Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
1
vote
1answer
767 views

Rate-limiting policer on aggregated ethernet (AE) bundle

I am facing problem regarding firewall policier on Juniper MX platform. We have bundle link (AE Link) consisting of 2 x 10G links on which P2P IP is configured with customer for internet access. Now ...
5
votes
3answers
1k views

Traceroute doesn't show one hop?

I have an interesting issue where my traceroute skips one hop on the way. I do not know why but it seems to be some kind of Juniper behaviour which I do not understand yet. Blue routers are Cisco ...
4
votes
1answer
63 views

How can I retrieve a configuration programmatically on a JunOS device?

this is a part of the configuration of Juniper Router, it stands the vlans: family inet { address 3.189.239.238/29; address 3.189.239.254/28; } ...
0
votes
1answer
142 views

How to understand the juniper's chassis concept?

I searched a chassis article which is introducing the Chassis. MX960 Chassis It's a physical concept there, but I think the chassis is far more than this. because if we in the commands: there shows ...
4
votes
2answers
593 views

Juniper SR300 maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
3
votes
2answers
170 views

JunOS Use iBGP route over OSPF route

Hello i have an issue where my Juniper router doesnt advertise BGP 10.255.255.4/32 to a neighbor because in inet.0 it is not issued as the best route root# run show route table inet.0 inet.0: 11 ...
0
votes
1answer
121 views

how to change a BGP path in juniper?

How to change the selected BGP route? I show the route 43.242.33.39, there shows 3 GBP paths. but I can not ping the ip(43.242.33.39). and can not traceroute it. how can I do with this?
5
votes
1answer
50 views

Junos how to execute a lot of repetitive commands?

In my Juniper qfx Switch, I want to execute many commands such as bellow: set vlans vlan77 vlan-id 77 set vlans vlan77 l3-interface irb.77 set vlans vlan78 vlan-id 78 set vlans vlan78 l3-interface ...
1
vote
1answer
54 views

I limit the port INGRESS but get packet loss

I use the limit speed method to limit the Juniper Switch port EGRESS and INGRESS speed. but after I added the INGRESS filter to my port, there will loss packets on the switch every port. anybody ...
4
votes
2answers
686 views

With respect to Juniper Networks , what is the difference between 'Fabric Plane and 'Switch Fabric'?

I am struggling with the concept of 'Fabric Plane' and 'Switch Fabric'? I haven't found any clear cut difference between them? Why fabric planes are different in MX960 compared with MX240 and MX480. ...
2
votes
1answer
37 views

New line (\n) not working in JUNOS on EX3300

Hopefully this is a quick fix and someone has seen this. Every document that I have come across tells me that when I am entering a login message, in order to make a new line, I should be using "\n". ...
1
vote
1answer
411 views

BGP Juniper not reflecting to Cisco?

I am really new to working with Junipers and I am struggling a bit with Route Reflector configuration. I have 3 routers Cisco-Juniper-Juniper2 here is my config: Cisco: router bgp 100 neighbor ...
3
votes
1answer
189 views

Group VPN between vMX as a member and a cisco router as a Group Controller

I am trying to set up a Group VPN between a cisco GC/KS and 3 vMX router (14.1R1.10) and another cisco router as a member. I've managed to get the Group VPN working between the two cisco router, but I ...
4
votes
1answer
67 views

set cli complete-on-space Cisco equivalent

Does anyone know what would be the equivalent, if any, of the Juniper command set cli complete-on-space for Cisco? I used to work with Juniper devices and I LOVED this feature, but now we are ...
3
votes
1answer
881 views

What is the difference between “set community” and “add community” in juniper?

I am trying to understand setting up policies on a juniper router. What is the difference between "add" and "set" community? set policy-options policy-statement MY_POLICY term MY_TERM then community ?...
4
votes
1answer
1k views

Juniper SRX 240 - Routing subsystem not running on secondary node

Does anyone know why rpd would not run on secondary node? Thanks
3
votes
1answer
149 views

Securing J-Web interface with user lockouts after multiple bad login attempts

I have a bit of an odd question that I can't seem to find much success in getting an answer via web searching. I'm wondering if there is a way to secure the J-Web interface with user lockouts after ...
3
votes
1answer
62 views

Find which VRF contains a route

I am trying to find a Juniper command that shows a list of VRF routing tables that contain a specific prefix / range. Does any one know if this is possible? Thanks.
2
votes
0answers
530 views

Can't login to Juniper SRX from web gui [closed]

I have a Cisco 2911 router and a Juniper SRX550. The Cisco 2911 is directly connected to the Juniper SRX550. I can ping both networks from either routers. When I connect to https://172.16.128.1 from ...
2
votes
1answer
69 views

JunOS iBGP and return paths odd behaviour

I've got a somewhat basic iBGP configuration with a routing instance "global" between two Juniper vSRX's - each Juniper vSRX has an uplink of its own from a different transit provider with a default ...
-1
votes
2answers
968 views

Can I scp a file to Juniper router's Console port?

When I try to scp a file to a router on its console port, it says: "lost connection" Is it not possible to share a file with the router on console port? If not, why?
5
votes
1answer
289 views

juniper advertising smaller subnets with a bigger static route in BGP

I have a /18 in RIB but I would like advertise smaller subnet in BGPfor specific reason to diff ISP etc. Is there a way to do it without creating a null route or static route. Is some way in policy ...
3
votes
1answer
2k views

Difference between junos-host zone and a security zone

As far as security zones are concerned, we apply policies to it to control the transit traffic. And we also apply host-inbound-traffic to a zone or interfaces. If we have both of the above ...
3
votes
1answer
201 views

How can I see where BGP is advertising a given prefix? (Junos)

I'm working in a complex BGP environment on Juniper MX480s. We have many peers in various routing instances advertising prefixes to us, and then we advertise a subset of those prefixes to a subset of ...
1
vote
1answer
139 views

Comcast business modem question

We have a Cisco 2900 router that we use for VPN, and it's connected to a Comcast business modem. The LAN ip is 10.1.10.2 I also have a Junipe SRX550 firewall that I want to use for VPN, and it's ...
5
votes
1answer
96 views

Disadvantages or risks of leaving the the family inet6 configuration under interface configuration in Junos applied

I have a corner-case where I need to leave the family inet6 configuration under IFL present while hosts in that network should not use IPv6. This means, that the logical interface of a router will ...
1
vote
2answers
233 views

Juniper EX use upstream gateway

On a Juniper EX series how can I set the L3 IP range, but specify a gateway that is upstream? VLAN - Subnet - Gateway 10 - 10.1.10.0/24 - 10.1.10.1 20 - 10.1.20.0/24 - 10.1.20.1 If I do the config ...
2
votes
2answers
73 views

Noobie network question: connect routers across floors

I have a Cisco router and a Juniper SRX550 sitting next to each other. The Cisco router is on two networks, and the SRX550 is on 3 networks. Since they're close, I could connect them directly? If I ...
5
votes
1answer
624 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
3
votes
2answers
119 views

Connect Cisco 2900 to Juniper SRX550

I need to connect a Cisco 2900 router (172.16.0.0) to a Juniper SRX550 (172.16.128.1 & 172.16.192.1). As far as I know, Cisco 2900 have no VLANs, so it's on VLAN 1. The Juniper SRX550 have ...
6
votes
2answers
416 views

Issues with Juniper MX-series iBGP routes

I have a simple setup: 2x Juniper MX-Series routers each having one uplink to a transit provider iBGP session between both routers (point-to-point) For testing purposes I've disabled the uplink from ...
4
votes
1answer
641 views

What is the exact meaning of routes in Juniper tagged with @ and #

The routing table explains the meaning of these symbols as: @ = Routing Use Only, # = Forwarding Use Only + = Active Route, - = Last Active, * = Both However, I am looking for more detailed meaning ...
2
votes
1answer
1k views

DHCP relay on Juniper MX

Hi I got a problem with bootp relay on a juniper router(s). I got helpers bootp interface configured with: irb.10 broadcast server 10.20.1.10 server 10.20.1.11 theres several irb ...
1
vote
1answer
126 views

how do you see what traffic is being forwarded to a static route?

I have Juniper SRX I created this static route (in inet.0): 10.123.123.0/24 *[Static/5] 21:52:24 > to 192.123.123.100 via ge-0/0/2.0 How do I view what traffic is being ...
3
votes
1answer
275 views

Config BGP policy for limit ISP path in Juniper MX 480 Router

Now we have a source IP14.135.4.0/24, we are involved in 5 different ISP, such as A, B, C, D, E. Now we want to access 14.135.4.0/24 not through the path of ISP B and ISP D, but through the other ...
2
votes
1answer
1k views

How to check the Juniper Switch's port bandwidth?

I use the CoS method limited the EX3300's switch port bandwidth to 200m. But I have a question, how to check whether it works? Is there the Juniper Switch EX3300's switch port have a bandwidth ...
3
votes
1answer
116 views

Interfaces Shutdown after JunOS Firmware Upgrade

So I've got some Juniper EX4500's. They're configured as a Virtual Chassis using the SFP+ ports. Due to the distance between racks, I wasn't able to use the VCP ports. Anyway, I've run into an ...
1
vote
2answers
1k views

How can I set the Juniper EX3300 Switch's Interface traffic speed?

How can I set the Juniper EX3300 Switch's Interface traffic speed? Before asking this question I have attempted many methods, all fail. first of all, set the Interface traffic speed is not the ...
2
votes
1answer
670 views

Junos IPSEC Tunnel to Azure & TCP-MSS

I am configuring a Juniper SRX 300 Series to establish an IPSEC tunnel to Azure. The Azure Vnet range is 192.168.10.0/23 The local range is 10.49.236.0/24. The configuration: (relevant bits with ...
5
votes
1answer
1k views

JunOS iBGP session not establishing

I have a test environment set up with two Juniper vSRX instances and a L2 network trunked between them and can reach each other on the IP addresses I'm trying to peer them on. vSRX 1 has an external ...
1
vote
2answers
2k views

Can we have multiple AS number in the same router?

Is it possible to have multiple AS number in the same router? Example: Routing-Instance A for AS100 and Routing-Instance B for AS200 ? Please share me some example or configuration.
2
votes
2answers
475 views

How to connect high-availability routers to high-availability firewalls

I have two Juniper routers (a SRX340 and a SRX320), each with a leased line, on the same IP range. They are designed to be connected together on specific network ports so that the SRX320 takes over if ...
4
votes
1answer
707 views

Partially Faulty QSFP+ breakout port - possible config error?

Network Equipment: Juniper Ex4600, 40GbE QSFP+ -> 4x 10GbE SFP+ DAC cable, Mellanox ConnectX-2 Problem: One of the SFP+ physical link cannot be brought up (xe-0/0/25:0 Physical Link Down, xe-0/0/25:1,...
1
vote
1answer
2k views

Result of running `restart ipsec-key-management`

I have Juniper SRX 1400 which is used mainly for IPSEC tunnels. And now I facing a bug in firmware with ID PR1085657 (IKE doesn't come up when the SRX is the initiator). Possible solutions to this is ...
2
votes
1answer
363 views

Why the EX4300 continue the system halting?

Why the EX4300 continue the system halting? In the LCD, I press to the system halt, then it last this HALTING status a very long time. so far, there take 20+ minutes at least.
2
votes
1answer
5k views

What's the meaning of `unit 0` and `family inet`?

In my JunOS configure mode, I show the interfaces: [edit] root@Olive# show interfaces em0 { unit 0 { family inet { address 192.168.47.2/24 } } } em1 { vlan-...
2
votes
1answer
33 views

How can I see the new changed configurations in the configure mode?

In JUNOS, and in the configure mode, I edited something, now if I want to quit the edit mode, how can I check what I have new changed? my questions are bellow: show the changed configurations(...
2
votes
1answer
1k views

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

My device is EX4300. I use the bellow command for upgrade the JUNOS version by: request system software add reboot /var/tmp/jinstall-ex-4300-14.1X53-D47.3-demostic-signed.tgz I get the bellow error:...
2
votes
1answer
1k views

Site-to-site IPSEC for multiple peers with dynamic IP on Juniper SRX

Looking for possible solution. I have Juniper SRX 1400 (12.1X47-D20.7) with static WAN IP in data-center and multiple sites with dynamic WAN IP addresses. I need to build with them site-to-site VPN's....
1
vote
0answers
65 views

cannot push the ios for juniper ex3300 [closed]

I am trying to push the JUNOS image for a Juniper EX3300 from a TFTP server. First I set IP address, netmask and server IP, then I started the install. But it shows cannot open package(error 60) ...

1 2 3
4
5
10