Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

A tag for questions involving Juniper Networks hardware or software.

0
votes
0answers
20 views

Juniper Filter-Based Forwarding

We have the following Juniper MX80 setup: set interfaces ae2 unit 200 description ISP1 set interfaces ae2 unit 200 vlan-id 200 set interfaces ae2 unit 200 family inet address 200.200.200.2/30 set ...
0
votes
1answer
46 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
0
votes
1answer
16 views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
1
vote
1answer
25 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
1
vote
1answer
163 views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
19 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
28 views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
1
vote
1answer
42 views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
0answers
29 views

cannot push the ios for juniper ex3300

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...
0
votes
1answer
41 views

Which regex flavor is used in the Junos CLI?

I'm trying to do some regex matching in the Junos CLI, like show configuration | match "fancy.pants(reg|ex)". I especially want to look for word boundaries and other character classes. I'm used to \b, ...
1
vote
2answers
64 views

How to test if an sfp is working on juniper qfx5100

How to test if an sfp is working on juniper qfx5100 My manager asked me to test if a 3rd party sfp is working on juniper !! what tests can i run on it to compare different company test equipment ? ...
2
votes
1answer
92 views

What's the purpose of JUNOS' sfid process?

In the last few days, one Juniper EX-2200-48P has started complaining via syslog: Jun 21 12:50:03 ex2200-b sfid[717]: TASK_OS_MEMHIGH: Using 52118 KB of memory, 103 percent of available After a ...
3
votes
1answer
42 views

understanding naming of Junos routing tables

Am I correct that master RI in Junos can have one and only one inet.0 table and each user-defined RI can have only one <RI_name>.inet.0 table? Also, master RI can have a single inet6.0 table and ...
4
votes
1answer
49 views

How does Junos distinguish that route is learned in Layer 3 or Layer 2 VPN environment?

As I understand from Understanding Junos OS Routing Tables document, then bgp.l3vpn.0/bgp.l3vpn-inet6.0 or bgp.l2vpn.0 tables contain routes learned from other PE routers in Layer 3 or Layer 2 VPN ...
1
vote
1answer
34 views

How to show the MAC table for interfaces on a Junos Virtual Chassis member?

I'm using this command to show the MAC address table on a Juniper EX4500 series Virtual Chassis with 2 members: show ethernet-switching table The results show only interfaces for the Virtual ...
3
votes
2answers
81 views

Junos complex regular expressions question

I saw this explanation in the JNCIS study guide book ch1 (community regex examples) and i'm a bit confused: ^65000:.{2,3}$ - AS number is 65000, community value is any 2 or 3 digit number ex. 65000:...
3
votes
1answer
110 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
1
vote
1answer
68 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
1
vote
1answer
44 views

CanI prevent a secondary DHCP server on the LAN from taking over from SRX Juniper's DHCP?

I have admin access to a SRX550 Juniper, but I cannot get help from Juniper or joint their boards because the Juniper belongs to Century Link, not us. I have the following: # show system services ...
1
vote
1answer
362 views

SonicWall is dropping encrypted packets with error “sonicwall ipsec vpn decryption failed selector check error”

I have implemented a Site-to-Site IPsec tunnel between a Juniper SSG firewall and a SonicWall. However, any traffic that I send over the tunnel gets dropped on the SonicWall with an error saying ...
3
votes
1answer
107 views

How can I monitor SSH or HTTPS activity on Juniper SRX 240 firewall?

In Junos is there any way I can monitor SSH or HTTPS login activity though logs? I would like to receive alerts if there are any changes made in the current config.
6
votes
1answer
76 views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
4
votes
1answer
78 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
0
votes
1answer
79 views

Juniper SRX 240H latency going on with HA Cluster. Are there any steps to troubleshoot the issue?

Currently we are having a latency issue between a Juniper HA cluster and a Cisco switch c3750. We have LACP configured between them. reth3 { vlan-tagging; redundant-ether-options { redundancy-group 1;...
2
votes
1answer
68 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...
1
vote
0answers
181 views

2x Juniper SRX300 RETH interface on multiple interfaces [closed]

We have two SRX300 boxes in a chassis cluster. I have configured the RETH0 interface for WAN communication and assigned 1 port on the first unit and 1 port at the second unit. I have setup reth1 ...
3
votes
1answer
174 views

EVPN/VXLAN RD & RT

I was reading through this example on Juniper's EVPN/VXLAN documentation and I can't understand why I need two different Route-Distinguishers and Route-Targets. The RD & RT in the VRF instance is ...
1
vote
1answer
56 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....
2
votes
1answer
60 views

Is it possible to use the console on a Juniper EX for outbound connections?

I want to connect two EX switches by console cable and want to use this connection to open a console session from one EX to the other. I found no "offical" way to do this but maybe someone else has ...
2
votes
1answer
273 views

Juniper SRX BGP based ECMP not working as expected

Overview I am trying to setup BGP based ECMP to two end servers that sit on separate subnets/VLANs and advertise out the same IP address to a SRX firewall. The end nodes are linux boxes running BIRD ...
0
votes
0answers
75 views

add 2nd ip on linux box, juniper refuse to add to ARP

I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8. juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0) I would like to add ...
5
votes
2answers
105 views

Juniper: WakeOnLan over 802.1x without using default VLAN

Case We have a working 802.1x configuration on all our access ports. I want to enable WakeOnLan, but have no idea, how to target computers with Magic Packet. Tests We tried to send Magic Packet ...
2
votes
1answer
54 views

Juniper SSG Split DNS not working over tunnel

I am trying to get the DNS Proxy feature working in an SSG5 (Side B). The other side of the VPN is an SSG140 (Side A). The DNS server is on Side A. foo.com should send DNS queries to 192.168.1.2 (...
4
votes
1answer
64 views

What are the uses of clocking and timing ports on Juniper routers

There are 4 ports each named "Ext Ref clock", "TOD", "1PPS", "10Mhz" on MX104. I understand what each stands for and have vague idea of each after googling but what are they used for in real world?
3
votes
1answer
289 views

EX3300: Voice VLAN stopped working after upgrade to 15.1R6.7

We have 50+ Juniper EX3300 switches with access points configured to work with dot1x and voice vlan. We also have a variety of Yealink T23G, T42G, T26G and T48G phones that worked perfectly in our ...
0
votes
0answers
204 views

Cisco Route Map equivalent in Juniper JUNOS

Here is a scenario and working route-map example for Policy base routing. I'm new Junos i'm struggling with Firewall filters and Policy-statements in Junos. Can you help me to convert this simple ...
1
vote
1answer
147 views

Why is blocked edge port still forwarding in RSTP on Juniper EX Switch?

I have one EX Switch connected to my laptop on port ge-0/0/9 set protocols rstp interface ge-0/0/9 edge set protocols rstp bpdu-block-on-edge commit root> show spanning-tree interfaces it still ...
2
votes
1answer
180 views

Does Juniper Loopback address need security zone configurations to be able to accept pings?

Do you need configure lo0 unit 0 with set security zones security-zone trust interface lo0.0 set security zones security-zone host-inbound-interfaces system-services ping Do you have to do this for ...
0
votes
1answer
85 views

My two Juniper J2320 Routers can't ping each other

FINALLY GOT IT TO WORK I have two J2320s connected by an Ethernet cable. The cable is connected to both in their ge-0/0/1 unit 0 interfaces. One is 192.168.2.5/24 and the other is 192.168.2.13/24 ...
6
votes
1answer
175 views

Juniper EX4600: multicast not working in vlan default. [closed]

I have a Juniper EX4600 switch which I'm using for host connectivity (obviously). Now I need to set up a VRRP/CARP between two hosts that are in the same vlan, and it's the default one. Surprisingly, ...
2
votes
1answer
240 views

Juniper SRX 1400: Policy to redirect users to custom URL

What I need I have SRX 1400 @ JUNOS 12.3X48-D40.5 Imagine having, among others, following zones: UNTRUSTED-CLIENTS, WORLD and INTRANET. I want to block all traffic from UNTRUSTED-CLIENTS to WORLD, ...
0
votes
1answer
81 views

Block all inbound traffic except for a defined IP

Thanks in advance to anyone who will take time to provide a possible solution. This is my actual situation: ___________________ ________________ INTERNET --------...
4
votes
1answer
1k views

show mac address on aggregated interface - Junos

I am trying to audit which interfaces are plugged to which switchport on our EX3300 switches. The problem is that when using aggregated interface I see only one mac address. wadmin@SIN11-VCsw-48-11&...
0
votes
2answers
210 views

Device need Telnet to configure, but no IP is assigned

I have a UPS device connected to a Juniper EX switch. According to the UPS device documentation the device used DHCP and BOOTP to obtain a IP. This is part of a management network which doesn't have a ...
1
vote
1answer
134 views

How do i clear icmp statistics (JUNOS)

I run a rapid ping and then run show system statistics icmp I want to run another ping test but how do I clear out the old stats? clear interfaces statistics all does not clear out the icmp stats
0
votes
1answer
581 views

How to configure L2TP Client on Juniper SRX?

I have an Juniper SRX 100, running JunOS 12.1X46-D66. I would like to use it to route all Internet traffic through an L2TP tunnel to an ISP called Andrews and Arnold, who offer this as a service. ...
0
votes
0answers
57 views

Juniper ScreenOS firmware license

I want to upgrade Juniper ScreenOS on an SSG device (SSG5, SSG140). Do I need to purchase a license to do that or not? It is readily downloadable and can be done (and I have done) but I didn't ...
0
votes
1answer
91 views

What's the proper way to route a subnet through an OSPF area?

To make the example as simple as possible. We have an OSPF area setup so that if one link fails or gets congested, traffic will reroute through the other. Is there a way to have traffic pass from ...
0
votes
2answers
403 views

Traffic utilization on Cisco and Juniper devices

I'd like to check current traffic utilization (how much Mb/s is used per interface) on port on cisco switch and Juniper SRX device - any ideas where I can look up for this informations? Thank you for ...
0
votes
2answers
1k views

Update-source loopback and next-hop-self

I've a question related to BGP configuration. If I'm using the update-source loopback or next-hop-self commands, will they modify the source IP address in the packet? Assume R1 has an eBGP session ...