RTBH on mx960.
hy guys, we have been experienced some attacks comming from the outside network to some of my customers.Instead of directly blocking those ips, I would like to advertise my peer for him to block, this...
View ArticleCheck out the latest TechWiki FAQ on Class of Service (CoS)
Check out the latest TechWiki article on Juniper's Class of Service (CoS): http://forums.juniper.net/t5/Routing/FAQ-Class-of-Service-CoS-for-Juniper-Routing-Devices/ta-p/285779 This article provides...
View ArticleWarnings on every commit on MX104
Hi, Every time I commit on one of our MX104 routers I get the following warning message in the log: Dec 28 17:27:10 router-re0 dcd[42051]: DCD_PARSE_WARN_IDENTICAL_SUBNET: Warning: identical subnet...
View ArticleMPLS VPN. - Help
Hi, I have set up an MPLS VPN. JUNOS2 (PE1) and JUNOS3 ( PE2) are PE Routers. Trying to ping from CPE (Junos5) attached to PE1 (JUNOS2)to CPE-PE2 connected interface in PE2 (JUNOS3). The CPE...
View ArticleNeed help to configure routebase ipsec between SRX and MX480
Hi, I am trying to configure ipsec vpan between srx210 and mx480 and status is below: 1. MX480 with MS-MPS card2. SRX210 have configured st0 interface but not understand what will be the similar type...
View ArticleMIC-3D-20GE-SFP
Any one know if I can per-unit schedule on the MIC-3D-20GE-SFP that comes with the MX-5?
View Articlemultihomed MX5 ABRS with checkpoint cluster
I am having strange routing issues and seeing duplicate packets galore when interfacing 2 x MX5's to a checkpoint cluster XL over a shared switched infrastructure . The MX5's are configured in a fairly...
View ArticleFilter based forwarding not working on mx
Hi All, diagram attached. am trying direct certain traffic in certain direction usign FBF. i have configured the filter and applied it to the interface but the traffic is still not taking the direction...
View ArticleNew router MX104 - Commit ERROR
Hi Experts I have a new router, i have enabled ssh service but when I commit i see this error: re0:[edit system services ssh] 'ssh' warning: daemon binary /usr/sbin/sshd not found[edit system services...
View ArticleUnderstanding the parameter adjust-threshold-overflow-limit
Hi all. I'm reading the MPLS Deployment, and I'm confused about the parameter adjust-threshold-overflow-limitPlease see this configuration[edit protocols mpls]ps@lagavulin# showstatistics {file...
View ArticleQoS/CoS TCPs using AE sub interfaces on a MX104
Hi Folks, I have run into a problem where I am unable to apply CoS settings (specifically schedulers) to AE sub interfaces on an MX104 device. I have logged a tac call for this and they have mentioned...
View ArticleRoute Reflect or Confederate?
I manage a 50 node Juniper Service Provider WAN with full layer 2 connectivity between all sites (single WAN /24). There is a full IBGP mesh. That's 1225 IBGP peerings. In my situation, is there a...
View ArticleTwo ISP's. How do I safely migrate from one to another?
I am cross-posting this in routing because I didn't really know how this fits in. Here is my situation. We have a small /25 statically routed to us via our current ISP. They host the gateway address...
View ArticleSegment Routing ( SPRING ) support
Hi after having read about segment routing http://www.segment-routing.net/home/tutorial and also the blog entry on here by Julian Lucek, Yet I havent managed to find much information about actual...
View ArticleJNCIE-SP bootcamp
Hi Folk I need to inquire about bootcamp , If lab got change ,will it also change the official bootcamp with new q&a and lab topology RegardsFaizan Khurshid
View ArticleSNMP on MX104 Dual RE
Hello, We use Observium to monitor our MX104s via SNMP, one of the brilliant features of this is the BGP session tracking (updates/uptime etc/up/down) however since enabling chassis redudancy...
View Articleipv6 - No route to host
Hello forum guys, I have following configuration: MX-80-1# run show configuration interfaces ae0.0family inet { address 10.42.131.37/29;}family inet6 { address 2a00:8a00:6000:601b::11/125;}[edit]...
View ArticleFirewall filter behavior??
I configured firewall PROTECT-RE and apply to interface loopback. Why I can't ftp to host 192.168.10.101 although I except prefix NET in term 1?
View Articlemixed vcf throughout
Hi,In a mixed VCF environment: 2 Spine QFX51003 leaf QFX51003 leaf EX4300 What are the Layer2/Layer3 maximum performance expected to be reached in a mixed environment ? The one reached by QFX5100 or...
View ArticleRoute based IPsec on MX
Can anyone tell me if it is possible to configure a route based (not policy based) IPsec tunnel on the MX with MS-MIC? This is fairly straight forward on an SRX and seems to be the prefered method.
View Article