Re: [j-nsp] QFX5100 ACLs

2017-12-11 Thread Alain Hebert
    Hi,     FYI, using the command from the PR, it seem right.     PS: There was an issue with mixed mode that needed to be set to NO, but the exact context is eluding me right now.  But it is not relevant to input-list. - Model: qfx5100-48s-6q Junos: 17.2R1.13 - Xyz> show

Re: [j-nsp] QFX5100 ACLs

2017-12-11 Thread Andrey Kostin
Hi Alain, Good to know that now it works. It was way back in February 2016 with 13.2X51-D35.3 and below is the exempt from TAC case. We haven't been told however that a PR was raised to address the issue or there are plans to resolve it. Problem Description : We use common set of filters

Re: [j-nsp] ARP Table Timer vs. MAC Table Timer on Juniper

2017-12-11 Thread Saku Ytti
I think it's just old mistake propagated through history. I've in many networks configured default ARP timeout below 300s to fix this problem. The default behaviour imho is just broken, it can even cause loops in sane topologies/configurations. On 11 December 2017 at 18:27, Karl Gerhard

Re: [j-nsp] ARP Table Timer vs. MAC Table Timer on Juniper

2017-12-11 Thread Aaron Gould
Opps, Gert beat me to it :) -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ARP Table Timer vs. MAC Table Timer on Juniper

2017-12-11 Thread Aaron Gould
If you think that's stupid, wait til you get a load of cisco's https://www.cisco.com/c/en/us/td/docs/app_ntwk_services/data_center_app_serv ices/css11500series/v7-30/configuration/routing/guide/rtbrdggd/ARP.html#wp10 15640 -Aaron ___ juniper-nsp

Re: [j-nsp] tl1 transaction language

2017-12-11 Thread Chris Morrow
At Mon, 11 Dec 2017 15:21:00 +, heasley wrote: > > Mon, Dec 11, 2017 at 10:07:22AM -0500, Chris Morrow: > > > What application are you looking to interface with? > > > > there's a significant portion of the networked world that's still > > doing tl1 (some version of the

Re: [j-nsp] ARP Table Timer vs. MAC Table Timer on Juniper

2017-12-11 Thread Gert Doering
Hi, On Mon, Dec 11, 2017 at 05:27:11PM +0100, Karl Gerhard wrote: > This seems to be a rather stupid default to me since expired MAC table > entries (in conjuction with still existing ARP table entries) will cause > Unknown Unicast packets to be flooded. We've been bitten by this because we >

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Kevin Day
I've got a few EX2200s and EX2300s and have been pretty happy with both. The complaint below is most likely due to the power going out *twice* before a successful boot is completed. What seems to happen is if power is lost, and while it's rebooting the switch loses power again, it assumes

[j-nsp] ARP Table Timer vs. MAC Table Timer on Juniper

2017-12-11 Thread Karl Gerhard
Hello by default ARP table entries will be saved for 20 minutes and MAC table entries will be saved for 5minutes. This seems to be a rather stupid default to me since expired MAC table entries (in conjuction with still existing ARP table entries) will cause Unknown Unicast packets to be

Re: [j-nsp] JNCIE-SP question

2017-12-11 Thread Paul Stewart
I think it varies with your job experience … if you are already working on complex MPLS networks for example then that’s a lot different from only having labs and less actual experience. I spent a week preparing for JNCIA-JUNOS as already, at that time had some experience. For JNCIS-SP I took

Re: [j-nsp] JNCIE-SP question

2017-12-11 Thread Shamen Snyder
I spent 2 hours a day reading and 8 hours of lab (sometimes more) on weekends for about a year and a half. All that time I put into it paid off as I passed on my first attempt. With that being said I paid out of pocket for everything and really didn't want to waste the money on a failed attempt.

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread adamv0025
Yeah vote with your valet, I guess another option would be to ask vendor to throw in bug scrub on selected code version free of charge as part of the deal. Yeah you reminded me of the cisco live presentation by Aleks Vidakovic in Berlin - he mentioned some new platform for code testing highly

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Dan White
Thank you all for your feedback. This is invaluable advice as we don't have much operational experience with Juniper switches to work with. Christian, Is there a common theme among the issues you've encountered? Are they aligned with a particularly feature set? On 12/09/17 20:29 +0100,

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Saku Ytti
Are we mandating that vendors test, are we monitoring that they do and that it is working? We can add to RFP requirements about test driven development, we can ask quarterly reports about coverage and bugs opened in different phases of testing and by customers. I.e. we can create financial

[j-nsp] JNCIE-SP question

2017-12-11 Thread Aaron Gould
I accomplished JNCIP-SP last week, and have a question for the JNCIE-SP folks out there. To those of you who have done the SP track, how much time/effort do you recommend needs to go into preparing for JNCIE-SP ? My progression has been. ~3 months of study/prep - JNCIA-JUNOS ~6 months of

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Alain Hebert
    Well,     At budget of $200k+ for 2 sites, I'm expecting more than having to road test Lada's. - Alain Hebertaheb...@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread adamv0025
Smells like everyone's me3600 experience, The competition is fierce nowadays forcing release of new platforms without proper regression testing. Kind of makes sense right? Allows vendors to get to market on time while saving capex related to testing, Operators test internally anyways so why to

Re: [j-nsp] tl1 transaction language

2017-12-11 Thread heasley
Mon, Dec 11, 2017 at 10:07:22AM -0500, Chris Morrow: > > What application are you looking to interface with? > > there's a significant portion of the networked world that's still > doing tl1 (some version of the 'standard'... which is vendor specific, > yay!) none of those things are juniper

Re: [j-nsp] QFX5100 ACLs

2017-12-11 Thread Alain Hebert
    I highly recommend to not use VCF for any L3/MPLS/etc.         We had a year long battle with it.  And it won.     Now that we're back into MPLS territory they're working fine as hell.  And it will only cost us some training for the juniors. --     But I can confirm that the

Re: [j-nsp] tl1 transaction language

2017-12-11 Thread Chris Morrow
At Mon, 11 Dec 2017 00:07:38 -0500, Phil Shafer wrote: > I don't know of any C libraries for TL1, but my guess is that at > this stage you'd be better off teaching your NMS to work with current > technologies (NETCONF and YANG) than to teach your devices TL1. let's do yang!

Re: [j-nsp] QFX5100 ACLs

2017-12-11 Thread Saku Ytti
Someone pointed this to me - https://kb.juniper.net/InfoCenter/index?page=content=KB24145 No es bueno. On 4 December 2017 at 18:02, Brendan Mannella wrote: > Hello, > > So i have been testing QFX5100 product for use as a core L3 switch/router > with BGP/OSPF. I have my

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Matt Freitag
Also since it was mentioned earlier and I forgot to mention it, I'm running simple MAC auth 802.1x on 83 EX2200's and the only issue is the captive portal functionality in Junos 12 is pretty terrible but it's been that way for years. If you need good captive portal go to the EX2300. Matt Freitag

Re: [j-nsp] QFX5100 ACLs

2017-12-11 Thread Alain Hebert
    Hi,     Odd.     Model: qfx5100-48s-6q     Junos: 17.2R1.13     I've verified with both the "pfe shell" and a Nessus scan TCP+UDP+Ports 1 thru 65535 and this input-list     [ ICMP-FI OSPF-PEERS-FI LDP-PEERS-FI BGP-PEERS-FI BFD-PEERS-FI VRRP-FI DHCP-FI -MGMT-FI DROP-FI ]    

Re: [j-nsp] What is your experience with the EX2200

2017-12-11 Thread Alain Hebert
    Rofl, smell like my QFX5100 experience.     PS: And I think its more of a platform issue than a software issue. - Alain Hebertaheb...@pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911

Re: [j-nsp] Enhanced MX480 Midplane?

2017-12-11 Thread Pavel Lunin
Is this true about MX960? Does it have a midplane also ? > > Yes though particular numbers might be different. MX960 has less backplane capacity per slot / pfe than MX480. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] Enhanced MX480 Midplane?

2017-12-11 Thread Sebastian Becker
Yes, this is true for the MX960. — Sebastian Becker s...@lab.dtag.de > Am 09.12.2017 um 18:34 schrieb Aaron Gould : > > > Is this true about MX960? Does it have a midplane also ? > > -Aaron > > ___ juniper-nsp mailing list