Re: [j-nsp] Power ON?

2018-04-03 Thread Ola Thoresen
On 02. april 2018 21:00, Chris Adams wrote: Working on a new MX204, I noticed this: user@router> request vmhost power-o? Possible completions: power-offPower off the software on RE power-on Power on the system Really? The RE VM can tell the VM host to power ON? :

Re: [j-nsp] MX204 and copper SFP?

2018-04-05 Thread Ola Thoresen
On 05. april 2018 10:44, Saku Ytti wrote: Since of the fathers. 'Cisco did it'. I also see no value in it. Don't we all love that "linux" changed from eth0, eth1, eth2... to beautiful stuff like wwp0s20u4 and enp0s25... Just call them port-x/x/x and be done with it. /Ola (T) ___

Re: [j-nsp] Going Juniper

2018-04-11 Thread Ola Thoresen
On 11. april 2018 11:31, Saku Ytti wrote: On 11 April 2018 at 04:31, Chris via juniper-nsp wrote: Since the MX104 has user replacable RE's I really wish Juniper would at least offer a different option with a more beefy CPU/RAM but I don't think that would ever happen... I think JNPR believes

Re: [j-nsp] Going Juniper

2018-04-11 Thread Ola Thoresen
On 11. april 2018 12:51, Saku Ytti wrote: On 11 April 2018 at 13:43, Ola Thoresen wrote: We have recently started playing with MX204 and Junos Fusion, and that makes a really nice setup. With either EX4300 (for 1G) or QFX5100 (for 10G), you get a lot of ports and a great routing engine for

Re: [j-nsp] Going Juniper

2018-04-12 Thread Ola Thoresen
vlan (interface xe-100/0/0.100, vlan 100 on a MX204 with a QFX5100 as satellite) and a remote MX80 a few days ago, and it worked flawlessly. Rgds. Ola Thoresen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] SRX 300 VPN

2018-05-25 Thread Ola Thoresen
On 25. mai 2018 20:37, Roger Wiklund wrote: Juniper sold Junos Pulse and that became Pulse Secure. The SRX300 supports SSL VPN but requires the third party NCP client (not free). Well.. That "SSL-VPN" is not really SSL-VPN.  It is simply dynamic IPSec over tcp port 443, wrapped in a GUI on t

Re: [j-nsp] License Key Question

2018-07-07 Thread Ola Thoresen
Hi, Juniper has a few different licensing-schemes, some of which are trust based. They have licences that are paired with the serial number, which will not install on a different device than it was purchased for. This is typical for subscription and time limited licenses. Then they have some

Re: [j-nsp] SXR340 One to One NAT

2018-08-08 Thread Ola Thoresen
On 08. aug. 2018 11:44, sameer mughal wrote: Hi, Can anyone help me to configure static NAT bidirectional? It is pretty straight forward: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-nat-static.html Rgds. Ola Thoresen nLogic AS

Re: [j-nsp] SXR340 One to One NAT

2018-08-08 Thread Ola Thoresen
urity zones and rule-sets and rules to suit your setup. On Wed, Aug 8, 2018, 3:27 PM Ola Thoresen <mailto:o...@nytt.no>> wrote: On 08. aug. 2018 11:44, sameer mughal wrote: > Hi, > > Can anyone help me to configure static NAT bidirectional? It is

Re: [j-nsp] SRX RA client

2018-08-15 Thread Ola Thoresen
On 15. aug. 2018 12:36, Nathan Ward wrote: Hi all, Anyone know how to make an SRX (SRX300, branch thing), accept default routes from an IPv6 RA? It should work if you add your external interface under "protocols router-advertisement" and make sure you allow router-advertisments in your fire

Re: [j-nsp] SRX RA client

2018-08-15 Thread Ola Thoresen
On 15. aug. 2018 13:38, Nathan Ward wrote: I’ve updated those to match in case it cared for some reason, still no dice. Never tested it with a 300, but it did work fine with vSRX last time I did it. My 300 is connected to a IPv4-only network at the moment (shame on my ISP!). It doesn’t ma

Re: [j-nsp] SRX300

2018-12-02 Thread Ola Thoresen
I believe the usb console is disabled by default, and you need to use a regular (rs232) console cable for the initial configuration. At least it was set up that way in earlier releases. You can then enable the USB console in the configuration. On 2 December 2018 11:03:59 Mohammad Khalil wrote:

Re: [j-nsp] Old JunOS upgrade path

2019-03-08 Thread Ola Thoresen
Not that I am in any way authoritative... And I think  Juniper has official guidelines, but these might be a bit conservative. Depending on your config and feature sets. But I would at least suggest doing a few steps. 13.2 to 15.1 should be ok - skipping 14. 15.1 to 17.1 (and probably even 17

Re: [j-nsp] Old JunOS upgrade path

2019-03-08 Thread Ola Thoresen
My point is only that they made a _lot_ of changes to the underlaying systems between 12/13/14 and 15 (as far as I understand it 15 is basically forked from 12, so changes done in 13 and 14 are not necessarily in 15).  But they still changed a lot, especially the whole change from running as a

Re: [j-nsp] what do do with bug reports

2020-06-15 Thread Ola Thoresen
Hi, File a JTAC problem report, either yourself via a Juniper Partner (where you should have support for your devices). Rgds. Ola Thoresen On 15.06.2020 08:15, Baldur Norddahl wrote: Hello What am I supposed to do with glaring bugs? Are Juniper interested in knowing those or don&#

[j-nsp] SLAX/Curl is html-entity-encoding content

2016-02-03 Thread Ola Thoresen
posting it, it is not translated, but unfortunately the receiving end does not seem to understand the "Content-transfer-encoding" header, and simply parses the data as it is received. Is there any way to tell the curl-library NOT to translate the content? Rgds. Ola Thoresen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] MPC2E NG doesn't come online with SCBE2 and JUNOS 14.1R6.4

2016-02-08 Thread Ola Thoresen
s14.1/topics/task/installation/junos-continuity-software-package-installing.html Rgds. Ola Thoresen nLogic AS ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Routing Engine filtering on EX with VRF

2016-03-19 Thread Ola Thoresen
On 18. mars 2016 16:52, Raphael Mazelier wrote: Hi folks, Say I have an public IP on a interface in a VRF on a EX4550. I can have miss something, but I do not find how placing a good filter to protect the RE to be reach via this IP. I've test setting a loopback with the filter on the vrf, or

Re: [j-nsp] Filter based forwarding for IPv6 with SRX

2016-09-17 Thread Ola Thoresen
f the config is allowed. Rgds. /Ola Thoresen ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] EX4600 : Ping problem

2016-11-28 Thread Ola Thoresen
ming back. On a local network the two statements are identical. You don't have a "route" to the host, as you expect it to be directly connected, hence the reply "no route to host" when you don't get an arp-reply. Rgds. Ola Thoresen ___

Re: [j-nsp] Meltdown and Spectre

2018-01-08 Thread Ola Thoresen
On 08. jan. 2018 12:10, Saku Ytti wrote: On 8 January 2018 at 12:58, Benoit Plessis wrote: I can SCP any binary i want on any JunOS platform i own (EX,SRX,QFX), QFX 5100 let you run arbitrary VM ! Pretty sure Gert meant that the binaries need to be signed since maybe last 10years. But I thin

Re: [j-nsp] How is SLAX "version" statement internally used?

2018-02-01 Thread Ola Thoresen
On 01. feb. 2018 14:04, Martin T wrote: Hi! "version" statement in SLAX script is mandatory and argument for version statement has to be either 1.0 or 1.1. Based on my testing, 1.2 works as well for example in Junos 16.1R2.11. However, is there any difference between "version 1.0" and "version

Re: [j-nsp] Juniper SRX 58K cluster IPv6 enable

2018-02-20 Thread Ola Thoresen
On 20. feb. 2018 11:10, Imran Kamal wrote: Hi all, Can anyone please confirm once I enable "IPv6 Flow mode", do I need to reboot both SRX 58K boxes at the time or one after another? The firewall cluster in production and we can't afford any outage window at the moment I have not tested it o

Re: [j-nsp] MX304 - Edge Router

2023-10-25 Thread Ola Thoresen via juniper-nsp
On 25.10.2023 19:20, Richard McGovern via juniper-nsp wrote: Crist, not quite 100% accurate. Perpetual License are permeant and last forever, but with newer Flex License structure also require a SW Support Contract. Subscription based licenses of course expire at end of the subscription date,

[j-nsp] QSA adapters and MTU

2023-11-03 Thread Ola Thoresen via juniper-nsp
Hi all, I am currently investigating the use of 1G and 10G optics on the MX304. This requires a QSA adapter - https://mellanox.my.site.com/mellanoxcommunity/s/article/all-about-qsa-adapter - That is fine. But then I hear people telling me that there is a known limitation when using these ad

Re: [j-nsp] QSA adapters and MTU

2023-11-03 Thread Ola Thoresen via juniper-nsp
On 03.11.2023 16:04, Chris Wopat wrote: We use them on MX304 at 10g, primarily to get DWDM SFP+ to work. MTU is fine, it's 9k as a part of LACP on a recent deployment. The adapter simply passes through lane :0 to the port when configured as QSFP+. If you insert the adapter and no optic, the de

Re: [j-nsp] QSA adapters and MTU

2023-11-06 Thread Ola Thoresen via juniper-nsp
On 03.11.2023 16:37, Eduardo Lopes de Haro wrote: Hi, Here is the public documentation of MX304 mentioning the MTU limitation for 1G: https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/ref/statement/speed-gigether-options.html * On MX304 for 1G interface

Re: [j-nsp] SRX Dynamic Address limits

2024-03-04 Thread Ola Thoresen via juniper-nsp
For IP feeds the limits are quite big. But be aware that for e.g. URL feeds there is a limit of 1000 or 1500 urls in a single feed and platform limits for the total number of Urls. https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/security-utm-custom-ob

[j-nsp] ACX EVO - funky auto complete

2024-05-30 Thread Ola Thoresen via juniper-nsp
This is fun... > show version (...) Model: acx7348 Junos: 23.4R1-S1.11-EVO > show lldp neighbors*//* ^ 'neighbors ' is ambiguous. Possible completions:   neighbors    Show LLDP neighbor information   neighbors-vlan-name-tlv-list  Show list of Vlan-Name in the LLDPDU of the interface