Re: [j-nsp] Converting ASA-5540 to SRX-650

2011-07-28 Thread Ben Dale
Hi Jon, On 28/07/2011, at 1:15 PM, Paulhamus, Jon wrote: > Hello all - > > I am in the process of replacing an aging Cisco ASA-5540 with an SRX-650. > The ASA has a large number of static NAT translations, as well as many > outbound source NAT pools. Does anyone have any suggestions on creat

[j-nsp] Juniper Fan Speeds - J Series

2011-07-28 Thread Chris
Hi all, I was just pulling out a list of different things to graph via SNMP and I came across this strangeness on two J6350's (JUNOS 10.2R3.10). When I have been pulling the data out to graph, the fan speed seems to jump between 37,678 RPM and 9,820 RPM. This is consistant on both routers, and the

Re: [j-nsp] IPv6 Router Guard

2011-07-28 Thread Chris Adams
Once upon a time, Chris Evans said: > I'm trying to implement a firewall filter to implement IPv6 RA guard on an > EX4200. I have the ACL written to block DHCP and icmp router-advertisements. > However it appears that the EX4200 only supports IPv4 at this time for > PACLs? I have applied the filte

[j-nsp] IPv6 Router Guard

2011-07-28 Thread Chris Evans
I'm trying to implement a firewall filter to implement IPv6 RA guard on an EX4200. I have the ACL written to block DHCP and icmp router-advertisements. However it appears that the EX4200 only supports IPv4 at this time for PACLs? I have applied the filter ingress to my interfaces and RA advertiseme

Re: [j-nsp] SRX2xx Question.

2011-07-28 Thread Harris Hui
Did anyone successfully run the packet-mode forwarding in a SRX Chassis Cluster? On Thu, Jul 28, 2011 at 12:29 PM, Craig Whitmore wrote: > I have tried running 2500 BGP routes on a SRX 240 all in flow mode with no > problems at all. > > > On 28/07/11 4:19 PM, "Harris Hui" wrote: > > >Are you run

Re: [j-nsp] JUNOS 10.4R4.5 on an SRX650

2011-07-28 Thread Ralph Rye
The only issue I have come across is unsupported command/feature causing the config not load, and also preventing the startup of the management daemon. In the case I worked on it was the link-speed option tied to a RETH interface on a cluster. It doesn't appear to happen every time. I tried t

Re: [j-nsp] [c-nsp] MVPN Rosen interoperation configuration Cisco and Juniper

2011-07-28 Thread Mark Tinka
On Tuesday, July 26, 2011 07:51:10 AM David water wrote: > Can someone please share the working Rosen MVPN > configuration of Cisco and Juniper? Do I have to use > vrf-table-label or VT interface on Juniper router to > make it working? Haven't worked with Rosen on this end, but NG-MVPN instead.

Re: [j-nsp] OpenBGP to Juniper :)

2011-07-28 Thread Chris Cappuccio
I'd set community on a static routes themselves for each netblock announced via BGP and then use an export filter to filter external BGP announcements to that specific community. set routing-options static route x.x.x.x/y discard set routing-options static route x.x.x.x/y preference 130 set rout

Re: [j-nsp] tag-protocol-id matching in vlan-tags

2011-07-28 Thread David Ball
Ah, so I'm potentially not crazy (at least not for this reason). See below, and thanks... David --- JUNOS 10.0R3.10 built 2010-04-16 07:14:00 UTC {master} me@router> show interfaces ge-1/1/0 Physical interface: ge-1/1/0, Enabled, Physical link is Up Interface index: 173, SNMP ifIndex: 250

Re: [j-nsp] JUNOS 10.4R4.5 on an SRX650

2011-07-28 Thread Paul Stewart
We will as of next week... running 10.4R3.4 with no issues no clustering on our side though (yet - coming soon) Paul -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Daniel M Daloia Jr Sent: Thursday, July 28, 2011

[j-nsp] JUNOS 10.4R4.5 on an SRX650

2011-07-28 Thread Daniel M Daloia Jr
  Hey Folks, Anyone using the current recommended release 10.4R4.5 on the SRX650 series? We have a pretty simple setup with clustering, IDP, BGP, OSPF. Just looking for any got-chas! Thanks! ___ juniper-nsp mailing list juniper-nsp@puck.nether.net htt

Re: [j-nsp] RSVP to LDP migration

2011-07-28 Thread David Ball
If/when supplementing with RSVP LSPs isn't an option for you, you might also wish to consider enabling Loop-Free Alternates (LFA) for your IGP along with an exported load-balance policy on each Juniper device to (potentially) speed up convergence in the event of a failure. Having a backup next-h

[j-nsp] Junos SCU From conditions

2011-07-28 Thread cc loo
Hi guys, in my policy-statement, i have this simple policy term 1 { from { route-filter 123.123.123.123/32 exact; } then { source-class scu-proxy-me-please; accept; } } term 2 { then accept; } show policy-options prefix-list proxy-prefixes-poc 123.123

Re: [j-nsp] RSVP to LDP migration

2011-07-28 Thread Thedin Guruge
Hi, Yes you could activate LDP everywhere, i.e on all links but you may also want to run "per Link" single hop RSVP LSP between directly connected peers with "ldp-tunnelling" enabled. This will activate LDPoverRSVP hence traffic can be protected by FRR link protection when passes through these lin

Re: [j-nsp] tag-protocol-id matching in vlan-tags

2011-07-28 Thread Addy Mathur
On Wednesday, July 27, 2011, David Ball wrote: > MX running 10.0 (DPCE-R-20GE-2XGE for int in question) > > Should I expect that a logical unit configured with 'vlan-tags outer > 0x88A8.100' would also permit frames using TPID 8100 and VLAN ID 100 ? > I kinda expected not (since it doesn't 'match