Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

Filter by
Sorted by
Tagged with
1
vote
2answers
3k views

JunOS ssh debugging

Our Junipers will not accept my ssh keys when I provide them from my favorite Windows client. On a FreeBSD machine, I would restart sshd with the -d flag and just watch the output to discover why the ...
1
vote
0answers
208 views

Juniper filter OSPF type-7 routes on ABR

Somebody knows why NSSA external routes filtering on ABR is so unuseful on JunOS? For example I want to filter all routes coming from NSSA area 0.0.0.3 except "10.0.0.0/8 orlonger" routes. To do that ...
1
vote
1answer
737 views

Juniper EX4200 firewall filter applied to trunk port not matching specific VLAN

EX4200 switch has a firewall filter applied to input of trunk port. Intent is to rate-limit (police) input bandwidth per VLAN id. However the 'show firewall' command points out that policing is ...
1
vote
1answer
872 views

SNMP on Juniper SRX Chassis Cluster does not show node1

I am trying to monitor an SRX (345) chassis cluster, via SNMP. The JUNOS documentation suggests that doing snmpwalk over jnxContentsDescr on the primary node should return details about all nodes. In ...
1
vote
1answer
37 views

What are some steps you would consider when conducting a major code upgrade to Juniper equipment in a production environment?

I am responsible for a project conducting a major code upgrade on our core/aggregation and distribution layer switches along with our ISP routers. We run all Juniper Routers and switches minus a few ...
3
votes
1answer
990 views

Juniper firmware upgrade MX80/480 and 960 junos 11.4R7>>>13.3R9

Ive been tasked with writing the SOp along with implementing the above task of upgrading our core/aggregation and ISP routers in my environment. Were currently running 11.4R7 and after speaking with ...
2
votes
2answers
6k views

FTP File copy command in Juniper showing [error: file-fetch failed error: could not fetch local copy of file]?

I Have two Juniper ACX 2200 Series Routers connected back to back and One Router running latest OS, But other is running Old OS, I want to copy Latest OS from One Junos to another Junos Router, I ...
4
votes
1answer
3k views

Juniper route leak from VRF to global RT using rib-groups

I'm trying to export routes from VRF.inet.0 to inet.0 using rib-groups. Routes are placed into VRF.inet.0 from another PE by MP-BGP (family inet-vpn) session. That's rib group configuration: rib-...
2
votes
1answer
847 views

Juniper SRX300 cluster

I'm trying to set up chassis cluster on Juniper SRX300 (Junos 15.1X49-D45). And I wasn't able to find any documentation on this matter. I was able to run the command: set chassis cluster cluster-...
2
votes
1answer
614 views

What do the instal and active options do when adding a static route in JunOS?

In the command completion there is: active Remove inactive route from forwarding table [...] install Install route into forwarding table I can create static routes ...
2
votes
1answer
158 views

Can't copy files within ERX

I use FileZilla FTP client to connect to my equipment in order to get files from there. I tried same process in my ERX, without success. Below is a view of my directory bras-2.cm#dir Please wait... ...
1
vote
1answer
497 views

How to collect core dump files in Juniper ERX

For troubleshooting purposes, I need to collect some files from my ERX.(by ftp) Below is the content of my directory ERX#dir *** Active/standby file systems are being synchronized. *** ...
1
vote
2answers
1k views

FTP on Juniper MX series

Has anyone successfully used FTP on a Juniper Device. reading their documentation, the method of using it is: file copy <source> <destination> in my case: file copy /var/tmp/testdoc ftp:...
1
vote
2answers
2k views

Juniper SRX Lower Maximum Sessions

On my SRX 1400 I see maximum sessions here: show security flow session summary This is what shows up now: Unicast-sessions: 46795 Multicast-sessions: 0 Services-offload-sessions: 0 Failed-sessions: ...
3
votes
1answer
267 views

DHCP Relay Juniper on two EX2200

I have a two EX2200 switches that are connected to each other using OSPF routing. One switch is configured as a dhcp server and gives out IP addresses to devices on local interfaces. I set up DHCP ...
3
votes
1answer
2k views

set advertised route on Juniper

I would like to understand where advertised route are set in JunOS. For example, in OpenBGPd it's easy, you simply set "network 1.2.3.0/24". What is the equivalent in JunOS ? I didn't find anything ...
3
votes
1answer
1k views

Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?

I have multiple q-in-q S-VLANs assigned to the trunk port ge-0/0/0. How can I read SNMP traffic counters for a specific VLAN id (S-VLAN) on that trunk port? Hardware is Juniper EX4200-24F. For ...
0
votes
1answer
90 views

add wifi adapter to juniper Olive or vMX [closed]

Can I add a wifi adapter to a juniper olive or vMX vm so it thinks its a regular Ethernet adapter? Edit: I would like to do this: have a junos Olive/vMX VM running on an esxi host connect a wifi ...
3
votes
4answers
7k views

Is Olive the same as vMX?

In the past I spun up JunOS Olive in my home lab to learn JunOS. But it looks like Juniper has something called vMX. Is this comparable to vMX? Obviously its not free, but for learning purposes (...
4
votes
1answer
647 views

Juniper EX4200 how to select s-vlan from c-vlan on dot1q-tunneling access port?

How do I tell Juniper EX4200 to push specific S-VLAN based on C-VLAN on q-in-q (dot1q-tunneling) port? For instance I want to instruct EX4200 to perform Q-in-Q using these rules: 1) If a single-tag ...
1
vote
3answers
4k views

Cannot commit on Junos

I am learning Junos. I applied the following command on my switch: hw_tanyu_n@yamsc-a-DC-R1R13-asw-1.cm> configure Entering configuration mode The configuration has been changed but not committed ...
1
vote
1answer
2k views

Setup layer-2 bridging between two Juniper vMX

I tried to setup simple L2 bridging on vMX.2 vMX devices: two VLANs (two bridging domains) per device, and trunk links between both. The end devices, VPCs, attached to access ports on each vMX, were ...
1
vote
2answers
6k views

How to view old Log messages on Junos

I am currently trying to trace the syslogs on Junos I ran the "show log" command and the resulting messages I see don't contain that for the date I wish to check. I even ran the command "show log ...
3
votes
1answer
3k views

Alarm: CB 2 Fabric Chip 1 Not Online

I am running MX960 for a while now, and I see the minor alarms. Please can someone help on how to clear them? 3 alarms currently active Alarm time Class Description 2015-07-13 03:22:54 WAT Minor CB ...
1
vote
1answer
560 views

Juniper JUNOS security policy incorrectly blocking traffic that is explicitly permitted

Running Juniper SRX device. Within a routing-instance, I removed two /25 static routes and replaced it with a single /24 static route. This /24 static route starts on the same IP, just a bigger ...
2
votes
2answers
1k views

Is there any reason to have a bridge group with only one interface?

I'm currently in the process of converting a ScreenOS configuration to a JunOS router and am a bit confused by the current configuration of two bridge groups on the old router. It's my understanding ...
3
votes
1answer
7k views

Cannot access web management through HTTPS despite being configured

I'm configuring a Juniper SRX240 router, and I wanted to set up the HTTPS protocol for web management, as opposed to plain HTTP which is working fine. I configure HTTPS as documented here, but ...
1
vote
1answer
1k views

Juniper routing - one way communication

I have an SRX3600 and an EX2200. I can ping everything on the EX2200 from the SRX, but I can't ping the gateway (or anything else) on the SRX from the EX. Another set of eyes would be wonderful. ...
1
vote
2answers
948 views

Juniper srx-100-b doesn't boot anymore

I hope someone can help me. this is the case: I have a Juniper srx-100-b and I tried to configure this device completely from scratch. What I have done, in u-boot mode, I perform the command 'erase ...
3
votes
1answer
4k views

How to specify username for SSH in Juniper router?

Model: ACX2200 Version : 15.1X54-D10.5 I have two Juniper routers connected back-to-back , first router is enabled with TACACS login. Second router is not enabled with TACACS login yet. So to ...
1
vote
0answers
507 views

vMX L3 MPLS VPN routes not in forwarding table

I'm new to juniper technology and I'm trying to set up mpls vpn on vMX. Not sure if I'm missing something in configuration or if this is some kind of bug in vMX or if this is not supported on vMX. As ...
3
votes
3answers
5k views

Is it possible to set idle-timeout for the Junos root user?

We have all of our network devices attached to console servers for out-of-band access. Occasionally, someone will log in as the local root user and forget to log out. Whoever happens to log into that ...
0
votes
3answers
588 views

Juniper SRX to core switch and distribution. Transparent (L2) mode vs. routing mode

We have to plug two brand new Juniper SRX firewalls to the core switches, and I'm tasked with the research for what's the best mode of operation for the FW, either transparent mode or routing mode. ...
2
votes
2answers
336 views

Juniper ztp trigger system requests

I have automated my network provisioning with ztp and ansible and it's already rocking. When ztp finishes I have a working config but I'm missing 2 things: the xe-0/1/2 and xe-0/1/3 on my ex3300 are ...
2
votes
2answers
1k views

BGP peer group type in Junos

In Juniper routers running the Junos operating system, one can set the BGP peer group type either to external or internal: [edit] root@M10i# set groups customer protocols bgp group customer-BGP-group ...
2
votes
1answer
179 views

Input/Output rate for VLANs on Juniper devices

Scenario: I am passing traffic across multiple VLANs between a Cisco and a Juniper device. On the Cisco device, when I do a sh int ge-x/x/x.xx, it gives the input/output rate on this VLAN (and gives ...
2
votes
2answers
547 views

Junos upgrade from 11.4R5.7 to 12.4R6.6

I've been trying to upgrade the Junos version on some switches and most have gone fine using; root@host> request system software add /var/tmp/jinstall-ex-3200-12.3R6.6-domestic-signed.tgz However ...
3
votes
1answer
173 views

Junos syslog filter Cron facility

Is there a way in Junos 12.3R4.6 to filter Cron jobs out of the syslog that is being sent to a host running Kiwi.
3
votes
2answers
1k views

Junos BGP physical Next-hop

VJX 0,1,3 are setup to be RR’s for this simple test , i want to know why link p5 is always preferred even though the physical next-hop changes , and the IGP path to the next-hop is is not via p5 ... ...
1
vote
0answers
2k views

TACACS with Juniper Devices

Can any one please help in configuring a TACACS+ server, along with configuration in Juniper devices? Ubuntu Server 14.04 Juniper QFX5100 switch Below are my configurations: For the TACACS+ server: ...
2
votes
1answer
3k views

SRX - Routed subnet - No NAT

I have a SRX 220 cluster running Junos 12.1XD46-D30.2. My ISP provides me with a /27 public IP range. Lets say 80.0.0.64/27 The way this is configured is that they use the first two available IP ...
2
votes
1answer
666 views

Juniper MX80 drops generated (TCP?) packets

In my lab network I have a Juniper MX 80 configured as MPLS router. On one site there is a customer connected (simulated by a single PC) and on the other side is an MPLS network. I use tcpreplay to ...
6
votes
2answers
6k views

Juniper user creation and password

I have created the user in Juniper devices by below commands root@qfx5100# set system login user RO class super-user Now the user RO has been created and I have not given any password to it. But ...
3
votes
1answer
317 views

Could launching a virtual router with less-than-recommened RAM cause interfaces to not initialize?

I'm trying to launch a few vSRX devices through GNS3 (and VirtualBox). The issue that I'm running into (I think) is that my interfaces seem to not properly initialize if I don't start the instances ...
5
votes
1answer
1k views

Why do some interfaces not display unless I'm in config mode?

I'm using a Juniper vSRX image in GNS3. Here is my output before entering into config mode: And after entering into config mode: Why can I see my ge0/0/0 in config mode, but not outside of?
2
votes
1answer
2k views

Running Junos directly from a USB stick

I got a Juniper EX2200 switch which is unable to boot, prior to a corrupted flash. The JTAC support is expired and i tried almost everything to get it working again. I read an article about "Running ...
3
votes
1answer
127 views

Can I download Juniper predefined security templates for view, outside of my router?

Based on this page: How to use predefined policy templates in an IDP policy in SRX and J-series devices I would like to download these templates to read through them, but from my desktop. I couldn't ...
3
votes
1answer
511 views

How to get around “configure one application-ddos definition for each protected server” in Juniper SRX IDP?

When using an SRX (we have a 1400) to protect a server we can create an application-ddos rule for DNS, but what if we want to protect it against SQL exploit attempts like "SaAdmin" login attempts? In ...
2
votes
1answer
5k views

Juniper begin: Can't assign protocol inet and ping point2point

I just start on Juniper 's world, However, I stuck at begin. I run Junos on GNS3 with very simple topology like (Junos1-me0)----------------------(me0-Junos2) My config: Junos1: set interfaces ...
2
votes
1answer
908 views

How to configure 2 LAN as input and one output ports in juniper switch

i would like to know how i can configure juniper "SRX100" switch such that there i can connect two LAN's for inbound traffic and one outbound traffic.