Re: [j-nsp] Logging for shell sessions

Hi Phil, Seems that it's supported from 23.4 https://apps.juniper.net/feature-explorer/feature-info.html?fKey=11993&fn=Logging%20support%20for%20routing%20engine%20shell%20and%20line%20card%20shell HTH, Wojciech sob., 6 lip 2024, 08:27 użytkownik Phil Mawson via juniper-nsp < juniper-nsp@puck.n

Re: [j-nsp] dhcpv6 IA_PD syslogging

Hi Aaron, You can try log session option under dhcp-service process as described in https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/dhcp-service-log-edit-systems.html HTH, Regards, Wojciech śr., 3 lip 2024, 06:26 użytkownik Aaron1 via juniper-nsp <

Re: [j-nsp] user defined variables from radius

AFAIK you can use them with Radius attributes 26-65 / 26-66 to activate service with dynamic parameters, which take the string like "dynamic-profile-name(variable1, variable2, ...)". The same can be done through CLI for testing purposes Regards, Wojciech sob., 28 lis 2020, 03:16 użytkownik Baldur

Re: [j-nsp] what do do with bug reports

Hi Baldur, You should not give up and just report the bug. JTAC may ask you to disable feature that is causing an impact, but in the meantime they will work on resolving it. Mind that it might take some time to replicate the problem, prepare the fix and implement it in the next official software

Re: [j-nsp] Subscriber DHCPv6 lease time for IA_NA from Radius Server

Hi Sebastian, If I remember correctly, DHCP Lease Time can be adjusted by using Radius Session-Timeout attribute. Regards, Wojciech śr., 11 mar 2020 o 11:32 Sebastian Wiesinger napisał(a): > Hi, > > I'm currently testing IPv6 subscriber termination (PPP/L2TP) on an > MX204 (18.4R2) and I have

Re: [j-nsp] GRE interfaces doesn't show up

Hi Jeff, What type of DPC card you're using? As per your initial email I wouldn't expect PIC 4 on DPC card related to gr-5/4/0 interface to be present as PICs can take numbers between 0 and 3. What is your network-services mode (show chassis network-services)? Is DPC card up (show chassis fpc)?

Re: [j-nsp] PyEZ list SRX firewall policies

Hi Floris, I'm not Python programmer, but it seems that "secpol.app" (or "src" or "dst") is sometimes string and sometimes it's a list of strings. If it's a single string, then it's being split into characters by [] operator. If's it's a list, then [] gives you a string (which is what you're looki

Re: [j-nsp] EVPN all-active toward large layer 2?

Hi Rob, You have effectively created L2 loop over EVPN, so to cut it you need a link between bridged network and EVPN to be a single link. There is no STP in EVPN. If you need two physical connections to between those networks, then LAG is a way to go. MC-LAG or virtual chassis can be configured o

Re: [j-nsp] BGP default action constraints with advertise-inactive?

Hi Jason, "advertise-inactive" makes router to advertise BGP route even if it is not active. One example is when you have a static and BGP route for the same prefix. By default, static route is preferred and BGP is marked as inactive. As such BGP route would not be advertised. By configuring "adve

Re: [j-nsp] MX960 differing RE REVs is this ok

Hi Aaron, I'd say it is not relevant for ISSU. Different hw revisions might have different chips or capacitors here or there , but functionally they should be the same. Regards, Wojciech śr., 23 sty 2019, 16:55: Aaron Gould napisał(a): > Does ISSU require same *Rev* of RE ? > > > > ...and is t

Re: [j-nsp] mx960 junos upgrade fail

I'd first check if /var is mounted on the hard drive. Regards, Wojciech czw., 5.04.2018, 17:32 użytkownik Aaron Gould napisał: > mx960 junos upgrade fail due to the following reasons. any idea how to > overcome? > > > > > > I already did request system storage cleanup > > > > > > {master} > > a

Re: [j-nsp] cdn.juniper.net slow?

Hi Franz, I believe it depends on what is currently being cached by the server. If you're downloading a file which has not been downloaded before, the download speed might be low. My DNS resolves cdn.juniper.net as 184.50.174.254, but if I force wget to use 23.37.55.189 I get couple of MB/s whe

Re: [j-nsp] Stiching L2 to L3 on MX480

Hi Pshem, Yes, you can. Just as I described in my previous post. Regards, Wojciech 22.12.2017 00:43 "Pshem Kowalczyk" napisał(a): Hi, Can we use this for non-BNG functions as well? Despite a large number all of those VLANs are 'static' customers. kind regards Pshem On Thu, 21 Dec 2017 at

Re: [j-nsp] Stiching L2 to L3 on MX480

Hi Pshem, I'd terminate l2circuits from ACX directly on pseudo-wire interfaces (psX). By example: PE1: set chassis fpc 2 pic 1 tunnel-services bandwidth 10g set interfaces ps1 anchor-point lt-2/1/0 set interfaces ps1 flexible-vlan-tagging set interfaces ps1 unit 1234 vlan-id 1234 set interfaces

Re: [j-nsp] SNMPv3 Type $9 Passwords ?

Hi Kevin, Please refer to RFC2574 for details of password to key algorithm. Regards, Wojciech 2017-06-20 16:46 GMT+02:00 kevin gannon : > We are using Ansible to push configurations and also check the > configuration in ansible versus what is on the box. > > The checking leads to an annoying pr

Re: [j-nsp] EX4200 show chassis environment discrepancy

Hi Lucio, I believe there is no discrepancy between outputs because they show different things. As far as I remember, the "Status" field of "show chassis environment output" can be one of the following: ok, failed, check, testing, absent In your case EX-PFE2 is OK, but it's just too hot. I'd reco

Re: [j-nsp] interpreting 10Gb interface "PCS statistics" values

Hi David, I'd say it's a number of seconds with high error rate or errored blocks. In other words it doesn't show the number of errors but the number of seconds during which errors were detected. Regards, Wojciech 21.10.2016 20:08 "David B Funk" napisał(a): > Thanks guys but this isn't what I

Re: [j-nsp] MPC4E-32XGE firmware

Hi Jonas, The easiest way is to install jfirmware package appropriate for your Junos release (you can get it from JTAC) and then: - show system firmware to check that there is a new software available - request system firmware upgrade pic fpc-slot X pic-slot Y to upgrade firmware - show system fir

Re: [j-nsp] sequential commands in SLAX

Hi Martin, I believe that jcs:invoke() is just a shortcut for jcs:open(), jcs:execute() and jcs:close(), so you get a new connection each time you execute jcs:invoke(). Regards, Wojciech 2016-01-14 10:23 GMT+01:00 Martin T : > Hi, > > while I am aware of jcs:open() function, which allows one to

Re: [j-nsp] RPD Crash on M320

Hi, 11.2 is end of support so my guess is that's there no point in raising a case. As first step I'd try the upgrade to some supported release and then check if that helps. Regards, Wojciech 4 sty 2016 17:02 "Niall Donaghy" napisał(a): > > > From your comments I understand there was no CPU sp

Re: [j-nsp] Radius Accounting in Juniper Steel Belted Radius with Cisco IOS devices

Hi Arun, It's been a while since I last touched SBR but for sure you may configure SBR to store accounting records in an external database like SQL. After that making a nice GUI that would allow you to filter or aggregate the data shouldn't be a problem. Regards, Wojciech 2015-08-25 11:51 GMT+02

Re: [j-nsp] Fwd: Quick way to Shift MPLS traffic away from an interface

Hi Adam, RFC 5817 could be a solution for that problem but apparently it's not supported yet. Pitty. Regards, Wojciech 22 maj 2015 15:13 "Adam Vitkovsky" napisał(a): > Hello Tim, > > > tim tiriche > > Sent: 21 May 2015 04:02 > > > > Hello, > > > > What is the quick way to shift LSP traffic from

Re: [j-nsp] Is there juniper output interpreter ?

Hi Brijesh, You might take a look at JCATS - Juniper Case Attachment Tool Suite http://kb.juniper.net/TN299 You need to be registered to use it. To get a simple backtrace from the core file you might use: show system core-dumps core-file-info Regards, Wojciech 2015-05-15 13:39 GMT+02:00 Br

Re: [j-nsp] DDOS_PROTOCOL_VIOLATION_SET: Protocol Reject:aggregate

Hi Rodrigo, It is as simple as "set routing-options aggregate route discard" Regards, Wojciech 2014-12-11 4:22 GMT+01:00 Rodrigo 1telecom : > Can you put an exame of this configuration Janiszewski?! > > > Enviado via iPhone  > Grupo Connectoway > > >

Re: [j-nsp] DDOS_PROTOCOL_VIOLATION_SET: Protocol Reject:aggregate

Hi, Make sure that you have a "discard" next-hop instead of default "reject" in your aggregate routes. That should help. Regards, Wojciech 2014-12-10 23:16 GMT+01:00 Brendan Mannella : > Just wondering if anyone has ever seen these DDOS messages before and > what i should be looking at to resol

Re: [j-nsp] MX5 BNG licensing

Correct, unless you use other features that requires S-MX80-SSM-FP. Regards, Wojciech ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX5 BNG licensing

Hi Андрей, In addition to ordinary per-subscriber AAA you may also configure per-service accounting for which the S-MX80-SSM-FP license is required. Regards, Wojciech 2014-09-22 5:20 GMT+02:00 Шепелев Андрей : > HI! > Wojciech Janiszewski - can you explain in more details about S-MX80-

Re: [j-nsp] MX5 BNG licensing

Hi Octavio, IIRC the S-MX80-SSM-FP license is not necessary if you only need per-subscriber AAA. The S-MX80-SSM-FP is required if you need per-service accounting or need to change variables within profile via Radius, or require COA, RID or SRC. In addition you might require SA-nnnK license accord

Re: [j-nsp] OSPF Confusion

rds, Wojciech Janiszewski 2014-02-26 0:11 GMT+01:00 Crist Clark : > This may be something simple, but I've been staring at it a while and am > confused now. I have a rather simple network, > > 11 > > R1 - R2 >

Re: [j-nsp] MX960 - Release 12.3R4

Hi, If you consider rsvp and link-protection, it's better to use 12.3R5 Regards, Wojciech 22 sty 2014 04:02, "Giuliano Medalha" napisał(a): > People, > > Does anyone used JUNOS 12.3R4 on MX960 gear ? > > Is this a stable release ? > > Could you please send some feedback about it ? > > We have a

Re: [j-nsp] smartctl for junos

. request chassis routing-engine hard-disk-test disk /dev/ad2 show-status Regards, Wojciech Janiszewski 2014/1/8 snort bsd > > hi all: > > there is smartd running on junos, but i am not able to find "smartctl" > utility for smartd. > > thanks > ___

Re: [j-nsp] 'lib_ifbd->ifbd_curr_num_macs >= adjust_count' failed

Hi Lukasz, IMHO it's a software bug in Layer 2 address learning daemon. You should send collected core dump file to JTAC, for further analysis. Regards, Wojciech Janiszewski 2013/10/21 Lukasz Trabinski > Hi > > Strange situation on MX960 (Junos 10.4S12) with following scenario:

Re: [j-nsp] vrf-table-lable with logical systems

Yes. A least on M-series. Regards, Wojciech Janiszewski W dniu 2011-07-14 16:22 użytkownik "Vladislav A. VASILEV" < vladislavavasi...@gmail.com> napisał: Does anyone know if vrf-table-lable is supported with logical-systems and VLAN core-facing interfaces between P/PE routers?