[j-nsp] MLAG on EX4500

2011-05-15 Thread Matt Hite
Hello, Anyone have battle time using the virtual-chassis MLAG functionality on the EX4500 series? Has it given you any headache? Any potential pitfalls/bugs/versions I should look out for? We are exploring a high-availability LAG connection from hosts to pairs of redundant EX4500 joined into a

Re: [j-nsp] New J-net publications: Secure the routing engine and Useful tips/tricks

2011-06-30 Thread Matt Hite
You are right in that it may present too great a risk for some people to feel comfortable adopting. Still a nice rule, if even to just use and activate when needed. YMMV. -M On Wed, Jun 22, 2011 at 1:08 AM, Daniel Verlouw dan...@shunoshu.net wrote: Hi, On Wed, Jun 22, 2011 at 02:01, Harry

[j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Matt Hite
Hello -- I've recently deployed some MX960 (Treo) and now need to get their flow data in Arbor Peakflow SP. Unfortunately the instructions in the Arbor manual appear to be very long in the tooth and a bit confusing. Specifically, the integration directions are for a JunOS version 5.5B1.3 on a

Re: [j-nsp] Arbor Peakflow with MX960

2011-08-18 Thread Matt Hite
). Best regards, Jonas Am Donnerstag, den 18.08.2011, 15:33 -0700 schrieb Matt Hite: Thanks to Jeff Richmond and Jonas Frey who were kind enough to provide guidance both on and off-list. This is what I ended up with: [edit interfaces xe-0/0/0 unit 0 family inet filter] +       input-list

[j-nsp] ISIS over GRE (1500 MTU)

2012-03-12 Thread Matt Hite
Wanted to throw this out there to see if anyone else has solved this problem before me. I'd like to set up an IS-IS adjacency over an Internet based GRE tunnel. The tunnel comes up fine in my tests but the IS-IS adjacency never forms. One can probably safely presume this is due to an MTU issue --

[j-nsp] Decode $9$ encrypted Junos secrets

2012-03-19 Thread Matt Hite
/junosdecode Remember to escape your $'s on the CLI when launching the script: $ ./junosdecode.py \$9\$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI junos password decrypter python version by matt hite original perl version by kevin brintnall encrypted version: $9$U-iqf36A1cSTzRSreXxDik.Tzn/CuBI decrypted version

Re: [j-nsp] Decode $9$ encrypted Junos secrets

2012-03-20 Thread Matt Hite
On Tue, Mar 20, 2012 at 10:54 AM, Phil Shafer p...@juniper.net wrote: Matt Hite writes: It's interesting to note just how many things are stored in $9$ encrypted format: RADIUS secrets, IS-IS authentication keys, BGP MD5 secrets, etc. It's really obfuscation, not encryption.  These are values

Re: [j-nsp] console switch to access juniper devices

2012-03-30 Thread Matt Hite
Recently (within past 2 years) did a eval of console servers. I was pretty impressed with OpenGear. I will note I wasn't trying them with Juniper devices, but I'm sure it will work fine. In the end, we went with Avocent mainly because they could control pin-out via software and other vendors

Re: [j-nsp] Console server recommendations

2013-09-06 Thread Matt Hite
Opengear -- http://www.opengear.com/ Very impressive feature set and affordable. On Fri, Sep 6, 2013 at 9:23 PM, Luechtefeld, Daniel G daniel.luechtef...@providence.org wrote: My QFabric will need at least 24 terminal server ports for all the console ports. I'd like one with options for an

Re: [j-nsp] QFX 3500 and IPv6

2013-09-16 Thread Matt Hite
Never base a purchasing decision upon roadmap promises... On Mon, Sep 16, 2013 at 9:11 AM, Robert Hass robh...@gmail.com wrote: Hi I just want to be sure - Will QFX 3500 support IPv6 static routing and OSPFv3 in near future ? Is I see right now it's unsupported (according to Datasheet). I'm

Re: [j-nsp] EX4200 Junos 12.3R3.4 Processor Utilization

2013-09-20 Thread Matt Hite
Not sure about the CPU spikes, but the log spam happens on MX platform running 12.3R1.7, too. Sep 20 22:31:03 sv1-e1-re1 mgd[13435]: UI_OPEN_TIMEOUT: Timeout connecting to peer 'none-process' Sep 20 22:31:03 sv1-e1-re1 mgd[13435]: UI_OPEN_TIMEOUT: Timeout connecting to peer