Questions tagged [juniper-junos]
A tag for questions involving Juniper Networks Operating System (Junos) software.
306
questions
0
votes
1
answer
21
views
Juniper ex4200 neighbour discovery rate limit (IPv6)
We have a few Juniper EX4200 and they are working in layer2 , Is there anyway to rate limit the neighbour discovery on these platforms to prevent dos attacks?
In ex4200 we can set mac address count ...
- 565
0
votes
0
answers
29
views
Configure DHCP snooping with no option 82 on a pure layer 2 Juniper ex2300 using ELS
I have a Juniper ex2300 switch in a mostly-cisco environment (no MIST). On my cisco devices, I have DHCP snooping configured per vlan, with option 82 disabled on the access-layer switches because they ...
3
votes
2
answers
98
views
ethernet switching table is empty | vQFX | EVE-NG
I'm new to Juniper switches. I configured vlan10 and assigned two ports to the relevant vlan.
root> show vlans
Routing instance VLAN name Tag Interfaces
default-switch vlan10 ...
- 33
2
votes
1
answer
95
views
Juniper EX4650 pass double tags on trunk interface
Example topology:
custA / custB > switch1 > EX4650 > switch2 > custA / custB
custA outer tag 101
custB outer tag 102
The EX4650 should allow any inner tag on both vlan 101 and 102.
Dot1Q ...
- 21
0
votes
1
answer
102
views
The IRB.30 Interface cannot be pinged and i cannot SSH into the given IP
All configuration is done via Juniper Mist.
In my Juniper EX4300-MP48 I created an interface IRB.30 with address 192.168.31.200
irb {
unit 30 {
description it;
family inet {
...
0
votes
0
answers
68
views
Nested route policy failing
Any thoughts on why ::/0 is accepted in this example?
Per these documents, the accept in the sub policy means it will match the condition in the parent and action in the parent will apply. But this ...
- 21
0
votes
2
answers
74
views
ACX2100 cannot boot to new version
My customer upgrades the version for ACX2100 from 12.3X54-D34.1 to 20.4R3-S2.6.
After adding software, they checked JUNOS Installation Software already 20.4R3-S2.6.
vipa@BGG0333SRT03> show version |...
- 61
6
votes
0
answers
171
views
DHCPv6 Relay Agent on Juniper — Packets dropped: No SAFD
I tried to setup a DHCPv6 relay agent on a Juniper EX3400 switch. (SLAAC is unfortunately not enough for this use case.)
While the setup of the (non-v6) DHCP relay agent worked flawlessly and was well-...
- 191
0
votes
1
answer
72
views
How do I partition my on-premises network so one part can only access the external (internet)?
Currently, our setup is the following:
I need to make a change so there is no wireless access to our NAS. The Wifi "passthrough" needs to only be able to communicate with the external ...
- 101
2
votes
2
answers
631
views
How do I view BGP communities of received routes in IOS XE before they go through route-map import policy?
I want to see the communities that are attached to a route when I first receive the route before it goes through the BGP import route-map. In my instance the route-map strips communities off so I ...
- 21
0
votes
1
answer
85
views
Looking for more info on SNMP v3 Traps in Junos
I have a customer requirement where I need to be able to have Junos Space Network Management Platform be able to modify the severity of snmp traps on our routers and switches. So first I am trying to ...
- 157
3
votes
1
answer
279
views
Juniper SRX 340 route lookup failed
I've a strange issue on my Juniper; I've a policy to allow all traffic to a specific address behind it and, in effect, the policy works correctly.
All the traffic I send reach the destination, except ...
- 361
0
votes
0
answers
399
views
Juniper SNMPv3 Issue with SRX and EX devices; no traps received by Junos Space
I've been seeing an ongoing problem with Juniper EX4300s and SRX 345 and 1500s. The problem that we continually see is that our monitoring servers stop receiving traps from these devices. I've had ...
- 157
0
votes
2
answers
620
views
What services does MIB2D Daemon provide with respect to Juniper MX?
With respect to Juniper MX , can someone please explain what services does mib2d provide? There are many processes running on the Juniper MX depending on the services configured. These processes can ...
- 1,088
0
votes
1
answer
40
views
router-alert feature in DDoS prevention - MX series
I'm reading DDoS Prevention in MX series - 2nd. As mentioned in book "you can also configure whether an individual policer type should bypass that group’s aggregate policer"
=> I don't ...
2
votes
1
answer
107
views
Is it possible to limit the configuration rollback count in MX-series?
I tried set system max-configuration-rollbacks in mx480, but it shows unsupported platform .
##
## Warning: statement ignored: unsupported platform (mx480)
##
max-configuration-rollbacks 25;
is there ...
- 1,747
0
votes
1
answer
1k
views
How to check the disk partitions usage of juniper device?
In this article : https://kb.juniper.net/InfoCenter/index?page=content&id=KB33032&cat=ROUTER_PRODUCTS&actp=LIST
root@PE1:/var/home/labroot # gpart show -p
=> 34 62533229 ada0 ...
- 1,128
2
votes
1
answer
443
views
Avoiding FPCs rebooting during RE switchover on Juniper EX8200 Switche
We have Juniper EX8208 chassis based switch running in a production environment. The switch has 2 REs running in active and standby role with RE0 being the primary routing engine. The device is ...
- 1,088
1
vote
2
answers
356
views
Can I delete the /var/rundb/private directory?
under my Juniper MX480.
/var/rundb/
the private directory occupy a large size,
root@LA-MX480-RE0:/var/rundb # du -cks * | sort -rn
16691128 total
16275464 private
74976 lr-juniper.db
74912 ...
- 1,747
1
vote
1
answer
323
views
QSFP28 doesn't recognize 4x25G breakout cable and link with 4 SFP28s
So to preface, I'm not a network engineer but am somehow in charge of getting our juniper QFX5200-48y configured. The goal is to get our FS brand SPF28's and QSFP28's to talk to each other on the ...
- 11
0
votes
1
answer
718
views
How does JunOS device boot up ? Juniper JunOS Boot Process
Sounds pretty basic , I could no where find answer for my below questions
Devices : srx 345 , ex3300 (VC)
Inside a junOS device where is the image store path/.tgz , so that I can copy from one to ...
- 11
0
votes
2
answers
431
views
PVLAN on juniper- native isolated VLAN & trunk
I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces.
My config ...
1
vote
1
answer
249
views
How do I rename a Junos BGP group?
Is it possible to change a special place in Junos rather than delete?
In my case I want to change the ebgp-AS1009 to ebgp-AS23100, as far as I know only can delete the group ebgp-AS1009 then re-set. ...
- 1,747
1
vote
2
answers
428
views
Questions about logical-systems of juniper
In my Juniper MX480, the logic-systems config is below:
[edit]
logical-systems {
r1 {
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
...
- 1,128
1
vote
1
answer
341
views
With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?
I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success.
Need to understand the ...
- 1,088
1
vote
1
answer
708
views
How to import a file into Junos main config file?
How to import a file into Junos config file?
there is a case, I have a long prefix-list in config file:
set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20
set logical-systems ...
- 1,747
4
votes
3
answers
791
views
Why eBGP don't need config local-address?
There is a manual for me to learn Junos.
you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
- 1,747
1
vote
1
answer
487
views
CB fabric links require upgrade/training after adding New FPC in Juniper MX480
We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
- 1,088
2
votes
1
answer
421
views
Juniper SRX Management Redirects
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI.
Since some time, when I try to access the Web board, I get the error "...
- 361
1
vote
1
answer
52
views
what's the differences of two `filter` under `edit firewall` in junos?
I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name].
what's the differences of them?
- 1,747
0
votes
1
answer
242
views
My Juniper router do not have j-web configuration
I follow Juniper docs:
I want to set up the j-web. but in my Junos do not have set system services web-management http.
admin@MX480-RE0# set system services ?
Possible completions:
<[Enter]&...
- 1,128
1
vote
1
answer
1k
views
How to find invalid sessions on Juniper SRX 5800 series Firewall
In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
- 1,088
0
votes
1
answer
2k
views
Understanding the Burst Size against policer for 1G/10G interfaces in Juniper MX
We are facing one confusion with regards to burst size value against rate limit or policer in Juniper MX. Need to understand two things :-
(1) Is the burst size limit defined in firewall policer ...
- 1,088
2
votes
2
answers
1k
views
Junos "request system software validate" safety
Just want to clarify: is it safe to issue the command
request system software validate /var/tmp/image.tgz
on a production Juniper MX router not during maintenance? Can I break something with this ...
- 87
2
votes
0
answers
1k
views
10G Interface on Juniper MX Stops Transmitting Output Optical Power
We have been facing an issue on Juniper MX series router. We have 10G interface on our router. Its does not matter whether interface is connected to DWDM or interface itself is a dark fiber. The end ...
- 1,088
0
votes
1
answer
297
views
Does JunOS breaks iBGP rules when using several routing instances?
I have setup with several routers where 1 is external eBGP router with 2 iBGP routers.
Routes are coming from eBGP peer are landing to Routing-Instance Ext and after that their are moved to inet.0 ...
- 123
5
votes
1
answer
729
views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
- 1,478
4
votes
2
answers
1k
views
Capturing LACP PDUs in an aggregated link on Juniper MX
We need to capture LACP PDUs on a member link of an aggregated bundle link on Juniper MX connected with other router via DWDM link and save the output in .pcap format using write-file knob.
Can ...
- 1,088
2
votes
1
answer
409
views
Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers
We are currently transporting an Ethernet Port using LDP Based Layer 2 VPN service (P2P PW) in Juniper MX.This P2P LDP PW is up and currently working. Below is the configuration against this:-
set ...
- 1,088
2
votes
1
answer
2k
views
Juniper QFX5110 - EVPN-VXLAN ethernet switching table is empty as soon as I enable VXLAN
I am trying to replace our existing Virtual Chassis way of doing mutli-chassis LAG with EVPN multi-homing using VXLAN. My understanding is we should be able to replace any LAG we have with evpn-...
- 1,478
1
vote
1
answer
1k
views
What's the meaning of `unit 0` and `family ethernet-switching`?
What's the meaning of `unit 0` and `family inet`?
With the above question, I learned the meaning of unit 0 and inet.
So what does ethernet-switching mean?
root@test> show configuration
...
...
...
- 13
1
vote
1
answer
338
views
ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3
I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)?
Example configuration:
set routing-instances VPN100 instance-type vrf
set routing-...
- 87
4
votes
2
answers
850
views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
- 1,088
1
vote
1
answer
245
views
Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types
We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
- 1,088
2
votes
1
answer
369
views
With regards to Juniper Networks , how does 'targeted-distribution' knob works?
Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers.
We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...
- 1,088
5
votes
3
answers
1k
views
Why does Junos find multiple next hops only for the active prefix in case BGP multipath is enabled?
I have a Juniper router named r3 with one established eBGP session to router t1(172.16.0.14) and with second established eBGP session to router t2(172.16.0.18). BGP configuration of r3 can be seen ...
- 1,177
2
votes
1
answer
1k
views
Juniper vMX Routers can't ping each other in GNS3
I have a couple of VMX Routers setup in GNS3 that are directly connected on their interface, ge-0/0/2 and they can't ping each other. PFB configuration. I can't seem to find the problem!
UPDATE: Added ...
- 241
3
votes
1
answer
598
views
Junos not automatically advertising an address configured on loopback interface to OSPF
According to JNCIP study guide(page 156) from 2003, the Junos should advertise a prefix on lo0.0 interface to OSPF if the RID is not manually configured:
JUNOS software automatically advertises a ...
- 1,177
0
votes
1
answer
222
views
PEM Modules Redundancy in Juniper SRX3600 series Firewall
We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
- 1,088
0
votes
1
answer
174
views
What's the point of aggregate routes when the default preference is reject?
studying for my JNCIS-SP and finally digging into the minutiae. I'm trying to grasp the default behavior of aggregate/summary routes. Why are these a reject? Maybe I'm just using them wrong, but here'...
- 3