Re: [j-nsp] BGP session reset after 1:30

2008-11-02 Thread Campbell, Alex
Thanks Mark - turned out to be MTU (http://www.gossamer-threads.com/lists/nsp/juniper/15576?do=post_view_th readed#15576) -Original Message- From: Mark Tinka [mailto:[EMAIL PROTECTED] Sent: Sunday, 2 November 2008 11:26 PM To: juniper-nsp@puck.nether.net Cc: Campbell, Alex Subject: Re

[j-nsp] BGP session reset after 1:30

2008-11-02 Thread Campbell, Alex
Hi all, We have an eBGP session that is resetting consistently after 1 minute, 30 seconds. It successfully comes up and sends us one route, and then drops. It is a multihop session with MD5 configured. Can anyone think of what would be causing this? Regards, Alex __

[j-nsp] BGP troubleshooting

2008-11-01 Thread Campbell, Alex
Hi all, We have run into a BGP issue bringing up a new ISP on our J4350s and I have been struggling to figure out what's going on. If anyone has any troubleshooting suggestions or ideas as to what might be doing wrong, I would be most grateful. We have two border routers, each connected to

Re: [j-nsp] J2350 / J4350 DRAM

2008-10-31 Thread Campbell, Alex
EMAIL PROTECTED] On Behalf Of Marcus Marinelli Sent: Saturday, 1 November 2008 12:51 PM To: Campbell, Alex Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] J2350 / J4350 DRAM The Crucial.com part number for the J2320 is CT6464Z40B. You can stick up to 4 of them in there, for 2gb total. I'd assu

Re: [j-nsp] BGP multihop question

2008-10-31 Thread Campbell, Alex
lto:[EMAIL PROTECTED] Sent: Friday, 31 October 2008 11:03 PM To: Campbell, Alex Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] BGP multihop question That is the correct approach, unless they are also running RIP or OSPF inbetween... Which I doubt. But hey... you never know. Campbell,

[j-nsp] BGP multihop question

2008-10-31 Thread Campbell, Alex
Hi all, We are in the process of bringing up an additional upstream provider to our J4350s. They have given us two switchports on a /29, and told us to establish multihop BGP sessions to their routers (which are on a completely different subnet). Each switchport will come back to a different J435

[j-nsp] J2350 / J4350 DRAM

2008-10-31 Thread Campbell, Alex
While we're on a related topic - can anyone share the Crucial.com part number for J2350 and J4350 DRAM? Regards, Alex -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phil Dyer Sent: Wednesday, 29 October 2008 1:02 PM To: Matt Stevens Cc: juniper-nsp Sub

Re: [j-nsp] How does juniper tells "particular network will beannounced to all neighbors"

2008-10-31 Thread Campbell, Alex
JunOS won't announce the network unless it has a route for it. Just add a static route: routing-options { static { route 10.0.0.0/8 discard; } } -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of harish T Sent: Friday, 31 October 2008 8:07

Re: [j-nsp] Which Router

2008-05-13 Thread Campbell, Alex
We have J4350s taking several full tables each. Traffic peaks at about 100mbps and CPU sits constantly at about 10%. I'm not sure how much slower the CPU on the J2320 is but I would be surprised if it couldn't comfortably handle our traffic loads with full tables. -Original Message- Fro

[j-nsp] iBGP problems after upgrading to 8.5

2008-04-20 Thread Campbell, Alex
Hi guys, Has anyone else run into issues with iBGP sessions not coming up after upgrading to 8.5? We upgraded one of our J4350s from 8.4R3.3 to 8.5R2.1. After rebooting, the box's iBGP session wouldn't come back up. I tried rebooting again, taking out MD5 auth, and re-entering the config for th

Re: [j-nsp] J-series stateful firewall / NAT architecture

2008-04-20 Thread Campbell, Alex
fully all the firewall features from ScreenOS will one day be moved to mainstream JunOS. -Original Message- From: Amos Rosenboim [mailto:[EMAIL PROTECTED] Sent: Monday, 21 April 2008 7:16 AM To: Florian Weimer Cc: Campbell, Alex; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] J-s

[j-nsp] Switch mesh / VRRP question

2008-04-16 Thread Campbell, Alex
Hi all, I'm having trouble figuring out how to use VRRP with two routers fully meshed to two switches. To achieve this, is it possible to have two interfaces on the same router with virtual IPs on the same subnet? I'm thinking it would look like the config below but I am not sure if this would w

[j-nsp] J-series stateful firewall / NAT architecture

2008-04-15 Thread Campbell, Alex
We currently have two J4350s running as border routers for our hosting network (multihomed to various ISPs and IXs). Because of the inevitable asymmetry in the traffic going through our border routers, we can't run stateful firewall filters on our border routers. For this reason I am looking to p

[j-nsp] J-Series vs SSG

2007-11-01 Thread Campbell, Alex
We are a small web hosting company looking to implement a pair of Juniper firewalls behind our border routers (both J4350s running BGP to a couple of ISPs). What we are looking for is pretty simple - stateful firewalling, simple ACLs, DDoS protection, active/passive failover. We are looking at g