Questions tagged [juniper]
A tag for questions involving Juniper Networks hardware or software.
517
questions
0
votes
1
answer
377
views
Junos, accidentally deleted a FIB entry, how to re-add?
while i was testing Junos in a virtual environment, i accidentally deleted an entry in the forwarding base (do not clearly remember which command i used to let that happen), but because of this the ...
- 25
1
vote
1
answer
152
views
Why the `policy-options prefix-list` do not shows hierarchy?
Why the policy-options prefix-list do not shows hierarchy?
In a Juniper Router,
I show policy-options, there shows:
prefix-list snmp-permit {
1.1.1.0/24;
}
prefix-list icmp-permit {
2.2.2....
- 1,747
1
vote
1
answer
52
views
Where the `term` and `policer` would appear?
Where the term and policer would appear?
In juniper, there have filter, term and policer.
I know the filter is under firewall, but how about the term and policer?
how to understand the concept?
I ...
- 1,747
1
vote
2
answers
12k
views
How to show a Juniper interface bandwidth usage?
I want to check a Juniper Switch's port bandwidth usage.
I tried show interfaces, but there is no current bandwidth condition:
admin@Juniper-ex3300-48t# run show interfaces ge-0/1/1
Physical ...
- 1,747
3
votes
1
answer
175
views
How to bypass when network speed over a special number in Juniper?
I have a requirement, such as I have 113.100.15.0/24 segment IP addresses.
in Juniper M480 Router I connected to BGP-A(1G) and BGP-B(10G),
by default the 113.100.15.0/24 out the Router it go ...
- 1,747
3
votes
1
answer
7k
views
what do em0, em1, em2 and em3 interfaces refer to on Juniper routers
Can someone explain what these interfaces are for? I know em0 is used as a management interface on the router to connect via ssh but why are the other two there? I have also noticed, sometimes they ...
- 581
2
votes
1
answer
164
views
Ip telephone being not served by DHCP
I have a DHCP configured on juniper router srx345 and an external DHCP runing on win machine and configured by telephony ppl.
I'm using an IP tel Astra i740N when I send DHCP request to DHCP ...
- 21
0
votes
2
answers
2k
views
There have uncommitted changes, but `show | compare` do not show it
There have uncommitted changes, but show | compare do not show it.
{master}[edit]
un@HK-MX-RE0# exit ...
- 1,747
0
votes
1
answer
979
views
Juniper SRX 340 configuration import/export
Good morning,
I have a Juniper SRX 340 Cluster (15.1X49-D70.3) in a professional environment, and a third firewall (same model) that I'd like to use as a test firewall.
Is there any simple way to ...
- 371
-1
votes
1
answer
127
views
Juniper Ex4200 problem with assign firewall to access port
This is my firewall filter rules :
family ethernet-switching {
filter port5 {
term port5 {
from {
source-address {
192.168.1.0/29;
...
- 577
0
votes
1
answer
255
views
In IP6 fe80::8a10:8fff:feb7:1632 > ff02::2: ICMP6, router solicitation , length 16
When I use command to capture the packages of interface ae52.0 in my EX4300 gateway Switch (L3):
run monitor traffic interface ae52.0
I get many
In IP6 fe80::8a10:8fff:feb7:1632 > ff02::2: ...
- 1,747
1
vote
0
answers
5k
views
Why my ae interface Link type is down but the physical interface is up?
Why my ae interface Link type is down but the physical interface is up?
In my convergence layer Switch, I use two Juniper EX4300 devices realize the Stack:
so there have xe-0/0/x and xe-1/0/x ...
- 1,747
0
votes
1
answer
757
views
Multicast in one VLAN
I need to receive multicast traffic over L2 segment on my client machine. But for some reason I am unable to do it.
To my understanding with such scheme I should receive traffic if inbetween Juniper ...
- 45
0
votes
2
answers
669
views
Juniper EX Switch sending TCP reset on SSH connection randomly
So as stated in Title I'm observing that one of our switch randomly send RESET flag in TCP and ends the ssh connection in the middle and sends and Window size of 0 as well. Randomly it refuses to ...
- 445
0
votes
1
answer
133
views
Why does this setup fail sometimes with Juniper EX4200?
I've got a very straight forward setup with the following devices:
1 x 10G Fibre uplink (internet)
1 x ASUS AC68U wifi router
1 x EX4200
20 x Servers (With IPMI and single ethernet)
The EX4200 is ...
- 1
0
votes
1
answer
114
views
Filtering http/https traffic destined for a juniper router
I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically.
This is what I came up with so far:
...
4
votes
1
answer
930
views
How to use the monitor traffic only shows the In packages in Juniper EX480?
I use monitor traffic tool:
run monitor traffic interface ae16 commad:
19:04:52.820205 Out arp who-has 16.23.40.133 tell 16.23.40.134
19:04:52.820210 Out arp who-has 43.243.33.66 tell ...
- 1,128
2
votes
1
answer
942
views
Is there a way of Juniper to avoid the vast ARP requests?
In my Juniper router the interface always send ARP requests for some non-using IP address.
Is there any issue there?
and whether there is a way of Juniper to avoid the vast ARP requests?
Is it ...
- 1,128
1
vote
1
answer
916
views
How to do port mirroring in Juniper EX2200 switch
I am using Juniper EX2200 switch, one of the connected System generating lot of unwanted traffic ( varying from 10 Mb to 25 Mb upload traffic). I wanted to analyse those traffic using port mirroring ...
1
vote
1
answer
2k
views
My Juniper Router arp do not work, after clear MAC then it can work
In my MX Juniper router device, there have the IP 16.213.40.1's address:
{master}
admin@juniperMX> show arp no-resolve | ...
- 1,747
3
votes
2
answers
311
views
Is it possible to limit a IP's traffic in gateway Juniper switch?
In my gateway Juniper Switch:
...
irb {
unit 0 {
family inet;
}
unit 2 {
family inet {
address 10.10.10.254/24;
}
}
unit 9 {
family ...
- 1,128
1
vote
1
answer
583
views
Juniper port forward range of ports with dynamic pppoe
I have Juniper SRX300.
Due to some restrictions, i can't use static WAN IP address.
I need to port forward a range of ports and it's working only using nat static section like this:
username# show ...
- 93
3
votes
1
answer
2k
views
Juniper MX: Leaking routes from RIB into VRF
Aim
We have a firewall terminating IPSec VPNs to AWS. These are used in the event of failure of a pair of AWS Direct Connects. Currently, the VPNs are routed to AWS over the same Direct Connects ...
- 211
2
votes
1
answer
1k
views
High CPU utilization on Juniper ACX2100 chassis fpc
What is the cause of high utilization of cpu on fpc.Below is the output of which depicts utilization as 99 but router is running just fine.
show chassis fpc
Temp CPU ...
- 445
1
vote
1
answer
727
views
PE route down in LDP based VPLS Connection in Juniper MX
I am observing 'PE route down message ' against LDP based VPLS connection on Juniper MX. The IGP protocol is IS-IS. LDP VPLS connectivity is point to point (having only two end points).
When I check ...
- 1,110
4
votes
1
answer
451
views
High Memory Utilization in Juniper ACX2100
Recently i observed that one of our juniper AC2100 has only free 3% of memory.But i'm unable to understand which thing is causing such high memory usage or what i can do free the memory so it won't ...
- 445
2
votes
1
answer
724
views
Juniper SRX sniffing
I've a Juniper SRX 340 Cluster (15.1X49-D70.3) on which I have to do some debug.
I know how to sample packets on interfaces and my question is: is it possible to sample traffic at the same time on ...
- 371
3
votes
1
answer
451
views
Juniper EX4500 selective q-in-q
This switch supports selective qinq?
For example I got 3 vlans on client port: 100, 200, 300.
I need to add second tag on vlans 100, 200 but vlan 300 must run as is, without adding second tag.
Is it ...
- 35
1
vote
1
answer
207
views
Weird Juniper switch behavior
Weird Juniper switch behavior
I have bought EX4300 and SRX300 on ebay to study it and started to read documentation.
After some time i wanted to test my knowledge and configure it to test it at home.
...
- 93
1
vote
1
answer
2k
views
EX3300 can not use irb.x, so how to access the layer-3 address?
EX3300 can not use irb.x,
I have a Juniper EX4300 convergence layer Switch, in it there are irb interfaces. such as irb.3, and if I have another EX4300 for access layer, I can set vlan l3-interface ...
- 1,747
5
votes
1
answer
147
views
Juniper QinQ same port for customer as provider
Is it possible to use a single interface as both the provider port and the customer port for a QinQ setup on a Juniper EX 4200 switch?
I have a set of switches "on a stick" attached to the network. ...
- 51
0
votes
0
answers
269
views
Why the ae1's `Link` is `down` but its indicator is light?
In my Juniper EX4300 I created a ae1
I added xe-0/2/3 and xe-1/2/3 to ae1,
xe-0/2/3 {
ether-options {
802.3ad ae1;
}
}
xe-1/2/3 {
ether-options {
802.3ad ae1;
}
}
...
- 1,747
3
votes
1
answer
53
views
Every `aex` have a `aex.0` in my QFX5100, why?
When i show interface terse in my Juniper switch qfx5100:
....
ae29 up up
ae29.0 up up inet 192.168.9.2/24
ae30 up up
ae30.0 ...
- 535
0
votes
1
answer
3k
views
The irb interface can not ping in EX4300 itself
In my Juniper EX4300 I created a irb.2 with address 10.10.10.110/24
irb {
unit 2 {
family inet {
address 10.10.11.110/24; // the snapshot is wrong, I changed to 10.10.11.110/...
- 1,747
3
votes
0
answers
833
views
What's the uplink port shows in the `show interfaces terse`? [closed]
My Juniper EX4300 have four uplink port:
but when I show interface, there only two xe port:
Interface Admin Link
gr-0/0/0 up up
pfe-0/0/0 up up
pfe-0/0/0.16383 up up ...
- 1,747
4
votes
2
answers
5k
views
What's `irb` meaning? and what's the difference between it and `vlan`?
What's irb meaning? and what's the difference between vlan?
I found some Junos version the vlan l3-interfaces should be vlan.xxx, and some times there is irb.xxx.
irb {
unit 0 {
family ...
- 1,747
3
votes
1
answer
2k
views
Juniper Radius Configuration
I'm trying to figure out how to setup radius on a Juniper EX2300. The juniper can reach the server no problem, but when I run the 'test aaa authd-lite user [user] password [password]' command, I get ...
- 140
0
votes
1
answer
2k
views
How to change AD on Juniper router?
I have this route on my Juniper Router and some destinations have two routes: OSPF and BGP. I want to change the administrative distance for the BGP route so that it will be smaller than the OSPF ...
4
votes
1
answer
713
views
Dump traffic on routing-instance with a Juniper SRX firewall
A Juniper firewall can display data with the tcpdump command:
% tcpdump -i ge-0/0/0
% tcpdump -i vlan10
However, if the interface or the VLAN is assigned to a routing instance, the traffic is not ...
- 871
0
votes
1
answer
3k
views
How can a Juniper Router update its arp table?
I know the ARP table is cached data.
On Juniper, we can use show arp to query the arp table:
admin@juniper> show arp | match "16.23.43.75"
ac:1f:6b:90:d1:ca 16.23....
- 1,747
3
votes
3
answers
2k
views
Why the last AS PATH item always is `I` or `?`? [duplicate]
you see my snapshot from m Juniper Router, I want to find the routes of 114.114.114.114, but there always get Idle or a ?, why:
- 1,747
4
votes
1
answer
2k
views
Advertise all static route except the default gateway with Juniper SRX firewall
With the following policy, all static routes are advertised via BGP to my neighbor:
root@Nitrogen# show policy-options
policy-statement bgp-export-policy {
term export-statics {
from ...
- 871
2
votes
1
answer
330
views
Juniper router how to check the BGP process port?
Juniper router how to check the BGP process port?
If I have a router with IP address 12.12.21.1, we know it run a BGP process, which use TCP 179 port as default.
How can I check if port 179 is ...
- 1,747
2
votes
2
answers
1k
views
Junos[MX]: How to show VPLS instance associated with given subinterface
Suppose I have a subinterface with Vlan-vpls encapsulation, like this one:
admin@router> show configuration interfaces ge-2/1/1
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
...
- 123
2
votes
1
answer
696
views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
- 73
2
votes
1
answer
288
views
RSVP bandwidth value configuration in Juniper MX
Can someone please explain is it a good practice to change RSVP bandwidth value of an interface?
We have two bundle links between R1 and R2 namely ae13 and ae22 . Both R1 and R2 are Juniper MX ...
- 1,110
7
votes
1
answer
3k
views
MSTP and Rapid-PVST+
We have a medium sized network running all Juniper except for one building. This building is shared with another group, and is completely Cisco. We just trunk our VLANs up there.
Our Juniper network ...
- 73
1
vote
0
answers
682
views
mLACP / MC-LAG between Cisco / Juniper
I am working on a LDP signalled VPLS topology (picture)
What I am trying to accomplish here is to establish a redundant connection to CE1.
CE1 has both interfaces in a port-channel with an IP.
My ...
- 73
3
votes
1
answer
172
views
Juniper MX/SRX series interface monitoring command
Good morning all,
I was curious due to an issue were currently troubleshooting in our environment if there is a command in Juniper that will allow us to determine the utilization percentage of an ...
- 533
2
votes
0
answers
2k
views
Point to Point ICMP Ping Loss between Juniper MX routers
I am facing problem with regard to 1 x 10G link (which is actually configured as an aggregated Ethernet (ae) i.e ae link contains only single 10G link.
This ae link is connected between 2 x Juniper ...
- 1,110