Re: [j-nsp] remove-private for iBGP session

2015-09-28 Thread Cydon Satyr
Version 11.4R7.5 and 12.3R6.6. Configuration in lab is minimal - just peer IP, type internal, local-address, and remove-private toward RR. Simple eBGP session toward other end. Thanks! BR ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

[j-nsp] vSRX on KVM

2015-09-28 Thread Yuriy B. Borysov
Hello! Does someone use vSRX on the KVM in lab or in production? Could you show example of XML config from working instance? I'm trying to install according to this manual: https://www.juniper.net/techpubs/en_US/vsrx15.1x49/topics/task/multi-task/security-vsrx-with-kvm-installing.html but the

Re: [j-nsp] vSRX on KVM

2015-09-28 Thread Maxwell Cole
Hello, How are you passing in the interfaces? A bridge or PCI-Passthrough? From my testing with the vSRX it won’t recognize any ge- interfaces unless you pass at least 3 interfaces in. This is true on both KVM and ESXi, which makes me think that they silently (Or at least quietly) abort

[j-nsp] vme.0 IPV6 management IP on QFX5100

2015-09-28 Thread Franz Georg Köhler
Hello, I'm trying to set up IPV6 management IP on QFX 5100 VCF. IPV6 is not reachable from the outside, while IPV4 works. The switch can ping itsself but does not see any IPV6 neighbors. Any idea what goes wrong here? > show configuration interfaces vme unit 0 { family inet {

[j-nsp] No IFL found...

2015-09-28 Thread Alireza Soltanian
Hi everybody A couple of days ago, I sent an email about GRE Keepalive on M10/M20. I did some more tests on this case. I am using PE-Tunnel on M10/M20. Tunnel can be configured and works fine but when I try to configure GRE Keepalive via oam and check the statistics about it I received an

Re: [j-nsp] EX4300 and full-duplex-only

2015-09-28 Thread Phil Mayers
On 28/09/15 11:52, Jackson, William wrote: The ex3300 does not have this limitation. FWIW, Juniper have come back and said this is a firmware limitation in the PHY. Apparently it's some sort of feature conflict or code space issue w.r.t. MACSEC, and there is some vague possibility of a

Re: [j-nsp] EX4300 and full-duplex-only

2015-09-28 Thread Jackson, William
The ex3300 does not have this limitation. William Jackson Gibtelecom Email: william.jack...@gibtele.com -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Frank Sweetser Sent: 23 September 2015 18:05 To: juniper-nsp@puck.nether.net

Re: [j-nsp] purpose of "commit check"?

2015-09-28 Thread Brad Fleming
I use it to make sure another admin hasn’t made changes overtop of mine. Also, I believe commit check can help in situations where you are using “edit private”. > On Sep 28, 2015, at 4:24 PM, Martin T wrote: > > Hi, > > when I commit the candidate configuration in Junos,

Re: [j-nsp] purpose of "commit check"?

2015-09-28 Thread Harald F. Karlsen
On 28.09.2015 23:24, Martin T wrote: Hi, when I commit the candidate configuration in Junos, I tend to execute "commit check" and if configuration check succeeds, then I execute "commit comment ". However, when I think about it, "commit (comment)" itself should perform those very same checks

[j-nsp] purpose of "commit check"?

2015-09-28 Thread Martin T
Hi, when I commit the candidate configuration in Junos, I tend to execute "commit check" and if configuration check succeeds, then I execute "commit comment ". However, when I think about it, "commit (comment)" itself should perform those very same checks that "commit check" does. If yes, then

Re: [j-nsp] purpose of "commit check"?

2015-09-28 Thread Masood Ahmad Shah
Hi - "commit check" is just there to verify the syntax and integrity of the configuration, but do not activate it. Pretty self explanatory as you already explained it :-) On Tue, Sep 29, 2015 at 7:24 AM, Martin T wrote: > Hi, > > when I commit the candidate configuration in

Re: [j-nsp] purpose of "commit check"?

2015-09-28 Thread Aaron Dewell
Yes, the commit will fail if commit check would have also failed. I tend to use commit check as a check on myself when I’ve done a big cut-and-paste, or when creating a bunch of objects. The time to fail of commit check is less than commit if there are discrepancies. On Sep 28, 2015, at

Re: [j-nsp] purpose of "commit check"?

2015-09-28 Thread Graham Brown
I echo what Harald mentions, I also follow with 'commit check' after using 'commit confirmed <> comment <> | display detail | no-more' The | display detail is very handy when dealing with SRX with huge configurations or in clusters that can take a worrying amount of time to complete (especially