Questions tagged [juniper-junos]
A tag for questions involving Juniper Networks Operating System (Junos) software.
283
questions
1
vote
2answers
19 views
Questions about logical-systems of juniper
In my Juniper MX480, the logic-systems config is below:
[edit]
logical-systems {
r1 {
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
...
1
vote
1answer
32 views
With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?
I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success.
Need to understand the ...
1
vote
1answer
67 views
How to import a file into Junos main config file?
How to import a file into Junos config file?
there is a case, I have a long prefix-list in config file:
set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20
set logical-systems ...
4
votes
3answers
418 views
Why eBGP don't need config local-address?
There is a manual for me to learn Junos.
you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
1
vote
1answer
38 views
CB fabric links require upgrade/training after adding New FPC in Juniper MX480
We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
1
vote
1answer
43 views
Juniper SRX Management Redirects
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI.
Since some time, when I try to access the Web board, I get the error "...
1
vote
1answer
16 views
what's the differences of two `filter` under `edit firewall` in junos?
I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name].
what's the differences of them?
0
votes
1answer
44 views
My Juniper router do not have j-web configuration
I follow Juniper docs:
I want to set up the j-web. but in my Junos do not have set system services web-management http.
admin@MX480-RE0# set system services ?
Possible completions:
<[Enter]&...
1
vote
1answer
42 views
How to find invalid sessions on Juniper SRX 5800 series Firewall
In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
0
votes
1answer
95 views
Understanding the Burst Size against policer for 1G/10G interfaces in Juniper MX
We are facing one confusion with regards to burst size value against rate limit or policer in Juniper MX. Need to understand two things :-
(1) Is the burst size limit defined in firewall policer ...
2
votes
2answers
119 views
Junos “request system software validate” safety
Just want to clarify: is it safe to issue the command
request system software validate /var/tmp/image.tgz
on a production Juniper MX router not during maintenance? Can I break something with this ...
2
votes
0answers
66 views
10G Interface on Juniper MX Stops Transmitting Output Optical Power
We have been facing an issue on Juniper MX series router. We have 10G interface on our router. Its does not matter whether interface is connected to DWDM or interface itself is a dark fiber. The end ...
1
vote
3answers
3k views
Juniper EX how to clear route forwarding table?
After layer 3 routing a large IPv6 assignment on an EX Juniper switch, the route forwarding table filled up and some entries corrupted or became otherwise invalid. We want to clear the whole table. ...
0
votes
2answers
169 views
Can't log in after admin password change
I reset my admin password with below command:
#Set system login user admin authentication encrypted-password <new password>
But now i can't login to my device, what can be the reason?
2
votes
1answer
227 views
Juniper QFX5110 - EVPN-VXLAN ethernet switching table is empty as soon as I enable VXLAN
I am trying to replace our existing Virtual Chassis way of doing mutli-chassis LAG with EVPN multi-homing using VXLAN. My understanding is we should be able to replace any LAG we have with evpn-...
4
votes
1answer
712 views
Partially Faulty QSFP+ breakout port - possible config error?
Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2
Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
0
votes
1answer
74 views
Does JunOS breaks iBGP rules when using several routing instances?
I have setup with several routers where 1 is external eBGP router with 2 iBGP routers.
Routes are coming from eBGP peer are landing to Routing-Instance Ext and after that their are moved to inet.0 ...
0
votes
1answer
67 views
What's the point of aggregate routes when the default preference is reject?
studying for my JNCIS-SP and finally digging into the minutiae. I'm trying to grasp the default behavior of aggregate/summary routes. Why are these a reject? Maybe I'm just using them wrong, but here'...
5
votes
1answer
157 views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
3
votes
2answers
237 views
Capturing LACP PDUs in an aggregated link on Juniper MX
We need to capture LACP PDUs on a member link of an aggregated bundle link on Juniper MX connected with other router via DWDM link and save the output in .pcap format using write-file knob.
Can ...
1
vote
1answer
72 views
Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers
We are currently transporting an Ethernet Port using LDP Based Layer 2 VPN service (P2P PW) in Juniper MX.This P2P LDP PW is up and currently working. Below is the configuration against this:-
set ...
1
vote
1answer
130 views
What's the meaning of `unit 0` and `family ethernet-switching`?
What's the meaning of `unit 0` and `family inet`?
With the above question, I learned the meaning of unit 0 and inet.
So what does ethernet-switching mean?
root@test> show configuration
...
...
...
1
vote
1answer
79 views
ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3
I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)?
Example configuration:
set routing-instances VPN100 instance-type vrf
set routing-...
5
votes
3answers
259 views
Why does Junos find multiple next hops only for the active prefix in case BGP multipath is enabled?
I have a Juniper router named r3 with one established eBGP session to router t1(172.16.0.14) and with second established eBGP session to router t2(172.16.0.18). BGP configuration of r3 can be seen ...
4
votes
2answers
170 views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
1
vote
1answer
56 views
Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types
We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
1
vote
1answer
119 views
With regards to Juniper Networks , how does 'targeted-distribution' knob works?
Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers.
We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...
2
votes
1answer
219 views
Juniper vMX Routers can't ping each other in GNS3
I have a couple of VMX Routers setup in GNS3 that are directly connected on their interface, ge-0/0/2 and they can't ping each other. PFB configuration. I can't seem to find the problem!
UPDATE: Added ...
0
votes
1answer
1k views
JunOS: FPC Major error alarm
I hope everyone is doing fine!
This morning I've run into a problem. My uplink interface went down for unknown reasons.
Upon checking system alarms I see this:
show system alarms
1 alarms currently ...
2
votes
1answer
67 views
Junos not automatically advertising an address configured on loopback interface to OSPF
According to JNCIP study guide(page 156) from 2003, the Junos should advertise a prefix on lo0.0 interface to OSPF if the RID is not manually configured:
JUNOS software automatically advertises a ...
0
votes
1answer
75 views
Junos: how to change BGP MED for secondary node?
I have vSRX cluster, which announce some protected addresses over IBGP. Each node has two sessions with two routers. (I use ge-0/0/1 and ge-7/0/1 for that).
I found that if fail-over happens, and ...
0
votes
1answer
56 views
PEM Modules Redundancy in Juniper SRX3600 series Firewall
We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
0
votes
2answers
93 views
juniper router /var directory is full , deleting .tgz file in root directory
i need to free some space on my juniper router , in the root directory when i use >ls -lash command i see a .tgz file which is 405 M , my question , if i delete this will it cause any problem ?
2
votes
1answer
239 views
Juniper SRX sniffing
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug.
I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
0
votes
1answer
1k views
JunOS: How to copy the config file to TFTP server?
Model: j6350
JUNOS Software Release [12.1X46-D65.4]
Is there an easy way to copy the config file to TFTP?
4
votes
1answer
817 views
IPv6 default route not being installed from RA
Platform: Juniper SRX300
Version: JUNOS 15.1X49-D160.2
ISP: Midco
I currently have an issue where the IPv6 default route is not being installed from the CMTS RA. Try as I might, I cannot get ...
1
vote
1answer
2k views
what do em0, em1, em2 and em3 interfaces refer to on Juniper routers
Can someone explain what these interfaces are for? I know em0 is used as a management interface on the router to connect via ssh but why are the other two there? I have also noticed, sometimes they ...
0
votes
0answers
25 views
router not learning the default route announced by RIPv2 if the same route exists via a better path
Let's say, that one has a following simple network topology:
r1 ◄ ► r3
▲ ▲
▼ ▼
r2 ◄ ► r4
All four routers speak RIPv2 on all interfaces. r1 and r2 announce the default route which means ...
0
votes
0answers
77 views
NTP Sync issues between Palo Alto 3260 and Juniper MX10003
I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows:
[edit deviceconfig system ntp-servers]
...
2
votes
2answers
131 views
How to view a privilege level attached to a command in Junos?
According to Juniper documentation, each top-level CLI command and each configuration statement has an access privilege level associated with it. Is there a command which allows one to see the ...
2
votes
1answer
240 views
Juniper SRX Application Inactivity Timeout
Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
1
vote
1answer
116 views
Juniper vMX logical system
Can some one please tell that Juniper vMX supports how many logical system? Some one mentioned on Juniper forum that it supports 15 Logical systems but in case of 3 Logical systems configured , 2 were ...
1
vote
2answers
837 views
How to choose the most recommended Junos release for MX router
How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
0
votes
1answer
351 views
Managing a Juniper EX4300 In Band
Currently, our ex4300 are managed in band using irb.20.
show configuration interfaces irb
unit 20 {
family inet6 {
address 2001:db8:1::252/64;
show configuration routing-options
rib inet6.0 {...
2
votes
1answer
44 views
If accept IP address term before discard port term, will the IP's port still be discard?
In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT:
dele@MX-RE0# show firewall filter DENY-EMAIL-PORT
term ALLOW-IP {
from {
address {
102.100.100.1/32;
...
2
votes
0answers
35 views
CA certificate and Local certificate
There is something which is bothering me when i think about the CA cert and Local cert.
Below are my queries which pertains to juniper but may be generic as well.
1) "request security pki ca-...
2
votes
1answer
67 views
Will the router crash when it is sent routes that it can't design to hold?
I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
4
votes
2answers
2k views
Can you only allow local login when TACACS is unavailable on a Juniper?
I'm pretty sure you can do this in the Cisco world, but haven't found a way to do this on a Juniper device. Is there a way to restrict local accounts from being accessed if the router has access to ...
2
votes
1answer
2k views
ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS
My device is EX4300.
I use the bellow command for upgrade the JUNOS version by:
request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz
I get the bellow error:...
4
votes
1answer
203 views
mp_reach_nlri bgp Update with 4-byte Community ASN?
I am BGP peering with a Juniper OS router. When starting the connection, my system advertises 4-byte ASN capability, which is accepted by the Juniper router:
Jul 28 00:33:00.664202 BGP RECV 4 Byte ...
