Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
20 votes
4 answers
56k views

Can I see the pending (commit at) changes on a JunOS box?

If an engineer configures some changes in a JunOS box and then set them to go live later, that effectively locks the config database with a configure exclusive. How can I see the changes that he or ...
hrtednrup's user avatar
  • 452
19 votes
2 answers
32k views

Cause of high CPU load on Juniper peering router's routing engine

Recently the routing engine CPU utilization on two of our Juniper peering routers increased from ~10-20% average load to 80+%. I'm trying to figure out what's causing this (and how to get this high ...
Teun Vink's user avatar
  • 17.1k
18 votes
3 answers
29k views

Adding a simple VLAN on a Juniper MX

after years away from JunOS, working with Foundry (now Brocade) routers, I find myself with a new Juniper MX10. All I want to do is create a simple VLAN such that two ports share one routing ...
Matt's user avatar
  • 181
18 votes
4 answers
9k views

Are there any reasons to not use BFD?

In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
MattE's user avatar
  • 2,087
18 votes
1 answer
1k views

MPLS auto-bandwidth balancing

I operate an MPLS/IP network that utilizes auto-bandwidth to measure bandwidth utilization and signal RSVP accordingly. How can I maintain balance across my LSP paths such that one large [P router]-to-...
jof's user avatar
  • 543
14 votes
5 answers
728 views

In a multi-tenant environment what should be done to make your switchports silent on Cisco and Juniper switches?

For example preventing it from sending arp, stp, etc and to reveal as little as possible about the rest of the network. Example use case would be connecting to a peering exchange.
SimonJGreen's user avatar
  • 1,675
12 votes
2 answers
18k views

why we can't create multiple loopback interfaces in Junos?

comparing to Cisco IOS , we can create any number of loopbacks on router , but on Junos you can create only one loopback interface (even logical units from same loopback) in the routing instance , ...
Mr.lock's user avatar
  • 1,723
10 votes
4 answers
3k views

Embedded routers vs. software routers in the datacentre

I've been looking for a new 'core' router to put in our new rack which is colo'd at a nearby datacentre. What I've come across is the usual Cisco/Juniper/Brocade lineup, with the usual unattractive ...
Libbux's user avatar
  • 515
10 votes
1 answer
5k views

Can I poll firewall counters on Juniper routers via SNMP

I have a firewall counter on a Juniper MX router (set firewall filter myfilter term myterm then count mycounter) and want to poll its packet/byte count via SNMP. I searched for an OID but I'm unable ...
Sebastian Wiesinger's user avatar
10 votes
3 answers
3k views

SRX DHCP client compatibility with HP Procurve DHCP Relay

I am trying to bootstrap the config on some Juniper SRX100s and am having some DHCP issues. Specifically, I am connecting the 0/0 port (fe-0/0/0 in the software) to my existing network, where DHCP ...
Jeff McAdams's user avatar
  • 2,496
10 votes
1 answer
402 views

Juniper, vlan-centric vs interface-centric. Which has prevalence?

I am new to Juniper and has a basic doubt about assigning an interface to a VLAN. I have read that JunOS admits both approaches. My question is, what method prevalence when you use both of them? I ...
KorXo's user avatar
  • 1,152
9 votes
5 answers
48k views

How can I find what optic is in an interface for a Juniper MX-series router?

As the title states, how can I see what optic I have installed in an interface for an MX router?
Wild Bill's user avatar
  • 401
9 votes
3 answers
8k views

Cisco can't connect to Juniper device via SSH - Invalid modulus length

I'm trying to connect from a Cisco 886VA to a Juniper EX2200 via SSH. The connection fails with the following messages on the Cisco: *Jan 17 09:51:20.823: SSH2 CLIENT 0: Server has chosen 2056 -bit ...
Sebastian Wiesinger's user avatar
9 votes
1 answer
4k views

Juniper SRX HA links passing through switch

it is necessary to join two srx650 in chassis cluster (Passive/Active) via two switches EX4200 . I need to choose one from three examples. Please , help to define correct choice and describe what the ...
Vitaliy's user avatar
  • 397
9 votes
2 answers
2k views

Does Juniper set a control word on VPLS pseudowires

At the RIPE conference the was a talk about how MAC addresses starting with a 4or 6 may suffer from decreased performance because MPLS routers misinterpret the Ethernet packets as an IPv4/6 packet ...
Sebastian Wiesinger's user avatar
9 votes
2 answers
11k views

BGP remote-triggered blackhole (RTBH) filter for Juniper

I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer. The filter should: Only accept the customers own prefixes from a prefix-list Only accept /32 ...
Sebastian Wiesinger's user avatar
9 votes
1 answer
2k views

JUNIPER: Why is OSPF adjacency breaking when I enable FBF on an OSPF interface?

I've built a test lab where I am testing Filter Based Forwarding (FBF), aka Policy Based Routing. Question will follow below, but first, the details: Below is the topology diagram: OBJECTIVE: Any ...
NetEng76's user avatar
  • 141
9 votes
1 answer
1k views

Blocking IPv6 RA advertisements on Juniper EX series switch

How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not ...
YerPhate's user avatar
  • 111
8 votes
7 answers
26k views

Juniper EX-series: How can I transfer a config from one switch to another?

I have a lab EX-2200 that has a config on it that I now want to replicate onto four more EX-2200's... I'm sure there's probably an easy way to do this, but couldn't find it on the Juniper KB or by (a ...
Will Dennis's user avatar
8 votes
1 answer
6k views

How to force VPLS/L2VPN to use a specific path

We're using VPLS and L2VPN on Juniper MX for L2 connections. Signaling is done via BGP and label distribution via LDP. Now we want one L2VPN to use a specific path trough the network and not follow ...
Sebastian Wiesinger's user avatar
8 votes
1 answer
893 views

Aggregate Family Rate Limits on Juniper EX

Trying to figure out how to perform rate limits on Juniper EX for both inet and inet6 families. Ideally I'd like a packet rate limiter to be applied before the ip type is ever looked at. Basically, ...
Chip's user avatar
  • 81
8 votes
4 answers
4k views

How to signal a VPLS multihoming change to a L2 CE device

We have the following setup: Two MX routers connect to the same L2 site. Loop protection / redundancy is done via VPLS multihoming. On the other end are two switches (EX4200 for example). When the ...
Sebastian Wiesinger's user avatar
7 votes
1 answer
3k views

MSTP and Rapid-PVST+

We have a medium sized network running all Juniper except for one building. This building is shared with another group, and is completely Cisco. We just trunk our VLANs up there. Our Juniper network ...
ZaZa's user avatar
  • 73
7 votes
1 answer
17k views

Juniper SRX: Where do I look to see IKE debug messages?

Going through a JSEC book I noticed the following slide explains that there are 6 ike phase 1 messages that take place for a tunnel to establish. I am looking in the kmd log and traceoptions data but ...
tunnelsup's user avatar
  • 828
7 votes
1 answer
665 views

Is CoS supported in a logical system?

This reference states that class of service is supported in a logical system, but another reference disagrees. This may be a disparity between versions, but I have notoiced there is no class of ...
Dennis Olvany's user avatar
7 votes
1 answer
1k views

how to create managment access to SRX Lsys.

is there a way to configure separated admins, one for the SRX root lsys and another to a specific lsys? i'm trying to create two users that when you login with user1 you will login to the root lsys ...
Zorik Meyman's user avatar
7 votes
2 answers
1k views

DSCP trust boundary

I have performed some analysis and noticed that traffic coming in from the Internet contains a myriad of DSCP values. This traffic competes for voice and video resources on the internal network. How ...
Dennis Olvany's user avatar
7 votes
2 answers
2k views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
Jacktose's user avatar
  • 476
7 votes
1 answer
4k views

Juniper EX 3300 Incorrectly Identifies SFP+ Transceiver Module

We have 2 Juniper EX 3300 switches operating in a stack. It is running Junos 12.3R3.4. The switches have 4 SFP/SFP+ Ports. On FPC 1, PIC 1, Xcvr 0 you see a description of "SFP-FC8G-SW." However, the ...
sardean's user avatar
  • 562
7 votes
3 answers
15k views

How do I configure a port as STP "non-edge" on Juniper EX switches?

Juniper EX switches automatically categorize a port as an spanning-tree "edge" (there should only be one device behind the port) or "non-edge" (another switch) port. You can force this mode for a port ...
Sebastian Wiesinger's user avatar
7 votes
1 answer
2k views

What are some workarounds / fixes for UTM/IDP on Junos 12.1X44-D10.4 for SRX Series branch devices?

The JNCIP / JNCIE-SEC latest courses use 12.1X44-D10.4 as the recommended Junos version. I setup a 30-day evaluation on my home SRX device to study JIPS, based on 12.1. At this point, I'm guessing ...
lunistorvalds's user avatar
7 votes
2 answers
740 views

OSPF on ASA 8.2 not advertising /32

We have set up OSPF between our 2 ASA 5540 running in Active/Passive and our Internet provider's Juniper routers. We would like to advertise routes based on the content of an ACL through a route-map : ...
simsaull's user avatar
  • 173
7 votes
1 answer
3k views

Why does export/import policy addition/removal cause a BGP session reset?

I was adding a new policy to both import and export list for BGP. Then I observed a bgp session reset. Can anyone explain this for me? The only change I made was to prepend a new policy to reject ...
Bo Cao's user avatar
  • 401
7 votes
0 answers
1k views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
Tomato's user avatar
  • 123
6 votes
1 answer
3k views

Is it possible to run an IPv6 only MPLS core?

I am looking for information on whether it is actually possible to run an IPv6 only MPLS Core with respect to the transport labels, without the current requirement to tunnel across IPv4. To put this ...
DrBru's user avatar
  • 1,609
6 votes
2 answers
62k views

GNS3: Configuring/Emulating a Juniper Router on GNS3

I need to be able to emulate a Juniper Router (JunOS) on GNS3. I have seen that this is available as on option in the 'Node Types' list on GNS3. When I try to use this to add a Juniper Router to the ...
thilina R's user avatar
  • 611
6 votes
1 answer
314 views

How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?

Let's say, that I have a following simple BGP-signaled L2VPN configuration: root@PE4> show configuration routing-instances vpn-b { instance-type l2vpn; interface ge-0/0/0.515; route-...
Martin's user avatar
  • 1,217
6 votes
1 answer
1k views

Is it possible to stitch a L2VPN connection into a VPLS domain on Juniper MX

I'm trying to connect one end of a L2VPN tunnel to a VPLS instance on a Juniper MX router. The L2VPN should act like a local interface in the VPLS instance. Is this possible at all? I can't find any ...
Sebastian Wiesinger's user avatar
6 votes
1 answer
672 views

Juniper MX-5 EOPE Drop Pkt Cnt Incrementing

When running show pfe statistics error on a a couple of MX platforms, I see the EOPE Drop Pkt Cnt counter incrementing on 6 MX's out of 22. I believe these are "End-Of-Packet errors", but can't find ...
DrBru's user avatar
  • 1,609
6 votes
1 answer
4k views

What is the jsrv.1 interface for?

I have a Juniper EX2200 switch running JunOS 10.4R4.5. Under Configure -> System Properties -> Management Access, I can configure which interface allow management access. There is a mystery ...
myron-semack's user avatar
6 votes
1 answer
3k views

Juniper Private VLAN isolated port on a trunk

I'm trying to grasp the private VLAN configuration on Juniper EX switches. As I understand it right now: Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
Sebastian Wiesinger's user avatar
6 votes
2 answers
712 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
WinkyWolly's user avatar
6 votes
2 answers
7k views

Juniper user creation and password

I have created the user in Juniper devices by below commands root@qfx5100# set system login user RO class super-user Now the user RO has been created and I have not given any password to it. But ...
Mukesh_the_leo's user avatar
6 votes
3 answers
4k views

Is there a way to identify a Tri-Rate Copper SFP in a Juniper MX device

Juniper has two kinds of Copper SFPs. One (SFP-1GE-T) only does Gigabit. The other one (SFP-1GE-FE-E-T) can also run at 100M and 10M respectively. The problem is, in the chassis inventory both are ...
Sebastian Wiesinger's user avatar
6 votes
1 answer
674 views

Juniper IS-IS levels hierarchy configuration

Can someone please tell me what is the interface ge-2/1/0.0 IS-IS level after we have applied this config? Does Juniper takes both commands? level 2 disable at the interface level level 1 disable ...
BrotciV's user avatar
  • 91
6 votes
1 answer
2k views

SRX100 in bootloop. Flash storage problem?

About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me. After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
xeet's user avatar
  • 173
6 votes
3 answers
3k views

How to log out of state sessions on Juniper SRX platform?

I am really having trouble to get our SRXes to log sessions that are not in the state table and get dropped because of that. For example, if you reboot the firewall and some old NFS implementation ...
cryptochrome's user avatar
6 votes
1 answer
2k views

Strange IPv6 packet seen when enabling interface on Juniper MX

I have two MX80 routers which are connected. When I enable the interface on one router I get the following packet from the other router which I can't explain: 17:23:46.004429 In IP6 (hlim 1, next-...
Sebastian Wiesinger's user avatar
6 votes
0 answers
260 views

DHCPv6 Relay Agent on Juniper — Packets dropped: No SAFD

I tried to setup a DHCPv6 relay agent on a Juniper EX3400 switch. (SLAAC is unfortunately not enough for this use case.) While the setup of the (non-v6) DHCP relay agent worked flawlessly and was well-...
miho's user avatar
  • 192
6 votes
0 answers
702 views

EVPN MAC Advertisement route not installed to L2 forwarding table

I have a VLAN-based EVPN connecting two sites in a lab environment based on the network topology described in the DAY ONE: USING ETHERNET VPNS FOR DATA CENTER INTERCONNECT book: For some reason, it ...
Martin's user avatar
  • 1,217

1
2 3 4 5
11