Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

A tag for questions involving Juniper Networks hardware or software.

0
votes
1answer
16 views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...
0
votes
1answer
26 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
2
votes
1answer
126 views

Config BGP policy for limit ISP path in Juniper MX 480 Router

Now we have a source IP14.135.4.0/24, we are involved in 5 different ISP, such as A, B, C, D, E. Now we want to access 14.135.4.0/24 not through the path of ISP B and ISP D, but through the other ...
1
vote
1answer
24 views

How to check the Juniper Switch's port bandwidth?

I use the CoS method limited the EX3300's switch port bandwidth to 200m. But I have a question, how to check whether it works? Is there the Juniper Switch EX3300's switch port have a bandwidth ...
2
votes
1answer
26 views

Interfaces Shutdown after JunOS Firmware Upgrade

So I've got some Juniper EX4500's. They're configured as a Virtual Chassis using the SFP+ ports. Due to the distance between racks, I wasn't able to use the VCP ports. Anyway, I've run into an ...
0
votes
2answers
45 views

How can I set the Juniper EX3300 Switch's Interface traffic speed?

How can I set the Juniper EX3300 Switch's Interface traffic speed? Before asking this question I have attempted many methods, all fail. first of all, set the Interface traffic speed is not the ...
1
vote
1answer
41 views

Junos IPSEC Tunnel to Azure & TCP-MSS

I am configuring a Juniper SRX 300 Series to establish an IPSEC tunnel to Azure. The Azure Vnet range is 192.168.10.0/23 The local range is 10.49.236.0/24. The configuration: (relevant bits with ...
4
votes
1answer
30 views

JunOS iBGP session not establishing

I have a test environment set up with two Juniper vSRX instances and a L2 network trunked between them and can reach each other on the IP addresses I'm trying to peer them on. vSRX 1 has an external ...
1
vote
2answers
108 views

Can we have multiple AS number in the same router?

Is it possible to have multiple AS number in the same router? Example: Routing-Instance A for AS100 and Routing-Instance B for AS200 ? Please share me some example or configuration.
0
votes
1answer
70 views

How to connect high-availability routers to high-availability firewalls

I have two Juniper routers (a SRX340 and a SRX320), each with a leased line, on the same IP range. They are designed to be connected together on specific network ports so that the SRX320 takes over if ...
0
votes
0answers
32 views

Juniper Filter-Based Forwarding

We have the following Juniper MX80 setup: set interfaces ae2 unit 200 description ISP1 set interfaces ae2 unit 200 vlan-id 200 set interfaces ae2 unit 200 family inet address 200.200.200.2/30 set ...
0
votes
1answer
65 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
1
vote
1answer
65 views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
1
vote
1answer
29 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
1
vote
1answer
296 views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
22 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
83 views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
2
votes
1answer
154 views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
0answers
33 views

cannot push the ios for juniper ex3300

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...
0
votes
1answer
54 views

Which regex flavor is used in the Junos CLI?

I'm trying to do some regex matching in the Junos CLI, like show configuration | match "fancy.pants(reg|ex)". I especially want to look for word boundaries and other character classes. I'm used to \b, ...
1
vote
2answers
114 views

How to test if an sfp is working on juniper qfx5100

How to test if an sfp is working on juniper qfx5100 My manager asked me to test if a 3rd party sfp is working on juniper !! what tests can i run on it to compare different company test equipment ? ...
2
votes
1answer
219 views

What's the purpose of JUNOS' sfid process?

In the last few days, one Juniper EX-2200-48P has started complaining via syslog: Jun 21 12:50:03 ex2200-b sfid[717]: TASK_OS_MEMHIGH: Using 52118 KB of memory, 103 percent of available After a ...
3
votes
1answer
49 views

understanding naming of Junos routing tables

Am I correct that master RI in Junos can have one and only one inet.0 table and each user-defined RI can have only one <RI_name>.inet.0 table? Also, master RI can have a single inet6.0 table and ...
4
votes
1answer
56 views

How does Junos distinguish that route is learned in Layer 3 or Layer 2 VPN environment?

As I understand from Understanding Junos OS Routing Tables document, then bgp.l3vpn.0/bgp.l3vpn-inet6.0 or bgp.l2vpn.0 tables contain routes learned from other PE routers in Layer 3 or Layer 2 VPN ...
1
vote
1answer
163 views

How to show the MAC table for interfaces on a Junos Virtual Chassis member?

I'm using this command to show the MAC address table on a Juniper EX4500 series Virtual Chassis with 2 members: show ethernet-switching table The results show only interfaces for the Virtual ...
3
votes
2answers
120 views

Junos complex regular expressions question

I saw this explanation in the JNCIS study guide book ch1 (community regex examples) and i'm a bit confused: ^65000:.{2,3}$ - AS number is 65000, community value is any 2 or 3 digit number ex. 65000:...
3
votes
1answer
179 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
1
vote
1answer
79 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
1
vote
1answer
52 views

CanI prevent a secondary DHCP server on the LAN from taking over from SRX Juniper's DHCP?

I have admin access to a SRX550 Juniper, but I cannot get help from Juniper or joint their boards because the Juniper belongs to Century Link, not us. I have the following: # show system services ...
1
vote
1answer
486 views

SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”

I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall. However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
150 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
6
votes
1answer
106 views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
4
votes
1answer
83 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
0
votes
1answer
108 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
2
votes
1answer
71 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
233 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
3
votes
1answer
210 views

EVPN/VXLAN RD & RT

I was reading through this example on Juniper's EVPN/VXLAN documentation and I can't understand why I need two different Route-Distinguishers and Route-Targets. The RD & RT in the VRF instance is ...
1
vote
1answer
74 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....
2
votes
1answer
62 views

Is it possible to use the console on a Juniper EX for outbound connections?

I want to connect two EX switches by console cable and want to use this connection to open a console session from one EX to the other. I found no "offical" way to do this but maybe someone else has ...
2
votes
1answer
332 views

Juniper SRX BGP based ECMP not working as expected

Overview I am trying to setup BGP based ECMP to two end servers that sit on separate subnets/VLANs and advertise out the same IP address to a SRX firewall. The end nodes are linux boxes running BIRD ...
0
votes
0answers
80 views

add 2nd ip on linux box, juniper refuse to add to ARP

I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8. juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0) I would like to add ...
5
votes
2answers
133 views

Juniper: WakeOnLan over 802.1x without using default VLAN

Case We have a working 802.1x configuration on all our access ports. I want to enable WakeOnLan, but have no idea, how to target computers with Magic Packet. Tests We tried to send Magic Packet ...
2
votes
1answer
69 views

Juniper SSG Split DNS not working over tunnel

I am trying to get the DNS Proxy feature working in an SSG5 (Side B). The other side of the VPN is an SSG140 (Side A). The DNS server is on Side A. foo.com should send DNS queries to 192.168.1.2 (...
4
votes
1answer
71 views

What are the uses of clocking and timing ports on Juniper routers

There are 4 ports each named "Ext Ref clock", "TOD", "1PPS", "10Mhz" on MX104. I understand what each stands for and have vague idea of each after googling but what are they used for in real world?
3
votes
1answer
347 views

EX3300: Voice VLAN stopped working after upgrade to 15.1R6.7

We have 50+ Juniper EX3300 switches with access points configured to work with dot1x and voice vlan. We also have a variety of Yealink T23G, T42G, T26G and T48G phones that worked perfectly in our ...
1
vote
1answer
283 views

Cisco Route Map equivalent in Juniper JUNOS

Here is a scenario and working route-map example for Policy base routing. I'm new Junos i'm struggling with Firewall filters and Policy-statements in Junos. Can you help me to convert this simple ...
1
vote
1answer
196 views

Why is blocked edge port still forwarding in RSTP on Juniper EX Switch?

I have one EX Switch connected to my laptop on port ge-0/0/9 set protocols rstp interface ge-0/0/9 edge set protocols rstp bpdu-block-on-edge commit root> show spanning-tree interfaces it still ...
2
votes
1answer
251 views

Does Juniper Loopback address need security zone configurations to be able to accept pings?

Do you need configure lo0 unit 0 with set security zones security-zone trust interface lo0.0 set security zones security-zone host-inbound-interfaces system-services ping Do you have to do this for ...
0
votes
1answer
101 views

My two Juniper J2320 Routers can't ping each other

FINALLY GOT IT TO WORK I have two J2320s connected by an Ethernet cable. The cable is connected to both in their ge-0/0/1 unit 0 interfaces. One is 192.168.2.5/24 and the other is 192.168.2.13/24 ...
6
votes
1answer
193 views

Juniper EX4600: multicast not working in vlan default. [closed]

I have a Juniper EX4600 switch which I'm using for host connectivity (obviously). Now I need to set up a VRRP/CARP between two hosts that are in the same vlan, and it's the default one. Surprisingly, ...