Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-08-04 Thread Rob Cameron
In 10.2 and later the SRX3XXX and SRX5XXX support ipv6. The command below will turn the feature on. set security forwarding-options family inet6 mode flow-based Rob Cameron Technical Marketing Engineer - HSS http://easylink.juniper.net/fwidpwiki SLT-HSS-TME - Team Alias (408) 905-9651

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-26 Thread Michael Damkot
You have to be cautious with the 'that command works' in SRX There are a number of things that you can turn 'on' in the SRX, and the UI gives you the feedback that it's working, but it actually doesn't turn on the functionality, because it's not supported etc On Jul 24, 2010, at

[j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Clarke Morledge
There have been a number of views expressed recently on the list regarding the SRX and Junos code buggines and instability. I am wondering if a lot of the issues are related to specific platforms. Specifically, I am curious to know about the reliability of some of the smaller data center

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Scott T. Cameron
Datacenter 1: SRX3400 chassis cluster config 10.2R1 /config/juniper.conf.gz = 11811 bytes 2 BGP sessions = Runs no problem. Datacenter 2: SRX3400 chassis cluster config 10.2R1 /config/juniper.conf.gz = 18251 bytes 1 BGP session = DISASTER JTAC was very slow in trying to help with the disaster.

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Pavel Lunin
10.0R1 has a bug in RTSP ALG causing fwdd dumping and all SPC restart. Fixed in 10.0R2. I have not that much experience with large SRXs but what I say is 10.0R2 working quite stable in production for a couple of months quite highly loaded.The config was rather straightforward though: src and dst

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Mike Williams
On Saturday 24 July 2010 15:26:29 Scott T. Cameron wrote: Datacenter 2 is back running 10.0R3 with no problems.  It lacks V6, but is quite stable. Hi, could you possibly expand on lacks V6 please? We're looking at deploying some SRX3600s, and IPv6 is something we really want to do. Thanks --

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Scott T. Cameron
Sure. SRX3xxx and higher do not support IPv6 until 10.2. Older code has no v6 capability. Scott On Sat, Jul 24, 2010 at 5:00 PM, Mike Williams mike.willi...@comodo.comwrote: On Saturday 24 July 2010 15:26:29 Scott T. Cameron wrote: Datacenter 2 is back running 10.0R3 with no problems. It

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Mark Kamichoff
On Sat, Jul 24, 2010 at 10:00:36PM +0100, Mike Williams wrote: Hi, could you possibly expand on lacks V6 please? The one big change in 10.2 for the SRX platforms is the addition of IPv6 flow mode. The SRXes will still pass IPv6 traffic in earlier releases, but without any policy evaluation. -

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Scott T. Cameron
Only on the low end models, 3400 and higher has no support. Scott On Sat, Jul 24, 2010 at 5:19 PM, Mark Kamichoff p...@prolixium.com wrote: On Sat, Jul 24, 2010 at 10:00:36PM +0100, Mike Williams wrote: Hi, could you possibly expand on lacks V6 please? The one big change in 10.2 for the

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Mike Williams
Seriously, a 3600 not on 10.2 won't do IPv6 at all? Not even plain routing? On Saturday 24 July 2010 22:31:13 Scott T. Cameron wrote: Only on the low end models, 3400 and higher has no support. Scott On Sat, Jul 24, 2010 at 5:19 PM, Mark Kamichoff p...@prolixium.com wrote: On Sat, Jul 24,

Re: [j-nsp] SRX3400/3600 Stabie Code Recommendations?

2010-07-24 Thread Mark Kamichoff
On Sat, Jul 24, 2010 at 05:31:13PM -0400, Scott T. Cameron wrote: Only on the low end models, 3400 and higher has no support. Oh, that's unfortunate. I've only had experience with the smaller SRXes, and the set security forwarding-options family inet6 mode packet-based command was all that was