[j-nsp] mx304 alarm seen after junos upgrade

Anyone ever seen this alarm on an MX304 following a Junos upgrade? I went from ... 22.2R3-S1.9 - initially had this 22.4R2-S2.6 - upgrade 23.2R1-S2.5 - final now with23.2R1-S2.5, i have an issue with more than one, 100g interfaces being able to operate.  I have a 100g on et-0/0/4 and another

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

At this point I opted for a different design.  I no longer have the mcast clients gathered into a vlan, which requires igmp snooping.  I changed the mcast client ports to be L3.  I just assign a /30 to each mcast client interface on the ACX5048. This way there is no need for igmp snooping.  A

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

a PIM router? You don’t need an IGMP snooping querier if it’s a multicast router. On Fri, Feb 2, 2024 at 8:21 AM Aaron Gould via juniper-nsp wrote: I tried to recreate the scenario in my lab with no success 21.2R3-S4.8 - in lab - problem not seen 20.2R3-S7.3 - in lab - problem

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

kmon it’s difficult to debug anything -Aditya Google On Fri, Feb 2, 2024 at 8:21 AM Aaron Gould via juniper-nsp wrote: I tried to recreate the scenario in my lab with no success 21.2R3-S4.8 - in lab - problem not seen 20.2R3-S7.3 - in lab - problem not seen 19.2R3-S6.1 - in lab

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

I tried to recreate the scenario in my lab with no success 21.2R3-S4.8 - in lab - problem not seen 20.2R3-S7.3 - in lab - problem not seen 19.2R3-S6.1 - in lab - problem not seen 18.3R3-S6.1 - in lab - problem not seen 17.4R2-S11  - in lab - problem not seen 17.4R2-S11  - in field - problem

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

if the problem is fixed in a newer version? The latest is from March 2022, but I would still expect some bug fixing. Maybe there is something wrong in the programming of the hardware... Kind regards Karsten Am Donnerstag, 1. Februar 2024, 19:41:12 CET schrieb Aaron Gould via juniper- nsp: does this help

Re: [j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

that should work as igmp querier by default. Not sure if it helps though. Kind regards, Andrey Aaron Gould via juniper-nsp писал(а) 2024-01-31 14:54: I'm having an issue where igmp snooping layer 2 querier breaks ospf in other devices which are in l2circuits Has anyone ever come across this issue

[j-nsp] igmp snooping layer 2 querier breaks ospf in other devices

I'm having an issue where igmp snooping layer 2 querier breaks ospf in other devices which are in l2circuits Has anyone ever come across this issue, and have a work-around for it? I have the following configured and devices in vlan 100 can join multicast just fine. But there are other

Re: [j-nsp] Thanks for all the fish

https://newsroom.juniper.net/news/news-details/2024/HPE-to-Acquire-Juniper-Networks-to-Accelerate-AI-Driven-Innovation/ an MX with an HP label on it will seem so weird On 1/9/2024 2:55 AM, Saku Ytti via juniper-nsp wrote: What do we think of HPE acquiring JNPR? I guess it was given that

Re: [j-nsp] MX304 - Edge Router

After tshooting with JTAC yesterday, they've determined the built-in FPC to be a problem.  They are doing RMA. Strange that when the 60-day trail license expired, I decided to reboot to see what would happen.  I rebooted "request system reboot both-routing-engines" and that's when the router

Re: [j-nsp] MX304 - Edge Router

22.2R3.15 On 10/25/2023 7:50 AM, Richard McGovern wrote: Aaron, what version of Junos are you using on your MX304? This should NOT happen and if it did/is, then I suggest you open a Case with JTAC. Minimally your account team should be able to get you a temp license to work-around this

Re: [j-nsp] MX304 - Edge Router

My MX304 trial license expired last night, after rebooting the MX304, various protocols no longer work.  This seems more than just honor-based... ospf, ldp, etc, no longer function.  This is new to me; that Juniper is making protocols and technologies tied to license.  I need to understand

Re: [j-nsp] MX304 - Edge Router

my tab and spacebar auto-complete is working...22.2R3.15 {master} me@mx304> show system information Model: mx304 Family: junos Junos: 22.2R3.15 Hostname: mx304 On 10/18/2023 11:11 PM, Mark Tinka via juniper-nsp wrote: On 10/18/23 19:05, Chris Wopat via juniper-nsp wrote: Only complaint

Re: [j-nsp] Telemetry in the ACX7100-48L

I'm starting to wonder if this has something to do with different telemetry models/methodologies.  Forgive me as I forget the correct terminology, but, I think the MX960 sending native telem models, seems to be always-on... and I'm wondering if the ACX7100 is more based on the grpc

[j-nsp] Telemetry in the ACX7100-48L

Anyone done telemetry in the ACX7100-48L?  Before I start talking about the ACX7100, I'll say that I do have MX960's successfully sending telemetry data to this collector, and it automatically displays in the web gui front-end.  (I actually use chronograf instead of grafana) Now, the

Re: [j-nsp] ACX7100-48L

n_US/junos/topics/task/troubleshooting/crash-data-collection-checklist.html> show chassis routing-engine What does "last reboot reason say"? I would upgrade to 22.2R3, it's working fine for us so far. Regards Roger On Wed, Jun 7, 2023 at 9:18 PM Aaron Gould via juniper-nsp wrote: I

Re: [j-nsp] ACX7100-48L

ask/troubleshooting/crash-data-collection-checklist.html> show chassis routing-engine What does "last reboot reason say"? I would upgrade to 22.2R3, it's working fine for us so far. Regards Roger On Wed, Jun 7, 2023 at 9:18 PM Aaron Gould via juniper-nsp wrote: I h

[j-nsp] ACX7100-48L

I had a ACX7100-48L suddenly go down in my lab.  Is there a way to find the cause of it going down? agould@eng-lab-7100-2> show system information Model: ACX7100-48L Family: junos Junos: 22.2R1.12-EVO Hostname: eng-lab-7100-2 agould@eng-lab-7100-2> show system core-dumps re0:

[j-nsp] NXTWORK 2023 - United States

Does anyone know when and where the Juniper NXTWORK conference is this year? -- -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] PIM Join Load Balancing

This ? [edit protocols pim ] user@host# set interface all mode sparse version 2 user@host# set join-load-balance https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/ mcast-pim-join-load-balance.html -Original Message- From: juniper-nsp

Re: [j-nsp] Junos Telemetry Interface

Here's my lab MX960 Mine is currently set at 1 second set services analytics export-profile my-exprt-prfl reporting-rate 1 I tried decimals and zero to see what would happen, seems that 1 is the lowest. {master}[edit] agould@lab-960# set services analytics export-profile my-exprt-prfl

Re: [j-nsp] Junos Telemetry Interface

sensors and data models” https://community.grafana.com/t/how-to-send-juniper-router-telemetry-to-grafana/11071/9 -Aaron From: Colton Conor [mailto:colton.co...@gmail.com] Sent: Saturday, April 11, 2020 9:05 AM To: Aaron Gould Cc: Juniper List Subject: Re: [j-nsp] Junos Telemetry

Re: [j-nsp] Junos Telemetry Interface

Not sure if this is what you are looking for, but here are some of the sensor agents that I enabled on my MX routers Maybe it's the linecard or interface specific ones that give me the bits in bits out utilization graphs. set services analytics sensor my-sensor-14 server-name my-grafana-srvr

Re: [j-nsp] Trouble with 100G link MX204 <-> Dell S4100F-ON

On the topic of FEC modethought I'd share something I found a while back when testing the ACX5448 with an MX960 The ACX5448 40 gig interface defaulted to FEC74... the MX960 40 gig interface on an MPC7E-MRATE module default to FEC "NONE" 40 gig link would not come up agould@lab-960> show

Re: [j-nsp] MX960 vs MX10K

Just fyi, I'm running evpn-mpls between a couple dc's and ms-mpc-128g for my cable modem communities all in the same mx960 chassis's... been good so far. -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] MX960 vs MX10K

In my case, 960 has a lot of slots, and I use slot 0 and slot 11 for MPC-7E-MRATE to light up 100 gig east/west ring and 40 gig south to ACX subrings, so I have plenty of slot space for my MS-MPC-128G nat module... If I place it somewhere else, then I gotta cross the network to some extent to get

[j-nsp] rest api - limit ip sources

Anyone know how to limit ip addresses *in subnet notation* that are able to communicate with the rest api ? rest api allowed-source - how to use subnet notation {master:0}[edit] agould@eng-lab-5048-2# set system services rest control allowed-sources "123.123.0.64/26"

Re: [j-nsp] ACX5448 & ACX710

I've had an ACX5448 in my lab on loaner for over a year. I need to refresh myself on how well it performed. I have the little-brother ACX5048, probably 50 of them all over my network doing quite well. Pretty sure those are not Trio based. Never heard of the ACX710, but see it in slide 22 here

Re: [j-nsp] [EXT] Re: MX204 MACsec

[edit] me@site2-204-3# show | compare [edit] + security { + macsec { + connectivity-association my-ca1 { + security-mode static-cak; + mka { + transmit-interval 6000; + key-server-priority 0; + } +

Re: [j-nsp] [EXT] Re: MX204 MACsec

Before or after I do that config test ? Asking since I didn't commit that as it's on a MX204 in a far-away place during a thanksgiving week network-change moratorium, I'm treading on thin ice. LOL -Aaron ___ juniper-nsp mailing list

Re: [j-nsp] MX204 MACsec

Not knowing much about this, but going from this site's guidance ( I stopped halfway down the page ) , https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/macsec-configuring-mx-series.html ...i did the following... [edit] me@site2-204-3# show | compare [edit] +

Re: [j-nsp] MX204 MACsec

I don't know much about this, but, for what it's worth, I do see this on one of my MX204's... me@site2-204-3# set security macsec connectivity-association test ? Possible completions: <[Enter]>Execute this command + apply-groups Groups from which to inherit configuration

Re: [j-nsp] Managing MX480 fxp0

Thanks, but I just moved the fxp0 ip address to a revenue interface to get the pfe forwarding I needed. -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Managing MX480 fxp0

Thanks -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Managing MX480 fxp0

Thanks again (Chris) for solving my vpls/irb/tagging combination problem yesterday. we can bridge successfully now. Taking this one step further, we now are trying to route via fxp0 and *through* it to the irb.100 interface and are unable to. Is it possible to route traffic *through* an

Re: [j-nsp] trying to add double tagged interface and getting errors

Very nice, the config works now! (I had to add vpls encap to the subints of course) And I see the interface shows pop-pop push-push still Thanks! set routing-instances 100 interface xe-0/1/1.300 set routing-instances 100 interface xe-0/1/1.312 delete interfaces xe-0/1/1 unit

[j-nsp] trying to add double tagged interface and getting errors

How would I accomplish this ? It's working fine, but when I try to add a double tagged interface into the existing vpls bridging environment, I get the following error. me@ 204-1> show configuration routing-instances 100 | display set set routing-instances 100 instance-type vpls set

Re: [j-nsp] MX204 vs. MX240??

We deployed the MX204 in pairs in 2 new markets that we entered into recently... Houston and Dallas... the MX204 presents itself as a small and relatively inexpensive but with nice port and feature versatility with its MX capabilities. We decided to roll them out with (2) 100g, (2) 40g, (4) 10g

Re: [j-nsp] VLAN sub-interfaces in VRR em0?

My situation might be different than yours, but, I'm using vlan tags in junos vMX on eve-ng... (17.4R1.16) root@sabn-960-e> show interfaces ae161.0 Logical interface ae161.0 (Index 344) (SNMP ifIndex 546) Flags: Up SNMP-Traps 0x20004000 VLAN-Tag [ 0x8100.10 ] Encapsulation: VLAN-Bridge

Re: [j-nsp] JunOS on EX4550?

On my EX4550, I recall going from 12 to 15 to get some mpls function. But I also recall having issues with mpls services and then later removing those mpls services. -Aaron -Original Message- From: Richard McGovern [mailto:rmcgov...@juniper.net] Sent: Thursday, October 17, 2019 5:27

Re: [j-nsp] Junos Telemetry Interface (JTI)

e of deploying the 'bundle' version of >> OpenNTI >> for Junos ST. >> >> We look forward to your shared experiences as you kick the tyres and - >> hopefully - incorporate this into your NMS/procedures. :) >> >> Many thanks, >> Niall &g

[j-nsp] telemetry analytics - mx960 - npu packet rate concerns

Using my JTI/Chronograf/Grafana web interface I'm trying to understand some of the telemetry analytics data I'm seeing coming from what appears to be the sensor resource of my MX960 corresponding to /junos/system/linecard/npu/utilization/ .. The field seen on chronograf that I'm watching is

Re: [j-nsp] PFE forwarding bug - PR1380183

Sure Adam, here's logs after interface flap which JTAC and myself determined was the initial bug trigger... xe-11/0/0:2 is a member of a (2) 10 gig lag ae... xe-11/0/0:2 and xe-0/0/0:2 make the 20 gig bundle... only xe-11/0/0:2 flapped and I never saw traffic come back to that interface even

Re: [j-nsp] PFE forwarding bug - PR1380183

Thanks Rich, similar to the guidance from my Juniper account SE. ...also 17.4R3 is being released in September but I understand that once you jump R releases, you get into new features with potential for new bugs correct ? In other words, am I correct that the next S (service) release is the

[j-nsp] PFE forwarding bug - PR1380183

I hit PR1380183 last week on an MX960. https://prsearch.juniper.net/InfoCenter/index?page=prcontent =PR1380183 I currently run 17.4R2-S1.2 on all my MX960's. The PR mentions a fix in 5 different versions of Junos.

Re: [j-nsp] non-split tunneling to SRX dynamic vpn with Pulse Secure client?

Old thread (2015)... Is there still a problem with MacOS using Pulse Secure to connect with SRX Dynamic/Remote Access VPN ? Anyone know how to make it work ? I do have Windows 10 working fine... but not MacOS Apple laptop. Using SRX300 15.1X49-D150.2 and Pulse client from Junipers website

[j-nsp] SRX dynamic vpn with Pulse Secure client - MacOS Apple laptop not working

Is there still a problem with MacOS using Pulse Secure to connect with SRX Dynamic/Remote Access VPN ? Anyone know how to make it work ? I do have Windows 10 working fine... but not MacOS Apple laptop. Using SRX300 15.1X49-D150.2 and Pulse client from Junipers website 5.1R5.1

Re: [j-nsp] 40Gig Ether for MX480

My ISP network is core/agg mpls rings of MX960's and ACX5048's960's connect 40 gig to 5048's using the MPC7E-MRATE in the MX960. Seems good to me so far Also use MX960 40 gig on MPC7E-MRATE to DC/CDN deployments of QFX5120's (pure Ethernet tagging). -Aaron

Re: [j-nsp] srx ipsec tunnel over mpls l3vpn

Yes Hugo, I can pass non-ipsec encrypted traffic via the MPLS L3VPN inside the SRX... isn't that what the IKE Phase 1 and IKE Phase 2 success is proving ? -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] srx ipsec tunnel over mpls l3vpn

I will do that this morning I simply wanted to put a subnet on the secure tunnel interfaces and ping from st0.0 to ms-0/0/0.1 first, but I can do the further edge config also. -Aaron -Original Message- From: Hugo Slabbert [mailto:h...@slabnet.com] Sent: Friday, July 12, 2019 1:26 AM To: Aaro

Re: [j-nsp] srx ipsec tunnel over mpls l3vpn

ace Label space ID Hold time 10.101.14.197 ge-0/0/0.0 10.101.0.254:0 10 root@demo-srx300> -Original Message- From: Emille Blanc [mailto:emi...@abccommunications.com] Sent: Thursday, July 11, 2019 3:04 PM To: Aaron Gould; juniper-nsp@puck.nethe

[j-nsp] srx ipsec tunnel over mpls l3vpn

Anyone ever done it ? To be clear, I have mpls/ldp/ospf/bgp enabled the SRX such that I have an l3vpn functional into the SRX. I have a lo0.99 interface as the external interface used for ike/ipsec. Seems that I'm pretty close to getting this done, as i have ike phase 1 up and ike phase 2 up,

Re: [j-nsp] IPv6 firewall policy for MX

2nd edition page 332 "IPv6 RE Protection Filter" -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] good study guide/material for jncis - SP/P

: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Aaron Gould Sent: Friday, May 17, 2019 11:03 AM To: 'Dave Bell' Cc: 'Juniper List'; 'mcbob 58' Subject: Re: [j-nsp] good study guide/material for jncis - SP/P Not the same. Seems that Cisco only offers continuing education

Re: [j-nsp] evpn with vrf

By the looks of it, seems so. EVPN Interworking with IPVPN draft-rabadan-sajassi-bess-evpn-ipvpn-interworking-02 Abstract EVPN is used as a unified control plane for tenant network intra and inter-subnet forwarding. When a tenant network spans not only EVPN domains

Re: [j-nsp] evpn with vrf (change to evpn inside inet.0 and igp advertise evpn /32's)

I think I got it. This works to get evpn host routes into ospf. Is there a better way ? set policy-options policy-statement my-ospf-export-policy term 1 from protocol evpn set policy-options policy-statement my-ospf-export-policy term 1 then accept set protocols ospf export

Re: [j-nsp] evpn with vrf (change to evpn inside inet.0 and igp advertise evpn /32's)

Oh dang, hang on... I just removed irb.0 from vrf and allowed it to sit in inet.0 global table... and I DO see the evpn routes in inet.0 now... So I think my question is actually this... when I have evpn with irb inside vrf, MP-iBGP advertises all those evpn /32's to the other remote pe's in

Re: [j-nsp] evpn with vrf

Seems that I get an auto-export from evpn-learned destinations auto exported as /32's into the vrf that the IRB is attached to. Is this possibly with inet.0 global route table? In other words, in a vrf table I see evpn-learned routes listed like this... 172.223.10.10/32 *[EVPN/7] 00:00:03

Re: [j-nsp] Junos 18.X on QFX5100

Looks like that PR applies to all platforms...not just qfx. Correct? Product J Series, M Series, T Series, MX-series, EX Series, SRX Series, Customer Care, QFX Series, NFX Series, PTX Series, ACX Series -Aaron ___ juniper-nsp mailing list

Re: [j-nsp] 4x1G QSFP?

I think the definition of SFP+ is 1g or 10g whichever you insert -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] 4x1G QSFP?

https://apps.juniper.net/home/#MX204/Hardware+Compatibility maybe it's one of those listed as QSFP+ to SFP+ - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] good study guide/material for jncis - SP/P

I just remembered another really cool thing about Juniper certification, that I don't think exists with Cisco... Remote online cert exams ! https://home.pearsonvue.com/junipernetworks/op love it -Aaron ___ juniper-nsp mailing list

Re: [j-nsp] good study guide/material for jncis - SP/P

From: Dave Bell [mailto:m...@geordish.org] Sent: Thursday, May 16, 2019 1:28 PM To: Aaron Gould Cc: Hitesh Kumar; mcbob 58; Juniper List Subject: Re: [j-nsp] good study guide/material for jncis - SP/P Yes: https://learningnetwork.cisco.com/community/certifications/cisco-continuing-educati

Re: [j-nsp] good study guide/material for jncis - SP/P

Eh...not to diminish your concern too much...and not to pound on my earlier point too much either, but spanning tree, isis, ospf, bgp, etc how often are those changing ?like I said, I used 2013 material and took 2017 test and passed.

Re: [j-nsp] good study guide/material for jncis - SP/P

t tracks > anymore. I am now learning with genius and the old material > > Br mc bob > > ____ > Van: Aaron Gould > Verzonden: woensdag, mei 15, 2019 5:04 PM > Aan: 'mcbob 58'; juniper-nsp@puck.nether.net > Onderwerp: RE: [j-nsp] good study guide

Re: [j-nsp] good study guide/material for jncis - SP/P

Btw, I just heard back from Juniper (certificat...@juniper.net) that the fast track study guides are no longer available. - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] good study guide/material for jncis - SP/P

I took JNCIS-SP exam in 2017 I self-studied with the 3-part 2013 files and they were a good source of info. However, I also work as a full-time ip/mpls engineer for an ISP and also accessed any and all forms of info needed to follow the blueprint topics juniper mentions on their website I

Re: [j-nsp] LACP is not running between two VMX

Sorry I don't have mc-lag configs for vMX, but I did do mc-lag on vQFX... Here is some quick outputs from my eve-ng lab... I have mc-lag between (2) vQFX devices... and actually, the lag client side is one vMX node... Here's one side of the mc-lag pair... I grabbed some commands that I recall

[j-nsp] fusion QFX5120 and MX204

Trying to do fusion from MX204 (AD) to QFX5120-48Y-8C (SD). but getting this message.. "Satellite image not available" Is a QFX5120-48Y-8C capable of being a satellite device in fusion ? On juniper.net I see lots of satellite images for qfx5100, ex4300, ex2300, qfx5110, .but nothing for

Re: [j-nsp] Fusion using vMX and vQFX

-Original Message- From: Tobias Heister [mailto:li...@tobias-heister.de] Sent: Friday, April 12, 2019 9:24 AM To: Aaron Gould; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Fusion using vMX and vQFX Hi, On 12.04.2019 15:34, Aaron Gould wrote: > Can I do Fusion using vMX and v

[j-nsp] Fusion using vMX and vQFX

Can I do Fusion using vMX and vQFX ? Will it work? -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] JunOS 16.2R2.8 High CPU caused by python

(from jason ... "Is there a function to kill (and/or restart) the process in this type of scenario? ") Yes, there is. For instance, I had an issue with leaking ip helper (dhcp relay) in Junos ACX5048, that was immediately relieved with a restart of that process... agould@ 5048> show chassis

Re: [j-nsp] Mirroring IPv6 neighbor advertisements

Thanks Jason, that question was for Crist Clark since he mentioned logging. -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Mirroring IPv6 neighbor advertisements

Can you log DHCPv6 PD (Prefix Delegation) also ? -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Silly command?

Thanks Eric, What is "100G FS DAC" ? Why were you using 4300/5100 with MX204 ? is that for port expansion made possible with fusion or vc or vcf ? Also, you didn't set pic 0 port 3 speed ? BTW, you doing any qinq tagging? ...also, subinterface (unit level) policing ? If not, I'm about to

Re: [j-nsp] Silly command?

How did you like the MX204 ? How much testing did you do? I have one now, just received it on Friday, and I have it in the lab. I'm currently just testing a few things... ospf mpls ldp vrf bridge-domain multiple different vlan tags on same physical interface with different tags on different

Re: [j-nsp] jaa-nat cgnat license

To circle back, my vendor team has confirmed that this is purely an honor-based license. .no need to input anything into cli. -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Old JunOS upgrade path

Lately, we have been upgrading lots of our ACX5048's from 15.1X54 (D51 and D61) to 17.3R3.10 -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] jaa-nat cgnat license

Has anyone had to scale up their cgnat yet ? .to the extent that you had to purchase and install additional throughput licenses for your cgnat ? I'm running MX960 with MS-MPC-128G and I plan on moving lots of my customers behind it so I'm purchasing more JAA-NAT-10 I'd like to hear from

[j-nsp] cgnat ams0 vrf-aware flow data export help

Need assistance with exporting flow data for inside interface of cgnat ams0 aggregated multiservice interface I have MX960 with MS-MPC-128G doing cgnat using AMS0 (aggregated multiservice of underlying mams interfaces) using next-hop-style vrf-aware cgnat. I need the cgnat inside domain

Re: [j-nsp] multi services cards - MX

Circling back on some older threads... I'm doing this because I've been growing my cgnat environments and needing to remind myself of somethings, etc... Regarding MS-MPC-128G being used for napt-44 (nat overload ipv4 savings) what do you all know about throughput ? I understand that it may not

Re: [j-nsp] MX960 power supply stopped during ISSU

Thanks Tim, unsure what you mean by "do you have enough power supplies to maintain N+1 at full tilt?" Thanks Jerry, ISSU upgrade went fine this time. I've done 3 so far... -1st MX960 ISSU upgrade in lab-960 was fine -2nd MX960 ISSU upgrade had a glitch, I don't recall why, but it

Re: [j-nsp] MIC3-3D-1X100GE-CXP ports won't light up.

Not sure if this is the problem... maybe it's the laser thing Jerry mentioned, ... but maybe you need to online the mic ? I think I had to do this with new mpc's I put in my mx960's but unsure if it's required at the mic level for newly inserted mics... Request chassis pic online or something

[j-nsp] MX960 power supply stopped during ISSU

Last night I had a successful ISSU upgrade. BUT. "show chassis alarm" showed me that PEM0 power supply had issues. Searching logs didn't turn up any previous issues so I think that this happened during the ISSU process. Anyway ever seen something like that before? I would've thought that a

[j-nsp] MX960 differing RE REVs is this ok

Does ISSU require same *Rev* of RE ? ...and is there any reason why I would NOT want to run different Rev of RE in my MX960 ? Is it ok to run different rev of RE ? I have REV 17 as RE0 and REV 15 as RE1. Is this ok? root> show chassis hardware models | grep Routing Routing Engine 0

[j-nsp] evpn with vrf

I wanted to share some thoughts and new experiences with you all, I've been learning evpn in the lab in preparation for using it to connect a couple data centers. I think this would be known as evpn-mpls (and not evpn-vxlan, as I've heard "evpn-vxlan" mentioned in the same breath over and

Re: [j-nsp] inline-jflow monitoring

I recently did this on operational/live MX960's on my 100 gig mpls ring with no problem. ...no service impact, no card reboots. set chassis fpc 0 inline-services flow-table-size ipv4-flow-table-size 4 I run... agould@960> show system information Model: mx960 Family: junos Junos: 17.4R1-S2.2

Re: [j-nsp] EX4650 or QFX5120 Use Case

I have (9) qfx5120-48y-8c {master:0} root> show system information Model: qfx5120-48y-8c Family: junos-qfx Junos: 18.3R1.11 I plan to deploy them fairly simply at this point I plan to have (4) in each of my (2) DC's DC1 (2) QFX5120's for Services vlans/evpns (2) QFX5120's for SAN/iscsi type

[j-nsp] qfx5120-48y-8c - jtac recommeded junos version

I got my QFX-5120's in a couple days ago. running 18.3R1.11 I don't see a JTAC Recommendation for 5120 https://kb.juniper.net/InfoCenter/index?page=content =KB21476 {master:0} root> show system information Model:

Re: [j-nsp] MPC7E-MRATE - won't come online (enhanced-ip done)

Thanks Jeff, perhaps AC Highcap ship with different default dip setting than do the DC Highcap... I can tell you this all 6 of my MX960's with DC highcap pem's came with dip set to 0 (1700w)... Ok so today I did this in my lab-960... Had someone flip the dip to 1 (4100w) on all 4 PEM's,

Re: [j-nsp] ftp.juniper.net

Yep works, thanks (Niall, use sftp.juniper.net not ftp.juniper.net) C:\Users\aaron>sftp anonym...@sftp.juniper.net Password authentication Password: Connected to anonym...@sftp.juniper.net. sftp> pwd Remote working directory: /pub/incoming - Aaron

[j-nsp] ftp.juniper.net

Does juniper's ftp.juniper.net still work ? I haven't been able to use it in a few weeks. -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MPC7E-MRATE - won't come online (enhanced-ip done)

This one was interesting...the high capacity PEM's operate in 1700 w mode with what I think is the default dip switch position zero (0) as opposed to 1, which allows it to operate at 4100 w {master} agould@lab-960> show chassis power | grep "feed|PEM" PEM 0: DC input: OK (1 feed expected, 2

Re: [j-nsp] MPC7E-MRATE - won't come online (enhanced-ip done)

I just found out that there is a dip switch on the back of my high-capacity PEM’s that needs to be flipped from 0 to 1 for the additional power feed I have going into it. Show log chassisd shows my fpc asking for power but my system doesn’t have enough. -Aaron

[j-nsp] MPC7E-MRATE - won't come online (enhanced-ip done)

Added a new MPC7E-MRATE to an MX960 today. it stays in "Present" mode under "show chassis fpc" and will not come "Online". Any ideas ? This is a functional MX960 which already has (2) MPC7E-MRATE modules in slot 0 and 11, and has been running for about 1 year now. (had to "set chassis

Re: [j-nsp] acx5048 message - fpc0 brcm_pkt_fp_thread

Oh yes, sorry… Running… 15.1X54-D61.6 Will be upgrading to… 17.3R3.10 -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] acx5048 message - fpc0 brcm_pkt_fp_thread

Wanted to circle back with y'all... this message... fpc0 brcm_pkt_fp_thread:700 FP thread is unscheduled for more than 30ms. Sleep time: 44ms.^M ...seemed to be coupled with, or somewhat related to other messages seen within a 12 hour period of... Nov 28 12:30:10 my-ACX5048 /kernel: swapping

Re: [j-nsp] MPC7 / QSFP28 I2C issue

Not sure if it helps, but here's what I'm running successfully in mine {master} agould@blvr-960> show version | grep "Junos:|model" Model: mx960 Junos: 17.4R1-S2.2 {master} agould@blvr-960> {master} agould@blvr-960> show chassis hardware | grep "mrate|100G" FPC 0REV 43

[j-nsp] acx5048 message - fpc0 brcm_pkt_fp_thread

fpc0 brcm_pkt_fp_thread:700 FP thread is unscheduled for more than 30ms. Sleep time: 44ms.^M ever seen it ? anyone know what this means ? -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

[j-nsp] ACX5048 - 802.1q CFI DEI bit

Had something interesting occur in my company's lab recently. We had an issue where we couldn't get connectivity through third party device connected to a ACX5048 and we found the following while sniffing that connection. It seems on certain vlans, the CFI/DEI bit is set on traffic as it

  1   2   3   >