Re: [j-nsp] VRRP for IPv6

2022-01-25 Thread Jonas Frey via juniper-nsp
Looks like you are missing "virtual-link-local-address". -Jonas Am 2022-01-25 20:51, schrieb Chris Adams via juniper-nsp: I'm trying to add VRRP for IPv6 to a pair of MX150s (that are already running VRRP for IPv4). I've switched from VRRPv2 to VRRPv3, and the v4 VRR

Re: [j-nsp] ISSU offlined mpc - why?

2021-09-02 Thread Jonas Frey via juniper-nsp
5.1R6 this release wouldnt support it and jumping to 17.4R2 would cause the MPC reboot. -Jonas ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX204 vs. MX240??

2019-11-08 Thread Jonas Frey
for the RE it can keep up with current line modular RE's for the MX240. -Jonas Am Freitag, den 08.11.2019, 11:39 -0500 schrieb Clarke Morledge: > I wanted to resurrect an old thread about the MX204, from a year and a  > half ago: > > https://lists.gt.net/nsp/juniper/64290 > &

Re: [j-nsp] Ramp up old MX480

2019-08-28 Thread Jonas Frey
Hello, for the minimum you will need to upgrade: FFANTRAY-MX480-HC-S (high capacity fan tray to run MPC cards due to cooling) MX-SCBE (req'd for MPC3+ cards) as for line cards i'd suggest using MPC-3D-16XGE-SFPP, they are cheap used/refurb. If you are running 3+ of these you might need to upgra

Re: [j-nsp] MX480 AC Power Supply fan replacement problem?

2018-12-14 Thread Jonas Frey
Chris, the -F00 have a tachometer signal, so the device using it can read the RPM easily. The -R00 utilize a locking signal which only tells the device if the rotor does spin freely or is locked (in which case the device can shut down power to the fan to prevent any issues). As you would imagine

Re: [j-nsp] SRX100 u-boot

2018-11-11 Thread Jonas Frey
sert that stick into the faulty SRX and force it to boot from there. Am Sonntag, den 11.11.2018, 14:43 +0200 schrieb Mohammad Khalil: > Ops , but it did not work either > Nand format failed > > BR, > Mohammad > > On Sun, 11 Nov 2018 at 14:46, Jonas Frey > wrote: > &g

Re: [j-nsp] SRX100 u-boot

2018-11-11 Thread Jonas Frey
Hi Mohammad, thats a typo, its nand_format (note the underscore). Am Sonntag, den 11.11.2018, 05:31 -0500 schrieb Mohammad Khalil: > => reset > > > U-Boot 1.1.6-JNPR-2.7 (Build time: Nov 26 2013 - 19:04:49) > > Initializing memory this may take some time... > Measured DDR clock 266.62 MHz > SRX

Re: [j-nsp] mx960 crashed

2018-04-05 Thread Jonas Frey
t&id=KB6660&actp=MET ADATA -Jonas Am Donnerstag, den 05.04.2018, 09:34 -0500 schrieb Aaron Gould: > Thanks Rob, Is a break followed by c within 5 seconds a documented > way to > crash a RE-S-X6-64G ? > > Btw, Jtac couldn't find the dump > > Rma'ing RE ... said b

[j-nsp] MPC4E-32XGE firmware

2016-03-01 Thread Jonas Frey (Probe Networks)
Hello, i am getting the following notice in the logs: Mar 1 13:58:07 fpc0 CMIC(0/3): VSC8248 cmic-vsc8248-0/0/7 is running out-of-date firmware version 2.52 (0x234). Please upgrade firmware to version 2.53 (0x235) or later. Does anyone know howto update these? -Jonas signature.asc

Re: [j-nsp] IPv4 Filter for ECN/CWR tcp bit (RFC3168)

2015-11-28 Thread Jonas Frey (Probe Networks)
Hi Daniel, thanks for this hint, i'll give it a try! (However would be pleased if juniper could just update the tcp-options stanca to include ECN/CWR). Br, Jonas Am Freitag, den 27.11.2015, 18:48 +0100 schrieb Daniel Verlouw: > Hi Jonas, > > On Fri, Nov 27, 2015 at 2:20 PM, Jon

[j-nsp] IPv4 Filter for ECN/CWR tcp bit (RFC3168)

2015-11-27 Thread Jonas Frey (Probe Networks)
traffic? It seems even with MS-MIC this is not possible. I am asking since we are seeing new types of dDos attacks using SYN traffic with ECN and CWR bit set (however with a non-zero ACK window). Br, Jonas signature.asc Description: This is a digitally signed message part

Re: [j-nsp] Junos 12.3 more strict about 3rd party optics?

2014-06-24 Thread Jonas Frey (Probe Networks)
Most 3rd party vendor's lock down the A0 part of the SFP+, so you cant change values there. Try asking your vendor if they can provide A0 unlocked SFP+...usually they will be a bit more expensive. If they dont want to offer them just choose another supplier...there are plenty. Having a SFP+ EEPROM

Re: [j-nsp] MX Series BASE to PREMIUM3

2014-05-20 Thread Jonas Frey (Probe Networks)
Dave, as far as i know starting from PREMIUM2 the chassis also comes with the high capacity fan module. Am Dienstag, den 20.05.2014, 16:32 + schrieb Dave Peters - Terabit Systems: > Hi all-- > > I think I've got this nailed down, but I wanted to make sure I know the > differences among the

[j-nsp] EX4200 stuck in U-boot

2014-05-14 Thread Jonas Frey (Probe Networks)
USB Device(s) found scanning bus for storage devices... 1 Storage Device(s) found One the front panel LCD it reads: "POST Eth pass.." Anyone have any idea howto fix this? BR, Jonas signature.asc Description: This is a digitally signed me

Re: [j-nsp] proposed changes to "clear bgp neighbor"

2014-02-26 Thread Jonas Frey (Probe Networks)
+1 for the "all" requirement Am Mittwoch, den 26.02.2014, 10:36 -0500 schrieb Phil Shafer: > Juniper users, > > We've been asked to make a change the "clear bgp neighbor" command > to make the neighbor or "all" argument mandatory. The root cause > is the severe impact of "clear bgp neighbor" and

Re: [j-nsp] ex switch VCP cabel

2014-02-10 Thread Jonas Frey (Probe Networks)
Hi, sorry, i mixed this up with a diff vendor. The VC cable on the EX series is a external pci-e x8 cable. See: http://juniper.cluepon.net/index.php/EX4200 Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun: > Hi, > > VCP cable for EX switch looks a lot like a plain SFF-8088 cable, can >

Re: [j-nsp] ex switch VCP cabel

2014-02-10 Thread Jonas Frey (Probe Networks)
Hi, it is one indeed. If you look closer at those shipped from juniper you can see its a normal SFF-8088. I doubt they have modified/coded anything to prevent the use of other brands. Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun: > Hi, > > VCP cable for EX switch looks a lot like a

Re: [j-nsp] Procedure for upgrade routing engines.

2014-01-08 Thread Jonas Frey (Probe Networks)
RE-S-1800 is running JunOS 64, so this will *not* work. Mixing routing engines isnt recommended/supported officially by juniper either, but works to some degree (RE1300/RE2000 32bit). Am Mittwoch, den 08.01.2014, 19:43 +0800 schrieb Xuhu: > OS version will be the same or not, official document

Re: [j-nsp] smartctl for junos

2014-01-07 Thread Jonas Frey (Probe Networks)
Hi, unfortunatly there is none. You have to remove the disk/SSD and install it in a regular system to read its smart data. You cant do this from JunOS, as you cant execute unsigned binarys. Am Dienstag, den 07.01.2014, 15:20 -0800 schrieb snort bsd: > hi all: > > there is smartd running on jun

Re: [j-nsp] EX4550 true power consumption

2013-10-24 Thread Jonas Frey (Probe Networks)
; it will easily be 400W or more. Around 100W for a base, idle unit with > a few optics sounds right. Each optic module draws several watts > depending on the type. > > On Oct 23, 2013 10:25 AM, "Jonas Frey (Probe Networks)" > wrote: > Hello, > >

[j-nsp] EX4550 true power consumption

2013-10-23 Thread Jonas Frey (Probe Networks)
ve been able to find various values on non-juniper related sites which range from 175W to 345W. Best regards, Jonas signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://

[j-nsp] IDP series SSL decryption

2013-07-24 Thread Jonas Frey (Probe Networks)
works i'd like to hear about it. -Jonas signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] replacing M5 RE-3.0 hard drive

2013-07-17 Thread Jonas Frey (Probe Networks)
Yes, just make sure to use a 2,5" drive. SSD is fine, too. http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Am Mittwoch, den 17.07.2013, 09:42 -1000 schrieb Antonio Querubin: > I have a Juniper M5 whose hard drive just failed. The drive appears to be > a Fuji

Re: [j-nsp] SNMP ifIndex 0 on MX after ISSU

2013-03-08 Thread Jonas Frey (Probe Networks)
, 17:42 +0100 schrieb Tobias Heister: > Hi, > > Am 08.03.2013 16:33, schrieb Jonas Frey (Probe Networks): > > did anyone ever notice problems with wrong/changed SNMP ifIndex settings > > after ISSU? > > We ISSU upgraded a MX from 10.4R9.2 to 11.4R7.5 and after this some

[j-nsp] SNMP ifIndex 0 on MX after ISSU

2013-03-08 Thread Jonas Frey (Probe Networks)
ght? The workaround for EX doesnt help as there is no such process to restart on MX series. Best regards, Jonas signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net ht

Re: [j-nsp] Difference between RE models.

2012-12-07 Thread Jonas Frey (Probe Networks)
Sunil, those are ordering codes from Juniper. The hardware is exactly the same so you can mix them. RE-400-768-BB = Base bundle (included in chassis order) RE-400-768-R = Redundant module (can be ordered same time with chassis) RE-400-768-S = Spare (to be ordered later to upgrade to redundancy)

[j-nsp] CPU in Routing Engines - MX

2012-05-11 Thread jonas
Hello, Whats kind of CPU do Juniper use in RE-S-2000-4096 and RE-S-1800x2-8G ? /Jonas ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Sources for SFP+ optics

2012-02-23 Thread Jonas Frey (Probe Networks)
r. But i dont see any reason to pay $1500 each time for a 10G SFP+ LR optic when i can buy this from one of the larger SFP vendors for less than $80. -Jonas Am Donnerstag, den 23.02.2012, 08:27 -0800 schrieb Bill Blackford: > heh, > > ok, I shouldn't post something I'

Re: [j-nsp] Only announce BGP learned networks

2012-02-20 Thread Jonas Björklund
On Mon, 20 Feb 2012, Jonas Björklund wrote: I want all networks learned from BGP (even those from OSPF) pass the policy. advertise-inactive on bgp group seem to be the magic. :-) /Jonas___ juniper-nsp mailing list juniper-nsp@puck.nether.net

[j-nsp] Only announce BGP learned networks

2012-02-20 Thread Jonas Björklund
OSPF *AND* BGP was not able to pass the policy. Only those which was learned from BGP. I want all networks learned from BGP (even those from OSPF) pass the policy. Any ideas? /Jonas ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] SCB-E

2012-02-15 Thread Jonas Frey (Probe Networks)
PR718485: Workaround: Disable the "then log" or "then syslog" in firewall configuration. Am Mittwoch, den 15.02.2012, 12:28 +0100 schrieb Per Randrup Nielsen: > PR718485 signature.asc Description: This is a digitally signed message part ___ juniper-ns

Re: [j-nsp] Filter on lo0, MX80

2012-02-01 Thread Jonas Björklund
accept OSPF and BGP. I dont want to allow BGP on ge-1/0/0. This should be done at lo0. But If I accept BGP on ge-1/0/0, I also need to accept it on lo0 to get it to work. Is it possible to have different rules for incomning interface and lo0? /Jonas

Re: [j-nsp] Filter on lo0, MX80

2012-01-30 Thread Jonas Björklund
ssh": [edit firewall family inet filter admin-access] user@host# show term ssh-access { from { source-address { 10.1.2.0/24; } protocol tcp; destination-port ssh; } then accept; } Thanks! source-address solved the problem. /Jonas _

[j-nsp] Filter on lo0, MX80

2012-01-29 Thread Jonas Björklund
; } term ospf { from { protocol ospf; } then accept; } term deny { then { reject; } } } } } Any ideas? /Jonas

Re: [j-nsp] Does MS-PIC (Type2 MultiServices 400) work in MX-FPC2?

2012-01-25 Thread Jonas Frey (Probe Networks)
Chuck, its not listed on the supported PICs. There are only sonet PIC's listed (not even ethernet ones) so i guess it will very likely not work. I guess your only option is to go with the MS-DPC. Am Dienstag, den 24.01.2012, 17:47 -0500 schrieb Chuck Anderson: > Is it possible to reuse a Type2 M

Re: [j-nsp] HDD Write Error

2012-01-16 Thread Jonas Frey (Probe Networks)
jumper the SSD to slave and re-install JunOS via a PCMCIA card. Best regards, Jonas Frey Am Montag, den 16.01.2012, 15:51 +0100 schrieb Juniper GOWEX: > Hi all, > > We have disk errors again. We bought a SSD ( TS8GSSD25-S ) to replace > the HDD with problems. If we connect the SS

Re: [j-nsp] Difference MX DPC-R / DPCE-R

2011-12-12 Thread Jonas Frey (Probe Networks)
DPCE- cards will go EOL soon. You probably also mixed up DPC-S and DPCE-X, which is the layer2 card. Best regards, Jonas Am Montag, den 12.12.2011, 11:42 -0500 schrieb Keegan Holley: > You can find the details on the juniper website. Off the top of my head I > know there are fewer queues a

Re: [j-nsp] MX5-T-DC vs MX80-5G-DC-B

2011-11-19 Thread Jonas Frey (Probe Networks)
Hi Nico, which JunOS are you running? 10.4R7.5 here. Maybe they changed it on later MX5/10/40 bundles or its now beeing enforced on newer JunOS versions (just as i said)... Best regards, Jonas Am Samstag, den 19.11.2011, 18:46 +0100 schrieb Nicolaj Kamensek: > Am 19.11.2011 17:52, schr

Re: [j-nsp] MX5-T-DC vs MX80-5G-DC-B

2011-11-19 Thread Jonas Frey (Probe Networks)
Hello, > Hi all, > >these codes are basically the same, both are MX80 based devices with a > MIC 1x20GE (all mics are commercially called 3D, no difference here) > already installed in one of the two available slots. On MX5 (and in the > commercial bundle MX80-5) the 20x1G MIC is the only ca

Re: [j-nsp] HDD Write Error

2011-11-18 Thread Jonas Frey (Probe Networks)
classified for "enhanced" 24x7 operation. Anyway...if i was about to replace a hdd on a routing engine i would only use a SSD nowadays. Best regards, Jonas Frey Am Freitag, den 18.11.2011, 15:17 +0100 schrieb Juniper GOWEX: > Dear Jonas, > > > Two weeks a

Re: [j-nsp] 'Juniper BGP issues causing locallized Internet Problems, (Mon, Nov 7th)?

2011-11-07 Thread Jonas Frey (Probe Networks)
s you know maintenance usually causes service impact for customers and (if possible) most networks like to avoid unneccessary downtimes. Additionally alot of folks like to test new software in a lab environment first so a simple update to a new JunOS version can sometimes be quite complex and cost intensiv

Re: [j-nsp] HDD Write Error

2011-10-19 Thread Jonas Frey (Probe Networks)
longer than usual but thats it. Jonas Am Mittwoch, den 19.10.2011, 20:14 +0100 schrieb juni...@iber-x.com: > Hi experts, > > Thanks for your replies and advices. > > Just a quick question, as we have an old M5 and M10, we were wondering > if we could replace directly the HDD

Re: [j-nsp] HDD Write Error

2011-10-19 Thread Jonas Frey (Probe Networks)
Hello, havent you changed the HDD yet? Like to live dangerously eh? :-) This is very likely related because those errors messages causes writes to the HDDand if your HDD is dead/has bad sectors that will cause trouble. Good luck, Jonas Am Mittwoch, den 19.10.2011, 16:19 +0200 schrieb

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-10-13 Thread Jonas Frey (Probe Networks)
Hello Ivan, as Humair already pointed out you need to have encapsulation vlan-bridge and vlan-ccc on one of each of the lt- interfaces. Best regards, Jonas Am Donnerstag, den 13.10.2011, 22:20 +0300 schrieb Ivan Ivanov: > Hello Jonas, > > > Could you share with us working c

Re: [j-nsp] Fan Tray Failure in JM20

2011-10-11 Thread Jonas Frey (Probe Networks)
My guess is that this is some error on the i2c bus with the fans. Try rebooting the whole unit to see if the error persists. Its very unlikely that all 4 fans of a fantray fail totally. If you have a spare unit try the fantrays in that one to see if it is really related to the chassis. -Jonas

Re: [j-nsp] JUNOS and 128.0.0.0 martian (JFYI)

2011-10-10 Thread Jonas Frey (Probe Networks)
To whomever opened a PR about this: It has been posted on the amsix mailing list that juniper also needs to change internal addressing because of the issue with 128.0.0.0/16 as addresses of this space are used internally within JunOS (see below). Please add this to the PR so it gets fixed. re0>

Re: [j-nsp] M10i JUNOS Upgrade

2011-09-29 Thread Jonas Frey (Probe Networks)
. This measn first upgrade RE0 with the install media and then RE1 (by putting the install-media into RE1 and connecting the console cable to RE1). -Jonas Am Mittwoch, den 28.09.2011, 23:24 +0300 schrieb Jake Jake: > I do have 2 spare 256MB drams which would meet the requirement. But in > most

Re: [j-nsp] M10i JUNOS Upgrade

2011-09-28 Thread Jonas Frey (Probe Networks)
se is probably just a few dollars... 512MB sticks only work on the RE-5+ aka RE-850. As for the upgrade: Get yourself a install media (or create one) and save yourself the trouble of going via various intermediate versions (also this would be alot faster). -Jonas Am Mittwoch, den 28.09.2011,

Re: [j-nsp] HDD Write Error

2011-09-21 Thread Jonas Frey (Probe Networks)
the RE. Make sure to save your config files (JunOS config, SSH keys, other data like home directorys, logs etc) before you replace the HDD if neccessary. Best regards, Jonas Am Mittwoch, den 21.09.2011, 17:18 +0200 schrieb Isidoro Cristobal: > Hi, > > First of all thank you very much

Re: [j-nsp] HDD Write Error

2011-09-20 Thread Jonas Frey (Probe Networks)
/Replacing_the_harddisk_with_solid_state_flash Best regards, Jonas Am Dienstag, den 20.09.2011, 17:09 +0200 schrieb Juniper GOWEX: > Hi all, > > From yesterday at the log of my M20 are the following message : > > smartd[2595]: Device: /dev/ad1a, Failed attribute: (200)Write > Er

Re: [j-nsp] 1GE CWDM/DWDM Optics???

2011-09-09 Thread Jonas Frey (Probe Networks)
Hello, i can confirm that several CWDM SFP's from different vendors work fine with the MX-series. They will show up as unknown vendor as its been said alreadyunless you reprogramm these to return juniper part numbers (if you've got a SFP eeprom programmer). - Jonas Am Fr

Re: [j-nsp] [m10i] PIC-FPC throughput

2011-08-30 Thread Jonas Frey (Probe Networks)
16Gbps half-duplex CFEB-E, 4Gbps per FPC Anyway you always have only 1 Gbps per PIC towards the backplane regardless of how many GE ports that PIC actually has. Jonas Am Dienstag, den 30.08.2011, 02:00 +0400 schrieb Nick Kritsky: > Hi all, > > From the Juniper documentation I know that

Re: [j-nsp] RE-600 SOLID STATE DRIVE NOT RECOGNIZED

2011-08-25 Thread Jonas Frey (Probe Networks)
cant damage anythingeither it works or not. Jonas Am Freitag, den 26.08.2011, 01:39 -0400 schrieb Jeff Wheeler: > On Thu, Aug 25, 2011 at 3:00 PM, Mario Andres Rueda Jaimes > wrote: > > I'm trying to install a 8GB SSD in a RE-600 with compact flash of 2G but > > > >

Re: [j-nsp] 32-Bit JunOS on the 64-Bit Routing Engines

2011-08-25 Thread Jonas Frey (Probe Networks)
of growing IPv6 route tables as well as large (multiple) VRF/IPv4 tables. Am Donnerstag, den 25.08.2011, 19:13 -0700 schrieb Joel jaeggli: > On 8/25/11 17:56 , Jonas Frey (Probe Networks) wrote: > > Thats not completely accurate, for example the Intel Atom D525 does run > > 64bit co

Re: [j-nsp] 32-Bit JunOS on the 64-Bit Routing Engines

2011-08-25 Thread Jonas Frey (Probe Networks)
Thats not completely accurate, for example the Intel Atom D525 does run 64bit code. > There are plenty of machines that do. virtually every intel system since > the pentium pro (except the atom) has the hardware if not the bios > support for doing so, that's not germain to the question of whethe

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
rious capture devices (i.e. if you have one for v4 and one for v6). Best Regards, Jonas Am Donnerstag, den 18.08.2011, 16:08 -0700 schrieb Matt Hite: > Bizarre. So you define the family type you want to sample by > specifying it as the family type on the output stanza? (Seems > backwards

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
Woops, forgot something. Input also changed and should be now: sampling { input { rate 100; } (no longer using family...) Am Freitag, den 19.08.2011, 00:51 +0200 schrieb Jonas Frey (Probe Networks): > Matt, > > yes the config changed in JunOS 10.x. >

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
to sample (this way you can also separate v4/v6 sampling). Best regards, Jonas Am Donnerstag, den 18.08.2011, 15:33 -0700 schrieb Matt Hite: > Thanks to Jeff Richmond and Jonas Frey who were kind enough to provide > guidance both on and off-list. > > This is what I ended up with

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Jonas Frey (Probe Networks)
quot; statement only samples and will continue processing your firewall rules as normal. As for the global config at forwarding-options: I havent tried this. I like to have this only running on interfaces i configure the filter on...much more precise. -- Mit freundlichen Grüßen / Best

[j-nsp] Juniper blanks/covers

2011-08-18 Thread Jonas Frey (Probe Networks)
regards, Jonas signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-08-18 Thread Jonas Frey (Probe Networks)
correctly configure this (probably because its pretty new). Best regards, Jonas Am Donnerstag, den 18.08.2011, 07:37 -0500 schrieb OBrien, Will: > To implement tagged interfaces with bridge domains, I use irb interfaces. > This is directly from my production box with a little scrubbing. > &

Re: [j-nsp] MX: bridge-domains and l2circuit

2011-08-17 Thread Jonas Frey (Probe Networks)
-domains testbridge domain-type bridge; vlan-id 20; What i need to do is to get the VLAN 20 working locally on the bridge (various ports) as well as getting it connected to a somewhat pseudo interface to attached it as a l2circuit. -- Mit freundlichen Grüßen / Best regards, Jonas Frey

[j-nsp] MX: bridge-domains and l2circuit

2011-08-17 Thread Jonas Frey (Probe Networks)
) because bridge mode prohibits that. How can i get this to work? Best regards, Jonas signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper

[j-nsp] Juniper MX SCBE-MX-R

2011-08-10 Thread Jonas Frey (Probe Networks)
Hello, i see that there now is a new enhanced SCB for MX series which is SCBE-MX-R. However i havent been able to find any information on this regarding enhancements/features. Does anyone have any details? Best regards, Jonas signature.asc Description: This is a digitally signed message part

Re: [j-nsp] M20 SSB E Memory seller required

2011-08-10 Thread Jonas Frey (Probe Networks)
etc). Some time ago i had posted regarding this on the list...if you are interessted just search the archive. We do still run some M20's and we upgraded all of them to 128MB (except those running SSB-E-16 of course). However their days are counted. Best regards, Jonas Am Mittwoch, den 10.08

Re: [j-nsp] RE-850 memory/ram refurb

2011-05-04 Thread Jonas Frey (Probe Networks)
would replace the harddisk with another harddisk. Just go for an SSD and you'll most likely never ever have to worry about it again. See: http://juniper.cluepon.net/Replacing_the_harddisk_with_solid_state_flash Jonas Am Dienstag, den 03.05.2011, 13:23 -0700 schrieb Will Orton: > I have ser

Re: [j-nsp] mitigating dos attack on Juniper M10i

2011-04-05 Thread Jonas Frey (Probe Networks)
You dont really need netflow to find the host attacking if its a simple attack. Do this: jonas@ffm3-edge# show firewall filter attack term attack { then { log; accept; } } and then apply to your interface: unit 0 { family inet { filter { input

Re: [j-nsp] mitigating dos attack on Juniper M10i

2011-04-05 Thread Jonas Frey (Probe Networks)
its coming in but the traffic will still enter your interface and you might get charged for it. c) You can just route the IP beeing attacked to discard which is usefull if you have multiple interfaces where the attack is incoming. Regards, Jonas Frey Am Dienstag, den 05.04.2011, 13:00 +

Re: [j-nsp] re-600 RAM

2011-03-25 Thread Jonas Frey (Probe Networks)
Chris, http://juniper.cluepon.net/Route_Engine_DRAM_Compatibility RE-3 aka RE-600 Its SD-RAM, PC100 or PC133 (will run as PC100), ECC. Registered ram will not work. Also you need to get low profile ram otherwise it wont fit. Regards, Jonas Am Donnerstag, den 24.03.2011, 16:14 -0700 schrieb

Re: [j-nsp] P-1GE -B ethernet

2011-03-17 Thread Jonas Frey (Probe Networks)
They are neccessary for termination of (vlan)-ccc circuits. So if you just want to have mpls between two routers the non-B is fine. Its just needed for ccc termination on endpoints. Regards, Jonas Am Donnerstag, den 17.03.2011, 08:43 -0700 schrieb Chris Cappuccio: > P-1GE-xx-B are necess

Re: [j-nsp] M20 / RE2 Full table

2011-03-02 Thread Jonas Frey (Probe Networks)
seconds (yes i know it needs updating/upgrading...but it works well) Regards, Jonas Am Dienstag, den 01.03.2011, 11:30 -0500 schrieb Dan Spataro: > I know of one doing this. I would not recommend it in a production > environment. > > > DRAM 768 MB >

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-20 Thread Jonas Frey (Probe Networks)
Martin, yes, thats the ones we use. We also tested the 2GB version, works fine. Regards, Jonas Am Sonntag, den 20.02.2011, 23:44 +0200 schrieb Martin T: > Pekka, > by "Extreme model" did you mean this one: http://mcaf.ee/7f49a ? > > Jonas, > did I understand correctly

Re: [j-nsp] RE-333 upgrade

2011-02-14 Thread Jonas Frey (Probe Networks)
was a RE-600 for the M40 which is part number RE-M40-600-2048 but these are very hard to find. Regards, Jonas Am Montag, den 14.02.2011, 15:47 -0600 schrieb Max Pierson: > Hi List, > > > I have an old M40 (non-E) that I would like to upgrade as much as possible. > I have RE-

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-11 Thread Jonas Frey (Probe Networks)
bly others (atleast on T320/T640 RE-1600/RE-2000). Am Freitag, den 11.02.2011, 12:14 +0200 schrieb Pekka Savola: > On Fri, 11 Feb 2011, Jonas Frey (Probe Networks) wrote: > > I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe > > its too new. I know about se

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-11 Thread Jonas Frey (Probe Networks)
I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe its too new. I know about serveral newer CF cards not working in RE2/3. Try to get a regular SanDisk 1GB+ CF. (not the Ultra/Extreme models). This should work. Regards, Jonas Am Freitag, den 11.02.2011, 08:43 + schrieb

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-10 Thread Jonas Frey (Probe Networks)
Thats looks good...no idea why its not working. Last time i made a install media i didnt specify the blocksize...so just give it a try without bs=64k. Also no real need to blank the CF first. Regards, Jonas Am Donnerstag, den 10.02.2011, 16:11 + schrieb Martin T: > Looks like I'm u

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-02-10 Thread Jonas Frey (Probe Networks)
). Regards, Jonas Am Donnerstag, den 10.02.2011, 02:52 +0200 schrieb Martin T: > Chris, Alex: > > so one needs to download "install-media-*", dd(1) this image(as I > understand, it contains MBR and file-system with installation files) > to CF and finally insert the CF to &quo

Re: [j-nsp] Creating L2tp/ADSL over M10i

2011-02-01 Thread Jonas Frey (Probe Networks)
Hi, good luck trying this. When i did this once it was a horrible mess. The l2tp implementation is quite broken. The accounting is just not working correctly and so on... Stay with cisco...that'll save you alot of time. Maybe the MX will have better l2tp supportsometime. Regards, Jonas

Re: [j-nsp] M20 SSB slot 0 failures

2011-01-18 Thread Jonas Frey (Probe Networks)
. See http://juniper.cluepon.net/Unofficial_hardware_upgrades Regards, Jonas > > Hi, > > I have four M20 chassis with continuous slot 0 SSB failures. > > These are from two completely different vendors.. > > I would think, oh, a bad chassis, but I am getting this same

Re: [j-nsp] P-1GE -B

2010-12-28 Thread Jonas Frey (Probe Networks)
Not really. Both can do MPLS but only -B is capable of CCC VLANs (513-1024) for MPLS. Regards, Jonas Am Montag, den 27.12.2010, 16:10 -0800 schrieb Chris Cappuccio: > Someone refresh my memory...is the -B variant the only one that is MPLS > capable? What is the difference between P-

Re: [j-nsp] l2tp sessions on MX

2010-12-14 Thread Jonas Frey (Probe Networks)
-24 months if they really iron out the worst bugs. Bottom point...if you want something stable stay away (for now). Regards, Jonas Am Montag, den 13.12.2010, 15:50 -0600 schrieb Chris Adams: > Once upon a time, Julien Goodwin said: > > On 14/12/10 04:22, Phill Jolliffe wrote: >

Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
to upgrade the hard disk ? > > Somethin like: > > request system snapshot media ... ? > > Anyone knows how to do that ? > > Thanks a lot, > > > > Thank you Jonas !! > > > > Fernando Atilano| Transtelco| Networking& Support > > MX 52.656.25

Re: [j-nsp] m10 Hard Disk Crashed

2010-10-21 Thread Jonas Frey (Probe Networks)
See cluepon: http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano: > Anybody that can provide as to how to replace a m10 hard disk? one of them > failed. > > any feedback is greatly appreciated. > >

Re: [j-nsp] BGP Blackhole communities

2010-10-20 Thread Jonas Frey (Probe Networks)
ak this to suit your needs. The above example will allow everything upto /32 in size (usually what your customer will want). Regards, Jonas Am Mittwoch, den 20.10.2010, 12:46 +0100 schrieb Nick Ryce: > Hi Guys, > > I am starting to play with BGP and have set up some communities to separat

Re: [j-nsp] Failed FPC

2010-08-31 Thread Jonas Frey
sonet card you can use a different fpc(-e) without problems (you can remove the quad-wide sonet card). IMO, rebooting wont help anything. Either it works via offline/online or hardware-cycle of the card or nothing will help at all (defect). Regards, Jonas On Tue, 2010-08-31 at 05:11, Jose Madrid

Re: [j-nsp] Manually installing JunOS on crashed HD (no CF available)

2010-07-08 Thread Jonas Frey
...probably ttyd0. See: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/serialconsole-setup.html http://www.freebsd.org/doc/en/articles/console-server/freebsd.html Regards, Jonas On Thu, 2010-07-08 at 17:42, Phill Jolliffe wrote: > Maybe cheat? Put the old HDD in a working RE, (good

[j-nsp] RE-3.0 740-007603 not working in a M5/M10?

2010-06-09 Thread Jonas Frey
seems to be the latest. When using this RE in a M5/M10 the system doesnt bootup, console shows nothing. Anyone aware of a 2nd gen RE-3.0 not working without E-FEB? Regards, Jonas Frey ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] AC-DC converter question

2010-05-17 Thread Jonas Frey
Hi, we do have T320's running on AC->DC...we are using rectifiers from C-Can (www.c-can.com). Regards, Jonas Frey On Mon, 2010-05-17 at 19:09, OnePacket - Scott wrote: > Hi Everybody, > > I have a question and was hoping somebody could point me in the right > direction, I

Re: [j-nsp] SSD in M7i

2010-02-09 Thread Jonas Frey
ed up dramatically. Regards, Jonas On Tue, 2010-02-09 at 19:30, TCIS List Acct wrote: > Not had any issues yet, but we're doing a round of h/w upgrades on our M7i's > and > figured this was the time to do it if we were going to do it at all. > > Dan Farrell wrote: > >

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-07 Thread Jonas Frey
Kevin, we are talking about 8.5 and not 9.3 On Sun, 2010-02-07 at 02:47, Kevin Oberman wrote: > > From: Niels Ardts > > Date: Sat, 6 Feb 2010 18:25:46 +0100 > > Sender: juniper-nsp-boun...@puck.nether.net > > > > That's weird.. We've asked JTAC for a release with this fix, and they gave

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-06 Thread Jonas Frey
I am not using it, so i am not sure about the build date. However i know it has all of the recent vulnerabilities fixed including the RSVP one. Regards, Jonas On Sat, 2010-02-06 at 17:50, Dave Diller wrote: > > > I do have jinstall-8.5S5-domestic-signed.tgz which is the fixed one.

Re: [j-nsp] vulnerability fix not available for 8.5 ?

2010-02-06 Thread Jonas Frey
I do have jinstall-8.5S5-domestic-signed.tgz which is the fixed one. Never heard about S4. Regards, Jonas On Fri, 2010-02-05 at 15:48, TCIS List Acct wrote: > Is it 8.5S4 or S5? A previous post specified S5... > > TIA. > > Niels Ardts wrote: > > Hi, > &

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
running 7.6 upwards and your junos is released before jan 2009 you should upgrade/downgrade immediatlythats the only real solution. Regards, Jonas On Tue, 2010-01-12 at 21:46, André Luiz Bernardes wrote: > Ok, the problem is real and the tcp bug looks like the major one. But > has anyone

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
not vulnerable. So after all the problematic code must have been introduced in 7.6. Regards, Jonas On Tue, 2010-01-12 at 20:49, Tim Eberhard wrote: > Jonas, > > Correct firewall filters *will* block it as the firewall filter will > keep the tcp port even responding. However if your

Re: [j-nsp] JUNOS vulnerability with malformed TCP packets

2010-01-12 Thread Jonas Frey
this on all releases. So ACL's do work for some extend. Also you need an open port for this to work (BGP etc). Regards, Jonas Frey On Fri, 2010-01-08 at 17:41, Florian Weimer wrote: > * Barry Greene: > > > The information is in the security advisory. > > Are the PSNs the se

Re: [j-nsp] Compatible RAM for RE

2009-12-03 Thread Jonas Frey
This was a RE-333long time ago. Maybe the datasheet was changed over time...not sure. Havent tested this with a RE-400. This ram shouldnt be more than a couple of bucks...so if you pick the wrong one it shouldnt hurt too much. Regards, Jonas On Thu, 2009-12-03 at 16:11, Andy Harding wrote

Re: [j-nsp] Compatible RAM for RE

2009-12-03 Thread Jonas Frey
We used: Kingston KVR133X72C2/256 Also have a look at: http://juniper.cluepon.net/index.php/Route_Engine_DRAM_Compatibility#RE-2.0_Generic_DRAM Regards, Jonas On Thu, 2009-12-03 at 09:23, Andy Harding wrote: > Welch, Bryan wrote: > > We bought ours directly from Crucial for our M7i

Re: [j-nsp] death by branding

2009-10-29 Thread Jonas Frey
ohh my god On Thu, 2009-10-29 at 19:58, Richard A Steenbergen wrote: > http://www.e-gerbil.net/juniper_style_guide.pdf > http://www.e-gerbil.net/cjr.png > > With apologies to Carl's Jr. :) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net h

Re: [j-nsp] Compatibilty between FPC and E-FPC

2009-10-19 Thread Jonas Frey
Hello, yes thats perfectly possible. But take care, beginning with JunOS 9.2 (iirc) the old FPC is no longer supported AND will not work, only E-FPC will work. Regards, Jonas On Mon, 2009-10-19 at 13:02, iber-x wrote: > Hi all, > > does Juniper support an FPC and E - FPC at the

Re: [j-nsp] M7i Hard Disk Replacement

2009-08-14 Thread Jonas Frey
I recommend using SSD's, see: http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash Regards, Jonas > >> Hello, > >> > >> I was wondering if anyone has successfully replaced a hard disk on a M7i > >> RE-5.0. If so with what m

  1   2   >