Re: [j-nsp] QFX3500 LLDP service crash

2012-08-17 Thread Brent Jones
On Fri, Aug 17, 2012 at 5:56 PM, Sergey T wrote: > Hi! > > (platform:QFX3500, junos:12.2X50-D10.3) > > Have a problem with LLDP service on QFX3500 > Service never starts on boot without any log-lines. > When i try to restart it manually have that crash-report: > > serj@qfx3500-p2a> restart lldpd-

[j-nsp] QFX3500 LLDP service crash

2012-08-17 Thread Sergey T
Hi! (platform:QFX3500, junos:12.2X50-D10.3) Have a problem with LLDP service on QFX3500 Service never starts on boot without any log-lines. When i try to restart it manually have that crash-report: serj@qfx3500-p2a> restart lldpd-service error: Link Layer Discovery Protocol is not running Link

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Chris Kawchuk
Hi Clarke, We pass through BPDUs through VPLS the MX'es- but yes, miscreant users / switches will always be a problem. We do the following to every customer-facing VPLS instance, but only #3 would help you here: 1. Mac Limiting per VPLS Interface (100) (i.e per 'site') 2. Mac Limiting per VPLS

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Ge Moua
What about TRILL? Not sure if Juniper has jumped on the TRILL bandwagon yet. -- Regards, Ge Moua Univ of Minn Alumnus -- On 08/17/2012 11:06 AM, Wayne Tucker wrote: On Fri, Aug 17, 2012 at 8:08 AM, Clarke Morledge wrote: We have had the unfortunate experience of having users plug in small m

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Alexander Bochmann
Hi, ...on Fri, Aug 17, 2012 at 11:08:53AM -0400, Clarke Morledge wrote: > switch accidentally into two of our EX switches. Traffic will loop > through the miscreant switch between the two EXs and without BPDUs > it just looks like MAC addresses keep moving between the real > source and the tw

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Wayne Tucker
On Fri, Aug 17, 2012 at 8:08 AM, Clarke Morledge wrote: > We have had the unfortunate experience of having users plug in small > mini-switches into our network that have the capability of filtering out > (by-default) BPDUs while allowing other traffic through. The nightmare > situation is when a

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Jensen Tyler
Quick google for "VPLS Multihoming" found me this: http://www.juniper.net/techpubs/en_US/junos9.6/information-products/topic-collections/feature-guide/vpls-multihoming-bgp-signaling-solutions.html Jensen Tyler Sr Engineering Manager Fiberutilities Group, LLC -Original Message- From: juni

Re: [j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Clarke Morledge
On Fri, 17 Aug 2012, Jensen Tyler wrote: Quick google for "VPLS Multihoming" found me this: http://www.juniper.net/techpubs/en_US/junos9.6/information-products/topic-collections/feature-guide/vpls-multihoming-bgp-signaling-solutions.html Jensen Tyler Sr Engineering Manager Fiberutilities Group

[j-nsp] Tricks for killing L2 loops in VPLS and STP "BPDU-less" situations?

2012-08-17 Thread Clarke Morledge
We have had the unfortunate experience of having users plug in small mini-switches into our network that have the capability of filtering out (by-default) BPDUs while allowing other traffic through. The nightmare situation is when a user plugs in such a switch accidentally into two of our EX s

Re: [j-nsp] IPv6 firewall filter for Route-Engine protection

2012-08-17 Thread Georgios Vlachos
Hello Harry and all, Is there any update on how we can possibly match the second "next-header"? As far as I know this affects all Junos products, currently only the first header can be checked, correct? Thank you, George -Original Message- From: juniper-nsp-boun...@puck.nether.net [ma