Re: [j-nsp] Origin Validation on MX80

2016-08-17 Thread Mark Tinka
On 17/Aug/16 18:51, Brad Fleming wrote: > Seems to drop a little (not as much as I thought). What I found a > little odd is that simply disabling the import policy on the BGP peer > didn't result in decreased CPU after 15mins. I rebooted the MX80 and > after the ~15mins of BGP flooding and conve

[j-nsp] SRX Deployment Questions

2016-08-17 Thread Jeffrey Nikoletich
Hello, We have a SRX we are deploying and are having some issues and some guidance would be great. We have a SRX 3600 and want to deploy in the following manner: It is connected via 2 Dell S55 External switches. 1 10G drop per switch. We will call that subnet 1.1.1.0/24. On the Internal side. It

Re: [j-nsp] Origin Validation on MX80

2016-08-17 Thread Brad Fleming
Seems to drop a little (not as much as I thought). What I found a little odd is that simply disabling the import policy on the BGP peer didn't result in decreased CPU after 15mins. I rebooted the MX80 and after the ~15mins of BGP flooding and convergence the CPU has calmed down a little. The RPKI

Re: [j-nsp] open source packages to monitor ex2200/vc

2016-08-17 Thread raf
Le 17/08/2016 à 17:28, Catalin Dominte a écrit : I usually create a snmp filter to avoid polling interfaces ending in .0. If you poll an ex2200 / 3300 / 4200 it spends a long time polling the ifTable and ifxTable. The polling time is reduced considerably if .0 interfaces are dropped and I can

Re: [j-nsp] open source packages to monitor ex2200/vc

2016-08-17 Thread Chuck Anderson
Okay, attachments don't come through the list, so I've done what I should have done long ago and put this on github: https://github.com/cranderson/nagios-plugins On Wed, Aug 17, 2016 at 11:12:12AM -0400, Chuck Anderson wrote: > (trying again with gzipped code to make message small enough) > > Fo

Re: [j-nsp] open source packages to monitor ex2200/vc

2016-08-17 Thread Catalin Dominte
I usually create a snmp filter to avoid polling interfaces ending in .0. If you poll an ex2200 / 3300 / 4200 it spends a long time polling the ifTable and ifxTable. The polling time is reduced considerably if .0 interfaces are dropped and I can poll the device every 5 minutes. Catalin Sent fro

Re: [j-nsp] open source packages to monitor ex2200/vc

2016-08-17 Thread Chuck Anderson
(trying again with gzipped code to make message small enough) For Juniper hardware/software fault monitoring, we use Nagios with the check_snmp_environment plugin, extended with more Juniper checks. I've attached the one we use here. I'd like to improve this further by removing duplicate alerts (

Re: [j-nsp] Origin Validation on MX80

2016-08-17 Thread Mark Tinka
On 17/Aug/16 16:46, Brad Fleming wrote: > Hello all, > > We’ve been playing around a bit with BGP origin validation on a lab MX80. > While everything seems to work CPU load is pretty high. We’ve observed this > elevated CPU with both 14.3R and 16.1R1.7. Just wondering if > anyone else experience

[j-nsp] Origin Validation on MX80

2016-08-17 Thread Brad Fleming
Hello all, We’ve been playing around a bit with BGP origin validation on a lab MX80. While everything seems to work CPU load is pretty high. We’ve observed this elevated CPU with both 14.3R and 16.1R1.7. Just wondering if anyone else experienced similar or whether we’ve configured something sidewa

[j-nsp] open source packages to monitor ex2200/vc

2016-08-17 Thread William
Hi list, What is everyone using to monitor their EX2200/VC stacks? We are using check_mk to monitor our network which is great, however due to the way it polls or due to the low power of the ex2200 I'm unable to monitor all the individual interfaces. Cheers, Will ___