Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

Filter by
Sorted by
Tagged with
2
votes
2answers
28 views

How to view a privilege level attached to a command in Junos?

According to Juniper documentation, each top-level CLI command and each configuration statement has an access privilege level associated with it. Is there a command which allows one to see the ...
2
votes
1answer
25 views

Juniper SRX Application Inactivity Timeout

Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
1
vote
1answer
23 views

Juniper vMX logical system

Can some one please tell that Juniper vMX supports how many logical system? Some one mentioned on Juniper forum that it supports 15 Logical systems but in case of 3 Logical systems configured , 2 were ...
0
votes
1answer
47 views

Junos: how to change BGP MED for secondary node?

I have vSRX cluster, which announce some protected addresses over IBGP. Each node has two sessions with two routers. (I use ge-0/0/1 and ge-7/0/1 for that). I found that if fail-over happens, and ...
0
votes
1answer
83 views

JunOS: FPC Major error alarm

I hope everyone is doing fine! This morning I've run into a problem. My uplink interface went down for unknown reasons. Upon checking system alarms I see this: show system alarms 1 alarms currently ...
1
vote
2answers
134 views

How to choose the most recommended Junos release for MX router

How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
0
votes
1answer
43 views

Managing a Juniper EX4300 In Band

Currently, our ex4300 are managed in band using irb.20. show configuration interfaces irb unit 20 { family inet6 { address 2001:db8:1::252/64; show configuration routing-options rib inet6.0 {...
2
votes
1answer
42 views

If accept IP address term before discard port term, will the IP's port still be discard?

In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT: dele@MX-RE0# show firewall filter DENY-EMAIL-PORT term ALLOW-IP { from { address { 102.100.100.1/32; ...
2
votes
0answers
32 views

CA certificate and Local certificate

There is something which is bothering me when i think about the CA cert and Local cert. Below are my queries which pertains to juniper but may be generic as well. 1) "request security pki ca-...
1
vote
1answer
64 views

Will the router crash when it is sent routes that it can't design to hold?

I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
0
votes
2answers
43 views

Why doesn't kernel itself had entire L2/L3 protocol stack? [closed]

I know kernel itself handles protocols in layer 2, layer3 and layer 4 at ipv4 stack, but why can't kernel itself doesn't have protocols such as STP/RSTP/xSTP/OSPF...etc, implemented. Why should we ...
0
votes
2answers
132 views

Deny ssh access from CPEs in all routing-instance - Juniper MX960

I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
1
vote
1answer
55 views

ex4200 bootup warning

we have some old juniper ex4200 in our stock and it shows following warning in console : --- JUNOS 12.3R3.4 built 2013-06-14 00:08:02 UTC *************************************************************...
0
votes
1answer
79 views

Junos, accidentally deleted a FIB entry, how to re-add?

while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
1
vote
1answer
39 views

Where the `term` and `policer` would appear?

Where the term and policer would appear? In juniper, there have filter, term and policer. I know the filter is under firewall, but how about the term and policer? how to understand the concept? I ...
3
votes
1answer
151 views

How to bypass when network speed over a special number in Juniper?

I have a requirement, such as I have 113.100.15.0/24 segment IP addresses. in Juniper M480 Router I connected to BGP-A(1G) and BGP-B(10G), by default the 113.100.15.0/24 out the Router it go ...
0
votes
1answer
150 views

What is the point of Junos outbound SSH service?

Junos outbound SSH service makes a SSH connection from network device to SSH server. What is the point of this? Does it allow the server to somehow make the SSH connection back to network device using ...
1
vote
1answer
732 views

what do em0, em1, em2 and em3 interfaces refer to on Juniper routers

Can someone explain what these interfaces are for? I know em0 is used as a management interface on the router to connect via ssh but why are the other two there? I have also noticed, sometimes they ...
2
votes
1answer
88 views

Wildcard to match JUNOS

Hi I am trying to match routing instances with names other then VPLS-* basically any name that starts with V* but is not VPLS-* I tried multiple different iterations of below but it seems to ignore ...
1
vote
1answer
263 views

Junos OS Upgrade on EX4200 Virtual Chassis

We have couple of EX4200s switches in Virtual Chassis mode running in the network. Each Virtual chassis has only 2 member switches. We are required to upgrade the Junos OS on each member switch in ...
0
votes
1answer
28 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
4
votes
3answers
372 views

JunOS, access mode interface asks for a vlan

I'm kinda new to networking so I'm going to do my best to try explain my issue. The issue that I have is that I want to delete all default configuration for my xe interface. Current configuration: ...
1
vote
1answer
134 views

How to do port mirroring in Juniper EX2200 switch

I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
2
votes
0answers
73 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
1
vote
1answer
247 views

EX3300 can not use irb.x, so how to access the layer-3 address?

EX3300 can not use irb.x, I have a Juniper EX4300 convergence layer Switch, in it there are irb interfaces. such as irb.3, and if I have another EX4300 for access layer, I can set vlan l3-interface ...
3
votes
1answer
43 views

Every `aex` have a `aex.0` in my QFX5100, why?

When i show interface terse in my Juniper switch qfx5100: .... ae29 up up ae29.0 up up inet 192.168.9.2/24 ae30 up up ae30.0 ...
0
votes
1answer
779 views

The irb interface can not ping in EX4300 itself

In my Juniper EX4300 I created a irb.2 with address 10.10.10.110/24 irb { unit 2 { family inet { address 10.10.11.110/24; // the snapshot is wrong, I changed to 10.10.11.110/...
1
vote
0answers
206 views

What's the uplink port shows in the `show interfaces terse`? [closed]

My Juniper EX4300 have four uplink port: but when I show interface, there only two xe port: Interface Admin Link gr-0/0/0 up up pfe-0/0/0 up up pfe-0/0/0.16383 up up ...
3
votes
2answers
332 views

What's `irb` meaning? and what's the difference between it and `vlan`?

What's irb meaning? and what's the difference between vlan? I found some Junos version the vlan l3-interfaces should be vlan.xxx, and some times there is irb.xxx. irb { unit 0 { family ...
3
votes
1answer
280 views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
0
votes
1answer
334 views

How to change AD on Juniper router?

I have this route on my Juniper Router and some destinations have two routes: OSPF and BGP. I want to change the administrative distance for the BGP route so that it will be smaller than the OSPF ...
4
votes
1answer
107 views

Rate Limit on Main Aggregated Interface (AE) without applying on Unit Level in Juniper MX

I want to apply rate limit on Main Aggregated Interface (AE) without applying on unit level. We have a customer connected with our Juniper MX480 via 100G Interface. The single 100G interface is a part ...
4
votes
1answer
290 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
0
votes
1answer
360 views

How can a Juniper Router update its arp table?

I know the ARP table is cached data. On Juniper, we can use show arp to query the arp table: admin@juniper> show arp | match "16.23.43.75" ac:1f:6b:90:d1:ca 16.23....
4
votes
1answer
727 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
2
votes
0answers
178 views

Memory Utilization inceased on Routing Engine in Juniper MX

We recently faced high memory utilization on primary RE of Juniper MX. I have attached graph of Memory Utilization . It was as a result for copying some files from Backup RE to Primary RE (This is ...
2
votes
2answers
158 views

Junos[MX]: How to show VPLS instance associated with given subinterface

Suppose I have a subinterface with Vlan-vpls encapsulation, like this one: admin@router> show configuration interfaces ge-2/1/1 flexible-vlan-tagging; encapsulation flexible-ethernet-services; ...
2
votes
1answer
268 views

Juniper SRX Destination NAT for L2TP server

I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks. I've had some success with this post: https://forums.juniper.net/t5/...
4
votes
1answer
495 views

IPv6 default route not being installed from RA

Platform: Juniper SRX300 Version: JUNOS 15.1X49-D160.2 ISP: Midco I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
1
vote
0answers
205 views

mLACP / MC-LAG between Cisco / Juniper

I am working on a LDP signalled VPLS topology (picture) What I am trying to accomplish here is to establish a redundant connection to CE1. CE1 has both interfaces in a port-channel with an IP. My ...
3
votes
1answer
136 views

Site-2-Site Juniper SRX & Zywall

I've a Juniper SRX 340 on my datacenter and a Zywall USG 100 on my office. I'd like to build a site-to-site VPN between them, but after a lot of tries I can't still reach the result. This is the ...
3
votes
1answer
1k views

how to copy the config of one port to another port on juniper

how to copy the config of one port to another port on juniper ? 1) how to see all the configs that are applied to the port (ex: xe) 2) then how to copy the config of this port to another port ? ...
4
votes
1answer
390 views

Juniper EX4200 QinQ question

newbie here with a very similar question to one that was posted a couple of years back ... only slightly different (so, as the original question was asked so perfectly, I've copied it nearly verbatim ...
6
votes
0answers
380 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
1
vote
1answer
395 views

Rate-limiting policer on aggregated ethernet (AE) bundle

I am facing problem regarding firewall policier on Juniper MX platform. We have bundle link (AE Link) consisting of 2 x 10G links on which P2P IP is configured with customer for internet access. Now ...
4
votes
1answer
58 views

How can I retrieve a configuration programmatically on a JunOS device?

this is a part of the configuration of Juniper Router, it stands the vlans: family inet { address 3.189.239.238/29; address 3.189.239.254/28; } ...
0
votes
1answer
71 views

how to change a BGP path in juniper?

How to change the selected BGP route? I show the route 43.242.33.39, there shows 3 GBP paths. but I can not ping the ip(43.242.33.39). and can not traceroute it. how can I do with this?
5
votes
1answer
47 views

Junos how to execute a lot of repetitive commands?

In my Juniper qfx Switch, I want to execute many commands such as bellow: set vlans vlan77 vlan-id 77 set vlans vlan77 l3-interface irb.77 set vlans vlan78 vlan-id 78 set vlans vlan78 l3-interface ...
2
votes
1answer
94 views

Is it possible to do layer 2 port mirroring for family inet/inet6 interfaces in Juniper MX series routers?

I have connected two logical systems using logical tunnels like this: [edit] root@mx1# show logical-systems r1 interfaces lt-0/0/10 unit 10 encapsulation ethernet; peer-unit 80; family inet { ...
4
votes
1answer
63 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command set cli complete-on-space for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...

1
2 3 4 5 6