Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

0
votes
0answers
8 views

PPPoE authentication section

Thank you for reading, I have a question about PPPoE.I cann't limit PPPoE section on juniper MX960. please let me know, How to control and limit PPPoE section?
0
votes
0answers
9 views

Securing J-Web interface with user lockouts after multiple bad login attempts

I have a bit of an odd question that I can't seem to find much success in getting an answer via web searching. I'm wondering if there is a way to secure the J-Web interface with user lockouts after ...
3
votes
1answer
39 views

Find which VRF contains a route

I am trying to find a Juniper command that shows a list of VRF routing tables that contain a specific prefix / range. Does any one know if this is possible? Thanks.
1
vote
0answers
16 views

Can't login to Juniper SRX from web gui [on hold]

I have a Cisco 2911 router and a Juniper SRX550. The Cisco 2911 is directly connected to the Juniper SRX550. I can ping both networks from either routers. When I connect to https://172.16.128.1 from ...
-2
votes
0answers
23 views

Connecting a router to a firewall [closed]

How easy would it be to connect a router to a firewall? The reason I ask is because, a router does not block traffic (unless you tells it), but a firewall blocks traffic (unless you tell it). I'm ...
-2
votes
0answers
27 views

Network Engineering online training course [closed]

I am trying to find online tutorial videos for basics to advanced since online tutorial videos are easier than book for me. I found CBT nuggets and it looks good. Any reviews on cbt nuggets? Is there ...
2
votes
1answer
18 views

JunOS iBGP and return paths odd behaviour

I've got a somewhat basic iBGP configuration with a routing instance "global" between two Juniper vSRX's - each Juniper vSRX has an uplink of its own from a different transit provider with a default ...
0
votes
0answers
43 views

Networking(switching) , network traffic monitoring

Hi I am facing error in juniper switch( Model: ex4200-48t ,Junos: 15.1R6.7). I deploy monitoring software and in monitoring software are generating alarm(error) of juniper switch ports errors WARN ...
-1
votes
2answers
36 views

Can I scp a file to Juniper router's Console port?

When I try to scp a file to a router on its console port, it says: "lost connection" Is it not possible to share a file with the router on console port? If not, why?
4
votes
1answer
42 views

juniper advertising smaller subnets with a bigger static route in BGP

I have a /18 in RIB but I would like advertise smaller subnet in BGPfor specific reason to diff ISP etc. Is there a way to do it without creating a null route or static route. Is some way in policy ...
2
votes
1answer
119 views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
2
votes
1answer
17 views

How can I see where BGP is advertising a given prefix? (Junos)

I'm working in a complex BGP environment on Juniper MX480s. We have many peers in various routing instances advertising prefixes to us, and then we advertise a subset of those prefixes to a subset of ...
1
vote
1answer
42 views

Comcast business modem question

We have a Cisco 2900 router that we use for VPN, and it's connected to a Comcast business modem. The LAN ip is 10.1.10.2 I also have a Junipe SRX550 firewall that I want to use for VPN, and it's ...
5
votes
1answer
47 views

Disadvantages or risks of leaving the the family inet6 configuration under interface configuration in Junos applied

I have a corner-case where I need to leave the family inet6 configuration under IFL present while hosts in that network should not use IPv6. This means, that the logical interface of a router will ...
1
vote
2answers
25 views

Juniper EX use upstream gateway

On a Juniper EX series how can I set the L3 IP range, but specify a gateway that is upstream? VLAN - Subnet - Gateway 10 - 10.1.10.0/24 - 10.1.10.1 20 - 10.1.20.0/24 - 10.1.20.1 If I do the config ...
2
votes
2answers
64 views

Noobie network question: connect routers across floors

I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly? If I ...
4
votes
1answer
20 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
3
votes
2answers
53 views

Connect Cisco 2900 to Juniper SRX550

I need to connect a Cisco 2900 router (172.16.0.0) to a Juniper SRX550 (172.16.128.1 & 172.16.192.1). As far as I know, Cisco 2900 have no VLANs, so it's on VLAN 1. The Juniper SRX550 have ...
5
votes
2answers
88 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
3
votes
1answer
46 views

What is the exact meaning of routes in Juniper tagged with @ and #

The routing table explains the meaning of these symbols as: @ = Routing Use Only, # = Forwarding Use Only + = Active Route, - = Last Active, * = Both However, I am looking for more detailed meaning ...
2
votes
1answer
57 views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...
0
votes
1answer
46 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
2
votes
1answer
136 views

Config BGP policy for limit ISP path in Juniper MX 480 Router

Now we have a source IP14.135.4.0/24, we are involved in 5 different ISP, such as A, B, C, D, E. Now we want to access 14.135.4.0/24 not through the path of ISP B and ISP D, but through the other ...
2
votes
1answer
36 views

How to check the Juniper Switch's port bandwidth?

I use the CoS method limited the EX3300's switch port bandwidth to 200m. But I have a question, how to check whether it works? Is there the Juniper Switch EX3300's switch port have a bandwidth ...
3
votes
1answer
40 views

Interfaces Shutdown after JunOS Firmware Upgrade

So I've got some Juniper EX4500's. They're configured as a Virtual Chassis using the SFP+ ports. Due to the distance between racks, I wasn't able to use the VCP ports. Anyway, I've run into an ...
0
votes
2answers
58 views

How can I set the Juniper EX3300 Switch's Interface traffic speed?

How can I set the Juniper EX3300 Switch's Interface traffic speed? Before asking this question I have attempted many methods, all fail. first of all, set the Interface traffic speed is not the ...
1
vote
1answer
114 views

Junos IPSEC Tunnel to Azure & TCP-MSS

I am configuring a Juniper SRX 300 Series to establish an IPSEC tunnel to Azure. The Azure Vnet range is 192.168.10.0/23 The local range is 10.49.236.0/24. The configuration: (relevant bits with ...
4
votes
1answer
78 views

JunOS iBGP session not establishing

I have a test environment set up with two Juniper vSRX instances and a L2 network trunked between them and can reach each other on the IP addresses I'm trying to peer them on. vSRX 1 has an external ...
1
vote
2answers
114 views

Can we have multiple AS number in the same router?

Is it possible to have multiple AS number in the same router? Example: Routing-Instance A for AS100 and Routing-Instance B for AS200 ? Please share me some example or configuration.
0
votes
1answer
79 views

How to connect high-availability routers to high-availability firewalls

I have two Juniper routers (a SRX340 and a SRX320), each with a leased line, on the same IP range. They are designed to be connected together on specific network ports so that the SRX320 takes over if ...
2
votes
1answer
99 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
1
vote
1answer
123 views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
1
vote
1answer
45 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
1
vote
1answer
564 views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
22 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
165 views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
2
votes
1answer
303 views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
0answers
35 views

cannot push the ios for juniper ex3300

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...
0
votes
1answer
74 views

Which regex flavor is used in the Junos CLI?

I'm trying to do some regex matching in the Junos CLI, like show configuration | match "fancy.pants(reg|ex)". I especially want to look for word boundaries and other character classes. I'm used to \b, ...
1
vote
2answers
181 views

How to test if an sfp is working on juniper qfx5100

How to test if an sfp is working on juniper qfx5100 My manager asked me to test if a 3rd party sfp is working on juniper !! what tests can i run on it to compare different company test equipment ? ...
2
votes
1answer
387 views

What's the purpose of JUNOS' sfid process?

In the last few days, one Juniper EX-2200-48P has started complaining via syslog: Jun 21 12:50:03 ex2200-b sfid[717]: TASK_OS_MEMHIGH: Using 52118 KB of memory, 103 percent of available After a ...
3
votes
1answer
54 views

understanding naming of Junos routing tables

Am I correct that master RI in Junos can have one and only one inet.0 table and each user-defined RI can have only one <RI_name>.inet.0 table? Also, master RI can have a single inet6.0 table and ...
4
votes
1answer
60 views

How does Junos distinguish that route is learned in Layer 3 or Layer 2 VPN environment?

As I understand from Understanding Junos OS Routing Tables document, then bgp.l3vpn.0/bgp.l3vpn-inet6.0 or bgp.l2vpn.0 tables contain routes learned from other PE routers in Layer 3 or Layer 2 VPN ...
1
vote
1answer
667 views

How to show the MAC table for interfaces on a Junos Virtual Chassis member?

I'm using this command to show the MAC address table on a Juniper EX4500 series Virtual Chassis with 2 members: show ethernet-switching table The results show only interfaces for the Virtual ...
3
votes
2answers
154 views

Junos complex regular expressions question

I saw this explanation in the JNCIS study guide book ch1 (community regex examples) and i'm a bit confused: ^65000:.{2,3}$ - AS number is 65000, community value is any 2 or 3 digit number ex. 65000:...
3
votes
1answer
252 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
1
vote
1answer
85 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
1
vote
1answer
58 views

CanI prevent a secondary DHCP server on the LAN from taking over from SRX Juniper's DHCP?

I have admin access to a SRX550 Juniper, but I cannot get help from Juniper or joint their boards because the Juniper belongs to Century Link, not us. I have the following: # show system services ...
1
vote
1answer
594 views

SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”

I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall. However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
185 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.