Re: [j-nsp] SRX drops BGP session

2011-10-14 Thread Pavel Lunin
Would it no be advisae to either teace it or a tcpdump from the OS you can see what packets are being sent and received on the interface? Generally yes, but. Though this doesn't seem to be the case for Jeroen since he uses eBGP with direct interface address peering, you must keep in mind that

Re: [j-nsp] TCAM full on EX8200?

2011-10-14 Thread Michele Bergonzoni
I would like to thank all the people that gave such helpful insights on this issue. I think Paul's detailed explanation, and the contributions kindly provided by Chan, Will, Richard and another person in private email, close the issue: I am reconfiguring for default routing. I hope people

Re: [j-nsp] TCAM full on EX8200?

2011-10-14 Thread Phil Mayers
On 13/10/11 20:21, Richard A Steenbergen wrote: EX8200 uses SRAM for forwarding lookups, and TCAM for firewall filtering. SRAM is perfectly capable of doing lookups at these speeds, and infact is a lot more flexible than TCAM, whereas TCAM is actually much better suited for doing high speed

Re: [j-nsp] TCAM full on EX8200?

2011-10-14 Thread Chris Adams
Once upon a time, Phil Mayers p.may...@imperial.ac.uk said: On that topic; I'm familiar with how TCAM can be used to accelerate routing lookups, but less so with SRAM. Is the SRAM used to implement a simple lookup table/tree, or does SRAM have some special properties that enable it to do

Re: [j-nsp] TCAM full on EX8200?

2011-10-14 Thread Joel jaeggli
On 10/14/11 03:08 , Phil Mayers wrote: On 13/10/11 20:21, Richard A Steenbergen wrote: EX8200 uses SRAM for forwarding lookups, and TCAM for firewall filtering. SRAM is perfectly capable of doing lookups at these speeds, and infact is a lot more flexible than TCAM, whereas TCAM is actually

Re: [j-nsp] vpls loop avoidance

2011-10-14 Thread Keegan Holley
Interesting. It's a stack. I guess I'll have to use multihoming. Just for fun I'm going to see if I can get it to pass the untagged BPDUs. Thanks, Keegan 2011/10/12 Phil Bedard phil...@gmail.com Standards-based STP BPDUs are sent untagged, which might be an issue if the links to your CE

[j-nsp] Request for participation - Arbor 2011 Worldwide Infrastructure Security Report.

2011-10-14 Thread Dobbins, Roland
[Apologies if you've already seen this announcement in other forums.] Request for participation - Arbor 2011 Worldwide Infrastructure Security Report. - Folks, We're in the process of collecting survey responses for the 2011 Worldwide Infrastructure Security Report (WWISR); this is the

Re: [j-nsp] TCAM full on EX8200?

2011-10-14 Thread Jeff Wheeler
On Fri, Oct 14, 2011 at 3:52 AM, Michele Bergonzoni berg...@labs.it wrote: can only be done with TCAM. For those who want more info on this issue, this is the very interesting reference that I received in a private email: http://www.firstpr.com.au/ip/sram-ip-forwarding/ I wouldn't use that

[j-nsp] SRX Session Analyzer

2011-10-14 Thread Tim Eberhard
All, After finally finding some free time (a new job or two, and a new kid) I was able to at least sit down and hack out a base version of my SRX Session Analyzer. For those of you who used NSSA (Netscreen Session Analyzer) I wrote it to assist in troubleshooting Juniper firewalls. Basically

[j-nsp] Force IP traffic not to use the LSP path when enabling ISIS Traffic Engineering with Shortcuts

2011-10-14 Thread Peter K
We are in the process of enabling traffic engineering with shortcuts for ISIS on an IP\MPLS based network. As a result of enabling ISIS traffic engineering with shortcuts, IP traffic will utilize the LSP paths (inet.3) for the forwarding decision. Is there a configuration feature so the IP