Re: [j-nsp] Are we under some weird SPAM attack?

2013-05-01 Thread Mark Tinka
On Thursday, May 02, 2013 05:40:28 AM Michael Loftis wrote: > And answered my own ? by reading the rest of my inbox. The posts look legit, but consistently seem to be HTML-based e-mail. Mark. signature.asc Description: This is a digitally signed message part. _

[j-nsp] Are we under some weird SPAM attack?

2013-05-01 Thread Michael Loftis
Traffic on the list seems absolutely through the roof here...And a lot of the messages are double posts, or following the same form. They're not like a markov generator or anything but they're kind of out of character for this list. Did the list posted somewhere new for the GWF crowd? -- "Geniu

Re: [j-nsp] Unable to ping all NE when MAC are learned in Bridge group

2013-05-01 Thread Jason Fortier
The NE have the correct ARP address of the MX5, the MX5 on the other hand does not have an ARP entry. It does learn a MAC from the NE in the bridge domain. for what ever reason the RI is unable to put the two together. For some reason the link between the Bridge and Routing Instance is missing

Re: [j-nsp] 3G/4G on SRX

2013-05-01 Thread Aaron Dewell
I have a cx111 which I use when the primary connection goes down. I'm using usb tethering from my phone which works only if you're willing to constantly mess with it. I wouldn't recommend that setup. However, I have a customer using the non rebadged cx111 (aka cradlepoint cba750) with the paired

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread Ben Boyd
I wonder if you configuration as fe-0/0/2 instead of ge-0/0/2 if that would work... --- Ben Boyd b...@sinatranetwork.com http://about.me/benboyd On May 16, 2011, at 1:32 PM, Keith wrote: > > Trying to connect GE copper SFP on MX to a 100meg port on a cisco

Re: [j-nsp] Juniper Foundry MPLS interoperability

2013-05-01 Thread David Ball
I can't comment on your specific requirement, but I've done L2VPN (Martini l2ckt, actually) and L3VPN between a Brocade MLX4 and Juniper MX and T-series in the past. Required a small amount of fiddling (if I recall correctly, MLX couldn't support the consolidated RSVP message dump that Junipers

Re: [j-nsp] 3G/4G on SRX

2013-05-01 Thread Ben Dale
Hi Jeff, To use the USB port on the branch SRX 100,110 or 210 as 3G/4G backup you need a sierra wireless modem. There are very few listed on Juniper's supported list, but at least here in Australia I've found that most available Sierra 3G modems tend to work including: USB306 SW312U AC326U AC

Re: [j-nsp] Are we under some weird SPAM attack?

2013-05-01 Thread Michael Loftis
And answered my own ? by reading the rest of my inbox. Back under my rock now. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] 3G/4G on SRX

2013-05-01 Thread Jeff Rooney
Does anyone have any experience using a prepaid or month to month 3G/4G connection on a branch SRX? I am looking to replace a dial backup with a cellular connection, but the documentation is pretty weak and only references a Sierra Wireless AirCard. Any suggestions? Thanks. Jeff _

Re: [j-nsp] any guidance on JNCIP-M

2013-05-01 Thread Diogo Montagner
Don't forget to go through the topics that are not covered in the Sybex guides but are present in the exam. Thanks ./diogo -montagner JNCIE-SP 0x41A On Mon, Apr 26, 2010 at 11:15 PM, Scott Morris wrote: > ** > I believe the Sybex books are still available on Juniper's web site as > PDFs. Tha

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread Paul Stewart
We have some but as someone else pointed out, they are tri-rate we are usingŠ. Paul On 2013-05-01 1:35 PM, "OBrien, Will" wrote: >I've yet to see any gig copper sfp talk at 100mb. Ever. > >Will O'Brien > >On May 1, 2013, at 12:32 PM, "Keith" wrote: > >> Trying to connect GE copper SFP on MX to

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread Jerry Jones
I think you need to specifically use the tri-state SFPs for this to work SFP-1GE-FE-E-T SFP capable of support 10/100/1000 speeds On May 10, 2011, at 6:59 PM, Keith wrote: Trying to connect GE copper SFP on MX to a 100meg port on a cisco switch, 3560 actually. ge-0/0/2 { description

Re: [j-nsp] (no subject)

2013-05-01 Thread Ivan Ivanov
Jailbreaked iPhone, even you can use RDP in ssh tunnel. Upcoming iPhone OS 4 will support SSL VPN from Juniper. I haven't tried Android, but iPhone is good enough when you used to use shell with touch screen. [?] 2010/6/5 Tomasz Mikołajek > Ok, so if we are talking about mobile phones/smartph

[j-nsp] PFE Drops

2013-05-01 Thread Paul Stewart
Can anyone point me to documentation on the specifics of the following output? I'm trying to understand specifically "Software input medium drops" I believe at this pointŠ. What's happening is the device becomes non-pingable (ICMP) for a few hours about once a week and I'm trying to figure out wh

Re: [j-nsp] SSG20 & PBR to Web Proxy

2013-05-01 Thread Ben Dale
Hi Josh, I would recommend putting the proxy in it's own subnet and zone (even just a /30 off to the side). Then you can apply policy routing on your external interface for inbound traffic, and the LAN interface for your outbound traffic. If you let return connections go directly back to the c

Re: [j-nsp] Fwd: MX80 Q-in-Q

2013-05-01 Thread lppmaster
There is a solution.Here is a working configuration. MX is not used as BRAS, it terminated Q-in-Q Distribution of IP addresses via DHCP relay.  ge-1/1/0 {        flexible-vlan-tagging;        encapsulation flexible ethernet services;        unit 890 {            proxy-arp restricted;            vla

Re: [j-nsp] Industrial Socket for EX8208??

2013-05-01 Thread Keegan.Holley
Both switches depend on the type of power supply ordered and the country you install it in. For example you can have a 6500 with power supplies that use the normal sockets. A fully populated 6509 will consume most of the power on a 220/208V AC circuit so it is easier to order it with the "ind

Re: [j-nsp] any guidance on JNCIP-M

2013-05-01 Thread Scott Morris
I believe the Sybex books are still available on Juniper's web site as PDFs.  That would be excellent study material to start with!  Lab up everything in them and play around/change things, and you'll gain lots of insight for the lab!   Scott Morris, CCIEx4 (R&S/ISP-Dial/Security/Servi

Re: [j-nsp] Load Balancing on 2x MSPIC 100 for NAT

2013-05-01 Thread Pajlatek
Title: Re: [j-nsp] Load Balancing on 2x MSPIC 100 for NAT Very nice trick:) Even found on juniper-nsp http://puck.nether.net/pipermail/juniper-nsp/2006-February/006094.html Thanks guys! Peter 5) Create the service-filters: set firewall family inet service-filter SS_PART1_FILTER term part1

[j-nsp] Aggregate interface AE issue

2013-05-01 Thread Ala' Amira
Dear Friends, I have applied AE interface between 2 MXs and it is working fine but I have lost the connectivity to the Media Management units only which is behind AE interface although the Management Vlan already exist in the trunk, Description: cid:image001.png@01CD23AB.F0196BB0 This

[j-nsp] Automated software upgrade on massive EX4200 deployment method advice

2013-05-01 Thread Jerry Jaquith
I'm tasked with upgrading about 600 EX4200 switches to the latest recommended OS. My first thought is to begin writing perl scripts, but wonder if anyone has already been down this road and can offer some help? These are fresh out of the box with no initial configuration. Thanks! Jerry Jaqui

Re: [j-nsp] Per packet load balancing with Juniper ERX ?

2013-05-01 Thread guan wang
Hi Stevanus, i cannot use " ip multipath round robin " for ADSL(PPPoE) interfaces (interface gigabitEthernet 11/0.622.xxx), Any ERX Radius attribute can do this ? interface gigabitEthernet 11/0.622 ! vlan id 622 ip multipath round-robin pppoe pppoe auto-configure pppoe profile any "ABCD_pp

[j-nsp] SRX 100 as TFTP Server

2013-05-01 Thread Bruce Buchanan
Hi Everyone, Does anyone know if the SRX100 can act as a local TFTP Server? I've got a small remote office site with some IP phones, and I would like to set option 66 on the dhcp server (dhcp server is the srx). This would allow a zero touch install of the IP phones (along with LLDP-MED),

Re: [j-nsp] J6350 Jumbo frame MTU and OSPF setting

2013-05-01 Thread Harris Hui
Hi Ben, Thanks for your suggestion. I had performed the iPerf UDP test, do you think is it normal for the 100Mbps link? Host A (10.16.xx.58) <-> EX 4200 Switch <--> J6350 (MTU 9018) <- Fiber circuit 100Mbps (from West to East coast ~80ms) --> (MTU 9018) J6350 <-- EX 4200 S

[j-nsp] help

2013-05-01 Thread Daniel.Hilj
Daniel Hilj JNCIE, CCIP M: 07920 202534 | T: 01252 500 751 | F: 01252 405 605 E: daniel.h...@synetrix.co.uk [cid:image001.jpg@01C9FA35.3FA41B60] Synetrix House, 49-51 Victoria Rd Farnborough, Hampshire, GU14 7PA www.synetrix.co.uk

[j-nsp] TFTP Server on SRX100

2013-05-01 Thread Bruce Buchanan
Hi Everyone, Does anyone know if the SRX100 can act as a local TFTP Server? I've got a small remote office site with some IP phones, and I would like to set option 66 on the dhcp server (dhcp server is the srx). This would allow a zero touch install of the IP phones (along with LLDP-MED),

[j-nsp] sflow on switch

2013-05-01 Thread Pappas, AJ
Does anyone know what the performance hit would be on an ex4200 POE switch if you enable the following on all interfaces? Would there be problems? sflow { polling-interval 20; sample-rate 500; collector 10.169.68.15; interfaces ge-0/0/0.0; interfa

Re: [j-nsp] J6350 Jumbo frame MTU and OSPF setting

2013-05-01 Thread Harris Hui
Hi Ben, Thanks for your reply. I am using JUNOS 10.0R4.7. harris@> show version node0: -- Hostname: Model: j6350 JUNOS Software Release [10.0R4.7] node1: -

Re: [j-nsp] J6350 Jumbo frame MTU and OSPF setting

2013-05-01 Thread Harris Hui
Hi Ben, Looks like I can apply the MTU setting on the reth interface but cannot apply it on the fiber modules. show interfaces reth4 Physical interface: reth4, Enabled, Physical link is Up Interface index: 132, SNMP ifIndex: 180 Link-level type: Ethernet, MTU: 9192, Speed: 1000mbps, BPDU Err

[j-nsp] Calea

2013-05-01 Thread Chris Gapske
I was asking or polling what people are doing to be Calea compliant the service we are using just doubled the price for their service and we are not looking to move. Chris Gapske Network Analyst Paducah Power System Office 270-575-4005 Fax 270-408-4005 1500 Broadway P.O. Box 180 Paducah, Ky

Re: [j-nsp] Is the J-6350 in Chassis Cluster mode support Router Context (IPv4 Packet-based forwarding)

2013-05-01 Thread Harris Hui
Yes, I disabled all the security { } related features in my single J-6350 for testing as well. Thanks Harris |> | From: | |> >

Re: [j-nsp] JNCIP-SP latest dumps

2013-05-01 Thread Scott Morris
And because high school exams allows calculators explains why people can't figure out how to make change today after hitting the wrong keys on the cash register... Because the education system in general is catering to the lowest common denominator doesn't mean that

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread Serge Vautour
Very likely no. What's the SFP model number and the line card type you're using on the MX? Serge From: Keith To: juniper-nsp@puck.nether.net Sent: Tuesday, May 10, 2011 8:59:06 PM Subject: [j-nsp] 1000BaseT SFP Trying to connect GE copper SFP on MX to a

Re: [j-nsp] 10.0 or 10.4?

2013-05-01 Thread Dusan Avbreht
Junos 10.4R2.6 is one of the most stabile version in las few years! [?] 2011/3/16 Bjørn Tore Paulen > Den 15.03.2011 23:19, skrev Doug Hanks: > > I can confirm this as well. Junos Transformation/Ironman started with >> 10.4R2. There should be a meaningful difference. I know they've increased

[j-nsp] M5 RE in M20 (lab -> production)

2013-05-01 Thread Tom
Hello, I just faced a problem where I put a former production RE (junos 8.5) from M160 into our lab M5. Boot was from cfcard, no hdd installed. Junos bootup msgs were showing “packet mismatch” for pfe packages. Normally it seems that junos is loading this from a full software image on hdd if no

[j-nsp] log in M20

2013-05-01 Thread iber-x
Hello there, this message has appeared in the log of our M20. It is not the first time it occurs and we are quite worried.  The average CPU consumption is 4% and just at the time the message appeared on the log, we found increases up to 100% and an increase in temperature of 6 º in the routing-

[j-nsp] Log in M20

2013-05-01 Thread iber-x
Hello there, this message has appeared in the log of our M20. It is not the first time it occurs and we are quite worried.  The average CPU consumption is 4% and just at the time the message appeared on the log, we found increases up to 100% and an increase in temperature of 6 º in the routing-

Re: [j-nsp] EX 3200 - no arp entries after power failure

2013-05-01 Thread Kyle Evans
We had a problem with 10.0r2 where the switch would stop learning mac addresses under certain conditions (major problem).  We are currently using 10.0S1.1, but I don't know if we've been using it long enough for me to feel comfortable recommending it. Kyle Dan Farrell wrote: Believe it

[j-nsp] Log in M20

2013-05-01 Thread iber-x
This message has appeared in the log of our M20. It is not the first time it occurs and we are quite concerned. The average CPU consumption is 4% and just at the time the message appeared on the log, we found increases up to 100% and an increase in temperature of 6 º in the routing-engine 0. Th

Re: [j-nsp] srx240 VPN Question

2013-05-01 Thread Aaron Dewell
I use this for backup connectivity on dynamic endpoints and they are quite happy. One end must be fixed (which I assume is yours). Their configuration: set security ike gateway gateway-name local-identity inet their-vpn-ip-address set security ike gateway gateway-name remote-identity inet your

[j-nsp] Juniper Foundry MPLS interoperability

2013-05-01 Thread Armin Kask
Hi All, we have a network consisting of FESX/SuperX and CES/CER switches in a ring formationFESX/SuperX are used for L2 forwarding and CES/CER are also connected to the ring doing L2 and L2VPN on top.We have an idea to break up the large L2 domain kept together by MSTP with some MPLS routers so th

[j-nsp] Aggregate interface AE issue

2013-05-01 Thread Ala' Amira
Dear Friends, I have applied AE interface between 2 MXs and it is working fine but I have lost the connectivity to the Media Management units only which is behind AE interface although the Management Vlan already exist in the trunk, This is the configuration on one of the routers :

Re: [j-nsp] JNCIS

2013-05-01 Thread Scott Morris
E is for the BRAS systems (ERX) M is for the SP systems (M7i, M10i, M320, etc.) ER is for the Enterprise systems (J series now, SRX to be included) Right now all written exams are $125.  Shortly that will change.  $100 for A-level, $200 for S-level. Right now, you can go direct to S-level.  W

Re: [j-nsp] Class E IP addresses

2013-05-01 Thread joel jaeggli
On 3/8/10 1:53 PM, keegan.hol...@sungard.com wrote: As with most other "dirty" address ranges these will inevitably be used for something. It's just a fact of life as IPv4 space becomes more and more scarce. For example APNIC has begun assigning addresses in the previously reserved and often hi

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread OBrien, Will
I've yet to see any gig copper sfp talk at 100mb. Ever. Will O'Brien On May 1, 2013, at 12:32 PM, "Keith" wrote: > Trying to connect GE copper SFP on MX to a 100meg port on a cisco switch, > 3560 actually. > > ge-0/0/2 { > description "<< Test Link >>"; > enable; > spe

[j-nsp] 1000BaseT SFP

2013-05-01 Thread Keith
Trying to connect GE copper SFP on MX to a 100meg port on a cisco switch, 3560 actually. ge-0/0/2 { description "<< Test Link >>"; enable; speed 100m; link-mode full-duplex; unit 0 { family inet { address 1

[j-nsp] Log Juniper M20

2013-05-01 Thread iber-x
Hi all, anyone knows what could be the reason that this message appears on the log of our juniper M20? Apr 6 06:00:15 -yyy2.abc-d.net LEV[2625]: RPD_SCHED_SLIP: 5 sec scheduler slip, user: 4 sec 940542 usec, system: 0 sec, 14925 usec Apr 6 05:58:07 -yyy2.abc-d.net LEV[2625]: RPD_SC

[j-nsp] Log Juniper M20

2013-05-01 Thread iber-x
Hi all, anyone knows what could be the reason that this message appears on the log of our juniper M20? Apr 6 06:00:15 -yyy2.abc-d.net LEV[2625]: RPD_SCHED_SLIP: 5 sec scheduler slip, user: 4 sec 940542 usec, system: 0 sec, 14925 usec Apr 6 05:58:07 -yyy2.abc-d.net LEV[2625]: RPD_SC

[j-nsp] Lost adjacency in ISIS

2013-05-01 Thread iber-x
Hi all, anyone knows what could be the reason that this message appears on the log of our juniper M20? Mar 25 05:58:54 xxXX.yyy2.abc-x.net rpd[2604]: RPD_ISIS_ADJDOWN: IS-IS lost L2 adjacency to xxXX.yyy1 on ae0.153, reason: Aged Out Thanks Mathew ___

[j-nsp] Lost adjacency in IS-IS

2013-05-01 Thread iber-x
Hi all, anyone knows what could be the reason that this message appears on the log of our juniper M20? Mar 25 05:58:54 xxXX.yyy2.abc-x.net rpd[2604]: RPD_ISIS_ADJDOWN: IS-IS lost L2 adjacency to xxXX.yyy1 on ae0.153, reason: Aged Out Thanks Mathew __

Re: [j-nsp] Load Balancing on 2x MSPIC 100 for NAT

2013-05-01 Thread Pajlatek
Title: Re: [j-nsp] Load Balancing on 2x MSPIC 100 for NAT The config that Artur proposed works great on M10i/M7i with 2xMSPIC + 1x ADV II PIC, without any problems or licenses. Peter Okupski --  Best regards,  Pajlatek                            mailto:pajla...@widzew.net

[j-nsp] Absence [Message automatique]

2013-05-01 Thread grousseau
Bonjour, Je suis absent du 26/03 au 30/03 Cordialement, Guillaume ROUSSEAU Hello, I'am ooo from 26/03 to 30/03 Regards, Guillaume ROUSSEAU ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Aggregate interface AE issue

2013-05-01 Thread Ala' Amira
Dear Friends, I have applied AE interface between 2 MXs and it is working fine but I have lost the connectivity to the Media Management units only which is behind AE interface although the Management Vlan already exist in the trunk, This is the configuration on one of the routers :

Re: [j-nsp] SRX - Static Routing Out Same Interface

2013-05-01 Thread Andrew Jones
If the SRX is in flow mode, make sure that the return traffic takes the same path back, including passing through the SRX. Otherwise the SRX may only see half the conversation and time out connections due to it not seeing the full TCP handshake. On 02.05.2013 01:01, OBrien, Will wrote: Do yo

[j-nsp] SSG20 & PBR to Web Proxy

2013-05-01 Thread Josh Farrelly
Hi guys. We have a customer who'd like to implement a transparent web proxy configuration using a Sophos Web Appliance. They sit behind an SSG20 that connects them to the Internet. I'm suggesting the proxy will have an IP in the LAN range. I've confirmed with Sophos that the proxy will corr

[j-nsp] private referral network

2013-05-01 Thread Delian Delchev
I'd like to include you in my private referral network. Please accept my invitation below. Thanks! Best, Delian Delchev Dsmarter View invitation from Delian Delchev "The new, fast growing networking website is using the power of communication to help small businesses build powerful referra

Re: [j-nsp] 1000BaseT SFP

2013-05-01 Thread Paul Stewart
We haven't had any issues using Prolabs 3rd party SFP's in MX platform before at 100meg at least on DPCE cards - can't remember if we ever tried with Juniper "authentic" before or notŠ Also we have used them on MX80 platform (20x1 GE MIC card) Paul On 2013-05-01 2:20 PM, "Serge Vautour" wrote:

[j-nsp] Cisco VSS vs Juniper Virtual Chassis

2013-05-01 Thread Fernando Pascual
Hi, anyone know if the cisco`s vss (virtual switching system) technology can be replaced with Juniper`s "Virtual Chassis" feature ?, as I know this is not possible (I mean, VSS is better than virtual chassis), could it be replaced with another juniper`s junos feature with the same vss performance

Re: [j-nsp] SRX - Static Routing Out Same Interface

2013-05-01 Thread OBrien, Will
Do you have a policy allowing traffic from that zone to that zone? On Nov 3, 2010, at 7:33 AM, Bruce Buchanan wrote: Hi List – Can anyone give any suggestion/guidance on the following. I’m trying to do a static route *out* the same interface that the traffic came *in* on. This is on an SRX-24

[j-nsp] port forwarding howto

2013-05-01 Thread Pappas, AJ
Hello, I am still new to Juniper. I am running a SRX240H and want to port forward for a specific IP address that is listed in our Proxy ARP range. I am also running 10.2 as the code for the firewall. 209.175.161.137 - External address of our server (server A) Message exchange between the

[j-nsp] Log in M20

2013-05-01 Thread iber-x
Hello there,   this message has appeared in the log of our M20. It is not the first time it occurs and we are quite worried.  The average CPU consumption is 4% and just at the time the message appeared on the log, we found increases up to 100% and an increase in temperature of 6 º in the routin

Re: [j-nsp] Inserting security policies on SRX

2013-05-01 Thread Giuliano Cardozo Medalha
before using insert i think you need to create the policy !!! insert is an entry more related to moving policy objects or firewall terms and not creation (set) Sent from my iPhone On 18/07/2011, at 17:07, "James S. Smith" wrote: > I have an SRX240 running 11.1R2.3, and occasionally I have to

[j-nsp] Juniper Switch Packet Buffer Matrix

2013-05-01 Thread Skeeve Stevens
Hey all, I am doing some iSCSI implementations are the moment and are looking at which switch models are best for different iSCSI rollouts we're doing. I am wanting to know about the following for the EX2200/3200/4300 series switches: - Size of packet buffering per model -

Re: [j-nsp] JUNOS - TACACS - Cisco ACS Allowed Commands

2013-05-01 Thread Serrano Samaca, Edinson (EXT-Other - MX/Mexico City)
Hello Ralpah, did you get a solution for your issue? I am using a m10i junos 10.0, with ACS version 4.4, and the behavior is the same. The user authenticated by tacacs does not take the paremeter configured, just take the class in remote template. Best Regards, Edinson M. Serra

[j-nsp] Issues with LACP and Microsoft

2013-05-01 Thread Sipes, Nathan
Has anyone run into this error message with LACP configured between a EX and a Windows 2003 server? If so any corrections for it ? Jan 29 15:46:20 CLGRABMI-02-SW1 /kernel: ge-1/0/9: received pdu - length mismatch for lacp : len 128, pdu 124 Jan 29 15:46:20 CLGRABMI-02-SW1 /kernel: ge-0/0/26

[j-nsp] M5 RE in M20 (lab to production)

2013-05-01 Thread Tom Schmidt
Hello, I just faced a problem where I put a former production RE (junos 8.5) from M160 into our lab M5. Boot was from cfcard, no hdd installed. Junos bootup msgs were showing “packet mismatch” for pfe packages. Normally it seems that junos is loading this from a full software image on hdd if no

Re: [j-nsp] J6350 Jumbo frame MTU and OSPF setting

2013-05-01 Thread Harris Hui
Thanks Jonathan for the good tips. :-) - Harris |> | From: | |> >--| |Jonathan Lassoff

Re: [j-nsp] Inserting security policies on SRX

2013-05-01 Thread James S. Smith
Never mind, answered my own question. Didn't realize you have to define the policy first and let it be added to the bottom of the list, and then use the insert statement to move it. James S. Smith Network Architect WIND Mobile 207 Queen's Quay West, Suite 710 Toronto, ON M5J 1A7 Email: jsm...

Re: [j-nsp] Fwd: bgp license mx480 MPC-3D-16XGE-SFPP

2013-05-01 Thread Mark Tinka
On Tuesday, April 30, 2013 11:47:52 PM Eugeniu Patrascu wrote: > In the Release Notes for JUNOS 12 something for EX, there > is an example of commit error when you use a protocol > without a license and you cannot use it. I am missing > the right link now but it stood out as it was the first > time

[j-nsp] srx240 VPN Question

2013-05-01 Thread Pappas, AJ
I have a srx240. I have someone who has a vpn with us who wants to change from a static IP address on an ipsec tunnel to a FQDN. Is there any documentation on how to do this or if it is possible? He is able to provide the two ip's to me that it will be coming from. This is for a failover from t

[j-nsp] Únete a mi red en LinkedIn

2013-05-01 Thread Karthik T S a través de LinkedIn
___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Senior Advanced IP Routing and Switching engineers - multiple locations USA

2013-05-01 Thread Samantha Smith
Hello, We are currently recruiting for Senior IP Routing and Switching CCIE/ JNCIE / JNCIP level engineers to join the Advanced Services organisation for a global networking vendor. Responsibilities include complex troubleshooting and problem solving at a Tier3/ 4 level for select key worldwide

Re: [j-nsp] (no subject)

2013-05-01 Thread Tomasz Mikołajek
Have you ever used Junos Pulse on mobile phone? W dniu 5 czerwca 2010 22:29 użytkownik Ivan Ivanov napisał: > Jailbreaked iPhone, even you can use RDP in ssh tunnel. > > Upcoming iPhone OS 4 will support SSL VPN from Juniper. > > I haven't tried Android, but iPhone is good enough when you used to

[j-nsp] 1000BaseT SFP

2013-05-01 Thread Keith
 Trying to connect GE copper SFP on MX to a 100meg port on a cisco switch, 3560 actually. ge-0/0/2 { description "<< Test Link >>"; enable; speed 100m; link-mode full-duplex; unit 0 { family inet { add

[j-nsp] Juniper SRX 3400 Clustering

2013-05-01 Thread Altaf Ahmad
Hi Experts, I did configure the clustering of SRX 3400 chassis without installing SRX3K-CRM Module and it went successful. Could anyone please let tell me that then what is the purpose of CRM? Even in Juniper SRX3400 hardware guide I read that this module is necessary for the clustering. But I

[j-nsp] Layer 3 sub interfaces on a EX3200

2013-05-01 Thread Bruce Buchanan
Hi List, Long time lurker, first time poster here. Does anyone know what the maximum number of L3 sub-interfaces is on a single interface on an EX-3200? Thanks! Bruce Bruce Buchanan Senior Network Technician Nexicom 5 King St. E., Millbrook, ON, LOA 1GO Phone: 705-932-4147 FAX: 705

Re: [j-nsp] Industrial Socket for EX8208??

2013-05-01 Thread Keegan.Holley
Have you tried google? :) Here's a link with pictures. http://www.juniper.net/techpubs/en_US/release-independent/junos/topics/reference/specifications/ac-power-ex8200-series-cord.html Re: [j-nsp] Industrial Socket for EX8208?? Fahad Khan to: Keegan.Holley 05/02/10 02:32 PM Cc: juniper-

[j-nsp] (no subject)

2013-05-01 Thread Elayaraja K [ IT ]
_ 7 Switch off as you go | qRecycle always | P Save Paper - Save Trees | [Description: cid:image003.jpg@01CA8223.3FC8A220] Go Green This email and any attached files ("Message") may c

[j-nsp] Juniper and Brocade CES/CER interoperability

2013-05-01 Thread Armin Kask
Hi All, we have a network consisting of FESX/SuperX and CES/CER switches in a ring formationFESX/SuperX are used for L2 forwarding and CES/CER are also connected to the ring doing L2 and L2VPN on top.We have an idea to break up the large L2 domain kept together by MSTP with some MPLS routers so th

Re: [j-nsp] STP Between Cisco and Juniper

2013-05-01 Thread Saba Sumsam
Hi, Thanks a lot for your comments. The topology is pretty simple. A single VLAN between the following devices, with users connected to the Cisco switches using a VRRP gateway between SRX100 & SRX210. [image: Inline image 1] It's strange that the SRX210 doesn't support MSTP - so can't go for MST

[j-nsp] Log Juniper M20

2013-05-01 Thread iber-x
Hi all, anyone knows what could be the reason that this message appears on the log of our juniper M20? Apr 6 06:00:15 -yyy2.abc-d.net LEV[2625]: RPD_SCHED_SLIP: 5 sec scheduler slip, user: 4 sec 940542 usec, system: 0 sec, 14925 usec Apr 6 05:58:07 -yyy2.abc-d.net LEV[2625]: RPD_SCHED

[j-nsp] M5 RE in M20 (lab -> production)

2013-05-01 Thread Tom
Hello, I just faced a problem where I put a former production RE (junos 8.5) from M160 into our lab M5. Boot was from cfcard, no hdd installed. Junos bootup msgs were showing “packet mismatch” for pfe packages. Normally it seems that junos is loading this from a full software image on hdd if no

[j-nsp] Brocade Juniper interoperability

2013-05-01 Thread Armin Kask
Hi All, we have a network consisting of FESX/SuperX and CES/CER switches in a ring formationFESX/SuperX are used for L2 forwarding and CES/CER are also connected to the ring doing L2 and L2VPN on top.We have an idea to break up the large L2 domain kept together by MSTP with some MPLS routers so th

[j-nsp] Únete a mi red en LinkedIn

2013-05-01 Thread Karthik T S a través de LinkedIn
___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] DSCP MArking

2013-05-01 Thread Darlington Moyo
Hi I have a perimeter router (M320- Software Suite [10.1R2.8]) on which I would like to color international traffic differently from National traffic.Kindly suggest optimal config without impacting performance on the device. Regards[cid:image001.png@01CB564F.C5B46490] Click here to read th

Re: [j-nsp] JNCIP/JNCIE new Tracks

2013-05-01 Thread Scott Morris
Anyone who has confirmed knowledge is under an NDA and not supposed to say anything.   When Juniper puts the information out to the public, then we can talk the details.  :)   Scott Morris, CCIEx4 (R&S/ISP-Dial/Security/Service Provider) #4713, CCDE #2009::D, JNCIE-M #153, JNCIS-ER, CI

Re: [j-nsp] Two RRs

2013-05-01 Thread Keegan.Holley
This is more a design question than configuration. It depends on if you need routes reflected to this reflector or if it will receive all the necessary routes via it's normal peerings. It sounds like you don't need the second RR to be a client of the first, but again that depends on your netw

[j-nsp] IP address

2013-05-01 Thread Murphy, Jay, DOH
10.8.0.1/31 What are the useable IPs. What is the broadcast and network address in this subnetwork? Thanks. Daniel <>___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] SRX - Static Routing Out Same Interface

2013-05-01 Thread Bruce Buchanan
Hi List - Can anyone give any suggestion/guidance on the following. I'm trying to do a static route *out* the same interface that the traffic came *in* on. This is on an SRX-240 Here are the details: "Private": 192.168.20.0/24 "Public": 216.168.x.x/32 Static route: 172.30.200.0/24 t

[j-nsp] Inserting security policies on SRX

2013-05-01 Thread James S. Smith
I have an SRX240 running 11.1R2.3, and occasionally I have to add new policies. The obvious choice would seem to be use the insert command but I'm getting some weird errors. For example, I have a number of policies for the different protocols going between the IT staff and the untrust zone. W

[j-nsp] Hardware Failures

2013-05-01 Thread Sipes, Nathan
All, Recently I purchased about 60 j2320 routers, out of the first ~20 that were installed 3-4 were DOA, one had a bad console port, 2 had bad CPU fans and one takes about 20 minutes for the T1 card to come up and be recognize/start passing traffic from a restart. These issues a

Re: [j-nsp] J6350 Jumbo frame MTU and OSPF setting

2013-05-01 Thread Harris Hui
Hi Ben, Thanks for your hits. I can configure the fiber PIMs to MTU 9018 and able to ping other J6350 with ICMP packet over 8000 bytes with do-not-fragment. Physical interface: ge-3/0/0, Enabled, Physical link is Up Interface index: 152, SNMP ifIndex: 184 Description: Link-level type: Ethe

Re: [j-nsp] Class E IP addresses

2013-05-01 Thread Keegan.Holley
As with most other "dirty" address ranges these will inevitably be used for something.  It's just a fact of life as IPv4 space becomes more and more scarce.  For example APNIC has begun assigning addresses in the previously reserved and often hijacked 1.0/8 range.- wrote: -To: juniper-nsp@p

Re: [j-nsp] 13 Tips for Passing Juniper Lab Tests

2013-05-01 Thread Keegan.Holley
No offense but that example seems a bit hokey to me. How many quad CCIE's are there in the world now 12? Also, how many of them update route filters for a living? They are usually pretty high up (deserving or no). In Scott's case he was just nominated as everyone's favorite routing protocol.

Re: [j-nsp] rib group

2013-05-01 Thread Keegan.Holley
It is basically a way to allow two routing tables to share some or all routes without using up extra memory by actually overlapping them and copying those routes into each table that needs them. [j-nsp] rib group David water to: juniper-nsp 04/27/10 12:08 AM Sent by: All, How