[j-nsp] MX480BASE3-AC - whats inside bundle

2016-04-02 Thread Robert Hass
Hi I'm looking what is devliered with MX480BASE3-AC bundle. It should be: - MX480 chassis - Fan-Tray - Two Power Supplies - One SCB - But which one ? SCB ? SCBE ? - One RE - But again which RE model ? Just to compare old bundle (without "3") - MX480-BASE-AC consist: - MX480 chassis - Fan-Tray - T

[j-nsp] IRB interface on QFX5100 stopped receiving packets

2016-04-02 Thread Martin Millnert
(5 year de-lurk) Hi, We have a couple of QFX5100's creating Spine/Leaf EBGP-based DC-network. The ToRs are southbound to servers configured with: - MC-LAG, active/active - IRBs with VRRP (not native ae mac-sync) - IPv4 only Running 14.1X53-D31.2 - release notes for 14.1X53-D35 (latest) has no

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

2016-04-02 Thread Mark Tinka
On 2/Apr/16 11:04, Saku Ytti wrote: > > I've always wondered why is this a hard problem, especially in low > end? Naively I'd think that from your ASIC waste one revenue port as > host-bound facing and implement normal port ACLs there. It is exactly for that reason. Vendors will assume all low-

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

2016-04-02 Thread Saku Ytti
On 2 April 2016 at 11:41, Mark Tinka wrote: >> ACX does not support lo0 filter presently, which sucks. Good news is >> that it's on the roadmap for sometime this year I believe. No clue why >> they left it out in the first place... > > Well that sucks... It does, and even when it will support th

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

2016-04-02 Thread Mark Tinka
On 1/Apr/16 22:02, Daniel Verlouw wrote: > > ACX does not support lo0 filter presently, which sucks. Good news is > that it's on the roadmap for sometime this year I believe. No clue why > they left it out in the first place... Well that sucks... Mark. _