Re: [j-nsp] Procedure for upgrade routing engines.

2014-04-29 Thread Misak Khachatryan
Hello again, just quick report - I yesterday finally upgraded my MX480 with RE-S-1800. The procedure is very similar to http://www.juniper.net/techpubs/en_US/junos13.3/topics/task/configuration/64-bit-junos-upgrading.html , but there are few moments - first of all - if You also upgrading SCB,

[j-nsp] Junos Dynamic VPN

2014-04-29 Thread Ali Sumsam
Hi all, I have a SRX240 cluster and doing VPN to it using Junos pulse client. My first question is, can we use a mac or windows client to connect this VPN rather than the Junos Pulse? One of the options, Junose pulse shows is the "SRX". What is the protocol behind VPN Type "SRX"? My second ques

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Ivan Ivanov
Hi, Yes, the vpn-tag is 0 from the output. But side effect of the command "domain-vpn-tag 0" is to remove the DN bit from Type 5 and Type 7 LSAs. This could help in that case on CE side. You can give a shoot, it will not hurt. But just in case you can do it in maintenance window. HTH Ivan, On T

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Krasimir Avramski
Hello, You should ask service provider to clear D/N bit from LSA advertisements (equal to "domain-id disable" in case juniper equipment is used). It is also desirable SP to set domain-vpn-tag to 0(junos by default encode own AS number here) since the sanity check rule is matching own AS against AS

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Mohammad Salbad
Thank you Krasi So, setting domain-vpn-tag to 0 on the providers PE will not help… :( Is that mean there is no solution or workaround for this neither on my MX nor Provider PE…. :( And the only solution is to revert back the instance type to be VR instead of VRF….. I really hoped there

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Krasimir Avramski
domain vpn tag(external route tag) is already set to 0 - the problem is that D/N bit is set as per RFC4576 (0x82 from your output lsa options). Krasi On 29 April 2014 11:05, Mohammad Salbad wrote: > Thank you all experts for your support and help > > > > Based on what I understood from you: >

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Mohammad Salbad
Thank you all experts for your support and help Based on what I understood from you: In order to be able to add the ospf external routes into the routing table I shall ask the service provider to set the domain-vpn-tag value to 0 on his PE. And there nothing to be done on my MX router (CE) to

Re: [j-nsp] OSPF external routes in database but not in routing table

2014-04-29 Thread Ivan Ivanov
Hi, Try to configure under the OSPF stanza for removing DN bit in Type 5 LSA - 'domain-vpn-tag 0' If you want to disable DN bit checks for Type 3 LSA add - 'domain-id disable' HTH, Ivan, On Tue, Apr 29, 2014 at 8:49 AM, Amos Rosenboim wrote: > Hi, > > I know Cisco have a configuration knob fo