[j-nsp] Updating SRX300, now slower than before

outing/IPsec is unimpacted then it's OK, or could it be that the SRX300 will now perform slower than before in terms of routing packets/IPsec performance/throughput? Or is that stupid of me to think? :) Thank you! Regards Markus ___ juniper-nsp mail

Re: [j-nsp] Please push Juniper to implement RFC6907

r are not because RFC6907 ... > But let me publish a ROA for 194.45.183.0/24-24,AS517 ... then we know. Still in to see if Cisco XR would not accept this. Sorry again for the non j-nsp noise, should shift this conversation away from here ... but I couldn't leave this wrong-with-first-sh

Re: [j-nsp] Please push Juniper to implement RFC6907

Markus wrote: |Mark wrote: |> So the validator is not even showing either /24, only the /23. |> Could it be implementing RFC 6907? |https://github.com/RIPE-NCC/rpki-validator-3 ... If I'm not mistaken, the RIPE validator uses http://www.ris.ripe.net/dumps/ which lists for

Re: [j-nsp] Please push Juniper to implement RFC6907

is RFC in Junos. Any idea how to workaround this in JunOS other than building filters "somewhere else"? I wouldn't know how to easily drop paths with AS_SET in JunOS. Markus -- AS286 - still here ... ___ juniper-nsp mailing list juni

Re: [j-nsp] Please push Juniper to implement RFC6907

dation mechanism (and even works for more specifics, which you can't do by just "spoofing" the origin AS). Checking lg.seacomnet.com I see both /24 accepted as with "RPKI State not found". Markus [*] Well, the validator should - beside validating the ROAs - as well en

Re: [j-nsp] Please push Juniper to implement RFC6907

empty as-paths seem to both log "as-set detected, validation result unknown".) You still can provide a disable-rfc6907 option, but don't have the default be "unsecure". Thanks again, Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Please push Juniper to implement RFC6907

you seeing & accepting for example 194.45.182.0/24 and / or 194.45.183.0/24? You shouldn't ... luckily these are just test prefixes ... ROAs 194.45.182.0/23-23,286 ROA: 194.45.183.0/24-24,12469 194.45.182.0/24: .* 286 2858 {517} 194.45.183.0/24: .* 286 2858 {517 12469} Thanks for your ti

Re: [j-nsp] Nested subroutine behaviour

ke adding communities, changing local-pref, but even then it doesn't harm). https://www.juniper.net/documentation/en_US/junos/topics/usage-guidelines/policy-configuring-subroutines-in-routing-policy-match-conditions.html Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] understand "request system software rollback" in Junos

Am 01.10.2015 um 18:25 schrieb Martin T: When can one use "request system software rollback"? http://www.juniper.net/documentation/en_US/junos13.3/topics/reference/command-summary/request-system-software-rollback.html "A software rollback fails if any required package (or a jbundle package co

Re: [j-nsp] HDD requirements for RE-333 and RE-600

nd RE-850 where I replaced the HDDs with SSDs, so I'm only guessing, its a shot in the dark, but did you try cable-select instead of slave? If it doesnt change anything I would try a HDD (SSD) with the exact same size than the original. Rega

Re: [j-nsp] Looking for paid config - source/port NAT?

Am 05.08.2015 um 16:17 schrieb Michael Loftis: You can do a transparent proxy type setup. Using the firewall filter syntax to change the next hop to a properly configured Linux, FreeBSD, or whatever host. The mail gateway I want to relay through is somewhere on the internet. In this case chang

[j-nsp] Looking for paid config - source/port NAT?

;t seem to figure it out by myself. Not sure if I even need NAT or not. Anyone available to do this paid & rather quickly? Please contact me off-list. Thank you! Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.neth

Re: [j-nsp] Replacement HD/SSD for RE-850

Am 25.07.2015 um 10:42 schrieb Tom Storey: I wonder if some double sided tape would suffice to hold it in place until it needed to be replaced? I doubt it, and IMHO, it's not necessary. When you plug the HDD into the connector, the tail of the HDD will lift up, just like on the picture. And t

Re: [j-nsp] Replacement HD/SSD for RE-850

Am 23.07.2015 um 15:26 schrieb Colin Baker: Recently had a hard drive fail on one of our RE-850 in an M7i. Does anyone have a known working (preferably SSD) replacement they can recommend? I seem to remember something on juniper.cluepon.net that certain models don't fit on the RE board all that

[j-nsp] Would like to trade M10i for M7i

gards Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Prepending customer AS results in AS23456

them. Only one looking glass showed me my-upsteam my-asn 23456, so I'm thinking maybe everything is fine and only this particular LG cannot display 4-byte ASN and uses 23456 instead? Sorry for the noise in that case. :) Am 21.05.2014 23:20, schrieb Markus: Hi list! I'm trying to

[j-nsp] Prepending customer AS results in AS23456

upstream routers software does not yet support 4-byte ASNs? I'm also doing the same to various peers and there it works fine. I can see the path "my-asn 22" in my peers looking glasses. Thanks! Markus ___ juniper-nsp m

[j-nsp] M7i operational temperature

ngine OK 44 degrees C / 111 degrees F Routing Engine CPU OK 42 degrees C / 107 degrees F Any experiences? Thanks! Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] IPv6 duplicate: Can't assign requested address

cate Addresses, Flags: Is-Preferred Duplicate Destination: fe80::/64, Local: fe80::8618:8801:5c06:1052 INET6 Address Flags: Duplicate Thanks! Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] mirror-flash-on-disk

CF and HDD automatically synchronous (copies it from CF to HDD), is that right? If I never do "request system snapshot" and do not enable mirror-flash-on-disk and one day my CF dies and the router reboots from HDD, it will probably have a very old config, correct?

[j-nsp] Redundancy with MX

via routing protocol) b) 1xMX240/480 with redundant SCB and RE Pro: Easier to use redundant uplinks (LACP) Con: Config error as well as chassis failure brings the whole PoP down Any further arguments? Best practices? What did you deploy? Best regards, Markus

Re: [j-nsp] Strange ARP issue on M7i

I don't seem to have anything configured related to that: ad...@ffm01.rt> show configuration | grep arp < empty > Thank you! Markus Am 14.08.2012 21:37, schrieb JP Senior: Hi, Markus. I have experienced issues in previous deployments that have involved built-in ARP policers. Hit

[j-nsp] Strange ARP issue on M7i

an alternative dialup provider everything is fine. Other sites on other boxes in the same LAN work just fine though via the first provider. The problem comes and goes now. Really puzzled! Anyway, can't stop thinking about the ARP thing so I t

[j-nsp] PE-1GE-SX vs. PE-1GE-SX-B

Dear list, maybe I'm not good at searching today, but I can't find any info at juniper.net and via Google on the difference between PE-1GE-SX and PE-1GE-SX-B. Can anyone shed some light on this? :) Thanks! Markus ___ juniper-nsp ma

Re: [j-nsp] What does AS path attribute problem mean?

For what it's worth, I heard from someone that it also affected Foundry and Microtik, and in one case, Cisco. All routers were running older software releases and in the case of Microtik, upgrading to the latest software fixed it. Am 10.09.2011 06:56, schrieb Chris Adams: Once upon a time, M

[j-nsp] What does AS path attribute problem mean?

ppens. What can I do about this and what could be the cause? Help! :) Thanks! Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Paid: need small M7i config snippet (policer)

that just works. I'm offering money (PayPal, CC, wire) for the person or company who is willing to do that. You can get in touch with me off-list. Thank you! Markus PS: Item Version Part number Serial number Description Chassis36947

[j-nsp] GRE tunnel with dynamic IP address

hieve is to route a subnet of static IP addresses to the endpoint of the tunnel behind a dynamic IP address. Can anyone help? Thanks, Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Re-use of PIC cards

Note that M160 PICs that were EOL when a new platform (M120..) was announced are not supported by the new platform. Example: fixed optics OC48 PIC ///Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net

Re: [j-nsp] EX Routing Throughput

s and configured route advertisement) with static routes, no warning appeared. I asked our sales, if this means that no license is required but he negated that. Regards Markus ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nethe

Re: [j-nsp] Miercom Competitive Performance Testing Results: CiscoASR9000 vs Juniper MX960

et by Cisco." Thanks, ///Markus Åberg -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Jeff Tantsura Sent: 24. syyskuuta 2009 8:46 To: juniper-nsp@puck.nether.net Subject: [j-nsp] Miercom Competitive P

[j-nsp] Installing backup default-route from upstream by BGP condition?

fault-route only when the full BGP feed session goes down? What I want to achieve is that traffic to destinations which don't exist in the global routing table won't get sent out to the upstream at all. Can anyone point me to the right direction?

[j-nsp] Replacing RE in M7i

ing why the box didn't boot up fine after we replaced the internal flash, and why /var could not be mounted. Maybe it has something to do with 7.4 installed on the flash and 8.0 on the new HDD? I'm a little lost here... Thanks, Markus

Re: [j-nsp] How to debug or trace ntp packets?

i make a tcpdump with the interface ds-6/3/0:1:1 and see on this file the NTP packets? Bye Markus Paul Goyette schrieb: > There are no traceoptions for ntp. > > However, you can use "monitor interface traffic" command > to capture packets. > > Paul Goyette > Ju

[j-nsp] How to debug or trace ntp packets?

Hello NG, i have configure NTP. [EMAIL PROTECTED] show server 194.25.1.215; source-address 62.225.19.80; [edit system ntp] How to set a traceoption or a debug to see the ntp packets? Thanks for Help Markus ___ juniper-nsp mailing list juniper-nsp