Re: [j-nsp] dsc interface on qfx5100

2018-10-13 Thread sthaug
>> Yes we (large ISP) tried using dsc interfaces (MX series) to count RTBH >> traffic and found, 1) they don't count, and 2) IPv6 is unsupported for dsc. >> As with many Junos features, there is not parity between IPv4 and IPv6. >> That alone bugged us, but especially as the counters did not work,

Re: [j-nsp] dsc interface on qfx5100

2018-10-13 Thread Saku Ytti
On Fri, 12 Oct 2018 at 16:07, Niall Donaghy wrote: > Yes we (large ISP) tried using dsc interfaces (MX series) to count RTBH > traffic and found, 1) they don't count, and 2) IPv6 is unsupported for dsc. > As with many Junos features, there is not parity between IPv4 and IPv6. > That alone bugged

Re: [j-nsp] dsc interface on qfx5100

2018-10-12 Thread Tom Beecher
No problem! @Niall : I can't remember if there was something under the hood that made the discard *interface* more preferable than just a discard *route*. In our implementation we have a qualified next-hop to send flagged traffic to a local collector box first, and only discard if that's not reach

Re: [j-nsp] dsc interface on qfx5100

2018-10-12 Thread Jason Healy
On Oct 12, 2018, at 9:07 AM, Niall Donaghy wrote: > > Yes we (large ISP) tried using dsc interfaces (MX series) to count RTBH > traffic and found, 1) they don't count, and 2) IPv6 is unsupported for dsc. That's what I needed to know! Back to standard discard routes it is... Thanks to you and T

Re: [j-nsp] dsc interface on qfx5100

2018-10-12 Thread Niall Donaghy
, Niall From: Tom Beecher [mailto:beec...@beecher.cc] Sent: 12 October 2018 16:21 To: Niall Donaghy Cc: Jason Healy ; juniper-nsp Subject: Re: [j-nsp] dsc interface on qfx5100 I’m pretty sure we drilled Juniper about the IPv6 discard interface thing a few months ago and got a feature

Re: [j-nsp] dsc interface on qfx5100

2018-10-12 Thread Tom Beecher
nether.net] On Behalf > Of > Jason Healy > Sent: 12 October 2018 02:37 > To: juniper-nsp > Subject: [j-nsp] dsc interface on qfx5100 > > I'm more of a layer-2 guy, but I'm trying to tighten up a few things on our > qfx5100 that acts as our l3 core here at our campu

Re: [j-nsp] dsc interface on qfx5100

2018-10-12 Thread Niall Donaghy
juniper-nsp Subject: [j-nsp] dsc interface on qfx5100 I'm more of a layer-2 guy, but I'm trying to tighten up a few things on our qfx5100 that acts as our l3 core here at our campus. We use RFC1918 space internally, but I'd like to discard any traffic to these ranges if they aren&

[j-nsp] dsc interface on qfx5100

2018-10-11 Thread Jason Healy
I'm more of a layer-2 guy, but I'm trying to tighten up a few things on our qfx5100 that acts as our l3 core here at our campus. We use RFC1918 space internally, but I'd like to discard any traffic to these ranges if they aren't one of our known subnets. I have that working with standard "disc