Re: [j-nsp] Problems with EX4200

On Thu, Nov 18, 2010 at 10:19:14PM -0200, Giuliano Cardozo Medalha wrote: > People, > > We have here one EX4200 running BGP and virtual routers. > > It is logging to me the following error. > > J-TAC said this is a software error. The PREFIX ADD failure messages mean the route didn't get added

Re: [j-nsp] Problems with EX4200

How many BGP routes? I'm thinking you are hitting limits but could be mistaken the EX platform can only handle a limited amount of them... Paul -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Giuliano Cardozo Med

[j-nsp] Problems with EX4200

People, We have here one EX4200 running BGP and virtual routers. It is logging to me the following error. J-TAC said this is a software error. We have been tried a lot of versions: 10.0S10, 10.1, 10.2, 10.3 Nothing happens Do you know this problems ? Do you think could be a hardware er

Re: [j-nsp] Host-to-Host IPSec, Openswan to Junos

If you're only running GRE over IPSEC, try changing the local and remote proxy-ids to /32s (the GRE endpoints) and leave it at that. On 19/11/2010, at 5:48 AM, Mike Williams wrote: > Hey guys, > > Is anyone doing, or know how to do, IPSec tunnels between Openswan and Junos? > Openswan 2.4 on ke

[j-nsp] Host-to-Host IPSec, Openswan to Junos

Hey guys, Is anyone doing, or know how to do, IPSec tunnels between Openswan and Junos? Openswan 2.4 on kernel 2.6 to Junos 10.2R3.10 on a J-series to be precise. So far I've got phase 1 to complete, but phase 2 fails like this: KMD_PM_P2_POLICY_LOOKUP_FAILURE: Policy lookup for Phase-2 [respond

Re: [j-nsp] monitor traffic on gre inerface

That's normal. When RE sends ospf packet over GRE, it constructs the full packet including the GRE header. So it directly put the packet on the physical interface for transmission. Hence you don't see it in tcpdump output on GRE interface since outgoing interface is set to the physical interfac

Re: [j-nsp] monitor traffic on gre inerface

On Thursday 18 November 2010, Sergey wrote: > > did you look at the real interface (tunnel source interface) to > > see the outgoing OSPF stuff ? > > source interface is lo0... But yes, I see it on outgoing interface > ge-1/3/0.912. And I can't see "input" on it... "In" and "Out" on diffirent in

Re: [j-nsp] monitor traffic on gre inerface

On Thursday 18 November 2010, Sean Clarke wrote: > > I attempt to debug ospf on gre interface but I see incoming > > traffic only. Is it normal behavour or is it a bug of JunOS ? > > > > hardware: M7i, JunOS 9.2R3.5. > > did you look at the real interface (tunnel source interface) to > see the ou

Re: [j-nsp] monitor traffic on gre inerface

On 11/18/10 12:27 PM, Sergey wrote: Hello. I attempt to debug ospf on gre interface but I see incoming traffic only. Is it normal behavour or is it a bug of JunOS ? hardware: M7i, JunOS 9.2R3.5. did you look at the real interface (tunnel source interface) to see the outgoing OSPF stuff ?

[j-nsp] monitor traffic on gre inerface

Hello. I attempt to debug ospf on gre interface but I see incoming traffic only. Is it normal behavour or is it a bug of JunOS ? hardware: M7i, JunOS 9.2R3.5. -- Regards, Sergey ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.net

[j-nsp] Use of SSH Keygen - ssh-keygen -b 1024 -t rsa1

Hi everybody I see their is explicit option for generating ssh key(most of the platform do have), my question how do we use this option as even after generating key with various strength i found i received the same key each time since the first time sshed the box. How can i make junos use

Re: [j-nsp] ERX 802.1p marking / user-priority

Thanx Ulf ! It works ! :) Created an IP-CLACL for matching my traffic Created an IP-policy for assigning a traffic-class to the IP-CLACL Created a VLAN-CLACL for matchting the traffic-class Created an VLAN-policy to set the user-priority for the VLAN-CLACL Assigned the IP-policy to an interface