Actually, we used mx80's as our Internet routers. What do you suppose I use to
handle my firewalling, ipsec and nat?
Thank you everyone, I will pop back to this thread when I change things up and
have our security guy test again.
Sent from my iPhone
On Jun 22, 2012, at 9:39 PM, joel jaeggli w
On 6/22/12 6:28 AM, Phil Mayers wrote:
On 22/06/12 13:29, Amos Rosenboim wrote:
Hello Phil,
I have seen this happen a few times and with different platforms.
A good way to avoid this is to configure policing on the OOB switches
ports facing the REs.
Unfortunately, our OOB network is construct
On 6/22/12 9:49 AM, Morgan Mclean wrote:
This is exactly what happened. The session table filled up. One of our security
guys took down our edge 650 cluster from a single unix box out on the net.
This is what happens when you use a stateful box for an internet router.
a router with a covering
Hi Roman,
About your question, the LM10 for E320 and E120 don't support, for the
moment, external-parent group, this feature should be for the release
14.1.x of JunoSE.
In my case, we are using QoS profile to limit the downstream traffic and
the limit of upstream will be done in the DSLAM.
Hope
Hello All,
I'm trying to introduce commercial IPv6 services for pppoe customers in
my network. I realized that I don't know how to put an aggregated
limitation on both(ipv4/v6) downstreams. I've tried compound shared
shaping and external parent group policing. Both features don't work the
way
This is exactly what happened. The session table filled up. One of our security
guys took down our edge 650 cluster from a single unix box out on the net.
Sent from my iPhone
On Jun 22, 2012, at 4:39 AM, "Scott T. Cameron" wrote:
> On Wed, Jun 20, 2012 at 10:14 PM, Morgan McLean wrote:
>
>>
What protocol do these aggregates show up under? Not static?
Morgan
Sent from my iPhone
On Jun 22, 2012, at 9:15 AM, Doug Hanks wrote:
> The static discard works just fine, but from what from I recall a simple
> static route would not insert the ATOMIC_AGGREGATE into BGP.
>
> For example to a
The static discard works just fine, but from what from I recall a simple
static route would not insert the ATOMIC_AGGREGATE into BGP.
For example to advertise 192.168.1.0/24 with ATOMIC_AGGREGATE.
set routing-options static route 192.168.1.1/32 discard (contributing
route)
set routing-options
On 22/06/12 15:37, Spam wrote:
Hello All, I've been trying to get multicast routing between 2 vlans on my
SRX240 working
so the Apple Mac's on both vlans can see each other and use their respective
services.
You didn't say what kind of multicast traffic you are trying to get working.
Are you s
On 6/22/12 07:37 , Spam wrote:
> Hello All, I've been trying to get multicast routing between 2 vlans on my
> SRX240 working
> so the Apple Mac's on both vlans can see each other and use their respective
> services.
bonjour is:
224.0.0.251
by definition it's local to one subnet.
224.0.0.0
You'll want to make sure that your switches aren't quashing things as well.
igmp snooping on various vendor hardware usually makes my head hurt.
I suggest allowing broadcast flood for multicast to prove that your multicast
router is functioning properly and then locking down your igmp config goin
Hello All, I've been trying to get multicast routing between 2 vlans on my
SRX240 working
so the Apple Mac's on both vlans can see each other and use their respective
services.
I have read many articles but still haven't gotten it to work. I'm sure I'm
just missing 1-2
commands. I also do not w
Phil,
Actually, I am not surprised that this happened to you. The fxp0
interface is a funny animal. It isn't really as isolated from the rest
of the box as you would think.
Since all IP broadcast/multicast on layer3 interfaces get sent to the RE
by default, if you get a loop that starts t
That's the SFP vendor that I had issues with too.
I remember there's a fix on of the the recent release notes for the same vendor
but for its XFF and SFP+ xceivers. Probably there's a chance of logging in a
case with Juniper for 1GE SFPs.
ihsan
On Jun 22, 2012, at 8:41 PM, Gustavo Santos wrote
On 22/06/12 13:29, Amos Rosenboim wrote:
Hello Phil,
I have seen this happen a few times and with different platforms.
A good way to avoid this is to configure policing on the OOB switches
ports facing the REs.
Unfortunately, our OOB network is constructed from older, repurposed
equipment. I
Thanks for your answer.
All of a sudden the log message stop to show on "show log messages".
The module is the one below.
PIC port information:
FiberXcvr vendor
Port Cable typetype Xcvr vendorpart number
Wavelength
2 GIGE
Hello Phil,
I have seen this happen a few times and with different platforms.
A good way to avoid this is to configure policing on the OOB switches ports
facing the REs.
Regards
Amos
Sent from my iPhone
On 22 Jun 2012, at 15:16, "Phil Mayers"
mailto:p.may...@imperial.ac.uk>> wrote:
All,
Ye
All,
Yesterday, an error caused a loop in our OOB network. This resulted in
one of our route reflectors failing, badly. Apparently, the broadcast
storm caused the CFEB to die.
Both 1GE ports went link-down, which is understandable since the CFEB
actually seems to have rebooted:
admin@ext-m
On Wed, Jun 20, 2012 at 10:14 PM, Morgan McLean wrote:
> I have a /24 I want to announce, but I don't actually have it anywhere on
> the network. I NAT some of its IP's on the SRX that has the BGP session
> with our providers.
>
> I've been using static routes with the discard flag, but I don't r
> I have a /24 I want to announce, but I don't actually have it anywhere on
> the network. I NAT some of its IP's on the SRX that has the BGP session
> with our providers.
Static discard is really the best way. Aggregate/generate routes are
also theoretically possible, but if you are not sure you
20 matches
Mail list logo