Questions tagged [juniper]
A tag for questions involving Juniper Networks hardware or software.
457
questions
1
vote
0answers
655 views
Logical-Tunnel Interface Juniper MX 480 doesn't “work”
I have configured a logical tunnel between my master-routing-instance and a additional routing-instance.
I tested the same config (except IP addresses) on my lab-system and on one of our other core-...
1
vote
2answers
19 views
Questions about logical-systems of juniper
In my Juniper MX480, the logic-systems config is below:
[edit]
logical-systems {
r1 {
interfaces {
ge-0/0/0 {
unit 0 {
family inet {
...
1
vote
1answer
32 views
With reference to Juniper MX , what's the difference between Bridge Domain and Learning Domain?
I am trying to understand the difference between bridge domain and learning domain. I have tried to read through documentation and Juniper MX series book but no success.
Need to understand the ...
1
vote
1answer
67 views
How to import a file into Junos main config file?
How to import a file into Junos config file?
there is a case, I have a long prefix-list in config file:
set logical-systems LR6-1931 policy-options prefix-list C20060 11.92.0.0/20
set logical-systems ...
4
votes
3answers
416 views
Why eBGP don't need config local-address?
There is a manual for me to learn Junos.
you see the external peer configuration, there is no local-address option, but internal has. why eBGP configuration do not need it?
1
vote
1answer
37 views
CB fabric links require upgrade/training after adding New FPC in Juniper MX480
We are running a Juniper MX480 router is a production environment. Due to increase in traffic trend , it was required to installed new FPC 'MPC-3D-16XGE-SFPP' into slot 5 of MX480. Before the addition ...
1
vote
1answer
36 views
Why the route comes from different AS?
Before, I know the AS path of BGP properties, such as the 200 100i means the route originate from AS100, use network import the route and through AS200, however in my case:
admin@MX480> show route ...
1
vote
0answers
23 views
Redirect Junos IP public -> IP private
we have an MX204 here that works as our BGP, border router and it is gateway of a service that has private IP, I need to access this service with private IP outside our network, you can tell me if I ...
1
vote
1answer
43 views
Juniper SRX Management Redirects
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have some trouble with the Web management GUI.
Since some time, when I try to access the Web board, I get the error "...
1
vote
1answer
16 views
what's the differences of two `filter` under `edit firewall` in junos?
I found there are two places of filter under firewall, [edit firewall filter filter-name] and [edit firewall family inet filter filter-name].
what's the differences of them?
0
votes
1answer
33 views
Is it only one Active route for a special destination?
When I read juniper document about show route:
I show route IP:
admin@MX480> show route 14.104.112.1
inet.0: 837234 destinations, 1784889 routes (832157 active, 0 holddown, 862249 hidden)
+ = ...
2
votes
2answers
342 views
Why my MX480 have 6 FPC slots, however the document say only support 3?
In Juniper PFC document:
The maximum number of supported FPCs varies per router:
MX480 router—3 FPCs
but in my MX480, why there have 6 FPC Slots.
admin@MX480-RE0> show chassis fpc
...
0
votes
1answer
46 views
What's the meaning of these interfaces' prefix?
When I watch juniper tutorial time at 10:22,
there have Services Interfaces introduction:
but in my mx480 router, there have several interfaces I don't know prefix meaning.
lt-0/0/10.6 ...
0
votes
1answer
44 views
My Juniper router do not have j-web configuration
I follow Juniper docs:
I want to set up the j-web. but in my Junos do not have set system services web-management http.
admin@MX480-RE0# set system services ?
Possible completions:
<[Enter]&...
5
votes
3answers
16k views
Site-to-site VPN between Cisco ASA and Juniper SRX
I'm trying to create route-based VPN connection between Cisco ASA and Juniper SRX, but I have a problem with ACL and Proxy IDs. Cisco ASA log states that
[IKEv1]Group = A.A.A.A, IP = A.A.A.A, ...
4
votes
0answers
91 views
EVPN MAC Advertisement route not installed to L2 forwarding table
I have a VLAN-based EVPN connecting two sites in a lab environment based on the network topology described in the DAY ONE: USING ETHERNET VPNS FOR DATA CENTER INTERCONNECT book:
For some reason, it ...
1
vote
1answer
42 views
How to find invalid sessions on Juniper SRX 5800 series Firewall
In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
5
votes
1answer
91 views
How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?
Let's say, that I have a following simple BGP-signaled L2VPN configuration:
root@PE4> show configuration routing-instances
vpn-b {
instance-type l2vpn;
interface ge-0/0/0.515;
route-...
1
vote
1answer
26 views
What exactly does a Juniper PE use to find the correct transport LSP for the L2 circuit(Martini) neighbor?
Let's say, that I have a following simple L2 circuit(Martini) configuration:
root@PE4> show configuration protocols l2circuit
neighbor 192.168.2.2 {
interface ge-0/0/5.777 {
virtual-...
2
votes
1answer
1k views
Not receiving netflow v9, v5 works - Juniper SRX
We have an ELK Stack running that gathers data and processes it to the point where end users can visualize the data.
Right now we're dealing with Syslogs and Netflow, but are experiencing some issues ...
2
votes
2answers
117 views
Junos “request system software validate” safety
Just want to clarify: is it safe to issue the command
request system software validate /var/tmp/image.tgz
on a production Juniper MX router not during maintenance? Can I break something with this ...
1
vote
1answer
177 views
VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense
I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
1
vote
3answers
3k views
Juniper EX how to clear route forwarding table?
After layer 3 routing a large IPv6 assignment on an EX Juniper switch, the route forwarding table filled up and some entries corrupted or became otherwise invalid. We want to clear the whole table. ...
0
votes
2answers
167 views
Can't log in after admin password change
I reset my admin password with below command:
#Set system login user admin authentication encrypted-password <new password>
But now i can't login to my device, what can be the reason?
0
votes
3answers
607 views
How can I monitor traffic matching a IP address?
I see this article:
user@host> monitor traffic matching “port 22” no-resolve
there can matching a port
and I can matching arp too:
user@host> monitor traffic matching “arp” no-resolve
but, ...
4
votes
1answer
709 views
Partially Faulty QSFP+ breakout port - possible config error?
Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2
Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
0
votes
0answers
26 views
GRE IPIP on QFX3500
We have 2x QFX3500 in Virutal CHassis mode, so :
can we lunch 2-4x GRE or IPIP tunnel ? onyl 2x tunnel is active and 2x tunnel is in standby mode, that 2 active tunnel has around 80-90mbps IMIX ...
3
votes
2answers
386 views
Juniper NetScreen NAT from a secondary Untrusted Zone
We have multiple public IP address subnets for various purposes. I need to create an Internal Zone behind NAT that presents itself as having an external IP in External Zone B.
[...
5
votes
1answer
154 views
Finding the right BFD timers between Juniper QFX5110 and Cisco ASR1000
I am trying to configure BFD for both OSPF and BGP on the Cisco ASR1000 (non X) and Juniper QFX5110. The problem is that the QFX doesn't officially support BFD timers lower than 1000ms without ...
0
votes
1answer
62 views
is it possible calculate a IP of Transit Traffic's rate in Juniper port mirroring?
In Juniper Router MX480, we can configure the port mirroring of a transmit port.
then, is it possible calculate a IP of Transit Traffic's rate in Juniper port mirroring?
I mean, I can configure B port ...
-1
votes
1answer
87 views
Juniper Ex4200 problem with assign firewall to access port
This is my firewall filter rules :
family ethernet-switching {
filter port5 {
term port5 {
from {
source-address {
192.168.1.0/29;
...
1
vote
1answer
35 views
BGP “protocol next hop” resolves to different next-hop address than the same IP using ISIS
I have a BGP-learned prefix 130.130.0.0/24 with protocol next hop 10.0.2.5:
root@r2> show route 130.130.0.0 detail
inet.0: 60 destinations, 61 routes (57 active, 0 holddown, 4 hidden)
130.130.0.0/...
0
votes
0answers
161 views
Juniper MX: how to populate VRF RIB with EVPN Type 2 MAC+IP routes
I have a Juniper MX router at the edge of EVPN/VXLAN domain.
Let's suppose that MX performs routing only, no any kind of switching/bridging instances on it. I want to exchange EVPN VRF routes (type5 ...
9
votes
2answers
10k views
BGP remote-triggered blackhole (RTBH) filter for Juniper
I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer.
The filter should:
Only accept the customers own prefixes from a prefix-list
Only accept /32 ...
1
vote
2answers
43 views
2 AS in the same box JunOS
Today we have an MX204 and we announced our AS using Juniper, but we also have partnership with another internet provider that has another AS. This other AS has much less client and a much smaller ...
1
vote
1answer
128 views
What's the meaning of `unit 0` and `family ethernet-switching`?
What's the meaning of `unit 0` and `family inet`?
With the above question, I learned the meaning of unit 0 and inet.
So what does ethernet-switching mean?
root@test> show configuration
...
...
...
3
votes
1answer
160 views
Juniper keeps a received BGP prefix in hidden state when the BGP next-hop is overwritten to a static route
I have a routing policy named rtbh configured as an ingress policy for a BGP peer:
root@PE3> show configuration policy-options policy-statement rtbh term ipv4 | display inheritance no-comments
from ...
2
votes
3answers
70 views
Policy Based Routing by Interface and IP
Is it possible on Juniper or Cisco to configure PBR where it matches on an ingress interface AND a source IP address?
My scenario traffic flows are as follows:
Router1 > Router2 > WAN_Optimiser &...
1
vote
1answer
77 views
ip-prefix-routes with vxlan encapsulation on Juniper MX80 / MX104 17.3R3
I want to check whether this configuration is acceptable by MX80 or MX104 Junos 17.3R3 (JTAC recommended version)?
Example configuration:
set routing-instances VPN100 instance-type vrf
set routing-...
0
votes
1answer
37 views
qfx5300 fan issue
I have a 2x QFX3500 in virtual chassis mode and every 1-2 month one of my Fan trays showed as failed and everything is ok , Fan trays are spining at the normal speed they have 1unit free space from up ...
1
vote
1answer
30 views
Using XFP-10G (120 KM Range) on Juniper MX routers
Hi everyone,
We recently installed a new 10G XFP optics module in Juniper MX router. As per the customer , XFP supported range is 120 KM and it is from some third party vendor named 'menara'.
Menara ...
0
votes
0answers
9 views
qfx3500 wrong fan report? [duplicate]
we have 2x qfx3500 in VC and since last week it shows chassis #1 fan tray 2 (management fan) is Failed then today we replaced it with a healthy management module but it still showing it as failed,
is ...
1
vote
1answer
21 views
QFX3500 RTG Question
i have 2x ae interface in my QFX3500 and i want to use ae1 as primary and ae2 as backup and here is my
config :
set protocols rstp interfaces ae1 disable
set protocols rstp interfaces ae2 disable
...
0
votes
1answer
30 views
Juniper QFX3500 performance
We want to use a pair of juniper qfx3500 in virtual chassis mode and we have around 1000x SVI with 7 bgp peer and no full table and around 20gbps bps and 8m pps, can qfx3500 handle this amount of ...
0
votes
0answers
47 views
How to connect EVPN DC Fabric to MPLS IP VPN Backbone
Let's suppose that we have a common Clos EVPN/VXLAN-based DC fabric with IP gateways on leaves (anycast gateways). Also there is a lot of different IP VRFs inside a fabric where end hosts reside.
What ...
1
vote
2answers
56 views
Is there a way to know the length of the cable used between the connected SFPs on a switching/routing device?
I have connected two Juniper routers with a QSFP28 optics and I need to find out the length of the optical cable I have used. Is there a command to check that in the router?
4
votes
2answers
170 views
RE Protection vs DDOS Protection in Juniper MX series routers
Hi Everyone,
Need to know the clear differences between RE protection and DDOS protection in Juniper MX. Both are used to save routing engine from depletion of resources. As mentioned in Juniper MX ...
1
vote
3answers
217 views
What are the Major Differences between Juniper EX4200 vs Juniper EX4300?
Can someone please explain that what are the major differences between Juniper EX4200 and Juniper EX4300 switches? Both are standard Juniper Ethernet switches but is there any situation where EX4300 ...
1
vote
1answer
52 views
Virtual Chassis Setup in Juniper EX4200 Using Mixed Interface Types
We want to setup Virtual Chassis using 2 x Juniper EX4200 switches. In case of Virtual Chassis for EX4200 , we have to use 2 x VC cables (connected back to back) between 2 x Ex4200 switches along with ...
1
vote
1answer
118 views
With regards to Juniper Networks , how does 'targeted-distribution' knob works?
Can someone please explain how does the knob 'targeted-distribution' works in Juniper MX routers.
We created aggregated Ethernet (AE) links on our Juniper MX router acting as BNG. However , after ...
