Re: [j-nsp] MX240 static-subscribers radius policy

2013-09-30 Thread Terebizh, Evgeny
Hi, As far as I remember the firewall filter will be showing zeroes unless traffic going through demux interface gets policed. /ET From: Catalin Petrescu cpmar...@gmail.commailto:cpmar...@gmail.com Date: Mon, 30 Sep 2013 09:38:53 +0300 To: Evgeny etereb...@amt.rumailto:etereb...@amt.ru Cc:

Re: [j-nsp] MX240 static-subscribers radius policy

2013-09-30 Thread Catalin Petrescu
Hi, I've tested this on mx80 and works , so probably is MPC specific. filter 2M { interface-specific; term 10 { then { count 2M; accept; } } filter 5M { interface-specific; term 10 { then { count 5M;

Re: [j-nsp] MX240 static-subscribers radius policy

2013-09-30 Thread Terebizh, Evgeny
Not basically true. I guess my statement applies to policer counters, not to the firewall counters. Sorry. Nevermind. /ET On 9/30/13 10:43 AM, Terebizh, Evgeny etereb...@amt.ru wrote: Hi, As far as I remember the firewall filter will be showing zeroes unless traffic going through demux

Re: [j-nsp] Matching specific OSPF routes in aggregate policy

2013-09-30 Thread Rob Foehl
On Fri, 27 Sep 2013, Phil Fagan wrote: could you use BGP multi-hop and simply peer directly to the MX bypassing the need to redist routes in though your OSPF core? That's basically what I'm considering from the perspective of readvertising into BGP on the ABR... The source is going to be

Re: [j-nsp] Matching specific OSPF routes in aggregate policy

2013-09-30 Thread Phil Fagan
Got it; well let me know if you find either because its a very interesting scenario! Always a fan of the clever solutions :-) On Mon, Sep 30, 2013 at 1:11 PM, Rob Foehl r...@loonybin.net wrote: On Fri, 27 Sep 2013, Phil Fagan wrote: could you use BGP multi-hop and simply peer directly to

Re: [j-nsp] SSD disks high failure ratio ?

2013-09-30 Thread Mounir Mohamed
This is not a hardware issue and does not need RMA for the failed REs. They only need SSD secure erase sequence and a single reboot. However this has to be performed by Juniper engineers. I recommend to contact your SE and he will take care about it. Bear in mind that all MX REs shipped after

[j-nsp] Default route origination for Ibgp

2013-09-30 Thread George Hong
Hi Juniper Guru's. I Have a question regarding the best way to generate a default route in BGP. The topology is as below. Rtr1 and rtr2 both have a full EBGP feed from different providers (incl Default route) rtr1 and rtr2 have an IBGP session and exchange full tables. There's also IBGP sessions

Re: [j-nsp] Default route origination for Ibgp

2013-09-30 Thread OBrien, Will
I advertise a default route via an igp. (Ospf) when traffic gets to the border routers, the best path is chosen thanks to ibgp between the two border routers. I also maintain redundant links between the two border routers so that an outage won't matter. Will O'Brien On Sep 30, 2013, at 5:52