[j-nsp] juniper-nsp Digest, Vol 27

Wed Feb 16 15:30:50 EST 2005

hello,

It is not possible to configure two cflowd destination per version. The 
data should transit in the FE(100mb/s) between the PFE and the RE, Juniper
limited the bandwith. If you sample a lot of packet you could have a problem
with the other network control exchange on this link.
You could used a special PIC for that, or connected your server on the same lan 
with a features mirroring, we could received the same data, like sniffer mode.

Regards.

-----Message d'origine-----
De : juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net]De la part de
juniper-nsp-request at puck.nether.net
Envoye : mercredi 16 fevrier 2005 20:27
A : juniper-nsp at puck.nether.net
Objet : juniper-nsp Digest, Vol 27, Issue 21

Send juniper-nsp mailing list submissions to
	juniper-nsp at puck.nether.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://puck.nether.net/mailman/listinfo/juniper-nsp
or, via email, send a message with subject or body 'help' to
	juniper-nsp-request at puck.nether.net

You can reach the person managing the list at
	juniper-nsp-owner at puck.nether.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of juniper-nsp digest..."

Today's Topics:

   1. RE: Error Message (Edson Cardoso)
   2. Juniper M20 power supply fault indicator (Steve Leibrock)
   3. Two cflowd server in same configuration of M7i (Silvestre Malta)
   4. Re: Juniper M20 power supply fault indicator (Jonas Frey)
   5. Re: Two cflowd server in same configuration of M7i
      (sthaug at nethelp.no)
   6. Re: Two cflowd server in same configuration of M7i
      (Matti Saarinen)
   7. Half Duplex Routing Engine m40? (Dennis Ponne)
   8. Re: Juniper M20 power supply fault indicator (Hyunseog Ryu)
   9. RE: Half Duplex Routing Engine m40? (Paul Goyette)
  10. Re: Two cflowd server in same configuration of M7i (Hyunseog Ryu)

----------------------------------------------------------------------

Message: 1
Date: Wed, 16 Feb 2005 15:14:03 -0300
From: "Edson Cardoso" <ecardoso at qos.com.br>
Subject: RE: [j-nsp] Error Message
To: "Pedro Roque Marques" <roque at juniper.net>
Cc: juniper-nsp at puck.nether.net
Message-ID:
	<2415F0AC5E674C45A69DD75532969D62172A3A at fortaleza.corp1.com.br>
Content-Type: text/plain;	charset="us-ascii"

All,
Well, after I've put this message my RE became instable .. Once this
router is a critical part from the net, I replaced the RE and now I
don't have how to test the sugested ideias....
I guess should be a hardware problem because everything is ok now...

Tnks a lot anyway.. :)

[]'s
Edson 

-----Original Message-----
From: Pedro Roque Marques [mailto:roque at juniper.net] 
Sent: Tuesday, February 15, 2005 15:04
To: Edson Cardoso
Cc: juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] Error Message

Edson Cardoso writes:

> Hi all, After upgrade from version 6.4 to 7.1 my M5 is showing this
> message:

> peduardo at bb-ula3-01> show bgp summary error: timeout communicating
> with routing daemon

> Everything is running ok but I don't have summaryzed BGP info... Any
> ideas ??

Looks ugly...
you don't happen to have a bunch of errors about the rate of page swap
on /var/log/messages do you ?
any cores in /var/log ?

------------------------------

Message: 2
Date: Wed, 16 Feb 2005 10:05:08 -0800 (PST)
From: Steve Leibrock <sl at datumglobal.com>
Subject: [j-nsp] Juniper M20 power supply fault indicator
To: juniper-nsp at puck.nether.net
Message-ID: <20050216180508.90310.qmail at web203.biz.mail.re2.yahoo.com>
Content-Type: text/plain; charset=us-ascii

One of my two power supplies has a fault light that comes on every every so often at varying times (sometimes 3 times in 2 seconds). 

Can anyone guide me on how to look at the logs and see what this means and what could be causing it. I am DC powered so I will have this feed checked. I am worried it could be a faulty power supply. 

Thanks Steve

Steve Leibrock, CTO
Datum Global Solutions
50 Cragwood Road, Suite # 308
South Plainfield, New Jersey 07080
(908) 668-8808 x230
www.datumglobal.com

------------------------------

Message: 3
Date: Wed, 16 Feb 2005 18:05:19 -0000
From: "Silvestre Malta" <Silvestre.Malta at siemens.com>
Subject: [j-nsp] Two cflowd server in same configuration of M7i
To: <juniper-nsp at puck.nether.net>
Message-ID:
	<4D1136D916BB4747B88B9B48BD4C84BF02E14C36 at lisi053a.siemens.pt>
Content-Type: text/plain;	charset="us-ascii"

Hello list,

I would like to know if it is possible configure two cflowd destinations
with version 5 a same time.
I have in a M7i with 7.1 version.

The objective is to have two server that receive at same time the flows
from M7.
With this, if one of the server goes down, the other receive the flows.

Any idea ?

Tanks
Silves

------------------------------

Message: 4
Date: Wed, 16 Feb 2005 19:13:31 +0100
From: Jonas Frey <jf at probe-networks.de>
Subject: Re: [j-nsp] Juniper M20 power supply fault indicator
To: Steve Leibrock <sl at datumglobal.com>
Cc: juniper-nsp at puck.nether.net
Message-ID: <1108577610.17300.31.camel at wks02.probe-networks.de>
Content-Type: text/plain

Hi Steve,

did you check if your powersupply isnt one of the "bad" ones?
Type Model Number Part Number Part Number Revision 
M20 AC PWR-M20-AC-S 740-001465 Revision 7 and earlier 
M20 DC PWR-M20-DC-S 740-001466 Revision 8 and earlier 

If its one of those, you should get it replaced. Your issue sounds very
much like the old M20 powersupply problem.

Regards,
Jonas

On Wed, 2005-02-16 at 19:05, Steve Leibrock wrote:
> One of my two power supplies has a fault light that comes on every every so often at varying times (sometimes 3 times in 2 seconds). 
>  
> Can anyone guide me on how to look at the logs and see what this means and what could be causing it. I am DC powered so I will have this feed checked. I am worried it could be a faulty power supply. 
>  
> Thanks Steve
> 
> 
> Steve Leibrock, CTO
> Datum Global Solutions
> 50 Cragwood Road, Suite # 308
> South Plainfield, New Jersey 07080
> (908) 668-8808 x230
> www.datumglobal.com
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp

------------------------------

Message: 5
Date: Wed, 16 Feb 2005 19:39:58 +0100
From: sthaug at nethelp.no
Subject: Re: [j-nsp] Two cflowd server in same configuration of M7i
To: Silvestre.Malta at siemens.com
Cc: juniper-nsp at puck.nether.net
Message-ID: <43546.1108579198 at bizet.nethelp.no>
Content-Type: Text/Plain; charset=us-ascii

> I would like to know if it is possible configure two cflowd destinations
> with version 5 a same time.
> I have in a M7i with 7.1 version.

You can't configure two cflowd version 5 destinations at the same time:

sthaug at LAB-m5# commit check
[edit forwarding-options sampling output cflowd 10.0.0.2]
  cflowd configuration error
    Can not configure more than one cflowd v5 collector

Steinar Haug, Nethelp consulting, sthaug at nethelp.no

------------------------------

Message: 6
Date: Wed, 16 Feb 2005 20:47:20 +0200
From: Matti Saarinen <mjsaarin at cc.helsinki.fi>
Subject: Re: [j-nsp] Two cflowd server in same configuration of M7i
To: <juniper-nsp at puck.nether.net>
Message-ID: <yq3j7jl85olj.fsf at lagavulin.it.helsinki.fi>
Content-Type: text/plain; charset=us-ascii

"Silvestre Malta" <Silvestre.Malta at siemens.com> writes:

> I would like to know if it is possible configure two cflowd
> destinations with version 5 a same time. I have in a M7i with 7.1
> version.

 As far as I know, JUNOS supports exporting flows to only one cflowd
 collector. If you have monitor PIC or AS PIC the situation may be
 different.

 If you want to send flows to two different collectors you can use
 port mirroring in M7i and connect a PC running nProbe or similar
 software (eg. fprobe) and configure this box to export flows to two
 or more collectors.

 Cheers,

-- 
- Matti -

------------------------------

Message: 7
Date: Wed, 16 Feb 2005 20:14:41 +0100 (CET)
From: Dennis Ponne <dennis at tune-in.nl>
Subject: [j-nsp] Half Duplex Routing Engine m40?
To: juniper-nsp at puck.nether.net
Cc: noc at netholding.nl
Message-ID: <Pine.LNX.4.44.0502162004060.5214-100000 at main.tune-in.nl>
Content-Type: TEXT/PLAIN; charset=US-ASCII

Hi,

I found something what I think is not correct.

The routing-engine on our M20 box on FXP1 has a full-duplex link.

dennis at m20.intxn.be.as24730.net> show interfaces fxp1
Physical interface: fxp1, Enabled, Physical link is Up
  Interface index: 2, SNMP ifIndex: 2
  Type: Ethernet, Link-level type: Ethernet, MTU: 1514, Speed: 100mbps
  Device flags   : Present Running
  Interface flags: SNMP-Traps
  Link type      : Full-Duplex
  Link flags     : 4
  Current address: 00:a0:a5:12:1c:1e, Hardware address: 00:a0:a5:12:1c:1e
  Last flapped   : Never
  Input packets : 332905148
  Output packets: 994816558

Now I check both our M40's and check this out:

Physical interface: fxp1, Enabled, Physical link is Up
  Interface index: 2, SNMP ifIndex: 2
  Type: Ethernet, Link-level type: Ethernet, MTU: 1514, Speed: 100mbps
  Device flags   : Present Running
  Interface flags: SNMP-Traps
  Link type      : Half-Duplex
  Link flags     : 4
  Current address: 00:a0:a5:12:2b:53, Hardware address: 00:a0:a5:12:2b:53
  Last flapped   : Never
  Input packets : 1643478
  Output packets: 5153017

What we have we do a total on this M40 box 2.9 - 3.1 gigabit/s of traffic
outgoing and incomming 600 - 700 mbit/s on our transit/peering interfaces.

We run 197 peers on this box and the avaible memory is 351MB, this box has
768MB of ram inside and uses a RE-2.

The total pps is:

250.000kpps average, Load in day time 300.000kpps Load up to 320.000kpps.

But the strange is that we have packet loss, it does not matter wich JunOS
we use, the packet loss to the router is heavy, but 9 of 10 times after
the router the ping is normal. But on the M20 this is not an issue.

How can I force the FXP1 to be 100 FDX? Threw the software:

edit interface fxp1
set link-mode full-duplex

Does not work.

JUNOS Base OS Software Suite [7.0R2.7]

Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                53828             M40
Backplane        REV 02   710-001348   AL3546            M40 Backplane
Power Supply A   REV 04   740-000234   001516            AC Power Supply
Power Supply B   REV 04   740-000234   001598            AC Power Supply
Maxicab          REV 08   710-000229   AT3658            Host Maxi CAB
Minicab          REV 03   710-001739   AH8902            M40 Teknor Mini
CAB
Display          REV 08   710-000150   AP2907            M40 Display Board
Routing Engine   REV 01   740-003239   9001009622        RE-2.0
SCB              REV 02   710-001838   AP9305            Internet
Processor IIv1
FPC 0            REV 01   710-001292   AN7304            FPC
  PIC 0          REV 03   750-002879   AN7060            1x G/E, 1000
BASE-SX
  PIC 1          REV 03   750-002879   AN7060            1x G/E, 1000
BASE-SX
  PIC 2          REV 03   750-002879   AN7060            1x G/E, 1000
BASE-SX
  PIC 3          REV 03   750-002879   AN7060            1x G/E, 1000
BASE-SX
FPC 2            REV 03   710-003308   BC0734            E-FPC
  PIC 0          REV 01   750-001324   AC4850            1x G/E, 1000
BASE-LX
FPC 5            REV 01   710-001292   AF3547            FPC
  PIC 0          REV 03   750-002879   AP1259            1x G/E, 1000
BASE-SX
  PIC 1          REV 03   750-002879   AP1259            1x G/E, 1000
BASE-SX
  PIC 2          REV 03   750-002879   AP1259            1x G/E, 1000
BASE-SX
  PIC 3          REV 03   750-002879   AP1259            1x G/E, 1000
BASE-SX
FPC 7            REV 01   710-001292   AJ0968            FPC
  PIC 0          REV 03   750-000603   AG7521            4x OC-3 SONET,
SMIR
  PIC 2          REV 08   750-001072   AH1073            1x G/E, 1000
BASE-SX

dennis at m40.ams.gs> show system uptime
Current time: 2005-02-16 20:14:55 CET
System booted: 2005-01-26 23:09:08 CET (2w6d 21:05 ago)
Protocols started: 2005-01-26 23:10:23 CET (2w6d 21:04 ago)
Last configured: 2005-02-16 19:49:19 CET (00:25:36 ago) by dennis
8:14PM CET up 20 days, 21:06, 1 user, load averages: 0.02, 0.14, 0.22

The question is how can make sure that a router that is no heavy loaded
towards it's routing engine can ping back in time? How do I set this
interface to be full-duplex?

Thanks in advance,

Dennis Ponne

------------------------------

Message: 8
Date: Wed, 16 Feb 2005 13:20:57 -0600
From: Hyunseog Ryu <r.hyunseog at ieee.org>
Subject: Re: [j-nsp] Juniper M20 power supply fault indicator
To: Steve Leibrock <sl at datumglobal.com>
Cc: juniper-nsp at puck.nether.net
Message-ID: <42139D19.5030806 at ieee.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

When you have the problem, you can check "Show chassis alarms" to see 
you have any active alarms from JUNOS.
Also, you may check "show log messages" or "show log messages | match 
<keyword>" to see any related log info.

As Jonas pointed out, there was some bad units in earlier days,
so you may have to open the case with JTAC.

Hyun

Steve Leibrock wrote:
> One of my two power supplies has a fault light that comes on every every so often at varying times (sometimes 3 times in 2 seconds). 
>  
> Can anyone guide me on how to look at the logs and see what this means and what could be causing it. I am DC powered so I will have this feed checked. I am worried it could be a faulty power supply. 
>  
> Thanks Steve
> 
> 
> Steve Leibrock, CTO
> Datum Global Solutions
> 50 Cragwood Road, Suite # 308
> South Plainfield, New Jersey 07080
> (908) 668-8808 x230
> www.datumglobal.com
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> 

------------------------------

Message: 9
Date: Wed, 16 Feb 2005 11:26:10 -0800
From: "Paul Goyette" <pgoyette at juniper.net>
Subject: RE: [j-nsp] Half Duplex Routing Engine m40?
To: "Dennis Ponne" <dennis at tune-in.nl>, <juniper-nsp at puck.nether.net>
Cc: noc at netholding.nl
Message-ID: <GHECIMEPPBAKFGCBLMJEEEPOLJAB.pgoyette at juniper.net>
Content-Type: text/plain;	charset="us-ascii"

The M40 internal PFE-to-RE link (fxp1) runs only in
half-duplex mode.  

-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net]On Behalf Of Dennis Ponne
Sent: Wednesday, February 16, 2005 11:15 AM
To: juniper-nsp at puck.nether.net
Cc: noc at netholding.nl
Subject: [j-nsp] Half Duplex Routing Engine m40?

Hi,