Re: [j-nsp] VRRP for IPv6

2022-01-25 Thread Jonas Frey via juniper-nsp
Looks like you are missing "virtual-link-local-address". -Jonas Am 2022-01-25 20:51, schrieb Chris Adams via juniper-nsp: I'm trying to add VRRP for IPv6 to a pair of MX150s (that are already running VRRP for IPv4). I've switched from VRRPv2 to VRRPv3, and the v4 VRRP switched over, but both

Re: [j-nsp] ISSU offlined mpc - why?

2021-09-02 Thread Jonas Frey via juniper-nsp
> Hello, > > I did an issu upgrade on an MX240 with dual routing engines, going  > from 15.1R6 to 17.4R2, and I had reviewed the fine manuals particularly  > concerning advance steps to ensure nonstop routing and so forth. But  > during the upgrade (near the very end), the router did offlin

Re: [j-nsp] MX204 vs. MX240??

2019-11-08 Thread Jonas Frey
Yes, since 18.1 the MX204 can be configured to support 1G: https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/speed-gigether-options.html IMHO its hard to compare MX204 vs MX240, they are made for different markets. MX240 can be redundant, MX204 cant. As f

Re: [j-nsp] Ramp up old MX480

2019-08-28 Thread Jonas Frey
Hello, for the minimum you will need to upgrade: FFANTRAY-MX480-HC-S (high capacity fan tray to run MPC cards due to cooling) MX-SCBE (req'd for MPC3+ cards) as for line cards i'd suggest using MPC-3D-16XGE-SFPP, they are cheap used/refurb. If you are running 3+ of these you might need to upgra

Re: [j-nsp] MX480 AC Power Supply fan replacement problem?

2018-12-14 Thread Jonas Frey
Chris, the -F00 have a tachometer signal, so the device using it can read the RPM easily. The -R00 utilize a locking signal which only tells the device if the rotor does spin freely or is locked (in which case the device can shut down power to the fan to prevent any issues). As you would imagine

Re: [j-nsp] SRX100 u-boot

2018-11-11 Thread Jonas Frey
sert that stick into the faulty SRX and force it to boot from there. Am Sonntag, den 11.11.2018, 14:43 +0200 schrieb Mohammad Khalil: > Ops , but it did not work either > Nand format failed > > BR, > Mohammad > > On Sun, 11 Nov 2018 at 14:46, Jonas Frey > wrote: > &g

Re: [j-nsp] SRX100 u-boot

2018-11-11 Thread Jonas Frey
Hi Mohammad, thats a typo, its nand_format (note the underscore). Am Sonntag, den 11.11.2018, 05:31 -0500 schrieb Mohammad Khalil: > => reset > > > U-Boot 1.1.6-JNPR-2.7 (Build time: Nov 26 2013 - 19:04:49) > > Initializing memory this may take some time... > Measured DDR clock 266.62 MHz > SRX

Re: [j-nsp] mx960 crashed

2018-04-05 Thread Jonas Frey
It seems not be documented by juniper - atleast i couldnt find any (MX related) info. However its a basic linux procedure, see: https://en.wikipedia.org/wiki/Magic_SysRq_key Juniper only has some info regarding SysRQ & the IDP series at: https://kb.juniper.net/InfoCenter/index?page=content&id=KB66

[j-nsp] MPC4E-32XGE firmware

2016-03-01 Thread Jonas Frey (Probe Networks)
Hello, i am getting the following notice in the logs: Mar 1 13:58:07 fpc0 CMIC(0/3): VSC8248 cmic-vsc8248-0/0/7 is running out-of-date firmware version 2.52 (0x234). Please upgrade firmware to version 2.53 (0x235) or later. Does anyone know howto update these? -Jonas signature.asc Desc

Re: [j-nsp] IPv4 Filter for ECN/CWR tcp bit (RFC3168)

2015-11-28 Thread Jonas Frey (Probe Networks)
Hi Daniel, thanks for this hint, i'll give it a try! (However would be pleased if juniper could just update the tcp-options stanca to include ECN/CWR). Br, Jonas Am Freitag, den 27.11.2015, 18:48 +0100 schrieb Daniel Verlouw: > Hi Jonas, > > On Fri, Nov 27, 2015 at 2:20 PM, Jon

[j-nsp] IPv4 Filter for ECN/CWR tcp bit (RFC3168)

2015-11-27 Thread Jonas Frey (Probe Networks)
Hello, i am trying to filter IPv4 traffic based on the tcp-options, in detail i am looking to filter for traffic with options CWR and ECN set (RFC3168). It seems this is not possible on current MX gear running 14.2. From the docs juniper only lists 6 of the current 8 tcp-options available to filt

Re: [j-nsp] Junos 12.3 more strict about 3rd party optics?

2014-06-24 Thread Jonas Frey (Probe Networks)
Most 3rd party vendor's lock down the A0 part of the SFP+, so you cant change values there. Try asking your vendor if they can provide A0 unlocked SFP+...usually they will be a bit more expensive. If they dont want to offer them just choose another supplier...there are plenty. Having a SFP+ EEPROM

Re: [j-nsp] MX Series BASE to PREMIUM3

2014-05-20 Thread Jonas Frey (Probe Networks)
Dave, as far as i know starting from PREMIUM2 the chassis also comes with the high capacity fan module. Am Dienstag, den 20.05.2014, 16:32 + schrieb Dave Peters - Terabit Systems: > Hi all-- > > I think I've got this nailed down, but I wanted to make sure I know the > differences among the

[j-nsp] EX4200 stuck in U-boot

2014-05-14 Thread Jonas Frey (Probe Networks)
Hello, i am having problems with a EX4200 which is stuck in U-boot. Before i can break the U-boot sequence it just hangs at: U-Boot 1.1.6 (Feb 6 2008 - 11:27:42) Board: EX4200-48POE 2.17 EPLD: Version 6.0 (0x85) DRAM: Initializing (1024 MB) FLASH: 8 MB USB: scanning bus for devices... 2 US

Re: [j-nsp] proposed changes to "clear bgp neighbor"

2014-02-26 Thread Jonas Frey (Probe Networks)
+1 for the "all" requirement Am Mittwoch, den 26.02.2014, 10:36 -0500 schrieb Phil Shafer: > Juniper users, > > We've been asked to make a change the "clear bgp neighbor" command > to make the neighbor or "all" argument mandatory. The root cause > is the severe impact of "clear bgp neighbor" and

Re: [j-nsp] ex switch VCP cabel

2014-02-10 Thread Jonas Frey (Probe Networks)
Hi, sorry, i mixed this up with a diff vendor. The VC cable on the EX series is a external pci-e x8 cable. See: http://juniper.cluepon.net/index.php/EX4200 Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun: > Hi, > > VCP cable for EX switch looks a lot like a plain SFF-8088 cable, can >

Re: [j-nsp] ex switch VCP cabel

2014-02-10 Thread Jonas Frey (Probe Networks)
Hi, it is one indeed. If you look closer at those shipped from juniper you can see its a normal SFF-8088. I doubt they have modified/coded anything to prevent the use of other brands. Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun: > Hi, > > VCP cable for EX switch looks a lot like a

Re: [j-nsp] Procedure for upgrade routing engines.

2014-01-08 Thread Jonas Frey (Probe Networks)
RE-S-1800 is running JunOS 64, so this will *not* work. Mixing routing engines isnt recommended/supported officially by juniper either, but works to some degree (RE1300/RE2000 32bit). Am Mittwoch, den 08.01.2014, 19:43 +0800 schrieb Xuhu: > OS version will be the same or not, official document

Re: [j-nsp] smartctl for junos

2014-01-07 Thread Jonas Frey (Probe Networks)
Hi, unfortunatly there is none. You have to remove the disk/SSD and install it in a regular system to read its smart data. You cant do this from JunOS, as you cant execute unsigned binarys. Am Dienstag, den 07.01.2014, 15:20 -0800 schrieb snort bsd: > hi all: > > there is smartd running on jun

Re: [j-nsp] EX4550 true power consumption

2013-10-24 Thread Jonas Frey (Probe Networks)
; it will easily be 400W or more. Around 100W for a base, idle unit with > a few optics sounds right. Each optic module draws several watts > depending on the type. > > On Oct 23, 2013 10:25 AM, "Jonas Frey (Probe Networks)" > wrote: > Hello, > >

[j-nsp] EX4550 true power consumption

2013-10-23 Thread Jonas Frey (Probe Networks)
Hello, does anybody have real world power consumption specs of the EX4550? (EX4550-32F-AFI) Juniper has no word about this anywhere in the documentation. There are only statements about the power supply itself (650W capacity) and "less than five watts per 10GB fiber interface". I've been able to f

[j-nsp] IDP series SSL decryption

2013-07-24 Thread Jonas Frey (Probe Networks)
Hello, i wonder if the IDP series (75, 250 etc) are able to decrypt SSL sessions using keys transparently to check for IPS. According to http://www.juniper.net/techpubs/en_US/idp5.0/topics/task/configuration/intrusion-detection-prevention-ssl-decryption-enabling.html this should be possible. I w

Re: [j-nsp] replacing M5 RE-3.0 hard drive

2013-07-17 Thread Jonas Frey (Probe Networks)
Yes, just make sure to use a 2,5" drive. SSD is fine, too. http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Am Mittwoch, den 17.07.2013, 09:42 -1000 schrieb Antonio Querubin: > I have a Juniper M5 whose hard drive just failed. The drive appears to be > a Fuji

Re: [j-nsp] SNMP ifIndex 0 on MX after ISSU

2013-03-08 Thread Jonas Frey (Probe Networks)
, 17:42 +0100 schrieb Tobias Heister: > Hi, > > Am 08.03.2013 16:33, schrieb Jonas Frey (Probe Networks): > > did anyone ever notice problems with wrong/changed SNMP ifIndex settings > > after ISSU? > > We ISSU upgraded a MX from 10.4R9.2 to 11.4R7.5 and after this some

[j-nsp] SNMP ifIndex 0 on MX after ISSU

2013-03-08 Thread Jonas Frey (Probe Networks)
Hello, did anyone ever notice problems with wrong/changed SNMP ifIndex settings after ISSU? We ISSU upgraded a MX from 10.4R9.2 to 11.4R7.5 and after this some of the ifIndex changed. When doing the ISSU it brought down FPC-1 (which is a MPC Type 2). Maybe thats why the ifIndex were changed. (We a

Re: [j-nsp] Difference between RE models.

2012-12-07 Thread Jonas Frey (Probe Networks)
Sunil, those are ordering codes from Juniper. The hardware is exactly the same so you can mix them. RE-400-768-BB = Base bundle (included in chassis order) RE-400-768-R = Redundant module (can be ordered same time with chassis) RE-400-768-S = Spare (to be ordered later to upgrade to redundancy)

Re: [j-nsp] Sources for SFP+ optics

2012-02-23 Thread Jonas Frey (Probe Networks)
The best thing nowadays is to get an eeprom programmer and do all this stuff yourself, this is what we do. This way you are flexible with 3rd party optics. You just buy a bunch of XFPs/SFP/SFP-P's with generic firmware and identifiers and programm the rest yourself for whatever device you are runn

Re: [j-nsp] SCB-E

2012-02-15 Thread Jonas Frey (Probe Networks)
PR718485: Workaround: Disable the "then log" or "then syslog" in firewall configuration. Am Mittwoch, den 15.02.2012, 12:28 +0100 schrieb Per Randrup Nielsen: > PR718485 signature.asc Description: This is a digitally signed message part ___ juniper-ns

Re: [j-nsp] Does MS-PIC (Type2 MultiServices 400) work in MX-FPC2?

2012-01-25 Thread Jonas Frey (Probe Networks)
Chuck, its not listed on the supported PICs. There are only sonet PIC's listed (not even ethernet ones) so i guess it will very likely not work. I guess your only option is to go with the MS-DPC. Am Dienstag, den 24.01.2012, 17:47 -0500 schrieb Chuck Anderson: > Is it possible to reuse a Type2 M

Re: [j-nsp] HDD Write Error

2012-01-16 Thread Jonas Frey (Probe Networks)
jumper the SSD to slave and re-install JunOS via a PCMCIA card. Best regards, Jonas Frey Am Montag, den 16.01.2012, 15:51 +0100 schrieb Juniper GOWEX: > Hi all, > > We have disk errors again. We bought a SSD ( TS8GSSD25-S ) to replace > the HDD with problems. If we connect the SS

Re: [j-nsp] Difference MX DPC-R / DPCE-R

2011-12-12 Thread Jonas Frey (Probe Networks)
Keegan, all of the DPC- cards are EOL since long time (05/31/2009). Some of the DPCE- cards are also EOL already. For details here is a list (public): http://www.juniper.net/support/eol/mseries_hw.html Of course juniper wants to move customers to MPC hardware so more and more of the remaining DPC

Re: [j-nsp] MX5-T-DC vs MX80-5G-DC-B

2011-11-19 Thread Jonas Frey (Probe Networks)
ieb Jonas Frey (Probe Networks): > > Hello, > > > That is not true. The ports are configurable and usable. But you need a > > license to be allowed to use them. The license is just paperwork and you > > dont need to activate it somewhere. However this policy will change in

Re: [j-nsp] MX5-T-DC vs MX80-5G-DC-B

2011-11-19 Thread Jonas Frey (Probe Networks)
Hello, > Hi all, > >these codes are basically the same, both are MX80 based devices with a > MIC 1x20GE (all mics are commercially called 3D, no difference here) > already installed in one of the two available slots. On MX5 (and in the > commercial bundle MX80-5) the 20x1G MIC is the only ca

Re: [j-nsp] HDD Write Error

2011-11-18 Thread Jonas Frey (Probe Networks)
classified for "enhanced" 24x7 operation. Anyway...if i was about to replace a hdd on a routing engine i would only use a SSD nowadays. Best regards, Jonas Frey Am Freitag, den 18.11.2011, 15:17 +0100 schrieb Juniper GOWEX: > Dear Jonas, > > > Two weeks a

Re: [j-nsp] 'Juniper BGP issues causing locallized Internet Problems, (Mon, Nov 7th)?

2011-11-07 Thread Jonas Frey (Probe Networks)
Well...basically yes. The issue (PSN-2011-08-327) is known since august. I guess the fact that juniper has listed the issue as "the probability of exploiting this defect is extremely low" has led many networks to not implent a immediate fix for this on a security perspective. As you know maintenan

Re: [j-nsp] HDD Write Error

2011-10-19 Thread Jonas Frey (Probe Networks)
from one of these two routers to > our M20. Is it that possible? any experience doing that? If both of > them have the same JUNOS installed, and then copy the current > configuration.. thoughts? > > Many thanks, > > > El 19/10/2011 16:56, Jonas Frey (Probe Networks) escribi

Re: [j-nsp] HDD Write Error

2011-10-19 Thread Jonas Frey (Probe Networks)
22/09/2011 8:05, Josh Farrelly escribió: > > Could you put them both in a Linux box and just 'dd if' them? > > > > -Original Message- > > From: juniper-nsp-boun...@puck.nether.net > > [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Jon

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-10-13 Thread Jonas Frey (Probe Networks)
onfiguration? Because when I try to > stitch both units of lt- interface I got error 'encapsulation > mismatch'. > > > Thanks! > > On Thu, Aug 18, 2011 at 21:26, Jonas Frey (Probe Networks) > wrote: > Thanks to all who replied, i got this working the way Ch

Re: [j-nsp] Fan Tray Failure in JM20

2011-10-11 Thread Jonas Frey (Probe Networks)
My guess is that this is some error on the i2c bus with the fans. Try rebooting the whole unit to see if the error persists. Its very unlikely that all 4 fans of a fantray fail totally. If you have a spare unit try the fantrays in that one to see if it is really related to the chassis. -Jonas

Re: [j-nsp] JUNOS and 128.0.0.0 martian (JFYI)

2011-10-10 Thread Jonas Frey (Probe Networks)
To whomever opened a PR about this: It has been posted on the amsix mailing list that juniper also needs to change internal addressing because of the issue with 128.0.0.0/16 as addresses of this space are used internally within JunOS (see below). Please add this to the PR so it gets fixed. re0>

Re: [j-nsp] M10i JUNOS Upgrade

2011-09-29 Thread Jonas Frey (Probe Networks)
ash. > > Further if a install media is used , how would it work with redundant > routing engine upgrades. > > Cheers > > > On Wed, Sep 28, 2011 at 11:12 PM, Jonas Frey (Probe Networks) > wrote: > Jake, > > as far as i know yo

Re: [j-nsp] M10i JUNOS Upgrade

2011-09-28 Thread Jonas Frey (Probe Networks)
Jake, as far as i know you need more than 512MB dram to go past JunOS 10.x. (I know there was a limitation but i dont recall where in detail). Any way with less than 768MB Ram you are asking for trouble with any modern JunOS. Best would be to upgrade your RE-5 to 768 MB which is the max. The RE-5

Re: [j-nsp] HDD Write Error

2011-09-21 Thread Jonas Frey (Probe Networks)
for your quick response . > > How to save the data to the new hard disk? Do you know a procedure for > replacing hard disk ? > > Best Regards, > > Isidoro > > > > El 20/09/2011 17:29, Jonas Frey (Probe Networks) escribió: > > Hi, > > > >

Re: [j-nsp] HDD Write Error

2011-09-20 Thread Jonas Frey (Probe Networks)
Hi, you are correct, the disk exceeded the maximum write errors permitted by the SMART value and thus is marked as bad. Prepare for a complete failure of the drive soon (1-30 days likely). May be the right time to upgrade the harddisk to a SSD. http://juniper.cluepon.net/Replacing_the_harddisk_wit

Re: [j-nsp] 1GE CWDM/DWDM Optics???

2011-09-09 Thread Jonas Frey (Probe Networks)
Hello, i can confirm that several CWDM SFP's from different vendors work fine with the MX-series. They will show up as unknown vendor as its been said alreadyunless you reprogramm these to return juniper part numbers (if you've got a SFP eeprom programmer). - Jonas Am Freitag, den 09.09.2011

Re: [j-nsp] [m10i] PIC-FPC throughput

2011-08-30 Thread Jonas Frey (Probe Networks)
The 3.2 Gbps limitation depends on the CFEB you have. The CFEB-E bumps this up to full line rate on all ports (4 Gbps per FPC). M7i 8.4Gbps half-duplex CFEB / 10Gbps half-duplex CFEB-E (this is because of the integrated GE/2FE Ports) M10i 12.8Gbps half-duplex legacy CFEB, 3.2Gbps per FPC 16

Re: [j-nsp] RE-600 SOLID STATE DRIVE NOT RECOGNIZED

2011-08-25 Thread Jonas Frey (Probe Networks)
In general every SSD (MLC/SLC) should work. Just need to make sure that you either get a PATA or SATA one (depending on your type of RE) and that its 2,5" form factor. If it doesnt work its in 99% of all cases the jumper for master/slave/cable select. Just try a different setting... you cant damag

Re: [j-nsp] 32-Bit JunOS on the 64-Bit Routing Engines

2011-08-25 Thread Jonas Frey (Probe Networks)
of growing IPv6 route tables as well as large (multiple) VRF/IPv4 tables. Am Donnerstag, den 25.08.2011, 19:13 -0700 schrieb Joel jaeggli: > On 8/25/11 17:56 , Jonas Frey (Probe Networks) wrote: > > Thats not completely accurate, for example the Intel Atom D525 does run > > 64bit co

Re: [j-nsp] 32-Bit JunOS on the 64-Bit Routing Engines

2011-08-25 Thread Jonas Frey (Probe Networks)
Thats not completely accurate, for example the Intel Atom D525 does run 64bit code. > There are plenty of machines that do. virtually every intel system since > the pentium pro (except the atom) has the hardware if not the bios > support for doing so, that's not germain to the question of whethe

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
?) > > On Thu, Aug 18, 2011 at 3:51 PM, Jonas Frey (Probe Networks) > wrote: > > Matt, > > > > yes the config changed in JunOS 10.x. > > > > See below: > > > > --- OLD --- > > sampling { > >input { > >family inet { &g

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
Woops, forgot something. Input also changed and should be now: sampling { input { rate 100; } (no longer using family...) Am Freitag, den 19.08.2011, 00:51 +0200 schrieb Jonas Frey (Probe Networks): > Matt, > > yes the config changed in JunOS 10.x. >

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
to sample (this way you can also separate v4/v6 sampling). Best regards, Jonas Am Donnerstag, den 18.08.2011, 15:33 -0700 schrieb Matt Hite: > Thanks to Jeff Richmond and Jonas Frey who were kind enough to provide > guidance both on and off-list. > > This is what I ended up with

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
quot; statement only samples and will continue processing your firewall rules as normal. As for the global config at forwarding-options: I havent tried this. I like to have this only running on interfaces i configure the filter on...much more precise. -- Mit freundlichen Grüßen / Best

[j-nsp] Juniper blanks/covers

2011-08-18 Thread Jonas Frey (Probe Networks)
Hello all, i am looking for 2x PWR-BLANK-M10i-M7i (power blank for m7i/m10i), maybe someone has these unused on his desk. Just wanted to ask before spending $65/ea for a small piece of metal. I am also looking for rackmounts for the M10i...as per global price list this part is not listed...and i w

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-08-18 Thread Jonas Frey (Probe Networks)
capsulation vlan-ccc; > >peer-unit 2; > >} > >unit 2 { > > encapsulation vlan-bridge; > >peer-unit 1; > >} > > } > > > > bridge-domains { > >VL20 { > >domain-type bridge; > >vlan-id 20

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-08-17 Thread Jonas Frey (Probe Networks)
-domains testbridge domain-type bridge; vlan-id 20; What i need to do is to get the VLAN 20 working locally on the bridge (various ports) as well as getting it connected to a somewhat pseudo interface to attached it as a l2circuit. -- Mit freundlichen Grüßen / Best regards, Jonas Frey

[j-nsp] MX: bridge-domains and l2circuit

2011-08-17 Thread Jonas Frey (Probe Networks)
Hello all, i am trying to build a l2circuit on a MX. The problem is that the vlan that needs to be included in the l2circuit comes via xe-1/0/0 which is configured in bridge mode: unit 0 { family bridge { interface-mode trunk; vlan-id-list [ 20 30 40 ]; } I need to build t

[j-nsp] Juniper MX SCBE-MX-R

2011-08-10 Thread Jonas Frey (Probe Networks)
Hello, i see that there now is a new enhanced SCB for MX series which is SCBE-MX-R. However i havent been able to find any information on this regarding enhancements/features. Does anyone have any details? Best regards, Jonas signature.asc Description: This is a digitally signed message part __

Re: [j-nsp] M20 SSB E Memory seller required

2011-08-10 Thread Jonas Frey (Probe Networks)
You will need the 128MB DRAM upgrade if you have lots of routes as well as a couple of thousand of arp entrys. This will fill the memory on the SSB-E very fast and once you hit the 64MB limit the router will do weird things (e.g. several ip address no longer reachable, routes not being installed et

Re: [j-nsp] RE-850 memory/ram refurb

2011-05-04 Thread Jonas Frey (Probe Networks)
I am pretty sure that its PC133/ECC SD-Ram but you can just grab the part number off the memory thats installed and look it up. Most likely its SMART memory (which is hard to find and also very expensive). Normal PC133/ECC SD-Ram is fine and works great on RE3/5. I dont see any reason why you woul

Re: [j-nsp] mitigating dos attack on Juniper M10i

2011-04-05 Thread Jonas Frey (Probe Networks)
destination-class-usage; > } > rpf-check; > filter { > input-list [ SAMPLER BLOCK-FROM-INTERNET all ]; > output all; > } > sampling { > input; > } > address e.f.g.h/30; > } > } >

Re: [j-nsp] mitigating dos attack on Juniper M10i

2011-04-05 Thread Jonas Frey (Probe Networks)
its coming in but the traffic will still enter your interface and you might get charged for it. c) You can just route the IP beeing attacked to discard which is usefull if you have multiple interfaces where the attack is incoming. Regards, Jonas Frey Am Dienstag, den 05.04.2011, 13:00 +

Re: [j-nsp] re-600 RAM

2011-03-25 Thread Jonas Frey (Probe Networks)
Chris, http://juniper.cluepon.net/Route_Engine_DRAM_Compatibility RE-3 aka RE-600 Its SD-RAM, PC100 or PC133 (will run as PC100), ECC. Registered ram will not work. Also you need to get low profile ram otherwise it wont fit. Regards, Jonas Am Donnerstag, den 24.03.2011, 16:14 -0700 schrieb

Re: [j-nsp] P-1GE -B ethernet

2011-03-17 Thread Jonas Frey (Probe Networks)
They are neccessary for termination of (vlan)-ccc circuits. So if you just want to have mpls between two routers the non-B is fine. Its just needed for ccc termination on endpoints. Regards, Jonas Am Donnerstag, den 17.03.2011, 08:43 -0700 schrieb Chris Cappuccio: > P-1GE-xx-B are necessary for

Re: [j-nsp] M20 / RE2 Full table

2011-03-02 Thread Jonas Frey (Probe Networks)
Patrik, its possible and works well. If you only have 1 full bgp feed i wouldnt worry. If you have multiple they best thing is to upgrade to RE3. Also keep in mind that you can easily max out the SSB-E if you havent upgraded it to 128MB or 256MB (SSB-E-16). This is from a RE2/768: Groups: 11 Pee

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-20 Thread Jonas Frey (Probe Networks)
006AE3K)? > > Any other CF cards, which are confirmed to work? The one I tried(with > > no luck so far), 1GB "SiliconDrive CF"(SiliconSystems, Inc. Now owned > > by Western Digital) SSD-C01G-3596, looks like this: > > http://img23.imageshack.us/img23/8923/jsdd.jpg >

Re: [j-nsp] RE-333 upgrade

2011-02-14 Thread Jonas Frey (Probe Networks)
Hi, RE-333 max is 768 MB. Yes it will be enough for a v4+v6 feed. You should also consider upgrading your SBC memory. See http://juniper.cluepon.net for unofficial upgrades. Latest JunOS that will work is 9.2 due to non FPC-E. You also need 1G CF for that within your RE-333 to work. There once wa

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-11 Thread Jonas Frey (Probe Networks)
bly others (atleast on T320/T640 RE-1600/RE-2000). Am Freitag, den 11.02.2011, 12:14 +0200 schrieb Pekka Savola: > On Fri, 11 Feb 2011, Jonas Frey (Probe Networks) wrote: > > I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe > > its too new. I know about se

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-11 Thread Jonas Frey (Probe Networks)
I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe its too new. I know about serveral newer CF cards not working in RE2/3. Try to get a regular SanDisk 1GB+ CF. (not the Ultra/Extreme models). This should work. Regards, Jonas Am Freitag, den 11.02.2011, 08:43 + schrieb Mar

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-10 Thread Jonas Frey (Probe Networks)
P_TRAP7: SNMP trap > generated: FRU insertion (jnxFruContentsIndex 9, jnxFruL1Index 2, > jnxFruL2Index 1, jnxFruL3Index 0, jnxFruName Routing Engine 1 PCMCIA > Card 0, jnxFruType 6, jnxFruSlot 1) > > ..however, there is no "ad3" under "show system storage": > &g

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-10 Thread Jonas Frey (Probe Networks)
Martin, yes thats the correct way to do it. Only the pc-card slot is able to fully partition both CF and HDD using a install-media image and get you a fresh and blank JunOS installed. It will install on both CF and HDD and thus you will have a redundant setup (when either CF or HDD fails). Regar

Re: [j-nsp] Creating L2tp/ADSL over M10i

2011-02-01 Thread Jonas Frey (Probe Networks)
Hi, good luck trying this. When i did this once it was a horrible mess. The l2tp implementation is quite broken. The accounting is just not working correctly and so on... Stay with cisco...that'll save you alot of time. Maybe the MX will have better l2tp supportsometime. Regards, Jonas Am D

Re: [j-nsp] M20 SSB slot 0 failures

2011-01-18 Thread Jonas Frey (Probe Networks)
Hi Chris, i havent seen an error like this where the same SSB works fine in slot 1 but not slot 0. But my guess is that slot 0 gives back the true status of the card and the test report from slot 1 is inaccurate. We have seen memory failures of SSB-E(-16) boards a couple of times while running i

Re: [j-nsp] P-1GE -B

2010-12-28 Thread Jonas Frey (Probe Networks)
Not really. Both can do MPLS but only -B is capable of CCC VLANs (513-1024) for MPLS. Regards, Jonas Am Montag, den 27.12.2010, 16:10 -0800 schrieb Chris Cappuccio: > Someone refresh my memory...is the -B variant the only one that is MPLS > capable? What is the difference between P-1GE-LX and

Re: [j-nsp] l2tp sessions on MX

2010-12-14 Thread Jonas Frey (Probe Networks)
I used the L2TP/LNS features with the ASM Pic w/M7i. All i can say is its useless. It has so many feature limitations and bugs its really not worth using it (one major one beeing not able to do accouting correctly, timed saving of traffic stats and alike). At that time i couldnt even find someone e

Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
7.1114 > > US1.915.217.2286 > > > > On Oct 21, 2010, at 3:59 PM, "Jonas Frey (Probe > > Networks)" > > wrote: > > > >> See cluepon: > >> > >> http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_

Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
See cluepon: http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano: > Anybody that can provide as to how to replace a m10 hard disk? one of them > failed. > > any feedback is greatly appreciated. > >

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Jonas Frey (Probe Networks)
Hi, its easy: - you need "multihop" on internal bgp sessions - configure dsc: unit 0 { family inet { address 10.10.20.1/32 { destination 10.10.20.2; } } } Add policy for blackhole filter: # show policy-options policy-statement blackholefilter term black {

Re: [j-nsp] Failed FPC

2010-08-31 Thread Jonas Frey
Hi, yes you can do that, try offline/online for the fpc. It wont cause any trouble, if you have bad luck it just wont work (if the card is faulty). If it doesnt work i'd try to cycle it hardware-wise. If that doesnt help try changing the FPC. Even tho juniper sold these combined with the sonet car

Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)

2010-07-08 Thread Jonas Frey
I guess you dont get any more console output since after that last line the system will send all output to VGA only. Before the output was handled by the bios and redirected to the com port. So (i guess) you have to make the freebsd installation to send all console output to the correct com-port...

[j-nsp] RE-3.0 740-007603 not working in a M5/M10?

2010-06-09 Thread Jonas Frey
seems to be the latest. When using this RE in a M5/M10 the system doesnt bootup, console shows nothing. Anyone aware of a 2nd gen RE-3.0 not working without E-FEB? Regards, Jonas Frey ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] AC-DC converter question

2010-05-17 Thread Jonas Frey
Hi, we do have T320's running on AC->DC...we are using rectifiers from C-Can (www.c-can.com). Regards, Jonas Frey On Mon, 2010-05-17 at 19:09, OnePacket - Scott wrote: > Hi Everybody, > > I have a question and was hoping somebody could point me in the right > direction, I

Re: [j-nsp] SSD in M7i

2010-02-09 Thread Jonas Frey
Mike, i wrote the procedure on cluepon. I can really recommend doing the upgrade to SSD. Even tho most harddrives used in the M-series are rated for 24x7 operation...they are still harddrives and prone to failures. I havent had a single problem with SSD's yet. Also the boot times speed up dramatic

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-07 Thread Jonas Frey
Kevin, we are talking about 8.5 and not 9.3 On Sun, 2010-02-07 at 02:47, Kevin Oberman wrote: > > From: Niels Ardts > > Date: Sat, 6 Feb 2010 18:25:46 +0100 > > Sender: juniper-nsp-boun...@puck.nether.net > > > > That's weird.. We've asked JTAC for a release with this fix, and they gave

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-06 Thread Jonas Frey
I am not using it, so i am not sure about the build date. However i know it has all of the recent vulnerabilities fixed including the RSVP one. Regards, Jonas On Sat, 2010-02-06 at 17:50, Dave Diller wrote: > > > I do have jinstall-8.5S5-domestic-signed.tgz which is the fixed one. > > Never hear

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-06 Thread Jonas Frey
I do have jinstall-8.5S5-domestic-signed.tgz which is the fixed one. Never heard about S4. Regards, Jonas On Fri, 2010-02-05 at 15:48, TCIS List Acct wrote: > Is it 8.5S4 or S5? A previous post specified S5... > > TIA. > > Niels Ardts wrote: > > Hi, > > > > Yes, that is 8.5S4. > > > > Regard

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
about ISPs having real problems so far. We are going > to upgrade about 80 Juniper routers on next few days. Not willing to > be the first victim... > > Andre > > > Em jan 12, 2010 6:29 PM, "Jonas Frey" > > escreveu: > > > > Tim, > > > &

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
e > that should not be a problem if you have your firewall filters locked > down properly. > > Just my 2 cents. > > -Tim Eberhard > > > On Tue, Jan 12, 2010 at 11:22 AM, Jonas Frey > wrote: > Hello, > > i have tried exploiting this on v

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
this on all releases. So ACL's do work for some extend. Also you need an open port for this to work (BGP etc). Regards, Jonas Frey On Fri, 2010-01-08 at 17:41, Florian Weimer wrote: > * Barry Greene: > > > The information is in the security advisory. > > Are the PSNs the se

Re: [j-nsp] Compatible RAM for RE

2009-12-03 Thread Jonas Frey
: > Jonas Frey wrote: > > We used: > > > > Kingston KVR133X72C2/256 > > > > Also have a look at: > > http://juniper.cluepon.net/index.php/Route_Engine_DRAM_Compatibility#RE-2.0_Generic_DRAM > > > > Interesting... > > The spec shee

Re: [j-nsp] Compatible RAM for RE

2009-12-03 Thread Jonas Frey
We used: Kingston KVR133X72C2/256 Also have a look at: http://juniper.cluepon.net/index.php/Route_Engine_DRAM_Compatibility#RE-2.0_Generic_DRAM Regards, Jonas On Thu, 2009-12-03 at 09:23, Andy Harding wrote: > Welch, Bryan wrote: > > We bought ours directly from Crucial for our M7i RE-400's. T

Re: [j-nsp] death by branding

2009-10-29 Thread Jonas Frey
ohh my god On Thu, 2009-10-29 at 19:58, Richard A Steenbergen wrote: > http://www.e-gerbil.net/juniper_style_guide.pdf > http://www.e-gerbil.net/cjr.png > > With apologies to Carl's Jr. :) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net h

Re: [j-nsp] Compatibilty between FPC and E-FPC

2009-10-19 Thread Jonas Frey
Hello, yes thats perfectly possible. But take care, beginning with JunOS 9.2 (iirc) the old FPC is no longer supported AND will not work, only E-FPC will work. Regards, Jonas On Mon, 2009-10-19 at 13:02, iber-x wrote: > Hi all, > > does Juniper support an FPC and E - FPC at the same time withi

Re: [j-nsp] M7i Hard Disk Replacement

2009-08-14 Thread Jonas Frey
I recommend using SSD's, see: http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Regards, Jonas > >> Hello, > >> > >> I was wondering if anyone has successfully replaced a hard disk on a M7i > >> RE-5.0. If so with what model disk, and once installed what is the

Re: [j-nsp] M20 Chassis shutdown due to error on the Processor Bus

2009-07-14 Thread Jonas Frey
Hi, that error is not coming from the chassis but rather from the SCB/SSB which is where the mpc106 is located. If you have spare's try changing the SSB. Regards, Jonas On Tue, 2009-07-14 at 12:09, Brendan Regan wrote: > Hi, > > Has anyone come across an M20 which suddenly looses communication

Re: [j-nsp] Will P-1GE-SFP work in M5/M10/M20?

2009-04-21 Thread Jonas Frey
David, i am sorry but you need a FPC-E (for M20) or FEB-M5-E/FEB-M10-E (enhanced FEB for M5/M10). Without this you will see no traffic at all (no arp etc) but the pic will be detected. As for the form factor it doesnt matter, the electronics are the same so you can use P/PE in any combination wi

Re: [j-nsp] how to set burstable in juniper router

2009-04-21 Thread Jonas Frey
Hello, its easy...just apply a filter to the interface: ge-0/0/0 unit 0 { family inet { filter { output burst-50mbit; } the filter should look like: # show firewall filter burst-50mbit term term1 { from { address {

Re: [j-nsp] j-nsp compact-flash drive error

2009-02-24 Thread Jonas Frey
> >> /packages/mnt/jpfe-common-8.4R1.13 > >> mfs:135 2.0G12K 1.8G 0% /tmp > >> mfs:142 2.0G 854K 1.8G 0% /mfs > >> /dev/ad0s1e 95M 101K94M0% /config > >&

Re: [j-nsp] M5/M10/M20 gear questions

2008-12-16 Thread Jonas Frey
Charles, yes, the PICs (PE, P, PB) are all the same, the difference is just the faceplate. Using PE- PICs in M20 upwards works fine. Using P- PICs in M5/7/10i is a bit difficult. Some folks tend to add some type of removable gluesticks to the faceplate so they can pull them out more easily. The d

[j-nsp] L2TP Multilink not working

2008-12-01 Thread Jonas Frey
you can see, the juniper sets the MRRU for both incoming and outgoing to 0. As there is no way to configure the MRRU i really wonder how MPPP should work for L2TP? Regards, Jonas Frey ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

  1   2   >