Hello again,
just quick report - I yesterday finally upgraded my MX480 with
RE-S-1800. The procedure is very similar to
http://www.juniper.net/techpubs/en_US/junos13.3/topics/task/configuration/64-bit-junos-upgrading.html
, but there are few moments - first of all - if You also upgrading SCB,
Hi all,
I have a SRX240 cluster and doing VPN to it using Junos pulse client.
My first question is, can we use a mac or windows client to connect this
VPN rather than the Junos Pulse?
One of the options, Junose pulse shows is the "SRX". What is the protocol
behind VPN Type "SRX"?
My second ques
Hi,
Yes, the vpn-tag is 0 from the output. But side effect of the command
"domain-vpn-tag
0" is to remove the DN bit from Type 5 and Type 7 LSAs. This could help in
that case on CE side. You can give a shoot, it will not hurt. But just in
case you can do it in maintenance window.
HTH
Ivan,
On T
Hello,
You should ask service provider to clear D/N bit from LSA advertisements
(equal to "domain-id disable" in case juniper equipment is used). It is
also desirable SP to set domain-vpn-tag to 0(junos by default encode own
AS number here) since the sanity check rule is matching own AS against AS
Thank you Krasi
So, setting domain-vpn-tag to 0 on the providers PE will not help… :(
Is that mean there is no solution or workaround for this neither on my MX nor
Provider PE…. :(
And the only solution is to revert back the instance type to be VR instead of
VRF…..
I really hoped there
domain vpn tag(external route tag) is already set to 0 - the problem is
that D/N bit is set as per RFC4576 (0x82 from your output lsa options).
Krasi
On 29 April 2014 11:05, Mohammad Salbad wrote:
> Thank you all experts for your support and help
>
>
>
> Based on what I understood from you:
>
Thank you all experts for your support and help
Based on what I understood from you:
In order to be able to add the ospf external routes into the routing table I
shall ask the service provider to set the domain-vpn-tag value to 0 on his
PE.
And there nothing to be done on my MX router (CE) to
Hi,
Try to configure under the OSPF stanza for removing DN bit in Type 5
LSA - 'domain-vpn-tag
0'
If you want to disable DN bit checks for Type 3 LSA add - 'domain-id
disable'
HTH,
Ivan,
On Tue, Apr 29, 2014 at 8:49 AM, Amos Rosenboim wrote:
> Hi,
>
> I know Cisco have a configuration knob fo
8 matches
Mail list logo