Re: [j-nsp] how to see users

Thanks everyone. Very helpful Aaron -Original Message- From: Tore Anderson [mailto:t...@fud.no] Sent: Friday, March 13, 2015 5:46 AM To: Aaron Cc: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] how to see users * Aaron aar...@gvtc.com I have a user a I've config'd. I see that I

[j-nsp] how to see users

I have a user a I've config'd. I see that I can view it within the config. Also, I see that I can see users actively logged in. But how do I show users that are configured without viewing it in the config file? Aaron root@j1# show system login user a { uid 2000

[j-nsp] junos cli prompt

Is there a way to not show the username in the prompt ? Is there a way to make set cli commands persist across reboots ? Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] ddos rtbh service

I usually ask of them.. TWC seemed a little harder for me to get through the layers of the company in order to finally talk to the right person..) Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] ddos rtbh service

...@puck.nether.net] On Behalf Of Colin Baker Sent: Tuesday, April 07, 2015 9:28 AM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] ddos rtbh service On 2015-04-07 08:31, Aaron wrote: Now, I'm getting a third internet connection with ATT. how do they do it ? Any insight into how you all use ATT

[j-nsp] Cisco ME3600 migration to something with more 10 gig ports

Cisco ASR920's for (4) 10 gig ports and several (1) gig ports. Would this be good ? What are some comparable Juniper products that would fit here ? Is Juniper better in that area ? Aaron ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] Cisco ME3600 migration to something with more 10 gigports

Thanks everyone for your input. Does the mx80 support all the mpls L3vpn and L2vpn things I mentioned ? Aaron From: Mark Tinka [mailto:mark.ti...@seacom.mu] Sent: Tuesday, July 14, 2015 7:41 AM To: Phil Bedard; Ivan Ivanov; Aaron Cc: Juniper List Subject: Re: [j-nsp] Cisco

Re: [j-nsp] Cisco ME3600 migration to something with more 10 gig ports

? Any other comparable products out there y'all know of? Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Raphael Mazelier Sent: Tuesday, July 14, 2015 12:45 PM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] Cisco ME3600 migration to some

[j-nsp] EX4550 - MPLS L3VPN - vrf forwarding without bgp license ?

table is being learned. BUT NO TRAFFIC SEEMS TO BE FORWARDED. EX4550 running JUNOS 12.2R1.9 If the problem is understood to be regarding the bgp license, then just let me know and I'll troubleshoot elsewhere. thanks Aaron

[j-nsp] nat / cg nat / vrf aware nat (pe nat)

? Or do most Juniper SP devices support this ? Do only certain products support sp/cg nat ? Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] nat / cg nat / vrf aware nat (pe nat)

Thanks, yes, I would be wanting NAPT (I believe this is NAT Overload/PAT) yes I would want this for the public IP address savings that it achieves. If I do NAPT, why would I want MS-DPC over MS-PIC or vice versa? Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

nbr global 10.101.0.254 Active open failed - open timer running u all All possible debugging has been turned off Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

All possible debugging has been turned off Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

unknown MTU 1500 1500 Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MAC filter on EX switches

check succeeds commit complete {master:0}[edit] Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Muhammad Atif Jauhar Sent: Wednesday, December 09, 2015 9:55 AM To: Tim St. Pierre Cc: Juniper List Subject: Re: [j-nsp] MAC filter on EX

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

d PW: neighbor 10.101.12.250, PW ID 10100, state is up ( established ) MTU 1500 1500 Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MAC filter on EX switches

I’m not sure what you mean Eduardo. I just typed that mac address into the firewall filter as a test. I did not test this to see if it would really stop traffic. Aaron From: Eduardo Schoedler [mailto:lis...@esds.com.br] Sent: Wednesday, December 09, 2015 1:47 PM To: Aaron Cc

[j-nsp] juniper hack news

il.gvtc.net/owa/redir.aspx?C=7312c58d24cd4b6a8f8f85b851bb6702; URL=http%3a%2f%2fthehackernews.com%2f2015%2f12%2fhacking-juniper-firewall-se curity.html> Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Collapsed MPLS CE/PE/P configuration

: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Monday, December 21, 2015 11:04 AM To: 'Matthew Crocker'; 'jnsp list' Subject: Re: [j-nsp] Collapsed MPLS CE/PE/P configuration Maybe this will help... this makes L3VPN work for me on a PE... set interfaces ge-0/0/47

Re: [j-nsp] Collapsed MPLS CE/PE/P configuration

-target import target:1:1 set routing-instances one vrf-target export target:1:1 set routing-instances one vrf-table-label Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Matthew Crocker Sent: Monday, December 21, 2015 9:42 AM To: jnsp

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

re and all is well. Aaron p.s. besides, bringing up l2vpn AF on the 5048 and 104 , as I understand it, SHOULD NOT, cause any other PE's to renegotiate capabilities and AF's on their bgp neighbor sessions with the RR. -Original Message- From: Adam Vitkovsky [mailto:adam.vitkov...@gamma.co

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

. http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/command/irg-cr-book/bgp-a1.html#wp1306388590 Aaron -Original Message- From: Adam Vitkovsky [mailto:adam.vitkov...@gamma.co.uk] Sent: Tuesday, November 24, 2015 4:43 AM To: Aaron; juniper-nsp@puck.nether.net; arsen

[j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

Notifications and drop their MP-BGP neighbor sessions to the Route Reflector core and purge all their vpnv4, vpnv6 and l2vpn topology tables ! Bad customer impact. lots of trouble. "Rollback 1" on ACX and MX and all is well Anyway have trouble in this area ? Aaron P.S. fo

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

Thanks Dale, RR’s are (2) cisco asr9000’s (one is a 9006 and the other is a 9010), configured in a RR cluster. Both run IOS XR 4.1.2 Aaron From: dale.s...@gmail.com [mailto:dale.s...@gmail.com] On Behalf Of Dale Shaw Sent: Monday, November 23, 2015 4:47 PM To: Aaron Cc: Adam Vitkovsky

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

exchange issue, but now I'm wondering if it's NLRI related. Thanks group, Aaron -Original Message- From: Adam Vitkovsky [mailto:adam.vitkov...@gamma.co.uk] Sent: Monday, November 23, 2015 5:55 PM To: Aaron; juniper-nsp@puck.nether.net; arsen...@btinternet.com Subject: RE: [j-nsp

Re: [j-nsp] Juniper and Cisco - BGP MPLS L2VPN VPLS interoperability

the juniper's signaling lsp's with each other... I wonder if that caused problems with the other PE's in my network. Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Monday, November 23, 2015 9:50 PM To: 'Adam Vitkovsky

Re: [j-nsp] MX104 capabilities question

I realize these are 2 totally different style boxes, but I'll ask anyway... An ACX5048 with (72) 10 gig ports (or... (48) 10 gig ports with (6) 40 gig ports) at ~$15K ... Would anyone consider putting a ACX5048 in place of a MX104/ASR9k ? - Aaron

Re: [j-nsp] MX104 capabilities question

Thanks, Let me test this claim that an acx5048 cannot hold a full bgp table…… anyone know a way to get a test bgp session for a full feed ? -Aaron “I think the big thing the ACX5048 is lacking is the ability to hold a full routing table compared to the MX104 and ASR9001. Remember

Re: [j-nsp] MX104 capabilities question

You mention the NCS5K ... have you seen one actually work ? My tests turned up really bad findings in my lab a few months ago. Has cisco fixed that thing ? I'd really like to know because it was a pretty sweet box with ~40 - 10gig and 4 - 100gig, but had major issues. - Aaron

Re: [j-nsp] 6VPE routes learned and hidden - ACX5048

target:1:1 Communities: target:1:1 Communities: target:1:1 - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] 6VPE routes learned and hidden - ACX5048

it in both did the route show up - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] Why the 2 day delay on emails for Juniper NSP maillist

(not all that often) it seems that the list is down and not processing posts. Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] 6VPE routes learned and hidden - ACX5048

Anyone know why these routes are hidden ? - Aaron agould@eng-lab-5048-2# run show bgp summary Groups: 1 Peers: 1 Down peers: 0 Table Tot Paths Act Paths SuppressedHistory Damp State Pending bgp.l3vpn.0 961961 0 0 0 0

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

to D50 if I need to. - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MX Lab config for virtual-switch

routing-instances acme protocols vpls interface ge-0/0/38.102 set routing-instances acme protocols vpls interface ae5.101 set routing-instances acme protocols vpls interface ae5.102 set routing-instances acme protocols vpls no-tunnel-services - Aaron

Re: [j-nsp] 6VPE routes learned and hidden - ACX5048

See!!? This is why I love this JNSP mail list. Because y'all are awesome. Thanks Hugo you nailed it. No I didn't have that. I put it in and it works now. No more hidden routes and I now have IPv6 connectivity within this MPLS L3VPN. set protocols mpls ipv6-tunneling Thanks! - Aaron

Re: [j-nsp] ACX50xx l2circuit counters

Output packets: 2 {master:0} agould@blcn-h-5048> show interfaces ge-0/0/36.0 | grep pack Input packets : 20857 Output packets: 2 From: Giuliano Medalha [mailto:giuli...@wztech.com.br] Sent: Monday, June 20, 2016 4:40 PM To: Aaron <aar...@gvtc.com> Cc: Nath

Re: [j-nsp] ACX50xx l2circuit counters

So far my acx5048's are working nicely... I just swung a dual 10 gig connected Cisco uBR10K with 4,000+ cable modem subscribers behind a pair of my acx5048's... been running nice for a few weeks now... pumping multi-gigabits of traffic through there during peak time - Aaron

Re: [j-nsp] ACX50xx l2circuit counters

Sounds great. Sharing is good. Do you know status of either of these with ACX5048 ? MC-LAG and basic Virtual Chassis ? Also, yes Nathan I think I see that snmp firewall thing… thanks… I run both D20 and D50 in my lab…. agould@eng-lab-5048-1> show version fpc0:

Re: [j-nsp] ACX50xx l2circuit counters

25 14:38:24 2016 1 - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] ACX5048 - fpc buffer question please

01920 0 45 What does this buffer 45 mean ? - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] understanding interface encapsulation, family ... and more

derlying interface-specific options > tcc Translational cross-connect parameters > vpls Virtual private LAN service parameters [edit] Thanks, Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Acx5048 vpls vlan-id

29 2016 1 10.101.12.248 rmt Up Feb 5 05:59:29 2016 1 10.101.12.250 rmt Up Feb 5 05:59:29 2016 1 10.101.12.251 rmt Up Feb 5 05:59:29 2016 1 Aaron -Original Message- From: juniper-nsp [mail

Re: [j-nsp] Juniper ACX

and it looked good. I tested L2VPN VPLS BGP Auto Discovered w/BGP Sig and /LDP Sig and both were functional. Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Mark Tinka Sent: Monday, February 22, 2016 12:31 AM To: Saku Ytti <s...@ytti

Re: [j-nsp] Enable EVPN on existing mpls l3vpn network

... No outage on pe. Love it Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of tim tiriche Sent: Thursday, February 18, 2016 12:44 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Enable EVPN on existing mpls l3vpn network Hello, I have

Re: [j-nsp] Segment Routing ( SPRING )

ig-isis-af)#segment-routing prefix-sid-map receive ? RP/0/RSP0/CPU0:eng-lab-9k-1(config-isis-af)#exit RP/0/RSP0/CPU0:eng-lab-9k-1(config-isis)#exit RP/0/RSP0/CPU0:eng-lab-9k-1(config)#exit Uncommitted changes found, commit them before exiting(yes/no/cancel)? [cancel]:no RP/0/RSP0/CPU0:eng-lab-9k

Re: [j-nsp] cgnat routing architecture

Contributing Routes (2): 10.144.1.4/30 proto Direct 10.144.0.0/24 proto BGP [edit] From: Faizal Rachman [mailto:faizal...@gmail.com] Sent: Monday, April 11, 2016 4:55 AM To: Aaron <aar...@gvtc.com> Cc: juniper-nsp <ju

[j-nsp] cgnat routing architecture

nodes. I've recently learned about conditionally generated routes and wonder if there's a nice solution there. I welcome any and all suggestions. Thanks y'all Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] nat - non-inline - service card ms-mic-16G in mx104

Anybody know what I'm doing wrong ? I can't seem to get nat to work. I'm trying to do v4 to v4 with port translation (NAPT-44) using NON-inline nat. so I'm using an MX104 with a MS-MIC-16G FPC 1 BUILTIN BUILTIN MPC BUILTIN MIC 0 REV 17

Re: [j-nsp] Segment Routing ( SPRING )

Oh man, watch out... now I got your number ! ...just kidding, sort of... lol Thanks David, et al, it's great to be a part of a knowledgeable and well-connected community as this Aaron -Original Message- From: david@orange.com [mailto:david@orange.com] Sent: Friday, March 4

Re: [j-nsp] Segment Routing ( SPRING )

Thanks David, I should've read this email before asking my previous question. I just got this book yesterday. Page 92 says SPRING is aka SR. Thanks Also I see in preface page xxii that one of the four key contributors to this book was a guy named David Royis this you? :) Aaron

Re: [j-nsp] Segment Routing ( SPRING )

These topics are new to me... I understand that SR is Segment Routing and SPRING is Source Packet Routing in Networking... so I want to know is "SR" and "SPRING" the exact same thing ? or are there some differences in SR and SPRING ? Aaron -Original Message---

Re: [j-nsp] Segment Routing ( SPRING )

I don't have answers for you Clarke, hopefully others out there will... But, I do have a question... Does SPRING require an IGP ? And if so, is ISIS the only IGP that SPRING will/can use? Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf

Re: [j-nsp] A conceptual advice on QoS is needed

et through during attacks... right ? 2 - if you have links that are regularly experiencing congestion, I mean like daily/nightly and sustained congestion for an hour or more, then is qos really the "fix" for that ? sounds like that's a bandwidth issue. Aaron -Original Message---

Re: [j-nsp] A conceptual advice on QoS is needed

Right, very good Saku, thanks. Interestingly, one of my dsl bb customers may be very offended to find out that I consider their neighbors voice traffic to be more important than their dsl bb traffic :| perhaps that's what you meant about being careful with how I market it. Aaron

Re: [j-nsp] nat - non-inline - service card ms-mic-16G in mx104

flows is what I needed to use to see flows. Aaron From: Alexander Arseniev [mailto:arsen...@btinternet.com] Sent: Tuesday, March 8, 2016 10:36 AM To: Aaron <aar...@gvtc.com>; juniper-nsp@puck.nether.net Subject: Re: [j-nsp] nat - non-inline - service card ms-mic-16G in mx104 Hello,

[j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

I need to only allow 172.17.0.0/16 to be able to remotely access the ACX5048 for snmp, telnet, ssh, http(s) services. How would I do this? Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

[j-nsp] access-internal routes

what are these routes (access-internal) ? i'm seeing them actually being sent over my MPLS L3VPN into my other pe's as /32 routes. very interesting. and seemingly very inefficient and busy. not sure that I like the idea of host routes for 10's of thousands of hosts being injected into my mpls

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

Thanks Wayne, I tried it and get this error... agould@eng-lab-acx5048-1# commit confirmed 1 [edit interfaces lo0 unit 0 family inet] 'filter' Referenced filter 'local_acl' can not be used as default/physical interface specific with lo0 not supported on ingress loopback interface error:

Re: [j-nsp] access-internal routes

Thanks Daniel, I recall that's what another guy suggested... he gave my like 20 lines of junos code... then I found that one-line that did the trick. Aaron -Original Message- From: dverl...@gmail.com [mailto:dverl...@gmail.com] On Behalf Of Daniel Verlouw Sent: Friday, April 1, 2016 3

[j-nsp] help

___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] access-internal routes

a 10.101.12.245 (nexthop in vrf default), 00:08:42 Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

Thanks Daniel, this is encouraging... I wonder if I can get the specifics on when that will be available Aaron -Original Message- From: dverl...@gmail.com [mailto:dverl...@gmail.com] On Behalf Of Daniel Verlouw Sent: Friday, April 1, 2016 3:03 PM To: Aaron <aar...@gvtc.com&

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

interface access-classes or acl's attached to snmp process, etc... I'll get over it, just wanted to vent :| I really wish I could find an elegant/simple way to protect system processes (snmp, http, ssh, etc) Thanks y'all Aaron -Original Message- From: Eduardo Schoedler [mailto:lis

Re: [j-nsp] access-internal routes

Thanks Aaron ...and sorry folks for that email showing up on the list twice... for some reason I was unable to post for the last 3 days (your blessing , lol) ... ahhrmm, so during that time I tried posting that access-internal route question twice... both came through today. Y'all have a nice

Re: [j-nsp] help

Disregard this... -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Wednesday, March 30, 2016 6:54 PM To: juniper-nsp@puck.nether.net Subject: [j-nsp] help ___ juniper-nsp mailing list

Re: [j-nsp] access-internal routes

researched and came across the dhcp-relay thing. If you can give me a helpers bootp config to work in my routing-instance then I might do it. Would like to know the compelling reason to go with bootp or dhcp relay... Thanks again gents Aaron -Original Message- From: juniper-nsp

[j-nsp] protect ssh and telnet

in Junos ? I only want to allow ssh and telnet from certain trusted management subnets. Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

[j-nsp] help

___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

-mx104-cgn# rollback load complete [edit] agould@eng-lab-mx104-cgn# run show version Hostname: eng-lab-mx104-cgn Model: mx104 Junos: 13.3R6.5 - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net

Re: [j-nsp] ACX5048 - vlan-map conflict with routing-instance with vlan-id tags

H, ok then, I wonder if anyone knows if there's a way to configure a vlan list with tags 10 and 17 into the same unit number ? that way when I put that unit/logical interface into a vlan (aka BD) then it's only one unit/logical interface. Aaron -Original Message- From: dverl

[j-nsp] CGNat PBA - MX104 w/MS-MIC

I'm trying to enable port block allocation (pba) for lessening the tons of translation logs I'm seeing in my syslog server. I'm getting an error, shown below. Anyone know how to enable PBA ? I'm using an MX104 with MS_MIC-16G. agould@eng-lab-mx104-cgn# set services nat pool nat1 port

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

other1 then translated source-pool nat1 set services nat rule rule1 term other1 then translated translation-type napt-44 - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

slated translation-type napt-44 -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Friday, April 22, 2016 7:28 PM To: 'juniper-nsp List' <juniper-nsp@puck.nether.net> Subject: [j-nsp] CGNat PBA - MX104 w/MS-MIC I'm trying to enabl

Re: [j-nsp] ACX5048 - vlan-map conflict with routing-instance with vlan-id tags?

complete {master:0}[edit] agould@eng-lab-5048-1# - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

OCK_ALLOC: 10.144.0.180 -> 1.2.3.131:32024-33023 0x571e84bf - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ACX5048 - vlan-map conflict with routing-instance with vlan-id tags

Typo... I meant to say ... irb.10 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] ACX5048 - vlan-map conflict with routing-instance with vlan-id tags

Thanks Daniel, I tried a few things, no success yet. Goal is to simply take vlan tags on ge-0/0/38 for 802.1q tags 10 and 17 and put them into the same vlan structure so that they share the isb.10 subnet. delete vlans vlan10 set interfaces ge-0/0/38 flexible-vlan-tagging set interfaces

Re: [j-nsp] ACX5048 - vlan-map conflict with routing-instance with vlan-id tags

failed {master:0}[edit] -Original Message- From: dverl...@gmail.com [mailto:dverl...@gmail.com] On Behalf Of Daniel Verlouw Sent: Thursday, April 21, 2016 1:36 PM To: Aaron <aar...@gvtc.com> Cc: juniper-nsp List <juniper-nsp@puck.nether.net> Subject: Re: [j-nsp] ACX5048 - vlan-

Re: [j-nsp] LDP flaps specifically present on ACX Juniper routers (ACX4000 and ACX1100)

Thanks Alexandre, I meant the LDP RIDi recall hearing something about the LDP RID needing to be a /32 and ip-reachable from adjacent (T)LDP neighbors. Aaron root@r8-j> show configuration interfaces lo0.0 family inet | display set set interfaces lo0 unit 0 family inet address 1.1.1.8/32 r

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

with ELINE (mef speak for p-to-p pw) and seemed ok I have a few more things I need to test, but at this point I've been pleased with the ACX5048. I love the (48) 10 gig interfaces (6) 40 gig in a 1U size ! - Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun

Re: [j-nsp] ACX5048 - protect remote access (telnet, ssh, http, snmp)

How about for ACX5048 ? I see two Junos versions... 15.1X54-D25 15.1X54-D20 Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Daniel Rohan Sent: Wednesday, April 27, 2016 12:54 PM To: Mark Tinka <mark.ti...@seacom.mu> Cc: Saku Y

Re: [j-nsp] LDP flaps specifically present on ACX Juniper routers (ACX4000 and ACX1100)

it is set to. I'm not sure this is your problem, but it could be. Aaron p.s. it's probably dumb/unnecessary to have a snmp mgmt. station hit all the OIDs on the network devices since you probably don't want/need that much info queried anyway. -Original Message- From: juniper-nsp

Re: [j-nsp] MX80 base model

On that google site, they appear to have their 40 gig number wrong for the ACX5048... (6) 40 gig interfaces... then 6*4 = 24 + 48 = 72 total 10 gig interfaces

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

I have been curious about the cisco catalyst 6800 line… seems that the 6840 might fit this realm of smaller mpls pe… not sure of price… http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6840-x-switch/datasheet-c78-734470.html - Aaron

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

-cgn (FPC Slot 1, PIC Slot 0) 2016-05-11 21:19:57: {cgn-sset}[jservices-nat]: JSERVICES_NAT_PORT_BLOCK_RELEASE: 10.144.0.102 -> 1.2.3.250:14900-14999 0x5733a0ae - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.

Re: [j-nsp] CGNat PBA - MX104 w/MS-MIC

Yes these are syslog traps as they arrive at my syslog server... they are sent from the MX104 running cgnat. This is good info that I cannot change that embedded utc time stamp on the cgnat syslog trap. Thanks Alex -Aaron ___ juniper-nsp mailing

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

then I might go with mx104 or mx240/480 with ms-mpc licensed npu’s. (I have vMX in GNS3 virtual environment) ….who knows, maybe when we begin planning the increase of our 20 gbps asr9k cisco ring, we may consider mx480’s there too. -Aaron

Re: [j-nsp] ACX5048 - Virtual Chassis

ACX5K Fan Tray 3, Front to Back Airflow - AFO Fan Tray 4 ACX5K Fan Tray 4, Front to Back Airflow - AFO {master:0} - Aaron p.s. this doesn't seem to work either agould@eng-lab-5048-1> request virtual-chassis vc-port set interface ge-0/

[j-nsp] ACX5048 - Virtual Chassis

Anyone ever try to virtual chassis (2) ACX5048's together into one ? -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

for… We liked and settled on the juniper acx5048… Hope that helps… - Aaron From: Colton Conor [mailto:colton.co...@gmail.com] Sent: Friday, April 29, 2016 3:29 PM To: Aaron <aar...@gvtc.com> Cc: Jerry Jones <jjo...@danrj.com>; Juniper List <juniper-nsp@puck.nether.net&g

Re: [j-nsp] [SPF:Passed] Re: EX4600 Vs QFX 5100 VS ACX 5048

ingNonforwarding instance virtual-router Virtual routing instance vrf Virtual routing forwarding instance -Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Virtual route reflector physical layout

If you are talking about cisco XRv (IOS XR virtual) I'm running it in GNS3 successfully. I think cisco may refer to that as virtual RR, but not sure - Aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

ort some of that too in my network, but not as much as eline and elan Acx label stack ? dunno did I read 3 somewhere ? don't recall Snmp counter on vlan or subint ? dunno yet but will probably soon find out as solarwinds is watching a couple of my deployed acx's... check

Re: [j-nsp] Routing specific traffic on LSPs

I wondering a couple things... 1 - would the lsp would need to be defined as going over the radio link that Anand is talking about ? 2 - would he put a route-filter x.x.x.x/xx for only his critical subnets that he needs to route over the radio link lsp ? - Aaron -Original Message

Re: [j-nsp] [SPF:Passed] Re: EX4600 Vs QFX 5100 VS ACX 5048

good notes on my findings during testing so please let me know what you need and I'll try to dig it up, or recall it from memory - Aaron -Original Message- From: raf [mailto:r...@futomaki.net] Sent: Wednesday, May 4, 2016 4:05 AM To: Aaron <aar...@gvtc.com>; juniper-nsp@puck.neth

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

introducing the acx5048 into my mpls cloud with other 9k’s and me3600’s. Are there other mpls pe’s out there on the market ? probably so…. I didn’t have time to test them all -Aaron ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] EX4600 Vs QFX 5100 VS ACX 5048

Dunno, the mail list might know - aaron ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Cisco vs Juniper confused

don't allow 5 gbps of DNS reflexive attack !! only say for instance 25 mbps of dns...something that makes sense. Aaron -Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Satish Patel Sent: Thursday, April 14, 2016 4:35 PM To: juniper-nsp

Re: [j-nsp] Cisco vs Juniper confused

levels of security for various things... acls for hard denies... rtbh for specific purposed of momentarily bh'ing... QoS as a mitigation strategy for attacks... like I use policers for certain traffic levels that are often times abused as attack vectors... Hope that helps Satish Aaron

  1   2   3   4   5   6   >