Re: [j-nsp] Juniper to Juniper, dark fiber, SONET vs SDH (not working any more)

things are nicer in 8.2, but we do not have it yet. :) Yes that has the great fix for people who do mixed-mode on a multi-port PIC. Can't you damn euros just admit that SONET is the way, the truth, and the light and end this silly bit squabbling. :) -- Richard A Steenbergen [EMAIL PROTECTED

Re: [j-nsp] Problem with PB-4GE-SX

it is a real challange to keep M160's working at all. The only really safe way is to run all FPC1's or configure M40e mode. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] keyadmin error

could just get them to make with that garbage file on the T640... :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list

Re: [j-nsp] Juniper firewall chain behavior

for this would be that then sample and then count act as terminating actions, which would seem exceedingly lame. Combine with the lack of next filter and what is the point? The whole thing becomes about as useful as route-map without continue. :) -- Richard A Steenbergen [EMAIL PROTECTED] http

Re: [j-nsp] Juniper firewall chain behavior

{ then { count test; next term; } } -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

[j-nsp] Juniper Commit/Op Scripts and Archive

to Greg Maxwell, who managed to get a few good answers to my stupid questions in whenever Phil was asleep. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Juniper Commit/Op Scripts and Archive

is Juniper decreasing the TTL. To know if I can limit the value to 255 or should allow 254 as well. Yeah actually I never got around to testing that one, someone do it for me and I'll update the scripts accordingly. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG

[j-nsp] Using an LSP to transport analysis traffic

to create a dummy LSP for the transmit data when all I want to do is receive data to this particular interface. There really must be a better way. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Image compatibility

. Then again so would being able to fetch an image from Juniper via ftp or from the router CLI instead of having to bust out lynx-ssl and scp. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Image compatibility

with a Cisco label on it. :) So yeah, Juniper is certainly better about the entire thing than Cisco in pretty much all respects, but thats hardly saying much. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1

Re: [j-nsp] Juniper Cflow, IPFix which one

obnoxious licensing fees or somesuch), I would encourage everyone to ask Juniper to implement sFlow support in addition to V9/IPFIX (especially as they grow into the L2 market with the MX platform). Hey, it could happen. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e

Re: [j-nsp] Juniper Cflow, IPFix which one

considering the vast majority of the references are confined to J/E series. The few references under M series all seem to be under AS PICs in the form of: Features: * J-Flow accounting exports cflowd version 5 and version 8 records Ah marketing and legal, how do we love thee... :) -- Richard

Re: [j-nsp] re333 not booting install media

, and then partition slice and format. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] re333 not booting install media

. Check those things, re-image the card, maybe try replacing it, and when you get the new install-media up you should be good. I'm told that new code does a better job doing the partition/slice/format on new drives, haven't tested it myself. -- Richard A Steenbergen [EMAIL PROTECTED] http

Re: [j-nsp] MX960 40GE DPC

there are no differences in traditional Juniper features (same I-Chip 3.0 on both boards), so VPLS should be unaffected. I believe the Triton and Bellini cards are all rev B EZchips, so only the first gen Atlas cards will have the -E variant. And no AFAIk they don't do 100M. :) -- Richard

Re: [j-nsp] P-1GE-SX B rev?

interface. You can always do l2circuits to an untagged GE interface on any rev card. Only the single-port GE-SX cards were ever produced without this functionality, so if it isn't a P[EB]-1GE-SX it is automatically equiv to the GE-SX-B (LX, LH, 2GE, 4GE, etc). -- Richard A Steenbergen [EMAIL

Re: [j-nsp] STM-4 and Gig LACP Connectivity between Juniper and Ciscogear

tagging on a Cisco and then try to speak LACP to a Juniper, it will try to tag the LACP control packets with the native vlan ID and confuse the hell out of the Juniper. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F

Re: [j-nsp] 8.5R1.13 Lock Manager and Database Initialization Utility

://www.birdstep.com/Media-Center/Press-Releases/2007/Juniper-Networks-Selects-Birdstep/ http://www.birdstep.com/Database/Products/RDM-Embedded/FAQ/ -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Apparent m40 RPD memory leak

with a big file on the hd. :P In a real memory leak situation swap is a great safety net. The leaked pages will be inactive and easily swappable, without impacting the active pages being used by the rest of the system. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras

Re: [j-nsp] GE/10GE link-mode config on M/T-series has no effect

is more about flow-control settings than duplex settings. I assume the situation with 10GE is similar. Re: GigE, you are very confused. The above is only true with 10GE. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C

Re: [j-nsp] 8.2R2.4 - 8.4R2.4 route installation delay

of routes. I've seen it block on installation of anything from a full table after a major policy change, reboot, RE swap, etc, to 50 routes blocking for 10 minutes after clearing a small bgp session on an otherwise unloaded router. I've even seen it happen when I added a static route. :) -- Richard

Re: [j-nsp] RES: Juniper Junos 8.4

knowledge. Any astute observer who cares to know is probably already in posession of the particular message necessary to cause the issue, and it can't be filtered, so yes you really do want to upgrade immediately. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG

Re: [j-nsp] RES: Juniper Junos 8.4

On Thu, Dec 13, 2007 at 02:16:06AM -0500, Richard A Steenbergen wrote: This is not true, MD5 has no relation. The issue is with an invalid BGP message which Cisco propagates harmlessly (a violation of the BGP spec, allowing the message to spread), but which Juniper (correctly) detects

Re: [j-nsp] Upgrade without PCMCIA card?

upgraded to 8.x last week you'll probably end up blowing out with FEB DRAM as soon as you do anyways. You could of course also upgrade this (also unsupported :P), but if any of this is confusing the correct answer is to downgrade code or upgrade platform. :) -- Richard A Steenbergen [EMAIL

Re: [j-nsp] Upgrade without PCMCIA card?

to be dead to you just based on CPU speed and the 768MB hard memory limitation, but the people out there who are running relatively simple configurations on M5-M20s should still be able to keep them alive a couple more years. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras

Re: [j-nsp] m320

being centralized like the Internet Processor ASICs. Each PFE has an R-Chip, which on the T320/M320 means one per FPC. On T640 the FPC3 has 2x (each one is capable of doing 20Gbps), everything else is built with one. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras

Re: [j-nsp] Upgrading from 7.1 to ?

. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper

Re: [j-nsp] SFP Compatibility

of a part number in show chassis hardware, like so: Xcvr 0NON-JNPR K6S00Y5 XFP-10G-LR -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] SFP Compatibility

, don't expect hardware vendors to let it go lightly. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] The Switch is ON !!!

, and perhaps supported a few more routes, it would sell like hotcakes. /product review -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper

Re: [j-nsp] The Switch is ON !!!

not be using XFP here. I would encourage anyone who is interested in this product and who might ever want to use long-reach optics in it to talk to their account team about XFP instead of SFP+ blades NOW before this horribly bad idea progresses any further. -- Richard A Steenbergen [EMAIL PROTECTED

Re: [j-nsp] JunOS Bug list?

descriptions seem to be set only by the first level JTAC person who actually opens the case, thus you are all but guaranteed that the description will be completely wrong (and often illegible), no matter how many people who know whats actually going on have touched the PR afterwards. -- Richard

Re: [j-nsp] MX vs. M

with complete and detailed alarms. One thing I forgot to mention, the only feature that should be there but isn't is RE-based RPM support. Everything else is fully implemented as of current code, including GRES, ISSU (well it works as well as on an M-series at any rate), OAM, etc. -- Richard

[j-nsp] packet kitty

http://mine.icanhascheezburger.com/View.aspx?ciid=781473 -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] M10 FEB heap usage (RPF/route options)

, but this one definitely does. If you must keep your old M5/M10s alive, this is infinitely better than trying to diddle with the software to squeeze another few routes in. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C

Re: [j-nsp] /31 subnet mask

Very Bad Things (tm) the day you plug them into your nice /31 using Juniper network and start routing packets to them. The biggest should know better but doesn't offender is probably Foundry, though I'm sure there are others. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e

[j-nsp] Juniper announces new KillerPIC product

SUNNYVALE, Calif., April 1, 2008 -- Juniper Networks, Inc. (NASDAQ: JNPR), the leader in high-performance networking, today announced a partnership with KillerNIC, a leading supplier of optimized gaming NICs. Under the arrangement announced today, KillerNIC will license its technology and

Re: [j-nsp] About RE memory utilization

system running JUNOS 8.5 is today. :) On the other hand, if you exceed your FEB DRAM you are 101% screwed. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Juniper EX

. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper

Re: [j-nsp] Sandisk Extreme III 1G CF card compatibility

and crappy hosts. The ironic thing is that I think the CONTROLLER on the old Juniper RE's supports UDMA, but there aren't traces for it on the CF adapter. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41

Re: [j-nsp] JUNOS XML Parser

implementation :P). This is still a Juniper-specific hack too, PECL ssh2 doesn't have the ability to connect to arbitrary subsystems, so this uses exec + a Juniper netconf shell spawning command. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC

[j-nsp] Cisco-Juniper RSVP aggregate interop

missing here? -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] 10GE xe-0/0/0 traffic anomaly

that exact behavior on regular interfaces, but I've seen several other counter bugs in the last few months (mostly on AE's) so it might be related. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] 2.5 gig SFP modules?

. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] 2.5 gig SFP modules?

. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [j-nsp] Q-in-Q configuration on Juniper Gig interface

to aggregate MPLS VLANs and carry it to other PE. Note that you need IQ or IQ2 GigE PICs to terminate stacked VLANs. I don't think you need IQ, IIRC anything modern (SFP-based GE's, 10GE, MX ports, etc) can do this. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net

Re: [j-nsp] Q-in-Q configuration on Juniper Gig interface

to be IQ), but I'm 99% confident that this works unless a lot of people have been lying to me. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Q-in-Q configuration on Juniper Gig interface

then. This is from an M7i: I'd been told that it worked by people who were supposedly using non-IQ SFP PICs to push/pop outer tags to terminate Q-in-Q vlans. Is vlan-map functionality perhaps seperate from configuring flexible/stacked tagging? -- Richard A Steenbergen [EMAIL PROTECTED] http

Re: [j-nsp] juniper-nsp Digest, Vol 67, Issue 15

on the wire and see whats actually going on here, or just try to tcpdump it on the Juniper and see if you're actually receiving the LACP control packets to the RE. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA

Re: [j-nsp] Track-IP functionality in Junos

to locking issues. Is this what you're referring to as being fixed in 9.3? It's been a while since I asked about this one, but you can ghetto-rig it in a few cases with a netconf system that commits the configuration after calling the op script. :) -- Richard A Steenbergen [EMAIL PROTECTED

Re: [j-nsp] Best practice to manage log information

failed first on almost all of them? The CF. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] Interface without 'family ethernet-switching' possible on EX series?

code are you running? If 9.0R2, try 9.1R1 instead. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp

Re: [j-nsp] JUNOS Perl API version?

/netconf/index.html I personally wish they wouldn't roll a new version with every junos release, since the perl API rarely changes, and then when it does you have no idea that an important change has occured. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID

Re: [j-nsp] Juniper support vs. Cisco TAC - experiences?

talking about. If anyone from Juniper is reading this, and wants to get this fixed, I'm sure your customers will happily give you a better understanding of the level of service we're seeing from regular JTAC if given the opportunity. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e

Re: [j-nsp] Juniper High CPU Process Kqread

) with: rtsockmon -t rpd Could be a bug too (I have a 100% cpu in rpd case that we're still trying to diagnose), who knows. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] ttl-security

please request that they actually add this relatively simple feature, rather than making us script around it. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] BGP Hold time expiry

size (1..4096) Setting a TCP MSS to 1 and then trying to exchange a large amount of data makes for an excellent DoS, and many operating systems now include a minimum acceptable MSS setting as protection against this. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG

[j-nsp] Bizaare bug of the year award

this is an award winner in my book. :) -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] LDP/RSVP interop

delay seems a little excessive too, and I can't find a cause or knob to speed it up. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp

Re: [j-nsp] LDP/RSVP interop

auto-bw intervals aside from this issue. Even if you aren't running particularly aggressive timers, if you have a lot of LSPs it seems pretty likely that you are going to have some non-deterministic but sizable percentage of paths unprotected at any given moment. -- Richard A Steenbergen [EMAIL

[j-nsp] Duplicate IP addresses on interfaces

{ family inet { address 10.70.70.1/30; } } } [EMAIL PROTECTED] commit check [edit interfaces xe-0/3/0 unit 0 family inet] 'address 10.70.70.1/30' warning: identical local address is found on different interfaces configuration check succeeds -- Richard A Steenbergen

Re: [j-nsp] BGP Hold time expiry

On Sun, Oct 05, 2008 at 01:48:41PM +0200, Daniel Roesen wrote: On Fri, Sep 19, 2008 at 08:36:25AM -0500, Richard A Steenbergen wrote: Juniper includes all L2 overhead Not really. For Ethernet, Juniper does NOT include the 4 octets FCS (frame checksum). So Cisco 1500 == Juniper 1514

Re: [j-nsp] export policy Junos 9.0

fixed their BGP implementation to handle a dynamic export group change. Thus it is normal for them. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] 'phantom' link aggregation interface

at all. This not only doesn't follow all other behaviors, but there is no way to scan all of your interfaces for their optical data short of typing them all our manually. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C

Re: [j-nsp] IRB and 9.2 @MX

and functional code that didn't randomly break the interface counters in some different way with every release for a YEAR STRAIGHT? I swear Cisco must be sending their coders over to Juniper's HR department as part of an operation to make IOS look good. :) -- Richard A Steenbergen [EMAIL PROTECTED

Re: [j-nsp] TCP SYN attack causing BGP peer down?

that queueing and prioritization is handled by the transmitter, so even though you might have a perfect CoS configuration with BGP preferred above all other packets, if your ISP doesn't have the same setup the attack will fill their TX queue to you. -- Richard A Steenbergen [EMAIL PROTECTED

Re: [j-nsp] RE CPU on MX

or not. Anybody own one of these and wanna paste? -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] RE CPU on MX

/products_and_services/mx_series/index.html -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

[j-nsp] DCU matching in firewall on MX

platforms, these statements are supported. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] DCU matching in firewall on MX

to transit packets only. To me that reads as though the filter will be applied at ingress time, but still happen with egress match logic (i.e. I couldn't specify source interfaces and match ingress traffic only). -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID

Re: [j-nsp] Why should I *not* buy an MX?

need either of those fields the rest of the data is fine, but be warned that it will completely break some third party software (like Arbor PeakFlow, for example). -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF

Re: [j-nsp] Why should I *not* buy an MX?

/7600 is probably a better choice for you. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] juniper-nsp Digest, Vol 72, Issue 11

be polite and not answer that one. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] bfd on LAG

. The BFD packets will only be transmitted over a single member link (since BFD works at the IP layer, and will be hashed onto one member), and you have no guarantee that the return packets will come back over the same LAG member link. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e

Re: [j-nsp] New M7i/M10i Enhanced CFEB

is only found on the M#i platforms. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] New M7i/M10i Enhanced CFEB

it the same way it should be ~2 million. -- Richard A Steenbergen [EMAIL PROTECTED] http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net

Re: [j-nsp] Junos sticker

On Wed, Dec 10, 2008 at 04:51:15PM -0700, Junos Juniper wrote: Has anybody seen these? http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItemitem=180313229707 For real fun, bring a stack of them to your friendly neighborhood colo and affix them to all the GSRs you see. :) -- Richard A Steenbergen r

Re: [j-nsp] looking for mx960 stable junos for peering issues

checking current PRs but experience will be great input for 9.2R3 is above and beyond the best JUNOS for MX960 in my experience. It fixed a lot of outstanding issues and has been quite stable so far. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC

Re: [j-nsp] Upgrade from M10i?

and well, ironically on the platform that doesn't actually have a hardware FIB to install to. Also to be filed under Irony, the O-series has no such problem, and makes a very snappy route reflector. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC

Re: [j-nsp] Upgrade from M10i?

swappable. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] prefix-limit effectiveness

of routes AFTER your import policy has been applied. In the example above, even though you are receiving a full table, you are rejecting all but 1 route in policy, so the value that would be evaluated yb accepted-prefix-limit is 1. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net

Re: [j-nsp] SNMP interface index change after upgrade to 9.2

of tools like rrdtool, sql, etc. http://www.e-gerbil.net/ras/snmp-php -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper

Re: [j-nsp] bgp maxas-limit - JUNOS equivalent ???

legitimate announcements for no good reason. There was nothing out-of-spec or invalid about the 255 as-path, it was purely an implementation bug on vendor C's part. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF

Re: [j-nsp] Build a GRE tunnel on VRRP routers

on deaf ears. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] Build a GRE tunnel on VRRP routers

endpoints. On another note, does anyone know if Juniper has any plans to implement BFD echo mode support? Would sure be nice to be able to use BFD even if the other side doesn't support it, which is unfortunately still almost everyone in a inter-network role. -- Richard A Steenbergen r...@e

Re: [j-nsp] network engineering

* * * 4 * * * 5 * * * 6 * * * 7 * * * 8 * * * 9 www.amazon.de (87.238.81.130) 32.351 ms 32.317 ms 32.283 ms This pretty much screams incorrectly blocking ICMP TTL Exceed. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC

Re: [j-nsp] network engineering

traceroute (and thus incite people to send a lot of annoying emails about it). -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing

[j-nsp] ISIS metric of redistributed directly connected routes

to anything explaining this behavior? -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

Re: [j-nsp] ISIS metric of redistributed directly connected routes

bandwidth changes should auto-update the cost, and d) the reference-bandwidth should be configurable, for good measure. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] ISIS metric of redistributed directly connected routes

is something is being calculated with a reference bandwidth of 100g and the isis metric isn't refreshing if the ae bandwidth changes (i.e. another member is added to lacp). Of course it could be something completely different, but thats the only theory I have which fits the facts. -- Richard

Re: [j-nsp] ISIS metric of redistributed directly connected routes

On Tue, Mar 03, 2009 at 06:38:24PM +0100, Hannes Gredler wrote: Richard A Steenbergen wrote: I found several instances of 10g interfaces with a metric of 10, 20g ae interfaces with metric 5, 30g ae with a metric of 3, etc, but I also found a 30g ae with a metric of 5. The only excuse I can

[j-nsp] Identifying pfe icmp throttled traffic

it to the lo0 filter to be logged. It's not breaking much, just traceroute for that router hop, but it'd be really nice if there was a way to find the source of the problem packets and plug it. Any ideas? -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID

Re: [j-nsp] Identifying pfe icmp throttled traffic

the default changed for some FPC types in some recent version of JUNOS, but I don't remember the exact details. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Identifying pfe icmp throttled traffic

), but nothign which accounts for the ttl-exceed traffic I'm receiving after applying it to my border interfaces. Rather than try adding this to every interface manually (which would be time-consuming), would it make sense to appply it to forwarding-options family inet filter input? -- Richard A Steenbergen r

Re: [j-nsp] ispf support on Juniper routers

by at any given moment :P). Given those realities, I'd gladly trade memory for better performance any day of the week. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC

Re: [j-nsp] Upgrade from M10i?

versions. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

[j-nsp] Juniper BGP invalid attributes

? -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp

Re: [j-nsp] Juniper BGP invalid attributes

. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

[j-nsp] J-series software EOL

even exist. -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [j-nsp] LDP FEC Default Behavior

/mp_ldp_alloc_filter.html#wp1058579 -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https

  1   2   3   4   5   >