Re: SSG140 | Huge udp packet losses
So did the debug flow drop stream show the packets exist but are not dropped? What does dbug flow basic show for the session handling of your traffic stream? Can you share the debug files?
View ArticleClik here to view.
Re: SSG140 | Huge udp packet losses
Fresh debug: PHX-CLhx-fw1(M)-> get ffFlow filter based on:id:0 src ip 10.100.1.133 dst ip 216.218.227.10 id:1 src ip 216.218.227.10 dst ip 10.100.1.133 PHX-CLhx-fw1(M)-> get debugflow: basic file...
View ArticleRe: SSG140 | Huge udp packet losses
Correct, the debugs clearly show the traffic is permitted and assigned to the same flow. One thing I notice is that there seems to be a lot of fragmentation on the flow. Can you confirm the MTU...
View ArticleClik here to view.
Re: SSG140 | Huge udp packet losses
Tried mss option, no effect, I got my "favorites" 37% of drops
View ArticleRe: SSG140 | Huge udp packet losses
Hi, I can cleary understand that the there is fragmentation for the UDP traffic which most probably is causing the latency. Reducing the MSS value will only avoid the fragmentation for TCP traffic and...
View ArticleRe: SSG140 | Huge udp packet losses
OK, Guys, I'm totaly confused now: take a look for the packet capture I did and for the snoop from juniper. Can be that juniper just dicard packets when it hit some rate? I do remember we had an issue...
View ArticleRe: SSG140 | Huge udp packet losses
Ok, Gentelmens, Thank you all for the help, issue found. Looks like it's all due the output queue drops on the switch itself.
View ArticleClik here to view.
Re: SSG140 | Huge udp packet losses
Hi , I tried to trace the UDP flow stream to investigate the drops below is my observations: + I found that in the below stream the first fragment has not being received on the device due to which the...
View ArticleClik here to view.
Re: SSG140 | Huge udp packet losses
Hi, Its a good news that the issue got resolved , Please refer my latest analysis and explaination as well. I request you to mark the solution as accepted or mark as Kudoes Regards,Rishi
View ArticleRe: SSG140 | Huge udp packet losses
Thanks for the update on the root cause And glad you have it working now.
View ArticleRe: ssg 140 firmware needed
Hi Ali, You can download the 6.2r19 firmware from the below mentioned link : # https://www.juniper.net/support/downloads/?p=ssg140#sw Note: This firmware is signed with the new key Regards,Rishi
View ArticleSIP sessions allocation error message
Dears, i have a screenOS 6.3 running on Juniper SSG350m firewall, recently i found log messages saying"Cannot allocate SIP call because device is fielding too many calls" after a quick search i found...
View ArticleRe: SIP sessions allocation error message
Hello, Just to add to what 'rseibert' has said: You can use below command to find out the maximum SIP call capacity of any device. 2301-> get sys-cfg | in SIPdefault sip call num number: 192max sip...
View ArticleIKEv2 to replace L2TP/IPSec dialup VPN
We have been running L2TP/IPSec for a quite some time already (SSG550 / 6.3.0r23.0).Decided to switch to IKEv2 as it suppose to be simpler solution.We did some testing, run into something I don’t...
View ArticleHow I can make BGP configuration on SSG-140
Hi I have new primary ISP which offered us /24 IP range via BGP. Could you please send me information to activate BGP for both ISP ports on mine SSG140 Firewal. Primary ISP- ethernet0/2backup ISP-...
View ArticleRe: How I can make BGP configuration on SSG-140
Hello, You can make use of the below article. https://www.safaribooksonline.com/library/view/screenos-cookbook/9780596510039/ch17s02.html To prefer one ISP path over other, you can use local preference...
View ArticleBasic configuration for juniper SSG140
Iam going to install SSG140 between the WAN (192.168.1.0/24 FE0/2) and Ucopia-DHCP server (Guest Wi-Fi user manager 10.154.214.126/30 FE0/0) iam wonder if some one can help me by the initial basic...
View ArticleRe: Basic configuration for juniper SSG140
Hello, What functionality you want your SSG140 to serve? Is it acting as as DHCP Relay to WAN PCs? Regards, Rushi
View Article