09-05-2008 08:42 AM
thank you for your help, but how is it possible to stop this kind of frames?
i know it's possible to configure an ACL to avoid one IP subnet, but how can i do to stop one frame with a wrong IP header?
In the case of the OP, the frames are destined for a mac-id that is not present in the cam database on the PIC. So, the PIC is discarding the frames, before they are completely handled by the L2/L3 packet processing ASIC. The problem isn't that the datagram has the "wrong IP header". Rather, the DA mac-id is not something the PIC is configured to receive.
One would need to capture the the frames "on the wire", or on the sending device, to determine what they are, and then configure the remote device to stop forwarding them (if possible). The details here are specific to the situation.
and about the upgrade to version 9.0, i see that we have to upgrade first to version 8.5, and after to version 9.0 on this link : https://www.juniper.net/techpubs/software/junos/ju
could you confirm this please?
That is correct. In order to upgrade to 9.0, from 8.2, you will need to first upgrade to 8.5.
09-08-2008 02:53 AM
Thank you for your help.
As i'm not sure about your short words, could you explain me what you mean by:
I agree that we have to capture traffic on this link, but these equipments are on our production, it's impossible to make some tests on this link, because lots of customers won't have any access on Internet.
As i really with attention your message, could it be possible to delete the cam entry in the database?
If it's possible, please tell me how i can do.
For the upgrade, I thank you to confirm me about the procedure.
With pleasure to read your solution.
09-08-2008 09:44 AM
OP = original poster
DA = destination address
No, you can not delete the cam entries on the pic. That would not help. Yes, you will need to follow the upgrade procedure you previously mentioned. In the case of the original poster (OP), these errors are "cosmetic".
09-18-2008 07:43 AM
thank you for your help.
now, we just put higher the value of L3 incompletes detective, to avoid being called when the alarm appears for this L3 incompletes counter during the increase.
10-14-2008 12:44 PM