Re: [j-nsp] set MED only on empty

2020-09-19 Thread Eduardo Schoedler
; > juniper-nsp mailing list juniper-nsp@puck.nether.net > > https://puck.nether.net/mailman/listinfo/juniper-nsp > > -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4650 or QFX5120 Use Case

2018-12-27 Thread Eduardo Schoedler
ion, > dissemination or other use of this information is prohibited. If you have > received this communication in error, please notify the sender immediately > and delete the material from any computer, including any copies. > ___

Re: [j-nsp] LACP hashing algorithm

2018-08-09 Thread Eduardo Schoedler
ondering if anyone has seen anything similar ? > > Many thanks > > JfD. > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___

Re: [j-nsp] apply-paths and address families

2018-04-19 Thread Eduardo Schoedler
all { apply-path "protocols bgp >> group <*> neighbor <*>"; } >> >> I can use pf_BGP-all in a filter in a family inet filter and a family >> inet6 filter. >> >> My question is- does it matter that a v6 address is in a prefix list >> in a v4 filter

Re: [j-nsp] Logical systems plus ldp/l2circuit

2017-10-20 Thread Eduardo Schoedler
a completly another router, it has his own rpd process You have to create all the interfaces (including loopback) for the instance, and specify his addresses into it. — Eduardo Schoedler > -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@

Re: [j-nsp] Netflow analyzer / collector

2017-05-22 Thread Eduardo Schoedler
John, Another one: https://www.linkedin.com/pulse/wtflow-you-really-still-paying-commercial-solutions-collect-cowart Regards, 2017-05-22 17:42 GMT-03:00 Eduardo Schoedler : > Hi John, > > You can try this: > https://mailman.nanog.org/pipermail/nanog/2017-May/091097.html

Re: [j-nsp] Netflow analyzer / collector

2017-05-22 Thread Eduardo Schoedler
t; juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] FIB size at CFEB-E M7i

2017-04-10 Thread Eduardo Schoedler
l handle 1M of routes in FIB ? > > Rob > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___

Re: [j-nsp] Negative ARP caching, on an MX router (again)

2017-04-03 Thread Eduardo Schoedler
any way that JUNOS on an MX could configured to do this? > Enhancement request anyone? > > > Clarke Morledge > College of William and Mary > Information Technology - Network Engineering > Jones Hall (Room 18) > Williamsburg VA 23187 > ______

Re: [j-nsp] ACX control plane filter

2017-03-22 Thread Eduardo Schoedler
# apply-path was expanded to: ## 192.168.0.0/30; ## 10.8.0.0/31; ## 192.0.2.0/26; ## 192.0.2.64/26; ## 10.3.255.1/32; ## 172.19.90.0/23; ## apply-path "interfaces <*> unit <*> family inet address <*>"; Em qua, 22 de mar de 2017 às 15:00, Eduardo Schoedler e

Re: [j-nsp] ACX control plane filter

2017-03-22 Thread Eduardo Schoedler
have you tried to do a prefix-list like this? {master}[edit] regress@R1-RE0# *show policy-options | no-more* prefix-list router-ipv4 { apply-path "interfaces <*> unit <*> family inet address <*>"; } -- Eduardo Schoedler Em seg, 20 de mar de 2017 às 06:24,

Re: [j-nsp] MX104 limitation

2017-03-19 Thread Eduardo Schoedler
__ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ipv6 and multihop

2017-03-13 Thread Eduardo Schoedler
2017-03-13 19:41 GMT-03:00 Pedro : > Hello, Hi, > There is support for ipv6 multihop in junos for eBGP ? I don't have L2 or > direct link between ipv6 peers.. ( now i have junos 15.1R2.9 and > 14.1X53-D40.8) Yes, it is: set neighbor 2001:db8::1 multihop ttl xx Regards, --

Re: [j-nsp] EX4600 : Ping problem

2016-11-28 Thread Eduardo Schoedler
ou help me. Can you tell me where is the mistake, or what I forget ? > > Thank you ! > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX IPv6 neighbor scaling limit

2016-09-16 Thread Eduardo Schoedler
r-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Help with routing-instance bgp session

2016-07-04 Thread Eduardo Schoedler
ll exist even if they are inactive. (see the advertise-inactive > knob). > >> On Jul 4, 2016, at 9:02 PM, Eduardo Schoedler wrote: >> >> Can I announce all prefixes from main table in a bgp session that is >> into a routing-instance? I can't leak the prefixe

[j-nsp] Help with routing-instance bgp session

2016-07-04 Thread Eduardo Schoedler
Can I announce all prefixes from main table in a bgp session that is into a routing-instance? I can't leak the prefixes, only advertise them, because it's a looking glass session, like Routeviews. All tips are welcome. Thank you. Regards, -- Eduardo

Re: [j-nsp] ccc interface in logical-systems

2016-05-25 Thread Eduardo Schoedler
} } routing-instances { TRANSPORT { instance-type vpls; vlan-id 666; routing-interface irb.666; protocols { vpls { no-tunnel-services; vpls-id 1122; neighbor 172.16.1.1; connectivity-type irb;

Re: [j-nsp] B-RAS services

2016-05-09 Thread Eduardo Schoedler
mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Full routes on MX5

2016-04-26 Thread Eduardo Schoedler
extensive no-forwarding last pid: 43314; load averages: 0.25, 0.17, 0.11 up 87+15:53:0816:51:13 145 processes: 6 running, 112 sleeping, 27 waiting Mem: 1293M Active, 96M Inact, 330M Wired, 241M Cache, 112M Buf, 23M Free Swap: 2821M Total, 2821M Free -- Eduardo Schoedler 2016-04-26 16:44

Re: [j-nsp] Full routes on MX5

2016-04-26 Thread Eduardo Schoedler
Hi Colton, Yes, it's very high but it's working ok :) 3 full tables (~580k each) + 4x IXP route-server (~60k each) + 1 peering with HE (81k). Indeed, convergence it's terrible... for my luck, these sessions are pretty stable. -- Eduardo Schoedler 2016-04-26 15:46 GMT-03:

Re: [j-nsp] Full routes on MX5

2016-04-26 Thread Eduardo Schoedler
3 routes, 3 active Local: 2 routes, 2 active OSPF:208 routes,208 active BGP: 195529 routes, 110283 active -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.

Re: [j-nsp] IP Rate Limit

2016-04-25 Thread Eduardo Schoedler
arafından taranmıştır. Ancak SPDNET, bu e-postanın - virüs koruma sistemleri > ile kontrol ediliyor olsa bile - virüs içermediğini garanti etmez ve meydana > gelebilecek zararlardan doğacak hiçbir sorumluluğu kabul etmez. > ___ > junip

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

2016-04-01 Thread Eduardo Schoedler
to lo0 should do the trick > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] VMX to VMX traffic on ESXi

2016-03-21 Thread Eduardo Schoedler
Did you cloned VM? Did you change the mac-address? -- Eduardo Schoedler 2016-03-21 16:32 GMT-03:00 serge vautour : > Hello, > > Thanks to everyone who replied with suggestions. > > I did not have any licenses installed. Oddly enough VMX2 was showing: > > user@LabVMX2> sho

Re: [j-nsp] syslog is flooded with curious messages (MX5 / 14.2R2.8)

2016-01-22 Thread Eduardo Schoedler
-- Eduardo Schoedler 2015-02-22 13:19 GMT-03:00 Job Snijders : > Hi list, > > Upgraded this morning to 14.2R2.8 and I noticed that /var/log/messages > is being blasted with all kinds of messages which have no meaning to me. > > Other then high memory usage, the box seems to operate fine

Re: [j-nsp] per flow rate-limiting on Juniper equipment

2015-12-17 Thread Eduardo Schoedler
> Is there any Juniper equipment which is able to do this? > > > thanks, > Martin > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___

Re: [j-nsp] MAC filter on EX switches

2015-12-09 Thread Eduardo Schoedler
Aaron, Sorry, correct command is: show ethernet-switching table After you apply the filter, it is still in the table? Thank you. Em quarta-feira, 9 de dezembro de 2015, Eduardo Schoedler < lis...@esds.com.br> escreveu: > If you do "show arp no-resolve", does it sh

Re: [j-nsp] MAC filter on EX switches

2015-12-09 Thread Eduardo Schoedler
it would really stop traffic. > > > > Aaron > > > > From: Eduardo Schoedler [mailto:lis...@esds.com.br] > Sent: Wednesday, December 09, 2015 1:47 PM > To: Aaron > > > Cc: Juniper List > Subject: Re: [j-nsp] MAC filter on EX switches > > > > Aaron, > >

Re: [j-nsp] MAC filter on EX switches

2015-12-09 Thread Eduardo Schoedler
; ___________ > > juniper-nsp mailing list juniper-nsp@puck.nether.net > > https://puck.nether.net/mailman/listinfo/juniper-nsp > > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Static route with tracking

2015-10-12 Thread Eduardo Schoedler
You can try generate: http://www.juniper.net/documentation/en_US/junos14.2/topics/topic-map/policy-generated-route.html Maybe slax too. -- Eduardo Schoedler Em segunda-feira, 12 de outubro de 2015, Fabien Leboedec < fleboe...@afone.com> escreveu: > Hi everybody, > > I need yo

[j-nsp] J-series rescue image

2015-06-22 Thread Eduardo Schoedler
Hi people, I've made a mistake and bricked one J4350. Someone who has one J-series running can provide me one rescue image (system snapshot)? Thanks in advance! Regards, -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nethe

Re: [j-nsp] Thoughts on MX80 v MX104 RE performance

2015-04-23 Thread Eduardo Schoedler
my opinion, and I think the monolithic design of rpd should be > rethinked. > > > Regards, > > -- > Raphael Mazelier > > > _______ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp >

Re: [j-nsp] Stable JunOS for MX80

2015-04-16 Thread Eduardo Schoedler
Hi @thiyagarajan, I don't know. I think all MX are 2GB RAM, there are not requisites. Just download junos and install. Only what you need to know is what features you want to use on the box. -- Eduardo Schoedler 2015-04-16 11:33 GMT-03:00 thiyagarajan b : > @Eduardo. What will be th

Re: [j-nsp] Stable JunOS for MX80

2015-04-16 Thread Eduardo Schoedler
If you are thinking in run flows, I strongly recommend 13.3R6. With 12.3 I found too much bugs, including one who have killed my rpd and take down all routing in the box. -- Eduardo Schoedler Em quinta-feira, 16 de abril de 2015, thiyagarajan b < bn.thiyagara...@gmail.com> escreveu: &g

Re: [j-nsp] Aggregated policing question

2015-04-12 Thread Eduardo Schoedler
Try set "filter-specific" in the policer. -- Eduardo Schoedler Em domingo, 12 de abril de 2015, Cydon Satyr escreveu: > Juniper documentation mentions that regular srTC policer applied in regular > firewall filter will be shared among all interfaces that use that filter > (

Re: [j-nsp] VPLS pass tagged/untagged traffic

2015-03-08 Thread Eduardo Schoedler
Try CCC: https://mellowd.co.uk/ccie/?p=4428 -- Eduardo Schoedler Em domingo, 8 de março de 2015, Kevin Wormington escreveu: > Eduardo, > > I have tried the following for encapsulation on the ingress port. The > vpls connections are down...one in the LD status and the othe

Re: [j-nsp] VPLS pass tagged/untagged traffic

2015-03-07 Thread Eduardo Schoedler
_ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] IS-IS not installing route into RIB

2015-02-05 Thread Eduardo Schoedler
ehavior? Shouldn't > both routers install two routes as inactive into inet.0 table? > > Regards > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Eduardo Schoed

Re: [j-nsp] Junos MX series and Andrisoft Flow tools

2015-01-26 Thread Eduardo Schoedler
Not inline j-flow will kill your box. -- Eduardo 2015-01-26 13:03 GMT-02:00 John Brown : > Hi Raphael, I curious as why you are using software flow. I thought > the inline was better from a performance perspective on the router.. > > On Mon, Jan 26, 2015 at 6:45 AM, Raphael Mazelier > wrote:

Re: [j-nsp] MX80 JFlow Setup

2015-01-14 Thread Eduardo Schoedler
ute Record Count: 516479, IPv6 Route Record Count: 4 > Route Record Count: 516483, AS Record Count: 143756 > Route-Records Set: Yes, Config Set: Yes > > # run show services accounting flow inline-jflow > Flow information > TFEB Slot: 0 > Flow Packets: 1445

Re: [j-nsp] MX80 Sampling - High CPU

2014-12-12 Thread Eduardo Schoedler
13:07 GMT-02:00 Scott Granados : > Mikrotek, ouch, the only thing I found they were good for is target > practice.:) > > > On Dec 11, 2014, at 12:19 AM, Eduardo Schoedler wrote: > > Em quarta-feira, 10 de dezembro de 2014, Jordan Whited > escreveu: >> >> I found t

Re: [j-nsp] MX80 Sampling - High CPU

2014-12-10 Thread Eduardo Schoedler
full ipv4 with ~250k active-paths, in > 12.3R8.7 I measured it closer to 3 minutes. Seems to be improved, but still > unacceptable. What do you expect from a PowerPC processor that's used for mikrotik's routerboards? Thake a look in dmesg. -- Eduardo Scho

Re: [j-nsp] DDOS_PROTOCOL_VIOLATION_SET: Protocol Reject:aggregate

2014-12-10 Thread Eduardo Schoedler
1:33 EST > ___ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp -- Eduardo Schoedler ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX80 Sampling - High CPU

2014-12-02 Thread Eduardo Schoedler
t; ___ >>> juniper-nsp mailing list juniper-nsp@puck.nether.net >>> https://puck.nether.net/mailman/listinfo/juniper-nsp >>> >> _______ >> juniper-nsp mailing list juniper-nsp@puck.nether

Re: [j-nsp] EX4550 L2Circuit/VPN to MX80/lt Interface

2014-11-12 Thread Eduardo Schoedler
There's no need to run "protocols ldp" ? -- Eduardo Schoedler 2014-11-12 17:18 GMT-02:00 Alexander Arseniev : > There is a line missing on MX side: > > set interfaces lt-0/0/0.0 family ccc > > Thanks > Alex > > 12/11/2014 16:51, Raphael Mazelier wrote