If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(ZDNet UK) Fail Loaded BGP update causes Juniper routers world wide to fail, large portion of the internet down   (zdnet.co.uk) divider line 55
More: Fail, BGP, sun outage, JUNIPER NETWORKS, ZDNet UK, BGP update, ISPs  
•       •       •

4962 clicks; posted to Geek » on 07 Nov 2011 at 4:00 PM   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»   |    Get this fabulous T-Shirt and impress the methane out of your friends! shirt it!



55 Comments   (+0 »)
   

First | « | 1 | 2 | » | Last | Show all
 
2011-11-07 03:37:30 PM
I've only had 3 customers affected by it, but it's still a huge pain in the ass.
 
2011-11-07 03:40:51 PM
Okay in 2003, they failed to hire me for their SQA team (SITE)... the results speak for themselves.
 
2011-11-07 04:08:37 PM
I am not having any prob...***carrier lost***
 
2011-11-07 04:09:09 PM
Wait, people still use Juniper equipment?
 
2011-11-07 04:24:28 PM
arago4.tnw.utwente.nl
 
2011-11-07 04:27:01 PM
I thought the internet was a series of tubes.

/Should have upgraded to Roto-Routers
//Unclogs the internet
///I got nothing
 
2011-11-07 04:37:13 PM
Oh. So THAT'S what that was this morning. Good thing we have four other DS3s coming in from other providers. Noticed things were a little squirrely, but nothing major. And, no one complained so all's good.
 
2011-11-07 04:38:24 PM
RatOmeter: Wait, people still use Juniper equipment?

I blame Cisco. Not really. Wait, people really use Juniper?
 
2011-11-07 04:40:06 PM
RatOmeter: Wait, people still use Juniper equipment?

A lot of people do, and a lot more are starting to.

They make good stuff.
 
2011-11-07 04:43:30 PM
I wonder if this has anything to do with this morning's Time Warner outrage?
 
2011-11-07 04:51:02 PM
DECMATH: I wonder if this has anything to do with this morning's Time Warner outrage?

Yes. I peer with TWC at two places using Juniper MX80's.
 
2011-11-07 05:08:04 PM
RatOmeter: Wait, people still use Juniper equipment?

some of the biggest ecommerce sites out there use Juniper.


Level3 uses Juniper... you might want to google them ;)
 
2011-11-07 05:11:22 PM
Cubansaltyballs: RatOmeter: Wait, people still use Juniper equipment?

A lot of people do, and a lot more are starting to.

They make good stuff.


They also make some shiate. *cough*SRX*cough*
 
2011-11-07 05:13:46 PM
RatOmeter: Wait, people still use Juniper equipment?

Let's just go down the list of people that use Juniper... NYSE Euronext, JP Morgan Chase, Honda R&D Americas, Priceline.com, Tesla Motors...

Oh, and that's just the networks I've worked on.
 
2011-11-07 05:18:50 PM
Pinko_Commie: They also make some shiate. *cough*SRX*cough*

The SRX isn't that bad. I wish it had more features like SSL VPN, but whatever. It's still better than anything Checkpoint, Palo Alto Networks, Mcaffee, or any of those other software firewall people make.
 
2011-11-07 05:19:21 PM
RatOmeter: Wait, people still use Juniper equipment?

Yeah. Why wouldn't they use one of the goto brand for carrier (and whatever is bigger & nastier than carrier) grade routers?
 
2011-11-07 05:49:06 PM
Cubansaltyballs: Pinko_Commie: They also make some shiate. *cough*SRX*cough*

The SRX isn't that bad. I wish it had more features like SSL VPN, but whatever. It's still better than anything Checkpoint, Palo Alto Networks, Mcaffee, or any of those other software firewall people make.


I use an ASA here at the house, but I do have an SRX240 and an SA4000 that are hot spares should something happen with my ASA.
 
2011-11-07 05:53:25 PM
rezin8: RatOmeter: Wait, people still use Juniper equipment?

Let's just go down the list of people that use Juniper... NYSE Euronext, JP Morgan Chase, Honda R&D Americas, Priceline.com, Tesla Motors...

Oh, and that's just the networks I've worked on.


Tesla Motors? Did thier cars reboot as well?
 
2011-11-07 05:59:59 PM
rezin8: RatOmeter: Wait, people still use Juniper equipment?

Let's just go down the list of people that use Juniper... NYSE Euronext, JP Morgan Chase, Honda R&D Americas, Priceline.com, Tesla Motors...

Oh, and that's just the networks I've worked on.


Oh, and all of these:

http://en.wikipedia.org/wiki/Tier_1_network (new window)
 
2011-11-07 06:08:52 PM
Time Warner in NYC went tits up for a while.
 
2011-11-07 06:11:49 PM
If only the linked article was down...
 
2011-11-07 06:16:46 PM
Captain von Fapp: rezin8: RatOmeter: Wait, people still use Juniper equipment?

Let's just go down the list of people that use Juniper... NYSE Euronext, JP Morgan Chase, Honda R&D Americas, Priceline.com, Tesla Motors...

Oh, and that's just the networks I've worked on.

Oh, and all of these:

http://en.wikipedia.org/wiki/Tier_1_network (new window)


Yep. I've done a lot of work for tier 1 and 2 carriers involving the MX480 series chassis, as well as the TX matrix series. Lots of bang for your buck, and for the most part they're very reliable routers. I like JUNOS almost as much as Cisco IOS.
 
2011-11-07 06:32:12 PM
So I will have to wait an additional 20 seconds to download pr0n?

www.platformnation.com
 
2011-11-07 06:37:59 PM
rezin8: Cubansaltyballs: Pinko_Commie: They also make some shiate. *cough*SRX*cough*

The SRX isn't that bad. I wish it had more features like SSL VPN, but whatever. It's still better than anything Checkpoint, Palo Alto Networks, Mcaffee, or any of those other software firewall people make.

I use an ASA here at the house, but I do have an SRX240 and an SA4000 that are hot spares should something happen with my ASA.


Same here. I've been told by management to learn Juniper, so I'm replacing my ASA and Cat3560 with an SRX210 and EX3200.... That'll learn me good.
 
2011-11-07 06:46:33 PM
Whatever this "Juniper" is, it obviously sucks. My D-Link has been running just fine for 2 years straight, and it probably cost less.
 
2011-11-07 06:48:25 PM
treesloth: Whatever this "Juniper" is, it obviously sucks. My D-Link has been running just fine for 2 years straight, and it probably cost less.

I know. The ISPs should just use a bunch of those to handle the internet traffic.
 
2011-11-07 06:58:38 PM
Cubansaltyballs: rezin8: Cubansaltyballs: Pinko_Commie: They also make some shiate. *cough*SRX*cough*

The SRX isn't that bad. I wish it had more features like SSL VPN, but whatever. It's still better than anything Checkpoint, Palo Alto Networks, Mcaffee, or any of those other software firewall people make.

I use an ASA here at the house, but I do have an SRX240 and an SA4000 that are hot spares should something happen with my ASA.

Same here. I've been told by management to learn Juniper, so I'm replacing my ASA and Cat3560 with an SRX210 and EX3200.... That'll learn me good.


Funny, I just picked up an EX3200. Here's the current setup, sans SRX (new window)
 
2011-11-07 07:06:01 PM
rezin8: Funny, I just picked up an EX3200. Here's the current setup, sans SRX (new window)

Nice. I don't have any formal diagrams of mine. I just recently gutted a big chunk of it when I pulled most of my old CCIE lab equipment out.

I have two networks. One is for my day-to-day stuff, which I'll replacing with Juniper just to learn it, and the other is a lab. The two are separated with a Netscreen 50. In the lab network I have a lot of stuff I rarely use, but perform testing with from time to time. I have a lot of network equipment like Pix 525s, IPS 4215s, routers, firewalls, switches, a couple of Cisco 1242 APs. I've got an asslode of Virtual servers like a full Cisco NAC setup, ACS, 4.2 and 5.2, RSA AM 7.1 on Windows and even a version of the appliance that I converted with P2V, ISE 1.0 (sucks), NAC Guest Server, and a whole bunch of different Windows/Linux/Mac Servers that are all virtualized.
 
2011-11-07 07:08:21 PM
rezin8: Funny, I just picked up an EX3200. Here's the current setup, sans SRX (new window)

Also, on your diagram I saw two APs with distinct SSIDs. How come you don't map SSIDs to VLANs? It's a pretty easy config. If you want it, I'll post it.
 
2011-11-07 07:12:18 PM
You saw 4 AP with distinct SSID's. Two in prod, one for N, one for G. Two in lab, one for guest, one for lab. The lab stuff is on a different VLAN... check the colors.
 
2011-11-07 07:19:22 PM
rezin8: You saw 4 AP with distinct SSID's. Two in prod, one for N, one for G. Two in lab, one for guest, one for lab. The lab stuff is on a different VLAN... check the colors.

Still pretty cool. I just have one prod ap and one lab ap, and have each SSID mapped to a VLAN.

Here's a link to a working AP config to do that...

http://www.filedropper.com/lab-ap
 
2011-11-07 07:27:17 PM
Cubansaltyballs: Here's a link to a working AP config to do that...

Not really worried about setting my prod APs on a different VLAN. That's just more shiat that I have to deal with.
 
2011-11-07 07:52:13 PM
4.bp.blogspot.com

Nuff said.

/Working on JNCIE
//Suck it CCNA
 
2011-11-07 07:59:44 PM
etherknot: /Working on JNCIE
//Suck it CCNA


What's a CCNA? Is that the thing they give you when you buy a switch?
 
2011-11-07 08:09:26 PM
DECMATH: I wonder if this has anything to do with this morning's Time Warner outrage?

I think it is. At about 8:15am (CST) I lost all connectivity. I reset the router, cable modem, and finally started pinging individual IPs trying to figure out what was wrong. Then it worked again.
 
2011-11-07 08:27:39 PM
etherknot: [4.bp.blogspot.com image 352x240]

Nuff said.

/Working on JNCIE
//Suck it CCNA


You're not the only one working on a JNCIE, but...

www.gregoryledet.com

...I do have allegiances. When I get around to taking my R&S lab I'll have my CCIE number below it.
 
2011-11-07 09:00:47 PM
rezin8: etherknot: [4.bp.blogspot.com image 352x240]

Nuff said.

/Working on JNCIE
//Suck it CCNA

You're not the only one working on a JNCIE, but...

[www.gregoryledet.com image 300x400]

...I do have allegiances. When I get around to taking my R&S lab I'll have my CCIE number below it.


You seem to have a lot of certs... Testking? or do you actually know what you are doing?

CCIE and JNCIE written are easy compared to the lab portion. Good luck.
 
2011-11-07 09:11:17 PM
Shafty: You seem to have a lot of certs... Testking? or do you actually know what you are doing?

CCIE and JNCIE written are easy compared to the lab portion. Good luck.


I actually know what I'm doing. I loathe people that use braindumps for tests. I've passed both 3.0 and 4.0 for the CCIE R&S written. Failed my first attempt at the lab. Building a lab up now for both the CCIE and the JNCIE.

(BTW, there's no written portion for the JNCIE. It's all lab.)
 
2011-11-07 09:29:31 PM
rezin8: Shafty: You seem to have a lot of certs... Testking? or do you actually know what you are doing?

CCIE and JNCIE written are easy compared to the lab portion. Good luck.

I actually know what I'm doing. I loathe people that use braindumps for tests. I've passed both 3.0 and 4.0 for the CCIE R&S written. Failed my first attempt at the lab. Building a lab up now for both the CCIE and the JNCIE.

(BTW, there's no written portion for the JNCIE. It's all lab.)


I know ;)

Good for you, I have a friend that passed the JNCIE first time out, although he is single and spent a better part of a year preparing for it. If you ever get a desire to work on a carrier backbone, hit me up. Im always looking for good talent. Folks with JunOS experience is hard to find around here.
 
2011-11-07 10:27:41 PM
Shafty: rezin8: etherknot: [4.bp.blogspot.com image 352x240]

Nuff said.

/Working on JNCIE
//Suck it CCNA

You're not the only one working on a JNCIE, but...

[www.gregoryledet.com image 300x400]

...I do have allegiances. When I get around to taking my R&S lab I'll have my CCIE number below it.

You seem to have a lot of certs... Testking? or do you actually know what you are doing?

CCIE and JNCIE written are easy compared to the lab portion. Good luck.



That tattoo is hard core. I seriously have to know... Do you show that off during job interviews? I haven't had the guts to break the glass case for my CCIE medal and wear it to interviews :)

I passed the CCIE lab March of 2000 way back when it was two days long. I tied an onion to my belt and had to (in my attempts) tackle ATM, LANE, Appletalk, IPX, Token Ring, and VoIP. I passed the JNCIP-M and JNCIE-M labs done earlier this year, before they retired the exams for the SP. I took the CCNP/CCDP exams before there were any books/classes named after the component tests. I also got the MCSE in 1997 before it was crammed to farking death.

A paper certification's success and popularity causes its demise. I passed the CISSP in 2001 and 2010. The exam prep materials (not cram guides) made that multiple choice exam easy. Paper certifications (knowledge-based exams) bring out the test king crammers - a performance-based exam is the only way to go. The latest JNCIP-SP exam is only a written exam.
 
2011-11-07 10:47:55 PM
Shafty: rezin8:

I know ;)

Good for you, I have a friend that passed the JNCIE first time out, although he is single and spent a better part of a year preparing for it. If you ever get a desire to work on a carrier backbone, hit me up. Im always looking for good talent. Folks with JunOS experience is hard to find around here.


Finding good JUNOS people is hard, especially with gov't clearances. The last handful of Juniper-employed resident engineers (requiring clearances) that I have seen hired on at customer sites started out with zero JUNOS experience.

I started working with Juniper in 2004 and have gotten spoiled. Working with IOS (and ScreenOS) has become a pain in the ass.
 
2011-11-07 11:05:33 PM
wagnerism: Finding good JUNOS people is hard, especially with gov't clearances. The last handful of Juniper-employed resident engineers (requiring clearances) that I have seen hired on at customer sites started out with zero JUNOS experience.

I started working with Juniper in 2004 and have gotten spoiled. Working with IOS (and ScreenOS) has become a pain in the ass.


Im not surprised about that. Its cheaper to train someone to learn JunOS than it is to get a clearance.
We got lucky when our RE was assigned to us, he came with a wealth of knowledge and has been a real asset to have on site. Our Cisco HTE has been great as well.

I started working on Junipers in 04 too, I prefer it over IOS. I had a bit of a learning curve to over come since I had worked with IOS for a number of years. I got over it pretty quick tho.
 
2011-11-07 11:27:40 PM
rezin8: Shafty: You seem to have a lot of certs... Testking? or do you actually know what you are doing?

CCIE and JNCIE written are easy compared to the lab portion. Good luck.

I actually know what I'm doing. I loathe people that use braindumps for tests. I've passed both 3.0 and 4.0 for the CCIE R&S written. Failed my first attempt at the lab. Building a lab up now for both the CCIE and the JNCIE.

(BTW, there's no written portion for the JNCIE. It's all lab.)


That's funny. The written exams are so easy it's almost sad. You basically have to get 60 easy multiple choice questions right.

From my experience, the only people I know that think the CCIE is easy are people that can't pass it, and usually did the brain-dump thing for everything else.
 
2011-11-07 11:37:20 PM
wagnerism: A paper certification's success and popularity causes its demise. I passed the CISSP in 2001 and 2010. The exam prep materials (not cram guides) made that multiple choice exam easy. Paper certifications (knowledge-based exams) bring out the test king crammers - a performance-based exam is the only way to go. The latest JNCIP-SP exam is only a written exam.

The only exam that still holds any weight are the CCIE and JNCIE because it's extremely hard to cram for them, but I've still met a few paper CCIEs.

Funny story, my company is pushing a bunch of into Juniper training because they want to sell more Juniper products. During one of the calls to talk about the training, one of the guys has every cert under the sun including a CCIE, basically started telling us how to get enough knowledge to pass the Juniper exams.

My recommendation was to get each person an SRX, EX3200, etc... and give them a list of tasks to complete on their own, so they could learn Juniper the same way most of us learned Cisco. Someone leaves a pile of sh*t on your desk and tells you to get it working.

This guy thought all that hooey about learning the actual equipment and how to make it work wasn't necessary. Just use GNS3 to learn the commands... besides, the exams are all multiple choice so you don't need to know a lot of that stuff. I wasn't happy and the Juniper VP that was there wasn't either, since they were funding this ordeal. He liked my idea better and committed to getting us equipment.

Friday I got my box of goodies from Juniper...
 
2011-11-07 11:38:41 PM
Hmmm. Good thing I put off that project to upgrade the OS on all my 8216's.

Procrastination, you saved me again.
 
2011-11-07 11:59:47 PM
fark'emfeed'emfish: If only the linked article was down...

It is NOW.
 
2011-11-08 02:54:15 AM
rezin8:
[www.gregoryledet.com image 300x400]

...I do have allegiances. When I get around to taking my R&S lab I'll have my CCIE number below it.


If I recall, the numbers expire after three or so years when they encourage you to recertify. :-)
 
2011-11-08 05:31:05 AM
rezin8: I loathe people that use braindumps for tests.

Tell me about it.

It's hilarious the amount of 1st liners that come into our place with a whole arm full of certificates, who can't explain what a 3-way handshake is and don't know how to do even the most basic troubleshooting.

I had one the other day (who is actually leaving us (from 1st line) and going to one of our competitors at 3rd line level (lol)) who was trying to troubleshoot a DNS issue through a firewall, said to me, "I didn't bother with a TCPDump because it's UDP traffic". I just had to walk away, muttering under my breath.

Cubansaltyballs: The SRX isn't that bad. I wish it had more features like SSL VPN, but whatever. It's still better than anything Checkpoint, Palo Alto Networks, Mcaffee, or any of those other software firewall people make.

Can't stand them. I will admit that they're getting better with every code release (and that I'm primarily a Checkpoint guy), but they were released before they were a mature enough firewall. We're a pretty big Juniper reseller, and our sales guys pushed the SRX from the launch, big mistake, we had several of our customers return them asking for refunds because they were that poor, then Juniper reclaisified them as "secure routers" for a while, but now they're back as firewalls. On top of that, Junipers management solution (NSM) is horrific, I'd rather use ASDM on an ASA than NSM.

Their SA boxes on the other hand are fantastic.

Give me a Checkpoint firewall solution any day of the week. :-)
 
2011-11-08 06:39:13 AM
No one ever got fired for buying Cisco.
 
2011-11-08 07:45:30 AM
Shafty: Good for you, I have a friend that passed the JNCIE first time out, although he is single and spent a better part of a year preparing for it. If you ever get a desire to work on a carrier backbone, hit me up. Im always looking for good talent. Folks with JunOS experience is hard to find around here.

You saw a portion of my client list up there. I'm pretty comfortable where I'm at now, but that can always change.

wagnerism: I seriously have to know... Do you show that off during job interviews?

I've been known to whip it out during an interview. It lets people know I'm serious. (BTW, my MCSE is on NT4 too)

wagnerism: Finding good JUNOS people is hard, especially with gov't clearances.

I think my Secret is still good...

etherknot: If I recall, the numbers expire after three or so years when they encourage you to recertify

Your number is good as long as you keep it active. Once I past that damn lab, I'll never let it expire.

One of the things that pisses me off right now is that my company has pushed Juniper and Cisco on the side for HP. I can't stand the Comware shiat, yet that's what we're pushing. I made such a stink over getting my MASE that they've told me that I won't have to work on the HP gear and I'll only support our Cisco and Juniper customers.
 
Displayed 50 of 55 comments

First | « | 1 | 2 | » | Last | Show all


This thread is closed to new comments.

Continue Farking
Submit a Link »