Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Ben Dale
On 18/10/2012, at 2:05 PM, Jeff Wheeler wrote: > On Wed, Oct 17, 2012 at 8:38 PM, Ben Dale wrote: >> Table Tot Paths Act Paths SuppressedHistory Damp State >> Pending >> inet.0 1056579 354871 0 0 0 >> 0 > ... >> Data plan

[j-nsp] SRX sending thousands of VRRP packets per second

2012-10-17 Thread Saba Sumsam
Hi, We have two SRX 100s configured for VRRP; where SRX-A is the primary and SRX-B is the backup. I have noticed a great deal of VRRP packets being sent out - I have a capture of 50k packets being sent out in the first 7 seconds I monitored. The packets being sent out on SRX-B is lesser than on SRX

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Jeff Wheeler
On Wed, Oct 17, 2012 at 8:38 PM, Ben Dale wrote: > Table Tot Paths Act Paths SuppressedHistory Damp State > Pending > inet.0 1056579 354871 0 0 0 > 0 ... > Data plane memory576 MB Max 420 MB used ( 73 percent) <-

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Skeeve Stevens
Exactly the detailed answer I was looking for and what I thought it should be. * * *Skeeve Stevens, CEO - *eintellego Pty Ltd ske...@eintellego.net ; www.eintellego.net Phone: 1300 753 383; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego ; link

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Morgan McLean
I could technically tow 10,000 pounds with my car. I wouldn't do it though. Morgan On Wed, Oct 17, 2012 at 5:38 PM, Ben Dale wrote: > Hi Skeeve, > > On 18/10/2012, at 10:04 AM, Skeeve Stevens < > skeeve+juniper...@eintellego.net> wrote: > > Question is the specs say it can support a maximum

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Ben Dale
Hi Skeeve, On 18/10/2012, at 10:04 AM, Skeeve Stevens wrote: > Question is the specs say it can support a maximum of 700k routes. > > Now, if what I suspect is right, that is great, but I am getting > conflicting information. > The way I read the data sheets is the maximum "supported/test

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Morgan McLean
We switched to an MX80 pair and have had no problems since. Morgan On Wed, Oct 17, 2012 at 5:23 PM, Brent Jones wrote: > You're better off putting a router in front of your SRX to handle > taking full feeds. > You -can- do it on the SRX, but as mentioned, it isn't a fast platform > for convergi

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Brent Jones
You're better off putting a router in front of your SRX to handle taking full feeds. You -can- do it on the SRX, but as mentioned, it isn't a fast platform for converging. If you're looking for on the cheap, MX5s can be had for a song. On Wed, Oct 17, 2012 at 5:12 PM, Morgan McLean wrote: > 700,0

Re: [j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Morgan McLean
700,000 routes in the control plane, as far as I know. Let me share my experience. SRX650 cluster, max routes somewhere along that 700k number you gave. I was taking four feeds, giving me somewhere around 1.6M routes. It technically took all of them, but it took 20 minutes to failover all of those

[j-nsp] How are max routes calculated on an SRX

2012-10-17 Thread Skeeve Stevens
Hey all, I am considering using an SRX550 as a border router - its cheap, fast, and flexible, with a great selection of interfaces. Question is the specs say it can support a maximum of 700k routes. Now, if what I suspect is right, that is great, but I am getting conflicting information. A

Re: [j-nsp] delay-buffer in Juniper

2012-10-17 Thread Harry Reynolds
My testing on mpc and mpc-q circa 11.4 indicates that exact is supported, as a shaper, but in general shaping-rate is the preferred way to shape as it lets you specifyc both a CIR and PIR shaped rate. HTHs. http://www.juniper.net/techpubs/en_US/junos12.1/topics/reference/general/hw-cos-pic-sche

Re: [j-nsp] delay-buffer in Juniper

2012-10-17 Thread Serge Vautour
All of my testing was on "Q" cards (DPCE-R-Q-40GE-SFP). I never tried on on a pure R card. And yes on this type of card "rate-limit" acts exactly like a policer. -Serge From: Johannes Resch To: Serge Vautour Cc: Serge Vautour ; Huan Pham ; Stefan Fouant ;

Re: [j-nsp] GRE Traffic

2012-10-17 Thread Clay Haynes
Hello Mohammad, It depends - what's is the device terminating the GRE tunnel? MX, SRX, J, etc.? - Clay On 10/17/12 2:29 AM, "Mohammad Khalil" wrote: >Hi , I have a loopback interface configured as the source address of the >GRE tunnel >There is a firewall filter applied , what is the best

Re: [j-nsp] delay-buffer in Juniper

2012-10-17 Thread Johannes Resch
Hi,c > My testing has shown the following with regards to queue commands: DPC: -Rate-limit: works as expected, queue is policed. note that support of "rate-limit" on "regular" DPC (non EQ types) is relatively new (added in 10.x?). -Exact: Not supported did you test this on "regular" DPC (

Re: [j-nsp] J6350 Router recommended version

2012-10-17 Thread Graham Brown
Hi Rachid, Whilst I do not use the J6350 I can tell you that the recommended release from JTAC is JUNOS 10.4R11.4 (assuming that you have 1GB RAM & 1GB Flash) and JUNOS 10.2R4.8 if not. I've had a look through the release notes and the J6350 is supported for the 11.X and 12.1 versions with the sa

Re: [j-nsp] J6350 Router recommended version

2012-10-17 Thread Benny Amorsen
Rachid DHOU writes: > Does someone use J6350 Router ? Yes :) > Is this router can support JUNOS 11 or 12 ? Yes, up to 12.1, not yet 12.2. > What is the recommended version ? http://kb.juniper.net/InfoCenter/index?page=content&id=KB21476 > What is the requirement on DRAM and compact flash, i

[j-nsp] J6350 Router recommended version

2012-10-17 Thread Rachid DHOU
Hi experts, Does someone use J6350 Router ? Is this router can support JUNOS 11 or 12 ? What is the recommended version ? What is the requirement on DRAM and compact flash, if we go to 12 ? Kind regards, Rachid DHOU ___ juniper-nsp mailing list junip

Re: [j-nsp] WAN input prioritization on MX

2012-10-17 Thread Saku Ytti
> Too bad this config does not actually commit, so you're left with unreachable > empty config MX80 upon upgrade, but difference to normal JunOS operation goes > to the margin of error. > Commit error is 'Slot 1 cannot support Ingress Queueing in more than one pic' This is my bad, they were there

Re: [j-nsp] WAN input prioritization on MX

2012-10-17 Thread Saku Ytti
On (2012-10-16 19:23 -0300), Gustavo Santos wrote: > gustavo@BRD01# commit check > [edit class-of-service interfaces ge-1/1/4 unit 0] > 'input-shaping-rate' > cannot configure bandwidth (pic has no CoS queuing) > error: configuration check-out failed This is misconfig on your part, on corre

Re: [j-nsp] WAN input prioritization on MX

2012-10-17 Thread Ivan Ivanov
Hi, In that case you try Tricolor marking policer to mark the excessive traffic and drop it on output. It is not exactly the same but could help. http://www.juniper.net/techpubs/en_US/junos10.4/information-products/pathway-pages/cos/tricolor-marking-policers.html HTH, Ivan, On Wed, Oct 17, 2012