Re: [j-nsp] SRX1400 opinions

2013-04-29 Thread Craig Askings
That does remind me though, if you want to use the ISSU feature when upgrading a SRX HA pair. Make sure you check the protocols will be using are supported. http://kb.juniper.net/InfoCenter/index?page=contentid=KB17946 On 29 April 2013 15:46, Andrew Jones and...@commitconfirmed.com wrote:

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread James Howlett
Ok, that is fine. So basically SRX1400 will do fine as BGP router + firewall? Regards, jim Subject: Re: [j-nsp] SRX1400 opinions From: jjo...@danrj.com Date: Sat, 27 Apr 2013 16:11:19 -0500 CC: xmi...@gmail.com; juniper-nsp@puck.nether.net To: jim.howl...@outlook.com Good, you cannot

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread Pavel Lunin
Hi James, So basically SRX1400 will do fine as BGP router + firewall? Yes, it will though using a stateful firewall as ASBR has implications: traffic must go symmetrically, meaning forward and reverse flow of a given session must always go through same ASBR. In practice, it means that either

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread James Howlett
for J-series? Or we should switch to MX now? Thanks again, jim From: plu...@senetsy.ru Date: Sun, 28 Apr 2013 23:30:44 +0400 Subject: Re: [j-nsp] SRX1400 opinions To: jim.howl...@outlook.com CC: jjo...@danrj.com; juniper-nsp@puck.nether.net Hi James, So basically SRX1400 will do fine as BGP

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread Jerry Jones
: [j-nsp] SRX1400 opinions To: jim.howl...@outlook.com CC: jjo...@danrj.com; juniper-nsp@puck.nether.net Hi James, So basically SRX1400 will do fine as BGP router + firewall? Yes, it will though using a stateful firewall as ASBR has implications: traffic must go symmetrically, meaning forward

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread Craig Askings
Hi Jim, On 29 April 2013 05:49, James Howlett jim.howl...@outlook.com wrote: Hi Paul, Thank You very much for the clarification. I will have only one ASBR. As for redundancy I'll go with a single 1400 unit and add a second in the future. Still, a single SRX1400 will be probably more stable

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread Andrew Jones
You will also need to follow this if adding a New/RMA SRX into a cluster which is 10.4 or older, should save you a few days of troubleshooting :) http://kb.juniper.net/InfoCenter/index?page=contentid=KB23929 On Mon, Apr 29, 2013 at 3:33 PM, Craig Askings caski...@ionetworks.com.auwrote: Hi

Re: [j-nsp] SRX1400 opinions

2013-04-28 Thread Andrew Jones
Scratch that, branch SRX's only! On Mon, Apr 29, 2013 at 3:44 PM, Andrew Jones and...@commitconfirmed.comwrote: You will also need to follow this if adding a New/RMA SRX into a cluster which is 10.4 or older, should save you a few days of troubleshooting :)

[j-nsp] SRX1400 opinions

2013-04-27 Thread James Howlett
Hello, I have a network build on J4350 and SRX240 and i need to upgrade. I was thinking about switching two devices for SRX1400. My network has 2 full bgp feeds and some peerings. We use about 150-200Mbps average. Will SRX1400 be a good choice then? Best regards, jim

Re: [j-nsp] SRX1400 opinions

2013-04-27 Thread Tim Eberhard
Srx's have replication issues with large routing environments. Duplicating two full feeds to the redundant peer will take a long time. In some testing many hours. With that said the 1400 can do it. Just keep that one major caveat in mind when you want clustered fail over. Hope this

Re: [j-nsp] SRX1400 opinions

2013-04-27 Thread James Howlett
Hello, Thank you for the heads-up Srx's have replication issues with large routing environments. Duplicating two full feeds to the redundant peer will take a long time. In some testing many hours. With that said the 1400 can do it. Just keep that one major caveat in mind when you

Re: [j-nsp] SRX1400 opinions

2013-04-27 Thread Jerry Jones
Good, you cannot run UTM on the data center SRX at the moment, branch only. On Apr 27, 2013, at 12:55 PM, James Howlett jim.howl...@outlook.com wrote: Hello, Thank you for the heads-up Srx's have replication issues with large routing environments. Duplicating two full feeds to the redundant