Errata

JUNOS Enterprise Routing

Errata for JUNOS Enterprise Routing

Submit your own errata for this product.

The errata list is a list of errors and their corrections that were found after the product was released. If the error was corrected in a later version or reprint the date of the correction will be displayed in the column titled "Date Corrected".

The following errata were submitted by our customers and approved as valid errors by the author or editor.

Color key: Serious technical mistake Minor technical mistake Language or formatting error Typo Question Note Update

Version Location Description Submitted By Date submitted Date corrected
8.2.3. Backup Tunnels
WAN interface to Water (64.7.12.6)

Should say 64.8.12.6?

 Eugene  Oct 23, 2009 
Printed
Page 35
First paragraph and/or third figure

The third sentence in the first paragraph on page 35 says "The M7i's second FPC slot contains only two possible PIC slot numbers, as shown in Figure 2-6, slot 2 is used for the built-in tunnel interface, or Adaptive Services Module (ASM), and slot three is used for the fixed Ethernet interfaces". However Figure 2-6 shows slot 0 as the slot that contains the ASM.

Which is correct the statement or the figure regarding the location of ASM? Is it slot 0 or slot 2?

Thanks.

Note from the Author or Editor:
The figure is wrong, the ASM is slot 2.

 Darrell Burnett  Mar 13, 2009 
Printed
Page 41
middle of the page ("FastEthernet Interface" section)

In reference to the sentence: "First, let's build an interface on router Lager that connects directly to router Porter ...", please note that according to the preface page XXII router Lager is not directly connected to Porter, but with Barley, Ale and Stout.

Thanks and kind regards,

Fabrizio

Note from the Author or Editor:
All References to Porter in the Fast Ethernet Section should be changed to Ale.

Also all references (including code) for fe-2/0/1 should be changed to fe-0/0/0

 Anonymous  Aug 24, 2008  Mar 01, 2009
Printed
Page 63
1st Paragraph

Second sentense of the first paragraph reads "...series of ARP requests with an 801.1Q (VLAN)..." should be 802.1Q

Note from the Author or Editor:
The above should be changed as per the report to read "... 802.1Q" (VLAN)....

Harry Reynolds

 jonathan masson  Dec 18, 2008  Mar 01, 2009
Printed
Page 98
Binary trees paragraph

The assertion "the binary sequence 0100 000 equates to a decimal 64" is false. It should be either
"the binary sequence 0100 000 equates to a decimal 32"
or
"the binary sequence 0100 0000 equates to a decimal 64"

Note from the Author or Editor:
This should read as "0100 0000", that is, 4 trailing 0s at the end.


As printed its wrong with only 7 bits shown and three trailing 0s in the last nibble.

Regards

 Anonymous  Jul 29, 2010 
Printed
Page 128
last picture

LSA Type 6 should actually be LSA Type 7

Note from the Author or Editor:
Yes, this is errata and has already been confirmed. I have already sumbitted details on the fix.

figure 4.1.
NSSA external is shown as type 6. (bottom right). This should be type 7.

 Anonymous  Nov 19, 2008  Dec 01, 2008
Printed
Page 196

Now reads:

Which is true regarding a stub area in ospf?
A. A stub area uses.......

Change to:

Which is true regarding a stub area with no-summaries?

A. The area uses a default ....
B. The area imports...
C. The area does not...
D. The area has no....

Then, the answer on page 198 should read:

" Answer c:. A stub area with no-summaries does not ....

 Anonymous   
Printed
Page 199

Now reads:

"Answer A: Your goal is to...."

Change to:

"Answer C: Your goal is to...... The restrict keyword should not be used here as it will also filter on the summary, in effect converting from a match type of longer to one of orlonger. The goal is to permit the summary which makes answer A false.

 Anonymous   
Printed
Page 203
The penultimate paragraph, under the Local preference section

The author states on the last sentence under the Local preference section that "Local preference is present only in IBGP updates (nontransitive)"
The "nontransitive" part of the sentence is misleading because an attribute is nontransitive does not mean is not sent to other EBGP neighbors, like MED. Where you can set MED on an export policy to an EBGP peer and it shows this correctly in an update message (wether that neighbor ignores it is another matter)
Local preference is defined as the following on the RFC:
...A BGP speaker MUST NOT include this attribute in UPDATE messages it
sends to external peers...
So is an explicit rule to not advertise this to external peers and the fact that is non-transitive has nothing to do with this.
The RFC also states the following:
"The handling of
an unrecognized optional attribute is determined by the setting of
the Transitive bit in the attribute flags octet. Paths with
unrecognized transitive optional attributes SHOULD be accepted. If a
path with an unrecognized transitive optional attribute is accepted
and passed to other BGP peers, then the unrecognized transitive
optional attribute of that path MUST be passed, along with the path,
to other BGP peers with the Partial bit in the Attribute Flags octet
set to 1. If a path with a recognized, transitive optional attribute
is accepted and passed along to other BGP peers and the Partial bit
in the Attribute Flags octet is set to 1 by some previous AS, it MUST
NOT be set back to 0 by the current AS. Unrecognized non-transitive
optional attributes MUST be quietly ignored and not passed along to
other BGP peers."
So transitive vs non-transitive attributes have nothing to do with if its passed to an EBGP to IBGP neighbor. The attribute definition determines that separately.
I think this should be removed or explained better.

Note from the Author or Editor:
Page 203, pentultimate para,. Now reads:

"....IBGP updates (nontransitive)."

Change to:

"....IBGP updates; this attribute is not advertised to EBGP peers."



 Sergio Danelli  Dec 27, 2010 
Printed
Page 315
3rd paragraph

The term "deny-udp-icmp-frags" will discard all incoming udp and icmp packets including non-fragmented ones.

A non-fragmented packet has fragment-offset = 0 and more-fragments = 0. It matches the "from fragment-offset 0-8191" condition and therefore it will be dropped.

Note from the Author or Editor:
fixed in new version of book.

 Cesar Collantes  Aug 29, 2010 
Printed
Page 364
1st paragraph and 3rd paragraph

In this book, writer said ftp using tcp port 21 for data transfer , this is wrong. tcp 20 is the ftp-data port, tcp 21 is the congtrol port.

No. Time Source Destination Protocol Info size
1 0.000000 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [SYN] Seq=0 Win=65535 Len=0 MSS=1460 62

Frame 1 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 0, Len: 0

No. Time Source Destination Protocol Info size
2 0.198551 130.57.1.88 192.168.1.102 TCP ftp > pn-requester2 [SYN, ACK] Seq=0 Ack=1 Win=5840 Len=0 MSS=1380 62

Frame 2 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
3 0.198582 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=1 Ack=1 Win=65535 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 3 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
4 0.402601 130.57.1.88 192.168.1.102 FTP Response: 220 Welcome to ftp.novell.com, powered by SUSE Linux 108

Frame 4 (108 bytes on wire, 108 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 1, Ack: 1, Len: 54
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
5 0.528036 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=1 Ack=55 Win=65481 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 5 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 1, Ack: 55, Len: 0

No. Time Source Destination Protocol Info size
6 4.109475 192.168.1.102 130.57.1.88 FTP Request: USER anonymous 70

Frame 6 (70 bytes on wire, 70 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 1, Ack: 55, Len: 16
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
7 4.308626 130.57.1.88 192.168.1.102 TCP ftp > pn-requester2 [ACK] Seq=55 Ack=17 Win=5840 Len=0 60

Frame 7 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 55, Ack: 17, Len: 0

No. Time Source Destination Protocol Info size
8 4.308672 130.57.1.88 192.168.1.102 FTP Response: 331 Anonymous login ok, send your complete email address as your password. 130

Frame 8 (130 bytes on wire, 130 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 55, Ack: 17, Len: 76
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
9 4.450880 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=17 Ack=131 Win=65405 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 9 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 17, Ack: 131, Len: 0

No. Time Source Destination Protocol Info size
10 5.425668 192.168.1.102 130.57.1.88 FTP Request: PASS dkfjdk 67

Frame 10 (67 bytes on wire, 67 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 17, Ack: 131, Len: 13
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
11 5.624852 130.57.1.88 192.168.1.102 FTP Response: 230 Anonymous access granted, restrictions apply. 105

Frame 11 (105 bytes on wire, 105 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 131, Ack: 30, Len: 51
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
12 5.758502 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=30 Ack=182 Win=65354 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 12 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 30, Ack: 182, Len: 0

No. Time Source Destination Protocol Info size
13 6.801606 192.168.1.102 130.57.1.88 FTP Request: TYPE I 62

Frame 13 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 30, Ack: 182, Len: 8
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
14 6.998515 130.57.1.88 192.168.1.102 FTP Response: 200 Type set to I 73

Frame 14 (73 bytes on wire, 73 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 182, Ack: 38, Len: 19
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
15 7.166770 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=38 Ack=201 Win=65335 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 15 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 38, Ack: 201, Len: 0

No. Time Source Destination Protocol Info size
16 8.188707 192.168.1.102 130.57.1.88 FTP Request: TYPE A 62

Frame 16 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 38, Ack: 201, Len: 8
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
17 8.386340 130.57.1.88 192.168.1.102 FTP Response: 200 Type set to A 73

Frame 17 (73 bytes on wire, 73 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 201, Ack: 46, Len: 19
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
18 8.392786 192.168.1.102 130.57.1.88 FTP Request: PORT 192,168,1,102,10,165 81

Frame 18 (81 bytes on wire, 81 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 46, Ack: 220, Len: 27
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
19 8.595122 130.57.1.88 192.168.1.102 FTP Response: 200 PORT command successful 83

Frame 19 (83 bytes on wire, 83 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 220, Ack: 73, Len: 29
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
20 8.596295 192.168.1.102 130.57.1.88 FTP Request: NLST 60

Frame 20 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 73, Ack: 249, Len: 6
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
21 8.824755 130.57.1.88 192.168.1.102 TCP ftp-data > msolap-ptp2 [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=179463840 TSER=0 WS=0 74

Frame 21 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: msolap-ptp2 (2725), Seq: 0, Len: 0

No. Time Source Destination Protocol Info size
22 8.824806 192.168.1.102 130.57.1.88 TCP msolap-ptp2 > ftp-data [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 78

Frame 22 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: msolap-ptp2 (2725), Dst Port: ftp-data (20), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
23 8.859440 130.57.1.88 192.168.1.102 TCP ftp > pn-requester2 [ACK] Seq=249 Ack=79 Win=5840 Len=0 60

Frame 23 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 249, Ack: 79, Len: 0

No. Time Source Destination Protocol Info size
24 9.022932 130.57.1.88 192.168.1.102 TCP ftp-data > msolap-ptp2 [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=179464040 TSER=0 66

Frame 24 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: msolap-ptp2 (2725), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
25 9.022965 130.57.1.88 192.168.1.102 FTP-DATA FTP Data: 10 bytes 76

Frame 25 (76 bytes on wire, 76 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: msolap-ptp2 (2725), Seq: 1, Ack: 1, Len: 10
FTP Data

No. Time Source Destination Protocol Info size
26 9.023016 130.57.1.88 192.168.1.102 FTP Response: 150 Opening ASCII mode data connection for file list 108

Frame 26 (108 bytes on wire, 108 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 249, Ack: 79, Len: 54
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
27 9.023101 130.57.1.88 192.168.1.102 FTP-DATA FTP Data: 177 bytes 243

Frame 27 (243 bytes on wire, 243 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: msolap-ptp2 (2725), Seq: 11, Ack: 1, Len: 177
FTP Data

No. Time Source Destination Protocol Info size
28 9.023132 192.168.1.102 130.57.1.88 TCP msolap-ptp2 > ftp-data [ACK] Seq=1 Ack=189 Win=65348 [TCP CHECKSUM INCORRECT] Len=0 TSV=959961 TSER=179464040 66

Frame 28 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: msolap-ptp2 (2725), Dst Port: ftp-data (20), Seq: 1, Ack: 189, Len: 0

No. Time Source Destination Protocol Info size
29 9.028278 192.168.1.102 130.57.1.88 TCP msolap-ptp2 > ftp-data [FIN, ACK] Seq=1 Ack=189 Win=65348 [TCP CHECKSUM INCORRECT] Len=0 TSV=959961 TSER=179464040 66

Frame 29 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: msolap-ptp2 (2725), Dst Port: ftp-data (20), Seq: 1, Ack: 189, Len: 0

No. Time Source Destination Protocol Info size
30 9.178495 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=79 Ack=303 Win=65233 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 30 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 79, Ack: 303, Len: 0

No. Time Source Destination Protocol Info size
31 9.223842 130.57.1.88 192.168.1.102 TCP ftp-data > msolap-ptp2 [ACK] Seq=189 Ack=2 Win=5840 Len=0 TSV=179464242 TSER=959961 66

Frame 31 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: msolap-ptp2 (2725), Seq: 189, Ack: 2, Len: 0

No. Time Source Destination Protocol Info size
32 9.225982 130.57.1.88 192.168.1.102 FTP Response: 226 Transfer complete. 78

Frame 32 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 303, Ack: 79, Len: 24
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
33 9.250995 192.168.1.102 130.57.1.88 FTP Request: TYPE I 62

Frame 33 (62 bytes on wire, 62 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 79, Ack: 327, Len: 8
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
34 9.446606 130.57.1.88 192.168.1.102 TCP ftp > pn-requester2 [ACK] Seq=327 Ack=87 Win=5840 Len=0 60

Frame 34 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 327, Ack: 87, Len: 0

No. Time Source Destination Protocol Info size
35 9.448699 130.57.1.88 192.168.1.102 FTP Response: 200 Type set to I 73

Frame 35 (73 bytes on wire, 73 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 327, Ack: 87, Len: 19
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
36 9.580800 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=87 Ack=346 Win=65190 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 36 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 87, Ack: 346, Len: 0

No. Time Source Destination Protocol Info size
37 25.616678 192.168.1.102 130.57.1.88 FTP Request: PORT 192,168,1,102,10,176 81

Frame 37 (81 bytes on wire, 81 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 87, Ack: 346, Len: 27
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
38 25.815807 130.57.1.88 192.168.1.102 FTP Response: 200 PORT command successful 83

Frame 38 (83 bytes on wire, 83 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 346, Ack: 114, Len: 29
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
39 25.816869 192.168.1.102 130.57.1.88 FTP Request: RETR Readme 67

Frame 39 (67 bytes on wire, 67 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 114, Ack: 375, Len: 13
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
40 26.015244 130.57.1.88 192.168.1.102 TCP ftp-data > radwiz-nms-srv [SYN] Seq=0 Win=5840 Len=0 MSS=1460 TSV=179481034 TSER=0 WS=0 74

Frame 40 (74 bytes on wire, 74 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 0, Len: 0

No. Time Source Destination Protocol Info size
41 26.015301 192.168.1.102 130.57.1.88 TCP radwiz-nms-srv > ftp-data [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=0 TSV=0 TSER=0 78

Frame 41 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: radwiz-nms-srv (2736), Dst Port: ftp-data (20), Seq: 0, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
42 26.054277 130.57.1.88 192.168.1.102 TCP ftp > pn-requester2 [ACK] Seq=375 Ack=127 Win=5840 Len=0 60

Frame 42 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 375, Ack: 127, Len: 0

No. Time Source Destination Protocol Info size
43 26.221858 130.57.1.88 192.168.1.102 TCP ftp-data > radwiz-nms-srv [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=179481240 TSER=0 66

Frame 43 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
44 26.221916 130.57.1.88 192.168.1.102 FTP Response: 150 Opening BINARY mode data connection for Readme (2190 bytes) 119

Frame 44 (119 bytes on wire, 119 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 375, Ack: 127, Len: 65
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
45 26.239396 130.57.1.88 192.168.1.102 TCP [TCP Previous segment lost] ftp-data > radwiz-nms-srv [FIN, ACK] Seq=2191 Ack=1 Win=5840 Len=0 TSV=179481248 TSER=0 66

Frame 45 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 2191, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
46 26.239425 192.168.1.102 130.57.1.88 TCP [TCP Dup ACK 41#1] radwiz-nms-srv > ftp-data [ACK] Seq=1 Ack=1 Win=65535 [TCP CHECKSUM INCORRECT] Len=0 TSV=960133 TSER=179481240 SLE=2191 SRE=2192 78

Frame 46 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: radwiz-nms-srv (2736), Dst Port: ftp-data (20), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
47 26.239703 130.57.1.88 192.168.1.102 FTP-DATA [TCP Out-Of-Order] FTP Data: 822 bytes 888

Frame 47 (888 bytes on wire, 888 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 1369, Ack: 1, Len: 822
FTP Data

No. Time Source Destination Protocol Info size
48 26.239720 192.168.1.102 130.57.1.88 TCP [TCP Dup ACK 41#2] radwiz-nms-srv > ftp-data [ACK] Seq=1 Ack=1 Win=65535 [TCP CHECKSUM INCORRECT] Len=0 TSV=960133 TSER=179481240 SLE=1369 SRE=2192 78

Frame 48 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: radwiz-nms-srv (2736), Dst Port: ftp-data (20), Seq: 1, Ack: 1, Len: 0

No. Time Source Destination Protocol Info size
49 26.240255 130.57.1.88 192.168.1.102 FTP-DATA [TCP Fast Retransmission] FTP Data: 1368 bytes 1434

Frame 49 (1434 bytes on wire, 1434 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 1, Ack: 1, Len: 1368
FTP Data

No. Time Source Destination Protocol Info size
50 26.240305 192.168.1.102 130.57.1.88 TCP radwiz-nms-srv > ftp-data [ACK] Seq=1 Ack=2192 Win=65535 [TCP CHECKSUM INCORRECT] Len=0 TSV=960133 TSER=179481248 66

Frame 50 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: radwiz-nms-srv (2736), Dst Port: ftp-data (20), Seq: 1, Ack: 2192, Len: 0

No. Time Source Destination Protocol Info size
51 26.240843 192.168.1.102 130.57.1.88 TCP radwiz-nms-srv > ftp-data [FIN, ACK] Seq=1 Ack=2192 Win=65535 [TCP CHECKSUM INCORRECT] Len=0 TSV=960133 TSER=179481248 66

Frame 51 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: radwiz-nms-srv (2736), Dst Port: ftp-data (20), Seq: 1, Ack: 2192, Len: 0

No. Time Source Destination Protocol Info size
52 26.378836 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=127 Ack=440 Win=65096 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 52 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 127, Ack: 440, Len: 0

No. Time Source Destination Protocol Info size
53 26.442572 130.57.1.88 192.168.1.102 TCP ftp-data > radwiz-nms-srv [ACK] Seq=2192 Ack=2 Win=5840 Len=0 TSV=179481462 TSER=960133 66

Frame 53 (66 bytes on wire, 66 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp-data (20), Dst Port: radwiz-nms-srv (2736), Seq: 2192, Ack: 2, Len: 0

No. Time Source Destination Protocol Info size
54 26.444593 130.57.1.88 192.168.1.102 FTP Response: 226 Transfer complete. 78

Frame 54 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: JuniperN_93:0c:57 (00:14:f6:93:0c:57), Dst: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6)
Internet Protocol, Src: 130.57.1.88 (130.57.1.88), Dst: 192.168.1.102 (192.168.1.102)
Transmission Control Protocol, Src Port: ftp (21), Dst Port: pn-requester2 (2718), Seq: 440, Ack: 127, Len: 24
File Transfer Protocol (FTP)

No. Time Source Destination Protocol Info size
55 26.579938 192.168.1.102 130.57.1.88 TCP pn-requester2 > ftp [ACK] Seq=127 Ack=464 Win=65072 [TCP CHECKSUM INCORRECT] Len=0 54

Frame 55 (54 bytes on wire, 54 bytes captured)
Ethernet II, Src: Foxconn_e9:49:f6 (00:01:6c:e9:49:f6), Dst: JuniperN_93:0c:57 (00:14:f6:93:0c:57)
Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 130.57.1.88 (130.57.1.88)
Transmission Control Protocol, Src Port: pn-requester2 (2718), Dst Port: ftp (21), Seq: 127, Ack: 464, Len: 0

Note from the Author or Editor:
Port 20 and 21 should be corrected in packet capture.

 Anonymous  Apr 11, 2009 
Printed
Page 414
1st paragraph

on the 5th line of this page ,
lab@PBR# run show service stateful-firewall ipsec-vpn ipsec statistics

"stateful-firewall" should be remove from this command line.

kevinrong@sydpirbr2> show service stateful-firewall ipse
^
syntax error, expecting <command>.


kevinrong@sydpirbr2> show service ipsec-vpn ipsec statistics

PIC: sp-1/2/0, Service set: ss-akl

ESP Statistics:
Encrypted bytes: 2061675824
Decrypted bytes: 1277980616
Encrypted packets: 5404978
Decrypted packets: 6002730

Note from the Author or Editor:
lab@PBR# run show service stateful-firewall ipsec-vpn ipsec statistics
should be

lab@PBR# run show service ipsec-vpn ipsec statistics

 Anonymous  Apr 12, 2009 
Printed
Page 446
Twice Nat Paragraph

Twice NAT is not supported until 8.3

Note from the Author or Editor:
Page 446 should have a note:

Twice NAT is supported in 8.3.

 Doug Marschke
 		 Jun 05, 2009