Quantcast
Channel: All Ethernet Switching posts
Viewing all 10307 articles
Browse latest View live

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

after you remove the ge-0/1/2 ge-0/1/3 configuration what interfaces if any show up in 

show interfaces terse

 

After the configuration removal can you insert the xe optic cable and run again

show interfaces terse 

to see if the interface shows up as xe

 

I've not use th ex3300 but on the acx platform with the dual ports the interface type ge verses xe is trigged by the optic being in the slot.


Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

spuluka wrote:

after you remove the ge-0/1/2 ge-0/1/3 configuration what interfaces if any show up in 

show interfaces terse

 

After the configuration removal can you insert the xe optic cable and run again

show interfaces terse 

to see if the interface shows up as xe

 

I've not use th ex3300 but on the acx platform with the dual ports the interface type ge verses xe is trigged by the optic being in the slot.


xe-0/1/0                up    up
xe-0/1/0.0              up    up   eth-switch
xe-0/1/1                up    up
xe-0/1/1.0              up    up   eth-switch
xe-0/1/3                up    down
xe-0/1/3.0              up    down eth-switch

there no any ge-0/1/x =(

 

 

Re: Understanding edge ports in spanning tree protocol

$
0
0

One way you can use group is the following:

 

set interfaces interface-range access-interfaces member-range ge-0/0/0 to ge-0/0/20

set protocols rstp interface access-interfaces edge

 

 

Please mark this solution as complete if it addresses your quesiton.

Re: Juniper switch support for the newly approved 802.3bz standard

$
0
0

What is Juniper's progress on launching products with this new standard? I noticed that Juniper is not a member of either the NBASE-T (not surprising since it's Cisco backed) or the MGBASE-T alliances, which is concerning, however they should still be able to leverage the new standard since it has been published by the IEEE. 

Re: Juniper switch support for the newly approved 802.3bz standard

$
0
0

These switches will be new hardware SKUs (a must) and time frame for delivery is probably Q1/2018, maybe Q4/2017.  These switches will also add support for new POE++ standard (IEEE 802.3bt - HDBaseT) for 100W support.  These switches will very likely be part of EX family of products.

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

So I want to confirm that you have the DAC cable connected on both ends when this is taken so that there should be a link.

 

And if you move the DAC to port xe-0/1/1 the cable works and we show link up.

Re: Dot1x / MAC-Based Authentication issues on a EX2200 with 100BaseEthernet Devices

$
0
0

We tried 15.1R5.5 , but had to roll back to 12.3R12 because dot1x just didn't work.

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

spuluka wrote:

So I want to confirm that you have the DAC cable connected on both ends when this is taken so that there should be a link.

 

And if you move the DAC to port xe-0/1/1 the cable works and we show link up.


absolutely.

and I have two other EX3300 with exactly the same behavior.

 

 


Re: Dot1x / MAC-Based Authentication issues on a EX2200 with 100BaseEthernet Devices

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

Seems odd behavior and I don't see any mention of these ports being somehow unusable in the documentation.

 

The only other thing I can think to try is using standard sfp+ optics in the ports as a verification but with your DAC tested and working on the adjacent port it seems not likely to be the issue.

 

I think you will need to open a JTAC ticket on this unless someone else has seen this before.

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

I don't have active support contract, so I can't ask JTAC.

Re: EX3300 can't disable xe-2/3 for VC.

$
0
0

Problem solved  - at the other side was buggy Netgear M4300 switch.

changing FW fixed those box.

 

High dropped packets on EX4550 between SRX and ISP

$
0
0

Hi all,

 

I have an EX4550 that is sitting between an SRX and our ISP. This EX also connects to other switches so it typically has a fair amount of traffic at any time. Our ISP link is manually set to 100M/FD per the ISP and is at near 100% utilization most of the time. My link between the SRX autonegotiates to 1000M/FD. I seem to be seeing pretty darn high dropped packets on the links.

 

For example, between the EX and SRX. I had 4046765583 sent packets and 4590474840 dropped packets. Between the EX and the ISP, I had 74233372075 sent, 49872010 dropped, and I also received 311333 MAC pause frames.

 

I'm trying to narrow down not only the cause of the dropped packets, but also anything I can do to minimize them. One of our application developers is blaming problems seen with their software on intermittent connectivity issues to the ISP (like a few second drop every 10-15 minutes). These dropped packets seem to give some credibility to the claim.

 

Any thoughts where to look or what to implement on either the EX or SRX to minimize the dropped packets? I thought of QoS/CoS at first but with the amount of traffic we get I don't know if it would help. We have a lot of 10Gb ports on the EX going over to a 1Gb port on the SRX and then back to get to the ISP which is only a 100Mb link. That alone seems to be a problem to me.

 

Thanks!

SSG5 Bandwith problems

$
0
0

Hello all I'am working with SSG5 6.3.0R14B and since I've switched from 10 Mbps to 40 Mbps with my ISP I've noticed that I have still 15 Mbsp download on a speed test not 40 like I should have. Is it old firmware ? Or Mabey I don't know about some magic setting on SSG that I should apply to let the whole bandwith in. In addition I don't have any rules set to manipulate the bandwith flow everything is default no restrictions on UP , DOWN speed. At least not any that I know of Smiley Happy

If it's the firmware how can I download it from the site.

Re: irb .vs l3-interface

$
0
0

Hello,

I am new to this forum and i bought my first Juniper Switch (EX2300-C).

 

I wanted to configure it using J-Web:

http://www.juniper.net/techpubs/test/en_US/release-independent/junos/topics/task/configuration/ex-series-initial-configuration-setting-up-j-web.html

 

I configured In-Band Management with the default VLAN.

 

When I want to submit the configuration, I get this error:

There were error(s) delivering the configuration.

Error(s): 
'l3-interface irb.0'

1) l3-interface can be configured only under vlans with 'vlan-id'/'vlan-tags'
2) commit failed: (statements constraint check failed)

What can I do? In the EZ-Setup of J-Web I don't see where I can do anything to prevent this error.

 

Can anyone please help me?

 

Thanks and kind regards

gp83.


EX3400 Mini-USB console

$
0
0

I'm trying to make the EX3400 Mini-USB console port the primary port.

 

According to EX3400 Switches Hardware Overview/Console Ports“The switch activates only one console port at a time—either the RJ-45 console port or the Mini-USB Type-B console port.” This is not the behavior I'm seeing. When I run the command set system ports auxiliary port-type mini-usb, the Mini-USB serial port activates, but it only works when the system is booted. The boot messages still appear on the RJ-45 port, and after boot, it also active. I've tried various other configurations under system ports console and system ports auxiliary, but I can't seem to figure out a configuration that works.

 

I'm on 15.1X53-D55.

Dhsp-snoop on qfx5100

$
0
0

Hi,

 

I have virtual-chaccis with 4 switch's

Qfx5100 *2

Ex4300*2

Version: [13.2X51-D36.1

The swtich support ELS

 

I need to enable dhcp-snoop and make one of the trunked interace's as untrasted interface

 

I read about dhcp-snoop on juniper and they always  talk about that trunk interface are trusted by default how can i change this ?

 

The dhcp-snoop is per port or per vlan ?

 

My final goal is to block dhcp replay on specific vlan on one trunk interface.

 

Regards

Rafi

SSG5 Bandwith problems

$
0
0
Moved to ScreenOS Firewalls Forum

Re: High dropped packets on EX4550 between SRX and ISP

$
0
0

Seems the place to start is to verify the utilization on the ISP 100m uplink.  If this really is maxing out, then this is likely the root cause of all the drops you are seeing.  Are you collecting and graphing the bandwidth utilization?

 

If not, your ISP may be collecting that data for you in their portal.

 

If this proves to be the case, you can then look into putting downstream policers in place to limit bandwidth from particular VLANs in order to reserve space for those critical applications.

Re: irb .vs l3-interface

$
0
0

I just set this switch up for testing , had the the same error, try my config, and just change what you need to. NETWORK-9 is the vlan we are using to access the switch, on ge-0/0/23

 

 

admin@CORPTEST> show configuration |display set |no-more
set version 15.1X53-D50.2
set system host-name CORPTEST
set system auto-snapshot
set system domain-name masseyservices.com
set system time-zone US/Eastern
set system root-authentication encrypted-password ""
set system name-server 10.10.10.10
set system name-server 10.20.10.10
set system login user admin full-name Administrator
set system login user admin uid 2000
set system login user admin class super-user
set system login user admin authentication encrypted-password ""
set system login user itnotify full-name ITNOTIFY
set system login user itnotify uid 2001
set system login user itnotify class read-only
set system login user itnotify authentication encrypted-password ""
set system services ssh protocol-version v2
set system services ssh max-sessions-per-connection 32
set system services telnet
set system services netconf ssh
set system services web-management http
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system syslog file default-log-messages any any
set system syslog file default-log-messages match "(requested 'commit' operation)|(copying configuration to juniper.save)|(commit complete)|ifAdminStatus|(FRU power)|(FRU removal)|(FRU insertion)|(link UP)|transitioned|Transferred|transfer-file|(license add)|(license delete)|(package -X update)|(package -X delete)|(FRU Online)|(FRU Offline)|(plugged in)|(unplugged)|CFMD_CCM_DEFECT| LFMD_3AH | RPD_MPLS_PATH_BFD|(Master Unchanged, Members Changed)|(Master Changed, Members Changed)|(Master Detected, Members Changed)|(vc add)|(vc delete)|(Master detected)|(Master changed)|(Backup detected)|(Backup changed)|(interface vcp-)|(AIS_DATA_AVAILABLE)|BR_INFRA_DEVICE"
set system syslog file default-log-messages structured-data
set system processes dhcp-service traceoptions file dhcp_logfile
set system processes dhcp-service traceoptions file size 10m
set system processes dhcp-service traceoptions level all
set system processes dhcp-service traceoptions flag all
set system ntp server 10.10.10.10
set system ntp server 10.20.10.10
set chassis alarm management-ethernet link-down ignore
set interfaces ge-0/0/0 speed 100m
set interfaces ge-0/0/0 link-mode full-duplex
set interfaces ge-0/0/0 ether-options no-auto-negotiation
set interfaces ge-0/0/0 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/1 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/2 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/3 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/4 speed 100m
set interfaces ge-0/0/4 link-mode full-duplex
set interfaces ge-0/0/4 ether-options no-auto-negotiation
set interfaces ge-0/0/4 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/5 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/6 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/7 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/8 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/9 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/10 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/11 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/12 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/13 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/14 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/15 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/16 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/17 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/18 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/19 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/20 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/21 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/22 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/0/23 unit 0 family ethernet-switching vlan members NETWORK-9
set interfaces ge-0/0/23 unit 0 family ethernet-switching native-vlan-id default
set interfaces ge-0/1/0 unit 0 family ethernet-switching storm-control default
set interfaces xe-0/1/0 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/1/1 unit 0 family ethernet-switching storm-control default
set interfaces xe-0/1/1 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/1/2 unit 0 family ethernet-switching storm-control default
set interfaces xe-0/1/2 unit 0 family ethernet-switching storm-control default
set interfaces ge-0/1/3 unit 0 family ethernet-switching storm-control default
set interfaces xe-0/1/3 unit 0 family ethernet-switching storm-control default
set interfaces irb unit 0 family inet
set interfaces irb unit 9 family inet address 10.11.9.10/24
set snmp description CORPTEST
set snmp contact "MASSEY IT"
set snmp community Public authorization read-only
set snmp trap-group space targets 10.10.10.6
set forwarding-options storm-control-profiles default all
set routing-options static route 0.0.0.0/0 next-hop 10.11.9.254
set protocols lldp interface all
set protocols lldp-med interface all
set protocols igmp-snooping vlan default
set protocols rstp interface ge-0/0/0
set protocols rstp interface ge-0/0/1
set protocols rstp interface ge-0/0/2
set protocols rstp interface ge-0/0/3
set protocols rstp interface ge-0/0/4
set protocols rstp interface ge-0/0/5
set protocols rstp interface ge-0/0/6
set protocols rstp interface ge-0/0/7
set protocols rstp interface ge-0/0/8
set protocols rstp interface ge-0/0/9
set protocols rstp interface ge-0/0/10
set protocols rstp interface ge-0/0/11
set protocols rstp interface ge-0/0/12
set protocols rstp interface ge-0/0/13
set protocols rstp interface ge-0/0/14
set protocols rstp interface ge-0/0/15
set protocols rstp interface ge-0/0/16
set protocols rstp interface ge-0/0/17
set protocols rstp interface ge-0/0/18
set protocols rstp interface ge-0/0/19
set protocols rstp interface ge-0/0/20
set protocols rstp interface ge-0/0/21
set protocols rstp interface ge-0/0/22
set protocols rstp interface ge-0/0/23
set protocols rstp interface ge-0/1/0
set protocols rstp interface xe-0/1/0
set protocols rstp interface ge-0/1/1
set protocols rstp interface xe-0/1/1
set protocols rstp interface ge-0/1/2
set protocols rstp interface xe-0/1/2
set protocols rstp interface ge-0/1/3
set protocols rstp interface xe-0/1/3
set vlans NETWORK-9 vlan-id 9
set vlans NETWORK-9 l3-interface irb.9
set vlans default vlan-id 1

{master:0}
admin@CORPTEST>

 

Viewing all 10307 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>