Re: [j-nsp] TRAFFIC DISTRIBUTION ACROSS AGREGATTED LINKS

2011-09-26 Thread Doan Nguyen
ation-msb;     destination-lsb;     }     }     }     } } From: Doan Nguyen To: Mario Andres Rueda Jaimes ; "juniper-nsp@puck.nether.net" Sent: Monday, September 26, 2011 1:46 PM Subject: Re: [j-nsp] TRAFFIC DIST

Re: [j-nsp] TRAFFIC DISTRIBUTION ACROSS AGREGATTED LINKS

2011-09-26 Thread Doan Nguyen
Mario, we've just finished testing a similar setup except with aggregate ethernet. There isn't anything wrong with your configs but make sure your traffic flow does simulate a good range of source/destination IP space.  This is the same for your source/destination port range.  We had around 2000 s

Re: [j-nsp] Filter Based Forwarding with bgp import rib

2011-03-25 Thread Doan Nguyen
Have you thought about using SCU/DCU tagging and having the firewall filter force traffic based on that? BGP could tag routes with SCU/DCU based on community string attribute, once in the router you could apply firewall filter at the PFE level to force traffic based on the SCU/DCU tagging. The

Re: [j-nsp] Filter Based Forwarding with bgp import rib

2011-03-24 Thread Doan Nguyen
Hi, are you basically trying to redirect traffic from host and internet to take a detour box "access server" not shown on the topo, that is strictly hanging off from router A? All your FBF needs to happen on router A if you're to enforce traffic to take a detour to your local access server.

Re: [j-nsp] Flow accounting on an M7i

2010-08-18 Thread Doan Nguyen
Starting JUNOS a requirement for cflowd to work is to configure NTP as Stefan pointed out a few emails earlier. --- On Wed, 8/18/10, sth...@nethelp.no wrote: From: sth...@nethelp.no Subject: Re: [j-nsp] Flow accounting on an M7i To: a...@ctdam.com Cc: juniper-nsp@puck.nether.net Date: Wed

Re: [j-nsp] Recommended sampling rates on MS-500 pic

2010-07-13 Thread Doan Nguyen
Tim, the difference between sampling with the PIC vs. using the RE is that with the PIC the router sends the entire packet to the pic vs. the IP header.  With this bandwidth to the PIC is probably more of the limiting factor for your sampling rate.  With the RE you do not have the bandwidth iss

[j-nsp] FPC high CPU and Interrupts

2008-04-24 Thread Doan Nguyen
Hi, has anyone seen where your FPC has a constantly high CPU and interrupt? If so what could be causing this? thanks, -Doan - Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. ___

[j-nsp] BGP Vulnerbility ID:26869

2008-01-03 Thread Doan Nguyen
Hi, does anyone know the specific error message you would look for if you get a malformed update from your neighbor causing you to reset your BGP session? In the advisory they showed this... error code of "UPDATE message error" (3) and a sub-code of "Malformed Attribute List" (1) Would this