Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
19
votes
4answers
42k views

Can I see the pending (commit at) changes on a JunOS box?

If an engineer configures some changes in a JunOS box and then set them to go live later, that effectively locks the config database with a configure exclusive. How can I see the changes that he or ...
19
votes
2answers
29k views

Cause of high CPU load on Juniper peering router's routing engine

Recently the routing engine CPU utilization on two of our Juniper peering routers increased from ~10-20% average load to 80+%. I'm trying to figure out what's causing this (and how to get this high ...
18
votes
1answer
1k views

MPLS auto-bandwidth balancing

I operate an MPLS/IP network that utilizes auto-bandwidth to measure bandwidth utilization and signal RSVP accordingly. How can I maintain balance across my LSP paths such that one large [P router]-to-...
17
votes
4answers
8k views

Are there any reasons to not use BFD?

In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
16
votes
2answers
26k views

Adding a simple VLAN on a Juniper MX

after years away from JunOS, working with Foundry (now Brocade) routers, I find myself with a new Juniper MX10. All I want to do is create a simple VLAN such that two ports share one routing ...
14
votes
5answers
712 views

In a multi-tenant environment what should be done to make your switchports silent on Cisco and Juniper switches?

For example preventing it from sending arp, stp, etc and to reveal as little as possible about the rest of the network. Example use case would be connecting to a peering exchange.
12
votes
2answers
15k views

why we can't create multiple loopback interfaces in Junos?

comparing to Cisco IOS , we can create any number of loopbacks on router , but on Junos you can create only one loopback interface (even logical units from same loopback) in the routing instance , ...
10
votes
4answers
3k views

Embedded routers vs. software routers in the datacentre

I've been looking for a new 'core' router to put in our new rack which is colo'd at a nearby datacentre. What I've come across is the usual Cisco/Juniper/Brocade lineup, with the usual unattractive ...
10
votes
1answer
4k views

Can I poll firewall counters on Juniper routers via SNMP

I have a firewall counter on a Juniper MX router (set firewall filter myfilter term myterm then count mycounter) and want to poll its packet/byte count via SNMP. I searched for an OID but I'm unable ...
10
votes
3answers
3k views

SRX DHCP client compatibility with HP Procurve DHCP Relay

I am trying to bootstrap the config on some Juniper SRX100s and am having some DHCP issues. Specifically, I am connecting the 0/0 port (fe-0/0/0 in the software) to my existing network, where DHCP ...
10
votes
1answer
385 views

Juniper, vlan-centric vs interface-centric. Which has prevalence?

I am new to Juniper and has a basic doubt about assigning an interface to a VLAN. I have read that JunOS admits both approaches. My question is, what method prevalence when you use both of them? I ...
9
votes
3answers
7k views

Cisco can't connect to Juniper device via SSH - Invalid modulus length

I'm trying to connect from a Cisco 886VA to a Juniper EX2200 via SSH. The connection fails with the following messages on the Cisco: *Jan 17 09:51:20.823: SSH2 CLIENT 0: Server has chosen 2056 -bit ...
9
votes
4answers
32k views

How can I find what optic is in an interface for a Juniper MX-series router?

As the title states, how can I see what optic I have installed in an interface for an MX router?
9
votes
1answer
3k views

Juniper SRX HA links passing through switch

it is necessary to join two srx650 in chassis cluster (Passive/Active) via two switches EX4200 . I need to choose one from three examples. Please , help to define correct choice and describe what the ...
9
votes
2answers
2k views

Does Juniper set a control word on VPLS pseudowires

At the RIPE conference the was a talk about how MAC addresses starting with a 4or 6 may suffer from decreased performance because MPLS routers misinterpret the Ethernet packets as an IPv4/6 packet ...
9
votes
2answers
10k views

BGP remote-triggered blackhole (RTBH) filter for Juniper

I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer. The filter should: Only accept the customers own prefixes from a prefix-list Only accept /32 ...
9
votes
1answer
2k views

JUNIPER: Why is OSPF adjacency breaking when I enable FBF on an OSPF interface?

I've built a test lab where I am testing Filter Based Forwarding (FBF), aka Policy Based Routing. Question will follow below, but first, the details: Below is the topology diagram: OBJECTIVE: Any ...
9
votes
1answer
1k views

Blocking IPv6 RA advertisements on Juniper EX series switch

How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not ...
8
votes
7answers
22k views

Juniper EX-series: How can I transfer a config from one switch to another?

I have a lab EX-2200 that has a config on it that I now want to replicate onto four more EX-2200's... I'm sure there's probably an easy way to do this, but couldn't find it on the Juniper KB or by (a ...
8
votes
1answer
6k views

How to force VPLS/L2VPN to use a specific path

We're using VPLS and L2VPN on Juniper MX for L2 connections. Signaling is done via BGP and label distribution via LDP. Now we want one L2VPN to use a specific path trough the network and not follow ...
8
votes
1answer
849 views

Aggregate Family Rate Limits on Juniper EX

Trying to figure out how to perform rate limits on Juniper EX for both inet and inet6 families. Ideally I'd like a packet rate limiter to be applied before the ip type is ever looked at. Basically, ...
8
votes
4answers
4k views

How to signal a VPLS multihoming change to a L2 CE device

We have the following setup: Two MX routers connect to the same L2 site. Loop protection / redundancy is done via VPLS multihoming. On the other end are two switches (EX4200 for example). When the ...
7
votes
1answer
2k views

MSTP and Rapid-PVST+

We have a medium sized network running all Juniper except for one building. This building is shared with another group, and is completely Cisco. We just trunk our VLANs up there. Our Juniper network ...
7
votes
1answer
15k views

Juniper SRX: Where do I look to see IKE debug messages?

Going through a JSEC book I noticed the following slide explains that there are 6 ike phase 1 messages that take place for a tunnel to establish. I am looking in the kmd log and traceoptions data but ...
7
votes
1answer
622 views

Is CoS supported in a logical system?

This reference states that class of service is supported in a logical system, but another reference disagrees. This may be a disparity between versions, but I have notoiced there is no class of ...
7
votes
1answer
1k views

how to create managment access to SRX Lsys.

is there a way to configure separated admins, one for the SRX root lsys and another to a specific lsys? i'm trying to create two users that when you login with user1 you will login to the root lsys ...
7
votes
2answers
962 views

DSCP trust boundary

I have performed some analysis and noticed that traffic coming in from the Internet contains a myriad of DSCP values. This traffic competes for voice and video resources on the internal network. How ...
7
votes
2answers
1k views

Can Junos show a matching config statement in context, like IOS `| section`?

Hard to describe what I'm asking. For example, here's a section of my config, with the full hierarchy: interfaces { ge-0/1/9 { vlan-tagging; unit 100 { description "my ...
7
votes
1answer
4k views

Juniper EX 3300 Incorrectly Identifies SFP+ Transceiver Module

We have 2 Juniper EX 3300 switches operating in a stack. It is running Junos 12.3R3.4. The switches have 4 SFP/SFP+ Ports. On FPC 1, PIC 1, Xcvr 0 you see a description of "SFP-FC8G-SW." However, the ...
7
votes
3answers
13k views

How do I configure a port as STP “non-edge” on Juniper EX switches?

Juniper EX switches automatically categorize a port as an spanning-tree "edge" (there should only be one device behind the port) or "non-edge" (another switch) port. You can force this mode for a port ...
7
votes
1answer
2k views

What are some workarounds / fixes for UTM/IDP on Junos 12.1X44-D10.4 for SRX Series branch devices?

The JNCIP / JNCIE-SEC latest courses use 12.1X44-D10.4 as the recommended Junos version. I setup a 30-day evaluation on my home SRX device to study JIPS, based on 12.1. At this point, I'm guessing ...
7
votes
2answers
665 views

OSPF on ASA 8.2 not advertising /32

We have set up OSPF between our 2 ASA 5540 running in Active/Passive and our Internet provider's Juniper routers. We would like to advertise routes based on the content of an ACL through a route-map : ...
7
votes
1answer
3k views

Why does export/import policy addition/removal cause a BGP session reset?

I was adding a new policy to both import and export list for BGP. Then I observed a bgp session reset. Can anyone explain this for me? The only change I made was to prepend a new policy to reject ...
6
votes
1answer
3k views

Is it possible to run an IPv6 only MPLS core?

I am looking for information on whether it is actually possible to run an IPv6 only MPLS Core with respect to the transport labels, without the current requirement to tunnel across IPv4. To put this ...
6
votes
1answer
1k views

Is it possible to stitch a L2VPN connection into a VPLS domain on Juniper MX

I'm trying to connect one end of a L2VPN tunnel to a VPLS instance on a Juniper MX router. The L2VPN should act like a local interface in the VPLS instance. Is this possible at all? I can't find any ...
6
votes
1answer
622 views

Juniper MX-5 EOPE Drop Pkt Cnt Incrementing

When running show pfe statistics error on a a couple of MX platforms, I see the EOPE Drop Pkt Cnt counter incrementing on 6 MX's out of 22. I believe these are "End-Of-Packet errors", but can't find ...
6
votes
1answer
3k views

What is the jsrv.1 interface for?

I have a Juniper EX2200 switch running JunOS 10.4R4.5. Under Configure -> System Properties -> Management Access, I can configure which interface allow management access. There is a mystery ...
6
votes
1answer
3k views

Juniper Private VLAN isolated port on a trunk

I'm trying to grasp the private VLAN configuration on Juniper EX switches. As I understand it right now: Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
6
votes
2answers
417 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
6
votes
2answers
6k views

Juniper user creation and password

I have created the user in Juniper devices by below commands root@qfx5100# set system login user RO class super-user Now the user RO has been created and I have not given any password to it. But ...
6
votes
3answers
4k views

Is there a way to identify a Tri-Rate Copper SFP in a Juniper MX device

Juniper has two kinds of Copper SFPs. One (SFP-1GE-T) only does Gigabit. The other one (SFP-1GE-FE-E-T) can also run at 100M and 10M respectively. The problem is, in the chassis inventory both are ...
6
votes
1answer
615 views

Juniper IS-IS levels hierarchy configuration

Can someone please tell me what is the interface ge-2/1/0.0 IS-IS level after we have applied this config? Does Juniper takes both commands? level 2 disable at the interface level level 1 disable ...
6
votes
1answer
2k views

SRX100 in bootloop. Flash storage problem?

About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me. After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
6
votes
3answers
2k views

How to log out of state sessions on Juniper SRX platform?

I am really having trouble to get our SRXes to log sessions that are not in the state table and get dropped because of that. For example, if you reboot the firewall and some old NFS implementation ...
6
votes
1answer
1k views

Strange IPv6 packet seen when enabling interface on Juniper MX

I have two MX80 routers which are connected. When I enable the interface on one router I get the following packet from the other router which I can't explain: 17:23:46.004429 In IP6 (hlim 1, next-...
6
votes
0answers
607 views

Maximum number of subscribers per FPC in Juniper MX

If link with subscribers, containing about 12000 clients, goes down. One aggregated ethernet containing two links which goes to two different FPC's. All clients try to authorize on JuniperMX with the ...
5
votes
4answers
4k views

Juniper Switching - Cheap Lab

A little bit new to Juniper here. I am working on scripting few of our switch ports. All switches are Juniper, Ex, FX, QFX, ...etc. I have no access to a lab to test my scripts, and was looking for ...
5
votes
3answers
5k views

Logging in to console port on Juniper EX2200

I have a Juniper EX2200 with JunOS 10.3R1.9 in a remote location, making it impossible for me to test. I will be on-site for one day and while there, I would like to login through the console port ...
5
votes
3answers
1k views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
5
votes
2answers
432 views

Juniper SRX security utm missing

I've been trying to set up local web-filtering (no license required, right?) on customer's SRX 240. Every guide that I had managed to find said that it was to be configured under "edit security utm". ...

1
2 3 4 5
10