Re: [j-nsp] M120/T320/T640 pitfalls with IPv6?

2011-06-02 Thread Kevin Oberman
years with no issues at all. That said, there are some things that are not equal between protocols, but performance is not one of them and the MX is no better then the others in that regard. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National

Re: [j-nsp] JUNOS major releases - differences between revisions

2011-05-22 Thread Kevin Oberman
would be unable to find matches. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] MX80 - restricted bundles and disabled 10G ports.

2011-04-12 Thread Kevin Oberman
turned out to be on DEC. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Changing SSH port on EX switches, M routers

2011-04-04 Thread Kevin Oberman
From: Stefan Fouant sfou...@shortestpathfirst.net Date: Sun, 3 Apr 2011 21:27:06 -0400 -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of Kevin Oberman Sent: Sunday, April 03, 2011 7:50 PM 1. Limit access

Re: [j-nsp] Changing SSH port on EX switches, M routers

2011-04-03 Thread Kevin Oberman
is a problem. This sort of control is vastly superior to playing games with the ssh port by which smart hackers will only be mildly disturbed. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net

Re: [j-nsp] NAT64 on an M7i

2011-02-03 Thread Kevin Oberman
literal IPv4 addresses. NAT64 can't properly deal with these. It was vastly easier to use and to set up than NAT-PT or other techniques we have tried in the past. Everyone confused, now? If so, my work here is done. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O

Re: [j-nsp] Anycast

2011-01-18 Thread Kevin Oberman
to me like they are the only real solution for you. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D

Re: [j-nsp] Netflow Export - MX running 10.x

2010-09-17 Thread Kevin Oberman
card. (Of course, there are lots of reports that Trio cards have lots of other issues.) -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint

Re: [j-nsp] Centralized scripts and copying to redundant routing-engines..

2010-09-09 Thread Kevin Oberman
' with. ssh -xai private-key-file u...@router show chassis routing-engine 0 | grep Current state -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key

Re: [j-nsp] EX 4200 stability with BGP and OSPF redistribution ?

2010-06-21 Thread Kevin Oberman
you never had a heavily configured M10 or M20 if you think that 20 seconds is a long time to commit. I'll admit that I have gotten spoiled by the speed of the MX series, though. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory

Re: [j-nsp] AC-DC converter question

2010-05-17 Thread Kevin Oberman
you need are rectifiers and they are available from most of the companies that do power system (UPS, PDS, etc.) Many have interfaces to allow you to monitor/control them remotely. (You want these to be REALLY secure.) The are generally rack-mounted and not real cheap. -- R. Kevin Oberman, Network

Re: [j-nsp] NAT

2010-03-27 Thread Kevin Oberman
traffic has established a destination nor is there a pre-configured destination, The router has no place to forward the packet, do it is counted and dropped. A wide assortment of common network scans would result in this event. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet

Re: [j-nsp] EX4200 upgrade

2010-03-08 Thread Kevin Oberman
not cannibalize the MX. Looks like this is at least part of how they did it. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3

Re: [j-nsp] EX 3200 - no arp entries after power failure

2010-02-08 Thread Kevin Oberman
somebody had seen this issue before. This is a known issue with 9.2 and is fixed in newer versions. We hit the same problem and had to enter static ARP entries. The problem is fixed in any remotely current release of JunOS for the EX boxes. -- R. Kevin Oberman, Network Engineer Energy Sciences

Re: [j-nsp] EX 3200 - no arp entries after power failure

2010-02-08 Thread Kevin Oberman
. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Basic doubt on unit

2010-01-25 Thread Kevin Oberman
things JUNOS does with new configuration is to convert it to XML.. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4

Re: [j-nsp] IPv6

2010-01-24 Thread Kevin Oberman
Date: Sun, 24 Jan 2010 21:26:43 -0600 From: Richard A Steenbergen r...@e-gerbil.net On Sun, Jan 24, 2010 at 04:56:47PM -0800, Kevin Oberman wrote: We just define our own policy to fake nexthop self: policy-statement set-nexthop-self { term IPv4 { from family inet

Re: [j-nsp] PFE-forwarded IPv6

2009-12-23 Thread Kevin Oberman
for the tunnel is labeled 3/0/10. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Troubleshooting BGP

2009-10-08 Thread Kevin Oberman
don't leak form one to the other. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Miercom Competitive Performance Testing Results: Cisco ASR9000 vs Juniper MX960

2009-09-28 Thread Kevin Oberman
looks too one-sided. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Miercom Competitive Performance Testing Results: Cisco ASR9000 vs Juniper MX960

2009-09-27 Thread Kevin Oberman
the set routing-options forwarding-table indirect-next-hop knob). Configuring that knob will greatly speed up your actual convergence times. This looks like a big win, so I'm looking for a down-side. If there is none, I would expect it to be the default. -- R. Kevin Oberman, Network Engineer Energy

Re: [j-nsp] Partition/Format new HD

2009-08-21 Thread Kevin Oberman
/var/run/dmesg' in the CLI. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Partition/Format new HD

2009-08-21 Thread Kevin Oberman
Date: Fri, 21 Aug 2009 09:56:45 -0700 From: Kevin Oberman ober...@es.net Sender: juniper-nsp-boun...@puck.nether.net Date: Fri, 21 Aug 2009 12:32:30 -0400 From: Brendan Mannella bmanne...@teraswitch.com Sender: juniper-nsp-boun...@puck.nether.net Hello, I have been battling

Re: [j-nsp] Partition/Format new HD

2009-08-21 Thread Kevin Oberman
be a FreeBSD type slice, so bsdlabel will fail (as it did). Wiping the partition table prevents this and causes fdisk to be run before bsdlabel. I am pretty sure that just doing the dd followed by the 'request system partition hard-disk' would have done the job. -- R. Kevin Oberman, Network

Re: [j-nsp] Partition/Format new HD

2009-08-21 Thread Kevin Oberman
Date: Fri, 21 Aug 2009 16:46:40 -0500 From: Richard A Steenbergen r...@e-gerbil.net On Fri, Aug 21, 2009 at 12:26:10PM -0700, Kevin Oberman wrote: Yes, but it was the dd(1) that fixed the real problem. The disk was pre-formatted for either FAT or NTFS and that resulted in a partition

Re: [j-nsp] M7i Hard Disk Replacement

2009-08-12 Thread Kevin Oberman
partition for format, partition, load the drive. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3

Re: [j-nsp] Restore M7 to initial state

2009-07-31 Thread Kevin Oberman
to read your config. :-) -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Sanitising m/t series routers?

2009-07-07 Thread Kevin Oberman
both the flash and disk. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] Cisco Compact Flash in m10i

2009-06-18 Thread Kevin Oberman
Advanced Power Management. As far as I know, JunOS does not use either the old APM or new(er) ACPI power management capabilities. APM was replaced as the standard for power management several years ago and more and more equipment no longer supports APM. -- R. Kevin Oberman, Network Engineer Energy

Re: [j-nsp] ex4200 log message question

2009-05-21 Thread Kevin Oberman
code. Umm. On which platform? On non-EX platforms, 9.3 looks pretty good, although there were show-stoppers for us in 93r2, r3 seems to have fixed them. This message was about the EX software and it is a VERY different beast. -- R. Kevin Oberman, Network Engineer Energy Sciences Network

Re: [j-nsp] ex4200 log message question

2009-05-21 Thread Kevin Oberman
platform, the message was these would be fixed in 9.3R3 and would be exceptionally stable. On May 21, 2009, at 11:19 AM, Kevin Oberman wrote: From: Cord MacLeod cordmacl...@gmail.com Date: Thu, 21 May 2009 10:37:30 -0700 Sender: juniper-nsp-boun...@puck.nether.net Can you elaborate

Re: [j-nsp] New flash card in M7i

2009-03-07 Thread Kevin Oberman
instructions on doing this about a week ago. You can erase the format on the router, but it has to be up and running JunOS to do so. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net

Re: [j-nsp] Upgrade from M10i?

2009-02-04 Thread Kevin Oberman
, We run multicast on our MX boxes and have seen no problems. R. Kevin Oberman ESnet--The Energy Sciences Network Berkeley Lab ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] looking for mx960 stable junos for peering issues

2009-01-28 Thread Kevin Oberman
://www.nanog.org/meetings/nanog45/presentations/Monday/Davidson_asn4_breaks_light_N45.pdf -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint

Re: [j-nsp] Update on M7

2009-01-22 Thread Kevin Oberman
to the documentation or more explanation? -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

Re: [j-nsp] l3vpn for IPv6 Unicast - Issue

2009-01-05 Thread Kevin Oberman
From: Mark Tinka mti...@globaltransit.net Date: Tue, 6 Jan 2009 00:01:58 +0800 On Monday 05 January 2009 11:54:31 pm Kevin Oberman wrote: The end of WHICH year? Ummh, 2009. Guess I needed a smiley. We've been running native IPv6 support for several years and have been asking

Re: [j-nsp] l3vpn for IPv6 Unicast - Issue

2009-01-05 Thread Kevin Oberman
told us, a couple of weeks back, that an IPv6 control plane fr MPLS should be available at the end of this year. We'll wait and see. The end of WHICH year? -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E

Re: [j-nsp] l3vpn for IPv6 Unicast - Issue

2009-01-04 Thread Kevin Oberman
mesh, but I suspect that will not be something for us to worry about for at least a couple more years and probably until after I retire. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: ober...@es.net

Re: [j-nsp] Why should I *not* buy an MX?

2008-11-08 Thread Kevin Oberman
, but the routing software is still immature compared to other vendors and the lack of MPLS capability makes them a non-starter when we look at hardware. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL

Re: [j-nsp] NTP on MX - time zone???

2008-10-13 Thread Kevin Oberman
time-zone time-zone Americas/LosAngeles; my time is 16:21 ??? That's not a valid time-zone. I think you want time-zone America/Los_Angeles (note the underscore and that America is not plural). -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence

Re: [j-nsp] JunOS Olive Torrents Legal?

2008-10-10 Thread Kevin Oberman
hardware here in my home lab, I got this from a colleague in the workplace. It is working very much. Olives work fine. It's just that they don't exist, have never existed and will never existed. I guess all of the people running olives don't exist either. :-) -- R. Kevin Oberman, Network Engineer

Re: [j-nsp] BGP error messages

2008-09-01 Thread Kevin Oberman
are used, especially in combination or stacked (or when tunnels are used), this is fairly common. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634

Re: [j-nsp] Juniper High CPU Process Kqread

2008-08-15 Thread Kevin Oberman
if it is in the kqread state. To see the route processor using 44% of the CPU is rather high. Even on our core routers I generally only see 3-5% CPU use by rpd. It runs much higher at time when there is routing instability. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest

Re: [j-nsp] Debugging SONET (OC-3) errors

2008-08-05 Thread Kevin Oberman
seen nothing. The error is probably at a hand-off from one carrier to another. Try to confirm which carrier(s) are seeing any non-path errors. This will at least help localize the issue. Good luck! -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley

Re: [j-nsp] IPSEC into VRF

2008-07-14 Thread Kevin Oberman
/modules/100089.pdf For the record, the ES-PIC limits bandwidth to 800 Mbps and does not support IPv6. It may have other limitation, but these were both significant to us, especially the IPv6. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National

Re: [j-nsp] Interface Errors

2008-06-08 Thread Kevin Oberman
-duplex. That eliminates collisions, but will not likely make any noticeable difference in performance. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510

Re: [j-nsp] Juniper monitoring and syslog

2008-06-02 Thread Kevin Oberman
NMS. Thank you! The community often forgets to thank the folks willing to make such contributions. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510 486

Re: [j-nsp] Sandisk Extreme III 1G CF card compatibility

2008-05-05 Thread Kevin Oberman
every 1GB card we have received from Juniper is Silicon Systems. We have a bunch more on order, but we only have a few in hand at this time, so it the sample may not be statistically valid, especially when the ones we have were purchased at about the same time. -- R. Kevin Oberman, Network Engineer

Re: [j-nsp] Sandisk Extreme III 1G CF card compatibility

2008-05-05 Thread Kevin Oberman
(probably not until June, I have none where I can go examine them. Sorry. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634 Key fingerprint

Re: [j-nsp] M320

2008-04-14 Thread Kevin Oberman
supply and one RE. Not sure about other things like how many fan modules are needed or if a CFEB is required. Of course, this is just to get the box to power on, not to make it do anything with a network. And, maybe you got it right and I miss the point. -- R. Kevin Oberman, Network Engineer

Re: [j-nsp] JUNOS 9.0 and CF requirement

2008-02-22 Thread Kevin Oberman
they are not specially marked in any way, I doubt that even that would be a problem. Speaking only as myself and not for my employer. -- R. Kevin Oberman, Network Engineer pgp9ut7X3fIB2.pgp Description: PGP signature ___ juniper-nsp mailing list juniper

Re: [j-nsp] 8.x Compatibility (was: Upgrade without PCMCIA card?)

2007-12-20 Thread Kevin Oberman
- what type of memory can you use on an old, outdated FEB? Hypothetically, of course, because who would want to invalidate their warranty? ;-) Huh? A 64MB FEB that is still in warranty? -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National

Re: [j-nsp] 10G module for MX - which one?

2007-11-01 Thread Kevin Oberman
like per-VLAN queues. It is significantly more complex than the standard version. If you don't need it, go with the DPCE-R-4XGE-XFP. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED

Re: [j-nsp] Failures in HD-only M7i routers

2007-09-29 Thread Kevin Oberman
a limited future as JUNOS V9.0 will require 1GB CF. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL PROTECTED] Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA

Re: [j-nsp] Network Configuration Management

2007-06-17 Thread Kevin Oberman
/download configs, track versions and track assets. I use a modified version of rancid (http://www.shrubery.net/rancid). Free and very widely used. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL

Re: [j-nsp] Strange behaviour on a M10...

2007-05-04 Thread Kevin Oberman
are seeing. Of course, this traffic may not originate locally and that i why you really want to carefully protect that path by filtering access to lo0. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: [EMAIL