[j-nsp] ex4200 egress filter

[Nick Ryce]

Thankfully only using ospf and vlans on our ex4200's :)

Nick

-----Original Message-----
From: Richard A Steenbergen [mailto:ras at e-gerbil.net]
Sent: 28 April 2011 14:05
To: Nick Ryce
Cc: Chris Kawchuk; juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] ex4200 egress filter

On Thu, Apr 28, 2011 at 12:22:43PM +0100, Nick Ryce wrote:
> Hi Chris,
>
> The issue should be resolved next week in a service release against
> 11.1R1

We hit this issue while testing 11.1R1, and oh what a mighty big screwup it was on Juniper's part too (that it even tries to parse the packets that are killing it in the first place, when NOT CONFIGURED TO DO SO, simply boggles the mind). Unfortunately it's also not the only "packet of death which crashes the FPCs" issue in 11.1 on EX, we also discovered another one which DIDN'T get fixed in 11.1S1, so you're taking your life into your own hands if you try to run that code in production. Oh and BTW, 11.1 on EX will also blackhole your packets while BGP converges following bootup, for up to 15 minutes in our testing. Consider yourselves warned. :)

--
Richard A Steenbergen <ras at e-gerbil.net>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

--

This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the sender. Any
offers or quotation of service are subject to formal specification.
Errors and omissions excepted.  Please note that any views or opinions
presented in this email are solely those of the author and do not
necessarily represent those of Lumison.
Finally, the recipient should check this email and any attachments for the
presence of viruses.  Lumison accept no liability for any
damage caused by any virus transmitted by this email.