Cahit Bey, bilgilendirme için öncelikle teşekkür ederim. Bu tarz bir network cihazında üreticiden destek almaya mecbur bırakacak kadar çok sorun çıkıyor mu? Bu aygıtları hep, bir kez tüm portları konfigure et, sonra unut şeklinde düşünüyordum. Bu kadar destek ihtiyacı doğuran sorunları neler gerçekten merak ediyorum.
@survivor
Konunuzu dağıtıyor isem, başka bir başlıkta bu konuyu ele alabiliriz.
Bu tür aletleri hakkı ile kullanabilmek için binlerce sayfa kitap okumak gerekli
filterler ingress egress rule lar bgp kuralları prefix listler qos ayarları vs vs vs
hepsi bittiğinde bir bakıyorsunz örnek durum
SRX de ilk cpu combo calısır işletim sistemi ile bir arada. gerisi paylaşımsız çalışır. NPC de network kartı işlemcisidir. IDS kuralları yani limitler npc de musluk kısar gibi uygulanır farzedelimki bir udp flood geldi aynı ip den hiç bir kurala takılmaz (udp pps limiti hariç ama o trafiği temizlemez fazlalığı döker) bunu kesebilecek yer kaynak dan gelene pps limiti atmaktır ya da policy koymak gerekli ancak bu durumda cpu ya geçiyor işlem ve tek bir sesion olustugu için tek cpu uzerine dusuyor ve bu combo cpu ya düşer ise alet kitleniyor . ve diğer cpu lar yatıyor 2 cpu su 50.000 dolar veriyorsunuz ve kapalı halde atak anında duruyor deliriyorsunuz
çözüm nedir
1. jtac a başvurmak - support paketiniz olması gerekli
2. extreme spu lisansı - 25.000 dolar ama gene ürün juniperde re-assignment fee alıyorlar
jtac da başvuru yaparken geçmiş yılları da boşda geçen komple charge ediliyor ve aletden daha pahalıya çıkıyor
root> show security monitoring performance spu
fpc 7 pic 0
Last 60 seconds:
0: 25 1: 26 2: 27 3: 26 4: 26 5: 27
6: 27 7: 27 8: 27 9: 27 10: 27 11: 27
12: 67 13: 67 14: 67 15: 67 16: 33 17: 25
18: 24 19: 27 20: 22 21: 21 22: 27 23: 27
24: 26 25: 16 26: 19 27: 40 28: 68 29: 63
30: 66 31: 68 32: 67 33: 65 34: 68 35: 65
36: 66 37: 67 38: 63 39: 27 40: 27 41: 27
42: 27 43: 27 44: 27 45: 27 46: 27 47: 27
48: 27 49: 27 50: 27 51: 40 52: 42 53: 42
54: 42 55: 41 56: 41 57: 42 58: 36 59: 27
fpc 11 pic 0
Last 60 seconds:
0: 0 1: 0 2: 0 3: 0 4: 14 5: 49
6: 51 7: 51 8: 50 9: 50 10: 51 11: 51
12: 34 13: 0 14: 0 15: 0 16: 0 17: 0
18: 0 19: 0 20: 14 21: 40 22: 44 23: 50
24: 50 25: 38 26: 37 27: 41 28: 30 29: 0
30: 0 31: 0 32: 0 33: 0 34: 0 35: 0
36: 0 37: 0 38: 0 39: 0 40: 0 41: 0
42: 0 43: 0 44: 0 45: 2 46: 27 47: 27
48: 29 49: 29 50: 30 51: 29 52: 20 53: 0
54: 0 55: 0 56: 0 57: 0 58: 0 59: 0
fpc 12 pic 0
Last 60 seconds:
0: 47 1: 48 2: 50 3: 48 4: 3 5: 0
6: 0 7: 0 8: 0 9: 0 10: 0 11: 0
12: 0 13: 0 14: 0 15: 0 16: 38 17: 49
18: 45 19: 50 20: 3 21: 0 22: 0 23: 0
24: 0 25: 0 26: 0 27: 0 28: 0 29: 0
30: 0 31: 0 32: 0 33: 0 34: 0 35: 0
36: 0 37: 0 38: 0 39: 0 40: 47 41: 50
42: 50 43: 50 44: 50 45: 32 46: 24 47: 23
48: 22 49: 22 50: 22 51: 22 52: 23 53: 22
54: 21 55: 21 56: 22 57: 21 58: 18 59: 20
GOT: === spc7, swanhill7, Ingress, QOS, per queue counters:
GOT: Q# P PktCnt ByteCnt ErrPktCnt DropCnt Buf RateKbps
GOT: -- - ----------- ----------- ----------- ----------- --- --------
Before : GOT: 0 0 689433376 3198313481 0 173262666 0 0
After : GOT: 0 0 716151200 1322793729 0 187301004 0 0
GOT: === spc11, swanhill11, Ingress, QOS, per queue counters:
GOT: Q# P PktCnt ByteCnt ErrPktCnt DropCnt Buf RateKbps
GOT: -- - ----------- ----------- ----------- ----------- --- --------
Before : GOT: 0 0 250772733 1150162904 0 1086140 0 0
After : GOT: 0 0 260742314 2506553813 0 1086140 0 0
GOT: === spc12, swanhill12, Ingress, QOS, per queue counters:
GOT: Q# P PktCnt ByteCnt ErrPktCnt DropCnt Buf RateKbps
GOT: -- - ----------- ----------- ----------- ----------- --- --------
Before : GOT: 0 0 237042682 3273566470 0 4507285 0 0
After : GOT: 0 0 241128473 3830250900 0 4507285 0 0
root@% cprod -A fpc1~1~.pic0 -c show xlr cpu
================ * ================
Couldn't initiate connection
root@% cprod -A fpc7.pic0 -c show xlr cpu
================ fpc7.pic0 ================
CPU 04 Per second( 96)
CPU 05 Per second( 48)
CPU 08 Per second( 44)
CPU 09 Per second( 39)
CPU 10 Per second( 39)
CPU 11 Per second( 39)
CPU 12 Per second( 43)
CPU 13 Per second( 45)
CPU 14 Per second( 52)
CPU 15 Per second( 52)
CPU 16 Per second( 28)
CPU 17 Per second( 30)
CPU 18 Per second( 29)
CPU 19 Per second( 28)
CPU 20 Per second( 30)
CPU 21 Per second( 31)
CPU 22 Per second( 30)
CPU 23 Per second( 30)
CPU 24 Per second( 28)
CPU 25 Per second( 31)
CPU 26 Per second( 33)
CPU 27 Per second( 33)
CPU 28 Per second( 75)
CPU 29 Per second( 26)
Average [cpu16-31]( 33)
xlr_show_cpu_statistics session counters:
Current Flow sessions 35
Current Flow sessions IPv4 35
Current Flow sessions IPv6 0
Current CP sessions 199
Current CP sessions IPv4 199
Current CP sessions IPv6 0
Current CP sessions installed 1423
Current CP sessions installed IPv4 1423
Current CP sessions installed IPv6 0
root@% cprod -A fpc11.pic0 -c show xlr cpu
================ fpc11.pic0 ================
CPU 04 Per second( 0)
CPU 05 Per second( 0)
CPU 08 Per second( 0)
CPU 09 Per second( 0)
CPU 10 Per second( 0)
CPU 11 Per second( 0)
CPU 12 Per second( 0)
CPU 13 Per second( 0)
CPU 14 Per second( 0)
CPU 15 Per second( 0)
CPU 16 Per second( 0)
CPU 17 Per second( 0)
CPU 18 Per second( 0)
CPU 19 Per second( 0)
CPU 20 Per second( 0)
CPU 21 Per second( 0)
CPU 22 Per second( 0)
CPU 23 Per second( 0)
CPU 24 Per second( 0)
CPU 25 Per second( 0)
CPU 26 Per second( 0)
CPU 27 Per second( 0)
CPU 28 Per second( 0)
CPU 29 Per second( 0)
Average [cpu8-31]( 0)
xlr_show_cpu_statistics session counters:
Current Flow sessions 52
Current Flow sessions IPv4 52
Current Flow sessions IPv6 0
Current CP sessions 0
Current CP sessions IPv4 0
Current CP sessions IPv6 0
Current CP sessions installed 0
Current CP sessions installed IPv4 0
Current CP sessions installed IPv6 0
root@% cprod -A fpc12.pic0 -c show xlr cpu
================ fpc12.pic0 ================
CPU 04 Per second( 0)
CPU 05 Per second( 0)
CPU 08 Per second( 0)
CPU 09 Per second( 0)
CPU 10 Per second( 0)
CPU 11 Per second( 0)
CPU 12 Per second( 0)
CPU 13 Per second( 0)
CPU 14 Per second( 0)
CPU 15 Per second( 0)
CPU 16 Per second( 0)
CPU 17 Per second( 0)
CPU 18 Per second( 0)
CPU 19 Per second( 0)
CPU 20 Per second( 0)
CPU 21 Per second( 0)
CPU 22 Per second( 0)
CPU 23 Per second( 0)
CPU 24 Per second( 0)
CPU 25 Per second( 0)
CPU 26 Per second( 0)
CPU 27 Per second( 0)
CPU 28 Per second( 0)
CPU 29 Per second( 0)
Average [cpu8-31]( 0)
xlr_show_cpu_statistics session counters:
Current Flow sessions 56
Current Flow sessions IPv4 56
Current Flow sessions IPv6 0
Current CP sessions 0
Current CP sessions IPv4 0
Current CP sessions IPv6 0
Current CP sessions installed 0
Current CP sessions installed IPv4 0
Current CP sessions installed IPv6 0
Request timed out.
Reply from 185.9.157.15: bytes=32 time=535ms TTL=62
Reply from 185.9.157.15: bytes=32 time=2220ms TTL=62
Reply from 185.9.157.15: bytes=32 time=551ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1648ms TTL=62
Reply from 185.9.157.15: bytes=32 time=542ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1090ms TTL=62
Reply from 185.9.157.15: bytes=32 time=547ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=569ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=543ms TTL=62
Reply from 185.9.157.15: bytes=32 time=568ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1144ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1148ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=1663ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=1148ms TTL=62
Reply from 185.9.157.15: bytes=32 time=574ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=547ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=541ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=630ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=1208ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=1145ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=634ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1281ms TTL=62
Reply from 185.9.157.15: bytes=32 time=602ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=665ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=679ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=628ms TTL=62
Reply from 185.9.157.15: bytes=32 time=615ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=582ms TTL=62
Reply from 185.9.157.15: bytes=32 time=628ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=649ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1280ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=632ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=616ms TTL=62
Reply from 185.9.157.15: bytes=32 time=618ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=1261ms TTL=62
Reply from 185.9.157.15: bytes=32 time=659ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=634ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=621ms TTL=62
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=682ms TTL=62
Reply from 185.9.157.15: bytes=32 time=1278ms TTL=62
Request timed out.
Request timed out.
Reply from 185.9.157.15: bytes=32 time=650ms TTL=62
Reply from 185.9.157.15: bytes=32 time=651ms TTL=62
Request timed out.
Reply from 185.9.157.15: bytes=32 time=649ms TTL=62
Reply from 185.9.157.15: bytes=32 time=640ms TTL=62
Request timed out.
Request timed out.
ya da bir başka durum bu aletlerde ingress ve egress de policy limitlerine çakılabiliyor core dump ya da memory lack verebiliyor çözüm gene jtac dan geliyor ancak senaryo yukarısı ile aynı
sadece gecikmesiz bir iletişim için alınacaksa harika bir fiyat
Rakam zaten öte yandan emsal switchlere göre cok cok iyi ama bunun özelliklerinin kullanılacağı bir enterprise işlem varsa after support çok önemli tercih noktasında 1600 tl hp mi power connect dell mi bumu derseniz bu tür ekstralar zaten onlarda yok
bu sebeple cok cok iyi fiyatlı bir ürün