[j-nsp] 10G optics showing up as OC3

Hello, I wanted to share this for others. I had received a 10G DWDM optic from my carrier and it wouldn’t work. Turns out the optic did not have the reach programmed into it and JunOS didn’t handle this well. I addressed this by writing the reach into byte 0x3 on the optic, which for the FS

Re: [j-nsp] ifstrace log filling up with debug output

Show configuration | display set | match traceoption Do you have some enabled? That's the most likely reason. Sent via RFC1925 compliant device > On Mar 23, 2024, at 11:07 PM, Joerg Staedele via juniper-nsp > wrote: > > Hi, > > i notice (at least on 21.4R3-S6.5 and 21.2R3-S6.11) that

Re: [j-nsp] gNMI on MX960

Thanks this is helpful as I've had issues with output of incomplete GPB if the image does not support telemetry. I'm also getting some incomplete data when I have all the enterprise protos loaded, hence why I posted code that shows incomplete/unparsed protos. Are there plans to distribute

Re: [j-nsp] gNMI on MX960

> On Mar 7, 2024, at 10:48 AM, Sebastian Wiesinger via juniper-nsp > wrote: > > Hi Jared, > > thanks for the answer. > >> The second thing is, does your sensor path actually complete? > > What do you mean by complete? [edit services analytics] jared@Router# set sensor asdf resource ?

Re: [j-nsp] gNMI on MX960

I’ve been spending some time on this as well, here’s the first thing I would ask you: If you do “show version | match tele” Eg: jared@Router> show version | match tele {master:0} jared@Router> vs jared@Router> show version | match tele JUNOS na telemetry [21.4R3-S5.17] {master:0} What

Re: [j-nsp] Thanks for all the fish

> On Jan 9, 2024, at 7:22 AM, Mark Tinka via juniper-nsp > wrote: > > > > On 1/9/24 11:47, Roger Wiklund wrote: > >> >> Yeah the ISP business is no fun, I feel like everyone secretly wishes they >> can start buying Huawei again, It seems it's all about the lowest price per >> 100G/400G

Re: [j-nsp] Hardware configuration for cRPD as RR

I’ll also comment that many software suites don’t scale to 10’s or 100’s of million of paths Keep in mind paths != routes and many folks don’t always catch the difference between them. If you have a global network like 2914 (for example) you may be peering with someone in 10-20 places

Re: [j-nsp] RPD coring today?

18, 2022, at 1:08 AM, Chuck Anderson via juniper-nsp > wrote: > > On Sat, Sep 17, 2022 at 06:21:51PM -0400, Jared Mauch via juniper-nsp wrote: >> Anyone else see their RPD start to core today? Seeing something weird, >> unclear if it’s local to my network or otherwise but

[j-nsp] RPD coring today?

Anyone else see their RPD start to core today? Seeing something weird, unclear if it’s local to my network or otherwise but two devices at the same time seem to be having trouble, so puzzling. Running 20.4R3.8 - jared ___ juniper-nsp mailing list

[j-nsp] UDP telemetry sensors

Most examples I've seen are GRPC dial in or out, but anyone using the UDP based telemetry with success? What format are you using? Curious as I'm seeing what appears to be corrupted packets be it PFE or RE sourced and want to check what others are seeing. - Jared Sent via RFC1925 compliant

Re: [j-nsp] 15->14 or 14 install media

You should be able to downgrade, you may need no-validate to get there. Sent via RFC1925 compliant device > On Jul 17, 2022, at 5:00 PM, Randy Bush via juniper-nsp > wrote: > > lost the ssd on a m7i. after replacing ssd, went to install. > > juniper download only had 15.1 install media,

Re: [j-nsp] Junos OS Evolved

Like many things either it works or it doesn't. I'm not a fan of paying for software with bugs personally. We do have Evo in use. Sent from my iCar > On Oct 9, 2020, at 12:55 PM, Alain Hebert wrote: > > Nice another round of customers doing JNP QA :( > > - > Alain Hebert

Re: [j-nsp] MX SCBE firmware error

Is this a newer one? I’ve seen vendors release revised boards that have the same part number but require newer software. - Jared > On Jul 2, 2020, at 8:19 AM, john doe wrote: > > Hi > > I just started up an SCBE we had on the shelf, has anyone seen this error > before? > > Major CB 0 SG2P

Re: [j-nsp] How to shut down laser on any optics

> On Jun 24, 2020, at 12:51 PM, Jared Mauch wrote: > > > >> On Jun 24, 2020, at 10:50 AM, Pierre Emeriaud wrote: >> >> Howdy >> >> I'm trying to shut down the laser from my optics from the junos cli in >> order to ease troubleshooting.

Re: [j-nsp] How to shut down laser on any optics

> On Jun 24, 2020, at 10:50 AM, Pierre Emeriaud wrote: > > Howdy > > I'm trying to shut down the laser from my optics from the junos cli in > order to ease troubleshooting. On MXes 240/480/960, mostly 17.4R2. > > 'set interface ge- disable' works *sometimes* on mpc2e with an > sfp, or on

Re: [j-nsp] MX80 upgrade path 18.4R

Make sure you have a console and a copy of your full Config and you should be able to jump directly if you use the jinstall Sent from my iCar > On Jun 14, 2020, at 1:18 PM, nikosi...@gmail.com wrote: > > It is true that the official path will tell you that you should follow from > 15 to 16

Re: [j-nsp] kmd [2371]: JTASK_SCHED_SLIP: 13sec schedular slip

These you need to talk to support about. You are likely maxing the cpu or that process and it needs to be investigated Sent from my iCar > On Apr 25, 2020, at 8:02 AM, Andrea Conti wrote: > > Hi, > > Seeing these regularly almost every 50mins on SRX345 > > In the logs I see repeated VPN

[j-nsp] EVO or 160C

Is anyone running either of these (or the combination thereof?) I’d like to compare notes on my experience so far. Public or private replies are welcome. We have noticed a number of interesting things - I want to give Juniper a bit more time to deal with before I share them in an open forum,

Re: [j-nsp] Please push Juniper to implement RFC6907

> On Oct 2, 2019, at 12:37 AM, Weber, Markus wrote: > > Melchior Aelmans wrote: >> All, please be assured that, thanks to all PRs, cases, etc, it’s on >> our (Junipers) Radar and we are looking into it. > > Thanks, looking forward to see this showing up in the very near future/ > with the

Re: [j-nsp] PTX 10003 and Junos EVO

Did you already get the 10003? I have experience with the 72q/60c but not the 80/160 yet (I think it’s in the lab now). - Jared > On Sep 25, 2019, at 6:45 PM, Anton Yurchenko wrote: > > Hi All, > > Can anybody share experiences with PTX 10003 and Junos EVO? Specifically > looking to use it

[j-nsp] MPLS Auto-BW experiences

What have you found are the most important parts of your settings, be it the underflow/overflow settings or otherwise. I’ve had a few people come to me recently asking for settings information, but I’m curious what the collective experience is with auto-bw in your environment and what settings

Re: [j-nsp] 40Gig Ether for MX480

Is there a reason to not do 4x10G or 1x100G? It’s cheap enough these days. If they’re in-datacenter I can maybe understand 40G but outside the DC it’s unclear to me why someone would do this. - Jared > On Jul 18, 2019, at 6:58 PM, John Brown wrote: > > Hi, > I have a client that is wanting

Re: [j-nsp] RSVP-TE broken between pre and post 16.1 code?

We have seen similar issues with single hop LSPs and the stats being wrong unless we explicitly configure the single hop LSPs differently with UHP. Sent from my iCar On Jul 1, 2019, at 5:59 AM, wrote: >> From: Michael Hare >> Sent: Friday, June 28, 2019 7:02 PM >> >> Adam- >> >> Have

Re: [j-nsp] Silly command?

We’ve also had to set various commands like: Chassis { fpc 0 pic 0 port 0 channel-speed disable-auto-speed-detection; } Depending on the hardware used. This is seen with some cables that can do 4x25 or 1x100g based on how the framer is set. - Jared > On Mar 18, 2019, at

Re: [j-nsp] About Secure Transport for RPKI on JUNOS

> On Dec 26, 2018, at 2:11 PM, sth...@nethelp.no wrote: > We are discussing internally what secure transport method to support. I'm happy to hear your ideas. >>> >>> 'tcp-ao' - yes... srsly. >> >> Huh? Why? No support on any server OS, AFAIK. Yes, there were patches >> for FreeBSD

Re: [j-nsp] About Secure Transport for RPKI on JUNOS

> On Dec 26, 2018, at 1:36 PM, Bjørn Mork wrote: > > Chris Morrow writes: >> On Sun, 23 Dec 2018 16:15:24 -0500, >> Melchior Aelmans wrote: >>> >>> Hi Pyxis, >>> >>> On Sat, Dec 22, 2018 at 8:58 AM Pyxis LX wrote: >>> Does JUNOS support any secure transports mentioned in RFC6810 for

Re: [j-nsp] About Secure Transport for RPKI on JUNOS

> On Dec 26, 2018, at 8:48 AM, Melchior Aelmans wrote: > > Personally I would say we need TCP-AO, not only for securing RTR but also to > replace MD5 in several protocols Yes, this would be a positive step. It will also take ~5-7 years for those on md5 to rotate to something else, but

Re: [j-nsp] About Secure Transport for RPKI on JUNOS

> On Dec 25, 2018, at 5:22 AM, Job Snijders wrote: > > On Tue, Dec 25, 2018 at 09:08:32AM +0100, Gert Doering wrote: >> On Tue, Dec 25, 2018 at 02:46:57PM +0800, Pyxis LX wrote: >>> I think SSHv2 or IPSec with good CLI integration would be nice. >>> (ex: CLI to manage SSHv2 private keys,

Re: [j-nsp] About Secure Transport for RPKI on JUNOS

> On Dec 24, 2018, at 2:38 AM, Melchior Aelmans wrote: > > Hi Chris, > >> Op 24 dec. 2018 om 05:11 heeft Chris Morrow het >> volgende geschreven: >> >> On Sun, 23 Dec 2018 16:15:24 -0500, >> Melchior Aelmans wrote: >>> >>> Hi Pyxis, >>> On Sat, Dec 22, 2018 at 8:58 AM Pyxis LX

Re: [j-nsp] MPC7 / QSFP28 I2C issue

> On Dec 7, 2018, at 10:19 AM, Theo Voss wrote: > > Hi all, > > we’re experiencing a strange issue on MPC7, configured for 2x40G 4x100G. On > two different routers, two different QSFP28 (not same PIC/Port) ports on MPC7 > do not recognize the inserted 100G LR4 transceiver while showing I2C

Re: [j-nsp] EX-SFP-10GE-T for EX4550

You need some extra electronics for the copper phy support. I don’t know if the 4550 has that. Jared Mauch > On Dec 2, 2018, at 12:36 PM, ML wrote: > > Having trouble finding concrete information on if EX-SFP-10GE-T will work in > an EX4550? Officially it doesn't look like

Re: [j-nsp] deleting ntp server from config, perhaps a bug?

> On Sep 27, 2018, at 10:51 AM, Saku Ytti wrote: > > On Thu, 27 Sep 2018 at 16:21, Chris Morrow wrote: > >> there's (of course) the 'you should always deploy a full config' crew, but... > > Reporting for duty. The ability of routers to use DNS for service names is getting to be more of a

Re: [j-nsp] LSP's with IPV6 on Juniper

> On Aug 29, 2018, at 10:28 AM, heasley wrote: > > Wed, Aug 29, 2018 at 01:17:48AM -0400, Jared Mauch: >> Yes, I’m always reminding folks that router-id may be well known to be the >> same integer representation of your IP address in the protocol encoding, but >> o

Re: [j-nsp] LSP's with IPV6 on Juniper

> On Aug 29, 2018, at 1:14 AM, Rob Foehl wrote: > > On Tue, 28 Aug 2018, adamv0...@netconsultings.com wrote: > >> Just out of curiosity is there a business problem/requirement/limitation >> you're trying to solve by not changing the next hop to v6 mapped v4 address >> and using native v6

Re: [j-nsp] Juniper vs Arista

Fixed. https://puck.nether.net/mailman/listinfo/arista-nsp > On Aug 14, 2018, at 2:34 AM, Mark Tinka wrote: > > On 14/Aug/18 08:26, Gert Doering wrote: > >> Mailman claims "there isn't yet", but if Jared would add one, I'd >> subscribe :-) >> >> >> https://puck.nether.net/mailman/listinfo/

Re: [j-nsp] Juniper vs Arista

> On Aug 13, 2018, at 9:08 PM, Colton Conor wrote: > > We have used Juniper for a long time across various lines. What I have > noticed is on the JTAC recommend version website piratically all of their > product lines are running on different code trains. They all run Junos yes, > but they all

Re: [j-nsp] 40G QSFP problems on QFX5100 after 16.1R6

I’ve seen issues on QFX-5200 depending on the optics and cabling type. We’ve had to set FEC on the ports to none. This may also be a problem with the QSFP/QSFP+ type optics. The threshold was in going from 15.x -> 17.x, so it’s possible it showed up in 16.x as well. - Jared > On Apr 26,

Re: [j-nsp] Going Juniper

> On Apr 18, 2018, at 11:06 AM, Saku Ytti wrote: > > Juniper was founded 1996 > Lua was released 1993 > Ruby was released 1995 > > And of course there was TCL before, and I'm sure other solutions > before that. Embedding programming language to your tools isn't very > new

Re: [j-nsp] Going Juniper

> On Apr 17, 2018, at 7:02 PM, Saku Ytti wrote: > > > DDoS protection out-of-the-box is for all practical purposes not > configured at all, which is unfortunate as that is what most people > run. When configured correctly Trio has best CoPP I know of in the > market, certainly

Re: [j-nsp] Going Juniper

u is also > supported for KVM but the install process is basically terrible). I suspect others would find it useful if you posted your guide. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My stateme

Re: [j-nsp] cdn.juniper.net slow?

are you having performance issues with other Akamai sites or just with this one? Can you reply to me off list with the following data: host whomi.akamai.net (or what IP address this resolves to?) - Jared > On Mar 28, 2018, at 12:15 PM, Franz Georg Köhler wrote: > > Is

Re: [j-nsp] JUNOS system file replace

Most modern versions have signed binaries and packages. Back in the early days you could cross compile on a FreeBSD box and bring it over. Jared Mauch > On Dec 10, 2017, at 10:31 AM, Chen Jiang <iloveb...@gmail.com> wrote: > > Hi! Experts > > Sorry for disturbing, we

Re: [j-nsp] Juniper equivalent to Cisco NCS5/55 and ASR9001

I would be looking at the QFX10K or the QFX52xx series. Chat with your account team for the latest. Jared Mauch > On Nov 12, 2017, at 10:14 AM, Stephen Fulton <s...@lists.esoteric.ca> wrote: > > Jason, > > For the ASR9001, the MX104 is better than the MX80.

[j-nsp] qfx-5200 bcm fragmentation oddity

has anyone seen where a qfx-5200 sends fragment needed when it’s not needed if the DF bit is set in the packet? - jared ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] improving global unicast convergence (with or without BGP-PIC)

On Tue, Apr 18, 2017 at 08:45:17PM +0100, Charlie Allom wrote: > On Tue, Apr 18, 2017 at 7:36 PM, Jared Mauch <ja...@puck.nether.net> wrote: > > You want to set indirect-next-hop in all use-cases. This allows > > faster FIB convergence upon RIB events because all

Re: [j-nsp] improving global unicast convergence (with or without BGP-PIC)

age PIC & INH to get the full performance feasible from your hardware. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ juniper-ns

Re: [j-nsp] Negative ARP caching, on an MX router (again)

Last I knew this was an architecture problem and was not yet addressed. I can't recommend Juniper right now for any platform that might get internet scanned and having a large connected subnet as a result. - Jared > On Apr 3, 2017, at 1:11 PM, Eduardo Schoedler wrote: > >

Re: [j-nsp] Juniper PTX1000

There’s 3 main boxes in this space, the Cisco NCS550x, PTX1K and the Arista 7280 all with varying positives/negatives based on your use case. I’m not aware of many other full fib scale devices in this profile, if I’m missing some I’d like to know :-) - Jared > On Dec 16, 2016, at 2:08 PM, Tim

Re: [j-nsp] need HELP black holing a /32 via BGP community.

> On Sep 15, 2016, at 12:53 PM, Matthew Crocker > wrote: > > Am I on the right track? What am I missing? Are you generating the route as a /32 as well? - jared ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] Wireless

n against it. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.ne

Re: [j-nsp] negative arp cache on JunOS?

g similar to what exists in many low-end routing devices, or if this is just a one-off problem where nobody else needs this. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are

[j-nsp] negative arp cache on JunOS?

For reasons that can’t be easily solved, we have a large subnet connected on a device that connects wireless and other devices. I’m looking for a quick answer if someone has been able to configure negative arp caching on JunOS to prevent ARP floods or excessive ARPs for the same addresses.

Re: [j-nsp] EX4600: Splitting up one QSFP+ port into four SFP+ ports?

We’ve seen varying quality of the MPO breakout cables where some lanes/channels are 2dB or more weaker based on vendor when connected to the QSFP-40G-PLR4 style optics. - Jared > On Mar 18, 2016, at 11:02 AM, Jay Hanke wrote: > > IIRC, The link budget isn't as strong as a

Re: [j-nsp] "load replace" junoscript login class permissions

> On Feb 22, 2016, at 9:06 PM, Chuck Anderson wrote: > > Historically, we've implemented scripts to sync prefix-lists with > Junoscript perl using this method: > > 1. get_configuration of the prefix-list > 2. compare prefix list in router to our local copy > 3. "load merge"

Re: [j-nsp] ip(v6) options

ome platforms, eg: ASR9K process these on the LC. I know this as we had LCs crash from a research team using these options. It only impacted one LC type and only a specific version of software. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++;

Re: [j-nsp] OS upgrade

On Jun 10, 2015, at 5:59 AM, james list jameslis...@gmail.com wrote: Question: can I upgrade from junos 11.4 (EEOL) to 13.3 (EEOL) directly or is there any constrain ? I’ve generally not had issues upgrading from one release to the next, but it’s always useful to have console handy and

Re: [j-nsp] MX series ntp clock issue ??

https://puck.nether.net/mailman/listinfo/juniper-nsp -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] EX3300 fails to recognize 3rd party optics

On May 16, 2014, at 3:54 PM, Tyler Christiansen tyler.christian...@adap.tv wrote: As much as it sucks, they're right. Most hardware vendors certify specific hardware as compatible, and if you choose to purchase outside of that is pretty much caveat emptor. Some optics are standards-based,

Re: [j-nsp] Best device to fit for a project

On Apr 1, 2014, at 2:37 AM, R S dim0...@hotmail.com wrote: For a project (70 branch offices and 2 Headquarters connected in an hubspoke topology with IPSEC over MPLS among branch and HQ) I’m looking for the best device which cover the following items: Branch: Single device At least

Re: [j-nsp] NTP Reflection

On Jan 13, 2014, at 4:25 PM, Richard A Steenbergen r...@e-gerbil.net wrote: Dear Juniper, Please tell me you didn't actually do this. Please tell me that I'm just missing something, and that you would never do something so insane. Did you guys REALLY ship code that automatically enables

Re: [j-nsp] NTP Reflection

On Jan 13, 2014, at 5:03 PM, Chuck Anderson c...@wpi.edu wrote: Shouldn't this be SOP anyway? In the past many ISPs provided time to customers from the router hardware. The difference I’ve seen here is regarding the speed that devices will respond. The Juniper devices have a faster

Re: [j-nsp] NTP Sources placement in MPLS network

We have servers in each location with NTP synced to local stratum 1 or 2 clocks. Customers are given an anycast ip that points to these for time sources. We configure routers to point at these local sources. Jared Mauch On Nov 19, 2013, at 6:53 AM, Yham yhamee...@gmail.com wrote: Thanks

Re: [j-nsp] [c-nsp] NTP Sources placement in MPLS network

/download?doi=10.1.1.116.6367rep=rep1type=pdf page-8 Regards Regards On Tue, Nov 19, 2013 at 10:31 AM, Mark Tinka mark.ti...@seacom.mu wrote: On Tuesday, November 19, 2013 02:02:43 PM Jared Mauch wrote: We have servers in each location with NTP synced to local stratum 1 or 2 clocks

Re: [j-nsp] SRX's and Wireless

I've gone with dedicated wireless hardware these days. If you are cheap check out the ubnt hardware. Their unifi stuff works well and can do payment and other services. The 802.11ac unit is sub $300 Jared Mauch On Nov 18, 2013, at 7:51 AM, Mark Menzies m...@deimark.net wrote: Thats very

Re: [j-nsp] SRX's and Wireless

753 383 ; skype://skeeve facebook.com/eintellegonetworks ; linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud On Tue, Nov 19, 2013 at 12:26 AM, Jared Mauch ja...@puck.nether.net wrote: I've gone with dedicated

Re: [j-nsp] NTP Sources placement in MPLS network

This all depends on what you need the clocking for. If you want just generic time for accurate logs? Depending on what you want to do, there's cheap NTP clocks like this: http://www.netburnerstore.com/product_p/pk70ex-ntp.htm For about $350 (including S/H in the US) you get a GPS clock. With

Re: [j-nsp] NTP Sources placement in MPLS network

On Mon, Nov 18, 2013 at 2:52 PM, Jared Mauch ja...@puck.nether.net wrote: This all depends on what you need the clocking for. If you want just generic time for accurate logs? Depending on what you want to do, there's cheap NTP clocks like this: http://www.netburnerstore.com/product_p

Re: [j-nsp] Curly braces in AS-path

On Sep 10, 2013, at 12:45 PM, Vincent De Keyzer vinc...@dekeyzer.net wrote: Hello all, the following comes from the TeliaSonera looking glass (http://lg.telia.net/ ): Router: Hong Kong Command: show route protocol bgp 1.38.0.0/17 table inet.0 inet.0: 518574 destinations, 1103564

Re: [j-nsp] 3rd optics on MX/EX/SRX

Robert, Make sure that in future requests to your vendors you ask about pluggable optics support of SFF-8472. These are all in a standard location and should be populated for the optics to be compliant. - jared On Jun 26, 2013, at 1:25 PM, Robert Hass robh...@gmail.com wrote: Hi I have

Re: [j-nsp] [OT] unit-level vs interface-level description

This will break many systems that I know of. Please don't do this :-) Jared Mauch On May 29, 2013, at 6:08 PM, Daniel Roesen d...@cluenet.de wrote: On Wed, May 29, 2013 at 05:45:25PM -0400, p...@juniper.net wrote: Should SNMP have the description for units default to the description

[j-nsp] Old Messages, etc

There were a few older messages that became unstuck from the system today. This has hammered the list machine in some weird ways and highlighted to me some changes I likely need to make to improve performance and scale in the future. Apologies for the problems and if your message was one that

Re: [j-nsp] Are we under some weird SPAM attack?

On May 2, 2013, at 2:42 AM, Mark Tinka mark.ti...@seacom.mu wrote: My suspicion is the mailing list held them (may be something to do with the fact that they all seem to be HTML-based e-mail), and maybe they're all now being released for one reason or another. As a friend of mine would

Re: [j-nsp] (no subject)

As the list owner (it's not run by juniper) these are harder to block than you think and not that easy. Jared Mauch On Jan 10, 2013, at 4:53 PM, 叶雨飞 sunyuc...@gmail.com wrote: Route through google groups , Then it only bothers moderators. On Thu, Jan 10, 2013 at 4:32 PM, Paulhamus, Jon

Re: [j-nsp] Debugging mysterious packet loss on J2350 under stress

Was it all ttl expired traffic? Jared Mauch On Dec 29, 2012, at 3:18 PM, 叶雨飞 sunyuc...@gmail.com wrote: Hi, I was woken up this morning to deal with a DDOS syn-flodd situation, pps ~15k/s. Here's monitor interface traffic: InterfaceLink Input packets(pps) Output

Re: [j-nsp] Debugging mysterious packet loss on J2350 under stress

Can still be ttl=1 there... Jared Mauch On Dec 29, 2012, at 3:49 PM, 叶雨飞 sunyuc...@gmail.com wrote: No, it is just valid syn packets. A lot of them. On Dec 29, 2012 12:23 PM, Jared Mauch ja...@puck.nether.net wrote: Was it all ttl expired traffic? Jared Mauch On Dec 29, 2012, at 3:18

Re: [j-nsp] Krt queue issues

On Oct 2, 2012, at 10:49 AM, Benny Amorsen wrote: Darren O'Connor darre...@outlook.com writes: Indeed, this is the worst thing this router can do. I have redundant routers sitting there doing absolutely nothing as this router's control-plane says everything is fine. I'm looking at using

Re: [j-nsp] route BGP stall bug

Try the hidden show krt queue command when this happens. Should give you an idea what is going on. Jared Mauch On Jul 17, 2012, at 6:03 PM, Tim Vollebregt t...@interworx.nl wrote: Hi All, This morning during a maintenance I experienced the route stall bug Richard mentioned a few times

Re: [j-nsp] How-to flash RE BIOS (U-Boot+loader) on bricked SRX650 SRE6

Flash programmers are cheap these days.. I don't know about the SRX650, but is the chip socketed? Generally I've seen these with PLCC32 chips, some are SMT some are socketed so you can remove it and read/reprogram it in an external reader. - Jared On Jul 14, 2012, at 3:28 AM, Peter J. Cherny

Re: [j-nsp] Broadband Model suggestion?

He may be looking for alternative vendors as well. :-) Zhone has inexpensive CPE hardware. I have a few in my home lab. You can deploy them for a few 100 on the cheap if you already have SMF available. (just under $300 for everything). Jared Mauch On Jul 12, 2012, at 4:56 AM, Chris Kawchuk

Re: [j-nsp] What is an acceptable amount of latency for traffic routed through an SRX cluster?

I feel compelled to share this link: http://www.snookles.com/slf-blog/2012/01/05/tcp-incast-what-is-it/ Just in the event you haven't seen it or looked deeper. Jared Mauch On Jan 9, 2012, at 8:13 PM, Morgan McLean wrx...@gmail.com wrote: We're running over a terabyte in membase, but thats

Re: [j-nsp] MPLS fast convergence without link information

On Dec 29, 2011, at 2:36 PM, Phil Mayers wrote: On 12/29/2011 06:48 PM, Mark Smith wrote: I would not expect the L2 service provider to be able to tunnel ethernet OAM (CCM etc) traffic. In general, or in this specific case? (I have high hopes for Ethernet OAM eventually, but from what

Re: [j-nsp] BGP routes processing

Show krt queue Juniper should help you diagnose the problem and you can identify what is causing the problem. Jared Mauch On Nov 20, 2011, at 4:28 PM, biwa net biwa...@gmail.com wrote: anyway you can advise on how I can check how long it takes from the Rib-in to Rib out /PFE (cmds etcc

Re: [j-nsp] 'Juniper BGP issues causing locallized Internet Problems, (Mon, Nov 7th)?

Juniper doesn't believe security bugs should be public. You must be a customer with support to access their portal. Cisco has a good policy. You can view any security bugs and get fixes regardless of your contract status. Jared Mauch On Nov 7, 2011, at 6:53 PM, Jack Bates jba

Re: [j-nsp] DHCP IPv6

On Oct 7, 2011, at 1:26 PM, Paul Stewart wrote: Does anyone have a JunOS config for IPv6 DHCP they could share? I'd like to see a working example that would be relevant to public access. We can allocate whatever size of IPv6 prefix makes sense - but I'm thinking the common proper way of

Re: [j-nsp] upgrading from old code

hope this was addressed by now. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] What does AS path attribute problem mean?

, or limiting the routes that are sent into your device to be those that are truly needed. I've seen many people think they need a full table when they do not (and point default at their upstreams anyways, so a non-match in BGP RIB fails back to a static default entry in the RIB). - Jared -- Jared

Re: [j-nsp] full table?

On Sep 20, 2011, at 1:26 PM, Keegan Holley wrote: Is it always necessary to take in a full table? Why or why not? In light of the Saudi Telekom fiasco I'm curious what others thing. This question is understandably subjective. We have datacenters with no more than three upstreams. We

Re: [j-nsp] download.juniper.net mime types

I've found most vendors don't think about the actual effort involved in remotely managing or staging devices. Jared Mauch On Sep 13, 2011, at 3:41 PM, Paul Stewart p...@paulstewart.org wrote: Yup... thought it was just me... I use Lynx all the time to download from Juniper (or at least try

Re: [j-nsp] download.juniper.net mime types

to download directly to the device as a good second option even, as they tend to be better connected than some office networks. Jared Mauch On Sep 13, 2011, at 3:44 PM, Daniel Stagner daniel.stag...@xo.com wrote: Funny that you say that.. IE is the one browser I don't test against, because

Re: [j-nsp] What does AS path attribute problem mean?

juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ juniper-nsp mailing

Re: [j-nsp] What does AS path attribute problem mean?

__ ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net

Re: [j-nsp] MX RE how fast is slow

, some timing issues etc. RSP720 has less beefy CPU but feels lot snappier with RIB. When you said repopulating above, is this shown as a slowly updating or flushing of the krt queue? - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue

Re: [j-nsp] [m10i] PIC-FPC throughput

On Aug 29, 2011, at 6:00 PM, Nick Kritsky wrote: Hi all, From the Juniper documentation I know that there is a throughput limitation of 3.2 Gbps per FPC on m10i routers. Does it mean that there is 800Mbps limitation on each PIC inserted in PIC slot on given FPC? Or is it an aggregate

Re: [j-nsp] Code upgrade to 10.4R4.5

I'm sure someone from Juniper will say that going forward like this isn't supported. I recommend skipping the validate step and making sure you have good oob. You can also try to find something where the upgrade path is supported, in theory you need to jump to 10.0 before 10.4 but i've found

Re: [j-nsp] MX480 troubles.

On Apr 13, 2011, at 1:27 PM, Chris Evans wrote: Question to you all... It seems like alot of folks run bleeding edge code with some if these major bugs popping up.I also get the impression that a lot of shops don't test code before they deploy. I'm just curious how this works for you.

Re: [j-nsp] 10.0 or 10.4?

On Mar 15, 2011, at 6:27 PM, Daniel Roesen wrote: Our RANCID caught that on on of our lab MXes within less then one hour after upgrading the box. Systest didn't - or it wasn't deemed a show-stopper for release. I've found it interesting how many defects can be caught by reviewing the pre vs

Re: [j-nsp] Offline config verification

Just load them on the device and rollback and use commit-check as your middle step. - Jared On Jan 14, 2011, at 4:40 PM, Nvvk Brnn wrote: Hi: I have some perl scripts that generate Juniper configs. I need to verify that these configs are Juniper compatible (as there could be bugs in my

Re: [j-nsp] Centralized scripts and copying to redundant routing-engines..

On Sep 9, 2010, at 9:31 PM, Chris Evans wrote: I have a question, hopefully someone has an answer.. I have setup centralized stored commit scripts, however I'm running into issues with devices (EX and MX) that have redundant routing-engines. The files have to be on both RE's to

Re: [j-nsp] M7i crash with strage log entry

Have you disabled adaptive standby? I can look up the configuration in a few if you don't have it. Sent from my iThing On Jun 30, 2010, at 5:46 AM, Thomas Eichhorn t...@te3networks.de wrote: Thanks for all your help, I cannot simply remove the disk nor the cf card, the box is to far away.

Re: [j-nsp] M20 FE PIC

On Mar 11, 2010, at 9:43 AM, David Reader wrote: Can any of you confirm if the P-4FE-TX module for the M20 supports 10-Base-T operation, or if it is 100Mbit only? 100m only. - Jared ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

  1   2   >