Re: [j-nsp] EX4200 Virtual Chassis Uplink Requirements - Extended VCT / VCCP

2012-06-25 Thread Paul Zugnoni
I don't believe an EX VC fiber port will work in James' provider-offered VPLS scenario for the reason that VPLS uses MAC learning to operation, and I believe the VC-ports on the EX assume a directly connected VC port from a neighboring EX. However, if the provider was offering him a pseudo wire

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-25 Thread Pavel Lunin
This is exactly what happened. The session table filled up. One of our security guys took down our edge 650 cluster from a single unix box out on the net. This is what happens when you use a stateful box for an internet router. a router with a covering aggreate and some knowledge of the

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-25 Thread Scott T. Cameron
On Mon, Jun 25, 2012 at 6:56 AM, Pavel Lunin plu...@senetsy.ru wrote: This is exactly what happened. The session table filled up. One of our security guys took down our edge 650 cluster from a single unix box out on the net. This is what happens when you use a stateful box for an

Re: [j-nsp] Whats the best way to announce an IP range in BGP? Doesn't physically exist anywhere.

2012-06-25 Thread Tim Eberhard
While it's true that like all flow based devices the session table is susceptible to session table attacks. There are some major built in protection schemes put into place to limit the effectiveness and protect the SRX. For the record your proof of concept would take a lot of pps to fill up the

Re: [j-nsp] EX4200 Virtual Chassis Uplink Requirements - Extended VCT / VCCP

2012-06-25 Thread Chuck Anderson
On Mon, Jun 25, 2012 at 06:23:36AM +, Paul Zugnoni wrote: It had its limitations, though: * This was on 10.1. No ISSU available, so couldn't set a high SLA * No SNMP polling was available then of the fiber VC ports. If you had issues with dirty fiber or weak signal, you'd have to find

Re: [j-nsp] EX4200 Virtual Chassis Uplink Requirements - Extended VCT / VCCP

2012-06-25 Thread Paul Zugnoni
Awesome! Thanks Chuck On 6/25/12 9:13 AM, Chuck Anderson c...@wpi.edu wrote: On Mon, Jun 25, 2012 at 06:23:36AM +, Paul Zugnoni wrote: It had its limitations, though: * This was on 10.1. No ISSU available, so couldn't set a high SLA * No SNMP polling was available then of the fiber

[j-nsp] IS-IS MT transition mode?

2012-06-25 Thread Michael Sinatra
Short question: Is there a JunOS equivalent of the IOS IS-IS command 'multi-topology transition'? If not, are there suggestions for transitioning from single-topology IPv4+IPv6 routing gradually, without creating IPv6 routing holes? thanks, michael ___

Re: [j-nsp] IS-IS MT transition mode?

2012-06-25 Thread Jared Gull
Hi Michael, You can enable an IPv6 unicast topology in addition to the default IPv4 and IPv6 topology for IS-IS using the 'topologies' keyword: [edit] user@router# set protocols isis topologies ? Possible completions: + apply-groups Groups from which to inherit configuration data +

Re: [j-nsp] IS-IS MT transition mode?

2012-06-25 Thread Michael Sinatra
On 06/25/12 19:47, Jared Gull wrote: Hi Michael, You can enable an IPv6 unicast topology in addition to the default IPv4 and IPv6 topology for IS-IS using the 'topologies' keyword: [edit] user@router# set protocols isis topologies ? Possible completions: + apply-groups Groups from which to