Application Delivery and Load Balancing

• A

  Create CSR with two common name in juniper DX 3600
  • alexandremorgadomartins

  1
  0
  Votes
  1
  Posts
  4020
  Views

  A

  Does anyone know to create a CSR in Juniper DX 3600 with two common names? Regards Alexandre Martins
• ?

  WXC 500 for HQ and WXC 250 for Branch
  • Guest

  1
  0
  Votes
  1
  Posts
  3617
  Views

  ?

  Hi, i got problems on the QoS of voice (avaya). I have a QoS setup on both devices with dedicated wan mode and a ratio of 60-10-10 for the bandwidth utilization. My testing would be;   I will copy a file from hq to branch then setup a call to determine if the voice is clear or not.   The result was choppy from hq to branch…   The result was ok from branch to hq My setup is :  HQ -WXC500 -------- WXC 250 - Branch Im using avaya fone calling to the branch site. Kindly help… winters
• T

  WX - Broken Tunnel
  • techloh

  1
  0
  Votes
  1
  Posts
  3759
  Views

  T

  I am using wizard to configure the two unit of WX with Hub and Spoke topology. However I have encounter Broken Tunnel issue on my Register server. Anyone can tell me why/what will casuing this issue? Thanks
• A

  Juniper WXC 500 Brand new
  • alhadlaq

  1
  0
  Votes
  1
  Posts
  4678
  Views

  A

  I have a Juniper WXC 500 Brand new , never been used in it’s box , I would like to sell for a great price . Kuwait
• J

  Juniper wxc 500 for sale
  • jonsuper21

  2
  0
  Votes
  2
  Posts
  5294
  Views

  R

  Still have this?
• A

  Filtering traffic with WX/WXC
  • albertbe

  2
  0
  Votes
  2
  Posts
  4838
  Views

  N

  Hi albertbe, Are you trying to block the traffic or lower the QOS ? if you are trying to block the traffic you can use the prohibited traffic class…
• _

  Reconfiguration WXC 500 from Client mode to Registration Server mode.
  • _gib_

  3
  0
  Votes
  3
  Posts
  4766
  Views

  _

  I haven’t CMS, so it seems i need to load default settings and via quick setup configure this wxc as new registration server?!
• M

  WX Password Recovery Procedure
  • mbolton

  3
  0
  Votes
  3
  Posts
  6193
  Views

  K

  Really thanks,that was so usefull for beginning…
• Y

  WX50 High Availability
  • yazdillinger

  2
  0
  Votes
  2
  Posts
  4502
  Views

  B

  Configure 2 of the WX’s to be the primary and secondary registration servers. You should probably do a hub-n-spoke config with the remote side being the hub. This is what I would do if the data center WX’s were inline: Under the GUI menu Compression -> Advanced (of the remote WX) Here you can do Load Balancing (which is possible since you are only doing compression), Preferred Decompressors and Default Decompressors. Take a look at these options. I would  do Preferred Decompressors if you advertising the same subnet(s) behind the two WX’s with the same cost. When you set up the 2 WX’s in the data center they will both display equal access to the LAN subnet(s) in the data center. With Preferred Decompressors you enter the WX you prefer to handle the traffic. You can load balance between the two as well. Careful how you enter the two data center WX’s into the Preferred Decompressors into the remote WX. Read the instructions on the GUI page noting how it looks at the WX in the order they appear in the list. If you aren’t doing any load balancing, set that feature to Off and make the WX you want to handle all the traffic as the Preferred Decompressor in the remote WX. Add the backup WX as the next decompressor on the list. Done. You can also do default decompressor option, monkey around with routing costs and there are off-line options as well.
• S

  Cache for multiple subdomain
  • SethT

  1
  0
  Votes
  1
  Posts
  8960
  Views

  S

  Hi, We have a site with a lot of subdomains. For now I will use the url test.net as tld and a.test.net. b.test.net as subdomains. (as example) We have a cluster for test.net Now we will enable caching on this cluster. Juniper% show cache test. net stats detail ```gives us: Hit Count Statistics:    Size      # Hits   Cache Time   Order                    URL ---------- ---------- ---------- ----------  ----------------------------------    6.87KB      9.24M         28          1  /sripts/misc.js   15.49KB      9.08M         15          2  /style22.css    5.70KB      9.07M         28          3  /js/arnostat.js       45B      9.03M        104          4  /img/v_balk.gif      119B      9.03M        122          5  /images/logo.gif      322B      9.01M        117          6  /images/ico_pda.gif so… not the whole url is used in the cache? And now the problem: if a.test.net/images/logo.gif is cached, it also used for b.test.net/images/logo.gif and that's a big issue.... sex.test.net/image/first.jpg is cached, an will also shown on kids.test.net/images/first.gif Is there any solution for this problem? Yeah, we can redesign our sites... and make the path of very site unique sex.text.net/sex_image/first.jpg but that's not an option.
• J

  WXC over internet behind Firewalls in cluster
  • jas_muthukumar

  2
  0
  Votes
  2
  Posts
  4114
  Views

  M

  With a single WXC behind a cluster, you’ll need to deploy in an off-line mode.  Router RIP injection might be the easiest solution and should be do-able with both Checkpoint and Netscreen. The admin PDF documents the process pretty well under: Configuring Advanced Setup Policies -> Configuring Packet Interception.
• A

  Command Line Interface for Network Connect Clinet (Juniper Client)
  • Atadu

  1
  0
  Votes
  1
  Posts
  9098
  Views

  A

  I am having a Juniper Client (Network Connect.exe ver 6.0 ). I am trying to developing an application through which i want to lacunch the Network Connect.exe and pass the URL to which i want to connect. what i found is that the Successful URL is palced in the versionInfo.ini file and this exe takes the first URL to connect as soon as we try to launch. But i want to pass the URL to which i want to connect. Do any one know how can i do this? Tnx Atadu
• M

  Juniper WXC Remote Desktop Connection RDP Compression and Acceleration
  • MLahore

  3
  0
  Votes
  3
  Posts
  8048
  Views

  M

  Thanks Bolton yeh that’s what i believe but as you know customer allways want some document to show them how and what amount . that’s why i am looking for a PDF kind of dcoment to show them … Thanks M
• I

  WXC 250 and 500 question
  • iceteanolemon

  4
  0
  Votes
  4
  Posts
  4165
  Views

  I

  got an answer i am working on in the juniper board. Looks like my guess is being substantiated somewhat… http://forums.juniper.net/jnet/board/message?board.id=wx&thread.id=115 Hi Kevin, This is James.  Long time no speak!  I’m in the escalations team now, but i watch cases from time to time. I looked though your case.  It looks like you are running any 5.5 specific features.  With that in mind, a downgrade to 5.4.7 will not help as the difference between the to is the new specific featrues.  Everything else uses the same modules so if you crashing due to the tCCcore tasks, you’ll still have crashes.  The ATAC engineer has made an invalid recommendation to downgrade sorely on stability. I looked into your diags and I suspect that your crashes have to due with AAP (app acceleration) flow management.  Diving into the crash dumps, I was able to see that a contributer to the tCCcore crash may be due to improper flow management.  Logs full of these messages back up my analysis: E37 CCF: Invalid header: Unknown NB session msg type: 0x05: len=191 f=8:172.29.5.119:3484-172.29.204.10:1025 E37 CCF: Invalid header: Unknown NB session msg type: 0x05: len=191 f=62:172.29.5.119:3488-172.29.220.10:1025 E37 CCF: Invalid header: Unknown NB session msg type: 0x05: len=191 f=82:172.29.5.119:3509-172.29.128.10:1025 E37 CCF: Invalid header: Unknown NB session msg type: 0x05: len=191 f=62:172.29.5.119:3530-172.29.236.10:1025 The messages above mean that AAP (CIFS app acceleration) is rejecting a flow it didn’t understand and therefore have to softquit a flow in order to back out of acceleration.  Your log messages are full of those.  If you look at the ports of each log message, they are constantly from the ports you have defined in this user created application definition: Active Directory: (Precedence = 20; Type = cifs; SSL Encapsulated = false) rule 1: Source Port: 1025,1026 rule 2: Destination Port: 1025,1026 rule 3: Source Port: 3268 rule 4: Destination Port: 3268 Please take note that Type = cifs.  Although Active Directory is a Microsoft function, it isn’t CIFS and therefore it is misclassified.  Because the app type is defined at CIFS, the WX will ALWAYS send each flow that matches this to the AAP acceleration module, grab resourses, then realize that it is invalid and soft quit the flow. I suspect flow managent issues in the AAP acceleration module.  In fact, in the crash dumps, I see evidence that the module contributed to the tCCcore crashes: 1a9c5a PN_createProcessCCtask+12a: 1b585f ([5dd6da58, 7e296c1e, 8, 206, 0]) 1b5904 pnCCInQDequeue +2e4: pnTcpAcclCCCb(PnMblk *, unsigned long, unsigned char *) (7e0f7640, 0, 7e0f7ad0, 1b5666) 3e5486 pnTcpAcclCCCb(PnMblk *, unsigned long, unsigned char *)+76 : PnAapFlowReset(PnMblk *, tpnbool) ([7e0f7640, 1, 7e0f79e0, 64c30b, 7e0f79e0]) Please remedy this misclassification from the Active Directory application definition by changing the app type to ‘default’.  The flow will still benefit from AFP and it won’t be misclassified as a CIFS flow and get sent up the AAP module unnecessarily. Regards, –James
• H

  Htttp traffic compression
  • HMN

  4
  0
  Votes
  4
  Posts
  4443
  Views

  H

  In application filter list removed all applications except http. Now compression is ~30% for download and ~50 for upload.
• O

  PIM implementation of WX
  • oladapo

  1
  0
  Votes
  1
  Posts
  3428
  Views

  O

  Can someone provide me with configuration of  cisco router (route mapping) for off-path installation of a wx. The network is using VLANs
• Z

  DX as Transparetn Proxy
  • zia.mustafa

  1
  0
  Votes
  1
  Posts
  3347
  Views

  Z

  Dear All, Need your help to resolve this issue we  configured a couple of transparent HTTP proxies and are placed behind the two DXs(configured as failover) to distribute the load to them. When we direct end-customers’ TCP/80 traffic from an ERX to one of the proxies directly this works fine, while directing it to the DX does not. Configuring the browser with the DXs VIP along with port setting for the porxy settting works.But without the proxy setting in brower we are unable to accesss the internet via proxy servers. our goal is to direct the traffic from ERX to DX at port 80 and it should work like the transparent proxy. AS in DX we are unable to configure the VIP without port assingment
• Z

  Hub and spoke VPN with overlapping IP address
  • zied

  1
  0
  Votes
  1
  Posts
  3518
  Views

  Z

  Someone has done the config of a hub and spoke ipsec vpn architecture with overlapping IP adresses using nat? Please post the config. Thank you
• T

  Need Help writing some scripts for DX
  • tatino

  1
  0
  Votes
  1
  Posts
  2409
  Views

  T

  Hello all, I need some help writing some scripts, for my DX. I have three DNS Servers that the DX uses. I recently had one go down and had some DNS issues. I want my DX box to poll / health check the DNs servers to see if they are down and then not use a certain server if it is in that down state. It would poll periodically to see if the server came back up and allow id to resolve dns if it is. I have talked to Juniper and they sent me a small script, that I will attach below, that appears to me polls radius. If someone can point me to where i can read on how to script that would also be ok and appreciated. #!/usr/bin/expect -f #Author:      Juniper Networks Inc. package require RlnTclExt set the server, and port set target_host "172.16.1.4" set target_port "1812" set timeout 5 match_max 100000 open a socket set err [catch {socket $target_host $target_port} fd] if { $err } {rln_send_event -i $target_host -e down rln_send_log -l healthcheck -m “L4 health check failed.”; puts "L4 RADIUS port 1812 health check failed.\r" exit} close the socket close $fd rln_send_event -i $target_host -e up rln_send_log -l healthcheck -m “L4 health check passed.”; puts “L4 RADIUS port 1812 health check passed.\r”
• S

  WXC Behind Firewall - HTTP won't route
  • sandonen

  2
  0
  Votes
  2
  Posts
  3327
  Views

  J

  It’s probably because the http traffic is in the tunnel in one direction and not in the other. Use Flow Diagnostics (5.4+) to see if HTTP is in the tunnel. It sounds like a firewall only seeing one side of the traffic issue.