[j-nsp] M7i and M10i problems - TRACE ROUTE

Alex alex.arseniev at gmail.com
Sun Apr 22 09:15:47 EDT 2007


Giuliano,
AFAIK, the answer is no. On the other hand, if you are using MPLS L3VPN, why 
would you want your customers to be able to traceroute Your network?
Have a look into "no-propagate-ttl" and/or "no-decrement-ttl" knobs, they 
might be applicable to your situation.
Rgds
Alex

----- Original Message ----- 
From: "Giuliano Cardozo Medalha" <giulianocm at uol.com.br>
To: "Alex" <alex.arseniev at gmail.com>
Cc: <juniper-nsp at puck.nether.net>
Sent: Saturday, April 21, 2007 10:17 PM
Subject: Re: [j-nsp] M7i and M10i problems - TRACE ROUTE


> Alex,
>
> Is there some way to avoid or to change this default value ?
>
> It is possible to configure a firewall-filter to increase these values ?
>
> The problem is that when our customers start TRACES outside ... they think 
> our network as problems.
>
> Thanks a lot,
>
> Giuliano
>> Giuliano,
>> On Juniper M-series, there is an ICMP TTL-exceeded rate-limit in place: 
>> 50 pps per logical interface and 500 pps per box.
>> See http://puck.nether.net/pipermail/cisco-nsp/2006-June/031717.html
>> Rgds
>> Alex
>>
>> ----- Original Message ----- From: "Giuliano Cardozo Medalha" 
>> <giulianocm at uol.com.br>
>> To: <juniper-nsp at puck.nether.net>
>> Sent: Saturday, April 21, 2007 8:51 PM
>> Subject: [j-nsp] M7i and M10i problems - TRACE ROUTE
>>
>>
>>> People,
>>>
>>> We have a Juniper M10i border router.
>>>
>>> When we install this router on our network ... we are having problems
>>> with MTR and traceroute programs.
>>>
>>> Basically ... every trace that pass trough the router lose 70% of the
>>> packets.
>>>
>>> PING just works fine ... but TRACE and MTR not.
>>>
>>> Juniper saids in J-TAC that this is a default config (FACTORY DEFAULT)
>>> from the router.
>>>
>>> There is some command or way to change this behavior ?
>>>
>>> Thanks a lot,
>>>
>>> Giuliano
>>>
>>> _______________________________________________
>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>
>>
> 



More information about the juniper-nsp mailing list