Questions tagged [juniper]
A tag for questions involving Juniper Networks hardware or software.
516
questions
3
votes
1
answer
985
views
How to use the TCP traceroute in Juniper?
How to use the TCP traceroute in Juniper?
In Juniper OS I only know
traceroute ip_address
I don't know how to traceroute a destination with TCP protocol. is it possible to implement it?
- 1,747
2
votes
1
answer
1k
views
Juniper vMX Routers can't ping each other in GNS3
I have a couple of VMX Routers setup in GNS3 that are directly connected on their interface, ge-0/0/2 and they can't ping each other. PFB configuration. I can't seem to find the problem!
UPDATE: Added ...
- 241
0
votes
1
answer
189
views
Make eBGP and iBGP equal in Juniper MX204
Apologize for the dumb question, I come from the server world. Our network admin is on holiday and I'm filling in.
For the sake of simplicity, we have a fairly symmetric traffic pattern, what goes up ...
1
vote
1
answer
433
views
Show 'all' routes to a given prefix on Juniper Router
Forgive me if I'm not using the correct terminology here but I'm on a Juniper MX204 router, call it router A. I'm receiving full table from my ISP. I do a show route, i.e. show route 1.1.1.1 and I ...
0
votes
2
answers
546
views
Migrate from Cisco HSRP gateway to Juniper VRRP Gateway
We have a pair of Cisco Nexus 3548 switches setup with HSRP acting as the network gateway for each of our network segments in a datacenter/VMware environment.
We wish to replace the Cisco Nexus ...
- 105
1
vote
1
answer
403
views
Juniper QFX Site to Site VPN
Im trying to setup a site to site vpn between two Juniper QFX5110's. Each end of the link is on the same subnet (so directly connected switches over dark fibre). I have configured each physical ...
- 25
0
votes
2
answers
1k
views
Fixing an SSL problem in Juniper SRX
We do have a problem; we setup a used Juniper SRX3400 Cluster hoping to move our configuration from old SRX3400 Cluster to new one (for some reason), however everything works but we cannot make HTTPS ...
0
votes
1
answer
251
views
PEM Modules Redundancy in Juniper SRX3600 series Firewall
We have Juniper SRX3600 running in our network. At the moment only 2 x PEM Modules (AC Power Supply) are installed in the chassis while other 2 x PEM are not. This is shown below from the output of '...
- 1,110
0
votes
1
answer
255
views
Why does Junos create two entries in LIB for single tag- one with "S=0" and other with implicit "S=1"?
In the penultimate LSR there are following two entries for label 301040:
root@r2> show route table mpls.0 protocol rsvp
mpls.0: 14 destinations, 14 routes (14 active, 0 holddown, 0 hidden)
+ = ...
- 1,217
0
votes
1
answer
233
views
Why are the LDP installed LSPs not seen in the output of "show mpls lsp" in Junos?
I have established a LDP session between routers r1(lo0.0 has 192.168.1.1 configured) and r4(lo0.0 has 192.168.1.4 configured). According to show route table inet.3 192.168.1.4 in r1 the BGP prefixes ...
- 1,217
0
votes
1
answer
179
views
Juniper / SRX-100 / Repurpose old device / Disable DHCP?
I have an old Juniper SRX-100. I want to re-purpose it for my network. I need to extend the network in a new location, so I need more ports. I could use a simple switch, but I have this laying ...
- 103
0
votes
2
answers
2k
views
juniper router /var directory is full , deleting .tgz file in root directory
i need to free some space on my juniper router , in the root directory when i use >ls -lash command i see a .tgz file which is 405 M , my question , if i delete this will it cause any problem ?
- 11
0
votes
1
answer
64
views
Juniper MX: NTP broadcast on two VRFs with the same addressing
In Juniper, NTP broadcast is set at system level, so two VRFs cannot use the same addressing and use NTP broadcast at the same time. Is there any alternative?
1
vote
1
answer
93
views
What are the differences between injecting the default route to IGP using a static route or using a generated route?
Let's say, that I have a following network topology:
isp_router[t1-0/0/0.0] <-> [t1-0/0/0.0]ospf_asbr
I want to generate a default route for IGP in ospf_asbr router. One option would be a ...
- 1,217
0
votes
1
answer
10k
views
JunOS: How to copy the config file to TFTP server?
Model: j6350
JUNOS Software Release [12.1X46-D65.4]
Is there an easy way to copy the config file to TFTP?
- 155
2
votes
1
answer
273
views
How does ISIS find a next hop address for a prefix learned by ISIS?
I have two Juniper routers connected like this:
r1[ge-0/0/2] <-> [ge-0/0/3]r2
Both ge-0/0/2 in r1 and ge-0/0/3 in r2 do not have a family inet configured:
root@r1> show interfaces ge-0/0/2 ...
- 1,217
0
votes
2
answers
2k
views
Can't log in after admin password change
I reset my admin password with below command:
#Set system login user admin authentication encrypted-password <new password>
But now i can't login to my device, what can be the reason?
- 11
0
votes
0
answers
28
views
Does Junos convert routing policy into binary tree?
Let's say, that there is a following simply route policy in Juniper router:
root@vmx> show policy test
Policy test:
Term 1:
from
route filter:
10.10.10.7/...
- 1,217
0
votes
2
answers
919
views
How can I tell which prefixes are being advertised?
Forgive me if this is a dumb question but I'm relatively new to the carrier networking world. We own a block of IP addresses, say a /18 and we advertise various /20s, /24s, /23s, etc all over the ...
1
vote
1
answer
1k
views
How to verify the traffic forwarding class in Junos if it is set by firewall filter?
I have a firewall filter below which puts the ICMP traffic to assured-forwarding class if the bandwidth threshold is not exceeded:
root@vmx> show configuration firewall filter example | display ...
- 1,217
2
votes
2
answers
65
views
rpd random path selection does not work in Juniper vMX
I read a Junos documentation which said that:
In case of equal-cost paths for the same destination, the routing protocol daemon(rpd) randomly selects one of the available paths to balance load, while ...
- 1,217
0
votes
1
answer
1k
views
split detection virtual chassis
i'm studying juniper virtual chassis and i've lab with following:
can someone explain how split detection works in juniper?
"no-split-detection" is configured on every virtual chassis(Ex3300,Ex3400)...
1
vote
1
answer
536
views
Configure jflow v5 get error: interface-name: 'xxx': Must be a services interface
friends:
When I configure the jflow v5 on my MX-480:
=====
admin@USA-MX-RE0# show forwarding-options sampling
instance {
MONITOR-FLOW {
input {
rate 1000;
}
...
- 1,747
1
vote
1
answer
950
views
Activating the NEBS Compliance SFP on Juniper MX disabled due to Ambient Temperature Exceeded
We have faced an issue on Juniper MX960 that some SFPs (10G Optics) were disabled due to ambient temperature exceeded. This was observed in the syslog messages on MX. However after the physical ...
- 1,110
0
votes
0
answers
92
views
Shaper configuration for Juniper MX480 - MPC3e 3D NG
following secario:
A MX480 with MPC3e 3D NG Linecards.
I have a new Layer2 Access provider that is providing Layer2 services between 100 and 1000MBit/s. My connection zu this services are a 10GE E-...
- 527
1
vote
0
answers
130
views
Connecting layer 3 switches together without trunking
I currently have 2x Juniper EX4200 and I'm looking into changing it into Ubiquiti EdgeSwitchs.
The diagram:
SW01 and SW02 are connected to each other using OSPF P2P. Both of the switches have their ...
- 36
1
vote
2
answers
666
views
VLANS - Layer 2 vs Layer 3 Juniper & Netgate/PfSense
I am working on setting up VLANS on a basically default switch configuration for my SMB network. They have 5 juniper ex2200 switches that are all on the same subnet and have only a default vlan. I ...
0
votes
1
answer
7k
views
JunOS: FPC Major error alarm
I hope everyone is doing fine!
This morning I've run into a problem. My uplink interface went down for unknown reasons.
Upon checking system alarms I see this:
show system alarms
1 alarms currently ...
- 45
1
vote
2
answers
2k
views
How to choose the most recommended Junos release for MX router
How to choose the most recommended Junos release for MX router? I need to choose a Junos OS release to update my Juniper MX960 routers from release 18.1R3, but I cannot find a procedure or best ...
- 15
0
votes
0
answers
329
views
Juniper MX Routing Engine Firewall Filter
I'm having difficulties with something I initially thought would be rather simple. I need to apply an outbound firewall filter on an MX10003's management interface. I'm currently using Lo0.0 as the ...
- 157
0
votes
1
answer
1k
views
Managing a Juniper EX4300 In Band
Currently, our ex4300 are managed in band using irb.20.
show configuration interfaces irb
unit 20 {
family inet6 {
address 2001:db8:1::252/64;
show configuration routing-options
rib inet6.0 {...
- 157
0
votes
0
answers
390
views
How to configure the jflow correctly in my juniper router?
I configured the jFlow sampling in Juniper MX480:
but in my receive data server, there is no data received:
and when I use Paessler Netflow Tester test it, there cannot use 14.224.224.253:
Whether ...
- 1,747
-1
votes
2
answers
826
views
What's the inline monitoring?
What's the inline monitoring?
I searched wikipedia and google but do not find the meaning of inline monitoring for network.
who can tell me the definition of it?
I can get the definition of passive ...
- 1,128
2
votes
1
answer
50
views
If accept IP address term before discard port term, will the IP's port still be discard?
In my Juniper Router MX480's firewall filter DENY-EMAIL-PORT:
dele@MX-RE0# show firewall filter DENY-EMAIL-PORT
term ALLOW-IP {
from {
address {
102.100.100.1/32;
...
- 1,747
2
votes
0
answers
51
views
CA certificate and Local certificate
There is something which is bothering me when i think about the CA cert and Local cert.
Below are my queries which pertains to juniper but may be generic as well.
1) "request security pki ca-...
- 395
1
vote
1
answer
1k
views
Static ARP entry on MC-LAG ICL Link in Juniper MX routers
Can someone please explain in detail why we need to setup static arp entry on each MC-LAG peer. This is mentioned below in Juniper Documenttation
https://www.juniper.net/documentation/en_US/junos/...
- 1,110
2
votes
1
answer
79
views
Will the router crash when it is sent routes that it can't design to hold?
I am working with a Juniper router which has the capacity to hold 60M routes in the RIB and 4M routes in the FIB. Should the router crash when more than 4M routes are being sent to FIB, considering no ...
- 581
3
votes
1
answer
430
views
Juniper Physical Interface Damping Operation
I'm currently looking at physical interface damping on Juniper MX.
Fun Fact: Nowhere on this site is it mentioned that the penalty added
per interface down event is 1000.
Currently testing this:
...
- 8,117
3
votes
2
answers
707
views
How can I capture application layer packages using `monitor traffic`?
In my Juniper MX480 , when I use monitor traffic ae16.327 no-resolve, I only get arp packages:
10:19:51.819444 Out arp who-has 109.25.6.5 tell 109.25.6.6
10:19:52.531849 Out arp who-has 109.25.6.4 ...
- 1,747
1
vote
2
answers
106
views
Applying WAN Changes to Juniper Chassis Cluster
I have a Juniper SRX 340 in a chassis cluster state.
I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
- 113
0
votes
3
answers
6k
views
How can I monitor traffic matching a IP address?
I see this article:
user@host> monitor traffic matching “port 22” no-resolve
there can matching a port
and I can matching arp too:
user@host> monitor traffic matching “arp” no-resolve
but, ...
- 1,128
1
vote
1
answer
391
views
Multiple Queues having same Priority in Scheduler of Juniper CoS Implementation
I have confusion regarding Juniper CoS. In Juniper CoS , when we define scheduler we can mention the queue priority to that forwarding class like strict high , high , medium low etc which effects the ...
- 1,110
3
votes
2
answers
3k
views
What's the difference between "show arp no-resolve" and "show arp" in Juniper?
What's the difference between show arp no-resolve and show arp?
If I add the no-resolve, what's the difference of it?
- 1,747
0
votes
2
answers
1k
views
Deny ssh access from CPEs in all routing-instance - Juniper MX960
I try to deny ssh access from routing-instance CPEs in Juniper MX960 device. I want to know if there is a way to deny only ssh access attempt from any routing-instance.
- 15
3
votes
1
answer
234
views
Does Juniper have an equivalent of 'show security pki local-certificate' for remote certificates?
On a Juniper Firewall, the command show security pki local-certificate will give all sorts of detail for a local certificate. (The sort of certificate you would use to stand up an IKE connection)
My ...
- 165
1
vote
1
answer
296
views
ex4200 bootup warning
we have some old juniper ex4200 in our stock and it shows following warning in console :
--- JUNOS 12.3R3.4 built 2013-06-14 00:08:02 UTC
*************************************************************...
- 577
5
votes
1
answer
2k
views
juniper vlan-ccc vs ethernet-ccc for eompls
In juniper ethernet-ccc transports customer's vlan end to end. Does vlan-ccc also transport customer's vlan across as well?
- 53
0
votes
1
answer
1k
views
Juniper EX2300 QinQ questions
I am trying to set up a Q in Q environment with EX2300(ELS). Unfortunately, I receive the error message down below when I enter commit check
[edit interfaces ge-0/0/0]
'unit 0'
VLAN-ID must be ...
- 1
1
vote
2
answers
1k
views
Juniper SSG20, reset to factory default
I have an Juniper SSG20 that I have tried to reset to factory default.
I have tried the pin hole reset method but to no avail, and the serial console doesn't indicate that the procedure is started, ...
- 204
0
votes
1
answer
381
views
Junos, accidentally deleted a FIB entry, how to re-add?
while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
- 25