Re: [j-nsp] IPv6 firewall policy for MX

2019-06-28 Thread Lee Pedder
It's a good start but there are many issues with it. I think you need to take some time to understand IPv6 before implementing. The book examples don't restrict RS/RA to link local, are too open on things like BGP and traceroute. Trio hardware also has payload-protocol available in addition to

Re: [j-nsp] Link establishment issues with 1Gbps SX/LX SFPs on QFX5110

2019-06-28 Thread Timothy Creswick
For anyone interested in this, JTAC released to us 3.5R1-S4.1 for the satellite devices (I don't believe this will be generally available until tomorrow). This addresses the issue and confirms that there were 2 or 3 different PRs relating to the Broadcom chipset being incorrectly programmed by

Re: [j-nsp] IPv6 firewall policy for MX

2019-06-28 Thread Aaron Gould
2nd edition page 332 "IPv6 RE Protection Filter" -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] RSVP-TE broken between pre and post 16.1 code?

2019-06-28 Thread Michael Hare via juniper-nsp
Adam- Have you accounted for this behavioral change? https://kb.juniper.net/InfoCenter/index?page=content=KB32883=print=LIST==currentpaging -Michael > -Original Message- > From: juniper-nsp On Behalf Of > adamv0...@netconsultings.com > Sent: Friday, June 28, 2019 9:16 AM > To:

Re: [j-nsp] RSVP-TE broken between pre and post 16.1 code?

2019-06-28 Thread Ryan Gasik
I have MXs and ACXs all running RSVP, ranging in versions from 13 to 18. I haven't had any issues. What platform are you using? On Fri, Jun 28, 2019 at 7:15 AM wrote: > > Hi gents, > > Just wondering if anyone experienced RSVP-TE incompatibility issues when > moving from pre 16.1 code to post

Re: [j-nsp] IPv6 firewall policy for MX

2019-06-28 Thread Sander Steffann
Hi, > Is there a good online resource for IPv6 firewall policy/hardening for MX > series routers? I would start with the IPv6 filter example starting on page 336 of Juniper MX Series, 2nd Edition (ISBN: 978-1-4919-3272-8). There are eBook versions available, and o'Reilly Safari gives you

[j-nsp] IPv6 firewall policy for MX

2019-06-28 Thread Jonathan Call
Is there a good online resource for IPv6 firewall policy/hardening for MX series routers? ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] RSVP-TE broken between pre and post 16.1 code?

2019-06-28 Thread adamv0025
Hi gents, Just wondering if anyone experienced RSVP-TE incompatibility issues when moving from pre 16.1 code to post 16.1 code. Didn't get much out of Juniper folks thus far so I figured I'll ask here as well. The problem we're facing is that in case 17 code is LSP head-end and 15 code is