Re: [j-nsp] BGP Multipath

2013-07-19 Thread Mark Tinka
On Friday, July 19, 2013 02:25:28 AM Payam Chychi wrote: Why not prepend the routes out of ur gigE? That way it becomes the backup link and u can turn down bgp anytime you want on the gigE without impact Because many ISP's LOCAL_PREF the hell out of customer routes, where prepending would be

Re: [j-nsp] Multiple flow-servers with inline jflow on MX80

2013-07-19 Thread louis.poncin
For any of your MX-series router the limitations are : - IPFIX (RFC 5101): inline J-flow supported on MPC only = 1 collector only - Note that only J-flow v5 and v8 are supported on RE = 8 collectors (same for MS-DPC) -Message d'origine- De : juniper-nsp

Re: [j-nsp] BGP Multipath

2013-07-19 Thread Payam Chychi
Many ways to skin a cat... personally i would use local pref for outbound and as-prepend on the inbound and your golden -- Payam Chychi Network Engineer / Security Specialist On Thursday, 18 July, 2013 at 4:45 PM, Tim Vollebregt wrote: Hi Keith, Yes, this sounds good. But to have the

Re: [j-nsp] SRX Source NAT internal users to two or more public IPs

2013-07-19 Thread Muhammad Atif Jauhar
Hi William, Similar to Sticky DIP, there are two terminologies address shifting and address persistence in SRX. 1. In address persistence. Junos OS will use the same source IP address for different traffic types associated with the same source host. To ensure the use of the same address,

Re: [j-nsp] SRX Source NAT internal users to two or more public IPs

2013-07-19 Thread Klaus Groeger
Sry, wrong link, here's the correct one http://www.juniper.net/techpubs/software/junos-security/junos-security96/junos-security-swconfig-security/configuring-persistent-address-pool-example.html#configuring-persistent-address-pool-example — Sent from Mailbox for iPhone On Fri, Jul 19, 2013 at

[j-nsp] Fwd: Re: BGP Multipath

2013-07-19 Thread Keith
Thanks for the all the replies. We actually do some local-pref on some other upstreams for outbound but discovered a small wrinkle in that the new connection uses a different bgp auth key so I have to create a new bgp group to handle this connection. So a new question arises, can I use

Re: [j-nsp] Multiple flow-servers with inline jflow on MX80

2013-07-19 Thread Richard Hesse
So 1 collector is actually 1 flow server? I read the documentation and it says 1 instance -- which I took to mean address family. I can understand having only a single collection instance, but it also seems logical to have multiple flow servers defined in that instance. I can get around this with

Re: [j-nsp] SRX Source NAT internal users to two or more public IPs

2013-07-19 Thread William McLendon
I think I may have been able to answer my own question. I stumbled across this KB article which I think spells it out pretty well: http://kb.juniper.net/KB20711 On Jul 18, 2013, at 2:04 PM, William McLendon wimcl...@gmail.com wrote: hi all, We have an issue where we have enough internal