Re: MRLG Missing?

2010-05-30 Thread Andy Davidson
On 27 May 2010, at 20:36, Kyle Duren wrote: > I know we just had a small discussion about this, looking glass stuff > and such, but I had a copy of MRLG (the one from John Fraizer - > OP-SEC.US) a while ago about I cannot seem to find the tarball anymore. > The op-sec site appears to be dead, and

Re: Junos Asymmetric Routing

2010-05-30 Thread Andy Davidson
On 28 May 2010, at 00:27, Ken Gilmour wrote: > ISP1 is the default gateway, ISP2 is a backup provider but which is always > active. Client comes in on ISP1's link, traffic goes back out on ISP1s link. > Client comes in on ISP2's link (non default gateway) but for some reason, > the packets seem t

Re: Junos Asymmetric Routing

2010-05-30 Thread Rubens Kuhl
> You need to put a filter on your interfaces that references a filter later on > to not session track a flow.  I think you need to be running Junos-jsr[0] > 10.0 or 10.1 to use this : The same goes for 9.x, just be sure to except traffic to the router (like BGP session) from the packet-mode, th

Re: Junos Asymmetric Routing

2010-05-30 Thread Florian Weimer
* Rubens Kuhl: >> You need to put a filter on your interfaces that references a >> filter later on to not session track a flow.  I think you need to >> be running Junos-jsr[0] 10.0 or 10.1 to use this : > > The same goes for 9.x, just be sure to except traffic to the router > (like BGP session) fr

Re: Junos Asymmetric Routing

2010-05-30 Thread Randy Bush
> your perfectly fine multihop BGP session could break when rerouting > occurs. one of the many reasons that there are no perfectly fine multi-hop bgp sessions. randy

Re: Junos Asymmetric Routing

2010-05-30 Thread Florian Weimer
* Randy Bush: >> your perfectly fine multihop BGP session could break when rerouting >> occurs. > > one of the many reasons that there are no perfectly fine multi-hop bgp > sessions. Uhm, is there a way around them when building the iBGP mesh?

Re: Junos Asymmetric Routing

2010-05-30 Thread Randy Bush
>>> your perfectly fine multihop BGP session could break when rerouting >>> occurs. >> one of the many reasons that there are no perfectly fine multi-hop bgp >> sessions. > Uhm, is there a way around them when building the iBGP mesh? nope

Re: Junos Asymmetric Routing

2010-05-30 Thread Rubens Kuhl
On Sun, May 30, 2010 at 1:46 PM, Florian Weimer wrote: > * Randy Bush: > >>> your perfectly fine multihop BGP session could break when rerouting >>> occurs. >> >> one of the many reasons that there are no perfectly fine multi-hop bgp >> sessions. > > Uhm, is there a way around them when building t

Re: Junos Asymmetric Routing

2010-05-30 Thread Florian Weimer
* Rubens Kuhl: > On Sun, May 30, 2010 at 1:46 PM, Florian Weimer wrote: >> * Randy Bush: >> your perfectly fine multihop BGP session could break when rerouting occurs. >>> >>> one of the many reasons that there are no perfectly fine multi-hop bgp >>> sessions. >> >> Uhm, is there a way

Re: Junos Asymmetric Routing

2010-05-30 Thread Kevin Oberman
> Date: Sun, 30 May 2010 18:39:39 +0200 > From: Randy Bush > > > your perfectly fine multihop BGP session could break when rerouting > > occurs. > > one of the many reasons that there are no perfectly fine multi-hop bgp > sessions. I remember a posting to this list back in the late 90s from Ton