Re: [j-nsp] event-options to modify configuration

2015-04-21 Thread Phil Shafer
Chen Jiang writes: change-configuration { retry count 3 interval 1; commands { set interface ge-1/0/0 description test; Try changing interface to interfaces in this line. The commands need to be explicit/exact. Thanks, Phil

[j-nsp] DHCPv6 routing instance to reach server, or fooling flow sessions with firewall filters

2015-04-21 Thread Mike Williams
Hey all, Got a problem here I'm hoping someone can help with. Client - M-series (relay) - (VLAN 2920) J-series (VLAN 100) - Server Server - (VLAN 100) J-series (VLAN 2980) inet6.0 on the M knows to reach the DHCPv6 server via VLAN 2920, the J-series dutifully forwards the packets to the

Re: [j-nsp] VRF route leaking on EX4550

2015-04-21 Thread Raphael Mazelier
Le 20/04/15 17:27, Raphael Mazelier a écrit : In my opinion rib-groups have a more complex syntax than auto-export wich seems natural to me. Anyway with the help of this documentation and templating feature of junos, I ll be able to make a relatively clear configuration. Me again. I'm

[j-nsp] event-options to modify configuration

2015-04-21 Thread Chen Jiang
Hi! Experts I tried to use event-options to change the JUNOS configuration but there is some issue, are you experience the same issue and could shed some light on this. Thanks for your help! lab@r1# show event-options generate-event { Configure-Ot-Change time-of-day 21:44:00 +0800; } policy

[j-nsp] How to enable bfd echo mode

2015-04-21 Thread omar sahnoun
Hi Experts, Can you please help me to enable echo mode of BFD protocol. The BFD session wich i try to make is between a juniper router and an alcatel omniswitch (which support only bfd echo mode for static routes) The software version of juniper router is 12.3R2-S2 Thank you for your help

Re: [j-nsp] event-options to modify configuration

2015-04-21 Thread Chen Jiang
Yes, I have tried the same manual configuration through lab user and it works fine. On Wed, Apr 22, 2015 at 12:43 AM, Pallavi Mahajan pall...@juniper.net wrote: Have you tried checking if the user ‘lab’ can invoke the ‘set interface’ config knob from the CLI? Thanks, Pallavi On 21/04/15

Re: [j-nsp] event-options to modify configuration

2015-04-21 Thread Chen Jiang
Thanks Phil and sorry for my mistake, I should use interface instead of interfaces, it works now. On Wed, Apr 22, 2015 at 3:08 AM, Phil Shafer p...@juniper.net wrote: Chen Jiang writes: change-configuration { retry count 3 interval 1; commands {

Re: [j-nsp] SRX3600 Problem

2015-04-21 Thread Farrukh Haroon
hi cahit have you enabled any screens on the interface under attack? regards farrukh On Tue, Apr 21, 2015 at 7:22 PM, Cahit Eyigünlü cahit.eyigu...@spd.net.tr wrote: We are getting a spoofed ip syn attack. When attack starts and over 100K pps our SRX3600 was losting the connection. And we

Re: [j-nsp] QFX5100 issues with IPv6 hashing

2015-04-21 Thread Anton Yurchenko
Doing more testing I am seeing bad hashing with UDPv6 traffic, TCPv6 traffic looks OK. Maybe it is just that UDP header is not parsed correctly. On 4/21/15 09:34, Anton Yurchenko wrote: Hi, I am using the -P option for iperf, it does vary source port dst port is the same though. Normally

Re: [j-nsp] QFX5100 issues with IPv6 hashing

2015-04-21 Thread Anton Yurchenko
Hi, Under that inet6 stanza you can only turn off certain fields to be used for hashing. I tried playing with them with no visible effect. Asking on this list cause I almost feel this kind of issue would not go unnoticed for so long and that maybe my test setup is wrong. Thanks for your

[j-nsp] SRX3600 Problem

2015-04-21 Thread Cahit Eyigünlü
We are getting a spoofed ip syn attack. When attack starts and over 100K pps our SRX3600 was losting the connection. And we check the status of the device over the Serial connection. But we could not determine why it has been dropped the connection Should somebody help us to over come this

Re: [j-nsp] QFX5100 issues with IPv6 hashing

2015-04-21 Thread Anton Yurchenko
Hi, I am using the -P option for iperf, it does vary source port dst port is the same though. Normally (and with v4) traffic it results in good hashing behavior. Thanks, On 4/18/15 07:21, Michael Loftis wrote: On Friday, April 17, 2015, Anton Yurchenko ayurche...@gmail.com

Re: [j-nsp] event-options to modify configuration

2015-04-21 Thread Pallavi Mahajan
Have you tried checking if the user ‘lab’ can invoke the ‘set interface’ config knob from the CLI? Thanks, Pallavi On 21/04/15 9:10 pm, Chen Jiang iloveb...@gmail.com wrote: Hi! Experts I tried to use event-options to change the JUNOS configuration but there is some issue, are you experience