Re: [j-nsp] [RESOLVED] MX204: 802.3ad LAG 2 x 1 G with a Palo Alto firewall

each interfaces and the link kept UP. I feel ashemed not to have thinking about autoneg before, as it wasn't necessary on the native 1G port of the MX5. Thanks again to everybody! Cheers, -- Emmanuel Halbwachs DIO/CASTORS/Resp. Réseau,Sécurité O

Re: [j-nsp] MX204: 802.3ad LAG 2 x 1 G with a Palo Alto firewall

G LACP LAG on 18.4R3-S6.3. I'm running 19.4R1.10. I'll try a LAG with my switch first to be sure of it. Thanks again to everybody, -- Emmanuel Halbwachs DIO/CASTORS/Resp. Réseau,Sécurité Observatoire de Paris ✆ +33 1 45 07 75 54 Campus Paris

[j-nsp] MX204: 802.3ad LAG 2 x 1 G with a Palo Alto firewall

Flags: Up SNMP-Traps 0x24024000 Encapsulation: Ethernet-Bridge bridge eh-adm@ro-p-coeur> ping firewall-iap-test PING firewall-iap-test.obspm.fr (145.238.192.10): 56 data bytes ^C --- firewall-iap-test.obspm.fr ping statistics --- 3 packets transmitted, 0 packets received, 100% packet los

Re: [j-nsp] Trouble with 100G link MX204 <-> Dell S4100F-ON

Emmanuel Halbwachs (Fri 2020-03-13 18:14:00 +0100) : > Thanks. I'll upgrade and let the list know if it works without the FEC > knob. Just upgraded to 19.4R1.10: same situation, FEC91 is needed to bring 100G links up. Cheers, -- Emmanuel Halbwachs R

Re: [j-nsp] Trouble with 100G link MX204 <-> Dell S4100F-ON

'll upgrade and let the list know if it works without the FEC knob. -- Emmanuel Halbwachs Resp. Réseau/Sécurité Observatoire de Paris ✆ +33 1 45 07 75 54 Paris : 61 av. de l'Observatoire F 75014 PARIS Meudon : 1

[j-nsp] [solved] Re: Trouble with 100G link MX204 <-> Dell S4100F-ON

Dan Kirkland suggested me off-list to fiddle with FEC knobs. And indeed it was a good idea : set interfaces et-0/0/0 gigether-options fec fec91 brought the link up. :-) I will never have thought having a look on "gigether-options" for a 100G link. Thanks, Dan. -- Emmanuel

[j-nsp] Trouble with 100G link MX204 <-> Dell S4100F-ON

ut I fear ping-pong. Have a nice week-end, -- Emmanuel Halbwachs Resp. Réseau/Sécurité Observatoire de Paris ✆ +33 1 45 07 75 54 Paris : 61 av. de l'Observatoire F 75014 PARIS Meudon : 11 (face 32) av. M

Re: [j-nsp] understanding interface encapsulation, family ... and more

s ? I guess chapter 2 of http://shop.oreilly.com/product/0636920023760.do will help you. It did for me. HTH, -- Emmanuel Halbwachs Resp. Réseau/Infrastructure/Sécurité Observatoire de Paristel : +33 1 45 07 75 54 Paris : 61 av. de l'Observatoire

Re: [j-nsp] purpose of "commit check"?

Phil Shafer (Wed 2015-09-30 21:14:53 -0400) : > >o/t but is there any difference between "show | compare" and "show | diff" ? > > Nope, it's just an alias, similar to "grep" for "match". Wow, great! How can one list those standard aliases? Thanks, -- Emmanuel __

Re: [j-nsp] batch on junos ?

a '.cloginrc' file that contains the login/password used by rancid to connect under the hoods (see rancid documentation for further explanations): $ cat .cloginrc add method router ssh add userrouter yourlogin add passwordrouter {yourpassword} HTH,

Re: [j-nsp] EX Switch Question

does not have: - syslog in firewall filters - tcp flags (e. g. established) in firewall filters in egress (physical or VLAN interface). Juniper confirmed that this is a hardware limitation. That was the reason we went MX. Cheers, -- Emmanuel Halbwachs Observatoire

[j-nsp] MX80: SNMP BRIDGE-MIB broken?

my reseller who should go with JTAC but I would like to know if anyone here hit this same issue. Thanks, -- Emmanuel Halbwachs Observatoire de Paris Resp. Réseau/Sécurité 5 Place Jules Janssen tel : +33 1 45 07 75 54

Re: [j-nsp] DOM: SNMP polling of RX power for 1 GE SFP impossible?

oud: Juniper fellows subscribed to this list, please bring us useful, complete and sane SNMP MIBs. We badly need it! Thank you very much. :-) -- Emmanuel Halbwachs Observatoire de Paris Resp. Réseau/Sécurité 5 Place Jules Janssen

[j-nsp] DOM: SNMP polling of RX power for 1 GE SFP impossible?

. Am I wrong? I hope yes. Refs: [1] http://www.juniper.net/techpubs/en_US/junos10.4/topics/reference/mibs/mib-jnx-dom.txt Cheers, -- Emmanuel Halbwachs Observatoire de Paris Resp. Réseau/Sécurité 5 Place Jules Janssen tel : +33 1 45 07 75

Re: [j-nsp] Same netflow data to same collector but different ports

Tzelniker a écrit (Tue, Aug 09, 2011 at 08:57:10PM +0300) : > Not in the router but you can use  > http://code.google.com/p/samplicator/ Gee! I forget to mention that I messed around, without success, with netcat to do exactly this. You both made my day. Thanks very much. --

[j-nsp] Same netflow data to same collector but different ports

w-server 10.0.0.22 port 2057 If someone have some clues. Thanks, -- Emmanuel Halbwachs Observatoire de Paris-Meudon Resp. Réseau/Sécurité 5 Place Jules Janssen tel : +33 1 45 07 75 54F 92195 MEUDON CEDEX fax : +33 1 45

Re: [j-nsp] ex4200 egress filter

#x27;t have any knowledge in switch design, but I don't understand why pattern-matching some bits in TCP headers is difficult on egress. Also note that syslog on egress firewall filters is also not possible. Cheers, -- Emmanuel Halbwachs Observatoire de P

Re: [j-nsp] remote ssh command to an EX series switch

Hello, Just in case I'm not the only ignorant fool... Emmanuel Halbwachs a écrit (Mon, Sep 06, 2010 at 05:33:13PM +0200) : > Generally speaking, I think rancid's [1] jlogin is what you're looking > for to run arbitrary commands remotely, e.g. > > jlogin -c "sh

Re: [j-nsp] remote ssh command to an EX series switch

in -c "sh arp" myrouter Specifically, for the ARP grabbing, what about SNMP? Some tools could help : the antique arpwatch/arpsnmp (check your favorite Linux distro) or netdisco [2]. [1] http://www.shrubbery.net/rancid/ [2] http://netdisco.org/ HTH, -- Emmanuel Halbwachs

Re: [j-nsp] M7i DHCP Relay

n to requests from any VLAN. Yes, ugly, but robust and then we don't rely on Juniper to deliver our DHCP service. I too was very surprised how such a basic fonctionnality was so buggy with IRB interfaces. Cheers, -- Emmanuel Halbwachs Observatoire de Paris-Meudon

Re: [j-nsp] Juniper MX80 IRB

Hello, Chuck Anderson a écrit (Tue, Jul 27, 2010 at 09:23:42AM -0400) : > Does the other router where this works have the new MPC Trio cards? > Or is it using the older DPC cards? No, older DPC card. Cheers, -- Emmanuel Halbwachs Observatoire de Paris-Meudo

Re: [j-nsp] Juniper MX80 IRB

interface ge-1/0/7.210; routing-interface irb.210; } VLAN-240 { domain-type bridge; vlan-id 240; interface ge-1/0/7.240; routing-interface irb.240; } } HTH, -- Emmanuel Halbwachs Observatoire de Paris-Meudon Resp.

[j-nsp] Extended DHCP relay agent on MX ?

some bridge domains) to some designated DHCP servers. If anyone have a working configuration to share, it will be most welcomed. Yes, we know about [edit forwarding-options helpers bootp], but it seems to be buggy and we are trying dhcp-relay as a workaround. Thanks in advance, -- Emmanuel Halb