Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

0
votes
0answers
23 views

Destination NAT based on subdomain? [on hold]

I just inherited a Juniper SRX240h2 and I'm trying to set up some forwarding rules to some applications and servers inside our network. I'm starting with Git. We have a domain, say git.ourdomain.com ...
3
votes
1answer
18 views

how to copy the config of one port to another port on juniper

how to copy the config of one port to another port on juniper ? 1) how to see all the configs that are applied to the port (ex: xe) 2) then how to copy the config of this port to another port ? ...
3
votes
1answer
53 views

Juniper EX4200 QinQ question

newbie here with a very similar question to one that was posted a couple of years back ... only slightly different (so, as the original question was asked so perfectly, I've copied it nearly verbatim ...
4
votes
0answers
60 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
1
vote
1answer
56 views

Rate-limiting policer on aggregated ethernet (AE) bundle

I am facing problem regarding firewall policier on Juniper MX platform. We have bundle link (AE Link) consisting of 2 x 10G links on which P2P IP is configured with customer for internet access. Now ...
4
votes
1answer
42 views

How can I retrieve a configuration programmatically on a JunOS device?

this is a part of the configuration of Juniper Router, it stands the vlans: family inet { address 3.189.239.238/29; address 3.189.239.254/28; } ...
0
votes
0answers
149 views

how to configure ipsec with dynamic ipv6-pd on one side

my current network setup (simplified) looks like this The Current configuration (also simplified) permits traffic to flow between dc_dev and bo_dev and dc_man and bo_man freely and some special ...
0
votes
1answer
28 views

how to change a BGP path in juniper?

How to change the selected BGP route? I show the route 43.242.33.39, there shows 3 GBP paths. but I can not ping the ip(43.242.33.39). and can not traceroute it. how can I do with this?
4
votes
1answer
32 views

Junos how to execute a lot of repetitive commands?

In my Juniper qfx Switch, I want to execute many commands such as bellow: set vlans vlan77 vlan-id 77 set vlans vlan77 l3-interface irb.77 set vlans vlan78 vlan-id 78 set vlans vlan78 l3-interface ...
2
votes
1answer
52 views

Is it possible to do layer 2 port mirroring for family inet/inet6 interfaces in Juniper MX series routers?

I have connected two logical systems using logical tunnels like this: [edit] root@mx1# show logical-systems r1 interfaces lt-0/0/10 unit 10 encapsulation ethernet; peer-unit 80; family inet { ...
4
votes
1answer
44 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command 'set cli complete-on-space' for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...
2
votes
1answer
96 views

What is the difference between “set community” and “add community” in juniper?

I am trying to understand setting up policies on a juniper router. What is the difference between "add" and "set" community? set policy-options policy-statement MY_POLICY term MY_TERM then community ?...
4
votes
1answer
236 views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
2
votes
1answer
70 views

Securing J-Web interface with user lockouts after multiple bad login attempts

I have a bit of an odd question that I can't seem to find much success in getting an answer via web searching. I'm wondering if there is a way to secure the J-Web interface with user lockouts after ...
3
votes
1answer
46 views

Find which VRF contains a route

I am trying to find a Juniper command that shows a list of VRF routing tables that contain a specific prefix / range. Does any one know if this is possible? Thanks.
2
votes
1answer
50 views

Routing and Switching & network monitoring

hi i am facing problem in juniper switch Model: ex4200-48t ,Junos: 15.1R6.7 . i deploy network monitoring check-MK software. there is showing errors of juniper switch ports and also show in logs file ...
2
votes
1answer
31 views

JunOS iBGP and return paths odd behaviour

I've got a somewhat basic iBGP configuration with a routing instance "global" between two Juniper vSRX's - each Juniper vSRX has an uplink of its own from a different transit provider with a default ...
4
votes
1answer
73 views

juniper advertising smaller subnets with a bigger static route in BGP

I have a /18 in RIB but I would like advertise smaller subnet in BGPfor specific reason to diff ISP etc. Is there a way to do it without creating a null route or static route. Is some way in policy ...
3
votes
1answer
375 views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
2
votes
1answer
23 views

How can I see where BGP is advertising a given prefix? (Junos)

I'm working in a complex BGP environment on Juniper MX480s. We have many peers in various routing instances advertising prefixes to us, and then we advertise a subset of those prefixes to a subset of ...
5
votes
1answer
55 views

Disadvantages or risks of leaving the the family inet6 configuration under interface configuration in Junos applied

I have a corner-case where I need to leave the family inet6 configuration under IFL present while hosts in that network should not use IPv6. This means, that the logical interface of a router will ...
1
vote
2answers
41 views

Juniper EX use upstream gateway

On a Juniper EX series how can I set the L3 IP range, but specify a gateway that is upstream? VLAN - Subnet - Gateway 10 - 10.1.10.0/24 - 10.1.10.1 20 - 10.1.20.0/24 - 10.1.20.1 If I do the config ...
4
votes
1answer
40 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
6
votes
2answers
111 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
5
votes
1answer
74 views

PP BGP Load Balancing with JUNOS

So we've got a couple of BGP upstream providers, whom both are providing us with their full internet routing tables. What we are now wanting to do, is utilize both providers, rather than just one ...
4
votes
1answer
83 views

What is the exact meaning of routes in Juniper tagged with @ and #

The routing table explains the meaning of these symbols as: @ = Routing Use Only, # = Forwarding Use Only + = Active Route, - = Last Active, * = Both However, I am looking for more detailed meaning ...
1
vote
1answer
31 views

Is it possible that IPv6 multicast address is shown in the “IPv6 Address” column of the “show ipv6 neighbors” command in Junos?

Is it possible that IPv6 multicast address(i.e address from ff00::/8 address block) is shown in the "IPv6 Address" column of the "show ipv6 neighbors" command in Junos?
2
votes
1answer
162 views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...
1
vote
1answer
68 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
152 views

Config BGP policy for limit ISP path in Juniper MX 480 Router

Now we have a source IP14.135.4.0/24, we are involved in 5 different ISP, such as A, B, C, D, E. Now we want to access 14.135.4.0/24 not through the path of ISP B and ISP D, but through the other ...
3
votes
1answer
48 views

Interfaces Shutdown after JunOS Firmware Upgrade

So I've got some Juniper EX4500's. They're configured as a Virtual Chassis using the SFP+ ports. Due to the distance between racks, I wasn't able to use the VCP ports. Anyway, I've run into an ...
1
vote
2answers
148 views

How can I set the Juniper EX3300 Switch's Interface traffic speed?

How can I set the Juniper EX3300 Switch's Interface traffic speed? Before asking this question I have attempted many methods, all fail. first of all, set the Interface traffic speed is not the ...
2
votes
1answer
148 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
2
votes
1answer
75 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
4
votes
0answers
58 views

mp_reach_nlri bgp Update with 4-byte Community ASN?

I am BGP peering with a Juniper OS router. When starting the connection, my system advertises 4-byte ASN capability, which is accepted by the Juniper router: Jul 28 00:33:00.664202 BGP RECV 4 Byte ...
1
vote
1answer
960 views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
24 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
256 views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
1
vote
0answers
39 views

cannot push the ios for juniper ex3300 [closed]

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...
1
vote
1answer
95 views

Which regex flavor is used in the Junos CLI?

I'm trying to do some regex matching in the Junos CLI, like show configuration | match "fancy.pants(reg|ex)". I especially want to look for word boundaries and other character classes. I'm used to \b, ...
2
votes
1answer
611 views

What's the purpose of JUNOS' sfid process?

In the last few days, one Juniper EX-2200-48P has started complaining via syslog: Jun 21 12:50:03 ex2200-b sfid[717]: TASK_OS_MEMHIGH: Using 52118 KB of memory, 103 percent of available After a ...
4
votes
1answer
67 views

How does Junos distinguish that route is learned in Layer 3 or Layer 2 VPN environment?

As I understand from Understanding Junos OS Routing Tables document, then bgp.l3vpn.0/bgp.l3vpn-inet6.0 or bgp.l2vpn.0 tables contain routes learned from other PE routers in Layer 3 or Layer 2 VPN ...
3
votes
1answer
2k views

How to show the MAC table for interfaces on a Junos Virtual Chassis member?

I'm using this command to show the MAC address table on a Juniper EX4500 series Virtual Chassis with 2 members: show ethernet-switching table The results show only interfaces for the Virtual ...
3
votes
2answers
195 views

Junos complex regular expressions question

I saw this explanation in the JNCIS study guide book ch1 (community regex examples) and i'm a bit confused: ^65000:.{2,3}$ - AS number is 65000, community value is any 2 or 3 digit number ex. 65000:...
3
votes
1answer
303 views

Juniper SRX 240 Routing Configuration

I am working with a Juniper SRX 240 as an aggregation routing device, it connects a Desktop (Workstation) environment over an access switch port to several (4) server environments behind Cisco Layer 2 ...
1
vote
1answer
95 views

How do you schedule traffic that exits via a bridge-domain?

I've got a single MX router connected to two physical interfaces on an SRX chassis cluster - each interface being a member of a reth interface. In order to make this work, on the MX side I have the ...
1
vote
1answer
72 views

CanI prevent a secondary DHCP server on the LAN from taking over from SRX Juniper's DHCP?

I have admin access to a SRX550 Juniper, but I cannot get help from Juniper or joint their boards because the Juniper belongs to Century Link, not us. I have the following: # show system services ...
6
votes
1answer
229 views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
4
votes
2answers
364 views

Configure Juniper Router Advertisements

I am currently setting up IPv6 on my network ran by a SRX-240H2 as router. Besides others the router as an internal interface configured as follows: [edit interfaces ge-0/0/4 unit 802] clb@srx01-av# ...
2
votes
1answer
77 views

Juniper JunOS routing issue in v15.1.49

I have a Cisco Nexus that has a few vlans on it - total network size is 172.26.64.0/20 split into /24 vlans - each using the third octet as the vlan ID. It's IP is 172.26.x.254 on each vlan as the ...