Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

Filter by
Sorted by
Tagged with
-1
votes
0answers
8 views

Implementation of JunOS regular expressions in C# [on hold]

I was wondering if there is any library that can be publicly used and implements Junos regex flavor for as path filters like below https://www.juniper.net/documentation/en_US/junos/topics/usage-...
0
votes
1answer
19 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
4
votes
3answers
65 views

JunOS, access mode interface asks for a vlan

I'm kinda new to networking so I'm going to do my best to try explain my issue. The issue that I have is that I want to delete all default configuration for my xe interface. Current configuration: ...
1
vote
1answer
43 views

How to do port mirroring in Juniper EX2200 switch

I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
1
vote
0answers
33 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
1
vote
1answer
50 views

EX3300 can not use irb.x, so how to access the layer-3 address?

EX3300 can not use irb.x, I have a Juniper EX4300 convergence layer Switch, in it there are irb interfaces. such as irb.3, and if I have another EX4300 for access layer, I can set vlan l3-interface ...
0
votes
0answers
46 views

I can not login to Juniper EX4300

I my heap-up EX4300 Switch, I set the system login user admin, and a plain-text password, this is my configuration: {master:0}[edit system] ...
3
votes
1answer
30 views

Every `aex` have a `aex.0` in my QFX5100, why?

When i show interface terse in my Juniper switch qfx5100: .... ae29 up up ae29.0 up up inet 192.168.9.2/24 ae30 up up ae30.0 ...
0
votes
1answer
196 views

The irb interface can not ping in EX4300 itself

In my Juniper EX4300 I created a irb.2 with address 10.10.10.110/24 irb { unit 2 { family inet { address 10.10.11.110/24; // the snapshot is wrong, I changed to 10.10.11.110/...
1
vote
0answers
57 views

What's the uplink port shows in the `show interfaces terse`?

My Juniper EX4300 have four uplink port: but when I show interface, there only two xe port: Interface Admin Link gr-0/0/0 up up pfe-0/0/0 up up pfe-0/0/0.16383 up up ...
1
vote
0answers
45 views

What's `irb` menaing? and what's the difference between it and `vlan`?

What's irb menaing? and what's the difference between vlan? I found some Junos version the vlan l3-interfaces should be vlan.xxx, and some times there is irb.xxx. irb { unit 0 { family ...
3
votes
1answer
56 views

Juniper Radius Configuration

I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
0
votes
1answer
79 views

How to change AD on Juniper router?

I have this route on my Juniper Router and some destinations have two routes: OSPF and BGP. I want to change the administrative distance for the BGP route so that it will be smaller than the OSPF ...
4
votes
1answer
52 views

Rate Limit on Main Aggregated Interface (AE) without applying on Unit Level in Juniper MX

I want to apply rate limit on Main Aggregated Interface (AE) without applying on unit level. We have a customer connected with our Juniper MX480 via 100G Interface. The single 100G interface is a part ...
4
votes
1answer
104 views

Dump traffic on routing-instance with a Juniper SRX firewall

A Juniper firewall can display data with the tcpdump command: % tcpdump -i ge-0/0/0 % tcpdump -i vlan10 However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
0
votes
1answer
48 views

How can a Juniper Router update its arp table?

I know the ARP table is cached data. On Juniper, we can use show arp to query the arp table: admin@juniper> show arp | match "16.23.43.75" ac:1f:6b:90:d1:ca 16.23....
4
votes
1answer
235 views

Advertise all static route except the default gateway with Juniper SRX firewall

With the following policy, all static routes are advertised via BGP to my neighbor: root@Nitrogen# show policy-options policy-statement bgp-export-policy { term export-statics { from ...
2
votes
0answers
46 views

Memory Utilization inceased on Routing Engine in Juniper MX

We recently faced high memory utilization on primary RE of Juniper MX. I have attached graph of Memory Utilization . It was as a result for copying some files from Backup RE to Primary RE (This is ...
2
votes
2answers
50 views

Junos[MX]: How to show VPLS instance associated with given subinterface

Suppose I have a subinterface with Vlan-vpls encapsulation, like this one: admin@router> show configuration interfaces ge-2/1/1 flexible-vlan-tagging; encapsulation flexible-ethernet-services; ...
2
votes
1answer
45 views

Juniper SRX Destination NAT for L2TP server

I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks. I've had some success with this post: https://forums.juniper.net/t5/...
4
votes
1answer
160 views

IPv6 default route not being installed from RA

Platform: Juniper SRX300 Version: JUNOS 15.1X49-D160.2 ISP: Midco I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
1
vote
0answers
88 views

mLACP / MC-LAG between Cisco / Juniper

I am working on a LDP signalled VPLS topology (picture) What I am trying to accomplish here is to establish a redundant connection to CE1. CE1 has both interfaces in a port-channel with an IP. My ...
0
votes
0answers
38 views

MPLS LSPs Unequal Cost Load Balancing in Juniper MX

I have confusion with regard to Juniper MPLS LSP unequal cost balancing. In Juniper we can define 2 or more LSPs between R1 and R2. With some LSPs taking the IGP best path (default behavior) while ...
3
votes
1answer
51 views

Site-2-Site Juniper SRX & Zywall

I've a Juniper SRX 340 on my datacenter and a Zywall USG 100 on my office. I'd like to build a site-to-site VPN between them, but after a lot of tries I can't still reach the result. This is the ...
3
votes
1answer
276 views

how to copy the config of one port to another port on juniper

how to copy the config of one port to another port on juniper ? 1) how to see all the configs that are applied to the port (ex: xe) 2) then how to copy the config of this port to another port ? ...
4
votes
1answer
122 views

Juniper EX4200 QinQ question

newbie here with a very similar question to one that was posted a couple of years back ... only slightly different (so, as the original question was asked so perfectly, I've copied it nearly verbatim ...
5
votes
0answers
156 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
1
vote
1answer
116 views

Rate-limiting policer on aggregated ethernet (AE) bundle

I am facing problem regarding firewall policier on Juniper MX platform. We have bundle link (AE Link) consisting of 2 x 10G links on which P2P IP is configured with customer for internet access. Now ...
4
votes
1answer
52 views

How can I retrieve a configuration programmatically on a JunOS device?

this is a part of the configuration of Juniper Router, it stands the vlans: family inet { address 3.189.239.238/29; address 3.189.239.254/28; } ...
0
votes
1answer
39 views

how to change a BGP path in juniper?

How to change the selected BGP route? I show the route 43.242.33.39, there shows 3 GBP paths. but I can not ping the ip(43.242.33.39). and can not traceroute it. how can I do with this?
5
votes
1answer
43 views

Junos how to execute a lot of repetitive commands?

In my Juniper qfx Switch, I want to execute many commands such as bellow: set vlans vlan77 vlan-id 77 set vlans vlan77 l3-interface irb.77 set vlans vlan78 vlan-id 78 set vlans vlan78 l3-interface ...
2
votes
1answer
59 views

Is it possible to do layer 2 port mirroring for family inet/inet6 interfaces in Juniper MX series routers?

I have connected two logical systems using logical tunnels like this: [edit] root@mx1# show logical-systems r1 interfaces lt-0/0/10 unit 10 encapsulation ethernet; peer-unit 80; family inet { ...
4
votes
1answer
47 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command 'set cli complete-on-space' for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...
3
votes
1answer
233 views

What is the difference between “set community” and “add community” in juniper?

I am trying to understand setting up policies on a juniper router. What is the difference between "add" and "set" community? set policy-options policy-statement MY_POLICY term MY_TERM then community ?...
4
votes
1answer
411 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
2
votes
1answer
78 views

Securing J-Web interface with user lockouts after multiple bad login attempts

I have a bit of an odd question that I can't seem to find much success in getting an answer via web searching. I'm wondering if there is a way to secure the J-Web interface with user lockouts after ...
3
votes
1answer
49 views

Find which VRF contains a route

I am trying to find a Juniper command that shows a list of VRF routing tables that contain a specific prefix / range. Does any one know if this is possible? Thanks.
2
votes
1answer
57 views

Routing and Switching & network monitoring

hi i am facing problem in juniper switch Model: ex4200-48t ,Junos: 15.1R6.7 . i deploy network monitoring check-MK software. there is showing errors of juniper switch ports and also show in logs file ...
2
votes
1answer
38 views

JunOS iBGP and return paths odd behaviour

I've got a somewhat basic iBGP configuration with a routing instance "global" between two Juniper vSRX's - each Juniper vSRX has an uplink of its own from a different transit provider with a default ...
5
votes
1answer
142 views

juniper advertising smaller subnets with a bigger static route in BGP

I have a /18 in RIB but I would like advertise smaller subnet in BGPfor specific reason to diff ISP etc. Is there a way to do it without creating a null route or static route. Is some way in policy ...
3
votes
1answer
941 views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
3
votes
1answer
43 views

How can I see where BGP is advertising a given prefix? (Junos)

I'm working in a complex BGP environment on Juniper MX480s. We have many peers in various routing instances advertising prefixes to us, and then we advertise a subset of those prefixes to a subset of ...
5
votes
1answer
69 views

Disadvantages or risks of leaving the the family inet6 configuration under interface configuration in Junos applied

I have a corner-case where I need to leave the family inet6 configuration under IFL present while hosts in that network should not use IPv6. This means, that the logical interface of a router will ...
1
vote
2answers
71 views

Juniper EX use upstream gateway

On a Juniper EX series how can I set the L3 IP range, but specify a gateway that is upstream? VLAN - Subnet - Gateway 10 - 10.1.10.0/24 - 10.1.10.1 20 - 10.1.20.0/24 - 10.1.20.1 If I do the config ...
4
votes
1answer
136 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
6
votes
2answers
177 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
5
votes
1answer
102 views

PP BGP Load Balancing with JUNOS

So we've got a couple of BGP upstream providers, whom both are providing us with their full internet routing tables. What we are now wanting to do, is utilize both providers, rather than just one ...
4
votes
1answer
169 views

What is the exact meaning of routes in Juniper tagged with @ and #

The routing table explains the meaning of these symbols as: @ = Routing Use Only, # = Forwarding Use Only + = Active Route, - = Last Active, * = Both However, I am looking for more detailed meaning ...
1
vote
1answer
37 views

Is it possible that IPv6 multicast address is shown in the “IPv6 Address” column of the “show ipv6 neighbors” command in Junos?

Is it possible that IPv6 multicast address(i.e address from ff00::/8 address block) is shown in the "IPv6 Address" column of the "show ipv6 neighbors" command in Junos?
2
votes
1answer
411 views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...