Re: [j-nsp] Buffer Size

* Mark Tinka > On 20/Apr/20 22:58, Mohammad Khalil wrote: > >> Hi all >> Am trying to conduct a comparison for campus refresh , my end customer is >> deeply interested in deep details. >> He is interested to know the buffer size of Juniper switches (EX series) >> and I could not find such a piece

Re: [j-nsp] Internet monitoring in case of general issues

* james list > The question: once you notice issues on internet and your upstreams are > fine, what instrument or service or commands or web site do you use to try > to find out where is the problem and who is experiencing the problem (ie a > tier1 carrier)? We find that being an NLNOG RING (http

[j-nsp] aes-gcm SSH ciphers broken in JunOS >=12.3R12-S13.1

Hello, After upgrading a few old EX switches from 12.3R12-S12 to 12.3R12-S14 I found that I could no longer log in using SSH. When the login attempt is made, the switch logs: sshd[1521]: fatal: ssh_dispatch_run_fatal: Connection to : unexpected internal error [preauth] The reason appears to b

Re: [j-nsp] GRE on MX960

* sth...@nethelp.no > "Ethernet and tunnel interfaces cannot coexist on the same Packet > Forwarding Engine of a 10-Gigabit Ethernet 4-port DPC." > > I *thought* I remembered that you would disable just one of the 10G > ports. You remember correctly. There are four PFEs on that DPC, one per port

Re: [j-nsp] Configuration database stuck with mgd crashing

* Aaron Gould > Maybe "commit full" Thank you for the suggestion! I was however unable to get into configure mode in the first place, so I couldn't issue any kind of "commit". Luis's suggestion of «mgd -I» from a root shell did the trick, though. Tore __

[j-nsp] Configuration database stuck with mgd crashing

One of my routers (a MX240 running 16.1R6-S2.3) have gotten stuck in a state where it believes the configuration database has been modified, and if I try to configure it anyway, mgd crashes and is respawned: tore@router> configure exclusive error: configuration database modified tore@router> con

Re: [j-nsp] Force a reboot from the serial console?

* Karl Gerhard > for new deployments you could check out the Digi CM 48. > > These device do not need rollover cables, you can use your standard > ethernet cables to connect the router/switch console ports to the Digi > CM. They also come with dual power supplies and you can find them used > for

Re: [j-nsp] Force a reboot from the serial console?

* Saku Ytti > AFAIK (please correct me if I'm wrong). Only Cisco is doing this, and > even they struggle internally with it, because it does add bit of > cost, thermal and front-plate density. FWIW it's quite possible to have the BMC and the NOS share the same physical Ethernet port, this is comm

Re: [j-nsp] Force a reboot from the serial console?

* Saku Ytti > I hope there are plans to introduce lights out port in future. Indeed. I can't imagine adding a standard BMC with serial over LAN and chassis control features can add many much to the overall manufacturing cost, so it is beyond me why it's not standard on networking equipment as wel

[j-nsp] RE-S-1300 - memory upgrade possible?

I've got a few MX-es with the RE-S-1300 in my network. While out of support, they work just fine, except for the fact that the 2 GB of memory is getting rather tight. Hoping to squeeze some a little bit of extra life out of those boxes, I was wondering if anyone on the list tried to replace whatev

Re: [j-nsp] Generating routes from inactive/hidden contributors

Hi, * adamv0...@netconsultings.com > Interesting, > There appears to be no cmd to override the default, "contributing route has > to be active", requirement. (the "from state inactive" attachment point is > only the export policy). > I'm just thinking whether it's not working simply because the

[j-nsp] Generating routes from inactive/hidden contributors

Hi, I'm looking to generate a route, and do so even if the contributing routes are inactive or hidden. The use case is to receive a full feed from an upstream provider and generate a default route pointing to that provider IFF I've received at least one route from them that proves that they are i

Re: [j-nsp] juniper router reccomendations

* Mike > Im in a colo in one location (A), and have a private 1G ethernet > to another geographically distant colo (B). Each colo has a different > ip transit provider and I am advertising my own prefixes. At colo A I > receive a subset of Internet routes internal to that provider, while >

Re: [j-nsp] juniper router reccomendations

* Mike > I am a network operator and have been firmly in the cisco camp > for many years but the price for 10g ports simply seems too > unreasonably high across the whole product line and I'm wondering if > Juniper might be a better solution for me. > > In fact, have a need for a new e

Re: [j-nsp] How to catch invalid value/option for a command in SLAX script?

* Phil Shafer > But the newlines are my fault. The initial XML output for JUNOS > generated newlines after each tag open/close/data call to ease > debugging for developers, and also because I thought it would make > the XML->text renderer in the CLI easier. By the time I realized > the latter w

Re: [j-nsp] protect ssh and telnet

* Saku Ytti > If you want to do this right today, the correct way is to extract > public key in secure manner (What is secure? OOB not really, but maybe > human on-site) and store them in your jump box for user-wide > consumption, and raise alarm if host keys have changed. So who ever is > physica

Re: [j-nsp] Unwanted newline characters in Netconf XML

Hi Dave, * Dave Bell > It certainly looks like a bug to me. I've tested it in our lab on an > MX running 12.3R8, and get the same problem as you. > > Interestingly this conflicts with their documentation: > "The NETCONF server returns the information in XML-tagged format, > which is identical t

[j-nsp] Unwanted newline characters in Netconf XML

I'm assuming this must be a JUNOS bug? $ echo '' | ssh -s lab-ex netconf [...] http://xml.juniper.net/junos/12.3R10/junos";> http://xml.juniper.net/junos/12.3R10/junos-interface"; junos:style="normal"> ge-0/0/0 [...] The newline characters immediately following and preceeding becomes part o

Re: [j-nsp] Counter on subinterface on EX

* Raphael Mazelier > Have you notive/hit some performance problems with this config ? No. Tore ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Counter on subinterface on EX

* Raphael Mazelier > I've just realized there is another pretting annoying problem with EX > series. It seems that is was not possible to count passing in > subinterface (or vlan interface) on EX. It's quite annoying indeed. > I wonder if someone ever faced this problem, and if there is some

Re: [j-nsp] Stable JunOS for MX80

* thiyagarajan b > Request to suggest stable JunOS for MX 80 with 2GB DRAM and Flash. See http://kb.juniper.net/InfoCenter/index?page=content&id=KB21476 Tore ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/list

Re: [j-nsp] info VC QFX

* james list > on QFX VC is there a way to configure VME interface to respond on each > module of the VC instead to be redirected on the master RE ? > > If yes a little configuration example is appreciated. I haven't tried QFX, but on EX you can use apply-groups to match individual members in t

Re: [j-nsp] EX4500 SFP+ laser lit when interface is admin down and vice versa

* Jed Laundry > I haven't seen this particular issue, and I'm not sure about the > EX4500, but on a EX4550 you can: > > > start shell user root > > % lcdd 0 chassism > > chassism<0>#xcvr enable ge-0/0/30 > devNum:0, portNum:49 > > HERE BE DRAGONS: any errors/warnings in chassism (i.e., finger

Re: [j-nsp] Recommended Junos version for EX-4500 virtual chassis

* Mark Tinka > On 19/Mar/15 15:17, Scott Granados wrote: > > Ok, I’m running 13.2X51-D26.2 now and can’t find out much about > > this code other than that’s what was installed when they shipped > > the units. > > > > I’m thinking going to the recommended version makes the most > > sense. Thank yo

Re: [j-nsp] Recommended Junos version for EX-4500 virtual chassis

* Scott Granados > Hi, I’m wondering what people recommend for a software release for > the EX 4500 switch in a virtual chassis configuration. I noted that > there is 13.2 code installed in my cluster now but the recommended > version on the web site is 12.3R8 which obviously doesn’t match. [..]

Re: [j-nsp] Proxmox with Multicast & Juniper EX

* Tore Anderson > * Jeff Meyers > > > I am mostly confused why the packets passing the core makes a > > difference at all. For my understanding, igmp-snooping inspects the > > communication and passes multicast traffic to exactly those who shall > > receive it.

Re: [j-nsp] Proxmox with Multicast & Juniper EX

* Jeff Meyers > I am mostly confused why the packets passing the core makes a > difference at all. For my understanding, igmp-snooping inspects the > communication and passes multicast traffic to exactly those who shall > receive it. Why isn't this working? I read that this requires an icmp > quer

Re: [j-nsp] Recommended Junos version for EX-4500 virtual chassis

* Scott Granados > Hi, I’m wondering what people recommend for a software release for > the EX 4500 switch in a virtual chassis configuration. I noted that > there is 13.2 code installed in my cluster now but the recommended > version on the web site is 12.3R8 which obviously doesn’t match. > Wh

Re: [j-nsp] how to see users

* "Aaron" > I have a user "a" I've config'd. I see that I can view it within the > config. > > Also, I see that I can see users actively logged in. > > But how do I show users that are configured without viewing it in the > config file? file show /etc/passwd | match "/cli$" Tore ___

[j-nsp] EX4500 SFP+ laser lit when interface is admin down and vice versa

Hi, I've got an EX4500 running 12.3R8.7 that has a port that's misbehaving in a rather odd way: If I disable the interface in the config and commit, the laser is turned on (normal Tx levels in show interfaces diagnostics optics). If I re-enable the interface and commit, the laser is switched off (

[j-nsp] fxp0.0 interface match in firewall filter doesn't work in JUNOS 12.3R5.7

This is a heads-up to anyone planning to upgrade to 12.3R5.7, especially if you don't have easy access to the serial console, but only a firewall term such as: term allow-oob-management { from { interface fxp0.0; } then accept; } ...in your lo0.0 input filter (which presumably

Re: [j-nsp] S-NAT-IN-MX5-MX10

* Mark Tinka > Not to my knowledge, no (well, not in 2014 anyway). N:1 NAT > is what makes sense. FWIW, I've been working on a 1:1 (IPv4:IPv6) NAT solution that I believe make a lot of sense in 2014 and beyond: http://tools.ietf.org/search/draft-anderson-siit-dc-00 http://www.ipspace.net/IPv6-O

Re: [j-nsp] Tunnel failing at "No propsal chosen" but works when target is another device

* Mattias Gyllenvarg > The issue is a IPsec tunnel that will not establish with one device as the > HUB but works with a different device. > > Spoke is SRX210 cluster > > Hub is SRX240 cluster > > Replacement Hub is a stand-alone SRX210 > > Junos is 12.1X44-D20.3 across the board. I had a sim

Re: [j-nsp] Link local address errors when committing VRRP for inet6

* Morgan McLean > Is anybody able to explain the purpose of the link local address? It's fundamental to IPv6. Replaces ARP in IPv4, amongst other things. > Tore, interestingwhat device? Wonder why they changed the requirement. This was on a MX, but I'm pretty sure the requirement was droppe

Re: [j-nsp] Link local address errors when committing VRRP for inet6

* Morgan McLean > So from doing some googling, I see link local addresses being required for > any sort of multicast usage under ipv6? > > What do I need to do here? I removed the eui-64, that was in there while I > was trying to get it to commit. IIRC you need another "address fe80::x/64" on tha

Re: [j-nsp] QFX vs EX4550 as collapsed core

* Andy Litzinger > Hi, we're deploying to a new environment where there will be about > 500 virtual servers hosted completely on Cisco UCS. The Core would > mostly be hosting uplinks to the UCS Fabric Interconnects (End Host > Mode), inter-vlan routing and links to service appliances (FW/LB) and

Re: [j-nsp] SNMP on logical-system fxp0

* Saku Ytti >> That essentially what we are talking about. Connect fxp0 to a >> SEPARATE switch that is used for only out of band traffic. You then >> use this network to copy images, etc. What am I missing here? > > What are you winning by not doing this on-band in HW interface? Cost. The fx

Re: [j-nsp] EX series junos 12.x version

although most of them are coded specifically for Juniper. We also use some Cisco-coded DAC cables without any problems. I have no idea on how missing licences are handled, as I have all the licences I need. -- Tore Anderson ___ juniper-nsp mailing list j

Re: [j-nsp] EX series junos 12.x version

* Marco Nesler > I need to deploy a small VC with EX4200 switches. For the junos version, > usually i just stick with the JTAC recommended one. In this case NSSU and > non stop bridging are a requirement, so i need to put a 12.something > version on the vc. Any suggestion on a good 12.x release, s

Re: [j-nsp] Routing loop with OSPFv3 NSSA and external routes

S path: Recorded In any case I've opened a case on the issue now, hopefully JTAC can understand what's going on here. Best regards, -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Routing loop with OSPFv3 NSSA and external routes

Fwd addr: 192.0.2.40, Tag: 0.0.0.0 Aging timer 00:26:18 Installed 00:33:38 ago, expires in 00:26:19, sent 00:33:36 ago Last changed 04:13:02 ago, Change count: 3 I guess I'll have to open a ticket... Best regards, -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Routing loop with OSPFv3 NSSA and external routes

dea as to whether this is a bug or if I'm doing something wrong here? BR, -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] CWDM optics support on EX4500

DAC cables for use between a EX4500 and Cisco Nexus 5K. No problems in the Cisco end, but they showed up as GE interface in on the EX. The fix was to get them reprogrammed as Cisco cables, ironically enough. -- Tore Anderson ___ juniper-nsp mailing list

Re: [j-nsp] CWDM optics support on EX4500

0GB-CWDM-47-JN 1470 nm 1 GIGE 1000LH SMOEMSFP-L50D-C51-X1511 nm -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Junos 12.3 Release Date

running OSPF on five or more interfaces today, you simply cannot upgrade to 12.3? Best regards, -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Old JUNOS images removed from download page

x27;s going on here? I'm really starting to worry that there is some critical undisclosed vulnerability in the removed versions... Also 12.2R3.5 for EX4500 just gives me a 404 error. -- Tore Anderson ___ juniper-nsp mailing list juniper-nsp@puck.nether

Re: [j-nsp] DHCP interface as next hop

as on how to address that? I have no idea if this can be done or will work, but here's a suggestion at least: Configure a static link network (e.g., 192.0.2.10/31) on ge-0/0/0.0 in parallel with the DHCP client. Add a static ARP entry for 192.0.2.11 pointing to the CX111's MAC address. U

Re: [j-nsp] Preventing direct routes from forming OSPF summaries

dea that a single interface could participate in several areas. This solution works very well - thank you! Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https:

[j-nsp] Preventing direct routes from forming OSPF summaries

nside the area-range exists. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 Virtual chassis ??

experiences though.) BTW: Make sure to enable no-split-detection in your VC, or your two EX4200s will be mutually dependent and you'll have no HA. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com ___ juniper-nsp

[j-nsp] Importing interface routes into routing instances

-rib acme-0.inet.0" from under [edit routing-options rib-groups interface-rib]. Does anyone understand why? Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com ___ juniper-nsp mailing list juniper-nsp@puck.nether.

Re: [j-nsp] How to query the results tree from a commit script?

what I want with a script, I think I will need to generate the configuration off the device instead and push it using NETCONF or something like that. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] How to query the results tree from a commit script?

change to also add filter-based forwarding for the src/dst network into the right st0.x interface, plus generating vpn entries for under security ipsec with matching proxy identities and bind-interface, so that I can make the SRX establish multi-phase2 IPSEC VPNs to e.g. Cisco ASA without requiring a

Re: [j-nsp] Connection attempt from unconfigured session

nput filter (followed by a default deny of course), in my case: tore@cr2-osl2# show firewall family inet6 filter lo0-input-v6 term allow-bgp from { source-prefix-list { bgp-configured-peers; } next-header tcp; port bgp; } then accept; -- Tore Anderson Redpill Linpro

Re: [j-nsp] EX4500 - 3rd party DAC/Twinax cable support - link-up at 1g instead of 10g

t;: 1110GBASE CU 3M n/a CISCO-TYCO 2053783-2 n/a This is a EX4500 VC running 11.1R3.5, the cables are plugged into the built-in ports. Everything runs great now. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ _

Re: [j-nsp] anyone running VC with 2 * EX4500?

for fault tolerance reasons (that's not specific to the EX 4500 though). -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Preventing NSSA LSAs from leaking into the backbone when part of a summary

ake it out. But that's not really a problem in my case. Thanks to all who replied! Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Preventing NSSA LSAs from leaking into the backbone when part of a summary

0 for the same prefix (one type-3 and one type-5). So I'm wondering if it's possible to configure the ABR so that it doesn't generate any type-5 LSAs and flood them into area 0 for any routes that are already covered by a type-3 LSA? Best regards, -- Tore Anderson Redpill Linpr

Re: [j-nsp] Understanding versioning of service and regular releases

s either. So it looks good (or at least not worse than 11.1R2) for the EX4500-VC. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.n

[j-nsp] Understanding versioning of service and regular releases

11.1R2.3 4) 11.1S2 (i.e. 11.1R2.3 + critical fixes) BR, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ex4200 egress filter

issue is fixed in 11.1R2 yet? Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ex4200 egress filter

chard, Could you be a bit more specific about this issue that remains outstanding in 11.1S1? Is there a PSN for it? I have a pair of EX4500s in my lab for setup currently, and any older release isn't an option due to the lack of IPv6 and VC support. Best regards, -- Tore Anderson Redpill Linp

Re: [j-nsp] VC (2x EX4200) JunOS Upgrade without downtime ?

code if the new one doesn't work properly - just reboot FPC1. Good luck, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Uplink failure detection in EX series

happening (or, if it was found on the same switch, it wouldn't help at all). And STP just terrifies me - I try to rely on it as little as possible. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 __

[j-nsp] Uplink failure detection in EX series

since the downstream access ports stayed up, the servers didn't fail over to the other switch in the rack and therefore lost connectivity. So much for redundancy... :-/ Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel:

Re: [j-nsp] 2x EX4200 Virtual Chassis Layer2/3 - Which JunOS Version ?

t regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX unsupported filter policer and actions on loopback lo0

le, the EX3200-24T lists at US$3000. The price of the licence required to run IPv6 on that box? US$4000. Their strategy is utterly incomprehensible to me; it's as if they simply don't want IPv6-using customers. -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel:

Re: [j-nsp] Strange behavior of BGP policy

d I think it'll behave the way you want, provided that the «Deny-Rest» statement does what its name suggests. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 cluster duplicating traffic or broken mirror?

rked well, but when I removed the filter from the definition of a VLAN I no longer wanted to mirror, for some reason the traffic to that particular VLAN was still being mirrored and I couldn't for the life of me figure out how to make it stop. Never got around to submitting a ticket for it, thoug

Re: [j-nsp] SRX for access/core routing/MPLS duties?

mply not true. So unless you can hold off your purchase until you can support the support is definitively there in the base licence, be very careful. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___

Re: [j-nsp] Configuring an untagged native VLAN on an EX in a neat way

* Kari Asheim > You can remove the members from the port and instead use apply-groups > to add this to all vlans something like this: Thanks Kari and Cristopher! :-) Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54

[j-nsp] Configuring an untagged native VLAN on an EX in a neat way

that way if at all possible. Any suggestions on how to do it better would be greatly appreciated! Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.n

Re: [j-nsp] EX 8200 deployment

ard vlan-tagged family inet sub-interfaces. That works well enough but it's not as tidy as I would have preferred. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list j

Re: [j-nsp] EX-4200 Commit Problem

the EX. Check that /var/db/config exists and is a directory, and create it if not. When this happened to me I just did a full reinstall from scratch, to make sure there weren't any other latent file system problems that would cause trouble later. Better safe than sorry. Best regards, -

Re: [j-nsp] J2320 as BGP router

n't see any 2 GB alternative either. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] J2320 as BGP router

I'm not sure what exactly would make a BGP setup advanced enough to require this license, though. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list ju

Re: [j-nsp] Virtual chassis

mber $FPC», at least. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper EX-2500

k into the Cisco Nexus 5000 series switches. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX-Series JUNOS Version

web site (the closest I've seen is the article that states which versions are recommended for EX-, J-, and SRX-series). Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-n

Re: [j-nsp] EX4200-24f lo0 filter

re I've got it configured on my switches and it works just fine (running 9.3S7.2 and 9.5R2.7). Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.

[j-nsp] JUNOS vulnerability with malformed TCP packets

Hi list, I think most of you will find this interesting: http://www.theregister.co.uk/2010/01/07/juniper_critical_router_bug/ http://praetorianprefect.com/archives/2010/01/junos-juniper-flaw-exposes-core-routers-to-kernal-crash/ Best regards, -- Tore Anderson Redpill Linpro AS - http

Re: [j-nsp] Tunnel services on the DPCE-R-20GE-2XGE

sabling the physical port). Which is a shame, since that's what I would have wanted the most... Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Tunnel services on the DPCE-R-20GE-2XGE

before; you've actually oversubscribed the PFE by 11:10? That can't be done on the 10 GbE PFE, enabling tunnel services deactivates the physical port completely. :-( Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___

[j-nsp] Tunnel services on the DPCE-R-20GE-2XGE

than I'll ever need. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] VRRP and IPv6 router advertisements

y the host as the next-hop anyway, so that address seems quite pointless to me. 2) Use of EUI-64 is disallowed when VRRP is configured. Why is that? Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 __

Re: [j-nsp] EX Routing Throughput

uld be aware of is that you will need to purchase a separate license to run OSPFv3 (even though OSPFv2 is included in the base image). Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ Tel: +47 21 54 41 27 ___ juniper-nsp m

Re: [j-nsp] JunOS 9.4R1.8 - Memory Leak?

#x27;m feeling optimistic. You'll probably want to try disabling the process yourself. Let me know how it goes! Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] JunOS 9.4R1.8 - Memory Leak?

96.19% idle They had almost identical uptimes prior to the crash, and the last boot was due to the upgrade to 9.4. I just opened a case with my local support provider, haven't heard back from them yet. I'll keep you posted if I learn more, and thanks in advance for doing the sam

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

* Chris Adams > Never used Cisco I guess? I have. As Steinar haug has already pointed out, IOS supports keeping ifIndexes static. Fortunately someone had the good sense to enable that feature, so they've never caused me any problems. -- Tore Anderson Redpill Linpro AS - http://www

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

to implement in an upcoming JUNOS release. Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

appreciate you taking the time to send me the tip, though. Thank you! Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

* Patrik Olsson > Did you see this in your MX240s aswell? Yes. I'll repeat myself: > An upgrade of two of my MX 240ies today, going from 9.3R1.7 to > 9.4R1.8, resulted in all of my graphs becoming hosed. Regards, -- Tore Anderson Redpill Linpro AS - http://www.redp

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

nswer Malte got from JTAC is unacceptable coming from a high-end vendor like Juniper. From a cheap no-name vendor it would be understandable, but I pay a premium for my Juniper gear and therefore I expect better. Regards, -- Tore Anderson Redpill Linpro AS - http

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

x 100 or 1000 or whatever, then. That wasn't too hard now was it? Juniper: to simpy say that this is just «expected behaviour» is COMPLETELY UNACCEPTABLE, it's a DEFECT, and it NEEDS to be FIXED. *fumes* -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

d in all of my graphs becoming hosed. A major pain in the arse! Grrr... -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] network engineering

t seem a little like putting out a match > with a firehose. You are right, it is no big deal. Still, it seems wrong to me, and if it was an easy way to fix it I'd do it. It was very easy to do in Linux back when I used Quagga for eBGP, but I realise now that on JUNOS it's simply n

Re: [j-nsp] network engineering

ackets will be routed out through AS123 and possibly be discarded. Regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] network engineering

via 321.0.0.1 combined with an output filter on lo0 that jumps to that routing instance if the source address matches, but I was unable to figure out exactly how to make it work when I played around with it earlier today. If someone has an example config to share that accomplishes it, I'd be very g

Re: [j-nsp] JUNOS resolves indirect next-hops using other BGP routes

import accept-igp-only; } } } Best regards, -- Tore Anderson Redpill Linpro AS - http://www.redpill-linpro.com/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] JUNOS resolves indirect next-hops using other BGP routes

n't any difference in output from the "show route resolution 195.18.241.97 extensive" command in the two cases, though, except for the node count, which I assume is expected due to fluctuations in the routing table size. Regards, -- Tore Anderson R

  1   2   >