Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Has no one an idea? It seems, that I am really stuck here. Do I have to activate something on the other side (hence the AdminDown status?) Regards, Matthias Matthias Gelbhardt schrieb: Hello David, great tip. Unfortunatly BFD for BGP - though detailed documented - has no examples flying

Re: [j-nsp] optimized switchover

2009-09-08 Thread Nilesh Khambal
Hi Matthias, What JUNOS version are you running on this router? Is other end router also a Juniper router? Are both peers directly connected or is this a multihop session? Try this doc link see if it can help. http://www.juniper.net/techpubs/software/junos/junos85/swconfig85-routing/id

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! That is the doc I have used for configuring. Both routers are Juniper routers over a Laver 2 Link directly connected. One router is 9.3R2.8 The other 9.4R2.9. Regards, Matthias Nilesh Khambal schrieb: Hi Matthias, What JUNOS version are you running on this router? Is other end

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! No, actually they are directly connected, so I do not know, why there is a multihop output. Perhaps somehow he thinks to be not directly connected and that is the problem? Both routers are J6350. Regards, Matthias Nilesh Khambal schrieb: Hi Matthias, Are these peers established over

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! I do not understand why, but I do not see packets on the other router. But there is no icmp either, when I ping the other side. The ES is on one router, but in routermode. But I have explicitly allowed BFD now. Strange, I do not understand, why the tcpdump is not working correctly.

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! I see now only outgoing BFD packets... Perhaps I should better think about using an IGP for the internal communication. Matthias Matthias Gelbhardt schrieb: Hi! I do not understand why, but I do not see packets on the other router. But there is no icmp either, when I ping the other

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! We are using only iBGP between our routers on different locations. There is a working BGP and data-connection between the two systems. Perhaps I can somehow restart the BFD-daemon? Maybe it crashed? Matthias Sean Clarke schrieb: Are you not using an IGP ? Can you ping between the 2

Re: [j-nsp] optimized switchover

2009-09-08 Thread Sean Clarke
Most daemons would restart. What is in your log message file ? Anything in /var/tmp or /var/crash directories ? I have this running here across 2 x M10's and I don't see an issue, so maybe firewall is causing it. How are you allowing BFD traffic into the ES box ? cheers On 9/8/09 1:27 PM,

Re: [j-nsp] optimized switchover

2009-09-08 Thread Matthias Gelbhardt
Hi! Nothing there: zones { security-zone trust { tcp-rst; host-inbound-traffic { system-services { ping; ssh; snmp; } protocols { bfd; bgp; }

[j-nsp] optimized switchover

2009-09-06 Thread Matthias Gelbhardt
Hi! I wonder what the best practices for optimized switchovers would be? I mean fast comprehension of failed BGP connections? A fibre cut or something like that, how can I be sure, that my routers are detecting the failed session as soon as possible? What would be the best practices fpr

Re: [j-nsp] optimized switchover

2009-09-06 Thread David Ball
There are likely several answers to that, all dependant on your topology and protocol use. But, a good place to start would be BFD (bidirectional forwarding detection). Juniper has decent support for it working with other protocols (OSPF, ISIS, BGP, RIP), notifying them that something may be