Questions tagged [juniper-junos]
A tag for questions involving Juniper Networks Operating System (Junos) software.
299
questions
4
votes
0
answers
33
views
DHCPv6 Relay Agent on Juniper — Packets dropped: No SAFD
I tried to setup a DHCPv6 relay agent on a Juniper EX3400 switch. (SLAAC is unfortunately not enough for this use case.)
While the setup of the (non-v6) DHCP relay agent worked flawlessly and was well-...
- 171
0
votes
1
answer
26
views
How do I partition my on-premises network so one part can only access the external (internet)?
Currently, our setup is the following:
I need to make a change so there is no wireless access to our NAS. The Wifi "passthrough" needs to only be able to communicate with the external ...
- 101
2
votes
2
answers
84
views
How do I view BGP communities of received routes in IOS XE before they go through route-map import policy?
I want to see the communities that are attached to a route when I first receive the route before it goes through the BGP import route-map. In my instance the route-map strips communities off so I ...
- 21
0
votes
1
answer
46
views
Looking for more info on SNMP v3 Traps in Junos
I have a customer requirement where I need to be able to have Junos Space Network Management Platform be able to modify the severity of snmp traps on our routers and switches. So first I am trying to ...
- 157
3
votes
1
answer
125
views
Juniper SRX 340 route lookup failed
I've a strange issue on my Juniper; I've a policy to allow all traffic to a specific address behind it and, in effect, the policy works correctly.
All the traffic I send reach the destination, except ...
- 359
0
votes
0
answers
156
views
Juniper SNMPv3 Issue with SRX and EX devices; no traps received by Junos Space
I've been seeing an ongoing problem with Juniper EX4300s and SRX 345 and 1500s. The problem that we continually see is that our monitoring servers stop receiving traps from these devices. I've had ...
- 157
0
votes
2
answers
278
views
What services does MIB2D Daemon provide with respect to Juniper MX?
With respect to Juniper MX , can someone please explain what services does mib2d provide? There are many processes running on the Juniper MX depending on the services configured. These processes can ...
- 1,058
0
votes
1
answer
18
views
router-alert feature in DDoS prevention - MX series
I'm reading DDoS Prevention in MX series - 2nd. As mentioned in book "you can also configure whether an individual policer type should bypass that group’s aggregate policer"
=> I don't ...
2
votes
1
answer
71
views
Is it possible to limit the configuration rollback count in MX-series?
I tried set system max-configuration-rollbacks in mx480, but it shows unsupported platform .
##
## Warning: statement ignored: unsupported platform (mx480)
##
max-configuration-rollbacks 25;
is there ...
- 1,737
0
votes
1
answer
416
views
How to check the disk partitions usage of juniper device?
In this article : https://kb.juniper.net/InfoCenter/index?page=content&id=KB33032&cat=ROUTER_PRODUCTS&actp=LIST
root@PE1:/var/home/labroot # gpart show -p
=> 34 62533229 ada0 ...
- 1,128
2
votes
1
answer
173
views
Avoiding FPCs rebooting during RE switchover on Juniper EX8200 Switche
We have Juniper EX8208 chassis based switch running in a production environment. The switch has 2 REs running in active and standby role with RE0 being the primary routing engine. The device is ...
- 1,058
1
vote
2
answers
203
views
Can I delete the /var/rundb/private directory?
under my Juniper MX480.
/var/rundb/
the private directory occupy a large size,
root@LA-MX480-RE0:/var/rundb # du -cks * | sort -rn
16691128 total
16275464 private
74976 lr-juniper.db
74912 ...
- 1,737
1
vote
1
answer
149
views
QSFP28 doesn't recognize 4x25G breakout cable and link with 4 SFP28s
So to preface, I'm not a network engineer but am somehow in charge of getting our juniper QFX5200-48y configured. The goal is to get our FS brand SPF28's and QSFP28's to talk to each other on the ...
- 11
0
votes
1
answer
438
views
How does JunOS device boot up ? Juniper JunOS Boot Process
Sounds pretty basic , I could no where find answer for my below questions
Devices : srx 345 , ex3300 (VC)
Inside a junOS device where is the image store path/.tgz , so that I can copy from one to ...
- 11
0
votes
2
answers
227
views
PVLAN on juniper- native isolated VLAN & trunk
I'm trying to use PVLAN to isolate devices (servers) on a L2 network from each other. However, these devices are currently sit on trunk ports, because they have VLAN-aware IPMI interfaces.
My config ...
1
vote
1
answer
149
views
How do I rename a Junos BGP group?
Is it possible to change a special place in Junos rather than delete?
In my case I want to change the ebgp-AS1009 to ebgp-AS23100, as far as I know only can delete the group ebgp-AS1009 then re-set. ...
- 1,737
1
vote
2
answers
259
views
Questions about logical-systems of juniper
In my Juniper MX480, the logic-systems config is below:
[edit]
logical-systems {
r1 {
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
...
- 1,128
1
vote
1
answer
232
views
With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?
I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success.
Need to understand the ...
- 1,058
1
vote
1
answer
225
views
How to import a file into Junos main config file?
How to import a file into Junos config file?
there is a case, I have a long prefix-list in config file:
set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20
set logical-systems ...
- 1,737
4
votes
3
answers
589
views
Why eBGP don't need config local-address?
There is a manual for me to learn Junos.
you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
- 1,737
1
vote
1
answer
289
views
CB fabric links require upgrade/training after adding New FPC in Juniper MX480
We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
- 1,058
2
votes
1
answer
295
views
Juniper SRX Management Redirects
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI.
Since some time, when I try to access the Web board, I get the error "...
- 359
1
vote
1
answer
29
views
what's the differences of two `filter` under `edit firewall` in junos?
I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name].
what's the differences of them?
- 1,737
0
votes
1
answer
128
views
My Juniper router do not have j-web configuration
I follow Juniper docs:
I want to set up the j-web. but in my Junos do not have set system services web-management http.
admin@MX480-RE0# set system services ?
Possible completions:
<[Enter]&...
- 1,128
1
vote
1
answer
746
views
How to find invalid sessions on Juniper SRX 5800 series Firewall
In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
- 1,058
0
votes
1
answer
1k
views
Understanding the Burst Size against policer for 1G/10G interfaces in Juniper MX
We are facing one confusion with regards to burst size value against rate limit or policer in Juniper MX. Need to understand two things :-
(1) Is the burst size limit defined in firewall policer ...
- 1,058
2
votes
2
answers
770
views
Junos "request system software validate" safety
Just want to clarify: is it safe to issue the command
request system software validate /var/tmp/image.tgz
on a production Juniper MX router not during maintenance? Can I break something with this ...
- 87
2
votes
0
answers
846
views
10G Interface on Juniper MX Stops Transmitting Output Optical Power
We have been facing an issue on Juniper MX series router. We have 10G interface on our router. Its does not matter whether interface is connected to DWDM or interface itself is a dark fiber. The end ...
- 1,058
0
votes
1
answer
200
views
Does JunOS breaks iBGP rules when using several routing instances?
I have setup with several routers where 1 is external eBGP router with 2 iBGP routers.
Routes are coming from eBGP peer are landing to Routing-Instance Ext and after that their are moved to inet.0 ...
- 113
5
votes
1
answer
545
views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
- 1,458
3
votes
2
answers
805
views
Capturing LACP PDUs in an aggregated link on Juniper MX
We need to capture LACP PDUs on a member link of an aggregated bundle link on Juniper MX connected with other router via DWDM link and save the output in .pcap format using write-file knob.
Can ...
- 1,058
2
votes
1
answer
261
views
Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers
We are currently transporting an Ethernet Port using LDP Based Layer 2 VPN service (P2P PW) in Juniper MX.This P2P LDP PW is up and currently working. Below is the configuration against this:-
set ...
- 1,058
2
votes
1
answer
1k
views
Juniper QFX5110 - EVPN-VXLAN ethernet switching table is empty as soon as I enable VXLAN
I am trying to replace our existing Virtual Chassis way of doing mutli-chassis LAG with EVPN multi-homing using VXLAN. My understanding is we should be able to replace any LAG we have with evpn-...
- 1,458
1
vote
1
answer
739
views
What's the meaning of `unit 0` and `family ethernet-switching`?
What's the meaning of `unit 0` and `family inet`?
With the above question, I learned the meaning of unit 0 and inet.
So what does ethernet-switching mean?
root@test> show configuration
...
...
...
- 13
1
vote
1
answer
230
views
ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3
I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)?
Example configuration:
set routing-instances VPN100 instance-type vrf
set routing-...
- 87
4
votes
2
answers
571
views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
- 1,058
1
vote
1
answer
158
views
Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types
We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
- 1,058
2
votes
1
answer
295
views
With regards to Juniper Networks , how does 'targeted-distribution' knob works?
Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers.
We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...
- 1,058
5
votes
3
answers
756
views
Why does Junos find multiple next hops only for the active prefix in case BGP multipath is enabled?
I have a Juniper router named r3 with one established eBGP session to router t1(172.16.0.14) and with second established eBGP session to router t2(172.16.0.18). BGP configuration of r3 can be seen ...
- 1,295
2
votes
1
answer
854
views
Juniper vMX Routers can't ping each other in GNS3
I have a couple of VMX Routers setup in GNS3 that are directly connected on their interface, ge-0/0/2 and they can't ping each other. PFB configuration. I can't seem to find the problem!
UPDATE: Added ...
- 241
3
votes
1
answer
377
views
Junos not automatically advertising an address configured on loopback interface to OSPF
According to JNCIP study guide(page 156) from 2003, the Junos should advertise a prefix on lo0.0 interface to OSPF if the RID is not manually configured:
JUNOS software automatically advertises a ...
- 1,295
0
votes
1
answer
158
views
PEM Modules Redundancy in Juniper SRX3600 series Firewall
We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
- 1,058
0
votes
1
answer
99
views
What's the point of aggregate routes when the default preference is reject?
studying for my JNCIS-SP and finally digging into the minutiae. I'm trying to grasp the default behavior of aggregate/summary routes. Why are these a reject? Maybe I'm just using them wrong, but here'...
0
votes
2
answers
786
views
juniper router /var directory is full , deleting .tgz file in root directory
i need to free some space on my juniper router , in the root directory when i use >ls -lash command i see a .tgz file which is 405 M , my question , if i delete this will it cause any problem ?
- 11
0
votes
1
answer
5k
views
JunOS: How to copy the config file to TFTP server?
Model: j6350
JUNOS Software Release [12.1X46-D65.4]
Is there an easy way to copy the config file to TFTP?
- 155
0
votes
2
answers
1k
views
Can't log in after admin password change
I reset my admin password with below command:
#Set system login user admin authentication encrypted-password <new password>
But now i can't login to my device, what can be the reason?
- 11
0
votes
0
answers
30
views
router not learning the default route announced by RIPv2 if the same route exists via a better path
Let's say, that one has a following simple network topology:
r1 ◄ ► r3
▲ ▲
▼ ▼
r2 ◄ ► r4
All four routers speak RIPv2 on all interfaces. r1 and r2 announce the default route which means ...
- 1,295
0
votes
1
answer
276
views
NTP Sync issues between Palo Alto 3260 and Juniper MX10003
I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows:
[edit deviceconfig system ntp-servers]
...
- 157
2
votes
2
answers
601
views
How to view a privilege level attached to a command in Junos?
According to Juniper documentation, each top-level CLI command and each configuration statement has an access privilege level associated with it. Is there a command which allows one to see the ...
- 1,295
2
votes
1
answer
672
views
Juniper SRX Application Inactivity Timeout
Will the inactivity timeout set for the application "TCP-ALL" of 900 trump the default value of 1800 for junos-ssh if the application-set were matched in a security policy? Does it matter if the order ...
- 157