Re: [j-nsp] EX4200 virtual chassis and PoE

2019-03-05 Thread Victor Sudakov
pplies would not probably display the kind of "show poe interface" I had posted. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 virtual chassis and PoE

2019-02-26 Thread Victor Sudakov
Doug McIntyre wrote: > On Wed, Feb 20, 2019 at 07:13:43PM +0700, Victor Sudakov wrote: > > Do I need to know anything special to configure PoE in a virtual chassis > > environment? For some reason PoE devices on ports ge-1/0/2 and ge-1/0/3 do > > not get power while the same

[j-nsp] EX4200 virtual chassis and PoE

2019-02-20 Thread Victor Sudakov
ge-1/0/2; interface ge-1/0/3; {master:0} -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-26 Thread Victor Sudakov
Alexander Marhold wrote: > Therefore if you want to put one node out of a 2 node VC you need to put the > Master down not the backup > Sounds strange but this is according to the rules stated below Interesting twist :-) -- Victor Sudakov, VAS4-RIPE, VAS47-RIP

Re: [j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-26 Thread Victor Sudakov
ancy in most setups. But > that is just me ;) I guess, in my case a completely offline VC is unacceptable. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-26 Thread Victor Sudakov
Victor Sudakov wrote: > Pavel Lunin wrote: > > > > in a virtual chassis you could add: > > > > > > > > set virtual-chassis no-split-detection > > > > > > > > This will ensure that if both VC ports go down, the master routing &g

Re: [j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-25 Thread Victor Sudakov
t split-detection. I hope this solves the issue for us, and if it does, I'm sure to make a note in my engineering journal. Thank you Catalin and Pavel for your input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-25 Thread Victor Sudakov
chassis you could add: > > set virtual-chassis no-split-detection > > This will ensure that if both VC ports go down, the master routing engine > carries on working. Are you referring to "Scenario B" in https://kb.juniper.net/InfoCent

[j-nsp] EX4200 virtual chassis problem, master going into linecard mode

2018-07-25 Thread Victor Sudakov
(sic!) mode! And I lose ssh access to it. I can undo the disaster only from the serial console. What am I doing wrong? Or if it's a bug, is there a workaround? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-n

Re: [j-nsp] router reflector clients and non-clients

2018-06-04 Thread Victor Sudakov
pushing router memory limits it > would be a bad idea. > > If you have the memory, dual RRs with different cluster-ids and > multipath are not a bad thing. > > Not like I have a fairly large network doing exactly that since 2011 > without issue. Dear Christopher, What do you m

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
esign-part-1/ > http://orhanergun.net/2015/02/bgp-route-reflector-clusters/ Thanks, will read those. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
adamv0...@netconsultings.com wrote: > > Of Victor Sudakov > > Sent: Wednesday, May 30, 2018 8:07 AM > > > > Alan Gravett wrote: > > > A RR can also be a client with hierarchical RR's... > > > > A hierarchy is irrelevant for this disc

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
r quite a while. Last time I studied Cisco BGP in December, it still was the recommended way in the books. If the new best practice is documented somewhere, I would be grateful for a link. And second, even if what I'm trying to do is old-fashioned, how do I do i

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
ate. This is mostly useful in configurations with redundant RRs, to prevent routing loops between the RRs. So on Juniper, how do I configure that iBGP peer x.x.x.x is not a RR-client, but another RR in the same cluster as the current router? -- Victor Sudakov,

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
entical client-id on both. How would you configure this? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
u should reject updates based on the cluster-id attribute). -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] router reflector clients and non-clients

2018-05-30 Thread Victor Sudakov
undant RRs with iBGP sessions between them. > The example configuration from juniper.net looks wrong. Disbelieve :-) I would rather believe in my own folly. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] router reflector clients and non-clients

2018-05-29 Thread Victor Sudakov
.6.5; neighbor 192.163.6.4; # client, router B neighbor 192.168.40.4; # client, router C neighbor 192.168.0.1; # non-client, router D neighbor 192.168.5.5; # non-client, router E } } -- Victor Sudakov,

Re: [j-nsp] EX4200 virtual chassis

2017-12-02 Thread Victor Sudakov
Doug McIntyre wrote: > On Mon, Nov 27, 2017 at 08:57:07AM +0700, Victor Sudakov wrote: > > We are planning to add backup switches in a Virtual Chassis > > configuration to our existing EX4200s. > ... > > If I have a standalone EX4200, should I power it off before plu

[j-nsp] EX4200 virtual chassis

2017-12-01 Thread Victor Sudakov
? The links above say only that the desired master should be powered on first, but nothing is said about the possibility of hot plug connection. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] Topology failure on EX4200

2017-07-17 Thread Victor Sudakov
right? > > EX4200 and EX4550 have dedicated high speed VC ports, but you can use > your 10G optical interfaces instead. Ah, sorry, I have none of those. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-n

Re: [j-nsp] Topology failure on EX4200

2017-07-16 Thread Victor Sudakov
sically down. > > On a design note, why not use Virtual Chassis instead? Sorry, I don't understand. Virtual Chassis uses a special short cable, doesn't it? My switches are not located nearby enough to use that cable. In fact, they are connected by multiplexers and can be far away

Re: [j-nsp] Topology failure on EX4200

2017-07-10 Thread Victor Sudakov
One more observation: OSPF adjacency in the management vlan does not break, so I conclude that only unicast traffic is affected. Victor Sudakov wrote: > > There is a ring of EX4200 switches, please look at > http://noc.sibptus.ru/jun1.png > > If MUX1 fails, the MSTP topology

[j-nsp] Topology failure on EX4200

2017-07-09 Thread Victor Sudakov
le" don't fix the problem. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Reset DSCP on ingress (again)

2017-05-30 Thread Victor Sudakov
for pointing this out. > > You need to classify (into a FC) on ingress, and rewrite on egress. You can > use a simple fixed classifier on ingress but packet marking/rewrite is only > performed on egress. > > Example of a fixed classifier: > > # set class-of-service interf

[j-nsp] Reset DSCP on ingress (again)

2017-05-28 Thread Victor Sudakov
family ethernet-switching" firewall does not seem to have a means to set dscp. Thanks a lot in advance. The device is EX4200-24T, 12.3R6.6 -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net h

[j-nsp] Reset DSCP on ingress

2017-05-03 Thread Victor Sudakov
rewall does not seem to have a means to set dscp. Thanks a lot in advance. The device is EX4200-24T, 12.3R6.6 -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] schedulers and excess-priority on EX4200

2016-05-18 Thread Victor Sudakov
IndexName Highnon-TCP 1 HighTCP 1 There is simply nothing about excess-priority in the "edit class-of-service schedulers NAME" context. What am I missing? -- Victor Sudakov, VAS4-RIPE, VAS4

Re: [j-nsp] Monitoring a gre tunnel on an EX4200

2016-05-17 Thread Victor Sudakov
Victor Sudakov wrote: > > > > > Could you perhaps suggest an SNMP OID to monitor the OSPF adjacency in > > > a non-default routing-instance? > > > > Likely. I'll SNMPWalk my EX2220c here and see if I can spot > > anything. I recall seeing somethi

Re: [j-nsp] Monitoring a gre tunnel on an EX4200

2016-05-17 Thread Victor Sudakov
ver implemented it myself. I don't seem to be able to get access to the states of OSPF neighbors in a *non-default* *routing-instance*. That's why I am asking here. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru _

[j-nsp] Monitoring a gre tunnel on an EX4200

2016-05-17 Thread Victor Sudakov
OSPF adjacency in a non-default routing-instance? Thanks in advance for any ideas. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [j-nsp] A conceptual advice on QoS is needed

2016-04-27 Thread Victor Sudakov
onfigure a single dummy FIFO egress scheduler which would be forwarding-classes and loss-priority agnostic? There are interfaces where I only need to apply rewrite-rules on egress without prioritizing. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru

Re: [j-nsp] A conceptual advice on QoS is needed

2016-02-17 Thread Victor Sudakov
s that BW on input > BW on > > > output? > > > > Most likely. > > > > > > > If yes then you need QOS (classification and scheduling) > > > > The question is, where I need QoS: before the traffic enters the transport > > switches or ins

Re: [j-nsp] A conceptual advice on QoS is needed

2016-02-17 Thread Victor Sudakov
on input > BW on output > (e.g. traffic incoming on multiple ports will be transmitted out one > port)? Very unlikely. > > 2) Can it happen on NEC transport switches that BW on input > BW on output? Most likely. > If yes then you need QOS (classific

[j-nsp] A conceptual advice on QoS is needed

2016-02-16 Thread Victor Sudakov
interfaces on the nodes are 100BaseT, so the switches are connected at 100 Mbit/s. Thanks in advance for any opinions. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] MTU on switch interfaces

2015-12-20 Thread Victor Sudakov
value? 2014? 2018? > > +14 bytes on the Juniper for whatever you have running on IOS and IOS XE. Why +14 bytes and not +18 bytes if it's a 802.1q trunk? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

[j-nsp] MTU on switch interfaces

2015-12-18 Thread Victor Sudakov
2018? Thanks in advance for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Setting CoS bits on ingress frames

2015-08-04 Thread Victor Sudakov
nterface ranges, like ge-0/0/[0-5] -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Setting CoS bits on ingress frames

2015-08-04 Thread Victor Sudakov
; } } } /* trunk port */ ge-0/0/23 { unit 0 { classifiers { ieee-802.1 pasolink; } rewrite-rules { ieee-802.1 default; } } } } } -- Victor Sudakov, VAS4-RIPE

Re: [j-nsp] Setting CoS bits on ingress frames

2015-08-03 Thread Victor Sudakov
will mark Traffic_A with COS=011 and Traffic_B with COS=000 because they are in different forwarding classes ? Or 2. Is an explicit rewrite rule always required for mapping forwarding classes to code points on egress? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru

Re: [j-nsp] Setting CoS bits on ingress frames

2015-07-30 Thread Victor Sudakov
t; on trunk ports and you are done. > Have you looked at > port counters for your interfaces to see what is happening to the > traffic? I am mostly looking at tcpdump and WireShark on HostC. What command do you suggest to look at the counters? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN s

Re: [j-nsp] Setting CoS bits on ingress frames

2015-07-30 Thread Victor Sudakov
es): ftp://ftp.sibptus.ru/pub/vas/chart2.pdf -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Setting CoS bits on ingress frames

2015-07-30 Thread Victor Sudakov
Dave Bell wrote: > Apply it to the port on SW3 that is facing SW2. Why would I apply a classifier on a trunk port? I need to classify frames entering the network via _access_ ports, and keep this classification intact on trunk ports. I'm afraid you are not following me. -- Victor

Re: [j-nsp] Setting CoS bits on ingress frames

2015-07-30 Thread Victor Sudakov
ent traffic (from HostA or HostB) enters the network. You can see that on the diagram. > > To fix this one, you need a classifier on ingress. Try something like > the following: On which switch/interface do you suggest putting this classifier? -- Victor Sudakov, VAS4-RIPE, VAS47-R

Re: [j-nsp] Setting CoS bits on ingress frames

2015-07-29 Thread Victor Sudakov
} forwarding-class nc { loss-priority high code-point 111; loss-priority low code-point 111; } } } {master:0} admin@sw-kedr> -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

Re: [j-nsp] Disable telnet/ssh access from virtual routers

2015-07-15 Thread Victor Sudakov
Stacy W. Smith wrote: > https://kb.juniper.net/InfoCenter/index?page=content&id=KB23547 > > The article states it applies to VRFs, but it also applies to routing > instances of type "virtual-router". > This lo0.x interface does not have to have an IP address,

Re: [j-nsp] Disable telnet/ssh access from virtual routers

2015-07-15 Thread Victor Sudakov
may work, thank you, though it's not exactly elegant. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Disable telnet/ssh access from virtual routers

2015-07-15 Thread Victor Sudakov
tively telnetting to the main device. Is there an elegant way to prevent this from happening, i.e. to permit telnet/ssh access from hosts in the inet.0 table but deny from hosts from the CUSTOMERXX.inet.0 table? Thanks in advance for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda

[j-nsp] /config/rescue.conf.gz

2015-07-02 Thread Victor Sudakov
ocal login/password authentication for a possible emergency. Anything more than that is redundant. If I prepare a custom config offline and upload it as /config/rescue.conf.gz, will this work? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptu

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-25 Thread Victor Sudakov
ng output scheduling, RED drop, marking. Thanks a lot Alexander! Now it's clear. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-24 Thread Victor Sudakov
e-1/0/0 { ### egress tagged interface for Internet traffic > unit 0 { > rewrite-rules { > ieee-802.1 test1; > > On 24/06/2015 07:34, Victor Sudakov wrote: > > Yes but there should be a way to say "any packet enering this untagged &

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-23 Thread Victor Sudakov
On 23/06/2015 12:47, Victor Sudakov wrote: > > Alexander Arseniev wrote: > >> On 17/06/2015 15:45, Victor Sudakov wrote: > >>> Would you care to give a simple example? > >> Of course. Please try the below and see if it works for You: > > While trying to implem

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-23 Thread Victor Sudakov
Alexander Arseniev wrote: > > On 17/06/2015 15:45, Victor Sudakov wrote: > > Would you care to give a simple example? > Of course. Please try the below and see if it works for You: While trying to implement your example, I have come across something called a classifier: admi

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-17 Thread Victor Sudakov
Alexander Arseniev wrote: > > > On 17/06/2015 15:10, Victor Sudakov wrote: > > All right, if I have Internet traffic in VLAN10 and video cameras in > > VLAN20, how do I mark on egress frames belonging to VLAN20 with CoS=1 > > and those belonging to VLAN20 with CoS=4

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-17 Thread Victor Sudakov
o cameras in VLAN20, how do I mark on egress frames belonging to VLAN20 with CoS=1 and those belonging to VLAN20 with CoS=4 ? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-16 Thread Victor Sudakov
address 172.16.10.246/30; > > This is not supported on any other Juniper product, to my knowledge. > Thanks > Alex > > On 17/06/2015 06:58, Victor Sudakov wrote: > > Colleagues, > > > > I hope I am not asking something unusual

Re: [j-nsp] Setting CoS bits on ingress frames

2015-06-16 Thread Victor Sudakov
t need to classify frames and pass the classified frames to the > communications equipment which understands CoS bits. > > Thank you in advance for any input. > > -- > Victor Sudakov, VAS4-RIPE, VAS47-RIPN > sip:suda...@sibptus.tomsk.ru > ___

[j-nsp] Setting CoS bits on ingress frames

2015-06-15 Thread Victor Sudakov
tands CoS bits. Thank you in advance for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] interoperation between MSTP and old STP

2015-05-21 Thread Victor Sudakov
highly recommend Petr Lapukhov's work here: > > http://blog.internetworkexpert.com/2010/02/22/understanding-mstp/ I remember reading it when I set up MSTP for the first time, but I skipped the multi-region part of if. And the legacy STP link should look to M

[j-nsp] interoperation between MSTP and old STP

2015-05-15 Thread Victor Sudakov
some good documentation is also appreciated. TIA for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] L2 tunnel over IP on ex4200-24t

2015-05-11 Thread Victor Sudakov
ink as it > will give you more flexibility. In fact, FreeBSD's netgraph system gives me plenty of flexibility :-) more than I want, and for free. If it's not possible to do this by means of only EX4200s themselves, I'll keep the FreeBSD servers. Thank you for replying, Mark. --

Re: [j-nsp] L2 tunnel over IP on ex4200-24t

2015-05-11 Thread Victor Sudakov
servers. This is a clever setup after all (sorry, the explanation is in Russian only, but the script is in sh): http://victor-sudakov.dreamwidth.org/330817.html -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

[j-nsp] L2 tunnel over IP on ex4200-24t

2015-05-11 Thread Victor Sudakov
. Now I am doing it with the help of two FreeBSD servers encapsulating Ethernet frames into UDP packets via a complicated netgraph setup. I would be happy to get rid of them and use only ex4200-24t switches if possible. Thank you for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda

Re: [j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-30 Thread Victor Sudakov
for pain if > it later does receive a BPDU, then stops receiving them. There may be > transient conditions in a MSTP network where this happens. What exactly problem can arise in this case? A port never coming up? Sorry, I cannot quite grasp the idea, could you illustrate? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-30 Thread Victor Sudakov
logy dictates that one should never expect to receive BPDUs > on such a port (the port should never lead to a root bridge), I would > configure: > > set protocols mstp interface no-root-port > > instead of the "bpdu-timeout-action block". The topology in question is basically

Re: [j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-21 Thread Victor Sudakov
on the upstream interface facing the root bridge > where it is expected that it receive BPDUs. Still, if I enable "bpdu-timeout-action block" on every interface facing the MUX (and therefore facing each other), I am probably safe? [dd] > But either way, I don't think thi

[j-nsp] config msti vlan range?

2014-07-21 Thread Victor Sudakov
t's a general Junos syntax question (using ranges of values) but somehow I cannot find the obvious. Thanks a lot for helping. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether

Re: [j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-18 Thread Victor Sudakov
p interface ge-0/0/22.0 bpdu-timeout-action block" might do the trick as well if configured on all interfaces connected to the MUXes. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.n

Re: [j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-15 Thread Victor Sudakov
via Free-Space Optics > units. Ben, thanks a lot, it works. The interface goes down as expected. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Could you pls clarify a bit about OAM for link fault management?

2014-07-10 Thread Victor Sudakov
les and other complicated stuff, do I? All I need from OAM is some kind of L2 keepalive. Do you have a good configuration example? Thanks a lot for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

Re: [j-nsp] warning: dhcp-service subsystem not running - not needed by configuration

2014-07-07 Thread Victor Sudakov
ts under system / services / dhcp-local-server you > are affecting jdhcpd and need to use: > > show dhcp server binding > restart dhcp-service > > The two are mutually exclusive (for obvious reasons). What a confusion :) -- Victor Sud

Re: [j-nsp] warning: dhcp-service subsystem not running - not needed by configuration

2014-07-07 Thread Victor Sudakov
emon 'Dynamic Host Configuration Protocol process' Jul 7 17:29:30 sw-km337 init: dhcp (PID 65062) exited with status=0 Normal Exit Jul 7 17:29:30 sw-km337 init: dhcp (PID 65064) started -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru _

[j-nsp] warning: dhcp-service subsystem not running - not needed by configuration

2014-07-07 Thread Victor Sudakov
7> show configuration interfaces ge-0/0/0 unit 0 { description Test; family inet { address 10.14.135.177/29; } } Thank you for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

[j-nsp] Limitations of MPLS support on EX4200

2014-05-01 Thread Victor Sudakov
0permanent isis 01 0permanent mpls 01 0permanent -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru

Re: [j-nsp] loop detection on EX4200

2014-04-22 Thread Victor Sudakov
iving: 11:36:38.318202 In 3c:8a:b0:da:67:59 > 01:80:c2:00:00:0e, ethertype 802.1Q (0x8100), length 74: vlan 1, p 5, ethertype LLDP, LLDP, name sw-km337, length 56 [|LLDP] If I "delete vlans default vlan-id" on the switch, I'll stop seeing these frames. BTW on the remote sw-km337 switch, the default vlan is untagged. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] loop detection on EX4200

2014-04-22 Thread Victor Sudakov
; vlan-tagging; > unit 3830 { > vlan-id 3830; > family inet { > address 10.237.18.29/31; > } > family mpls; > } This is probably because your interface is in the "vlan-tagging" mode, while mine is "fam

Re: [j-nsp] loop detection on EX4200

2014-04-22 Thread Victor Sudakov
42 on the other side. That was the reason I had suggested that the multiplexer did not forward untagged frames. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] loop detection on EX4200

2014-04-21 Thread Victor Sudakov
Kevin Wormington wrote: > Could you not use MSTP or VSTP instead of RSTP? Perhaps I'll have to unless I can make the multiplexer forward untagged frames. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp

Re: [j-nsp] loop detection on EX4200

2014-04-21 Thread Victor Sudakov
Chuck Anderson wrote: > On Mon, Apr 21, 2014 at 03:20:42PM +0700, Victor Sudakov wrote: > > Dave Bell wrote: > > > You could try enabling bpdu-block-on-edge. > > > > > > http://www.juniper.net/techpubs/en_US/junos12.2/topics/task/configuration/spanning-trees-

Re: [j-nsp] loop detection on EX4200

2014-04-21 Thread Victor Sudakov
e interface, I need RSTP running on it. > RSTP should detect itself and put the interface into blocking mode.. For some reason it does not. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list ju

Re: [j-nsp] loop detection on EX4200

2014-04-21 Thread Victor Sudakov
Dave Bell wrote: > You could try enabling bpdu-block-on-edge. > > http://www.juniper.net/techpubs/en_US/junos12.2/topics/task/configuration/spanning-trees-bpdu-block-cli.html This is not an edge interface, I need RSTP running on it. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN

[j-nsp] loop detection on EX4200

2014-04-20 Thread Victor Sudakov
unable to prevent. Cisco switches can detect such conditions by sending special loopback keepalives (Ether type 0x9000) and put the interface into errdisabled state. Is there a similar feature in Juniper switches? Thank you for any input. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda

Re: [j-nsp] system archival configuration and filenames

2014-04-04 Thread Victor Sudakov
Samol wrote: > 2014-04-04 13:54 GMT+07:00 Victor Sudakov : > > > Apr 4 13:43:57 sw-us-parabel fetch: fetch: > > /sw-us-parabel_juniper.conf.gz_20140404_074355: No such file or directory > > > > 1. Make sure you can reach the ftp server > 2. Make sure there is n

Re: [j-nsp] system archival configuration and filenames

2014-04-03 Thread Victor Sudakov
Victor Sudakov wrote: > It's inconvenient enough that a TFTP server cannot be used to store > configs. But OK, I'll set up some contraption on the FTP-server side. > > > As for the naming, that is odd - the standard format for these files is: > > > > router-n

Re: [j-nsp] system archival configuration and filenames

2014-04-01 Thread Victor Sudakov
d format? If I zcat those "acc_transfer_link_3775" files they are no doubt the configs I expect to see, only the name is weird. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] system archival configuration and filenames

2014-04-01 Thread Victor Sudakov
anks in advance for any ideas. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] WARNING: THIS DEVICE HAS BOOTED FROM THE BACKUP JUNOS IMAGE

2014-03-24 Thread Victor Sudakov
"Step-by-step recovery > procedure for this situation:" http://goo.gl/BoUUlA > > Cheers, > Masood > > On Fri, Mar 21, 2014 at 5:23 PM, Victor Sudakov wrote: > > > Colleagues, > > > > What could be the reason that an EX4200-24T occasionally boot

[j-nsp] WARNING: THIS DEVICE HAS BOOTED FROM THE BACKUP JUNOS IMAGE

2014-03-21 Thread Victor Sudakov
etimes, one day, the switch will eventually boot from the Backup Partition again. What gives? TIA for any ideas. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://

[j-nsp] Juniper EX3200 and vrf lite

2013-06-17 Thread Victor Sudakov
Colleagues, Does EX3200 support the VRF lite feature? I have read the datasheet at http://www.juniper.net/us/en/products-services/switching/ex-series/ex3200/ and could not find VRF lite. TIA. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru

[j-nsp] system syslog host in another routing instance

2012-12-19 Thread Victor Sudakov
ping this host like this: ping 10.14.140.125 routing-instance Running JUNOS 10.4R8.5 on an M120. Thank you in advance for any input: -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru ___ juniper-nsp mailing list juniper-nsp