Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Jeff Meyers
Hi, I see you're running DPC cards, have you considered shifting those links onto an MPC/Trio Card? (newer chip, more RAM, more horsepower, yadda yadda yadda =)..) DPC was EOL a while ago, and everything has been Trio (and now Trio-NG on the new -NG cards coming out now). As the FIB is pushed

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Ivan Ivanov
Hi, The size of the firewall configuration could be concern if you use the box for subscriber management and have tons of dynamic interface with filters attached. Otherwise you should be safe to use that knob. At the moment you have 11.5MB in segment 1, when you enable that know it will go down

Re: [j-nsp] MX480 Build

2015-07-22 Thread Mark Tinka
On 22/Jul/15 17:01, Bill Blackford wrote: I'm referencing my experience from a few years back. Thank you for the clarification. Nonetheless, I'd suggest looking into possible software limitations in current code in mixed environments. The last thing you need is a feature not working or

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Mark Tinka
On 22/Jul/15 17:30, Jeff Meyers wrote: yes, we did (at least since yesterday) although we are not really requiring more ports or bandwidth right now. If I understand that correctly, I need to upgrade to SCB2 as well? Hehehehe, where have I heard that before :-)? IPv4 BGP table havin' us

Re: [j-nsp] MX480 Build

2015-07-22 Thread Bill Blackford
I'm referencing my experience from a few years back. Thank you for the clarification. Sent from my iPhone On Jul 22, 2015, at 07:51, Damien DeVille damien.devi...@gmail.com wrote: You absolutely can mix MPCs and DPCs in the same chassis. When the MPCs first came out there were

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Jeff Meyers
Hi, thanks for the hint, didn't know about that option. This will certainly safe us if we are running in to limits. We don't have too many filters, mostly the basic stuff to protect the RE and a few filters on some vlans with basic white- and/or blacklisting. So really nothing fance although

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Mark Tinka
On 22/Jul/15 02:59, Chris Kawchuk wrote: I know that a ton of fixes on BGP convergence time son MX80 is definitely a reason to be 'moving up'... however as you're on RE-2000s on MX480 may not be applicable. I see you're running DPC cards, have you considered shifting those links onto an

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Ivan Ivanov
Hi, The 'route' option on 'memory-enhanced' will give you some time before upgrade to MPC. Actually you should be okay for quite a long time considering the size of the table you have at the moment. https://www.juniper.net/documentation/en_US/junos11.4/topics/task/configuration/

Re: [j-nsp] MX480 Build

2015-07-22 Thread Litterick, Jeff (BIT)
Sent from my Windows Phone From: Jerry Jonesmailto:jjo...@danrj.com Sent: ‎7/‎22/‎2015 8:38 AM To: Colton Conormailto:colton.co...@gmail.com Cc: Juniper Listmailto:juniper-nsp@puck.nether.net Subject: Re: [j-nsp] MX480 Build The RE-2000 and SCB have been

Re: [j-nsp] MX480 Build

2015-07-22 Thread Colton Conor
We would be getting redundant (2) RE-2000's with redundant (2) standard SCB's. The configuration would be full BGP tables with 4 providers on 10G ports. The MS-DCP is a requirement for JFLOW on these older cards right? We would also use the MS-DCP for IPSec tunnels to Cisco ASAs. Any issues with

[j-nsp] MX480 Build

2015-07-22 Thread Colton Conor
I am considering buying a used MX480. It will have the following: 1x MX480-PREMIUM-AC - MX480 Base system with redundant RE-2000, SCB, and AC power 2x DPCE-R-4XGE-XFP - 4x10GE Enhanced DPC for MX, requires optics sold separately 1 x Juniper MS-DPC - IP services line card for MX Series

Re: [j-nsp] MX480 Build

2015-07-22 Thread Mark Tinka
On 22/Jul/15 15:24, Colton Conor wrote: Besides the chassis size and power consumption anything we should know or consider deciding between a MX 240, MX480, and MX960? It seems the MX240 is too small for our needs, so its really the MX480 vs MX960. You take a bigger on the MX960 with a

Re: [j-nsp] MX480 Build

2015-07-22 Thread Mark Tinka
On 22/Jul/15 15:24, Colton Conor wrote: Besides the chassis size and power consumption anything we should know or consider deciding between a MX 240, MX480, and MX960? It seems the MX240 is too small for our needs, so its really the MX480 vs MX960. You take a bigger hit on the MX960 with

Re: [j-nsp] MX480 Build

2015-07-22 Thread Jerry Jones
The RE-2000 and SCB have been announced EOL for next year. On Jul 22, 2015, at 8:24 AM, Colton Conor colton.co...@gmail.com wrote: I am considering buying a used MX480. It will have the following: 1x MX480-PREMIUM-AC - MX480 Base system with redundant RE-2000, SCB, and AC power 2x

Re: [j-nsp] MX480 Build

2015-07-22 Thread Will O'Brien - NOAA Affiliate
You didn't specify which REs you'd get with it. Make sure you are getting a pair. (Even though the 960 uses three SCBs, you can only use two REs in that chassis as well.) The R blades are pretty solid, but you didn't specify any sort of config requirements. What will you be using the MSDPC for?

Re: [j-nsp] MX480 Build

2015-07-22 Thread Colton Conor
Eventhough the RE-2000 is going into EOL status, it is still faster and has more memory than the RE's in the MX80 or MX104 right? On Wed, Jul 22, 2015 at 8:38 AM, Jerry Jones jjo...@danrj.com wrote: The RE-2000 and SCB have been announced EOL for next year. On Jul 22, 2015, at 8:24 AM, Colton

Re: [j-nsp] MX480 Build

2015-07-22 Thread Raphael Mazelier
Le 22/07/15 15:51, Colton Conor a écrit : We would be getting redundant (2) RE-2000's with redundant (2) standard SCB's. The configuration would be full BGP tables with 4 providers on 10G ports. The MS-DCP is a requirement for JFLOW on these older cards right? We would also use the MS-DCP

[j-nsp] Ping hosts in zones DMZ and TRUST

2015-07-22 Thread deloin . robert
Hello, I try to config my SRX650. I defined my interfaces and zones (TRUST, UNTRUST and DMZ). I can ping all interfaces of the SRX650 (public @ DMZ, 10.1.5.2 INTERCO, and public @ UNTRUST) I can ping outside hosts as 8.8.8.8 for example. I can ping my INTERCO interface 10.1.5.1 But I

Re: [j-nsp] jtree0 Memory full on MX480?

2015-07-22 Thread Chris Kawchuk
On 23/07/2015, at 1:30 AM, Jeff Meyers jeff.mey...@gmx.net wrote: yes, we did (at least since yesterday) although we are not really requiring more ports or bandwidth right now. If I understand that correctly, I need to upgrade to SCB2 as well? nope -- no need to go to MPC+SCB2 combo.

Re: [j-nsp] MX480 Build

2015-07-22 Thread Damien DeVille
You absolutely can mix MPCs and DPCs in the same chassis. When the MPCs first came out there were compatibility issues, but with modern Junos versions (11.4 and on) those are history. - Damien On Wed, Jul 22, 2015 at 10:32 AM, Bill Blackford bblackf...@gmail.com wrote: I agree that this is a

Re: [j-nsp] MX480 Build

2015-07-22 Thread Colton Conor
Are you sure you can not mix and match DPC with MPC? I know it was not recommended back in the day, but from what I have read its fine now. But I have not seen either of these stated in an official Juniper document. Can you mix and match or not? On Wed, Jul 22, 2015 at 9:32 AM, Bill Blackford

Re: [j-nsp] MX480 Build

2015-07-22 Thread Jerry Jones
correct. On Jul 22, 2015, at 8:53 AM, Colton Conor colton.co...@gmail.com wrote: Eventhough the RE-2000 is going into EOL status, it is still faster and has more memory than the RE's in the MX80 or MX104 right? On Wed, Jul 22, 2015 at 8:38 AM, Jerry Jones jjo...@danrj.com wrote: The RE-2000

Re: [j-nsp] MX480 Build

2015-07-22 Thread Mark Tinka
On 22/Jul/15 16:04, Jerry Jones wrote: MPX support inline flow on Trio. Not as flexible but possible. You mean MPC? But the OP is getting DPC's, so he is either relegated to RE-based NDE, or offload that to the MS-DPC. Mark. ___ juniper-nsp mailing

Re: [j-nsp] MX480 Build

2015-07-22 Thread Bill Blackford
I agree that this is a good build for what you've stated. I would definitely recommend an MS-DPC for off-loading any sampling or crypto. You mention higher density with the use of MICs in the future. This would require taking the plunge to MPC and a replacement of your DPCs (you cannot mix

Re: [j-nsp] MX480 Build

2015-07-22 Thread Jerry Jones
MPX support inline flow on Trio. Not as flexible but possible. On Jul 22, 2015, at 8:51 AM, Colton Conor colton.co...@gmail.com wrote: We would be getting redundant (2) RE-2000's with redundant (2) standard SCB's. The configuration would be full BGP tables with 4 providers on 10G ports. The