Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
2
votes
2answers
54 views

rpd random path selection does not work in Juniper vMX

I read a Junos documentation which said that: In case of equal-cost paths for the same destination, the routing protocol daemon(rpd) randomly selects one of the available paths to balance load, while ...
1
vote
1answer
349 views

Configure jflow v5 get error: interface-name: 'xxx': Must be a services interface

friends: When I configure the jflow v5 on my MX-480: ===== admin@USA-MX-RE0# show forwarding-options sampling instance { MONITOR-FLOW { input { rate 1000; } ...
0
votes
0answers
33 views

Shaper configuration for Juniper MX480 - MPC3e 3D NG

following secario: A MX480 with MPC3e 3D NG Linecards. I have a new Layer2 Access provider that is providing Layer2 services between 100 and 1000MBit/s. My connection zu this services are a 10GE E-...
1
vote
0answers
73 views

Connecting layer 3 switches together without trunking

I currently have 2x Juniper EX4200 and I'm looking into changing it into Ubiquiti EdgeSwitchs. The diagram: SW01 and SW02 are connected to each other using OSPF P2P. Both of the switches have their ...
0
votes
1answer
745 views

Juniper EX2300 QinQ questions

I am trying to set up a Q in Q environment with EX2300(ELS). Unfortunately, I receive the error message down below when I enter commit check [edit interfaces ge-0/0/0] 'unit 0' VLAN-ID must be ...
1
vote
2answers
1k views

How to choose the most recommended Junos release for MX router

How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
0
votes
0answers
147 views

Juniper MX Routing Engine Firewall Filter

I'm having difficulties with something I initially thought would be rather simple. I need to apply an outbound firewall filter on an MX10003's management interface. I'm currently using Lo0.0 as the ...
0
votes
1answer
575 views

Managing a Juniper EX4300 In Band

Currently, our ex4300 are managed in band using irb.20. show configuration interfaces irb unit 20 { family inet6 { address 2001:db8:1::252/64; show configuration routing-options rib inet6.0 {...
0
votes
0answers
134 views

How to configure the jflow correctly in my juniper router?

I configured the jFlow sampling in Juniper MX480: but in my receive data server, there is no data received: and when I use Paessler Netflow Tester test it, there cannot use 14.224.224.253: Whether ...
-1
votes
2answers
397 views

What's the inline monitoring?

What's the inline monitoring? I searched wikipedia and google but do not find the meaning of inline monitoring for network. who can tell me the definition of it? I can get the definition of passive ...
2
votes
1answer
44 views

If accept IP address term before discard port term, will the IP's port still be discard?

In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT: dele@MX-RE0# show firewall filter DENY-EMAIL-PORT term ALLOW-IP { from { address { 102.100.100.1/32; ...
2
votes
0answers
36 views

CA certificate and Local certificate

There is something which is bothering me when i think about the CA cert and Local cert. Below are my queries which pertains to juniper but may be generic as well. 1) "request security pki ca-...
1
vote
1answer
633 views

Static ARP entry on MC-LAG ICL Link in Juniper MX routers

Can someone please explain in detail why we need to setup static arp entry on each MC-LAG peer. This is mentioned below in Juniper Documenttation https://www.juniper.net/documentation/en_US/junos/...
2
votes
1answer
71 views

Will the router crash when it is sent routes that it can't design to hold?

I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
3
votes
1answer
202 views

Juniper Physical Interface Damping Operation

I'm currently looking at physical interface damping on Juniper MX. Fun Fact: Nowhere on this site is it mentioned that the penalty added per interface down event is 1000. Currently testing this: ...
1
vote
2answers
864 views

Juniper SSG20, reset to factory default

I have an Juniper SSG20 that I have tried to reset to factory default. I have tried the pin hole reset method but to no avail, and the serial console doesn't indicate that the procedure is started, ...
1
vote
2answers
71 views

Applying WAN Changes to Juniper Chassis Cluster

I have a Juniper SRX 340 in a chassis cluster state. I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
2
votes
1answer
2k views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
3
votes
2answers
85 views

How can I capture application layer packages using `monitor traffic`?

In my Juniper MX480 , when I use monitor traffic ae16.327 no-resolve, I only get arp packages: 10:19:51.819444 Out arp who-has 109.25.6.5 tell 109.25.6.6 10:19:52.531849 Out arp who-has 109.25.6.4 ...
3
votes
2answers
961 views

What's the difference between "show arp no-resolve" and "show arp" in Juniper?

What's the difference between show arp no-resolve and show arp? If I add the no-resolve, what's the difference of it?
3
votes
1answer
907 views

juniper vlan-ccc vs ethernet-ccc for eompls

In juniper ethernet-ccc transports customer's vlan end to end. Does vlan-ccc also transport customer's vlan across as well? thanks.
1
vote
1answer
177 views

Multiple Queues having same Priority in Scheduler of Juniper CoS Implementation

I have confusion regarding Juniper CoS. In Juniper CoS , when we define scheduler we can mention the queue priority to that forwarding class like strict high , high , medium low etc which effects the ...
4
votes
1answer
69 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command set cli complete-on-space for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...
0
votes
2answers
630 views

Deny ssh access from CPEs in all routing-instance - Juniper MX960

I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
3
votes
1answer
110 views

Does Juniper have an equivalent of 'show security pki local-certificate' for remote certificates?

On a Juniper Firewall, the command show security pki local-certificate will give all sorts of detail for a local certificate. (The sort of certificate you would use to stand up an IKE connection) My ...
1
vote
1answer
137 views

ex4200 bootup warning

we have some old juniper ex4200 in our stock and it shows following warning in console : --- JUNOS 12.3R3.4 built 2013-06-14 00:08:02 UTC *************************************************************...
4
votes
1answer
406 views

How to use the monitor traffic only shows the In packages in Juniper EX480?

I use monitor traffic tool: run monitor traffic interface ae16 commad: 19:04:52.820205 Out arp who-has 16.23.40.133 tell 16.23.40.134 19:04:52.820210 Out arp who-has 43.243.33.66 tell ...
1
vote
1answer
60 views

Why the `policy-options prefix-list` do not shows hierarchy?

Why the policy-options prefix-list do not shows hierarchy? In a Juniper Router, I show policy-options, there shows: prefix-list snmp-permit { 1.1.1.0/24; } prefix-list icmp-permit { 2.2.2....
0
votes
1answer
159 views

Junos, accidentally deleted a FIB entry, how to re-add?

while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
1
vote
1answer
40 views

Where the `term` and `policer` would appear?

Where the term and policer would appear? In juniper, there have filter, term and policer. I know the filter is under firewall, but how about the term and policer? how to understand the concept? I ...
1
vote
1answer
5k views

How to show a Juniper interface bandwidth usage?

I want to check a Juniper Switch's port bandwidth usage. I tried show interfaces, but there is no current bandwidth condition: admin@Juniper-ex3300-48t# run show interfaces ge-0/1/1 Physical ...
3
votes
1answer
158 views

How to bypass when network speed over a special number in Juniper?

I have a requirement, such as I have 113.100.15.0/24 segment IP addresses. in Juniper M480 Router I connected to BGP-A(1G) and BGP-B(10G), by default the 113.100.15.0/24 out the Router it go ...
2
votes
1answer
131 views

Ip telephone being not served by DHCP

I have a DHCP configured on juniper router srx345 and an external DHCP runing on win machine and configured by telephony ppl. I'm using an IP tel Astra i740N when I send DHCP request to DHCP ...
3
votes
2answers
2k views

What's `irb` meaning? and what's the difference between it and `vlan`?

What's irb meaning? and what's the difference between vlan? I found some Junos version the vlan l3-interfaces should be vlan.xxx, and some times there is irb.xxx. irb { unit 0 { family ...
0
votes
2answers
1k views

There have uncommitted changes, but `show | compare` do not show it

There have uncommitted changes, but show | compare do not show it. {master}[edit] un@HK-MX-RE0# exit ...
0
votes
1answer
485 views

Juniper SRX 340 configuration import/export

Good morning, I have a Juniper SRX 340 Cluster (15.1X49-D70.3) in a professional environment, and a third firewall (same model) that I'd like to use as a test firewall. Is there any simple way to ...
0
votes
1answer
88 views

In IP6 fe80::8a10:8fff:feb7:1632 > ff02::2: ICMP6, router solicitation , length 16

When I use command to capture the packages of interface ae52.0 in my EX4300 gateway Switch (L3): run monitor traffic interface ae52.0 I get many In IP6 fe80::8a10:8fff:feb7:1632 > ff02::2: ...
1
vote
0answers
2k views

Why my ae interface Link type is down but the physical interface is up?

Why my ae interface Link type is down but the physical interface is up? In my convergence layer Switch, I use two Juniper EX4300 devices realize the Stack: so there have xe-0/0/x and xe-1/0/x ...
0
votes
1answer
262 views

Multicast in one VLAN

I need to receive multicast traffic over L2 segment on my client machine. But for some reason I am unable to do it. To my understanding with such scheme I should receive traffic if inbetween Juniper ...
0
votes
1answer
61 views

Why does this setup fail sometimes with Juniper EX4200?

I've got a very straight forward setup with the following devices: 1 x 10G Fibre uplink (internet) 1 x ASUS AC68U wifi router 1 x EX4200 20 x Servers (With IPMI and single ethernet) The EX4200 is ...
1
vote
0answers
2k views

TACACS with Juniper Devices

Can any one please help in configuring a TACACS+ server, along with configuration in Juniper devices? Ubuntu Server 14.04 Juniper QFX5100 switch Below are my configurations: For the TACACS+ server: ...
2
votes
1answer
355 views

Is there a way of Juniper to avoid the vast ARP requests?

In my Juniper router the interface always send ARP requests for some non-using IP address. Is there any issue there? and whether there is a way of Juniper to avoid the vast ARP requests? Is it ...
0
votes
1answer
33 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
1
vote
1answer
345 views

How to do port mirroring in Juniper EX2200 switch

I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
1
vote
1answer
778 views

My Juniper Router arp do not work, after clear MAC then it can work

In my MX Juniper router device, there have the IP 16.213.40.1's address: {master} admin@juniperMX> show arp no-resolve | ...
3
votes
2answers
155 views

Is it possible to limit a IP's traffic in gateway Juniper switch?

In my gateway Juniper Switch: ... irb { unit 0 { family inet; } unit 2 { family inet { address 10.10.10.254/24; } } unit 9 { family ...
1
vote
1answer
324 views

Juniper port forward range of ports with dynamic pppoe

I have Juniper SRX300. Due to some restrictions, i can't use static WAN IP address. I need to port forward a range of ports and it's working only using nat static section like this: username# show ...
3
votes
1answer
819 views

Juniper MX: Leaking routes from RIB into VRF

Aim We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
1
vote
1answer
635 views

High CPU utilization on Juniper ACX2100 chassis fpc

What is the cause of high utilization of cpu on fpc.Below is the output of which depicts utilization as 99 but router is running just fine. show chassis fpc Temp CPU ...
1
vote
1answer
422 views

PE route down in LDP based VPLS Connection in Juniper MX

I am observing 'PE route down message ' against LDP based VPLS connection on Juniper MX. The IGP protocol is IS-IS. LDP VPLS connectivity is point to point (having only two end points). When I check ...

1 2
3
4 5
10