[j-nsp] SRX Experiences - Was: JUNOS 10.4S6 for EX8200 - PR/676826

[Jeff Richmond]

Weird, I have a number of SRX210s running 10.4Rx and have had no notable issues at all. Now 9.x code was a totally different story. I work out of my home office, so my main 210 has to be working all the time, which it does just fine. 

Currently Running:
ADSL2+ PIM for uplink, 10Mb
V4 + V6 (both flow)
AX411 WLAN
Few GRE tunnels
COS using MFC filters
NAT: Source and Destination
A handful of V4/V6 BGP sessions

I have a second SRX210 sitting next to it as a cold spare if I need it, but have never needed it. I use MRTG to graph my resource utilization on it (including flows), just to keep an eye on things and have been satisfied with the performance.

Regards,
-Jeff


On Sep 1, 2011, at 11:00 AM, Paul Stewart wrote:

> We have yet to see that even with PIM modules installed - do you remember
> what version of JunOS you were running by chance?
> 
> 
> 
> Paul
> 
> 
> 
> 
> 
> From: Nathan Sipes [mailto:nathan.sipes at gmail.com] 
> Sent: September-01-11 12:05 PM
> To: Paul Stewart
> Cc: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826
> 
> 
> 
> I have had similar experiences to Richard's with the "Free SRX210H" I even
> managed to get a DSL PIM in there as well. Had it up and working for about 2
> months when the pim quit forwarding traffic randomly. Rebooting the SRX
> seems to fix it well enough though... I will say that the free hardware has
> cost a lot of my time and some annoyed phone calls from my wife when netflix
> doesn't work. 
> 
> 
> 
> 
> 
> On Thu, Sep 1, 2011 at 9:48 AM, Paul Stewart <paul at paulstewart.org> wrote:
> 
> Actually I'm curious as well - RAS is not typically wrong though about this
> kind of stuff ;)
> 
> We have numerous SRX deployed for firewall and router functionality - some
> are running Dynamic VPN (which yes, we've had issues with - definitely it's
> not perfect).  We've been bitten by some surprises as well ... so I'm not
> disagreeing, just saying that we're pretty used to these issues we've
> encountered and don't deploy if we know they will come up. Typically, we use
> them as site to site VPN boxes along with firewalling.
> 
> I have an SRX210 at my home as well - run the full UTM suite on it and had
> no real issues (granted it's a home environment to be fair).
> 
> RAS, can you share a few highlights of "broken"?
> 
> Appreciate it,
> Paul
> 
> 
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Phil Mayers
> Sent: September-01-11 11:35 AM
> To: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] JUNOS 10.4S6 for EX8200 - PR/676826
> 
> 
> On 01/09/11 10:09, Richard A Steenbergen wrote:
> 
>> I have an SRX210 in my basement doing my home routing, and it is the
>> only free device I've ever been given that I would seriously consider
>> returning and asking for my money back. Broken doesn't even begin to
>> describe it, my condolences to anyone who actually needs to run these
>> things in production.
> 
> Is this for routing functionality, or firewall functionality?
> 
> We're using one as an MPLS PE, and it seems to be working ok, but given
> what you've said... gulp!
> 
> Is there a good summary of the problems anywhere, or do I need to trawl
> the archives?
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> 
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp