[j-nsp] Asymmetric flow, session reset, breaking SSH

Hi all, hoping there is someone familiar with J Series flow handling that can help me out with this. I have a network situation (deliberate by design, not accidental in any sense) that results in asymmetric data flow. There are 3 devices involved, a PC, J2320, and a Cisco 1811. The PC is plugged

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

We can go about this in one of 2 ways here. 1. Remove the cisco SVI and force all the traffic to be passed through the J series 2. Add interface NAT to the initial SSH session when passing the SYN through to ge-0/0/2.10. This achieves the same aim as 1 by forcing the reply traffic back

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

NAT is evil. :-) Removing the SVI from the Cisco seems the cleanest solution to me, allowing packets to just route naturally. Thanks. On 8 August 2012 15:08, Mark Menzies m...@deimark.net wrote: We can go about this in one of 2 ways here. 1. Remove the cisco SVI and force all the traffic to

Re: [j-nsp] Asymmetric flow, session reset, breaking SSH

NAT isnt evil, its just misunderstood. :) On 8 August 2012 16:06, Tom Storey t...@snnap.net wrote: NAT is evil. :-) Removing the SVI from the Cisco seems the cleanest solution to me, allowing packets to just route naturally. Thanks. On 8 August 2012 15:08, Mark Menzies m...@deimark.net

Re: [j-nsp] ASR9001 vs MX80

Is any reason juniper choose the 5 for mx5, 40 for mx40, 480 for mx480? The number is for backplane bandwidth? Thanks and regards, Xu Hu On 8 Aug, 2012, at 5:30, Doug Hanks dha...@juniper.net wrote: Please note there's also the MX5 through MX40 that can be upgraded via a license to a full

Re: [j-nsp] ASR9001 vs MX80

Hello. Yes and no. Yes, but befor using Trio Chipset, No because now for example MX480 system capacity is 1.92 Tbps. If I am wrong, please correct me. 2012/8/8 Xu Hu jstuxuhu0...@gmail.com Is any reason juniper choose the 5 for mx5, 40 for mx40, 480 for mx480? The number is for backplane

Re: [j-nsp] ASR9001 vs MX80

There was no technical reason behind the name of the MX5, MX10 or MX40; was just a marketing thing. Technically the MX5, MX10, MX40 or MX80 doesn't even have a switch fabric. Everything is done on a single Trio chipset. Typically the switch fabric would be connected into the Trio chipset as