Re: aaa authentication login default local
Here is more info about authentication-order
View ArticleRe: Problem with NAT service (MX80)
Thank all. I will try to update Junos. Hope this will help.
View ArticleRe: MX not sending SYSLOG to STRM
While I respect your knowledge and opinion that it won't work, I've not done an adequate job of telling you why it will. I have other EX devises that route their syslog message to the STRM via the SRX...
View ArticleRe: IS-IS route tagging
So that explains why i am still seeing the TLVs, But do you know why (Since its advertising those routes) it wouldn't be showing up in the route table on the downstream router?
View ArticleRe: MX 240 air intake temperature
TemperatureNormal operation ensured in temperature range of 32°F (0°C) to 104°F (40°C)Nonoperating storage temperature in shipping container: –40°F (–40°C) to 158°F (70°C)...
View ArticleOSPF external routes tag within VRF
I am redistributing a VRF learnt route (0/0) into OSPF configured within a VRF as an external route. The OSPF domain is area 0. I have noticed a tag on the route as shown below. No tags have been set...
View ArticleRe: Rib-groups with aggregate routes
Another option then is to create a logical tunnel interface. These are virtual interfaces inside the MX. They tunnel traffic between the two interfaces. You then place one interface in each...
View ArticleRe: OSPF external routes tag within VRF
Hello,RFC 4577 section 4.2.5.2 https://tools.ietf.org/html/rfc4577#section-4.2.5.2 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5...
View ArticleRe: OSPF external routes tag within VRF
Hi, This is as per RFC4577:If a particular VRF in a PE is associated with an instance of OSPF, then by default it MUST be configured with a special OSPF route tag value, which we call the VPN Route...
View ArticleRe: Rib-groups with aggregate routes
Yes, I agree that would work as a solution. I have decided to go with the static discard option and use rib-groups as that works for our scenario. I am a little puzzled why this option is not available...
View ArticleRe: Receiving both ipv4 and ipv6 NLRI updates over an IPV6 BGP peering
try adding a second bgp session over the same neighbor using ipv4 address: set routing-options autonomous-system 632set protocols bgp group bgpip4 type internalset protocols bgp group bgpip4 family...
View ArticleAggregate Routes - when/why?
Okay - I'm not getting my itch scratched as far as answers go regarding 'when' aggregate routes are needed. I understand that these are routes that are manually created, just like a static route.I...
View ArticleRe: Aggregate Routes - when/why?
Your understanding is correct. To answer your questions:No - using prefix list tells the peer you can deliver packets to ALL of the networks you advertise 1.1.1/22 which I suppose would be incorrect,...
View ArticleRe: Aggregate Routes - when/why?
Thanks lyndidon - Question - when you say "No -using prefix list tells the peer you can deliver packets to ALL of the networks you advertise 1.1.1/22 which I suppose would be incorrect, so you could...
View ArticleRe: Aggregate Routes - when/why?
"Yes, you 'could' do that, but it's not recommended because you can potentially black-hole packets", and that the advantage the aggregate-route gives is the capability to send a 'rejects' back to the...
View ArticleHA deployment with two MX104 routers
We are an class B ISP , we are using an MX104 router in our network as a Gateway . We have planned for a HA deployment with adding one more MX104 router . For this solution we have got two EX3300...
View ArticleRe: Aggregate Routes - when/why?
Hi, The prefix-list is used in the policy part of the configuration to indicate which routes to announce.While a prefix-list can be defined without an active route, BGP still requires an active route...
View ArticleRe: HA deployment with two MX104 routers
Hi, Any logic why the ISP/peering links are not terminating directly on the MX routers?For the ISP connectivity, eBGP peering with the ISPs would be suitable.If the ISP links are connected directly on...
View ArticleRe: HA deployment with two MX104 routers
Dear Ashwin, The WAN links has been connected in the switch just to split connectivity for both routers . The eBGP peering is done in MX104 router only. Thanks & RegardsMaheswaran
View ArticleRe: HA deployment with two MX104 routers
For HA you may also want to consider upgrading to the 14.1 or higher so you can support ISSU for future upgrades. https://kb.juniper.net/InfoCenter/index?page=content&id=KB29381
View Article