Re: [j-nsp] SRX advice

2011-02-03 Thread OBrien, Will
I've implemented two pairs of clustered SRX240s for one of my networks. HA is fairly simple to set up, and seems to work fairly well. sessions tables are replicated between the cluster, but active routing is not, so you're going to be using a active/standby scenario with them for now. I'm actua

Re: [j-nsp] SRX advice

2011-02-03 Thread Doug Hanks
The SRX is able to meet all of these requirements. I would highly recommend the SRX650. In regards to the HA - I personally feel it's really good. It isn't a traditional HA setup where the passive firewall is completely unusable and just an insurance policy until there's a failure. The SRX H

Re: [j-nsp] SRX advice

2011-02-03 Thread Ryan Goldberg
> -Original Message- > From: Julien Goodwin [mailto:jgood...@studio442.com.au] > Sent: Thursday, February 03, 2011 11:50 PM > On 04/02/11 16:12, Ryan Goldberg wrote: > > watchguard a) is the outbound nat box for about 70 small offices (we are a > small ISP too, these are fiber-connected cu

Re: [j-nsp] SRX advice

2011-02-03 Thread Julien Goodwin
On 04/02/11 16:12, Ryan Goldberg wrote: > watchguard a) is the outbound nat box for about 70 small offices (we are a > small ISP too, these are fiber-connected customers). it also handles some > amount of inbound nat for those customer's various servers, which may be in > the customers office,

[j-nsp] SRX advice

2011-02-03 Thread Ryan Goldberg
Hi- Totally new here, and I mainly lurk on other lists, so be gentle if possible. We are in a situation we need to get out of. I am considering a pair of juniper SRX boxes (240s are in the budget) to do that. This is what we have: watchguard a) is the outbound nat box for about 70 small offic

Re: [j-nsp] Cisco "show processes cpu history" analog under Juniper

2011-02-03 Thread Doug Hanks
http://www.juniper.net/us/en/community/junos/script-automation/library/operations/cpu-usage-60/ Doug -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Martin T Sent: Thursday, February 03, 2011 4:50 PM To: juniper-nsp@p

[j-nsp] Cisco "show processes cpu history" analog under Juniper

2011-02-03 Thread Martin T
Hello, as far as I know, there is no possibility to check CPU or memory utilization history under JUNOS. Any rumors, will there be "show processes cpu history" analog for JUNOS in future versions? Or do most users query CPU and memory utilization over SNMP periodically and draw graphs in NMS? reg

Re: [j-nsp] MPLS LSP Load Balance

2011-02-03 Thread Jonathan Woolley
Hi Telmo, Your initial assumtion is correct, the lower end M series can't hash based on two MPLS label and IP payload, if you configure that it will hash based on the top label and the IP payload. I believe this is due to a hardware limitation as a T320 running the exact same code can hash based on

Re: [j-nsp] Simple Script Running

2011-02-03 Thread Ebben Aries
That is because you are most likely attempting to your rpc-reply directly causing the cli formatting to only display the raw xml leaf nodes. If you are looking to just output commands as normal cli rendered output, you will want to copy your rpc-reply directly to the result-tree using "copy-

Re: [j-nsp] MPLS LSP Load Balance

2011-02-03 Thread Thedin Guruge
Hi, If LDP is used for MPLS signaling, and your igp has two equal cost paths (via two diff interfaces) to the destination you want load balancing, then i don't see why it shouldn't occur. ECMP is on by default in Junos and yeah M's can only hash on first mpls label and ip payload, but it shouldn't

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread OBrien, Will
That's an interesting idea. I'm checking into that for my lab m20 with adaptive services pic... An srx240 might make more sense if it'll do it. Will O'Brien On Feb 2, 2011, at 5:13 AM, "Phil Mayers" wrote: > Can anyone tell me if the built-in adaptive services PIC on the M7i will > support th

Re: [j-nsp] Simple Script Running

2011-02-03 Thread Serge Vautour
Hello, For example, here's a script that checks OSPF, LDP and BGP neighbors on a box with 1 commands. blah@PE1-STJHLab-re0> op status-neighbors - OSPF: There are 4 active OSPF neighbors. Those neighbors are: Interface: ge-1/3/9.0 , IP Address: 10.10.81.5 , ID: 10.10.80.3 I

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Phil Mayers
Just to make things clear as mud, NAT64 is a mechanism that does address and protocol translation or NAT-PT, but it is probably best not to call it that as "NAT-PT" was an old technique that was defined in an RFC and was officially abandoned by the IETF. NAT64 is an externally similar technique th

Re: [j-nsp] MPLS LSP Load Balance

2011-02-03 Thread Matthew Tighe
I think you may to do this for LDP LSPs. My experience is with RSVP LSPs but the concept should be the same. Multiple LSPs are needed to load balance. Seems like this command does that with LDP: http://www.juniper.net/techpubs/en_US/junos10.4/topics/usage-guidelines/mpls-configuring-fec-deaggregat

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Phil Mayers
On 03/02/11 16:04, OBrien, Will wrote: That's an interesting idea. I'm checking into that for my lab m20 with adaptive services pic... An srx240 might make more sense if it'll do it. I do have an SRX210, and the SRX docs claim to do it as of JunOS 10.4; but I am fairly sure it's done using dif

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Phil Mayers
On 03/02/11 14:17, Kevin Oberman wrote: Date: Thu, 03 Feb 2011 13:33:33 + From: Phil Mayers Sender: juniper-nsp-boun...@puck.nether.net On 02/02/11 19:50, Vlad Ion wrote: hmm... so NAT64 supported just in 10.4 not in 10.3 as well? @ Phil - I can tell you how well both NAT-PT and NAT64 will

Re: [j-nsp] MPLS LSP Load Balance

2011-02-03 Thread Matthew Tighe
Do you have multiple LSPs defined (one for each path you want to load balance over)? On Tue, Feb 1, 2011 at 6:46 PM, Telmo Di Leva wrote: > Dear JNSP, in this oportunity we are contacting you because we have the > following trouble: > Our core plataform is based on M20 and M160. > For some reaso

[j-nsp] Simple Script Running

2011-02-03 Thread ben b
All, I'm trying to get a feel for op scripts in JUNOS and I can invoke commands, but I'm not seeing the output I thought I'd see (it looks like raw data). What I'd like to do is run a list of show commands with a script alias. Could someone point me in the right direction to be able to run like

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Kevin Oberman
> Date: Thu, 03 Feb 2011 13:33:33 + > From: Phil Mayers > Sender: juniper-nsp-boun...@puck.nether.net > > On 02/02/11 19:50, Vlad Ion wrote: > > hmm... so NAT64 supported just in 10.4 not in 10.3 as well? > > > > @ Phil - I can tell you how well both NAT-PT and NAT64 will work on J-series > >

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Phil Mayers
On 02/02/11 19:50, Vlad Ion wrote: hmm... so NAT64 supported just in 10.4 not in 10.3 as well? @ Phil - I can tell you how well both NAT-PT and NAT64 will work on J-series in about a month when I will be done testing them... even tho it doesn't match exactly the profile of M7i Interesting; I d