Questions tagged [juniper-junos]

A tag for questions involving Juniper Networks Operating System (Junos) software.

Filter by
Sorted by
Tagged with
5
votes
2answers
1k views

Proper connection and VLAN configuration between Juniper EX4300 and Aruba 7010 Controller?

I have a Juniper EX4300 switch that is connected to a firewall which in turn connects to the WAN. I have an Aruba 7010 Controller that I would like to connect to the Juniper switch. On the Juniper ...
7
votes
2answers
4k views

Why are my equal cost LSP's not load balancing equally when using auto-bandwidth?

First, I'm adding this question and answering myself because this type of behavior was absolutely no where to be found, hopefully it will help someone. Problem: We use auto bandwidth to handle the ...
4
votes
1answer
4k views

Juniper SRX - interface filters vs firewall rules?

I'm trying to display all firewall rule associated with a specific interface. However, the best I can find is show interfaces filters. I'm assuming since these are called "filters", they're not the ...
3
votes
1answer
706 views

Does the Juniper SRX have spanning-tree capabilities?

I can't find any documentation supporting spanning-tree capabilities on SRX devices. I'm running a virtual image, which I thought was more-or-less the vSRX: root> show version Model: ...
10
votes
1answer
32k views

What's the difference between TPID of 0x88a8 or 0x8100

I was reading over some JNCIS-SP documentation on provider bridging and it had this to say regarding the TPID field for QinQ: IEEE 802.1ad has reserved a TPID of 0x88a8 for the S-TAG however the ...
3
votes
2answers
4k views

How can I view a list of which MACs an interface is restricted to on a Juniper SRX?

JUNOS has functions for either limiting the number of mac addresses on a port or locking a port to particular mac addresses. I know that I can set filters as: user@switch# set interface all allowed-...
8
votes
1answer
852 views

Junos VRF equal-cost, multi-next-hop static routes not balancing

I am load balancing traffic on dual, same size links aggregating to the same VRF on the PE router (Juniper MX5 JunOS 11.4). Traffic from the CE (Cisco) is balancing nicely but I need get the reverse ...
3
votes
1answer
3k views

Junos cli regex requirement

Hi I have seen someone do this a while back but for the life of me cant figure out the quick way to match on multiple strings easily. objective is to display any lines of config that matches either ...
4
votes
1answer
4k views

VLAN Creation on Juniper QFX5100

1) I am able to create VLAN on Juniper QFX5100 but when I am assigning interface to that VLAN it is showing an error "family ethernet-switching and other families are mutually exclusive" Command ...
2
votes
1answer
75 views

Network Equipment: What is NOT in the box with the equipment? [closed]

I am looking at buying some managed switches, a router and a firewall for a laboratory LAN. I am trying to put together some quotes for analyzing my budget and am looking at Cisco and Juniper for now. ...
5
votes
0answers
851 views

Juniper SRX IPv6-PD update-router-advertisement issues

I'm trying to get some sweet prefix delegation working on my SRX. My provider offers DHCPv6-PD and gives out /56 addresses. I have done setups using cisco routers and am trying to replicate it onto a ...
4
votes
1answer
2k views

Juniper SRX240 unstable uplink when client is connected to VPN

In an office setting, multiple clients (Mac OSX, Ubuntu, iOS, Android and Windows 8) connect to a VPN server in another location. These clients are behind an SRX240B router which is connected to a ...
5
votes
1answer
1k views

RSVP between Cisco and Juniper

I can not configure the RSVP between Cisco6509 SUP2T and Juniper MX480. Prior to that set up the neighbor 3 without problems. Now that it is impossible ...I do not understand why :( scheme: Cisco t5/...
3
votes
1answer
5k views

How to understand Juniper SRX flow creation?

I have a Juniper SRX240H2(JUNOS 12.1X44-D20.3) firewall cluster in flow mode with interface reth2.1 facing Internet and interface reth1.1 facing LAN. I have a problem with one particular source and ...
3
votes
0answers
72 views

JunOS: match “to community” to set destination-class in policy-statement? [duplicate]

Let's say I want: routing-options { forwarding-table { export SORTER } } policy-options { policy-statement SORTER { term by-Comm { to community Comm-list; then { ...
3
votes
1answer
4k views

Juniper SRX240 and EX2200 network

I'm not a network engineer, so this must be a noob question. My task is simple, I need all clients to have internet access. Both EX2200 were configured before as layer 2 switches, so i assume their ...
8
votes
3answers
2k views

Determine what interface is replying to snmp replies

I have a Juniper MX router that is accepting SNMP requests. Problem is I am sending UDP requests to one interface, and it is replying on another. The target IP is that which is assigned to lo0.1 but ...
4
votes
2answers
2k views

Can you only allow local login when TACACS is unavailable on a Juniper?

I'm pretty sure you can do this in the Cisco world, but haven't found a way to do this on a Juniper device. Is there a way to restrict local accounts from being accessed if the router has access to ...
6
votes
1answer
2k views

Terminating an L2VPN on JunOS router

I am trying to terminate an L2VPN on an MX480 but it's not working... Topology: 7206 trunk vlanid 555 > MX80> MPLS CLOUD > MX480. 7206 (192.168.254.2) not pinging lt-interface on MX480 (192.168.254....
4
votes
1answer
684 views

What is the differenence between set firewall filter and set firewall family

I have some legacy Juniper routers. One set has firewall rules written as such: set firewall filter .... and the other set has rules written as: set firewall family inet... I know the second one ...
3
votes
2answers
2k views

Junos AS-PATH regex

I'm looking for a particular AS-PATH regex that match the following case: "accept ONLY neighbour and it's direct peers". i.e., my neighbour is AS 20, and has 101, 102 as direct peers. the as-path "...
3
votes
2answers
582 views

Juniper SSG and multiple interfaces

Okay guys I have a conundrum on my network, I do not know how it is working, I just know it does. I have a Juniper SSG firewall with 3 different ISPs. I have traffic coming in through the 3 interfaces,...
5
votes
1answer
2k views

How do you alias a command in JunOS?

I was searching for an easy way to do this over the last few days and found that there wasn't a SIMPLE way to do this. The majority of the answers were: Too complex for the problem at hand. ...
2
votes
1answer
885 views

Juniper EX Flooding on STP Topology Change

I have a relatively large layer 2 network where port flapping is not uncommon. I am using Juniper EX 2200 switches, which clear out the mac-forwarding table on a topology change. It is not uncommon ...
2
votes
0answers
676 views

MPLS L3 VPNs and F5 Route Domains

I realize the F5 community might be the right place for this question, but this concerns routing design as opposed to an ADC design. We are planning to use F5's CGNAT module for NAT'ing our campus ...
2
votes
4answers
3k views

Is the root user on juniper switches useful?

On juniper switches is something like root user. Are there any things that must be done from that user? For what root user can be usefull? Or isn't usefull, and can be safetly disabled?
6
votes
2answers
7k views

Juniper EX2200 can't boot

I recently acquired a Juniper EX2200-24T-4G switch, but I have some issues getting it up and running. When I power on the switch the boot process looks normal, but after some time it suddenly turns ...
7
votes
1answer
2k views

BGP authentication-key-chain vs. authentication-key

I found a neat little behavior on a Juniper box I was working with today. We were migrating from a Cisco ASR to an MX and all of our internet exchange peers that had authentication configured didn't ...
5
votes
1answer
2k views

juniper snmp oid: Retrieve the list of interface with vlan no?

Below are the following commands I used to get the specific data that I need. Get Port Id and Interface snmpwalk -r:"switchName" -v:2 -t:10 -c:"*******" -os:"1.3.6.1.2.1.2.2.1.2" -op:"1.3.6.1.2.1.2....
3
votes
3answers
574 views

How can i changeover gateway to new switch with less downtime?

I plan to replace a Juniper EX4200 that was configured a vlan default gateway, for less downtime, I will setup a new EX4200, copy configuration and transfer network cables from the old switch. But if ...
3
votes
1answer
1k views

Performance differences of logging session-init and session-close invididually compared to through apply-groups

Assumption: Your interest lies in logging each and every session Approach 1 You configure the session logging within each and every policy, for example: set security policies from-zone trust to-...
4
votes
2answers
3k views

Juniper SRX blank proxy-identity

I would really appreciate some clarification in the following matter. What I'm seeing I'm looking at two different SRX210 firewalls and specifically at their ipsec stanza. I'm seeing the following ...
4
votes
2answers
487 views

How to override 802.1p CoS on outgoing interfaces?

In Cisco, this can be easily achieved by: policy-map TVPrio description Set VLAN priority to 4 class class-default set cos 4 and apply this policy-map to the interface. How to do equivalent in ...
7
votes
2answers
2k views

Juniper SRX - No traffic after 17 minutes

This is really a strange problem. I am trying to install a Juniper SRX 220H as the gateway to replace my old Cisco router in my testing network environment. The simplified topology is listed below: ...
1
vote
0answers
366 views

Junos HTTP reverse proxy forwarded based on HTTP host

How do I configure AppSecure to function as a reverse proxy for my web servers based on the HTTP host header field? E.g. website1.domain.com and website2.domain.com should be reverse proxied to ...
2
votes
1answer
428 views

Junos sub interface number limited to 16385

Is there a good reason why Junos limits its logical interfaces to 16385 ? i would love to use like the numbering schema to facilitate int.xxxxyyyy which helps with clearly identifying interfaces. so ...
3
votes
1answer
346 views

Basic Junos question on routing

JunOS newbie question here. I have a Juniper SRX router that I am trying to set up in a very basic mode: ge-0/0/0 is set to 192.168.140.100 -- I can ping that address from hostA at .140.200 ...
4
votes
1answer
4k views

Juniper SRX100 / Junos - Static Routers between virtual Routers

i am replacing a Juniper SSG5 with Screenos against a SRX100 with Junos (12.1X44-D35.5). I am replacing a virtual router configuration that Looks like this: +----...
10
votes
1answer
382 views

Juniper, vlan-centric vs interface-centric. Which has prevalence?

I am new to Juniper and has a basic doubt about assigning an interface to a VLAN. I have read that JunOS admits both approaches. My question is, what method prevalence when you use both of them? I ...
12
votes
2answers
15k views

why we can't create multiple loopback interfaces in Junos?

comparing to Cisco IOS , we can create any number of loopbacks on router , but on Junos you can create only one loopback interface (even logical units from same loopback) in the routing instance , ...
4
votes
1answer
3k views

Log Messages In Juniper MX960

How do I check the Log Messages of Last Month on juniper MX960 Router. When I am typing the command: #show log Messages. It's just showing me the messages for last 15 days. We have two MX960 ...
4
votes
1answer
1k views

What can I use on a branch SRX cluster instead of an lt-0/0/0 interface?

Background I have the following config which uses lt interfaces to route traffic between 2 routing instances (default and a custom one called vpn). The reason I do this is so that I can have ...
7
votes
3answers
1k views

Creating a JunOS firewall filter based on dynamic routing properties

One of my BGP transit customers has asked me for a solution to make it easier for him to blackhole traffic within our network when he's suffering from DDoS attacks. Usually, BGP blackholing is done by ...
5
votes
1answer
7k views

Checking advertised routes - BGP

For IOS-XE and Junos, I wanted to know the command that displays the routes advertised by BGP to neighbors. On IOS-XR, this command is 'show bgp advertised'. I know on XE, per neighbor based ...
5
votes
2answers
60k views

GNS3: Configuring/Emulating a Juniper Router on GNS3

I need to be able to emulate a Juniper Router (JunOS) on GNS3. I have seen that this is available as on option in the 'Node Types' list on GNS3. When I try to use this to add a Juniper Router to the ...
2
votes
2answers
759 views

Advertising the same prefix twice via BGP into an IPVPN

I have reachability to a certain /25 prefix at two different sites. These sites advertise the /25 via EBGP into a L3 IPVPN (MPLS). I am AS-path prepending one of these sites' advertisements to make it ...
6
votes
1answer
614 views

Juniper MX-5 EOPE Drop Pkt Cnt Incrementing

When running show pfe statistics error on a a couple of MX platforms, I see the EOPE Drop Pkt Cnt counter incrementing on 6 MX's out of 22. I believe these are "End-Of-Packet errors", but can't find ...
3
votes
1answer
2k views

Junos feature to accept multiple BGP paths from multiple peer AS

Cisco IOS provides this hidden BGP command: router bgp <ASN> bgp bestpath as-path multipath-relax It allows the router to install multiple BGP prefixes with distinct as-path'es (but ...
3
votes
1answer
1k views

next-table may loop

Help me to understand such situation. It is necessary translate a little of config from Screenos to Junos. Screenos issue: set vrouter "trust-vr" set route 217.118.52.149/32 vrouter "TrustGi-vr" ...
2
votes
1answer
2k views

continues to execute the command ping

tell me please why continues to execute the command ping... Router#ping vrf vrf-trust 50.50.50.50 sou 2.2.2.2 Type escape sequence to abort. ending 5, 100-byte ICMP Echos to 50.50.50.50, timeout is ...