Questions tagged [juniper]
A tag for questions involving Juniper Networks hardware or software.
457
questions
0
votes
1answer
38 views
Juniper / SRX-100 / Repurpose old device / Disable DHCP?
I have an old Juniper SRX-100. I want to re-purpose it for my network. I need to extend the network in a new location, so I need more ports. I could use a simple switch, but I have this laying ...
0
votes
2answers
92 views
juniper router /var directory is full , deleting .tgz file in root directory
i need to free some space on my juniper router , in the root directory when i use >ls -lash command i see a .tgz file which is 405 M , my question , if i delete this will it cause any problem ?
0
votes
1answer
22 views
Juniper MX: NTP broadcast on two VRFs with the same addressing
In Juniper, NTP broadcast is set at system level, so two VRFs cannot use the same addressing and use NTP broadcast at the same time. Is there any alternative?
0
votes
0answers
62 views
Juniper MX - ERPS over MPLS CCC or VPLS
I wonder if there is a possibility to implement an ERPS Ring over a few Juniper MX nodes that are interconnected via MPLS only?
The only idea i have to configure this is using lt - interfaces with a ...
1
vote
1answer
51 views
What are the differences between injecting the default route to IGP using a static route or using a generated route?
Let's say, that I have a following network topology:
isp_router[t1-0/0/0.0] <-> [t1-0/0/0.0]ospf_asbr
I want to generate a default route for IGP in ospf_asbr router. One option would be a ...
0
votes
1answer
1k views
JunOS: How to copy the config file to TFTP server?
Model: j6350
JUNOS Software Release [12.1X46-D65.4]
Is there an easy way to copy the config file to TFTP?
2
votes
1answer
81 views
How does ISIS find a next hop address for a prefix learned by ISIS?
I have two Juniper routers connected like this:
r1[ge-0/0/2] <-> [ge-0/0/3]r2
Both ge-0/0/2 in r1 and ge-0/0/3 in r2 do not have a family inet configured:
root@r1> show interfaces ge-0/0/2 ...
0
votes
2answers
167 views
Can't log in after admin password change
I reset my admin password with below command:
#Set system login user admin authentication encrypted-password <new password>
But now i can't login to my device, what can be the reason?
0
votes
0answers
25 views
Does Junos convert routing policy into binary tree?
Let's say, that there is a following simply route policy in Juniper router:
root@vmx> show policy test
Policy test:
Term 1:
from
route filter:
10.10.10.7/...
0
votes
2answers
52 views
How can I tell which prefixes are being advertised?
Forgive me if this is a dumb question but I'm relatively new to the carrier networking world. We own a block of IP addresses, say a /18 and we advertise various /20s, /24s, /23s, etc all over the ...
1
vote
1answer
106 views
How to verify the traffic forwarding class in Junos if it is set by firewall filter?
I have a firewall filter below which puts the ICMP traffic to assured-forwarding class if the bandwidth threshold is not exceeded:
root@vmx> show configuration firewall filter example | display ...
2
votes
2answers
53 views
rpd random path selection does not work in Juniper vMX
I read a Junos documentation which said that:
In case of equal-cost paths for the same destination, the routing protocol daemon(rpd) randomly selects one of the available paths to balance load, while ...
0
votes
1answer
213 views
split detection virtual chassis
i'm studying juniper virtual chassis and i've lab with following:
can someone explain how split detection works in juniper?
"no-split-detection" is configured on every virtual chassis(Ex3300,Ex3400)...
1
vote
1answer
306 views
Configure jflow v5 get error: interface-name: 'xxx': Must be a services interface
friends:
When I configure the jflow v5 on my MX-480:
=====
admin@USA-MX-RE0# show forwarding-options sampling
instance {
MONITOR-FLOW {
input {
rate 1000;
}
...
1
vote
1answer
187 views
Activating the NEBS Compliance SFP on Juniper MX disabled due to Ambient Temperature Exceeded
We have faced an issue on Juniper MX960 that some SFPs (10G Optics) were disabled due to ambient temperature exceeded. This was observed in the syslog messages on MX. However after the physical ...
0
votes
0answers
27 views
Shaper configuration for Juniper MX480 - MPC3e 3D NG
following secario:
A MX480 with MPC3e 3D NG Linecards.
I have a new Layer2 Access provider that is providing Layer2 services between 100 and 1000MBit/s. My connection zu this services are a 10GE E-...
1
vote
0answers
70 views
Connecting layer 3 switches together without trunking
I currently have 2x Juniper EX4200 and I'm looking into changing it into Ubiquiti EdgeSwitchs.
The diagram:
SW01 and SW02 are connected to each other using OSPF P2P. Both of the switches have their ...
1
vote
1answer
177 views
VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense
I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
0
votes
1answer
1k views
JunOS: FPC Major error alarm
I hope everyone is doing fine!
This morning I've run into a problem. My uplink interface went down for unknown reasons.
Upon checking system alarms I see this:
show system alarms
1 alarms currently ...
1
vote
2answers
830 views
How to choose the most recommended Junos release for MX router
How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
0
votes
0answers
95 views
Juniper MX Routing Engine Firewall Filter
I'm having difficulties with something I initially thought would be rather simple. I need to apply an outbound firewall filter on an MX10003's management interface. I'm currently using Lo0.0 as the ...
0
votes
1answer
340 views
Managing a Juniper EX4300 In Band
Currently, our ex4300 are managed in band using irb.20.
show configuration interfaces irb
unit 20 {
family inet6 {
address 2001:db8:1::252/64;
show configuration routing-options
rib inet6.0 {...
0
votes
0answers
101 views
How to configure the jflow correctly in my juniper router?
I configured the jFlow sampling in Juniper MX480:
but in my receive data server, there is no data received:
and when I use Paessler Netflow Tester test it, there cannot use 14.224.224.253:
Whether ...
-1
votes
2answers
248 views
What's the inline monitoring?
What's the inline monitoring?
I searched wikipedia and google but do not find the meaning of inline monitoring for network.
who can tell me the definition of it?
I can get the definition of passive ...
2
votes
1answer
44 views
If accept IP address term before discard port term, will the IP's port still be discard?
In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT:
dele@MX-RE0# show firewall filter DENY-EMAIL-PORT
term ALLOW-IP {
from {
address {
102.100.100.1/32;
...
2
votes
0answers
35 views
CA certificate and Local certificate
There is something which is bothering me when i think about the CA cert and Local cert.
Below are my queries which pertains to juniper but may be generic as well.
1) "request security pki ca-...
1
vote
1answer
420 views
Static ARP entry on MC-LAG ICL Link in Juniper MX routers
Can someone please explain in detail why we need to setup static arp entry on each MC-LAG peer. This is mentioned below in Juniper Documenttation
https://www.juniper.net/documentation/en_US/junos/...
2
votes
1answer
67 views
Will the router crash when it is sent routes that it can't design to hold?
I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
3
votes
1answer
133 views
Juniper Physical Interface Damping Operation
I'm currently looking at physical interface damping on Juniper MX.
Fun Fact: Nowhere on this site is it mentioned that the penalty added
per interface down event is 1000.
Currently testing this:
...
3
votes
2answers
82 views
How can I capture application layer packages using `monitor traffic`?
In my Juniper MX480 , when I use monitor traffic ae16.327 no-resolve, I only get arp packages:
10:19:51.819444 Out arp who-has 109.25.6.5 tell 109.25.6.6
10:19:52.531849 Out arp who-has 109.25.6.4 ...
1
vote
2answers
65 views
Applying WAN Changes to Juniper Chassis Cluster
I have a Juniper SRX 340 in a chassis cluster state.
I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
0
votes
3answers
601 views
How can I monitor traffic matching a IP address?
I see this article:
user@host> monitor traffic matching “port 22” no-resolve
there can matching a port
and I can matching arp too:
user@host> monitor traffic matching “arp” no-resolve
but, ...
1
vote
1answer
114 views
Multiple Queues having same Priority in Scheduler of Juniper CoS Implementation
I have confusion regarding Juniper CoS. In Juniper CoS , when we define scheduler we can mention the queue priority to that forwarding class like strict high , high , medium low etc which effects the ...
3
votes
2answers
651 views
What's the difference between “show arp no-resolve” and “show arp” in Juniper?
What's the difference between show arp no-resolve and show arp?
If I add the no-resolve, what's the difference of it?
0
votes
2answers
426 views
Deny ssh access from CPEs in all routing-instance - Juniper MX960
I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
3
votes
1answer
92 views
Does Juniper have an equivalent of 'show security pki local-certificate' for remote certificates?
On a Juniper Firewall, the command show security pki local-certificate will give all sorts of detail for a local certificate. (The sort of certificate you would use to stand up an IKE connection)
My ...
1
vote
1answer
111 views
ex4200 bootup warning
we have some old juniper ex4200 in our stock and it shows following warning in console :
--- JUNOS 12.3R3.4 built 2013-06-14 00:08:02 UTC
*************************************************************...
3
votes
1answer
622 views
juniper vlan-ccc vs ethernet-ccc for eompls
In juniper ethernet-ccc transports customer's vlan end to end. Does vlan-ccc also transport customer's vlan across as well? thanks.
0
votes
1answer
549 views
Juniper EX2300 QinQ questions
I am trying to set up a Q in Q environment with EX2300(ELS). Unfortunately, I receive the error message down below when I enter commit check
[edit interfaces ge-0/0/0]
'unit 0'
VLAN-ID must be ...
1
vote
2answers
694 views
Juniper SSG20, reset to factory default
I have an Juniper SSG20 that I have tried to reset to factory default.
I have tried the pin hole reset method but to no avail, and the serial console doesn't indicate that the procedure is started, ...
0
votes
1answer
129 views
Junos, accidentally deleted a FIB entry, how to re-add?
while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
1
vote
1answer
53 views
Why the `policy-options prefix-list` do not shows hierarchy?
Why the policy-options prefix-list do not shows hierarchy?
In a Juniper Router,
I show policy-options, there shows:
prefix-list snmp-permit {
1.1.1.0/24;
}
prefix-list icmp-permit {
2.2.2....
1
vote
1answer
40 views
Where the `term` and `policer` would appear?
Where the term and policer would appear?
In juniper, there have filter, term and policer.
I know the filter is under firewall, but how about the term and policer?
how to understand the concept?
I ...
1
vote
1answer
3k views
How to show a Juniper interface bandwidth usage?
I want to check a Juniper Switch's port bandwidth usage.
I tried show interfaces, but there is no current bandwidth condition:
admin@Juniper-ex3300-48t# run show interfaces ge-0/1/1
Physical ...
3
votes
1answer
154 views
How to bypass when network speed over a special number in Juniper?
I have a requirement, such as I have 113.100.15.0/24 segment IP addresses.
in Juniper M480 Router I connected to BGP-A(1G) and BGP-B(10G),
by default the 113.100.15.0/24 out the Router it go ...
1
vote
1answer
2k views
what do em0, em1, em2 and em3 interfaces refer to on Juniper routers
Can someone explain what these interfaces are for? I know em0 is used as a management interface on the router to connect via ssh but why are the other two there? I have also noticed, sometimes they ...
2
votes
1answer
125 views
Ip telephone being not served by DHCP
I have a DHCP configured on juniper router srx345 and an external DHCP runing on win machine and configured by telephony ppl.
I'm using an IP tel Astra i740N when I send DHCP request to DHCP ...
0
votes
2answers
794 views
There have uncommitted changes, but `show | compare` do not show it
There have uncommitted changes, but show | compare do not show it.
{master}[edit]
un@HK-MX-RE0# exit ...
0
votes
1answer
370 views
Juniper SRX 340 configuration import/export
Good morning,
I have a Juniper SRX 340 Cluster (15.1X49-D70.3) in a professional environment, and a third firewall (same model) that I'd like to use as a test firewall.
Is there any simple way to ...
-1
votes
1answer
87 views
Juniper Ex4200 problem with assign firewall to access port
This is my firewall filter rules :
family ethernet-switching {
filter port5 {
term port5 {
from {
source-address {
192.168.1.0/29;
...
