[j-nsp] 2014-07 Security Bulletin: Junos: Denial of Service in TCP packet processing (CVE-2004-0230)

2014-07-10 Thread Richard A Steenbergen
, 12.1X45-D25, 12.1X46-D20, 12.1X47-D10, 12.2R8, 12.3R6, 13.1R4, 13.2R4, 13.3R2, 14.1R1, and all subsequent releases (i.e. all releases built after 14.1R1). -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

Re: [j-nsp] proposed changes to clear bgp neighbor

2014-02-27 Thread Richard A Steenbergen
delete from the top level of the config. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

[j-nsp] NTP Reflection

2014-01-13 Thread Richard A Steenbergen
And then start making sure UDP/123 is blocked in your lo0 firewall filters. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list

[j-nsp] ddos-protection

2013-07-11 Thread Richard A Steenbergen
overview documentation explaining what the default rate-limits are for each type, but I'm not finding it. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] ISSU timeouts on MX upgrades due to large routing tables?

2013-05-22 Thread Richard A Steenbergen
with it anyways, even turning on NSR caused nothing but problems. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] Best route reflector platform

2013-04-24 Thread Richard A Steenbergen
on the floor and forcing people into other solutions with other vendors. I really can't imagine that the benefit of selling an extra MX240 chassis, even if sold at regular price, is worth the money being lost from everyone else. -- Richard A Steenbergen r...@e-gerbil.net http://www.e

Re: [j-nsp] Best route reflector platform

2013-04-17 Thread Richard A Steenbergen
tin. I begged them to do this right when that box first came out, but there were no takers. They cripple it in software so the XRE can't be made to run rpd stand-alone and act as a route reflector. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID

[j-nsp] interface-transmit-statistics

2013-02-23 Thread Richard A Steenbergen
auto-bandwidth calculations? This issue causes one of the biggest problems with auto-bandwidth on Juniper, the lack of L2 overhead in the counters makes it possible for high-pps traffic like a DoS attack to be completely invisible to RSVP, causing uncompensated for congestion. -- Richard

[j-nsp] MQ-chip bandwidth drops

2013-01-25 Thread Richard A Steenbergen
), but there aren't any corrosponding drops on the mqchip fi counters or show chassis fabric statistics, plus none of them are MX960 + 16-port MPC so they should be getting full fabric capacity anyways. Does an MQ drop count as a fabric drop maybe? -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] Question about Routing Engine Redundancy on MX

2013-01-09 Thread Richard A Steenbergen
. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper

Re: [j-nsp] Question about Routing Engine Redundancy on MX

2013-01-09 Thread Richard A Steenbergen
in exactly the same way, so I'm going to guess that no other large network dares to run NSR either. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] DDOS and MX-240's

2013-01-08 Thread Richard A Steenbergen
is 14.88Mpps, and when you suddenly can't do more than 4Mpps per port because of a couple dozen flowspec rules, I consider this a BIG problem. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] DDOS and MX-240's

2013-01-07 Thread Richard A Steenbergen
useful tools for blocking, as Chris indicated, but nobody needs to block 800K /32s. http://mailman.nanog.org/pipermail/nanog/2011-January/030051.html Still has the same issue. Juniper has basically let Flowspec bit-rot into complete uselessness since Pedro left. -- Richard A Steenbergen r

[j-nsp] VPLS issues

2012-11-30 Thread Richard A Steenbergen
760875(top) 4766 1 xe-4/1/0.0 idx:xx xx.xx.142.62 Push 262153, Push 792036, Push 691439(top) 3473 1 xe-4/1/0.0 Any ideas, about this or about troubleshooting the forwarding plane for VPLS in general? Other than that VPLS just sucks... :) -- Richard

Re: [j-nsp] How reliable is EX multichassis? 3300 and 8200 switches

2012-10-26 Thread Richard A Steenbergen
, but alas lack of common sense knows no bounds. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] Krt queue issues

2012-10-01 Thread Richard A Steenbergen
on the device, the more you'll see that it totally stalls the installation of routes into the FIB. At this point I can't describe it as anything less than a major architectural flaw which Juniper is completely powerless to fix. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras

Re: [j-nsp] mx-class units now advertisement management interface networks in BGP

2012-09-29 Thread Richard A Steenbergen
MX80 existed. I dunno what he's complaining about, JTAC solved the issue in less than a year, so he's already ahead of the curve. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] route BGP stall bug

2012-07-18 Thread Richard A Steenbergen
in anything less than an hour, even if I turn off most of the BGP sessions so it converges faster. Either stop carrying so many routes (14x full tables = you're screwed), or go buy a Cisco. :( -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] Update on 10.4R9 stability for MX?

2012-05-21 Thread Richard A Steenbergen
On Mon, May 21, 2012 at 03:43:33PM +0200, Mark Tinka wrote: On Thursday, May 10, 2012 01:59:55 AM Richard A Steenbergen There is a serious issue with MPLS RSVP auto-bandwidth in 10.4R9, which can cause the reservation calculations to be off by quite a bit. The least broken code we've

[j-nsp] JUNOS downloads

2012-05-21 Thread Richard A Steenbergen
, for example the proceed button at the bottom of the EULA acceptance is non-functional in lynx or elinks if you're trying to download your JUNOS images via a unix shell. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF

Re: [j-nsp] Update on 10.4R9 stability for MX?

2012-05-09 Thread Richard A Steenbergen
to be off by quite a bit. The least broken code we've found so far is 10.4S9, I'm surprised they haven't done an R10 yet. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Woot. Updated MX software recommendation

2012-04-11 Thread Richard A Steenbergen
On Wed, Apr 11, 2012 at 01:19:01PM -0400, Chris Morrow wrote: counting is hard... let's go shopping?? wtf? Yeah, it's not like we need to bill customers with these routers or anything. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC

Re: [j-nsp] JNCIP-SP latest dumps

2012-03-30 Thread Richard A Steenbergen
... bullshit, I can't believe we're not able to use even a calculator these days... even highschool exams allow calculators! I don't remember any of this on any Juniper exams I've ever taken, but if you can't do simple binary-hex-decimal math you have bigger problems. :) -- Richard A Steenbergen r

Re: [j-nsp] 100Base-LX10 and MX80

2012-03-04 Thread Richard A Steenbergen
it now that I've taunted them though (I can think of at least 5 or 6 usual suspects who probably know this off the top of their head :P), so just consider the above as generic advice for when this question comes up again in the future. :) -- Richard A Steenbergen r...@e-gerbil.net http

Re: [j-nsp] Firewall filter using a prefix-list, not updating

2012-03-04 Thread Richard A Steenbergen
rebuild on the hw and makes the badness go away. And just consider yourself lucky that it doesn't cause the FPCs to crash when you reorder firewall terms like on EX8200 running 11.1R5. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] Sources for SFP+ optics

2012-02-23 Thread Richard A Steenbergen
to maintain an inventory of everything and still sell them at close to wholesale prices. There just isn't any money in it, which is why everyone who cares self-spares (often with the help of tuneables as universal donors) . -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG

Re: [j-nsp] SCB-E

2012-02-08 Thread Richard A Steenbergen
showstopper bugs in a bugfix-only code train even at 10.4R8, maybe this is a bad idea. I really don't know what else to say about this issue, other than: *SIGH* -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF

Re: [j-nsp] QFX3500 optics lock?

2012-01-09 Thread Richard A Steenbergen
. FWIW they've actually had serious problems interoperating correctly with copper SFPs from other vendors, on EX and MX. There are still unsolved issues with ports showing link state up despite nothing being plugged in. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras

Re: [j-nsp] QFX3500 optics lock?

2012-01-09 Thread Richard A Steenbergen
SFP+'s seem to not set off the NON-JNPR flag in EX without any additional hackery required, though I have no clue at all if they'd work properly in a QFX. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

Re: [j-nsp] QFX3500 optics lock?

2012-01-09 Thread Richard A Steenbergen
components. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] QFX3500 optics lock?

2012-01-09 Thread Richard A Steenbergen
as much demand for people doing the former, but they're still probably justified in blocking the duplicate serial #'s of Cisco products. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] QFX3500 optics lock?

2012-01-09 Thread Richard A Steenbergen
some logic behind it. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net

Re: [j-nsp] Junos 11.2R4.3 on MX

2011-12-24 Thread Richard A Steenbergen
then? :) It would almost be funny, if it wasn't so tragic. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] DA rejects

2011-12-18 Thread Richard A Steenbergen
. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] DA rejects

2011-12-18 Thread Richard A Steenbergen
device doesn't speak CDP), and thus discards. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] Difference MX DPC-R / DPCE-R

2011-12-14 Thread Richard A Steenbergen
Juniper to provide a more extensive list, but it's pretty safe to assume that nothing about the config you mentioned above will be impacted by DPC non-E's at all. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41

Re: [j-nsp] traffic drops to 8 Gb/s when a firewall filter is applied

2011-12-14 Thread Richard A Steenbergen
0 0 0 HOST_DROP_CNTR0 0 0 -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Resource Temporarily Unavailable - Juniper MX

2011-12-14 Thread Richard A Steenbergen
. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Summarize Global Table

2011-10-25 Thread Richard A Steenbergen
interest in providing some software assistance. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] TCAM full on EX8200?

2011-10-23 Thread Richard A Steenbergen
classify as serious at any rate). -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] TCAM full on EX8200?

2011-10-22 Thread Richard A Steenbergen
unwilling to consider cost when designing their architecture, until they go bankrupt of course. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] TCAM full on EX8200?

2011-10-15 Thread Richard A Steenbergen
ACTUALLY trying to make a cheaper LSR. :) If more people used MPLS, and if some competetive vendor could figure out how to write all the protocols for it to run on a small/cheap box, the core router market could get REALLY interesting. -- Richard A Steenbergen r...@e-gerbil.net http

Re: [j-nsp] TCAM full on EX8200?

2011-10-15 Thread Richard A Steenbergen
this opportunity to offer an extreme DIAF to whoever butchered the use of the word modular on these products!) for exactly this reason. But I've been told there are no immediate plans to actually add any support for it in software, if ever. :) -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] TCAM full on EX8200?

2011-10-15 Thread Richard A Steenbergen
it. :) PTX is also priced very similarly to MX hardware, so while it may indeed be cheaper than T, that doesn't really mean much (except for which Juniper business unit gets the revenue :P). It's not anything revolutionary, that one is still waiting to happen. -- Richard A Steenbergen r...@e

Re: [j-nsp] TCAM full on EX8200?

2011-10-13 Thread Richard A Steenbergen
. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [j-nsp] download.juniper.net mime types

2011-09-13 Thread Richard A Steenbergen
On Tue, Aug 30, 2011 at 01:52:45PM -0500, Richard A Steenbergen wrote: Dear Juniper, You guys broke your mime types again, at least for all the 10.4S6.6 service release URLs. :) Sigh... I know nobody wants to bother trying to be standards compliant or testing things on any platform other

Re: [j-nsp] Securing management access to Juniper gear

2011-09-03 Thread Richard A Steenbergen
have already destroyed the RE, and thus are completely ineffective at defending the boxes from attack. The only way to correctly block control plane traffic on EX is with ingress filters on real intefaces (or RVIs). -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Richard A Steenbergen
in the days of Junos 5, 6, 7 and 8.4, as they say, Those were the days. About as good as Cisco is where I'd put things today on the code reliability scale. Not to say that I'm happy with that state of affairs, but as Homer would say, urge to kill... fading :) -- Richard A Steenbergen r...@e

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-09-01 Thread Richard A Steenbergen
when it would boot. You could show int terse gr-#/#/# and they just wouldn't be there, no matter what the config was, etc. I'd have more reliable internet at home if I had a Linksys. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

[j-nsp] download.juniper.net mime types

2011-08-30 Thread Richard A Steenbergen
Dear Juniper, You guys broke your mime types again, at least for all the 10.4S6.6 service release URLs. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826

2011-08-30 Thread Richard A Steenbergen
to 10.4S6, or wait for 10.4R7. We hit this bug on several MX devices running junos 64 at the 49 day mark. 10.4R7 isn't due until October, so if you're running the new REs you probably want to go with S6.6 for the fix. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key

Re: [j-nsp] CWDM SFP+ 10gigE

2011-08-30 Thread Richard A Steenbergen
to the other platforms. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] Juniper MX SCBE-MX-R

2011-08-11 Thread Richard A Steenbergen
On Thu, Aug 11, 2011 at 07:33:20AM -0400, Chuck Anderson wrote: I'd rather they slip and put out well tested, stable code than to just release what they have on a specific time schedule. Don't worry, they can still find a way to fail at both. -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] Any takers on 10.4R5.5 yet ?

2011-06-27 Thread Richard A Steenbergen
. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Understanding versioning of service and regular releases

2011-06-03 Thread Richard A Steenbergen
and successfully ignores it. Again no PR on this yet. No experience with it on 3200/4200/4500/VCs yet, but based on our experience w/EX8200 so far this code should come with a warning label, may be hazardous to your health. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net

Re: [j-nsp] MX80 Opinions

2011-06-03 Thread Richard A Steenbergen
a new rpd coredump the other day, but it's a hell of a lot better than any previous 10.4 builds, and now seems to be the right time to pick up the EEoL release. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF

Re: [j-nsp] MX80 Opinions

2011-06-03 Thread Richard A Steenbergen
this already. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] SSH/Telnet session hanging

2011-06-02 Thread Richard A Steenbergen
if you aren't doing automatic PMTUD is 4096, go figure. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Richard A Steenbergen
really do well to introduce a 1U small/simple external RE which can be connected over Ethernet, to redundantize a box like the MX80, and to be a reasonably sized BGP route reflector. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Richard A Steenbergen
is to make it do SMP they may have had to disable some of the normal routing operations and only make it capable of controlling other EX chassis. I'm sure it would make a fine, if very overpriced, Olive though. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Richard A Steenbergen
RE needs to have their head examined. :) How freaking hard can it be to take an off-the-shelf 1U PC, slap a Juniper logo on the front, mark it up 20x like everything else, and sell it to us as a fully supported RR? I'm still confused how this has managed to escape their attention. -- Richard

Re: [j-nsp] MX80 Opinions

2011-06-02 Thread Richard A Steenbergen
On Thu, Jun 02, 2011 at 07:11:31PM -0700, Doug Hanks wrote: The new MX REs run 64-bit Junos. 64-bit JUNOS != SMP enabled. The only difference is the amount of ram it can address, those fancy quad-core CPUs only run on a single core. :) -- Richard A Steenbergen r...@e-gerbil.net http

Re: [j-nsp] JUNOS major releases - differences between revisions

2011-05-20 Thread Richard A Steenbergen
about, hoping for anything else is a complete fantasy. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] EX switches and TCAM utilisation

2011-05-18 Thread Richard A Steenbergen
. Util. 1.251% DB 3 Egr PACL:0/1024 (current/max) rules. Util. 0.000% DB 4 Egr PCL1: 103/8188 (current/max) rules. Util. 1.258% But you get the gist. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] SFP Status and Conditions

2011-05-11 Thread Richard A Steenbergen
it ? show interfaces diagnostics optics You may also be interested in http://juniper.cluepon.net/OS_dom, which adds a sorely needed summary view for DOM. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

Re: [j-nsp] EX Series | 10.4R3.4 Limited Received Routes

2011-05-01 Thread Richard A Steenbergen
routes are just silently dropped from the RIB, which is certainly a lot better than the Cisco method of disabling CEF and making the box unusuable until someone goes to reboot it. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] ex4200 egress filter

2011-04-28 Thread Richard A Steenbergen
hands if you try to run that code in production. Oh and BTW, 11.1 on EX will also blackhole your packets while BGP converges following bootup, for up to 15 minutes in our testing. Consider yourselves warned. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG

Re: [j-nsp] ex4200 egress filter

2011-04-28 Thread Richard A Steenbergen
On Thu, Apr 28, 2011 at 05:17:46PM +0200, Tore Anderson wrote: * Richard A Steenbergen We hit this issue while testing 11.1R1, and oh what a mighty big screwup it was on Juniper's part too (that it even tries to parse the packets that are killing it in the first place, when

Re: [j-nsp] output-list for ex4200

2011-04-27 Thread Richard A Steenbergen
config components. It's not pretty, but unfortunately this is really the only practical way to get the kind of config reuse you're looking for, not to mention the only way to actually protect the control plane on the EX. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras

Re: [j-nsp] MX480 troubles.

2011-04-13 Thread Richard A Steenbergen
for the first time in close to 2 years :P), but it's still just too buggy in the lab, so we're still doing 10.3R3 on new MX deployments/upgrades. Overall 10.3R3 has been relatively less bad than a lot of other recent code. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net

Re: [j-nsp] MX480 troubles.

2011-04-13 Thread Richard A Steenbergen
the neighbor down, can I close this case? I couldn't make this stuff up if I tried. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper

Re: [j-nsp] MX480 troubles.

2011-04-13 Thread Richard A Steenbergen
too RMA happy and throw that out as the solution instead of actually trying to find the real issue. Personally I'd be far more inclined to believe that the problem is software than it is two bad cards in a row, especially where 10.4R2 is involved. :) -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] MX80-48T Fan Speed Variation

2011-04-05 Thread Richard A Steenbergen
, but the last I heard there was at least some interest in implementing this some time in the next year or so. If you agree that this is an important feature, please ask your account teams to make this a higher prority. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG

Re: [j-nsp] Changing SSH port on EX switches, M routers

2011-04-01 Thread Richard A Steenbergen
On Fri, Apr 01, 2011 at 08:23:31PM -0400, Jesus Alvarez wrote: Hi, Is there a way to change the SSH port for managing the EX switches and M routers? We normally avoid using the standard port 22. No, I've been asking for this feature. :) -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] XFP-10G-L-OC192-SR1

2011-03-24 Thread Richard A Steenbergen
for intra-rack stuff. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net

Re: [j-nsp] 10.0 or 10.4?

2011-03-22 Thread Richard A Steenbergen
customers), which is definitely an improvement over a lot of other recent JUNOS code. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp

Re: [j-nsp] 10.0 or 10.4?

2011-03-22 Thread Richard A Steenbergen
in 10.4R2. Hope everyone learned their lesson about trusting JTAC version recommendations. :) From 10.4R3 release notes: The mib2d process leaks memory during SNMP walks. [PR/586074: This issue has been resolved.] I'm going to assume it's that. :) -- Richard A Steenbergen r...@e-gerbil.net

Re: [j-nsp] about 10.4R3 on EX

2011-03-22 Thread Richard A Steenbergen
the reboot time for EX2200, EX3200, EX4200, and EX4500 switches by 5 to 10 minutes. For EX8200 switches, the reboot time increases by 10 to 25 minutes per Routing Engine, and additional reboots are required. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID

Re: [j-nsp] about 10.4R3 on EX

2011-03-22 Thread Richard A Steenbergen
On Tue, Mar 22, 2011 at 03:46:36PM -0500, Richard A Steenbergen wrote: The process of upgrading to a resilient dual-root partitions release takes longer due to the additional step of upgrading the loader software and a longer reboot time while the disk is reformattedto four partitions

Re: [j-nsp] SFPs in MX.

2011-03-18 Thread Richard A Steenbergen
optics, they just slap a label on optics from a variety of other suppliers. Fortunately Juniper doesn't play games with vendor locking of optics, so you shouldn't have any problems. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204

Re: [j-nsp] Juniper equivalents for migration from Cisco

2011-03-17 Thread Richard A Steenbergen
if you aren't talking about a 7600 stuffed full of expensive ES/SIP cards. You've really gotta get into ASR9k before you can even start to make a comparison to MX in most categories, which is no big shock considering ASR9k was made specifically to compete against the MX. -- Richard

Re: [j-nsp] 10.0 or 10.4?

2011-03-17 Thread Richard A Steenbergen
to end up using it much on EX8200 (as I said, we're being forced into 11.1 to support specific hardware anyways). -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] 10.0 or 10.4?

2011-03-15 Thread Richard A Steenbergen
, but that certainly doesn't take much. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] Uplink failure detection in EX series

2011-03-15 Thread Richard A Steenbergen
down, all the other ports on the switch should be disabled as well. I think uplink failure detection is on the roadmap for 11.1, though I'm not sure about the EX-specificness of it. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] sflow on 2x EX4200 VC - no sflow data send

2011-03-15 Thread Richard A Steenbergen
that the dst IP is 1.2.3.4, but they don't send the field to tell you that the dst route was 1.2.3.0/24), so we're still waiting to do anything serious with it. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

Re: [j-nsp] Debug vmcore files

2011-03-01 Thread Richard A Steenbergen
literally cut months off the time it takes for a case to be resolved. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list

Re: [j-nsp] Qfabric

2011-02-26 Thread Richard A Steenbergen
would be a serious pain. Technically not true, MPCs (the modular ones, not the 16x10G card) have TCAM on them, it's just not actually used by any software yet, and it would be used for accelerated firewall lookups not routing. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e

Re: [j-nsp] Qfabric

2011-02-24 Thread Richard A Steenbergen
, it just means there are some customers out there who believe the hype. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list

Re: [j-nsp] Qfabric

2011-02-24 Thread Richard A Steenbergen
issue. I'm sure you can find people who will vehemently testify that their quad shielded 4 thick $300 Monster HDMI cable makes their tv's picture noticably better too, but that doesn't make it true. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID

Re: [j-nsp] SNMP if-mib stops responding

2011-02-15 Thread Richard A Steenbergen
. Is anyone aware of this issue and is there any workaround or is a software upgrade the only solution ? restart mib-process -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] How to access routing engine BIOS

2011-02-09 Thread Richard A Steenbergen
order in routing engine BIOS? DEL will work, you've just gotta work on your timing. It's very tricky. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] How to access routing engine BIOS

2011-02-09 Thread Richard A Steenbergen
done it hundreds of times, it DOES work, but the timing is tricky. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper

Re: [j-nsp] juniper / mx series fib usage information?

2011-02-08 Thread Richard A Steenbergen
to something 'reasonable'. Carrying a bogons bgp feed is pretty darn close to worthless really, but you're in no danger of bumping an MX's route capacity unless you're running multiple tables. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59

Re: [j-nsp] MX480 JunOS version.

2011-01-28 Thread Richard A Steenbergen
, but you'll be far better off with 10.3R2 than you will with 10.2R1 in the config above. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp

Re: [j-nsp] MX480 JunOS version.

2011-01-28 Thread Richard A Steenbergen
stable, the fun starts with the brand new MPC/Trio cards. If it ain't broke, why fix it. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper

Re: [j-nsp] MX480 JunOS version.

2011-01-28 Thread Richard A Steenbergen
counter issues on that code. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] SNMP polling issue MX

2011-01-09 Thread Richard A Steenbergen
mib-process gracefully; } var $result = jcs:invoke($restart-mib2d); } } -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] current JunOS versions for MX80, EX8200?

2011-01-07 Thread Richard A Steenbergen
that works immediately (and if you don't mind that sflow doesn't work at all on routed interfaces in pre-10.2 code). If you can wait a little while, we're currently targeting 10.3R3 as our new try to fix everything release for EX8200, and it's due out at the end of Jan. -- Richard A Steenbergen r...@e

Re: [j-nsp] RE accessories

2010-12-24 Thread Richard A Steenbergen
. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper

[j-nsp] RE accessories

2010-12-23 Thread Richard A Steenbergen
Dear Juniper, I will deploy one of these on every router until all my cases are resolved. :) http://cluepon.net/ras/juniper-accessory.wmv Love, ras -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

  1   2   3   4   5   >