Questions tagged [juniper-junos]
A tag for questions involving Juniper Networks Operating System (Junos) software.
311
questions
0
votes
1
answer
64
views
What is "Laundry"-memory on Juniper MX systems?
When displaying the current memory usage on Juniper MX systems (running JunOS 21.4, in case it should matter), I do see an entry for Laundry. For example:
> show system processes extensive
Mem: ...
0
votes
0
answers
43
views
Preconfigured VCF w/ QFX5100 doesn't auto-provision some vc-ports
I am currently (trying) to deploy a Virtual Chassis Fabric with QFX5100.
I'm using the pre-provisioned model and got the stack working for now - however, some of the vc-ports do not auto-configure ...
1
vote
0
answers
37
views
JunOS tagging aggregate route from more specific route - bgp communities
I have a certain use case with rtbh for the following:
A /32 route (say 10.1.1.1/32) is injected into the network with a specific bgp community
I'd like to match the aggregate prefix that /32 belongs ...
0
votes
0
answers
24
views
juniper access list for ipv6 under ex4200
I have a ex4200-48p and it is acting as my top of rack switch and i have the following firewall filter under each port :
set firewall family ethernet-switching filter port24 term layer2 from ether-...
0
votes
1
answer
183
views
juniper ex4200 broadcast and multicast storm control
i have applied the following configuration on my juniper ex4200-48p :
set ethernet-switching-options storm-control action-shutdown
set ethernet-switching-options storm-control interface ge-0/0/24.0 ...
0
votes
1
answer
32
views
Juniper ex4200 neighbour discovery rate limit (IPv6)
We have a few Juniper EX4200 and they are working in layer2 , Is there anyway to rate limit the neighbour discovery on these platforms to prevent dos attacks?
In ex4200 we can set mac address count ...
0
votes
0
answers
81
views
Configure DHCP snooping with no option 82 on a pure layer 2 Juniper ex2300 using ELS
I have a Juniper ex2300 switch in a mostly-cisco environment (no MIST). On my cisco devices, I have DHCP snooping configured per vlan, with option 82 disabled on the access-layer switches because they ...
3
votes
2
answers
223
views
ethernet switching table is empty | vQFX | EVE-NG
I'm new to Juniper switches. I configured vlan10 and assigned two ports to the relevant vlan.
root> show vlans
Routing instance VLAN name Tag Interfaces
default-switch vlan10 ...
2
votes
1
answer
194
views
Juniper EX4650 pass double tags on trunk interface
Example topology:
custA / custB > switch1 > EX4650 > switch2 > custA / custB
custA outer tag 101
custB outer tag 102
The EX4650 should allow any inner tag on both vlan 101 and 102.
Dot1Q ...
0
votes
1
answer
249
views
The IRB.30 Interface cannot be pinged and i cannot SSH into the given IP
All configuration is done via Juniper Mist.
In my Juniper EX4300-MP48 I created an interface IRB.30 with address 192.168.31.200
irb {
unit 30 {
description it;
family inet {
...
0
votes
0
answers
86
views
Nested route policy failing
Any thoughts on why ::/0 is accepted in this example?
Per these documents, the accept in the sub policy means it will match the condition in the parent and action in the parent will apply. But this ...
0
votes
2
answers
122
views
ACX2100 cannot boot to new version
My customer upgrades the version for ACX2100 from 12.3X54-D34.1 to 20.4R3-S2.6.
After adding software, they checked JUNOS Installation Software already 20.4R3-S2.6.
vipa@BGG0333SRT03> show version |...
6
votes
0
answers
260
views
DHCPv6 Relay Agent on Juniper — Packets dropped: No SAFD
I tried to setup a DHCPv6 relay agent on a Juniper EX3400 switch. (SLAAC is unfortunately not enough for this use case.)
While the setup of the (non-v6) DHCP relay agent worked flawlessly and was well-...
0
votes
1
answer
120
views
How do I partition my on-premises network so one part can only access the external (internet)?
Currently, our setup is the following:
I need to make a change so there is no wireless access to our NAS. The Wifi "passthrough" needs to only be able to communicate with the external ...
2
votes
2
answers
939
views
How do I view BGP communities of received routes in IOS XE before they go through route-map import policy?
I want to see the communities that are attached to a route when I first receive the route before it goes through the BGP import route-map. In my instance the route-map strips communities off so I ...
0
votes
1
answer
99
views
Looking for more info on SNMP v3 Traps in Junos
I have a customer requirement where I need to be able to have Junos Space Network Management Platform be able to modify the severity of snmp traps on our routers and switches. So first I am trying to ...
3
votes
1
answer
335
views
Juniper SRX 340 route lookup failed
I've a strange issue on my Juniper; I've a policy to allow all traffic to a specific address behind it and, in effect, the policy works correctly.
All the traffic I send reach the destination, except ...
0
votes
0
answers
523
views
Juniper SNMPv3 Issue with SRX and EX devices; no traps received by Junos Space
I've been seeing an ongoing problem with Juniper EX4300s and SRX 345 and 1500s. The problem that we continually see is that our monitoring servers stop receiving traps from these devices. I've had ...
0
votes
2
answers
829
views
What services does MIB2D Daemon provide with respect to Juniper MX?
With respect to Juniper MX , can someone please explain what services does mib2d provide? There are many processes running on the Juniper MX depending on the services configured. These processes can ...
0
votes
1
answer
50
views
router-alert feature in DDoS prevention - MX series
I'm reading DDoS Prevention in MX series - 2nd. As mentioned in book "you can also configure whether an individual policer type should bypass that group’s aggregate policer"
=> I don't ...
2
votes
1
answer
128
views
Is it possible to limit the configuration rollback count in MX-series?
I tried set system max-configuration-rollbacks in mx480, but it shows unsupported platform .
##
## Warning: statement ignored: unsupported platform (mx480)
##
max-configuration-rollbacks 25;
is there ...
0
votes
1
answer
1k
views
How to check the disk partitions usage of juniper device?
In this article : https://kb.juniper.net/InfoCenter/index?page=content&id=KB33032&cat=ROUTER_PRODUCTS&actp=LIST
root@PE1:/var/home/labroot # gpart show -p
=> 34 62533229 ada0 ...
2
votes
1
answer
601
views
Avoiding FPCs rebooting during RE switchover on Juniper EX8200 Switche
We have Juniper EX8208 chassis based switch running in a production environment. The switch has 2 REs running in active and standby role with RE0 being the primary routing engine. The device is ...
1
vote
2
answers
498
views
Can I delete the /var/rundb/private directory?
under my Juniper MX480.
/var/rundb/
the private directory occupy a large size,
root@LA-MX480-RE0:/var/rundb # du -cks * | sort -rn
16691128 total
16275464 private
74976 lr-juniper.db
74912 ...
1
vote
1
answer
459
views
QSFP28 doesn't recognize 4x25G breakout cable and link with 4 SFP28s
So to preface, I'm not a network engineer but am somehow in charge of getting our juniper QFX5200-48y configured. The goal is to get our FS brand SPF28's and QSFP28's to talk to each other on the ...
0
votes
1
answer
862
views
How does JunOS device boot up ? Juniper JunOS Boot Process
Sounds pretty basic , I could no where find answer for my below questions
Devices : srx 345 , ex3300 (VC)
Inside a junOS device where is the image store path/.tgz , so that I can copy from one to ...
0
votes
2
answers
554
views
PVLAN on juniper- native isolated VLAN & trunk
I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces.
My config ...
1
vote
1
answer
316
views
How do I rename a Junos BGP group?
Is it possible to change a special place in Junos rather than delete?
In my case I want to change the ebgp-AS1009 to ebgp-AS23100, as far as I know only can delete the group ebgp-AS1009 then re-set. ...
1
vote
2
answers
502
views
Questions about logical-systems of juniper
In my Juniper MX480, the logic-systems config is below:
[edit]
logical-systems {
r1 {
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
...
1
vote
1
answer
389
views
With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?
I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success.
Need to understand the ...
1
vote
1
answer
1k
views
How to import a file into Junos main config file?
How to import a file into Junos config file?
there is a case, I have a long prefix-list in config file:
set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20
set logical-systems ...
4
votes
3
answers
923
views
Why eBGP don't need config local-address?
There is a manual for me to learn Junos.
you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
1
vote
1
answer
608
views
CB fabric links require upgrade/training after adding New FPC in Juniper MX480
We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
2
votes
1
answer
469
views
Juniper SRX Management Redirects
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI.
Since some time, when I try to access the Web board, I get the error "...
1
vote
1
answer
59
views
what's the differences of two `filter` under `edit firewall` in junos?
I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name].
what's the differences of them?
0
votes
1
answer
315
views
My Juniper router do not have j-web configuration
I follow Juniper docs:
I want to set up the j-web. but in my Junos do not have set system services web-management http.
admin@MX480-RE0# set system services ?
Possible completions:
<[Enter]&...
1
vote
1
answer
1k
views
How to find invalid sessions on Juniper SRX 5800 series Firewall
In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
0
votes
1
answer
2k
views
Understanding the Burst Size against policer for 1G/10G interfaces in Juniper MX
We are facing one confusion with regards to burst size value against rate limit or policer in Juniper MX. Need to understand two things :-
(1) Is the burst size limit defined in firewall policer ...
2
votes
2
answers
1k
views
Junos "request system software validate" safety
Just want to clarify: is it safe to issue the command
request system software validate /var/tmp/image.tgz
on a production Juniper MX router not during maintenance? Can I break something with this ...
2
votes
0
answers
1k
views
10G Interface on Juniper MX Stops Transmitting Output Optical Power
We have been facing an issue on Juniper MX series router. We have 10G interface on our router. Its does not matter whether interface is connected to DWDM or interface itself is a dark fiber. The end ...
0
votes
1
answer
333
views
Does JunOS breaks iBGP rules when using several routing instances?
I have setup with several routers where 1 is external eBGP router with 2 iBGP routers.
Routes are coming from eBGP peer are landing to Routing-Instance Ext and after that their are moved to inet.0 ...
5
votes
1
answer
836
views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
4
votes
2
answers
1k
views
Capturing LACP PDUs in an aggregated link on Juniper MX
We need to capture LACP PDUs on a member link of an aggregated bundle link on Juniper MX connected with other router via DWDM link and save the output in .pcap format using write-file knob.
Can ...
2
votes
1
answer
470
views
Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers
We are currently transporting an Ethernet Port using LDP Based Layer 2 VPN service (P2P PW) in Juniper MX.This P2P LDP PW is up and currently working. Below is the configuration against this:-
set ...
2
votes
1
answer
2k
views
Juniper QFX5110 - EVPN-VXLAN ethernet switching table is empty as soon as I enable VXLAN
I am trying to replace our existing Virtual Chassis way of doing mutli-chassis LAG with EVPN multi-homing using VXLAN. My understanding is we should be able to replace any LAG we have with evpn-...
1
vote
1
answer
2k
views
What's the meaning of `unit 0` and `family ethernet-switching`?
What's the meaning of `unit 0` and `family inet`?
With the above question, I learned the meaning of unit 0 and inet.
So what does ethernet-switching mean?
root@test> show configuration
...
...
...
1
vote
1
answer
381
views
ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3
I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)?
Example configuration:
set routing-instances VPN100 instance-type vrf
set routing-...
4
votes
2
answers
996
views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
1
vote
1
answer
299
views
Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types
We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
2
votes
1
answer
406
views
With regards to Juniper Networks , how does 'targeted-distribution' knob works?
Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers.
We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...