Hello,
i am getting the following notice in the logs:
Mar 1 13:58:07 fpc0 CMIC(0/3): VSC8248 cmic-vsc8248-0/0/7 is running
out-of-date firmware version 2.52 (0x234). Please upgrade firmware to
version 2.53 (0x235) or later.
Does anyone know howto update these?
-Jonas
signature.asc
Hi Daniel,
thanks for this hint, i'll give it a try!
(However would be pleased if juniper could just update the tcp-options
stanca to include ECN/CWR).
Br,
Jonas
Am Freitag, den 27.11.2015, 18:48 +0100 schrieb Daniel Verlouw:
> Hi Jonas,
>
> On Fri, Nov 27, 2015 at 2:20 PM, Jonas Fr
Hello,
i am trying to filter IPv4 traffic based on the tcp-options, in detail i
am looking to filter for traffic with options CWR and ECN set (RFC3168).
It seems this is not possible on current MX gear running 14.2.
From the docs juniper only lists 6 of the current 8 tcp-options
available to
Most 3rd party vendor's lock down the A0 part of the SFP+, so you cant
change values there. Try asking your vendor if they can provide A0
unlocked SFP+...usually they will be a bit more expensive. If they dont
want to offer them just choose another supplier...there are plenty.
Having a SFP+ EEPROM
Dave,
as far as i know starting from PREMIUM2 the chassis also comes with the
high capacity fan module.
Am Dienstag, den 20.05.2014, 16:32 + schrieb Dave Peters - Terabit
Systems:
Hi all--
I think I've got this nailed down, but I wanted to make sure I know the
differences among the
Hello,
i am having problems with a EX4200 which is stuck in U-boot.
Before i can break the U-boot sequence it just hangs at:
U-Boot 1.1.6 (Feb 6 2008 - 11:27:42)
Board: EX4200-48POE 2.17
EPLD: Version 6.0 (0x85)
DRAM: Initializing (1024 MB)
FLASH: 8 MB
USB: scanning bus for devices... 2
+1 for the all requirement
Am Mittwoch, den 26.02.2014, 10:36 -0500 schrieb Phil Shafer:
Juniper users,
We've been asked to make a change the clear bgp neighbor command
to make the neighbor or all argument mandatory. The root cause
is the severe impact of clear bgp neighbor and the
Hi,
it is one indeed. If you look closer at those shipped from juniper you
can see its a normal SFF-8088. I doubt they have modified/coded anything
to prevent the use of other brands.
Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun:
Hi,
VCP cable for EX switch looks a lot like a
Hi,
sorry, i mixed this up with a diff vendor.
The VC cable on the EX series is a external pci-e x8 cable.
See: http://juniper.cluepon.net/index.php/EX4200
Am Montag, den 10.02.2014, 09:44 -0800 schrieb Yucong Sun:
Hi,
VCP cable for EX switch looks a lot like a plain SFF-8088 cable, can
RE-S-1800 is running JunOS 64, so this will *not* work.
Mixing routing engines isnt recommended/supported officially by juniper
either, but works to some degree (RE1300/RE2000 32bit).
Am Mittwoch, den 08.01.2014, 19:43 +0800 schrieb Xuhu:
OS version will be the same or not, official document
Hi,
unfortunatly there is none. You have to remove the disk/SSD and install
it in a regular system to read its smart data. You cant do this from
JunOS, as you cant execute unsigned binarys.
Am Dienstag, den 07.01.2014, 15:20 -0800 schrieb snort bsd:
hi all:
there is smartd running on
it will easily be 400W or more. Around 100W for a base, idle unit with
a few optics sounds right. Each optic module draws several watts
depending on the type.
On Oct 23, 2013 10:25 AM, Jonas Frey (Probe Networks)
j...@probe-networks.de wrote:
Hello,
does anybody have real
Hello,
does anybody have real world power consumption specs of the EX4550?
(EX4550-32F-AFI)
Juniper has no word about this anywhere in the documentation. There are
only statements about the power supply itself (650W capacity) and less
than five watts per 10GB fiber interface.
I've been able to
Hello,
i wonder if the IDP series (75, 250 etc) are able to decrypt SSL
sessions using keys transparently to check for IPS.
According to
http://www.juniper.net/techpubs/en_US/idp5.0/topics/task/configuration/intrusion-detection-prevention-ssl-decryption-enabling.html
this should be possible.
I
Yes, just make sure to use a 2,5 drive.
SSD is fine, too.
http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash
Am Mittwoch, den 17.07.2013, 09:42 -1000 schrieb Antonio Querubin:
I have a Juniper M5 whose hard drive just failed. The drive appears to be
a
Hello,
did anyone ever notice problems with wrong/changed SNMP ifIndex settings
after ISSU?
We ISSU upgraded a MX from 10.4R9.2 to 11.4R7.5 and after this some of
the ifIndex changed. When doing the ISSU it brought down FPC-1 (which is
a MPC Type 2). Maybe thats why the ifIndex were changed.
(We
, 17:42 +0100 schrieb Tobias Heister:
Hi,
Am 08.03.2013 16:33, schrieb Jonas Frey (Probe Networks):
did anyone ever notice problems with wrong/changed SNMP ifIndex settings
after ISSU?
We ISSU upgraded a MX from 10.4R9.2 to 11.4R7.5 and after this some of
the ifIndex changed.
We had
Sunil,
those are ordering codes from Juniper. The hardware is exactly the same
so you can mix them.
RE-400-768-BB = Base bundle (included in chassis order)
RE-400-768-R = Redundant module (can be ordered same time with chassis)
RE-400-768-S = Spare (to be ordered later to upgrade to redundancy)
The best thing nowadays is to get an eeprom programmer and do all this
stuff yourself, this is what we do.
This way you are flexible with 3rd party optics. You just buy a bunch of
XFPs/SFP/SFP-P's with generic firmware and identifiers and programm the
rest yourself for whatever device you are
PR718485:
Workaround:
Disable the then log or then syslog in firewall configuration.
Am Mittwoch, den 15.02.2012, 12:28 +0100 schrieb Per Randrup Nielsen:
PR718485
signature.asc
Description: This is a digitally signed message part
___
juniper-nsp
Chuck,
its not listed on the supported PICs. There are only sonet PIC's listed
(not even ethernet ones) so i guess it will very likely not work. I
guess your only option is to go with the MS-DPC.
Am Dienstag, den 24.01.2012, 17:47 -0500 schrieb Chuck Anderson:
Is it possible to reuse a Type2
Backup
Free 3.0 ),
The cloning process took 35 min approximately.
After the restart the error disappeared.
Thank you very much for your help
Isidoro
El 22/09/2011 2:52, Jonas Frey (Probe Networks) escribió:
Dear Isidoro,
you cant copy
Keegan,
all of the DPC- cards are EOL since long time (05/31/2009).
Some of the DPCE- cards are also EOL already. For details here is a list
(public):
http://www.juniper.net/support/eol/mseries_hw.html
Of course juniper wants to move customers to MPC hardware so more and
more of the remaining
Hello,
Hi all,
these codes are basically the same, both are MX80 based devices with a
MIC 1x20GE (all mics are commercially called 3D, no difference here)
already installed in one of the two available slots. On MX5 (and in the
commercial bundle MX80-5) the 20x1G MIC is the only card
Jonas Frey (Probe Networks):
Hello,
That is not true. The ports are configurable and usable. But you need a
license to be allowed to use them. The license is just paperwork and you
dont need to activate it somewhere. However this policy will change in
the future, all MX5/10/40 bundles
the restart the error disappeared.
Thank you very much for your help
Isidoro
El 22/09/2011 2:52, Jonas Frey (Probe Networks) escribió:
Dear Isidoro,
you cant copy the data 1:1atleast not without alot of work.
The best thing would be if you reinstall JunOS via a install media
Well...basically yes. The issue (PSN-2011-08-327) is known since august.
I guess the fact that juniper has listed the issue as the
probability of exploiting this defect is extremely low has led many
networks to not implent a immediate fix for this on a security
perspective.
As you know
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Jonas Frey (Probe
Networks)
Sent: Thursday, 22 September 2011 12:52
To: Isidoro Cristobal
Cc: juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] HDD Write Error
Dear Isidoro,
you cant copy the data 1:1atleast not without
routers to
our M20. Is it that possible? any experience doing that? If both of
them have the same JUNOS installed, and then copy the current
configuration.. thoughts?
Many thanks,
El 19/10/2011 16:56, Jonas Frey (Probe Networks) escribió:
Hello,
havent you changed the HDD yet? Like
when I try to
stitch both units of lt- interface I got error 'encapsulation
mismatch'.
Thanks!
On Thu, Aug 18, 2011 at 21:26, Jonas Frey (Probe Networks)
j...@probe-networks.de wrote:
Thanks to all who replied, i got this working the way Chris
described
(via lt
To whomever opened a PR about this:
It has been posted on the amsix mailing list that juniper also needs to
change internal addressing because of the issue with 128.0.0.0/16 as
addresses of this space are used internally within JunOS (see below).
Please add this to the PR so it gets fixed.
re0
media is used , how would it work with redundant
routing engine upgrades.
Cheers
On Wed, Sep 28, 2011 at 11:12 PM, Jonas Frey (Probe Networks)
j...@probe-networks.de wrote:
Jake,
as far as i know you need more than 512MB dram to go past
JunOS 10.x
Jake,
as far as i know you need more than 512MB dram to go past JunOS 10.x.
(I know there was a limitation but i dont recall where in detail).
Any way with less than 768MB Ram you are asking for trouble with any
modern JunOS.
Best would be to upgrade your RE-5 to 768 MB which is the max.
The
response .
How to save the data to the new hard disk? Do you know a procedure for
replacing hard disk ?
Best Regards,
Isidoro
El 20/09/2011 17:29, Jonas Frey (Probe Networks) escribió:
Hi,
you are correct, the disk exceeded the maximum write errors permitted by
the SMART
Hi,
you are correct, the disk exceeded the maximum write errors permitted by
the SMART value and thus is marked as bad. Prepare for a complete
failure of the drive soon (1-30 days likely).
May be the right time to upgrade the harddisk to a SSD.
Hello,
i can confirm that several CWDM SFP's from different vendors work fine
with the MX-series. They will show up as unknown vendor as its been said
alreadyunless you reprogramm these to return juniper part numbers
(if you've got a SFP eeprom programmer).
-
Jonas
Am Freitag, den
The 3.2 Gbps limitation depends on the CFEB you have.
The CFEB-E bumps this up to full line rate on all ports (4 Gbps per
FPC).
M7i 8.4Gbps half-duplex CFEB / 10Gbps half-duplex CFEB-E
(this is because of the integrated GE/2FE Ports)
M10i 12.8Gbps half-duplex legacy CFEB, 3.2Gbps per FPC
In general every SSD (MLC/SLC) should work. Just need to make sure that
you either get a PATA or SATA one (depending on your type of RE) and
that its 2,5 form factor.
If it doesnt work its in 99% of all cases the jumper for
master/slave/cable select.
Just try a different setting... you cant
Thats not completely accurate, for example the Intel Atom D525 does run
64bit code.
There are plenty of machines that do. virtually every intel system since
the pentium pro (except the atom) has the hardware if not the bios
support for doing so, that's not germain to the question of whether
Hello all,
i am trying to build a l2circuit on a MX. The problem is that the vlan
that needs to be included in the l2circuit comes via xe-1/0/0 which is
configured in bridge mode:
unit 0 {
family bridge {
interface-mode trunk;
vlan-id-list [ 20 30 40 ];
}
I need to build
;
}
unit 100 {
encapsulation vlan-bridge;
vlan-id 100;
}
}
}
neighbor xxx {
interface xe-1/0/0.20 {
virtual-circuit-id 20;
...
...
}
}
On 2011-08-18, at 4:03 PM, Jonas Frey (Probe Networks) wrote:
Hello all
;
}
}
neighbor xxx {
interface lt-1/3/10.1 {
virtual-circuit-id 20;
...
...
}
}
- Chris.
On 2011-08-18, at 4:37 PM, Jonas Frey (Probe Networks) wrote:
Hi Chris,
that does not work...
edge# show interfaces xe-1/0/0
vlan-tagging
Hello all,
i am looking for 2x PWR-BLANK-M10i-M7i (power blank for m7i/m10i), maybe
someone has these unused on his desk. Just wanted to ask before spending
$65/ea for a small piece of metal.
I am also looking for rackmounts for the M10i...as per global price list
this part is not listed...and i
Woops,
forgot something. Input also changed and should be now:
sampling {
input {
rate 100;
}
(no longer using family...)
Am Freitag, den 19.08.2011, 00:51 +0200 schrieb Jonas Frey (Probe
Networks):
Matt,
yes the config changed in JunOS 10.x.
See below:
--- OLD
18, 2011 at 3:51 PM, Jonas Frey (Probe Networks)
j...@probe-networks.de wrote:
Matt,
yes the config changed in JunOS 10.x.
See below:
--- OLD ---
sampling {
input {
family inet {
rate 100;
}
}
output {
flow-server A.B.C.D
You will need the 128MB DRAM upgrade if you have lots of routes as well
as a couple of thousand of arp entrys. This will fill the memory on the
SSB-E very fast and once you hit the 64MB limit the router will do weird
things (e.g. several ip address no longer reachable, routes not being
installed
Hello,
i see that there now is a new enhanced SCB for MX series which is
SCBE-MX-R. However i havent been able to find any information on this
regarding enhancements/features. Does anyone have any details?
Best regards,
Jonas
signature.asc
Description: This is a digitally signed message part
I am pretty sure that its PC133/ECC SD-Ram but you can just grab the
part number off the memory thats installed and look it up. Most likely
its SMART memory (which is hard to find and also very expensive). Normal
PC133/ECC SD-Ram is fine and works great on RE3/5.
I dont see any reason why you
Hello,
the question is: What do you want to do?
a) Filter the attacked IP (your IP) by your ISP in terms of blackhole
community. Does your ISP offer this?
If they do you need to announce them this single IP address (/32) with
their community set.
b) You can filter the attack on the interfaces
: OBrien, Will [mailto:obri...@missouri.edu]
Sent: Tuesday, April 05, 2011 2:24 PM
To: kwarteng
Cc: Jonas Frey (Probe Networks); juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] mitigating dos attack on Juniper M10i
It depends on just how bad the attack is.
If you can't identify the major
Chris,
http://juniper.cluepon.net/Route_Engine_DRAM_Compatibility
RE-3 aka RE-600
Its SD-RAM, PC100 or PC133 (will run as PC100), ECC.
Registered ram will not work. Also you need to get low profile ram
otherwise it wont fit.
Regards,
Jonas
Am Donnerstag, den 24.03.2011, 16:14 -0700 schrieb
They are neccessary for termination of (vlan)-ccc circuits.
So if you just want to have mpls between two routers the non-B is fine.
Its just needed for ccc termination on endpoints.
Regards,
Jonas
Am Donnerstag, den 17.03.2011, 08:43 -0700 schrieb Chris Cappuccio:
P-1GE-xx-B are necessary for
Patrik,
its possible and works well. If you only have 1 full bgp feed i wouldnt
worry. If you have multiple they best thing is to upgrade to RE3.
Also keep in mind that you can easily max out the SSB-E if you havent
upgraded it to 128MB or 256MB (SSB-E-16).
This is from a RE2/768:
Groups: 11
far), 1GB SiliconDrive CF(SiliconSystems, Inc. Now owned
by Western Digital) SSD-C01G-3596, looks like this:
http://img23.imageshack.us/img23/8923/jsdd.jpg
regards,
martin
2011/2/11 Jonas Frey (Probe Networks) j...@probe-networks.de:
Ohh...well there are so many models
Hi,
RE-333 max is 768 MB. Yes it will be enough for a v4+v6 feed.
You should also consider upgrading your SBC memory. See
http://juniper.cluepon.net for unofficial upgrades.
Latest JunOS that will work is 9.2 due to non FPC-E.
You also need 1G CF for that within your RE-333 to work.
There once
I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe
its too new. I know about serveral newer CF cards not working in RE2/3.
Try to get a regular SanDisk 1GB+ CF. (not the Ultra/Extreme models).
This should work.
Regards,
Jonas
Am Freitag, den 11.02.2011, 08:43 + schrieb
(atleast on T320/T640 RE-1600/RE-2000).
Am Freitag, den 11.02.2011, 12:14 +0200 schrieb Pekka Savola:
On Fri, 11 Feb 2011, Jonas Frey (Probe Networks) wrote:
I doubt the PCMCIA Adapter is the problem. I guess its the CFmaybe
its too new. I know about serveral newer CF cards not working
Martin,
yes thats the correct way to do it. Only the pc-card slot is able to
fully partition both CF and HDD using a install-media image and get you
a fresh and blank JunOS installed.
It will install on both CF and HDD and thus you will have a redundant
setup (when either CF or HDD fails).
Hi,
good luck trying this. When i did this once it was a horrible mess. The
l2tp implementation is quite broken. The accounting is just not working
correctly and so on...
Stay with cisco...that'll save you alot of time.
Maybe the MX will have better l2tp supportsometime.
Regards,
Jonas
Am
Hi Chris,
i havent seen an error like this where the same SSB works fine in slot 1
but not slot 0.
But my guess is that slot 0 gives back the true status of the card and
the test report from slot 1 is inaccurate.
We have seen memory failures of SSB-E(-16) boards a couple of times
while running
Not really. Both can do MPLS but only -B is capable of CCC VLANs
(513-1024) for MPLS.
Regards,
Jonas
Am Montag, den 27.12.2010, 16:10 -0800 schrieb Chris Cappuccio:
Someone refresh my memory...is the -B variant the only one that is MPLS
capable? What is the difference between P-1GE-LX and
See cluepon:
http://juniper.cluepon.net/index.php/Replacing_the_harddisk_with_solid_state_flash
Am Mittwoch, den 20.10.2010, 17:19 -0400 schrieb Fernando Atilano:
Anybody that can provide as to how to replace a m10 hard disk? one of them
failed.
any feedback is greatly appreciated.
to upgrade the hard disk ?
Somethin like:
request system snapshot media ... ?
Anyone knows how to do that ?
Thanks a lot,
Thank you Jonas !!
Fernando Atilano| Transtelco| Networking Support
MX 52.656.257.1114
US1.915.217.2286
On Oct 21, 2010, at 3:59 PM, Jonas Frey (Probe
Hi,
its easy:
- you need multihop on internal bgp sessions
- configure dsc:
unit 0 {
family inet {
address 10.10.20.1/32 {
destination 10.10.20.2;
}
}
}
Add policy for blackhole filter:
# show policy-options policy-statement blackholefilter
term black {
Hello,
speaking of CF upgrades...anyone here did any yet?
Wondering how much cf memory the RE(2|3) can handle.
Regards,
Jonas
On Thu, December 20, 2007 00:53, Richard A Steenbergen wrote:
On Wed, Dec 19, 2007 at 06:09:28PM -0400, chiel wrote:
Hi all,
I want to upgrade a M5 from 6.2R2.4 to
65 matches
Mail list logo