Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread Pavel Lunin
I have a /24 I want to announce, but I don't actually have it anywhere on the network. I NAT some of its IP's on the SRX that has the BGP session with our providers. Static discard is really the best way. Aggregate/generate routes are also theoretically possible, but if you are not sure you

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread Scott T. Cameron
On Wed, Jun 20, 2012 at 10:14 PM, Morgan McLean wrx...@gmail.com wrote: I have a /24 I want to announce, but I don't actually have it anywhere on the network. I NAT some of its IP's on the SRX that has the BGP session with our providers. I've been using static routes with the discard flag,

[j-nsp] Broadcast storm on M7i fxp0 kills the CFEB?

2012-06-22 Thread Phil Mayers
All, Yesterday, an error caused a loop in our OOB network. This resulted in one of our route reflectors failing, badly. Apparently, the broadcast storm caused the CFEB to die. Both 1GE ports went link-down, which is understandable since the CFEB actually seems to have rebooted:

Re: [j-nsp] Broadcast storm on M7i fxp0 kills the CFEB?

2012-06-22 Thread Amos Rosenboim
Hello Phil, I have seen this happen a few times and with different platforms. A good way to avoid this is to configure policing on the OOB switches ports facing the REs. Regards Amos Sent from my iPhone On 22 Jun 2012, at 15:16, Phil Mayers

Re: [j-nsp] Strange log messages with a new SFP Module.

2012-06-22 Thread Gustavo Santos
Thanks for your answer. All of a sudden the log message stop to show on show log messages. The module is the one below. PIC port information: FiberXcvr vendor Port Cable typetype Xcvr vendorpart number Wavelength 2 GIGE

Re: [j-nsp] Broadcast storm on M7i fxp0 kills the CFEB?

2012-06-22 Thread Phil Mayers
On 22/06/12 13:29, Amos Rosenboim wrote: Hello Phil, I have seen this happen a few times and with different platforms. A good way to avoid this is to configure policing on the OOB switches ports facing the REs. Unfortunately, our OOB network is constructed from older, repurposed equipment. I

Re: [j-nsp] Strange log messages with a new SFP Module.

2012-06-22 Thread Ihsan Junaidi Ibrahim
That's the SFP vendor that I had issues with too. I remember there's a fix on of the the recent release notes for the same vendor but for its XFF and SFP+ xceivers. Probably there's a chance of logging in a case with Juniper for 1GE SFPs. ihsan On Jun 22, 2012, at 8:41 PM, Gustavo Santos

Re: [j-nsp] Broadcast storm on M7i fxp0 kills the CFEB?

2012-06-22 Thread Clarke Morledge
Phil, Actually, I am not surprised that this happened to you. The fxp0 interface is a funny animal. It isn't really as isolated from the rest of the box as you would think. Since all IP broadcast/multicast on layer3 interfaces get sent to the RE by default, if you get a loop that starts

[j-nsp] More Multicast Routing Help needed please..

2012-06-22 Thread Spam
Hello All, I've been trying to get multicast routing between 2 vlans on my SRX240 working so the Apple Mac's on both vlans can see each other and use their respective services. I have read many articles but still haven't gotten it to work. I'm sure I'm just missing 1-2 commands. I also do not

Re: [j-nsp] More Multicast Routing Help needed please..

2012-06-22 Thread OBrien, Will
You'll want to make sure that your switches aren't quashing things as well. igmp snooping on various vendor hardware usually makes my head hurt. I suggest allowing broadcast flood for multicast to prove that your multicast router is functioning properly and then locking down your igmp config

Re: [j-nsp] More Multicast Routing Help needed please..

2012-06-22 Thread Joel jaeggli
On 6/22/12 07:37 , Spam wrote: Hello All, I've been trying to get multicast routing between 2 vlans on my SRX240 working so the Apple Mac's on both vlans can see each other and use their respective services. bonjour is: 224.0.0.251 by definition it's local to one subnet. 224.0.0.0 -

Re: [j-nsp] More Multicast Routing Help needed please..

2012-06-22 Thread Phil Mayers
On 22/06/12 15:37, Spam wrote: Hello All, I've been trying to get multicast routing between 2 vlans on my SRX240 working so the Apple Mac's on both vlans can see each other and use their respective services. You didn't say what kind of multicast traffic you are trying to get working. Are you

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread Doug Hanks
The static discard works just fine, but from what from I recall a simple static route would not insert the ATOMIC_AGGREGATE into BGP. For example to advertise 192.168.1.0/24 with ATOMIC_AGGREGATE. set routing-options static route 192.168.1.1/32 discard (contributing route) set routing-options

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread Morgan Mclean
What protocol do these aggregates show up under? Not static? Morgan Sent from my iPhone On Jun 22, 2012, at 9:15 AM, Doug Hanks dha...@juniper.net wrote: The static discard works just fine, but from what from I recall a simple static route would not insert the ATOMIC_AGGREGATE into BGP.

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread Morgan Mclean
This is exactly what happened. The session table filled up. One of our security guys took down our edge 650 cluster from a single unix box out on the net. Sent from my iPhone On Jun 22, 2012, at 4:39 AM, Scott T. Cameron routeh...@gmail.com wrote: On Wed, Jun 20, 2012 at 10:14 PM, Morgan

[j-nsp] dual stack bandwidth limitation on E-series

2012-06-22 Thread Roman A. Nozdrin
Hello All, I'm trying to introduce commercial IPv6 services for pppoe customers in my network. I realized that I don't know how to put an aggregated limitation on both(ipv4/v6) downstreams. I've tried compound shared shaping and external parent group policing. Both features don't work the

Re: [j-nsp] dual stack bandwidth limitation on E-series

2012-06-22 Thread David Lockuan
Hi Roman, About your question, the LM10 for E320 and E120 don't support, for the moment, external-parent group, this feature should be for the release 14.1.x of JunoSE. In my case, we are using QoS profile to limit the downstream traffic and the limit of upstream will be done in the DSLAM. Hope

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-22 Thread joel jaeggli
On 6/22/12 9:49 AM, Morgan Mclean wrote: This is exactly what happened. The session table filled up. One of our security guys took down our edge 650 cluster from a single unix box out on the net. This is what happens when you use a stateful box for an internet router. a router with a

Re: [j-nsp] Broadcast storm on M7i fxp0 kills the CFEB?

2012-06-22 Thread joel jaeggli
On 6/22/12 6:28 AM, Phil Mayers wrote: On 22/06/12 13:29, Amos Rosenboim wrote: Hello Phil, I have seen this happen a few times and with different platforms. A good way to avoid this is to configure policing on the OOB switches ports facing the REs. Unfortunately, our OOB network is