[j-nsp] icmp pings source from vrrp vip address

2014-03-03 Thread snort bsd
hi all: could i send out icmp pings sourced from vrrp vip address? i can ping a host successfully when i sourced pings from physical ip addresses but it doesn't seem to be working for vrrp vip address, even on vrrp master. thanks. ___ juniper-nsp maili

[j-nsp] smartctl for junos

2014-01-07 Thread snort bsd
hi all: there is smartd running on junos, but i am not able to find "smartctl" utility for smartd. thanks ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ip fragmentation, different mtu sizes

2013-12-17 Thread snort bsd
nd unfragmented ICMP packets by turning on the no-fragment flag.  On JunOS, it's 'do-not-fragment'; in IOS, it depends a lot on the version but it's there.    HTH. brent sweeny, indiana university On 12/17/2013 8:03 PM, snort bsd wrote: > hi, all: > > i have a geneti

[j-nsp] ip fragmentation, different mtu sizes

2013-12-17 Thread snort bsd
hi, all: i have a genetic question regarding ip fragmentation. i have two routers; one is cisco and another is juniper. they connected back to back with default ethernet mtu (cisco 1522 and juniper 1518, of course with vlan on both ends). i understand that two vendors have different ways of cal

Re: [j-nsp] 3750 and 4200

2013-03-14 Thread snort bsd
thanks all for replies. both ends (physical are up now, with no lacp. as simple as just rebooted cisco switch. really lacp isn't my concern at this moment. From: snort bsd To: Jonathan Lassoff ; Eric Krichbaum Cc: juniper-nsp Sent: Thursday, 14

Re: [j-nsp] 3750 and 4200

2013-03-14 Thread snort bsd
_dave From: Jonathan Lassoff To: Eric Krichbaum Cc: snort bsd ; juniper-nsp Sent: Wednesday, 13 March 2013 10:15 PM Subject: Re: [j-nsp] 3750 and 4200 On Wed, Mar 13, 2013 at 6:36 PM, Eric Krichbaum wrote: > More likely, it's the forced "on" mode which disa

Re: [j-nsp] 3750 and 4200

2013-03-14 Thread snort bsd
well, i deliberately not to activate lacp at this moment. just want to see physical links up... _dave From: Eric Krichbaum To: 'Jonathan Lassoff' ; 'snort bsd' Cc: 'juniper-nsp' Sent: Wednesday, 13 March 2013 9:36 PM Subj

Re: [j-nsp] 3750 and 4200

2013-03-14 Thread snort bsd
well, both ends are copper links, but links on 3750 are f10/100 and that of juniper are 10/100/1000. _dave From: Jonathan Lassoff To: snort bsd Cc: juniper-nsp Sent: Wednesday, 13 March 2013 9:33 PM Subject: Re: [j-nsp] 3750 and 4200 It's strange

[j-nsp] 3750 and 4200

2013-03-13 Thread snort bsd
hi all: i have a cisco 3750 fastethernet switch connecting to a juniper 4200, with portchannel on cisco side and aggregated interface juniper side. the cisco side shows as "connected" but juniper side remain down. could anyone give me some ideas? no lacp activated on both side. for cisco: cis

[j-nsp] l2pt issues

2012-11-13 Thread snort bsd
 hello, experts: i am trying to get following topology (l2pt) to work; basically i am trying to get l2pt (layer-2 protocol tunneling) to tunnel lacp frames: ex4200-1(ae0, lacp) <> ex4200-2(l2pt, pe) ex4200-3 ex4200-4(l2tp, pe) <> (ae0, lacp) ex4200-5 from the perspective of

[j-nsp] e320 interfaced based packet mirroring

2011-10-19 Thread snort bsd
hi all i need help on the subject of interfaced based packet mirroring in order to capture transit traffic flows on a certain interfaces. --- |  | | gig11/0/4   {| interface with transit traffic flows | 

Re: [j-nsp] SNMP v3 configurations

2010-09-01 Thread snort bsd
thanks:) From: Nugroho WH Adisubrata To: snort bsd Cc: juniper-nsp Sent: Wed, 1 September, 2010 4:55:22 PM Subject: Re: [j-nsp] SNMP v3 configurations Snort, You missed VACM configuration. Please add following VACM configuration: enug...@gundul# show

[j-nsp] SNMP v3 configurations

2010-09-01 Thread snort bsd
Hi all: here is my configuration (for testing) for snmp v3: v3 { usm { local-engine { user tester { authentication-sha { authentication-key "xxx"; ## SECRET-DATA } privacy-none; } }

[j-nsp] radius authentication

2010-08-29 Thread snort bsd
Hi, all: I am trying to understand the radius authentication process supported by Juniper routers. on JNCIS book: [quote]A user supplies a name of Scott to the remote authentication server, which accepts the request. However, Scott is not a current username in the local password database.

Re: [j-nsp] virtual-chassis and interfaces

2010-08-06 Thread snort bsd
:23 AM > Hi, > > Just configure them.  Just remember about naming > convention. > > Regards, > Piotr Bratkowski > > > > > W dniu 2010-08-06 21:00, snort bsd pisze: > > Hi all: > > > > With virtual-chassis, after I login, I only see > int

[j-nsp] virtual-chassis and interfaces

2010-08-06 Thread snort bsd
Hi all: With virtual-chassis, after I login, I only see interfaces (under stanza "interfaces") on master, not those interfaces on the back up mode or line card mode. How could I configure those interfaces that are not on master? do I have to login each physical switch in order to configure tho

[j-nsp] ex4200 virtual-chassis and vme access

2010-08-04 Thread snort bsd
hi all: i had access via vme interface for two chained ex4200. but the vme ip address is no longer working after i configured two ip addresses on interface of me0 under stanzas "groups member0" and "groups member1". right now i can access each member of this virtual-chassis separately but not

Re: [j-nsp] multicast questions (twisted)

2010-04-20 Thread snort bsd
Flags: S Timeout: Infinity -- I must have missed something in my configurations --- On Wed, 21/4/10, snort bsd wrote: > From: snort bsd > Subject: Re: [j-nsp] multicast questions > To: "juniper-nsp" , "N

Re: [j-nsp] multicast questions

2010-04-20 Thread snort bsd
Downstream neighbors: Interface: fe-1/3/0.0 172.20.30.1 State: Join Flags: SRW Timeout: Infinity ----- Am I missing something? --- On Wed, 21/4/10, snort bsd wrote: > From: snort bsd > Subject: Re: [j-nsp] multicast quest

Re: [j-nsp] multicast questions

2010-04-20 Thread snort bsd
ote: > From: Nilesh Khambal > Subject: Re: [j-nsp] multicast questions > To: "snort bsd" , "juniper-nsp" > > Received: Tuesday, 20 April, 2010, 6:08 PM > Do you know if Source is registered > with the RP? SPT flag is set on (S,G) on > the RP so it must

[j-nsp] multicast questions

2010-04-19 Thread snort bsd
Hi all: I have an active multicast receiver looking for source 225.0.0.1: - u...@hs3# run show pim join extensive Instance: PIM.master Family: INET Group: 225.0.0.1 Source: * RP: 10.100.3.4 Flags: sparse,rptree,wildcard Upstream

[j-nsp] JUNOS upgrade question

2010-04-12 Thread snort bsd
Hi all: I have a router with internal CF in it. I upgraded JUNOS to version 8.5R4.3 but i noticed the hard drive still stay at the old version of code. is there any way i can reverse it operation; copy the new code from the intyernal CF to the hard drive? Thanks. ___

Re: [j-nsp] lsp required for vpls?

2009-08-07 Thread snort bsd
I think you got confused with concepts of signaling protocol and lsp istelf. mpls is foundation of all new technologies that rely on mpls label switching. but mpls lsp depends on signaling protocols such as rsvp or ldp for the label swapping. bgp is still the protocol that utilize the lsp (in t

[j-nsp] M7i crashes

2009-06-02 Thread snort bsd
Hi all: I have one M7i; sometimes for some unknown reasons it crashes. From the console port, I can see it is in following state: db> after I typed "c" and I got: Fatal trap 12: page fault while in kernel mode fault virtual address = 0x58 fault code = supervisor read, page not

[j-nsp] create a bootable compact flash

2009-04-16 Thread snort bsd
Hi all: How could i create a bootable compact flash? Basically I want the m7i boot from compact flash and running the system off the compact flash. Thanks The new Internet Explorer 8 optimised for Yahoo!7: Faster, Safer, Easier. ___ juniper-ns

[j-nsp] Simple QoS question

2009-02-19 Thread snort bsd
Hi all: For default classifier, what is the difference between the following two? l...@lab_r1> show class-of-service classifier type inet-precedence Classifier: ipprec-default, Code point type: inet-precedence, Index: 12 Code point Forwarding classLoss priority

[j-nsp] indrect route

2009-01-02 Thread snort bsd
Hi all: what is "indirect route"? i have route received from a route reflector and it is marked as "Indirect": lab-l3vpn.inet.0: 17 destinations, 25 routes (17 active, 0 holddown, 0 hidden) + = Active Route, - = Last Active, * = Both 192.168.0.6/32 *[BGP/170] 00:02:12, localpref 100, from 1

[j-nsp] independent-domain

2008-12-29 Thread snort bsd
hello, all: does anyone ever used the feature of "independent-domain"? CE(AS10) --- PE(AS100) --- (AS100)PE --- CE(AS10) few questions: 1) what kind of BGP between CE and PE? IBGP between PE and CE with "independent-domain" knob under VRF? if so, is the IBGP configuration as the same as the r

Re: [j-nsp] copy vpn routes to inet.0

2008-12-24 Thread snort bsd
nt. in fact, if that just for the lo0.300, i could just use "interface-routes" statement under that vpn instance to achieve the same result. --- On Wed, 24/12/08, Richmond, Jeff wrote: From: Richmond, Jeff Subject: RE: [j-nsp] copy vpn routes to inet.0 To: "snort bsd" , "

[j-nsp] copy vpn routes to inet.0

2008-12-23 Thread snort bsd
Hi all: Could those routes in the L3VPN table be copied to inet.0? I tried to use policy and it doesn't seem to be working: term l3vpn->inet.0 { from { rib l3vpn.inet.0; route-filter 100.100.0.0/16 orlonger; } to rib inet.0; then { accept; } } _dave

[j-nsp] L2VPN interface configuration

2008-12-17 Thread snort bsd
Hi, all: I am trying to configure an interface with L2VPN and kept getting error: interfaces { fe-0/0/1 { vlan-tagging; encapsulation vlan-ccc; unit 5 { vlan-id 5; family inet { address 10.0.0.5/30; } }

[j-nsp] IS-IS route selection

2008-12-03 Thread snort bsd
Hi all: quick question: if an is-is router receives the same route from different adjacencies and all of them have the same metric values besides they all have the same preference, then what is next criteria to select the route for routing table? Start your day with Yahoo!7 and win a

[j-nsp] interface type for 4-port DS3

2008-10-08 Thread snort bsd
Hello: What kind interface is that for 4-port DS3 PIC? Those are not regular BNC, nor mini BNC either. Thanks Make the switch to the world's best email. Get Yahoo!7 Mail! http://au.yahoo.com/y7mail ___ juniper-nsp mailing list juniper-nsp@pu

Re: [j-nsp] ICMPv6 & 6PE network

2008-06-04 Thread snort bsd
Thanks again. Yes, I missed one end of "family inet6" (core-facing interface). It is working. The LSP uses lookpback, but the ICMPv6 uses interface. Best - Original Message From: Stacy W. Smith <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: juniper

Re: [j-nsp] ICMPv6 & 6PE network

2008-06-03 Thread snort bsd
yes. thanks - Original Message From: Daniel Verlouw <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: Juniper-Nsp Sent: Tuesday, 3 June, 2008 10:51:16 PM Subject: Re: [j-nsp] ICMPv6 & 6PE network On Jun 4, 2008, at 3:46 AM, snort bsd wrote: > Any ideas?

Re: [j-nsp] ICMPv6 & 6PE network

2008-06-03 Thread snort bsd
y W. Smith <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: juniper-nsp Sent: Tuesday, 3 June, 2008 7:03:37 PM Subject: Re: [j-nsp] ICMPv6 & 6PE network On Jun 3, 2008, at 7:46 PM, snort bsd wrote: > Hello all: > > I used MPLS LSP connecting two different IPv6 dom

[j-nsp] ICMPv6 & 6PE network

2008-06-03 Thread snort bsd
Hello all: I used MPLS LSP connecting two different IPv6 domains (6PE, RFC4798). Both sides (IPv6 domains) see each other IPv6 routes, which means my IPv4 MPLS based backbone successfully delivered the IPv6 routes. But for some reasons, both customers can't ping each other even though they can

Re: [j-nsp] isis adjacencies and isis database entries

2008-03-31 Thread snort bsd
1 and m2 entries. - Original Message From: Danny McPherson <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: juniper-nsp Sent: Sunday, 30 March, 2008 9:14:38 AM Subject: Re: [j-nsp] isis adjacencies and isis database entries On Mar 28, 2008, at 1:08 PM, snort bsd wrote: >

Re: [j-nsp] isis adjacencies and isis database entries

2008-03-28 Thread snort bsd
ink-state database: r2.00-00 Sequence: 0x5ad8, Checksum: 0xb90c, Lifetime: 65330 secs ... IS neighbor: r1.00 Metric:10 - Original Message From: Stefan Fouant <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: juniper-nsp S

Re: [j-nsp] isis adjacencies and isis database entries

2008-03-28 Thread snort bsd
s (connecting r1 and r2) in both directions. BTW, the interfaces are Gigabit Ethernet type, but operating in ptp mode. Thanks -Dave - Original Message From: Stefan Fouant <[EMAIL PROTECTED]> To: snort bsd <[EMAIL PROTECTED]> Cc: juniper-nsp Sent: Friday, 28 March, 2008

[j-nsp] isis adjacencies and isis database entries

2008-03-28 Thread snort bsd
Hello, all: Shouldn't the entries in the output of "show isis adjacency" be one-to-one relationship with the neighbor entries in "show isis database details"? Assume r1 peers with r2, r3 and r4 in level 2 (single connection to each neighbor) [EMAIL PROTECTED]> show isis database level 2 r1.00-

[j-nsp] circuit status vector

2008-02-27 Thread snort bsd
Hi all: Am I understanding the "circuit status vector" right? Instance: sample-l2vpn Local site: l2vpn-1 Number of local interfaces: 1 Number of local interfaces up: 1 t1-0/1/1:2.513 2 800142 1 2 100 status-vector: 80 connection-site

Re: [j-nsp] IPv6 subnetting

2008-02-03 Thread snort bsd
, 8~11, 12~15, and so on... fec0::14/126 is not the first address of that subnet. Or am I missing something? Dave - Original Message From: Mark Kamichoff <[EMAIL PROTECTED]> To: a. r.isnaini. rangkayo sutan <[EMAIL PROTECTED]> Cc: snort bsd <[EMAIL PROTECTED]&g

Re: [j-nsp] IPv6 subnetting

2008-01-31 Thread snort bsd
Sorry error message was with address 2:10::14/126. I also tried so-called "site-local address", now deprecated, and had similar errors. - Original Message ---- From: snort bsd <[EMAIL PROTECTED]> To: juniper-nsp Sent: Thursday, 31 January, 2008 11:21:07 PM Subject: [j-nsp]

[j-nsp] IPv6 subnetting

2008-01-31 Thread snort bsd
Hi all: >From RFC4291, the IPv6 addressing scheme is more like nowadays IPv4 VLSM. But >IPv6 doesn't have "broadcasting addresses". Then how does that affect IPv6 >addressing? Say, fec0:10:10:10::/64, intuitively we know that we can't use the first address, does that mean we can use rest of ad

Re: [j-nsp] IPv6 questions

2008-01-29 Thread snort bsd
r specific implementation. Thanks all - Original Message From: Scott Morris <[EMAIL PROTECTED]> To: Erik Nordmark <[EMAIL PROTECTED]>; snort bsd <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED]; juniper-nsp Sent: Tuesday, 29 January, 2008 12:36:55 PM Subject: RE: IPv6 questions And un

Re: [j-nsp] IPv6 questions

2008-01-28 Thread snort bsd
Never mind it is the VLAN number. But which RFC define this? Thanks all Dave - Original Message From: snort bsd <[EMAIL PROTECTED]> To: [EMAIL PROTECTED]; juniper-nsp Sent: Monday, 28 January, 2008 3:05:59 PM Subject: IPv6 questions Hi All: With link-local IPv6 addres

[j-nsp] IPv6 questions

2008-01-28 Thread snort bsd
Hi All: With link-local IPv6 address, the converting from MAC-48 to EDU-64 address format (FF FE stuffing). How does the VLAN tags affect the conversion? With the rule of FF FE stuffing, I can see clearly work on the ptp interfaces. But on those Ethernet based VLANs, it doesn't seem to follow t

[j-nsp] keepalive is zero?

2007-10-19 Thread snort bsd
Hi all: I keep seeing an message poping up (using "monitor interface") like this: "Interface warnings: o Received keepalive count is zero" According to the Juniper docs, it indicates the interface failures but the interface is up and working except is dropping packets (output). By the way, I d

[j-nsp] hardware questions

2007-06-11 Thread snort bsd
hi: what are BCHIP and ifl? we have few m20 boxes and trying to understand what in the messages file. tia _ How would you spend $50,000 to create a more sustainable environment in Australia?

[j-nsp] sonet/sdh parameters

2007-06-06 Thread snort bsd
hi all: i have some questions regarding some parameters of sonet/sdh: 1) what is RS-BIP8 2) what is MS-BIP24 3) what is MS-FEBE i found an old post from marcin; he really explained the HP-FEBE and HP-BIP8 very well. it would be great if some can also give out sources for those parameters. thank

[j-nsp] multiprotocol bgp and bgp reflection

2007-01-23 Thread snort bsd
Hi all: Just read through the white paper "BGP Route Reflection in Layer 3 VPN Networks". Usually MBGP is activated on PE routers; ie. PE-to-PE and P routers need no configuration of MBGP. But with the Router Reflectors in the middle of PATHs of PE-to-PE, how could this be implemented? Does anyone