re: [j-nsp] SRX650 Clustering - IPv6

2010-11-02 Thread Paul Stewart
Hmmm.. interesting - I thought I had reviewed 10.2 for this support... will dig deeper. So then comes the question - anyone actually *using* IPv6 on clustered SRX? Any real-world feedback? I have an SRX210H at home and recently discovered an annoying "bug" that IPv6 isn't supported on VLAN in

[j-nsp] EX4200 Air Flow

2010-11-02 Thread Bill Blackford
I have several EX3200's and EX4200's installed in my Data Center. In comparing the two, they both intake from the sides and exhaust out the back. Actually, the EX3200 has intakes on both sides, the EX4200 only on one side. Using a very low-tech method for measuring air flow (my hand and a small

Re: [j-nsp] SRX650 Clustering - IPv6

2010-11-02 Thread Crist Clark
I just happened to be looking at the 10.2 release notes after seeing your email. "IPv6 Support [snip] * Chassis cluster—In JUNOS Release 10.2, we support chassis cluster in an active-passive (failover) deployment. [Junos OS Security Configuration Guide]" You may want to have a closer l

Re: [j-nsp] ERX310 PPPoE and multiple Virtual-ro​ut ers

2010-11-02 Thread Hendrik Kahmann
There should be a loopback with a valid ipv4/ipv6 address. This address is used as unnumbered source for _any_ created pppoe subinterface. Kimd regards, Hendrik Am 02.11.2010 um 18:52 schrieb Tom Teeuwen : > Hello Hendrik, > > Thnx, it works !! > > The local-interface loopback, the IP-adres

Re: [j-nsp] ERX310 PPPoE and multiple Virtual-ro​ut ers

2010-11-02 Thread Tom Teeuwen
Hello Hendrik, Thnx, it works !! The local-interface loopback, the IP-adres.. .does it matters ? Kind regards, Tom Van: juniper-nsp-boun...@puck.nether.net [juniper-nsp-boun...@puck.nether.net] namens Hendrik Kahmann [hendrik.kahm...@ewetel.de] Verzo

[j-nsp] SRX650 Clustering - IPv6

2010-11-02 Thread Paul Stewart
Hi there. We are looking to bring on an additional SRX650 at a site by clustering. One of the requirements though is IPv6 traffic and it appears it's not supported? From http://www.juniper.net/techpubs/en_US/junos10.0/information-products/topic-c ollections/release-notes/10/topic-39007.html

[j-nsp] Radius Tunnel Switching

2010-11-02 Thread Gabriel Blanchard
Hey, I'm attempting to dynamically tunnel switch some of our users. The requirement is that the tunnel is initiated from a different virtual router and it appears that the radius attribute that I'm using simply doesn't work. t...@teksavvy.com Cleartext-Password := "test123"

[j-nsp] (no subject)

2010-11-02 Thread Andy Yu
___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ERX310 PPPoE and multiple Virtual-ro​ut ers

2010-11-02 Thread Hendrik Kahmann
Hello, as far as i know, this might be your solution: aaa domain-map "ABC" router-name "ABC" local-interface loopback 101 ipv6-router-name default strip-domain enable ! aaa domain-map "DEF" router-name "DEF" local-interface loopback 102 ipv6-router-name default strip-domain enable ! prof