Re: [j-nsp] SRX and not working VRRP

2013-01-08 Thread Aaron Dewell
Actually, you have to do that on an MX also. By default, the virtual IP will not accept anything destined for it (such as pings) unless you enable accept-data. The "real" IP of the interface will respond, but not the shared address. Now, I have seen hokey setups before where people had confi

Re: [j-nsp] SRX and not working VRRP

2013-01-08 Thread Robert Hass
On Wed, Jan 9, 2013 at 12:40 AM, Chuck Anderson wrote: > set vrrp-group 0 accept-data Thanks a lot !. It helped. I used VRRP earlier on MX where this is not necessary to make VRRP work (but 10.4 on MX). Is above command is SRX (JunOS-ES) specific ? Rob __

Re: [j-nsp] SRX and not working VRRP

2013-01-08 Thread Chuck Anderson
On Wed, Jan 09, 2013 at 12:36:47AM +0100, Robert Hass wrote: > Hi > I have SRX100 running 11.4R6.5 and I cannot make VRRP working. I have > configuration like below: > > admin@srx100> show configuration interfaces fe-0/0/0 > unit 0 { > family inet { > address 10.0.0.69/29 { >

[j-nsp] SRX and not working VRRP

2013-01-08 Thread Robert Hass
Hi I have SRX100 running 11.4R6.5 and I cannot make VRRP working. I have configuration like below: admin@srx100> show configuration interfaces fe-0/0/0 unit 0 { family inet { address 10.0.0.69/29 { vrrp-group 0 { virtual-address 10.0.0.70; pr

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Chris Morrow
On 01/08/2013 04:47 PM, Darius Jahandarie wrote: > On Tue, Jan 8, 2013 at 3:30 PM, Richard A Steenbergen > wrote: >> I did warn Terry about this issue before he gave that presentation, but >> note that their performance requirements are MUCH lower than mine. The >> graphs in this presentation s

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Darius Jahandarie
On Tue, Jan 8, 2013 at 3:30 PM, Richard A Steenbergen wrote: > I did warn Terry about this issue before he gave that presentation, but > note that their performance requirements are MUCH lower than mine. The > graphs in this presentation show 100-1000Mbps attacks and 45kpps > attacks, which doesn'

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Richard A Steenbergen
On Mon, Jan 07, 2013 at 08:10:45PM -0800, Eric Cables wrote: > It's interesting that Flowspec was one of the presentations at the Bay Area > Juniper User's Group in October, and heavily used by CloudFlare. > > http://www.slideshare.net/junipernetworks/flowspec-bay-area-juniper-user-group-bajug I

Re: [j-nsp] More detailed log is needed on both SRX1400 & ISG2000

2013-01-08 Thread Eugeniu Patrascu
On Wed, Dec 19, 2012 at 12:33 PM, ahmad barakat wrote: > > Dears, > > actually we enabled the logging on our Firewalls, 2-SRX1400 and 2-ISG2000 in > stream mode and they send the log to a syslog server. > > we are facing a problem with the detailed report. because the log just > appeared the ses

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Chris Morrow
On 01/08/2013 04:43 AM, Christian wrote: > I confirm Alcatel has also implemented flowspec on their device. > On our side we also use it moderately on our backbone ; it is very easy > to implement and much more powerful than rtbh. ^just never is there o

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Christian
I confirm Alcatel has also implemented flowspec on their device. On our side we also use it moderately on our backbone ; it is very easy to implement and much more powerful than rtbh. Christian Le 08/01/2013 05:10, Eric Cables a écrit : It's interesting that Flowspec was one of the presentati