Re: [j-nsp] Soft removal of traffic from AE?

Hi Saku, > From: Saku Ytti [mailto:s...@ytti.fi] > Sent: Saturday, October 29, 2016 2:16 AM > > On 29 October 2016 at 02:54, wrote: > > Saku is right there in saying that LACP should have provisions for > > hitless addition and removal of links from bundle. (not quite sure > > about removal tho

Re: [j-nsp] Soft removal of traffic from AE?

On 29 October 2016 at 02:54, wrote: > Saku is right there in saying that LACP should have provisions for hitless > addition and removal of links from bundle. (not quite sure about removal > though, but I'll play along). > But my experience is that's not how it works unfortunately. > > Let's talk

Re: [j-nsp] Soft removal of traffic from AE?

> Of Saku Ytti > Sent: Friday, October 28, 2016 9:20 PM > > On 28 October 2016 at 15:06, Eugeniu Patrascu > wrote: > > If you use LACP on the link, to mitigate the packets loss, set it to > > fast and then just yank the cable from the switch. The traffic will be > > rehashed on the remaining link

Re: [j-nsp] Soft removal of traffic from AE?

On 28 October 2016 at 15:06, Eugeniu Patrascu wrote: > If you use LACP on the link, to mitigate the packets loss, set it to fast > and then just yank the cable from the switch. The traffic will be rehashed > on the remaining links and at most you'll lose around 1 second worth of > traffic. LACP a

Re: [j-nsp] Infranet controller solution

The Pulse Secure you're talking about is the Dynamic VPN client - Yes. Thank for the clarification. I'm not familiar with the Infranet Enforcer and missed the nuance. I apologize for the noise. On Fri, Oct 28, 2016 at 9:49 AM, Tim Jackson wrote: > The Pulse Secure you're talking about is the D

Re: [j-nsp] Infranet controller solution

The Pulse Secure you're talking about is the Dynamic VPN client, not as an Infranet enforcer.. -- Tim On Fri, Oct 28, 2016 at 11:45 AM, Bill Blackford wrote: > I believe it's a licensing issue and I don't know the details of their > agreement with Pulse Secure after they spun them off, so it ma

Re: [j-nsp] Infranet controller solution

I believe it's a licensing issue and I don't know the details of their agreement with Pulse Secure after they spun them off, so it may be all of the platforms. I ran into it with the branch models. On Fri, Oct 28, 2016 at 7:54 AM, james list wrote: > Interesting, which models are you referring t

Re: [j-nsp] Infranet controller solution

Interesting, which models are you referring to ? Also high end (ie 5600 or 5800) ? Cheers 2016-10-28 16:49 GMT+02:00 Bill Blackford : > I was told by our SE that the newer models of SRX will no longer support > Pulse Secure. I've also had to downgrade code to get older models to > support it as

Re: [j-nsp] Infranet controller solution

I was told by our SE that the newer models of SRX will no longer support Pulse Secure. I've also had to downgrade code to get older models to support it as well. Sent from my iPhone > On Oct 28, 2016, at 00:59, Michael Gehrmann wrote: > > Hi James, > > I'm only aware of Palo Alto and Juniper

Re: [j-nsp] Soft removal of traffic from AE?

On Fri, Oct 28, 2016 at 2:29 PM, Roger Wiklund wrote: > Thanks, have you tested this? What happens to traffic/sessions on the > link? Is it non disruptive, or at least less disruptive than disabling > the interface? > Yes, I did. You must also disable it on the remote peer at the same time (clo

Re: [j-nsp] Soft removal of traffic from AE?

Thanks, have you tested this? What happens to traffic/sessions on the link? Is it non disruptive, or at least less disruptive than disabling the interface? /Roger On Fri, Oct 28, 2016 at 1:17 PM, Eugeniu Patrascu wrote: > On Fri, Oct 28, 2016 at 12:53 PM, Roger Wiklund > wrote: >> >> Hi >> >> I

Re: [j-nsp] Soft removal of traffic from AE?

On Fri, Oct 28, 2016 at 12:53 PM, Roger Wiklund wrote: > Hi > > Is there a way to remove one interface from an AE without disabling > the interface? > > I was thinking about removing the 802.3ad aeX config from the > interface but I have not tried it yet. > You configure the interface to not be

[j-nsp] Soft removal of traffic from AE?

Hi Is there a way to remove one interface from an AE without disabling the interface? I was thinking about removing the 802.3ad aeX config from the interface but I have not tried it yet. Thanks /Roger ___ juniper-nsp mailing list juniper-nsp@puck.neth

Re: [j-nsp] Infranet controller solution

Hi James, I'm only aware of Palo Alto and Juniper supporting this function. The next generation SRX (300 and 1500) have some pretty good pricing from what I have experienced. https://www.pulsesecure.net/download/document/988/PulseSecure_Solution_Brief_PAN_PPS_d1v5.fin.pdf I have experienced the

Re: [j-nsp] Infranet controller solution

Hi Mike here the functionality I'm looking for in the firewall device: - integration with MAG Pulse Secure - policy enforcement using at least destination ip address, port and protocol - policy enforcement with action at least like allow, deny, reject - policy enforcement based on user role Cheer