Re: [j-nsp] srx cluster - port channel - cisco switches - esx devices - 12.1x45-d15.5 some virtual machines can't be reached

2013-10-23 Thread Gabriel Blanchard
On 13-10-23 11:59 AM, pkc_mls wrote: > Le 23/10/2013 17:15, Gabriel Blanchard a écrit : >> are the ciscos configured with a distributed port-channel as well? (On a >> rethx from the SRX i'm assuming) > Hi, > Can you please indicate what a distributed port channel is ?

Re: [j-nsp] srx cluster - port channel - cisco switches - esx devices - 12.1x45-d15.5 some virtual machines can't be reached

2013-10-23 Thread Gabriel Blanchard
are the ciscos configured with a distributed port-channel as well? (On a rethx from the SRX i'm assuming) On 13-10-23 11:12 AM, pkc_mls wrote: > Hi all, > > I'm running a cluster of srx 240 connected to a pair of cisco 2960 > switches with a port channel. > > ESXi servers are also connected to the

[j-nsp] One way VPLS

2013-07-16 Thread Gabriel Blanchard
I'm attempting to turn up an VPLS circuit and it appears that only one side is showing as Up while the other is showing as VC-Dn I turned on a trace and seeing this error message Jul 16 10:46:59.190366 [vc_intf_vc_status_update] Recomputing the status of the VC for interface: vpls-7.2.3, flags 0x

Re: [j-nsp] Advice on a 100Gbps+ environment

2013-07-02 Thread Gabriel Blanchard
We run pretty much exactly what you describe in the 100Gbps+ scale using MX480s with RE-S-1800 and don't have any problems. Contact me off list if you need any tips. On 13-07-02 04:58 AM, Morgan McLean wrote: > Hi, > > I've only really dealt with traffic levels under 20Gbps. I have a client > tha

Re: [j-nsp] Inline jflow AS Lookup Failures

2013-07-01 Thread Gabriel Blanchard
chard Hesse [mailto:richard.he...@weebly.com<http://weebly.com>] Sent: Friday, June 28, 2013 5:52 PM To: Gabriel Blanchard Cc: Drew Weaver; juniper-nsp@puck.nether.net<mailto:juniper-nsp@puck.nether.net> Subject: Re: [j-nsp] Inline jflow AS Lookup Failures Did you report the crash to Junip

Re: [j-nsp] Inline jflow AS Lookup Failures

2013-06-28 Thread Gabriel Blanchard
I tried 12.3. Crashed within 24h On 2013-06-28, at 2:59 PM, Drew Weaver wrote: > How much of a disaster (vs 11.4) are we guessing that 12.3R3 is going to be? > > From: Richard Hesse [mailto:richard.he...@weebly.com] > Sent: Friday, June 28, 2013 2:58 PM > To: Drew Weaver > Cc: juniper-nsp@puck

Re: [j-nsp] Help needed with IPSEC VPN on J-Series

2013-03-20 Thread Gabriel Blanchard
Same thing here, that or I had to deactivate security vpn commit and reactivate. commit On 13-03-20 02:03 PM, Bjørn Tore wrote: > As I mentioned offline - I once had to reboot an SRX 240 after changing IPSEC > config, to make things come up. Might not be the case here, but with the code > qual

Re: [j-nsp] JunOS version for MX40?

2013-02-07 Thread Gabriel Blanchard
If it's for a lab...why not run greatest and latest? if not, run the recommended. On 13-02-07 03:08 PM, Steve Feldman wrote: > I have a couple of shiny new MX40s in my lab, and need to do some testing > before we deploy them. > > They will be doing fairly vanilla BGP (~2 full feeds), IS-IS and/o

Re: [j-nsp] uRPF loose mode

2012-11-26 Thread Gabriel Blanchard
On 12-11-26 10:05 AM, Saku Ytti wrote: > > This is very new feature to JunOS. I think 12.1 for T4k. And maybe 12.2 for > MX, unsure. > Thanks, I just got confirmation from Juniper that this is indeed supported as of 12.2 on MX. -Gabe ___ juniper-nsp

[j-nsp] uRPF loose mode

2012-11-26 Thread Gabriel Blanchard
Has anyone on this list been able to implement uRPF to work in a multi-homed environment? I'm trying to implement it so that it black holes traffic based on source address and so far what I've read tells me this is not supported. -Gabe ___ juniper-nsp ma

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-09 Thread Gabriel Blanchard
We have simple filters configured on our 10Gbps as well on our DPCs and can definitely push more than 8gbps. Though mostly in one direction. Are you saying it's limited to 8gbps in both directions? I'm curious to know which Junos version you are running. Gabriel Blanchar

Re: [j-nsp] FreeRadius/ERX Question

2011-10-20 Thread Gabriel Blanchard
/techpubs/en_US/junose9.3/information-products/topic-collections/broadband-access/service-definition-examples.html Only thing is, you will need the service management license. Gabriel Blanchard Director, Information Technology TekSavvy Solutions On 11-10-20 01:40 PM, Paul Stewart wrote: Thanks fo

Re: [j-nsp] traffic load balancing between Juniper and Cisco equipment

2011-08-22 Thread Gabriel Blanchard
mlppp On 08/21/2011 08:11 PM, Martin T wrote: Is it possible to load-balance traffic between a Juniper M10i and Cisco 1812 using two different last-mile(ADSL2+) providers? Topology should be like this: http://img803.imageshack.us/img803/8766/loadb.png Idea is to use both ADSL2+ links simultane

Re: [j-nsp] MX80 as BRAS

2011-08-18 Thread Gabriel Blanchard
considering that the ERX series is being decommissioned soon and "replaced" by the expensive E series I'm also very interested. Somehow I doubt that the MX80s are as capable as the ERXes when it comes to BRAS stuff. -Gabe On 08/18/2011 02:49 PM, Paul Stewart wrote: We are just heading down

Re: [j-nsp] Radius - Static IP / ERX

2011-08-15 Thread Gabriel Blanchard
We have a very similar setup (for some obvious reason) and it works just fine. We use Framed-IP-Address. No other attributes are required. What I suggest is that you try the "test aaa" command in the ERX and try to test the login that way from the console and see what's going on. -Gabe On 08

Re: [j-nsp] BGP multihop problem - ERX310

2011-05-02 Thread Gabriel Blanchard
try turning on BGP debugging on the ERX. It's likely a timer expiry like you pointed out but at least that way you'll be able to tell where the problem lies. -Gabe On 2011-05-02, at 7:19 PM, Paul Stewart wrote: > Hi there. > > > > Turning up an ERX-310 for a customer - it's multihomed to 2 d

Re: [j-nsp] Juniper "firewall policer" inner workings

2011-04-04 Thread Gabriel Blanchard
The policer is dropping packets in order to slow down your connection to 10mbps. In my opinion this is working perfectly. On 2011-04-04, at 8:30 AM, "Martin T" wrote: > With such configuration: http://img135.imageshack.us/img135/3162/iperftest.png > > ..there is still packet loss present: >

Re: [j-nsp] M7i

2011-03-24 Thread Gabriel Blanchard
How much if I may ask? -Gabe On 2011-03-24, at 12:41 PM, Giuliano Medalha wrote: > You can take more advantage with MX80-5 new promotional bunde. > > It supports 20 x SFP Interfaces, came with ADC-R License , TRIO3D chipset > and 2GB DRAM (4m rib routes). > > It came with 4 x XFP slots (blocke

Re: [j-nsp] netflow collector on linux

2011-03-22 Thread Gabriel Blanchard
flow-tools On 2011-03-22, at 2:03 PM, Michael Lee wrote: > Hello: > > I am trying to eval netflow collector for multi-vendor hardwares, anyone > could suggest any good commercial netflow collector running on Linux? > > Thanks, > > ~mike > ___ > junip

Re: [j-nsp] ERX software upgrades

2011-01-07 Thread Gabriel Blanchard
I had the same problem... I couldn't figure it out a few years back What you need to do is just feed it with the appropriate .rel file and the ERX will automatically pull all the other required files on it's own via ftp. -Gabe On 2011-01-07, at 3:17 PM, Paul Stewart wrote: > Hi folks. > > >

[j-nsp] Radius Tunnel Switching

2010-11-02 Thread Gabriel Blanchard
Hey, I'm attempting to dynamically tunnel switch some of our users. The requirement is that the tunnel is initiated from a different virtual router and it appears that the radius attribute that I'm using simply doesn't work. t...@teksavvy.com Cleartext-Password := "test123"

Re: [j-nsp] Fwd: router recommendation

2010-10-25 Thread Gabriel Blanchard
On 2010-10-25, at 5:05 PM, Richard Zheng wrote: > Hi, > > A juniper reseller came back with a suggestion of J-4350. The price is > similar to a used M7i. I was surprised by this option first. Then > considering that the application is for a small ISP, it might not be bad. > The DRAM may be upgra

Re: [j-nsp] Junose (ERX) IP pool management

2008-02-14 Thread Gabriel Blanchard
> > > to use a DHCP-server to do the address-management should work in > general. The docs say so: > > http://www.juniper.net/techpubs/software/erx/junose82/swconfig-broadband/html/dhcp-server-config6.html > Thanks. I happen to have found this information just today. > > > and I've heard about it

[j-nsp] Junose (ERX) IP pool management

2008-02-13 Thread Gabriel Blanchard
We are trying to configure multiple ERXs 310 to share a Pool of IPs to assign to DSL customers. These ERXs are acting as LNSes. The problem is that right now we are statically configuring each of the ERXs with different Pools of IPs. We would like all of them to be able to share the same Poo