Questions tagged [juniper]
A tag for questions involving Juniper Networks hardware or software.
516
questions
20
votes
4
answers
56k
views
Can I see the pending (commit at) changes on a JunOS box?
If an engineer configures some changes in a JunOS box and then set them to go live later, that effectively locks the config database with a configure exclusive. How can I see the changes that he or ...
- 452
19
votes
2
answers
32k
views
Cause of high CPU load on Juniper peering router's routing engine
Recently the routing engine CPU utilization on two of our Juniper peering routers increased from ~10-20% average load to 80+%. I'm trying to figure out what's causing this (and how to get this high ...
- 17.1k
18
votes
3
answers
29k
views
Adding a simple VLAN on a Juniper MX
after years away from JunOS, working with Foundry (now Brocade) routers, I find myself with a new Juniper MX10. All I want to do is create a simple VLAN such that two ports share one routing ...
- 181
18
votes
4
answers
9k
views
Are there any reasons to not use BFD?
In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
- 2,087
18
votes
1
answer
1k
views
MPLS auto-bandwidth balancing
I operate an MPLS/IP network that utilizes auto-bandwidth to measure bandwidth utilization and signal RSVP accordingly.
How can I maintain balance across my LSP paths such that one large [P router]-to-...
- 543
14
votes
5
answers
728
views
In a multi-tenant environment what should be done to make your switchports silent on Cisco and Juniper switches?
For example preventing it from sending arp, stp, etc and to reveal as little as possible about the rest of the network.
Example use case would be connecting to a peering exchange.
- 1,675
12
votes
2
answers
18k
views
why we can't create multiple loopback interfaces in Junos?
comparing to Cisco IOS , we can create any number of loopbacks on router , but on Junos you can create only one loopback interface (even logical units from same loopback) in the routing instance , ...
- 1,723
10
votes
4
answers
3k
views
Embedded routers vs. software routers in the datacentre
I've been looking for a new 'core' router to put in our new rack which is colo'd at a nearby datacentre. What I've come across is the usual Cisco/Juniper/Brocade lineup, with the usual unattractive ...
- 515
10
votes
1
answer
5k
views
Can I poll firewall counters on Juniper routers via SNMP
I have a firewall counter on a Juniper MX router (set firewall filter myfilter term myterm then count mycounter) and want to poll its packet/byte count via SNMP. I searched for an OID but I'm unable ...
- 8,117
10
votes
3
answers
3k
views
SRX DHCP client compatibility with HP Procurve DHCP Relay
I am trying to bootstrap the config on some Juniper SRX100s and am having some DHCP issues.
Specifically, I am connecting the 0/0 port (fe-0/0/0 in the software) to my existing network, where DHCP ...
- 2,496
10
votes
1
answer
402
views
Juniper, vlan-centric vs interface-centric. Which has prevalence?
I am new to Juniper and has a basic doubt about assigning an interface to a VLAN. I have read that JunOS admits both approaches. My question is, what method prevalence when you use both of them?
I ...
- 1,152
9
votes
5
answers
48k
views
How can I find what optic is in an interface for a Juniper MX-series router?
As the title states, how can I see what optic I have installed in an interface for an MX router?
- 401
9
votes
3
answers
8k
views
Cisco can't connect to Juniper device via SSH - Invalid modulus length
I'm trying to connect from a Cisco 886VA to a Juniper EX2200 via SSH. The connection fails with the following messages on the Cisco:
*Jan 17 09:51:20.823: SSH2 CLIENT 0: Server has chosen 2056 -bit ...
- 8,117
9
votes
1
answer
4k
views
Juniper SRX HA links passing through switch
it is necessary to join two srx650 in chassis cluster (Passive/Active) via two switches EX4200 . I need to choose one from three examples.
Please , help to define correct choice and describe what the ...
- 397
9
votes
2
answers
2k
views
Does Juniper set a control word on VPLS pseudowires
At the RIPE conference the was a talk about how MAC addresses starting with a 4or 6 may suffer from decreased performance because MPLS routers misinterpret the Ethernet packets as an IPv4/6 packet ...
- 8,117
9
votes
2
answers
11k
views
BGP remote-triggered blackhole (RTBH) filter for Juniper
I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer.
The filter should:
Only accept the customers own prefixes from a prefix-list
Only accept /32 ...
- 8,117
9
votes
1
answer
2k
views
JUNIPER: Why is OSPF adjacency breaking when I enable FBF on an OSPF interface?
I've built a test lab where I am testing Filter Based Forwarding (FBF), aka Policy Based Routing. Question will follow below, but first, the details:
Below is the topology diagram:
OBJECTIVE: Any ...
- 141
9
votes
1
answer
1k
views
Blocking IPv6 RA advertisements on Juniper EX series switch
How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not ...
- 111
8
votes
7
answers
26k
views
Juniper EX-series: How can I transfer a config from one switch to another?
I have a lab EX-2200 that has a config on it that I now want to replicate onto four more EX-2200's... I'm sure there's probably an easy way to do this, but couldn't find it on the Juniper KB or by (a ...
- 461
8
votes
1
answer
6k
views
How to force VPLS/L2VPN to use a specific path
We're using VPLS and L2VPN on Juniper MX for L2 connections. Signaling is done via BGP and label distribution via LDP.
Now we want one L2VPN to use a specific path trough the network and not follow ...
- 8,117
8
votes
1
answer
893
views
Aggregate Family Rate Limits on Juniper EX
Trying to figure out how to perform rate limits on Juniper EX for both inet and inet6 families. Ideally I'd like a packet rate limiter to be applied before the ip type is ever looked at. Basically, ...
- 81
8
votes
4
answers
4k
views
How to signal a VPLS multihoming change to a L2 CE device
We have the following setup:
Two MX routers connect to the same L2 site. Loop protection / redundancy is done via VPLS multihoming. On the other end are two switches (EX4200 for example).
When the ...
- 8,117
7
votes
1
answer
3k
views
MSTP and Rapid-PVST+
We have a medium sized network running all Juniper except for one building. This building is shared with another group, and is completely Cisco. We just trunk our VLANs up there.
Our Juniper network ...
- 73
7
votes
1
answer
17k
views
Juniper SRX: Where do I look to see IKE debug messages?
Going through a JSEC book I noticed the following slide explains that there are 6 ike phase 1 messages that take place for a tunnel to establish.
I am looking in the kmd log and traceoptions data but ...
- 828
7
votes
1
answer
665
views
Is CoS supported in a logical system?
This reference states that class of service is supported in a logical system, but another reference disagrees. This may be a disparity between versions, but I have notoiced there is no class of ...
- 2,435
7
votes
1
answer
1k
views
how to create managment access to SRX Lsys.
is there a way to configure separated admins, one for the SRX root lsys and another to a specific lsys?
i'm trying to create two users that when you login with user1 you will login to the root lsys ...
- 145
7
votes
2
answers
1k
views
DSCP trust boundary
I have performed some analysis and noticed that traffic coming in from the Internet contains a myriad of DSCP values. This traffic competes for voice and video resources on the internal network.
How ...
- 2,435
7
votes
2
answers
2k
views
Can Junos show a matching config statement in context, like IOS `| section`?
Hard to describe what I'm asking.
For example, here's a section of my config, with the full hierarchy:
interfaces {
ge-0/1/9 {
vlan-tagging;
unit 100 {
description "my ...
- 476
7
votes
1
answer
4k
views
Juniper EX 3300 Incorrectly Identifies SFP+ Transceiver Module
We have 2 Juniper EX 3300 switches operating in a stack. It is running Junos 12.3R3.4. The switches have 4 SFP/SFP+ Ports. On FPC 1, PIC 1, Xcvr 0 you see a description of "SFP-FC8G-SW." However, the ...
- 562
7
votes
3
answers
15k
views
How do I configure a port as STP "non-edge" on Juniper EX switches?
Juniper EX switches automatically categorize a port as an spanning-tree "edge" (there should only be one device behind the port) or "non-edge" (another switch) port. You can force this mode for a port ...
- 8,117
7
votes
1
answer
2k
views
What are some workarounds / fixes for UTM/IDP on Junos 12.1X44-D10.4 for SRX Series branch devices?
The JNCIP / JNCIE-SEC latest courses use 12.1X44-D10.4 as the recommended Junos version. I setup a 30-day evaluation on my home SRX device to study JIPS, based on 12.1. At this point, I'm guessing ...
- 413
7
votes
2
answers
740
views
OSPF on ASA 8.2 not advertising /32
We have set up OSPF between our 2 ASA 5540 running in Active/Passive and our Internet provider's Juniper routers. We would like to advertise routes based on the content of an ACL through a route-map : ...
- 173
7
votes
1
answer
3k
views
Why does export/import policy addition/removal cause a BGP session reset?
I was adding a new policy to both import and export list for BGP. Then I observed a bgp session reset. Can anyone explain this for me?
The only change I made was to prepend a new policy to reject ...
- 401
7
votes
0
answers
1k
views
Maximum number of subscribers per FPC in Juniper MX
If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's.
All clients try to authorize on JuniperMX with the ...
- 123
6
votes
1
answer
3k
views
Is it possible to run an IPv6 only MPLS core?
I am looking for information on whether it is actually possible to run an IPv6 only MPLS Core with respect to the transport labels, without the current requirement to tunnel across IPv4.
To put this ...
- 1,609
6
votes
2
answers
62k
views
GNS3: Configuring/Emulating a Juniper Router on GNS3
I need to be able to emulate a Juniper Router (JunOS) on GNS3.
I have seen that this is available as on option in the 'Node Types' list on GNS3.
When I try to use this to add a Juniper Router to the ...
- 611
6
votes
1
answer
314
views
How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?
Let's say, that I have a following simple BGP-signaled L2VPN configuration:
root@PE4> show configuration routing-instances
vpn-b {
instance-type l2vpn;
interface ge-0/0/0.515;
route-...
- 1,217
6
votes
1
answer
1k
views
Is it possible to stitch a L2VPN connection into a VPLS domain on Juniper MX
I'm trying to connect one end of a L2VPN tunnel to a VPLS instance on a Juniper MX router. The L2VPN should act like a local interface in the VPLS instance. Is this possible at all? I can't find any ...
- 8,117
6
votes
1
answer
672
views
Juniper MX-5 EOPE Drop Pkt Cnt Incrementing
When running show pfe statistics error on a a couple of MX platforms, I see the EOPE Drop Pkt Cnt counter incrementing on 6 MX's out of 22. I believe these are "End-Of-Packet errors", but can't find ...
- 1,609
6
votes
1
answer
4k
views
What is the jsrv.1 interface for?
I have a Juniper EX2200 switch running JunOS 10.4R4.5.
Under Configure -> System Properties -> Management Access, I can configure which interface allow management access. There is a mystery ...
- 225
6
votes
1
answer
3k
views
Juniper Private VLAN isolated port on a trunk
I'm trying to grasp the private VLAN configuration on Juniper EX switches.
As I understand it right now:
Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
- 8,117
6
votes
2
answers
712
views
Issues with Juniper MX-series iBGP routes
I have a simple setup:
2x Juniper MX-Series routers each having one uplink to a transit provider
iBGP session between both routers (point-to-point)
For testing purposes I've disabled the uplink from ...
- 257
6
votes
2
answers
7k
views
Juniper user creation and password
I have created the user in Juniper devices by below commands
root@qfx5100# set system login user RO class super-user
Now the user RO has been created and I have not given any password to it. But ...
- 121
6
votes
3
answers
4k
views
Is there a way to identify a Tri-Rate Copper SFP in a Juniper MX device
Juniper has two kinds of Copper SFPs. One (SFP-1GE-T) only does Gigabit. The other one (SFP-1GE-FE-E-T) can also run at 100M and 10M respectively.
The problem is, in the chassis inventory both are ...
- 8,117
6
votes
1
answer
674
views
Juniper IS-IS levels hierarchy configuration
Can someone please tell me what is the interface ge-2/1/0.0 IS-IS level after we have applied this config?
Does Juniper takes both commands?
level 2 disable at the interface level
level 1 disable ...
- 91
6
votes
1
answer
2k
views
SRX100 in bootloop. Flash storage problem?
About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me.
After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
- 173
6
votes
3
answers
3k
views
How to log out of state sessions on Juniper SRX platform?
I am really having trouble to get our SRXes to log sessions that are not in the state table and get dropped because of that.
For example, if you reboot the firewall and some old NFS implementation ...
- 116
6
votes
1
answer
2k
views
Strange IPv6 packet seen when enabling interface on Juniper MX
I have two MX80 routers which are connected. When I enable the interface on one router I get the following packet from the other router which I can't explain:
17:23:46.004429 In IP6 (hlim 1, next-...
- 8,117
6
votes
0
answers
260
views
DHCPv6 Relay Agent on Juniper — Packets dropped: No SAFD
I tried to setup a DHCPv6 relay agent on a Juniper EX3400 switch. (SLAAC is unfortunately not enough for this use case.)
While the setup of the (non-v6) DHCP relay agent worked flawlessly and was well-...
- 192
6
votes
0
answers
702
views
EVPN MAC Advertisement route not installed to L2 forwarding table
I have a VLAN-based EVPN connecting two sites in a lab environment based on the network topology described in the DAY ONE: USING ETHERNET VPNS FOR DATA CENTER INTERCONNECT book:
For some reason, it ...
- 1,217