Re: [j-nsp] Multihome SRX650 2 default routes

2011-08-27 Thread Tim Eberhard
ECMP doesn't work as of today in branch series SRX's if advanced security features are enabled such as NAT, IDP, ALG's, and such. The problem is with the flow module and where routing decisions take place. It will work if the both destination interfaces are in the same zone and you're using basic

Re: [j-nsp] Question on auto-export Layer 3 VPN

2011-08-27 Thread MSusiva
Hi Guys, Thanks for the reply.This document does really helps to understand what auto-export means. I also understood what is the difference between auto-export and RIB groups in leaking the routes b/w VRF on the same PE. But I have one question, Using RIB groups will consume more cpu/memory

Re: [j-nsp] ex4200 vlan problem

2011-08-27 Thread Tom Storey
Is that device running any kind of firewall? Seems likely if you can ping from it. On 26 August 2011 16:26, Pappas, AJ apap...@ottawaregional.org wrote: I am have a ex4200 that is configured for a particular vlan vlan 244. This vlan is configured on 2 ports. I can reach one device fine, the

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Saku Ytti
On (2011-08-25 17:11 +0100), Brendan Regan wrote: I was wondering if anyone knew how to calculate how many routes can be taken in on an MX80 with 2 Full EBGP peers and 1 IBGP peer? I've not tested more than million routes myself (and 1000 BGP sessions). But it should scale to 2M routes at

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Julien Goodwin
On 27/08/11 22:13, Saku Ytti wrote: Hardwarewise scaling is same as any MPC in larger MX, but control-plane is lot less beefy than big brothers. Not really sure why, it's not like intel CPU would be significant BOM addition to MX80 compared to freescale. tinfoilhatdownscaling trio would have

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Saku Ytti
On (2011-08-27 22:48 +1000), Julien Goodwin wrote: less beefy than big brothers. Not really sure why, it's not like intel CPU would be significant BOM addition to MX80 compared to freescale. tinfoilhatdownscaling trio would have been expensive, lot cheaper to reduce the scale of the

Re: [j-nsp] ex4200 vlan problem

2011-08-27 Thread Keegan Holley
where are you pinging from? inside the vlan or outside of it? Check for mac-addresses. If you are learning the devices mac addresses on both ports in the correct vlans it's not the switch or the config. Have you tried another device in the same port or swapping the two devices? Can you post

Re: [j-nsp] Multihome SRX650 2 default routes

2011-08-27 Thread Daniel Daloia
If that's true then that's horrible news. The data sheet for the sex branch series lines says that it can do ECMP, but says nothing about mixing it with advanced services. This seems so trivial. Going to spend some time in the lab. Thanks! On Aug 27, 2011, at 3:02 AM, Tim Eberhard

Re: [j-nsp] Multihome SRX650 2 default routes

2011-08-27 Thread Tim Eberhard
Best of luck Daniel. Please report back if you find other results but I spent a fair amount of time in my lab and then working with some of my internal contacts within Juniper on this issue. For the record, I hate how the iphone autocorrects SRX into sex. That's bitten me more than once now. :)

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Joel jaeggli
On 8/27/11 05:48 , Julien Goodwin wrote: On 27/08/11 22:13, Saku Ytti wrote: Hardwarewise scaling is same as any MPC in larger MX, but control-plane is lot less beefy than big brothers. Not really sure why, it's not like intel CPU would be significant BOM addition to MX80 compared to

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Keegan Holley
2011/8/25 Brendan Regan brendan.bre...@gmail.com Hi, I was wondering if anyone knew how to calculate how many routes can be taken in on an MX80 with 2 Full EBGP peers and 1 IBGP peer? I dont' think this is something you can calculate. Most vendors do extensive testing and come up with a

Re: [j-nsp] MX80 Questions

2011-08-27 Thread Doug Hanks
Brendan, The MX80 can handle about 4,000,000 IPv4 prefixes in the RIB and about 1,000,000 IPv4 prefixes in the FIB. Thank you, -- Doug Hanks, JNCIE-ENT, JNCIE-SP #875 Sr. Systems Engineer Juniper Networks The views expressed here are my own and do not necessarily reflect those of Juniper

[j-nsp] Juniper chip architecture

2011-08-27 Thread Jackson Jacobson
Sorry for what seems to be a dumb question. I see a lot of talk about different juniper chip architecture. What's trio, etc? What makes it better than other venders? How can I get more info on juniper internal architectures? Salud, j.j.j. ___

Re: [j-nsp] Juniper chip architecture

2011-08-27 Thread Tim Eberhard
*some* useful information can be found here: http://juniper.cluepon.net/Category:Hardware Lots of big blank spots and lots of older information, but it's a good start and about as good as you're going to get (as far as I know of) without being an internal Juniper employee. Good luck, -Tim

Re: [j-nsp] Juniper chip architecture

2011-08-27 Thread Jackson Jacobson
Tom, This is incredibly helpful. Thank you for sharing. j.j.j. On Aug 27, 2011 8:44 PM, Tim Eberhard xmi...@gmail.com wrote: *some* useful information can be found here: http://juniper.cluepon.net/Category:Hardware Lots of big blank spots and lots of older information, but it's a good start