Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

0
votes
1answer
28 views

EX3300 can not use irb.x, so how to access the layer-3 address?

EX3300 can not use irb.x, I have a Juniper EX4300 convergence layer Switch, in it there are irb interfaces. such as irb.3, and if I have another EX4300 for access layer, I can set vlan l3-interface ...
0
votes
0answers
35 views

I can not login to Juniper EX4300

I my heap-up EX4300 Switch, I set the system login user admin, and a plain-text password, this is my configuration: {master:0}[edit system] ...
0
votes
0answers
31 views

The Juniper EX4300 and HUAWEI 5720 trunk do not transit

I use my Juniper EX4300 connect to my HUAWEI 5720 Switch(10.10.11.80), this is my Juniper switch's settings: usage information: set interfaces ae103 unit0 family ethernet-switching interface-mode ...
2
votes
0answers
21 views

Juniper QinQ same port for customer as provider

Is it possible to use a single interface as both the provider port and the customer port for a QinQ setup on a Juniper EX 4200 switch? I have a set of switches "on a stick" attached to the network. ...
0
votes
0answers
28 views

Why the ae1's `Link` is `down` but its indicator is light?

In my Juniper EX4300 I created a ae1 I added xe-0/2/3 and xe-1/2/3 to ae1, xe-0/2/3 { ether-options { 802.3ad ae1; } } xe-1/2/3 { ether-options { 802.3ad ae1; } } ...
4
votes
1answer
26 views

Every `aex` have a `aex.0` in my QFX5100, why?

When i show interface terse in my Juniper switch qfx5100: .... ae29 up up ae29.0 up up inet 192.168.9.2/24 ae30 up up ae30.0 ...
0
votes
1answer
41 views

The irb interface can not ping in EX4300 itself

In my Juniper EX4300 I created a irb.2 with address 10.10.10.110/24 irb { unit 2 { family inet { address 10.10.11.110/24; // the snapshot is wrong, I changed to 10.10.11.110/...
0
votes
0answers
18 views

What's the uplink port shows in the `show interfaces terse`?

My Juniper EX4300 have four uplink port: but when I show interface, there only two xe port: Interface Admin Link gr-0/0/0 up up pfe-0/0/0 up up pfe-0/0/0.16383 up up ...
1
vote
0answers
31 views

What's `irb` menaing? and what's the difference between it and `vlan`?

What's irb menaing? and what's the difference between vlan? I found some Junos version the vlan l3-interfaces should be vlan.xxx, and some times there is irb.xxx. irb { unit 0 { family ...
3
votes
1answer
38 views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
0
votes
1answer
51 views

How to change AD on Juniper router?

I have this route on my Juniper Router and some destinations have two routes: OSPF and BGP. I want to change the administrative distance for the BGP route so that it will be smaller than the OSPF ...
3
votes
1answer
73 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
0
votes
1answer
41 views

How can a Juniper Router update its arp table?

I know the ARP table is cached data. On Juniper, we can use show arp to query the arp table: admin@juniper> show arp | match "16.23.43.75" ac:1f:6b:90:d1:ca 16.23....
4
votes
3answers
287 views

Why the last AS PATH item always is `I` or `?`? [duplicate]

you see my snapshot from m Juniper Router, I want to find the routes of 114.114.114.114, but there always get Idle or a ?, why:
3
votes
1answer
94 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
2
votes
1answer
25 views

Juniper router how to check the BGP process port?

Juniper router how to check the BGP process port? If I have a router with IP address 12.12.21.1, we know it run a BGP process, which use TCP 179 port as default. How can I check if port 179 is ...
2
votes
2answers
35 views

Junos[MX]: How to show VPLS instance associated with given subinterface

Suppose I have a subinterface with Vlan-vpls encapsulation, like this one: admin@router> show configuration interfaces ge-2/1/1 flexible-vlan-tagging; encapsulation flexible-ethernet-services; ...
2
votes
1answer
33 views

Juniper SRX Destination NAT for L2TP server

I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks. I've had some success with this post: https://forums.juniper.net/t5/...
2
votes
1answer
33 views

RSVP bandwidth value configuration in Juniper MX

Can someone please explain is it a good practice to change RSVP bandwidth value of an interface? We have two bundle links between R1 and R2 namely ae13 and ae22 . Both R1 and R2 are Juniper MX ...
6
votes
1answer
168 views

MSTP and Rapid-PVST+

We have a medium sized network running all Juniper except for one building. This building is shared with another group, and is completely Cisco. We just trunk our VLANs up there. Our Juniper network ...
1
vote
0answers
39 views

mLACP / MC-LAG between Cisco / Juniper

I am working on a LDP signalled VPLS topology (picture) What I am trying to accomplish here is to establish a redundant connection to CE1. CE1 has both interfaces in a port-channel with an IP. My ...
0
votes
0answers
24 views

MPLS LSPs Unequal Cost Load Balancing in Juniper MX

I have confusion with regard to Juniper MPLS LSP unequal cost balancing. In Juniper we can define 2 or more LSPs between R1 and R2. With some LSPs taking the IGP best path (default behavior) while ...
3
votes
1answer
32 views

Juniper MX/SRX series interface monitoring command

Good morning all, I was curious due to an issue were currently troubleshooting in our environment if there is a command in Juniper that will allow us to determine the utilization percentage of an ...
1
vote
0answers
49 views

Point to Point ICMP Ping Loss between Juniper MX routers

I am facing problem with regard to 1 x 10G link (which is actually configured as an aggregated Ethernet (ae) i.e ae link contains only single 10G link. This ae link is connected between 2 x Juniper ...
1
vote
1answer
42 views

IPSec route-based vpn st0 interface

As i know, the st0 interface is used when the gateways are configured with route based VPN. But my question is, say below is the topology A<---->B<---->C<---->D A and D are hosts, B and C ...
3
votes
0answers
35 views

Juniper EX4300 / MAC limiting SNMP trap

I have the following device and configuration: Model: ex4300-32f Junos: 17.3R3-S3.3 show configuration groups GLOBAL-SNMP { snmp { client-list MANAGERS { 10.8.9.0/28; } community TEST-COMMUNITY ...
3
votes
1answer
70 views

Juniper EX4200 QinQ question

newbie here with a very similar question to one that was posted a couple of years back ... only slightly different (so, as the original question was asked so perfectly, I've copied it nearly verbatim ...
2
votes
1answer
106 views

SSH failing from Cisco to Juniper - SSH2 CLIENT 0: Channel open failed, reason = 1752134516

Not able to SSH from Cisco IOS 15.2(2)E8 to Juniper 14.1X53-D48.1 HOST#show debugging SSH: SSH Client debugging is on HOST#ssh 1.1.1.1 *Feb 11 15:55:47.448: SSH CLIENT0: protocol version id is - ...
1
vote
1answer
69 views

Difference between PEM 'Not OK' and PEM 'Input Failure' in Juniper

I have one query with regard to PEM (Power Entity Modules) in Juniper routers. On MX series routers, 4 x PEM Modules are installed. However in case 1 x PEM is not receiving power (like Input Power ...
5
votes
0answers
103 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
0
votes
1answer
21 views

faild hardware address for ifd ge-0/0/0 failed on junos-vsrx-12.1X47-D20.7-domestic vmware machine

I have been trying to configure dhcp client on ge-0/0/0, I have asked a question before about it in this link At first the solution provided worked, but when I started the virtual machine again it ...
1
vote
0answers
72 views

BFD down - “matches wrong session” (SRX)

We have a Juniper SRX talking to a Dell. One of the BFD sessions has a problem. The Juniper reports it as being up, the Dell reports it as being down. In the BFD trace on the Juniper, I see messages ...
2
votes
1answer
69 views

Configuring BFD for OSPFv3 between IOS-XE and JunOS

i need to implement BFD on a IGP Link with dual-Stack OSPFv3 between an IOS-XE device (ASR903) and a Juniper MX480. i'm running BFD for Dual-Stack OSPFv3 members on many links between IOS-XE and IOS-...
1
vote
1answer
89 views

Rate-limiting policer on aggregated ethernet (AE) bundle

I am facing problem regarding firewall policier on Juniper MX platform. We have bundle link (AE Link) consisting of 2 x 10G links on which P2P IP is configured with customer for internet access. Now ...
4
votes
3answers
281 views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
4
votes
1answer
50 views

How can I retrieve a configuration programmatically on a JunOS device?

this is a part of the configuration of Juniper Router, it stands the vlans: family inet { address 3.189.239.238/29; address 3.189.239.254/28; } ...
0
votes
1answer
42 views

How to understand the juniper's chassis concept?

I searched a chassis article which is introducing the Chassis. MX960 Chassis It's a physical concept there, but I think the chassis is far more than this. because if we in the commands: there shows ...
4
votes
2answers
64 views

Juniper SR300 maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
3
votes
2answers
51 views

JunOS Use iBGP route over OSPF route

Hello i have an issue where my Juniper router doesnt advertise BGP 10.255.255.4/32 to a neighbor because in inet.0 it is not issued as the best route root# run show route table inet.0 inet.0: 11 ...
0
votes
1answer
33 views

how to change a BGP path in juniper?

How to change the selected BGP route? I show the route 43.242.33.39, there shows 3 GBP paths. but I can not ping the ip(43.242.33.39). and can not traceroute it. how can I do with this?
5
votes
1answer
39 views

Junos how to execute a lot of repetitive commands?

In my Juniper qfx Switch, I want to execute many commands such as bellow: set vlans vlan77 vlan-id 77 set vlans vlan77 l3-interface irb.77 set vlans vlan78 vlan-id 78 set vlans vlan78 l3-interface ...
1
vote
1answer
34 views

I limit the port INGRESS but get packet loss

I use the limit speed method to limit the Juniper Switch port EGRESS and INGRESS speed. but after I added the INGRESS filter to my port, there will loss packets on the switch every port. anybody ...
4
votes
2answers
361 views

With respect to Juniper Networks , what is the difference between 'Fabric Plane and 'Switch Fabric'?

I am struggling with the concept of 'Fabric Plane' and 'Switch Fabric'? I haven't found any clear cut difference between them? Why fabric planes are different in MX960 compared with MX240 and MX480. ...
2
votes
1answer
21 views

New line (\n) not working in JUNOS on EX3300

Hopefully this is a quick fix and someone has seen this. Every document that I have come across tells me that when I am entering a login message, in order to make a new line, I should be using "\n". ...
1
vote
1answer
148 views

BGP Juniper not reflecting to Cisco?

I am really new to working with Junipers and I am struggling a bit with Route Reflector configuration. I have 3 routers Cisco-Juniper-Juniper2 here is my config: Cisco: router bgp 100 neighbor ...
3
votes
1answer
59 views

Group VPN between vMX as a member and a cisco router as a Group Controller

I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
4
votes
1answer
44 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command 'set cli complete-on-space' for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...
2
votes
1answer
137 views

What is the difference between “set community” and “add community” in juniper?

I am trying to understand setting up policies on a juniper router. What is the difference between "add" and "set" community? set policy-options policy-statement MY_POLICY term MY_TERM then community ?...
4
votes
1answer
307 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
2
votes
1answer
70 views

Securing J-Web interface with user lockouts after multiple bad login attempts

I have a bit of an odd question that I can't seem to find much success in getting an answer via web searching. I'm wondering if there is a way to secure the J-Web interface with user lockouts after ...