[j-nsp] M7i

2011-03-23 Thread cjwstudios
Hello Juniper folks :) I'm setting up a remote metro ethernet site (fiber in a closet) that will have 2 x 100mb BGP transit feeds and a smattering of IGP feeds. The traffic will be service provider transit without inspection, NAT or other services. Since everything is cost sensitive these days I

Re: [j-nsp] vpls and virtual switches (vlan-id none) not supported

2011-03-23 Thread Keegan Holley
On Tue, Mar 22, 2011 at 7:28 AM, wrote: > Hi there, > > I have the following issue: > > switch1--(ciscoPE)-(MX80)switch2 > switch3 > > Switch1 is connected to a Cisco PE > Switch2 and switch 2 are connected to a MX80 in the same bridge doma

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Keegan Holley
> > > So, I'm looking for some form of stacking router/switch solution that could > handle BGP/OSPF/~75 MIR and CIR rules per interface with enforcement by > customer subnet (they are all on the same interface and vlan)/and tcpdump > for easy debug of customer connectivity problems.. > > Possible w

Re: [j-nsp] about 10.4R3 on EX

2011-03-23 Thread Keegan Holley
On Tue, Mar 22, 2011 at 4:15 PM, TiM wrote: > On Wed, March 23, 2011 8:54 am, Kaj Niemi wrote: > > Hi, > > > > > > To whomever who decided to introduce new features in a R3 release, thanks > > ;-( Specifically installing jloader separately is highly appreciated. > > > > You'll probably be thank

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread OBrien, Will
The burst is there to allow traffic to behave nicely. In real life, it allows TCP some time to resize and adjust. If you just lop off traffic it gets a little ugly on performance. You *really* want to combine this with some sort of prioritizer like qos to make it behave the way you want. On Ma

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Martin T
ok, thanks for the clarification! regards, martin 2011/3/23 Chris Adams : > Once upon a time, Anton Delport said: >> I believe this image is supported on the new RE-S-1800's as well at the >> JCS. I does not work on the m10i. > > The download page should probably note this better; right now, the

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Pavel Lunin
Each customer is on a separate non-overlapping subnet, but > NOT on a different VLAN generally.. So filtering at the subnet level is > easy.. does this change your response at all? > > > > > No, not too much. Even worse :) Though, if so, you can try to implement this on EX using an

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Peter Kranz
Hi Will, If I undertand correctly, this version handles a CIR with a certain burst-size in terms of bits.. But doesn't handle the need to allow ongoing bursts above 'bandwidth-limit' if the resources are available.. That unfortunately is the gist of the problem that makes it more difficult

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread OBrien, Will
I create my policers per subnet for convenience. You can do them per IP by simply using /32 but if each customer has a dedicated cider block, it'll be pretty straight forward. Here's how I do it: on an interface, (this is from a MX, but similar context on a srx) unit 201 { family inet

Re: [j-nsp] about 10.4R3 on EX

2011-03-23 Thread Brent Jones
On Wed, Mar 23, 2011 at 11:14 AM, Daniel Roesen wrote: > On Tue, Mar 22, 2011 at 01:48:04PM -0700, Kaj Niemi wrote: >> It took 838 seconds on a 2 member EX4200 VC bundle. Yes, I did time it. ;-) > > Around 13 minutes downtime for a EX3200... > > Best regards, > Daniel > > -- > CLUE-RIPE -- Jabber:

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Peter Kranz
Hi Pavel, Each customer is on a separate non-overlapping subnet, but NOT on a different VLAN generally.. So filtering at the subnet level is easy.. does this change your response at all? Peter Kranz www.UnwiredLtd.com Desk: 510-868-1614 x100 Mobile

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Doug Hanks
There's also a feature in Junos called prefix-action, which enforces per-prefix policing. However I don't believe it's available on the EX. http://www.juniper.net/techpubs/software/junos/junos94/swconfig-policy/prefix-action.html Doug From: EXT - plu...@senetsy.ru Sent: Wednesday, March 23, 20

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Pavel Lunin
>Seems like filters+policers allows you to specify bandwidth-limit > and burst-size.. > > I.e. if you had a pool of 10 mbps.. you could carve it into individual > customer chunks at their... But no way to allow the customer to burst above > that bandwidth-limit to some specified higher BW,

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Doug Hanks
I hear what you're saying, but again I'm not an expert in QoS, so I can only offer limited guidance. I would love to hear more feedback from the rest of the community. It may be possible to use a policer with the loss-priority knob instead of immediately discarding the packets. So at a high-l

Re: [j-nsp] Tower top switch/router recommendation..

2011-03-23 Thread Peter Kranz
Hi Doug, Seems like filters+policers allows you to specify bandwidth-limit and burst-size.. I.e. if you had a pool of 10 mbps.. you could carve it into individual customer chunks at their... But no way to allow the customer to burst above that bandwidth-limit to some specified higher BW,

Re: [j-nsp] about 10.4R3 on EX

2011-03-23 Thread Daniel Roesen
On Tue, Mar 22, 2011 at 01:48:04PM -0700, Kaj Niemi wrote: > It took 838 seconds on a 2 member EX4200 VC bundle. Yes, I did time it. ;-) Around 13 minutes downtime for a EX3200... Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 __

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Pavel Lunin
No need to install in on M10i just because it has a 1-core 32-bit CPU and less (much less :) than 4GB of RAM which you can address (the only advantage of 64-bit JUNOS by now) with x64. So even if you'd managed to push it into RE-850, it wouldn've given you anything. 2011/3/23 Martin T > Has any

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Chris Adams
Once upon a time, Anton Delport said: > I believe this image is supported on the new RE-S-1800's as well at the > JCS. I does not work on the m10i. The download page should probably note this better; right now, the 64 bit image is first in the list and says it works on M and MX (not just some mod

Re: [j-nsp] SRX650 Failover Test Issue

2011-03-23 Thread Pavel Lunin
2011/3/23 Chen Jiang > It's a by design behavior. When control link or fabric link disconnected, > the current RG0 master node will remain in master status but the current > RG0 backup node will disable itself to avoid split-brain issue, "Disable" > means the node will offline all SPC/NPC and Li

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Doug Hanks
The 64-bit versions of Junos are the for the new routing engines for the MX series. They're coming with 64-bit processors and SSD hard drives. Doug -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Martin T Sent: Wedn

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread David Lockuan
Hi Martin, >From the price-list of today, I have been reviewing that there are only RE of 64bit for T1600 and T640. These are the models of RE's: RE-DUO-C1800-8G-BB Routing engine with dual core 1800MHz processor, SSD and 8GB memory, Base Bundle T1600, T640 RE-DUO-C1800-8G-R Routing engine wit

Re: [j-nsp] SRX650 Failover Test Issue

2011-03-23 Thread Doug Hanks
I recommend using a backup-router as well. -Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Walaa Abdel razzak Sent: Wednesday, March 23, 2011 1:19 AM To: Michael Lee; EXT - plu...@senetsy.ru Cc: juniper-nsp Subject: Re

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread sthaug
> Has anyone tried to install for example > install-media64-10.4R3.4-export? I tried to install this on > M10i(RE-850, Intel Pentium III i686) with not much luck as I ended up > in debugging subshell: ... > It was rather expected as PIII should have no 64bit support. > > Which platforms support 64

Re: [j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Anton Delport
Hi Marting I believe this image is supported on the new RE-S-1800's as well at the JCS. I does not work on the m10i. On 2011/03/23 12:50, Martin T wrote: > Has anyone tried to install for example > install-media64-10.4R3.4-export? I tried to install this on > M10i(RE-850, Intel Pentium III i686)

Re: [j-nsp] SRX650 Failover Test Issue

2011-03-23 Thread Chen Jiang
It's a by design behavior. When control link or fabric link disconnected, the current RG0 master node will remain in master status but the current RG0 backup node will disable itself to avoid split-brain issue, "Disable" means the node will offline all SPC/NPC and Line Card. And only reboot the wh

Re: [j-nsp] general guidelines for installing JUNOS to RE, where HDD and CF are blank

2011-03-23 Thread Martin T
I finally bought SanDisk "SDCFJ-1024" CF card and it worked just fine! I managed to install install-media-10.4R3.4-export. Just for information, if I insert this "SDCFJ-1024" CF into my Linux machine, following data is logged into kernel message buffer: root@ubuntu:~# uname -srv Linux 2.6.28-11-g

[j-nsp] 64-bit Junos Install Media

2011-03-23 Thread Martin T
Has anyone tried to install for example install-media64-10.4R3.4-export? I tried to install this on M10i(RE-850, Intel Pentium III i686) with not much luck as I ended up in debugging subshell: ERROR: Package jbundle is not compatible - amd64 vs {i386} ERROR: jbundle-10.4R3.4-export fails requireme

Re: [j-nsp] about 10.4R3 on EX

2011-03-23 Thread Stefan Fouant
> -Original Message- > From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- > boun...@puck.nether.net] On Behalf Of Richard A Steenbergen > Sent: Tuesday, March 22, 2011 7:16 PM > To: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] about 10.4R3 on EX > > On Tue, Mar 22, 2011 a

Re: [j-nsp] SRX650 Failover Test Issue

2011-03-23 Thread Walaa Abdel razzak
Hi Michael It already configured in a group. Also I was trying to telnet from directly connected ip. groups { node0 { system { host-name FW1; } interfaces { fxp0 { unit 0 { family inet {