Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

Filter by
Sorted by
Tagged with
2
votes
2answers
84 views

Junos “request system software validate” safety

Just want to clarify: is it safe to issue the command request system software validate /var/tmp/image.tgz on a production Juniper MX router not during maintenance? Can I break something with this ...
2
votes
0answers
26 views

10G Interface on Juniper MX Stops Transmitting Output Optical Power

We have been facing an issue on Juniper MX series router. We have 10G interface on our router. Its does not matter whether interface is connected to DWDM or interface itself is a dark fiber. The end ...
1
vote
1answer
60 views

Does JunOS breaks iBGP rules when using several routing instances?

I have setup with several routers where 1 is external eBGP router with 2 iBGP routers. Routes are coming from eBGP peer are landing to Routing-Instance Ext and after that their are moved to inet.0 ...
5
votes
1answer
124 views

Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000

I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
3
votes
2answers
133 views

Capturing LACP PDUs in an aggregated link on Juniper MX

We need to capture LACP PDUs on a member link of an aggregated bundle link on Juniper MX connected with other router via DWDM link and save the output in .pcap format using write-file knob. Can ...
1
vote
1answer
42 views

Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers

We are currently transporting an Ethernet Port using LDP Based Layer 2 VPN service (P2P PW) in Juniper MX.This P2P LDP PW is up and currently working. Below is the configuration against this:- set ...
2
votes
1answer
112 views

Juniper QFX5110 - EVPN-VXLAN ethernet switching table is empty as soon as I enable VXLAN

I am trying to replace our existing Virtual Chassis way of doing mutli-chassis LAG with EVPN multi-homing using VXLAN. My understanding is we should be able to replace any LAG we have with evpn-...
1
vote
1answer
60 views

What's the meaning of `unit 0` and `family ethernet-switching`?

What's the meaning of `unit 0` and `family inet`? With the above question, I learned the meaning of unit 0 and inet. So what does ethernet-switching mean? root@test> show configuration ... ... ...
1
vote
1answer
55 views

ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3

I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)? Example configuration: set routing-instances VPN100 instance-type vrf set routing-...
4
votes
2answers
92 views

RE Protection vs DDOS Protection in Juniper MX series routers

Hi Everyone, Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
1
vote
1answer
30 views

Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types

We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
1
vote
1answer
66 views

With regards to Juniper Networks , how does 'targeted-distribution' knob works?

Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers. We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...
5
votes
3answers
152 views

Why does Junos find multiple next hops only for the active prefix in case BGP multipath is enabled?

I have a Juniper router named r3 with one established eBGP session to router t1(172.16.0.14) and with second established eBGP session to router t2(172.16.0.18). BGP configuration of r3 can be seen ...
2
votes
1answer
116 views

Juniper vMX Routers can't ping each other in GNS3

I have a couple of VMX Routers setup in GNS3 that are directly connected on their interface, ge-0/0/2 and they can't ping each other. PFB configuration. I can't seem to find the problem! UPDATE: Added ...
2
votes
1answer
45 views

Junos not automatically advertising an address configured on loopback interface to OSPF

According to JNCIP study guide(page 156) from 2003, the Junos should advertise a prefix on lo0.0 interface to OSPF if the RID is not manually configured: JUNOS software automatically advertises a ...
0
votes
1answer
42 views

PEM Modules Redundancy in Juniper SRX3600 series Firewall

We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
0
votes
1answer
63 views

What's the point of aggregate routes when the default preference is reject?

studying for my JNCIS-SP and finally digging into the minutiae. I'm trying to grasp the default behavior of aggregate/summary routes. Why are these a reject? Maybe I'm just using them wrong, but here'...
0
votes
2answers
63 views

juniper router /var directory is full , deleting .tgz file in root directory

i need to free some space on my juniper router , in the root directory when i use >ls -lash command i see a .tgz file which is 405 M , my question , if i delete this will it cause any problem ?
0
votes
1answer
537 views

JunOS: How to copy the config file to TFTP server?

Model: j6350 JUNOS Software Release [12.1X46-D65.4] Is there an easy way to copy the config file to TFTP?
0
votes
2answers
119 views

Can't log in after admin password change

I reset my admin password with below command: #Set system login user admin authentication encrypted-password <new password> But now i can't login to my device, what can be the reason?
1
vote
0answers
25 views

router not learning the default route announced by RIPv2 if the same route exists via a better path

Let's say, that one has a following simple network topology: r1 ◄ ► r3 ▲ ▲ ▼ ▼ r2 ◄ ► r4 All four routers speak RIPv2 on all interfaces. r1 and r2 announce the default route which means ...
0
votes
0answers
49 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
3
votes
2answers
84 views

How to view a privilege level attached to a command in Junos?

According to Juniper documentation, each top-level CLI command and each configuration statement has an access privilege level associated with it. Is there a command which allows one to see the ...
2
votes
1answer
177 views

Juniper SRX Application Inactivity Timeout

Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
1
vote
1answer
79 views

Juniper vMX logical system

Can some one please tell that Juniper vMX supports how many logical system? Some one mentioned on Juniper forum that it supports 15 Logical systems but in case of 3 Logical systems configured , 2 were ...
0
votes
1answer
63 views

Junos: how to change BGP MED for secondary node?

I have vSRX cluster, which announce some protected addresses over IBGP. Each node has two sessions with two routers. (I use ge-0/0/1 and ge-7/0/1 for that). I found that if fail-over happens, and ...
0
votes
1answer
807 views

JunOS: FPC Major error alarm

I hope everyone is doing fine! This morning I've run into a problem. My uplink interface went down for unknown reasons. Upon checking system alarms I see this: show system alarms 1 alarms currently ...
1
vote
2answers
656 views

How to choose the most recommended Junos release for MX router

How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
0
votes
1answer
213 views

Managing a Juniper EX4300 In Band

Currently, our ex4300 are managed in band using irb.20. show configuration interfaces irb unit 20 { family inet6 { address 2001:db8:1::252/64; show configuration routing-options rib inet6.0 {...
2
votes
1answer
44 views

If accept IP address term before discard port term, will the IP's port still be discard?

In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT: dele@MX-RE0# show firewall filter DENY-EMAIL-PORT term ALLOW-IP { from { address { 102.100.100.1/32; ...
2
votes
0answers
35 views

CA certificate and Local certificate

There is something which is bothering me when i think about the CA cert and Local cert. Below are my queries which pertains to juniper but may be generic as well. 1) "request security pki ca-...
2
votes
1answer
67 views

Will the router crash when it is sent routes that it can't design to hold?

I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
0
votes
2answers
50 views

Why doesn't kernel itself had entire L2/L3 protocol stack? [closed]

I know kernel itself handles protocols in layer 2, layer3 and layer 4 at ipv4 stack, but why can't kernel itself doesn't have protocols such as STP/RSTP/xSTP/OSPF...etc, implemented. Why should we ...
0
votes
2answers
338 views

Deny ssh access from CPEs in all routing-instance - Juniper MX960

I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
1
vote
1answer
93 views

ex4200 bootup warning

we have some old juniper ex4200 in our stock and it shows following warning in console : --- JUNOS 12.3R3.4 built 2013-06-14 00:08:02 UTC *************************************************************...
0
votes
1answer
117 views

Junos, accidentally deleted a FIB entry, how to re-add?

while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
1
vote
1answer
40 views

Where the `term` and `policer` would appear?

Where the term and policer would appear? In juniper, there have filter, term and policer. I know the filter is under firewall, but how about the term and policer? how to understand the concept? I ...
3
votes
1answer
154 views

How to bypass when network speed over a special number in Juniper?

I have a requirement, such as I have 113.100.15.0/24 segment IP addresses. in Juniper M480 Router I connected to BGP-A(1G) and BGP-B(10G), by default the 113.100.15.0/24 out the Router it go ...
0
votes
1answer
310 views

What is the point of Junos outbound SSH service?

Junos outbound SSH service makes a SSH connection from network device to SSH server. What is the point of this? Does it allow the server to somehow make the SSH connection back to network device using ...
1
vote
1answer
2k views

what do em0, em1, em2 and em3 interfaces refer to on Juniper routers

Can someone explain what these interfaces are for? I know em0 is used as a management interface on the router to connect via ssh but why are the other two there? I have also noticed, sometimes they ...
2
votes
1answer
172 views

Wildcard to match JUNOS

Hi I am trying to match routing instances with names other then VPLS-* basically any name that starts with V* but is not VPLS-* I tried multiple different iterations of below but it seems to ignore ...
1
vote
1answer
420 views

Junos OS Upgrade on EX4200 Virtual Chassis

We have couple of EX4200s switches in Virtual Chassis mode running in the network. Each Virtual chassis has only 2 member switches. We are required to upgrade the Junos OS on each member switch in ...
0
votes
1answer
32 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
4
votes
3answers
565 views

JunOS, access mode interface asks for a vlan

I'm kinda new to networking so I'm going to do my best to try explain my issue. The issue that I have is that I want to delete all default configuration for my xe interface. Current configuration: ...
1
vote
1answer
216 views

How to do port mirroring in Juniper EX2200 switch

I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
2
votes
1answer
168 views

Juniper SRX sniffing

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug. I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
1
vote
1answer
398 views

EX3300 can not use irb.x, so how to access the layer-3 address?

EX3300 can not use irb.x, I have a Juniper EX4300 convergence layer Switch, in it there are irb interfaces. such as irb.3, and if I have another EX4300 for access layer, I can set vlan l3-interface ...
3
votes
1answer
43 views

Every `aex` have a `aex.0` in my QFX5100, why?

When i show interface terse in my Juniper switch qfx5100: .... ae29 up up ae29.0 up up inet 192.168.9.2/24 ae30 up up ae30.0 ...
0
votes
1answer
1k views

The irb interface can not ping in EX4300 itself

In my Juniper EX4300 I created a irb.2 with address 10.10.10.110/24 irb { unit 2 { family inet { address 10.10.11.110/24; // the snapshot is wrong, I changed to 10.10.11.110/...
1
vote
0answers
290 views

What's the uplink port shows in the `show interfaces terse`? [closed]

My Juniper EX4300 have four uplink port: but when I show interface, there only two xe port: Interface Admin Link gr-0/0/0 up up pfe-0/0/0 up up pfe-0/0/0.16383 up up ...

1
2 3 4 5 6