Re: [j-nsp] Aggregate Routes Revisited

On Wed, 12 Jan 2011, Smith W. Stacy wrote: Only the active route in the routing table is evaluated by export policy. To expand a bit on this in a tangential direction, in the specific case where the non-active route is a BGP route, you can alter this behaviour with advertise-inactive to make

[j-nsp] Secure tunnelling between packet-mode operation routers

Hello, I need to establish a secure tunnel between a J6350 and a J2320. Both are running JUNOS 10.2R3.10 and both are configured for packet-mode operation due to their limited spec and performance. I've gone through the IKE/IPSEC configuration for the tunnel and got something that looks like

Re: [j-nsp] Secure tunnelling between packet-mode operation routers

Hi, On 14.1.2011 13:10, Dave Barton wrote: We have no firewalling or security requirements for the tunnel, we just need a dumb pipe for routing traffic and running OSPF. Can anyone offer any tips or alternative suggestions for how this could be done? With 10.2 and 10.3 you can do both packet

[j-nsp] MX80 Bundles

People, The new JUNIPER MX80 is available this year in some special prices bundles: MX80-5 MX80-10 MX80-40 MX80 Does anyone knows if the bandwidth specification is full or half duplex ? MX80-5 is 5 Gbps full ou half duplex ? Because MX80 has 40 Gbps full duplex of capacity but bundles do not

[j-nsp] Re-write rule for GRE interface

Hi All, I'm trying to mark the DSCP value on a GRE packet, so that the telco can handle as per our contracted services. I've tried 'copy-tos-to-outer-ip-header', but it doesn't work as the inner datagram of a GRE packet is a MPLS datagram. Here, how it looks on the wire (found using packet

[j-nsp] Offline config verification

Hi: I have some perl scripts that generate Juniper configs. I need to verify that these configs are Juniper compatible (as there could be bugs in my scripts) I have 2 options. 1) Copy the generated config to a juniper router, load merge config and then commit to see if there are errors. (We

Re: [j-nsp] Offline config verification

Just load them on the device and rollback and use commit-check as your middle step. - Jared On Jan 14, 2011, at 4:40 PM, Nvvk Brnn wrote: Hi: I have some perl scripts that generate Juniper configs. I need to verify that these configs are Juniper compatible (as there could be bugs in my

Re: [j-nsp] Offline config verification

Olives are great for these types of scripts. An olive vmware machine can be hosted on anything and just be used for config verification. Hope this helps, -Tim Eberhard On Jan 14, 2011, at 3:40 PM, Nvvk Brnn saveda...@gmail.com wrote: Hi: I have some perl scripts that generate Juniper

Re: [j-nsp] Offline config verification

Been ages since I used Olives. Any idea what kind of response time we can expect? I need very fast responses - something of the order of a few seconds. Thanks again. Narayan On Fri, Jan 14, 2011 at 1:58 PM, Tim Eberhard xmi...@gmail.com wrote: Olives are great for these types of scripts. An

Re: [j-nsp] Offline config verification

That won't always work though. If there are pieces of the config that are hardware dependent, such as COS, etc., you won't get an alert without identical hardware to evaluate it on. For basic config items it would be fine of course. Jeff On Jan 14, 2011, at 1:58 PM, Tim Eberhard

[j-nsp] Optimal BFD settings for BGP-signaled VPLS?

I am trying to determine the optimal Bidirectional Forwarding Detection (BFD) settings for BGP auto-discovery and layer-2 signaling in a VPLS application. To simplify things, assume I am running LDP for building dynamic-only LSPs, as opposed to RSVP. Assume I am running IS-IS as the IGP with

Re: [j-nsp] Re-write rule for GRE interface

On 1/14/11 9:59 AM, Shiva Shankar wrote: Hi All, I'm trying to mark the DSCP value on a GRE packet, so that the telco can handle as per our contracted services. I've tried 'copy-tos-to-outer-ip-header', but it doesn't work as the inner datagram of a GRE packet is a MPLS datagram. Here, how it