Re: [j-nsp] ifstrace log filling up with debug output

2024-04-04 Thread Timur Maryin via juniper-nsp
Hi Joerg, On 23-Mar-24 15:24, Joerg Staedele via juniper-nsp wrote: Hi, No traceoptions ... and meanwhile i've tested even with no configuration and after a zeroize it also does the same. I guess it’s a bug. I will try another version (maybe some 19.x) And I believe it will be the same

Re: [j-nsp] GRE tunnels on a QFX10002-60C

2022-08-19 Thread Timur Maryin via juniper-nsp
On 24-Jun-22 9:28, Saku Ytti via juniper-nsp wrote: Tunnel interfaces are not supported on PE/Paradise, I don't think this changed in BT/Triton either. > > However you can decapsulate/encapsulate on ingress firewall filter, e.g.: On the other hand, there is fti (flexible tunnel interface)

Re: [j-nsp] Database size on JunOS

2020-11-02 Thread Timur Maryin via juniper-nsp
--- Begin Message --- It does exist: > show version | match model: Model: qfx10002-72q > show system configuration database usage Maximum size of the database: 406.99 MB Current database size on disk: 10.50 MB Actual database usage: 10.48 MB Available database space: 396.52 MB > request

Re: [j-nsp] Database size on JunOS

2020-11-02 Thread Timur Maryin via juniper-nsp
--- Begin Message --- Hi there, Have a look https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/request-system-configuration-database-resize.html On 29/10/2020 17:05, Vincent Bernat wrote: Hey! With a configuration file around 5 MB, we get a pretty

Re: [j-nsp] Netflow config for MX204

2020-04-14 Thread Timur Maryin via juniper-nsp
--- Begin Message --- Perhaps you just needed to add (to your original config) routing-instance vrf-name under forwarding-options sampling family inet output flow-server x.x.x..x and not to overdo everything under vrf On 09-Apr-20 10:03, Liam Farr wrote: Seems I cant just drop the

Re: [j-nsp] Netflow config for MX204

2020-04-09 Thread Timur Maryin via juniper-nsp
--- Begin Message --- On 09-Apr-20 08:20, Liam Farr wrote: Hi, changed to a loopback address on one of the VRF's, ... Not sure specifically what I am doing wrong here, it seems to be collecting the flows ok, but exporting is the issue? I'd appreciate any advice or pointers thanks :)

Re: [j-nsp] Slow RE path 20 x faster then PFE path

2020-03-23 Thread Timur Maryin via juniper-nsp
--- Begin Message --- On 23-Mar-20 14:03, Robert Raszuk wrote: Hi, Would anyone have any idea why IP packets with options are forwarded via MX104 20x faster then regular IP packets ? "fast" PFE path - 24-35 ms "slow" RE path - 1-4 ms 24 ms is ages in terms of PFE. I hardly can imaginethat

Re: [j-nsp] QFX10K port shaping

2020-02-21 Thread Timur Maryin via juniper-nsp
--- Begin Message --- I found this: QFX1 Series switches do not support the shaping-rate statement. However, you can configure the transmit-rate exact option to prevent a queue from consuming more bandwidth than you want the queue to consume. here:

Re: [j-nsp] QFX10K port shaping

2020-02-21 Thread Timur Maryin via juniper-nsp
--- Begin Message --- What is exact model you have? And junos version? On 20-Feb-20 13:43, Chen Jiang wrote: Hi! Experts Sorry for disturbing, we found the "set class-of-service interfaces xxx shaping-rate" is missing in QFX platform, is there any other method could do port shaping ? Thanks

Re: [j-nsp] MX204 vs. MX240??

2019-11-19 Thread Timur Maryin via juniper-nsp
--- Begin Message --- On 14-Nov-19 14:19, adamv0...@netconsultings.com wrote: There are several places where you can run your keepalieve a) RPD b) RE PPMd c) LC CPU PPMd d) NPU (dispatch block in the LU/XL) And it depends on config where you run it. ... and on hardware and on defaults of

Re: [j-nsp] prsearch missing in inaction

2019-05-09 Thread Timur Maryin via juniper-nsp
https://kb.juniper.net/KB33515 If i recall correctly what i heard about it. There is some third party(or smth) search engine which is(was) used and it had issues. And there is no way to upgrade/fix that engine as it out of support/development. So i has to be replaced or re-written from

Re: [j-nsp] Old JunOS upgrade path

2019-03-12 Thread Timur Maryin via juniper-nsp
This is not applicable to MX80 (as platform was mentioned by topic starter). On 12-Mar-19 15:38, adamv0...@netconsultings.com wrote: Upgrading from 12.3 to 15.1 upgrades the FreeBSD version from 6.1 to 10.0. Upgrading from 12.3xxx to 15.1xxx reformats the file system. Only specific

Re: [j-nsp] Junos Arp Expiration Timer Behavior & Active Flows

2019-01-16 Thread Timur Maryin via juniper-nsp
On 11-Jan-19 17:50, Clarke Morledge wrote: A couple of questions: (a) Is this default behavior across all Junos platforms, including MX, SRX, and EX? I would expect so. What is also possible in this case is to configure huge arp timeout: set system arp interfaces xe-1/1/0 aging-timer ?

Re: [j-nsp] MX204 Tunnel Services

2019-01-02 Thread Timur Maryin via juniper-nsp
Perhaps encapsulation vlan instead may help. On 27-Dec-18 23:40, Fraser McGlinn wrote: Further to this, and to clarify I do already have tunnel-services enabled and after configuring I get output packets on each unit, but no input packets. It seems like the PFE is just eating the packets.

Re: [j-nsp] interface-range inheritance change in 14.1X53 and 15.1

2018-12-21 Thread Timur Maryin via juniper-nsp
My bet is that is an example of poorly written external description. Besides "Resolved-In" has only one version. On 21-Dec-18 00:22, Anderson, Charles R wrote: Can anyone shed some light on WHY this change was made? I much prefer the old behavior. From PR1281947: "The behavior of the

Re: [j-nsp] MX204-IR RIB->FIB sync?

2018-12-13 Thread Timur Maryin via juniper-nsp
Hi Jason, The loss upon restoration could easily be due to microloop. Which is caused by different convergence speed of neighboring. When you leave only one type of routers they converge at the same speed so no microloops. On 13-Dec-18 02:47, Jason Lixfeld wrote: Hi all, I’ve been

Re: [j-nsp] command authorization and tacacs

2018-12-13 Thread Timur Maryin via juniper-nsp
Hi Pierfrancesco, Timur> 2. commit script which checks presence of certain parts of config. I'll need to refresh myself on this and see if I can use this technique. There is an example on github which can be used as starting point:

Re: [j-nsp] command authorization and tacacs

2018-12-12 Thread Timur Maryin via juniper-nsp
Hello! On 11-Dec-18 15:33, Pierfrancesco Caci wrote: I have not found a way to prevent a user from accidentally delete entire bgp config, but still allowing him to operate on single neighbors. Or other similar situation involving top level configuration vs details inside each block. There

Re: [j-nsp] negation operator in SLAX

2018-07-03 Thread Timur Maryin via juniper-nsp
Hi Phil, On 18-Jun-18 20:40, Phil Shafer wrote: "!" and "not" are identical. The "!" is just syntactic sugar that turns "! x " into "not(x)", as you can see in the code: Was it always like this? ___ juniper-nsp mailing list

Re: [j-nsp] negation operator in SLAX

2018-06-15 Thread Timur Maryin via juniper-nsp
Hi Martin, There is not() : https://www.juniper.net/documentation/en_US/junos/topics/reference/scripting/junos-script-automation-function-xslt-not.html On 14-Jun-18 23:39, Martin T wrote: Hi! I have quite often used "!" negation operator familiar from other languages. For example: /* If

Re: [j-nsp] Strange Behavior after ISSU from 13.3R8 to 17.4R1.16

2018-05-29 Thread Timur Maryin via juniper-nsp
Hi Jeffrey, I'm under impression that (quote from https://www.juniper.net/documentation/en_US/junos/topics/topic-map/junos-kernel-freebsd-upgraded.html ) "ISSU is not supported from an older version of FreeBSD to an upgraded FreeBSD" On 28-May-18 04:01, Jeffrey Nikoletich wrote: Hello

Re: [j-nsp] Syslog getting spammed by DDOS_PROTOCOL_VIOLATION_SET

2017-11-21 Thread Timur Maryin via juniper-nsp
Hi Karl, DDOS subsystem applies only to the traffic destined to the host (router itself) and not transit traffic. When you announce that /18 have you got all destinations of that /18 reachable by the router? Have you got default route ? The graceful way to handle those messages is to

Re: [j-nsp] Junos 15.1 and DPC

2017-08-11 Thread Timur Maryin via juniper-nsp
Hi Johan, Yes, it works fine. On 10-Aug-17 09:59, john doe wrote: Hi Will 15.1 work well on MX boxes with old DPC cards? Anyone running 15.1 on MX with DPC? Johan ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] flowspec in logical-systems

2017-03-23 Thread Timur Maryin via juniper-nsp
Hi Michael, I believe it's not supported. On 22-Mar-17 20:07, Michail Litvak wrote: Hi all, Did anybody tried to use flowspec in the logical-system ? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] juniper router reccomendations

2016-08-08 Thread Timur Maryin via juniper-nsp
Hi Adam, On 01-Aug-16 10:02, Adam Vitkovsky wrote: Now I have realized that there might be a problem which BGP PIC can't really solve. And that's when the primary edge link/PE comes back online advertises it's prefixes to the rest of the AS and ingress PEs will actually install and start