On 24-Jun-22 9:28, Saku Ytti via juniper-nsp wrote:
Tunnel interfaces are not supported on PE/Paradise, I don't think this
changed in BT/Triton either.
>
> However you can decapsulate/encapsulate on ingress firewall filter, e.g.:
On the other hand, there is fti (flexible tunnel interface)
On 6/27/22 21:22, Mark Tinka wrote:
I'm having a meeting with them about all this on Thursday. If anything
is exciting, and I can share, I will.
As promised, below is what has developed:
As it pertains to the both the MX204 and MX10003, Juniper have made the
following amendments:
On 6/27/22 18:22, Olivier Benghozi via juniper-nsp wrote:
I guess that the right thing to do would be to provide a licence based model
for MX304 with an entry level capacity licence priced as the MX204 currently
is...
That would, indeed, be the right thing. But it's the wild west in
On 6/27/22 18:15, Giuliano C. Medalha wrote:
MX204 was announced at EoS
We have used MX204 for last 5 years. It was a huge success for any
function it was designed.
We intend to keep running ours until the 2nd coming :-).
I don't have time for Juniper's nonsense.
Juniper only
I guess that the right thing to do would be to provide a licence based model
for MX304 with an entry level capacity licence priced as the MX204 currently
is...
> Le 27 juin 2022 à 18:15, Giuliano C. Medalha via juniper-nsp
> a écrit :
>
> MX204 was announced at EoS
>
> We have used MX204
[j-nsp] GRE tunnels on a QFX10002-60C
On 6/24/22 11:01, Saku Ytti wrote:
> Many ways to skin the cat. If you can dedicate small router to the
> scrubber (or routing-instance if you can't) and you run BGP-LU, so you
> avoid useless egress IP lookup, you just ensure that the scrubber P
On 6/24/22 11:01, Saku Ytti wrote:
Many ways to skin the cat. If you can dedicate small router to the
scrubber (or routing-instance if you can't) and you run BGP-LU, so you
avoid useless egress IP lookup, you just ensure that the scrubber PE
or scrubber instance doesn't have the more
On Fri, 24 Jun 2022 at 10:54, Mark Tinka via juniper-nsp
wrote:> After failing to get Netscout to
natively support IS-IS, we came up with
> a rather convoluted - but elegant - way to transport on-ramp/off-ramp
> traffic into and out of our scrubbers.
>
> Basically, we use lt-* (logical tunnel)
On 6/24/22 09:28, Saku Ytti via juniper-nsp wrote:
In many ways filter based decapsulation is actually preferable to
interface, so I have no large qualms here. What I'd actually want is
egress filter decap, instead of ingress. So I could point my GRE
tunnels to random addresses at customer
Tunnel interfaces are not supported on PE/Paradise, I don't think this
changed in BT/Triton either.
However you can decapsulate/encapsulate on ingress firewall filter, e.g.:
term cleanPipe:xe-0-4-1-1 {
from {
source-address {
a.b.c.d/32;
I've got an open support case with Juniper, but as it's gotten nowhere
since opening it last night, I figured I'd try some crowdsourcing :)
Does anyone have working GRE tunnels terminated to a QFX10002-60C? We've
got a GRE tunnel mesh of several dozen sites, using a mix of Arista 7280s
and
11 matches
Mail list logo
