Hi everyone - does anyone know of a MLPPP testing gear. I need to test the
scalability of MLPPPoE/oA but have not find anything useful (Spirent does
not support it for sure nor does the original Ixia. I'm checking if at
least N2X arm of Ixia has something).
Thanks,
Marlon
Hi,
Can someone send me a sample config file with LNS and Radius
authentication for Jnpr e320?
I have configured LNS with radius authentication, but the Radius
access-request is not being sent from the LNS (I'm sniffing the wire).
I see that the LAC sends Proxy LCP to the LNS, so everything up to
Hi,
Does anyone know how to enter the shell on E320?
I read in one of the posts on this list that in order to enable LAC and LNS
in the same box on E320, a pppLnsBylassLocalDomain' command needs to be
entered in the shell mode. But it does not say how do you enter the shell
mode.
Furthermore
Does anyone know how to configure weighting on Trio cards on the if-set
level?
For example we have a bunch of users, each on its own VLAN. Each user has a
few FCs. We want to weighted scheduling of the best-effort FC at the
interface set level (outer vlan) but based on the aggregate rates. For
Hi
Does anyone has a sample config for QoS for PPPoA/PPPoEoA subscribers.
I'm confused where things are defined and get applied.
For example:
There is a subscriber on an ATM link.
I want to setup this subscriber with QoS (at the ATM level for the PVC and
also at the L3 level - regular QoS).
The
Hi everyone,
Does anyone knows if I can enable radius accounting per host on a Juniper
platform (E320 or MX).
I want to send interim-updates for each host to the accounting server. But
if I have multiple hosts sharing the same qos template, then all the hosts
are sharing the counters for the
It looks like you're right. This Trio chipset is a 30G chipset (full duplex)
and they have 4 of them per a 120G line card.
It makes sense, they have a 50G (full duplex) chipset on the T1600 core box
and then the 30G one for the MX. Of course they are totally different
chipsets, the former being
Hi,
does anyone know what is this all about:
http://www.forbes.com/2009/10/21/cisco-hardware-software-technology-cio-network-juniper.html
They say ...will reveal a new chipset it says is capable of twice the
data-pushing capacity of the current industry record
Juniper already has a 100G
Hi - can someone point me to some more info, somewhere I can find more on
radius accounting for subscriber access.
I did enabled it on MX but I can't find any info one where sta stats are
stored and which statistics are accounted for? For example, I'd like to
collect number of packets for the
Hi - does anyone know if IPv6 is supported on DPC-X version of MX cards?
Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Hi - is there any way to look at he default filters that are applied on the
RE? Or see what's being queued on the RE for processing, say RSVP packets,
or BGP packets, or IGMP packets, something along the 'netstat' command.
We are dropping some control traffic into the RE. When we run the command
directly. I just posted to this forum w/some info on
the rate limit and how to confirm.
Regards
-Original Message-
From: juniper-nsp-boun...@puck.nether.net [mailto:
juniper-nsp-boun...@puck.nether.net] On Behalf Of Marlon Duksa
Sent: Wednesday, August 05, 2009 11:07 AM
To: Juniper
I don't think there is support for packet loss in Juniper JUNOS platforms as
part of Y.1731. Y.1731 supports it but Juniper does not implement it as far
as I know.Thanks,
Marlon
On Sat, May 30, 2009 at 7:20 AM, David Ball davidtb...@gmail.com wrote:
You may also want to check out the release
Hi - 1) does anyone know if JNPR (JUNOS) is using IPv6CP for neighbor
discovery on a PPP link or they run neighbor discovery on top of PPP link?
2) same question for HDLC over PPP - how do they do neighbor discovery
there - ND, or statically provisioned neighbors or Inverse ND?
Thanks,
Marlon
Hi - we are on JunosE on e320 and have a ES2-S1 service module that it is
paired with an LM10 module. The service module is not coming up. I figured
that maybe it is not compatible with the paired LM module.
Does anyone know if:
1) this module needs to be paired with another LM? We do not want
Fair enough. Thanks.Marlon
On Wed, Feb 25, 2009 at 2:07 PM, Leslie les...@craigslist.org wrote:
You can put multiple addresses on the same unit - like having multiple ip
addresses on unit 0, but not make multiple units with ip addresses, at least
afaik
Leslie
Marlon Duksa wrote:
Does
DHCP proxy is coming out in 9.5, it looks like...It was posted yesterday on
Juniper WEB page, in subscriber access document, by mistake they posted 9.5
Beta Draft document out but today they corrected it and they put out the
9.4 version of the document. In that 9.5 Beta Draft they talked about
Hi - does anyone understand what is 'primary dynamic profile' used for in
subscriber access on MX?
dhcp-relay dynamic-profile test1 use-primary test2
The documentation says that the primary dynamic profile test2 would be
instantiated on the fist subscriber that logs in and then the remaining subs
Hi - does anyone know if MX support DHCP proxy?Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
DHCP proxy would maintain DHCP client and server function within the box
and it would appear to the external client as a DHCP server and to an
external server DHCP server as a DHCP client.It manipulates DHCP packets
much more than DHCP relay does.
For example when a client issues a DHCP release,
at 7:25 PM, Stefan Fouant sfou...@gmail.com wrote:
On Fri, Feb 13, 2009 at 8:49 PM, Marlon Duksa mdu...@gmail.com wrote:
Hi - does anyone know if it is possible on Junos to install a policers on
logical interfaces to prevent DoS attacks so that control plane as a
whole
is identified
, Marlon Duksa mdu...@gmail.com wrote:
Thanks Stefan. But maybe there is a statement that says how many bytes to
prepend to each packet when policing.
Why not just subtract the L2 overhead and set your firewall-filter to
match on packets of a particular IP packet length using the
packet-length
Hi - does anyone know if it is possible on Junos to install a policers on
logical interfaces to prevent DoS attacks so that control plane as a whole
is identified in a filter rule?
Right now I see a default ARP policer is installed on every interface.
I want to customize this so that all traffic
Hi - anyone know if there is a way to set policing rates based on L2 packet
length, as opposed L3 as it is default on Junos?Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Configure traffic manager mode
On Fri, Feb 13, 2009 at 7:41 PM, Stefan Fouant sfou...@gmail.com wrote:
On Fri, Feb 13, 2009 at 9:39 PM, Marlon Duksa mdu...@gmail.com wrote:
Hi - anyone know if there is a way to set policing rates based on L2
packet
length, as opposed L3 as it is default on Junos
Does anyone know the syntax on FreeRadius to pass 'tagged' attribute value
from the server to the client?
For example, this is how the attribute is defined in dictionary file:
ATTRIBUTE ERX-CoS-Parameter-Type 108 string
has_tag
and this is how I'm trying to return it:
Hi - does anyone know what those tags below mean? They are used by
Subscriber Management in Junos to define variables that will receive its
values through Radius. But I've never heard of tags in Radius so I'm not
quite sure how to configure this on Radius.
dynamic-profiles access-profile {
Hi - does anyone know what this command does: flexible-vlan-services under
intf hierarchy?
I see this command in MX Solution Guide doc but can't find any other
reference to it.
Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
Ethernet port.
-Hangu
On Thu, Jan 15, 2009 at 8:21 AM, Marlon Duksa mdu...@gmail.com wrote:
Hi - does anyone know what this command does: flexible-vlan-services under
intf hierarchy?
I see this command in MX Solution Guide doc but can't find any other
reference to it.
Thanks,
Marlon
interface without having the old restriction on vlan numbering
-Original Message-
From: juniper-nsp-boun...@puck.nether.net
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Hangu Jeong
Sent: Thursday, 15 January 2009 1:23 PM
To: Marlon Duksa
Cc: Juniper-Nsp
Subject: Re: [j
Hi,Does anyone know if E320 supports LNS on ES2 10G LM with ES2-S2-S2 10GE
IOA.
The documentation is kind of contradicting. It says that this combination
supports LNS but also that in order to support LNS, an IOA should support a
'tunnel-port'. Well, tunnel port is not supported on this
Hi - Does anyone know if M320 or MX support LNS functionality and if so what
are hw requirements?
Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
PM, [EMAIL PROTECTED] wrote:
I take it that you already configured 127.0.0.1 on the loopbacks which is
required for MPLS ping to work on Junipers?
Regards
Daniel
-Original Message-
From: Marlon Duksa [EMAIL PROTECTED]
Sent: 05 December 2008 22:57
To: Juniper-Nsp juniper-nsp
Our RSVP tunnel endpoints are JNPR boxes (M320) and a transit node is Cisco
(7600). When we try to initiate MPLS ping from JNPR to JNPR through Cisco,
the mpls ping fails.
The reason is that JNPR is always setting IP TTL as 1. Since the Cisco is a
penultimate node, it strips the label, decrement
'Enhanced' means that the card is based on EZChip RevB. Non 'E' cards are
based on EZChip RevA and are retired.Marlon
On Wed, Dec 3, 2008 at 5:24 AM, Pavel Lunin [EMAIL PROTECTED] wrote:
Hi all,
Does anyone know what letter 'E' means in DPC codes? Is there any technical
difference between
Does anyone know if Junos allows to configure BFD directly on LAG
(aggregated links), so that each constituent LAG link (individual physical
link within the LAG) runs a BFD session?Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
Looks like Junos 9.3 is enforcing strict licensing for Subscriber
Management.This is what I'm getting now, which I didn't get previously:
Nov 26 16:09:32 DH_SVC_AUTHENTICATE_LICENSE: Authentication failed due to
license error. Total license failures 3
Nov 26 16:09:32 Auth reply retval 9
Nov 26
Does anyone know if a Cisco mailing list like this exists? Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Hi - we have cisco 7609 and need to map single tags into dual tags like
this:
tag 100 in 100:100 out
tag 101 in - 100:101 out
tag 102 in - 100:102 out
tag 200 in 200:200 out
tag 201 in - 200:201 out
tag 202 in - 200:202 out
So in essence we need to prepend a
I remember running mcast traffic on MX without converting a port to a
'tunneling' module. Why is Juniper saying that for multicast tunnels (mt),
this tunneling service on a port is necessary?
I also remember running VPLS without it (no-tunneling-service command). Why
do I need this tunneling mode
/30 Marlon Duksa [EMAIL PROTECTED]:
Does anyone know if a Cisco mailing list like this exists? Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
30, 2008 at 11:17 AM, Sean Clarke [EMAIL PROTECTED]wrote:
Marlon Duksa wrote:
I remember running mcast traffic on MX without converting a port to a
'tunneling' module.
Only if you are running native multicast as a receiver.
Or your DR is connected directly to the RP
Or you're running PIM-SSM
Does anyone know what is the CPU type on MX Routing Engine?Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Thanks. What about RE-S-2000 (S instead of A)Also what command did you run
to show this info?
Thanks
On Wed, Oct 29, 2008 at 4:48 PM, Richard A Steenbergen [EMAIL PROTECTED]wrote:
On Wed, Oct 29, 2008 at 04:36:04PM -0700, Marlon Duksa wrote:
Does anyone know what is the CPU type on MX
Does anyone know if this PIC supports channelization down to VC-4 - 16x VC4
(STM-1) channels.Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
Does anyone know what kind of link is used between JCS 1200 and a T series
node? The link that connects external ports on the switch module on JCS to
the T-CB on T1600 for example..
Docs refers to this link as a proprietary 1Gbps Ethernet link? I can't find
anywhere how to configure this link
Does anyone know what is this ae1.32767 interface. I only configured ae1.
Where is this additional interface came from?
Thanks,
Marlon
Logical interface ae1.1 (Index 68) (SNMP ifIndex 20211)
Flags: SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.1 0x8100.2 ] Encapsulation:
ENET2
Statistics
Does anyone know why is JNPR so quickly retiring SW releases? JUNOS 9.0 is
released not even a year ago. Why they are already talking
about retiring it?
Technical Bulletin Subject: End of Support Reminder - JUNOS 9.0 software
Thanks,
Marlon
___
Does anyone know if sw license is required for a lab use on MX in 9.2? These
are the messages that we are getting:
[EMAIL PROTECTED] show system alarms
2 alarms currently active
Alarm time Class Description
2008-10-17 17:24:30 PDT Minor License grace period for feature 31 is about
We have a local DHCP server configured on an MX in Junos 9.2. Also we have
egress CoS configured on access interfaces (towards DHCP clients). It looks
like that DHCP packets originating from the MX DHCP server are getting
dropped. Does anyone know how to classify those locally originated packets
got it:host-outbound-traffic {
forwarding-class network-control;
dscp-code-point af41;
}
On Fri, Oct 17, 2008 at 6:01 PM, Marlon Duksa [EMAIL PROTECTED] wrote:
We have a local DHCP server configured on an MX in Junos 9.2. Also we have
egress CoS configured on access interfaces (towards
AM, Sofiane Essanaa [EMAIL PROTECTED]wrote:
Hi Marlon,
Any details about the ISSU problem you're seeing.
A PR open?
Regards,
-Sofiane
-- Forwarded Message
From: Marlon Duksa [EMAIL PROTECTED]
Date: Tue, 14 Oct 2008 14:43:23 -0700
To: juniper-nsp@puck.nether.net juniper-nsp
Hi - Does anyone know what exactly are those IP Demux interfaces in Junos? The
documentation says that they are logical IP interfaces mapped into logical
L2 interfaces. What does that exactly mean?
If I have a logical interface 'Int1' unit 100 vlan 1 ip address
10.0.0.0/24and then a demux
Does anyone know why MX won't pick up the right time zone. I synced it up to
an NTP server but the time is off...I'm on 9.2.
[EMAIL PROTECTED] run show system uptime
Current time: 2008-10-13 23:21:02 UTC
System booted: 2008-10-13 19:20:42 UTC (04:00:20 ago)
Protocols started: 2008-10-13 19:21:20
Yep, that's it. I correct the wording and it works now. I wonder why Junos
doesn't complain when you commit an invalid command entry??
On Mon, Oct 13, 2008 at 5:16 PM, Kevin Oberman [EMAIL PROTECTED] wrote:
Date: Mon, 13 Oct 2008 16:23:18 -0700
From: Marlon Duksa [EMAIL PROTECTED]
Sender
Thanks.Maybe we misconfigured something. Does anyone have a simple PPPoE
config for E320?
Marlon
On Thu, Oct 2, 2008 at 6:44 AM, Alexandre Snarskii [EMAIL PROTECTED] wrote:
On Wed, Oct 01, 2008 at 08:40:38AM -0700, Marlon Duksa wrote:
B-RAS licenses are available in various sizes to enable
Hi,
I'm trying to assign filter name to JNPR subscriber on MX through Radius.
But JNPR debugging is telling me that the attribute that I'm trying to pass
as a filter name from Radius is 'unknown'.
Does anyone know what could be possibly behind this error message? JNPR
documentation is saying
Does anyone know why would Radius NAS on an MX router prepend \001\t and
\002\b to the values coming from a DHCP client while sending access request
message to the Radius server?
This is what MX is sending to the Radius server:
Attribute Value Pairs
AVP: l=23 t=User-Name(1):
Does anyone have entries for Radius dictionary file for Juniper VSA,
specifically ones on page 32 of Subscriber Access Conf guide, Junos 9.2.
I'm using FreeRadius.
Thanks,
Marlon
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
Hi, Does anyone know how to activate (apply) Radius authentication for
subscriber management on an MX node?
I have subscribers configured for dynamic access through an external DHCP
server.
For some reason, I'm getting the DHCP address without being first
authenticated on MX through Radius. I'm
-- Forwarded message --
From: Marlon Duksa [EMAIL PROTECTED]
Date: Mon, Sep 29, 2008 at 2:58 PM
Subject: Re: [j-nsp] subscriber access on MX
To: Christopher Hartley [EMAIL PROTECTED]
hmm, in this case below you have the authenticator hierarchy under dot1x.
But I can't find
{
family inet {
unnumbered-address lo0.0 preferred-source-address 1.1.1.1;
}
}
}
On Wed, Sep 17, 2008 at 4:23 AM, Nicolaj Kamensek [EMAIL PROTECTED] wrote:
Marlon Duksa schrieb:
HiDoes anyone know why DHCP discover packets are not relayed through an MX
from my
statement.
Regards,
Masood
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marlon Duksa
Sent: Wednesday, September 17, 2008 11:01 PM
To: Nicolaj Kamensek
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] dhcp-relay on MX
Still no luck
HiDoes anyone know why DHCP discover packets are not relayed through an MX
from my client to en external DHCP server that resides on the same network
as one on the interfaces on MX (I can ping this DHCP server from the MX).
I see DHCP Discover packet come in from the client side but nothing going
Hi,
I'm trying to configure OAM 802.1ag in VPLS and create one MEP (on a ce
interface).
Does anyone know why I'm unable to commit my 802.1ag configuration with this
message:
[edit protocols oam ethernet connectivity-fault-management
maintenance-domain interop maintenance-association 1]
'mep
Does anyone know what control-plane-response in vpls ping cmd mean?
VPLS ping in my scenario without that keyword works, but with it, it
doesn't.
[EMAIL PROTECTED] run ping vpls instance vpls destination-mac 00:00:07:00:00:01
source-ip 1.1.1.1
! - re-0:vpls:ge-5/0/4.0
! - re-0:vpls:ge-5/0/4.0
-
[EMAIL PROTECTED] On Behalf Of Marlon Duksa
Sent: Monday, August 04, 2008 1:16 AM
To: juniper-nsp@puck.nether.net
Subject: [j-nsp] VPLS LM Status?
Does anyone know why would I get the LM status (local site ID not minimum
designated) on my VPLS connection.
I have two sites configured
forwarder.
Regards,
Krasi
-Original Message-
From: [EMAIL PROTECTED] [mailto:juniper-nsp-
[EMAIL PROTECTED] On Behalf Of Marlon Duksa
Sent: Monday, August 04, 2008 1:16 AM
To: juniper-nsp@puck.nether.net
Subject: [j-nsp] VPLS LM Status?
Does anyone know why would I get the LM
Does anyone know why would I get the LM status (local site ID not minimum
designated) on my VPLS connection.
I have two sites configured on a single PE in the same VPLS.
One site is coming up just fine, but the other is not.
The remote side for the 'not up' connection is complaining with the RM
I have partitioned M320 into two logical routers (LR), and I run MP-BGP
between them. Those two routers are connected through an external GiGE
interface. The problem is that BGP UPDATE and OPEN message between them are
not sent over the external link but instead through some interprocess
Also, if I turn on BGP trace on Junipers, I won't see this status vector in
BGP update messages. Is it possible that it is not decoded within debuging
component in M320?
I see the rest of the NLRI, but not the status vector.
Thanks
Marlon
On Fri, Aug 1, 2008 at 7:11 AM, Marlon Duksa [EMAIL
are interconnected via external
interfaces or subinterfaces?
Do you have a summary of your config?
Regards
Alain
-Message d'origine-
De : [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED] De la part de Marlon Duksa
Envoyé : vendredi 1 août 2008 16:17
À : juniper-nsp@puck.nether.net
Objet : [j-nsp
interfaces.
Kind regards,
Truman
On 1/08/2008, at 10:16 AM, Marlon Duksa wrote:
I have partitioned M320 into two logical routers (LR), and I run MP-BGP
between them. Those two routers are connected through an external GiGE
interface. The problem is that BGP UPDATE and OPEN message
in VPLS? (Marlon Duksa)
2. vpls remote mac learning on M20 on Junos 9.1? (Marlon Duksa)
3. Re: vpls remote mac learning on M20 on Junos 9.1? (Harry Reynolds)
4. Re: vpls remote mac learning on M20 on Junos 9.1? (Marlon Duksa
A-ha. Thanks.
I needed an additional router in my setup, so I was using this older M20.
Obviously this won't work. If I segment my M320 into two logical routers,
then one of those two logical routers on M320 would replace the M20 and I
should be able to proceed with this VPLS setup, correct?
On
, in addition to use
no-tunnel-services statement.
-Simon
On Thu, Jul 31, 2008 at 9:00 AM, Marlon Duksa [EMAIL PROTECTED] wrote:
A-ha. Thanks.
I needed an additional router in my setup, so I was using this older M20.
Obviously this won't work. If I segment my M320 into two logical routers
Does anyone know why M20 would not learn remote (comming from a PE) MAC
addresses? I'm on Junos 9.1.
It is learning ce mac addresses. Also it is forwarding traffic in the ce-pe
direction, but everything coming from the pe side is not getting out on the
ce side.
I even put the sniffer between MX
in from the core.
I assume you have no tp hardware? If you did worth loosing the
no-tunnel.
Send OP of a show chassis hardware
HTHs
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marlon Duksa
Sent: Wednesday, July 30, 2008 4:52 PM
Can someone explain what is the difference between L2 Circuits and L2 VPNs
besides the obvious (which is signaling LDP vs BGP).
Junos 9.1 doc states this in the VPN conf guide, page 509.
A Layer 2 circuit is similar to a circuit cross-connect (CCC), except
that multiple Layer 2 circuits can be
PROTECTED] On Behalf Of Marlon Duksa
Sent: Wednesday, July 23, 2008 5:50 PM
To: Nicolaj Kamensek
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] min req on M20 to run 9.1
Thanks. I replaced the CF with a 4GB one and it works now.
Marlon
Please be aware that it's advised
Thanks. I replaced the CF with a 4GB one and it works now.
Marlon
On Wed, Jul 23, 2008 at 11:08 AM, Nicolaj Kamensek [EMAIL PROTECTED]
wrote:
Marlon Duksa schrieb:
Hi - I'm trying to upgrade an older M20 from Jun8.4 to 9.1 and this is the
message I get.
What boot device is in question here
that a single NH is
installed for that prefix.
Can you describe the nature of the test traffic? If its all one flow I'd
expect all to take the same NH even when LB is in effect. AFAIK, MX behavior
is no different here.
Regards
-Original Message-
From: Marlon Duksa [mailto
Hi - is there any way I can terminate a VPLS into a global routing table.
For example our customer is on a VPLS and we would like to provide him
access to the Internet through the global routing table. Simply bridge him
to the L3 interface that is in the global routing table and from there he
can
83 matches
Mail list logo
