Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
1
vote
0answers
655 views

Logical-Tunnel Interface Juniper MX 480 doesn't “work”

I have configured a logical tunnel between my master-routing-instance and a additional routing-instance. I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
1
vote
2answers
19 views

Questions about logical-systems of juniper

In my Juniper MX480, the logic-systems config is below: [edit] logical-systems { r1 { interfaces { ge-0/0/0 { unit 0 { family inet { ...
1
vote
1answer
32 views

With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?

I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success. Need to understand the ...
1
vote
1answer
67 views

How to import a file into Junos main config file?

How to import a file into Junos config file? there is a case, I have a long prefix-list in config file: set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20 set logical-systems ...
4
votes
3answers
416 views

Why eBGP don't need config local-address?

There is a manual for me to learn Junos. you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
1
vote
1answer
37 views

CB fabric links require upgrade/training after adding New FPC in Juniper MX480

We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
1
vote
1answer
36 views

Why the route comes from different AS?

Before, I know the AS path of BGP properties, such as the 200 100i means the route originate from AS100, use network import the route and through AS200, however in my case: admin@MX480> show route ...
1
vote
0answers
23 views

Redirect Junos IP public -> IP private

we have an MX204 here that works as our BGP, border router and it is gateway of a service that has private IP, I need to access this service with private IP outside our network, you can tell me if I ...
1
vote
1answer
43 views

Juniper SRX Management Redirects

I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI. Since some time, when I try to access the Web board, I get the error "...
1
vote
1answer
16 views

what's the differences of two `filter` under `edit firewall` in junos?

I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name]. what's the differences of them?
0
votes
1answer
33 views

Is it only one Active route for a special destination?

When I read juniper document about show route: I show route IP: admin@MX480> show route 14.104.112.1 inet.0: 837234 destinations, 1784889 routes (832157 active, 0 holddown, 862249 hidden) + = ...
2
votes
2answers
342 views

Why my MX480 have 6 FPC slots, however the document say only support 3?

In Juniper PFC document: The maximum number of supported FPCs varies per router: MX480 router—3 FPCs but in my MX480, why there have 6 FPC Slots. admin@MX480-RE0> show chassis fpc ...
0
votes
1answer
46 views

What's the meaning of these interfaces' prefix?

When I watch juniper tutorial time at 10:22, there have Services Interfaces introduction: but in my mx480 router, there have several interfaces I don't know prefix meaning. lt-0/0/10.6 ...
0
votes
1answer
44 views

My Juniper router do not have j-web configuration

I follow Juniper docs: I want to set up the j-web. but in my Junos do not have set system services web-management http. admin@MX480-RE0# set system services ? Possible completions: <[Enter]&...
5
votes
3answers
16k views

Site-to-site VPN between Cisco ASA and Juniper SRX

I'm trying to create route-based VPN connection between Cisco ASA and Juniper SRX, but I have a problem with ACL and Proxy IDs. Cisco ASA log states that [IKEv1]Group = A.A.A.A, IP = A.A.A.A, ...
4
votes
0answers
91 views

EVPN MAC Advertisement route not installed to L2 forwarding table

I have a VLAN-based EVPN connecting two sites in a lab environment based on the network topology described in the DAY ONE: USING ETHERNET VPNS FOR DATA CENTER INTERCONNECT book: For some reason, it ...
1
vote
1answer
42 views

How to find invalid sessions on Juniper SRX 5800 series Firewall

In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
5
votes
1answer
91 views

How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?

Let's say, that I have a following simple BGP-signaled L2VPN configuration: root@PE4> show configuration routing-instances vpn-b { instance-type l2vpn; interface ge-0/0/0.515; route-...
1
vote
1answer
26 views

What exactly does a Juniper PE use to find the correct transport LSP for the L2 circuit(Martini) neighbor?

Let's say, that I have a following simple L2 circuit(Martini) configuration: root@PE4> show configuration protocols l2circuit neighbor 192.168.2.2 { interface ge-0/0/5.777 { virtual-...
2
votes
1answer
1k views

Not receiving netflow v9, v5 works - Juniper SRX

We have an ELK Stack running that gathers data and processes it to the point where end users can visualize the data. Right now we're dealing with Syslogs and Netflow, but are experiencing some issues ...
2
votes
2answers
117 views

Junos “request system software validate” safety

Just want to clarify: is it safe to issue the command request system software validate /var/tmp/image.tgz on a production Juniper MX router not during maintenance? Can I break something with this ...
1
vote
1answer
177 views

VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense

I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
1
vote
3answers
3k views

Juniper EX how to clear route forwarding table?

After layer 3 routing a large IPv6 assignment on an EX Juniper switch, the route forwarding table filled up and some entries corrupted or became otherwise invalid. We want to clear the whole table. ...
0
votes
2answers
167 views

Can't log in after admin password change

I reset my admin password with below command: #Set system login user admin authentication encrypted-password <new password> But now i can't login to my device, what can be the reason?
0
votes
3answers
607 views

How can I monitor traffic matching a IP address?

I see this article: user@host> monitor traffic matching “port 22” no-resolve there can matching a port and I can matching arp too: user@host> monitor traffic matching “arp” no-resolve but, ...
4
votes
1answer
709 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
0
votes
0answers
26 views

GRE IPIP on QFX3500

We have 2x QFX3500 in Virutal CHassis mode, so : can we lunch 2-4x GRE or IPIP tunnel ? onyl 2x tunnel is active and 2x tunnel is in standby mode, that 2 active tunnel has around 80-90mbps IMIX ...
3
votes
2answers
386 views

Juniper NetScreen NAT from a secondary Untrusted Zone

We have multiple public IP address subnets for various purposes. I need to create an Internal Zone behind NAT that presents itself as having an external IP in External Zone B. [...
5
votes
1answer
154 views

Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000

I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
0
votes
1answer
62 views

is it possible calculate a IP of Transit Traffic's rate in Juniper port mirroring?

In Juniper Router MX480, we can configure the port mirroring of a transmit port. then, is it possible calculate a IP of Transit Traffic's rate in Juniper port mirroring? I mean, I can configure B port ...
-1
votes
1answer
87 views

Juniper Ex4200 problem with assign firewall to access port

This is my firewall filter rules : family ethernet-switching { filter port5 { term port5 { from { source-address { 192.168.1.0/29; ...
1
vote
1answer
35 views

BGP “protocol next hop” resolves to different next-hop address than the same IP using ISIS

I have a BGP-learned prefix 130.130.0.0/24 with protocol next hop 10.0.2.5: root@r2> show route 130.130.0.0 detail inet.0: 60 destinations, 61 routes (57 active, 0 holddown, 4 hidden) 130.130.0.0/...
0
votes
0answers
161 views

Juniper MX: how to populate VRF RIB with EVPN Type 2 MAC+IP routes

I have a Juniper MX router at the edge of EVPN/VXLAN domain. Let's suppose that MX performs routing only, no any kind of switching/bridging instances on it. I want to exchange EVPN VRF routes (type5 ...
9
votes
2answers
10k views

BGP remote-triggered blackhole (RTBH) filter for Juniper

I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer. The filter should: Only accept the customers own prefixes from a prefix-list Only accept /32 ...
1
vote
2answers
43 views

2 AS in the same box JunOS

Today we have an MX204 and we announced our AS using Juniper, but we also have partnership with another internet provider that has another AS. This other AS has much less client and a much smaller ...
1
vote
1answer
128 views

What's the meaning of `unit 0` and `family ethernet-switching`?

What's the meaning of `unit 0` and `family inet`? With the above question, I learned the meaning of unit 0 and inet. So what does ethernet-switching mean? root@test> show configuration ... ... ...
3
votes
1answer
160 views

Juniper keeps a received BGP prefix in hidden state when the BGP next-hop is overwritten to a static route

I have a routing policy named rtbh configured as an ingress policy for a BGP peer: root@PE3> show configuration policy-options policy-statement rtbh term ipv4 | display inheritance no-comments from ...
2
votes
3answers
70 views

Policy Based Routing by Interface and IP

Is it possible on Juniper or Cisco to configure PBR where it matches on an ingress interface AND a source IP address? My scenario traffic flows are as follows: Router1 > Router2 > WAN_Optimiser &...
1
vote
1answer
77 views

ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3

I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)? Example configuration: set routing-instances VPN100 instance-type vrf set routing-...
0
votes
1answer
37 views

qfx5300 fan issue

I have a 2x QFX3500 in virtual chassis mode and every 1-2 month one of my Fan trays showed as failed and everything is ok , Fan trays are spining at the normal speed they have 1unit free space from up ...
1
vote
1answer
30 views

Using XFP-10G (120 KM Range) on Juniper MX routers

Hi everyone, We recently installed a new 10G XFP optics module in Juniper MX router. As per the customer , XFP supported range is 120 KM and it is from some third party vendor named 'menara'. Menara ...
0
votes
0answers
9 views

qfx3500 wrong fan report? [duplicate]

we have 2x qfx3500 in VC and since last week it shows chassis #1 fan tray 2 (management fan) is Failed then today we replaced it with a healthy management module but it still showing it as failed, is ...
1
vote
1answer
21 views

QFX3500 RTG Question

i have 2x ae interface in my QFX3500 and i want to use ae1 as primary and ae2 as backup and here is my config : set protocols rstp interfaces ae1 disable set protocols rstp interfaces ae2 disable ...
0
votes
1answer
30 views

Juniper QFX3500 performance

We want to use a pair of juniper qfx3500 in virtual chassis mode and we have around 1000x SVI with 7 bgp peer and no full table and around 20gbps bps and 8m pps, can qfx3500 handle this amount of ...
0
votes
0answers
47 views

How to connect EVPN DC Fabric to MPLS IP VPN Backbone

Let's suppose that we have a common Clos EVPN/VXLAN-based DC fabric with IP gateways on leaves (anycast gateways). Also there is a lot of different IP VRFs inside a fabric where end hosts reside. What ...
1
vote
2answers
56 views

Is there a way to know the length of the cable used between the connected SFPs on a switching/routing device?

I have connected two Juniper routers with a QSFP28 optics and I need to find out the length of the optical cable I have used. Is there a command to check that in the router?
4
votes
2answers
170 views

RE Protection vs DDOS Protection in Juniper MX series routers

Hi Everyone, Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
1
vote
3answers
217 views

What are the Major Differences between Juniper EX4200 vs Juniper EX4300?

Can someone please explain that what are the major differences between Juniper EX4200 and Juniper EX4300 switches? Both are standard Juniper Ethernet switches but is there any situation where EX4300 ...
1
vote
1answer
52 views

Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types

We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
1
vote
1answer
118 views

With regards to Juniper Networks , how does 'targeted-distribution' knob works?

Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers. We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...

1
2 3 4 5
10