Re: Does entire session will re-establish back if we change MTU on physical...
Hi Folks,Just to add my 2 cents on this…. Increasing logical interface MTU more than the Physical MTU will not meet any requirement; which will lead to black hole traffic...
View ArticleRe: Link failure detection
Hi Folks,Are you expecting for better physical led indications or actual box detecting the failure in software? Since, with bfd you can get milliseconds failover detections with protocols; else...
View ArticleRe: Is there any hidden command that can verify both cluster synchronize the...
Hi Folks,Just my 2 cents on this.. [SRX] Troubleshooting Chassis Cluster Redundancy Group not failing over… Good KB… https://kb.juniper.net/InfoCenter/index?page=content&id=KB20987&actp=METADATA
View ArticleRe: ISIS And new VR Routing Instance
Hi Folks,Just my 2 cents on this.. Similar configurations with logical systems in the box, https://forums.juniper.net/t5/Routing/How-To-Build-a-service-provider-network-with-a-single-Juniper/ta-p/302237
View ArticleRe: Manual failovers too LONG on SRX550 with bdf or lacp
Hi Folks,Just my 2 cents on this.. Manual failover by cli is the not the right way to simulate the issue, please Give a break from transmissionDo laser off
View ArticleRe: Show chassis routing-engine command
Hi Folks,Just my 2 cents on this.. [M/MX/T-series] Troubleshooting Checklist - Routing Engine High CPU is a good one… https://kb.juniper.net/InfoCenter/index?page=content&id=KB26261 To do some...
View ArticleRe: What are mean Invalidated sessions?
Hi, Im read that KB given. But the command show security flow session session identifier is use when u already know the session id that the invalid session. But in my issue is how to the session is too...
View ArticleRe: Jflow COnfiguration on SRX1400
Hi Python,Thanks for your answer. I already used the configuration of that knowledge base article but it doesn't work... Do you know if I can "route" netflow traffic on my fxp0.0 interface?Regards,Luis
View ArticleRe: I am not able to access my protected resources via Dyn VPN from public...
For testing, can you try moving dynamic VPN policy to the top? edit security policies from-zone untrust to-zone trust insert policy DYN_VPN before policy FNGR-PRNTcommit
View ArticleRe: What are mean Invalidated sessions?
show security flow session extensive | match "Session ID|Current timeout|Fin state: 2" See if there are any with timeout greater than 2s. This will indicate software bug. Regards, Wojtek
View ArticleRe: Jflow COnfiguration on SRX1400
Just for the record now that I've created a new interface on the SRX1400 I can send Jflow traffic with the configuration that Python sent me to check. It seems netflow is not "routable" through fxp0.0...
View ArticleRouting-Instance and ISIS Routing
Hi all, SRX1500 I have created two new VRs and also, thanks to Kingsman, enabled ISIS on these VRs with the following command: set routing-instance Customer-VR protocols isis interface ae2.0set...
View ArticleRe: Routing-Instance and ISIS Routing
Hi, Can you paste your full configuration? Did you create a physical loop to create VR and running ISIS between VR?
View ArticleRe: Routing-Instance and ISIS Routing
No Physical loop Just placed the interfaces into the VRs.Here is the full config.. Clive@THW-SRX-01# run show configuration | display setset version 15.1X49-D110.4set system host-name THW-SRX-01set...
View ArticleRe: Routing-Instance and ISIS Routing
Hi,Do you see isis adjacency up in the VR? I don’t see any iso address configured in VR.Create one loopback, assign ISO address to it and add in Customer-VRSet interface lo0.10 family iso address...
View ArticleRe: Routing-Instance and ISIS Routing
Hi, You can also configure the ISO address in ae2 interface at both end. Below is the sample config: set routing-instances VR2 instance-type virtual-routerset routing-instances VR2 interface...
View ArticleRe: Routing-Instance and ISIS Routing
Yeah,Well we can assign it to any interface but loopback is the best practice.
View ArticleRe: What are mean Invalidated sessions?
HelloThe invalidated sessions can be seen by logging into the SPU during some special cases. Any reason why this is a concern? > In environments where there is a lot of short lived sessions...
View ArticleRe: Routing-Instance and ISIS Routing
Hi, Thank you guys for the responses.... awesome..... I have not yet had a chance to configure this, but will be completing this morning. As another quick quesiton regarding this configuration..... If...
View Article