Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Richard A Steenbergen
On Thu, Sep 01, 2011 at 11:48:36AM -0400, Paul Stewart wrote: > Actually I'm curious as well - RAS is not typically wrong though about > this kind of stuff ;) > > We have numerous SRX deployed for firewall and router functionality - > some are running Dynamic VPN (which yes, we've had issues wit

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Daniel Daloia
Similar experience with a srx650 cluster on 10.4. ISP did not have their Ethernet links set to auto/auto since that is all reths support in a cluster. They would randomly stop forwarding traffic and could be fixed with failing the cluster to the secondary node. It was impossible to trouble shoot

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Alexandre Snarskii
On Thu, Sep 01, 2011 at 11:48:36AM -0400, Paul Stewart wrote: > Actually I'm curious as well - RAS is not typically wrong though about this > kind of stuff ;) Someday he explained his setup here: http://puck.nether.net/pipermail/juniper-nsp/2010-February/015599.html and, i think, running bgp [o

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Nathan Sipes
Yep, the FTP ALG has been a real dark and sinister sadist for a while. On Thu, Sep 1, 2011 at 3:06 PM, Scott T. Cameron wrote: > I have 2x chassis cluster with SRX3400s. > > ALGs will destroy your soul. Avoid at all costs. > Chassis cluster upgrades are needlessly painful (imo). > Session counts

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Scott T. Cameron
I have 2x chassis cluster with SRX3400s. ALGs will destroy your soul. Avoid at all costs. Chassis cluster upgrades are needlessly painful (imo). Session counts can become exhausted very easily and lead to a very quick and dreadful DOS. Most of my early adopter issues have disappeared with update

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Brent Jones
On Thu, Sep 1, 2011 at 11:00 AM, Paul Stewart wrote: > We have yet to see that even with PIM modules installed - do you remember > what version of JunOS you were running by chance? > > > > Paul > > > > > > From: Nathan Sipes [mailto:nathan.si...@gmail.com] > Sent: September-01-11 12:05 PM > To: Pa

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Jerry Jones
Mine here at home has been working well, with the internal ADSL2. Only initial issue I had were the dumb MTU and MSS defaults. Only time it gets rebooted is when I pull the wrong cord Now I need to fix DDNS. Had it working on 10.1, but 10.4 and 11.x break it again. On Sep 1, 2011, at 1:0

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Nathan Sipes
That may be the difference I am running the SRX-MP-1VDSL2-A PIM. On Thu, Sep 1, 2011 at 12:19 PM, Jerry Jones wrote: > Mine here at home has been working well, with the internal ADSL2. > > Only initial issue I had were the dumb MTU and MSS defaults. > > Only time it gets rebooted is when I pul

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Jeff Richmond
Weird, I have a number of SRX210s running 10.4Rx and have had no notable issues at all. Now 9.x code was a totally different story. I work out of my home office, so my main 210 has to be working all the time, which it does just fine. Currently Running: ADSL2+ PIM for uplink, 10Mb V4 + V6 (both

Re: [j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Nathan Sipes
10.4R2 and 11.1R2 The local interzone traffic continued to forward and traffic sourced from the outside interface continued to work. On Thu, Sep 1, 2011 at 12:00 PM, Paul Stewart wrote: > We have yet to see that even with PIM modules installed – do you remember > what version of JunOS you were ru

[j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Paul Stewart
We have yet to see that even with PIM modules installed - do you remember what version of JunOS you were running by chance? Paul From: Nathan Sipes [mailto:nathan.si...@gmail.com] Sent: September-01-11 12:05 PM To: Paul Stewart Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] JUNOS

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Nathan Sipes
I have had similar experiences to Richard's with the "Free SRX210H" I even managed to get a DSL PIM in there as well. Had it up and working for about 2 months when the pim quit forwarding traffic randomly. Rebooting the SRX seems to fix it well enough though... I will say that the free hardware has

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Paul Stewart
Actually I'm curious as well - RAS is not typically wrong though about this kind of stuff ;) We have numerous SRX deployed for firewall and router functionality - some are running Dynamic VPN (which yes, we've had issues with - definitely it's not perfect). We've been bitten by some surprises as

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Phil Mayers
On 01/09/11 10:09, Richard A Steenbergen wrote: I have an SRX210 in my basement doing my home routing, and it is the only free device I've ever been given that I would seriously consider returning and asking for my money back. Broken doesn't even begin to describe it, my condolences to anyone wh

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Richard A Steenbergen
On Wed, Aug 31, 2011 at 08:59:26PM +0800, Mark Tinka wrote: > 10.4R4.5 today on our EX3200's/4200's. We were forced (kicking and screaming) into 11.1S2 on our EX8200s for some feature support that just wasn't available any other way, but all things considered the code has actually been pretty da