Re: [j-nsp] Config help for basic MPLS setup

2012-09-30 Thread Abdullah Baheer
Sorry for the confusion, yeah RSVP/CCC... no LDP on EX, at least not in the version that we were running (9.x) --- On Thu, 9/27/12, Chris Kawchuk wrote: From: Chris Kawchuk Subject: Re: [j-nsp] Config help for basic MPLS setup To: "Abdullah Baheer" Cc: "Phil Mayers

Re: [j-nsp] Config help for basic MPLS setup

2012-09-26 Thread Chris Kawchuk
Really? Wow. ! That must be new that the EX4200 supports LDP. Which version of JunOS did they add LDP support into the 32/42 EX-series? Just tried checking the JNPR website and the data sheets. All I can find officially is RSVP/CCC support. Let me know where you spotted that. That opens up an

Re: [j-nsp] Config help for basic MPLS setup

2012-09-26 Thread Abdullah Baheer
Actually Chris, in my experience, i think you must have LDP to run LSP/CCC on ex-4200, cough.. cough... --- On Wed, 9/26/12, Chris Kawchuk wrote: From: Chris Kawchuk Subject: Re: [j-nsp] Config help for basic MPLS setup To: "Phil Mayers" Cc: juniper-nsp@puck.nether.net Date:

Re: [j-nsp] Config help for basic MPLS setup

2012-09-25 Thread Chris Kawchuk
I've always had troubles using an EX4200 as a "P" router. The only way Ive gotten it to "kinda" work is to build an LSP with the endpoint having protocols { mpls { explicit-null; }}, so any EX4200 in the middle doesn't try to 'pop' the outer label if it happens to be the penultimate… although m

Re: [j-nsp] Config help for basic MPLS setup

2012-09-25 Thread Phil Mayers
On 09/25/2012 03:16 AM, Tim Jackson wrote: I'm pretty sure this is the case. EX4200 will not forward anything with > 1 label. Just... wow. What is MPLS even *for* on those boxes? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.ne

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread sthaug
> Multihop BGP between SRX & MX? The EXs don't need to learn the labels that > are transiting? P routers only need to learn the *outer* label (which tells you how to get to the destination PE). They learn this from LDP or RSVP. Steinar Haug, Nethelp consulting, sth...@nethelp.no

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Matthew Crocker
Damn, so it looks like I'm stuck with ethernet-ccc on the SRX through the EX to the MX. It'll work in my application but is not what I planned on doing. -Matt -- Matthew S. Crocker President Crocker Communications, Inc. PO BOX 710 Greenfield, MA 01302-0710 E: matt...@crocker.com P: (413) 746

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Tim Jackson
I'm pretty sure this is the case. EX4200 will not forward anything with > 1 label. On Sep 24, 2012 8:40 PM, "Jeff Wheeler" wrote: > On Mon, Sep 24, 2012 at 6:55 PM, Caillin Bathern > wrote: > > On point 2 there, the ex can only process one label at a time but there > could be a larger label stac

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Jeff Wheeler
On Mon, Sep 24, 2012 at 6:55 PM, Caillin Bathern wrote: > On point 2 there, the ex can only process one label at a time but there could > be a larger label stack than that so it can be a P router. I've been told the EX4200 will actually drop frames with more than one MPLS label. If you are able

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Matthew Crocker
cker [mailto:matt...@corp.crocker.com] > Sent: Tuesday, 25 September 2012 9:16 AM > To: Caillin Bathern > Cc: sth...@nethelp.no; juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] Config help for basic MPLS setup > > > The EX4200s will be P routes so I should be ok. I'll

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Caillin Bathern
: sth...@nethelp.no; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Config help for basic MPLS setup The EX4200s will be P routes so I should be ok. I'll get BGP running on the SRX & EXs tomorrow. The SRX & MX80 will be PE. I'll update tomorrow if I can't get

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Caillin Bathern
On point 2 there, the ex can only process one label at a time but there could be a larger label stack than that so it can be a P router. -Original Message- From: sth...@nethelp.no Sent: 25/09/2012 8:25 AM To: matt...@corp.crocker.com Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Matthew Crocker
e a P router. > From: sth...@nethelp.no > Sent: 25/09/2012 8:25 AM > To: matt...@corp.crocker.com > Cc: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] Config help for basic MPLS setup > > > I have an MX80 and 3 EX4200s connected via 10GigE running MPLS, OSPF, etc

Re: [j-nsp] Config help for basic MPLS setup

2012-09-24 Thread sthaug
> I have an MX80 and 3 EX4200s connected via 10GigE running MPLS, OSPF, etc. > I have some ethernet-ccc links working between the gear. > > I'm trying to setup my first MPLS based routing VRF (L3VPN ???) between a new > SRX210 and the MX80 (going through the EX4200s). > > Eventually the confi

[j-nsp] Config help for basic MPLS setup

2012-09-24 Thread Matthew Crocker
Hello, I have an MX80 and 3 EX4200s connected via 10GigE running MPLS, OSPF, etc. I have some ethernet-ccc links working between the gear. I'm trying to setup my first MPLS based routing VRF (L3VPN ???) between a new SRX210 and the MX80 (going through the EX4200s). Eventually the configurat

Re: [j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Atif Saleem
irst.net] > Sent: Wednesday, 29 August 2012 01:13 > To: Dale Shaw > Cc: Josh Farrelly; juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] Config help with an SRX110 & ADSL > > Also, your DHCP propagate setting is referencing fe-0/0/0.0 whereas is should > be referenci

Re: [j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Josh Farrelly
From: Stefan Fouant [mailto:sfou...@shortestpathfirst.net] Sent: Wednesday, 29 August 2012 01:13 To: Dale Shaw Cc: Josh Farrelly; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Config help with an SRX110 & ADSL Also, your DHCP propagate setting is referencing fe-0/0/0.0 whereas is should be re

Re: [j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Stefan Fouant
Oops, I meant to say that you should replace fe-0/0/0.0 with the at-1/0/0.0 interface under the propagate settings, since at-1/0/0.0 is the one receiving the DHCP parameters from upstream. Stefan Fouant JNCIE-SEC, JNCIE-SP, JNCIE-ENT, JNCI Technical Trainer, Juniper Networks Follow us on Twitte

Re: [j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Stefan Fouant
Also, your DHCP propagate setting is referencing fe-0/0/0.0 whereas is should be referencing vlan.0, vlan.1 and vlan.2. Per the docs, the propagate option applies to the logical interface which will receive TCP/IP settings from the external network for propagation to the DHCP pool running on the

Re: [j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Dale Shaw
[Apologies for top post] There are a few problems with the config (once you get basic comms up you'll need to look at your IPsec settings) but I suspect the main problem is that interface at-1/0/0.0 isn't assigned to a security zone (untrust). Cheers, Dale On Aug 28, 2012 8:10 PM, "Josh Farrelly

[j-nsp] Config help with an SRX110 & ADSL

2012-08-28 Thread Josh Farrelly
Hi guys I'm having a few issues getting traffic to pass on an SRX110 I'm setting up for a branch office. It may be something simple as this is one of the first times setting up a Juniper device. I have a default route, source NAT on the egress zone and policies configured but I can't pass traf

Re: [j-nsp] config help

2011-10-10 Thread Richard Zheng
Most customers are from layer 2 MSANs in several COs. A few are from legacy ATM based DSLAM. We need to support both Internet and MPLS-VPN customers. Ideally we can use E-series to build a full blown BRAS network. However since all customers use static IP address only, we don't need the standard BR

Re: [j-nsp] config help

2011-10-10 Thread Stefan Fouant
Haha looks like Robert already responded to you... At least it's nice to know I'm not crazy and someone else would give you similar advice... :-b Stefan Fouant JNCIE-SEC, JNCIE-SP, JNCIE-ER, JNCI Technical Trainer, Juniper Networks Follow us on Twitter @JuniperEducate Sent from my iPad On Oct

Re: [j-nsp] config help

2011-10-10 Thread Stefan Fouant
If you are using EX Series, take a look at PVLANs - http://www.juniper.net/techpubs/en_US/junos10.0/topics/concept/private-vlans-ex-series.html This allows you to split broadcast domains into separate isolated broadcast subdomains to constrain connectivity while at the same time keeping devices

Re: [j-nsp] config help

2011-10-10 Thread Robert
You should take a look at Private VLANs. Here is a link for EX series but the concept is the same. http://www.juniper.net/techpubs/en_US/junos10.0/topics/concept/private-vlans-ex-series.html Robert Juric On Oct 10, 2011, at 3:59 AM, Richard Zheng wrote: > Hi, > > Here is our setup. Customer

[j-nsp] config help

2011-10-10 Thread Richard Zheng
Hi, Here is our setup. Customer A comes in on vlan 2001, customer B on vlan 2002 and etc. We may uses separate subnets for each vlan. However it wastes lots of IPs. Is there a way to use the same subnet, e.g. vlan 2001 uses IP 10.0.0.10, and vlan 2002 uses IP 10.0.0.11 and 10.0.0.12. How about use