Questions tagged [juniper]

A tag for questions involving Juniper Networks hardware or software.

Filter by
Sorted by
Tagged with
3
votes
0answers
307 views

BGP - source routing breaking for some routes

I have two routers (A and B), both are Juniper j2320s. Each one has 3 BGP peers, a primary to one preferred AS (call them AS 1) and two to a secondary (AS 2), as well as an IBGP session between them. ...
6
votes
1answer
3k views

Juniper Private VLAN isolated port on a trunk

I'm trying to grasp the private VLAN configuration on Juniper EX switches. As I understand it right now: Access ports in the primary VLAN (VLAN with no-local-switching configured) are implicitly ...
6
votes
1answer
1k views

Is it possible to stitch a L2VPN connection into a VPLS domain on Juniper MX

I'm trying to connect one end of a L2VPN tunnel to a VPLS instance on a Juniper MX router. The L2VPN should act like a local interface in the VPLS instance. Is this possible at all? I can't find any ...
4
votes
1answer
6k views

what are IFL IFD and IFA

I came across terms like IFL IFD and IFA 's recently when studying some articles related to my project, I dont clearly understand what they are and the difference between them. I know they are related ...
5
votes
2answers
60k views

GNS3: Configuring/Emulating a Juniper Router on GNS3

I need to be able to emulate a Juniper Router (JunOS) on GNS3. I have seen that this is available as on option in the 'Node Types' list on GNS3. When I try to use this to add a Juniper Router to the ...
2
votes
2answers
2k views

SRX chassis cluster over layer 2 network

I need to setup a chassis cluster between two SRX650s over a layer 2 network. I have found an article which is applicable to my situation. But I do not understand some portions: Please explain the ...
9
votes
1answer
3k views

Juniper SRX HA links passing through switch

it is necessary to join two srx650 in chassis cluster (Passive/Active) via two switches EX4200 . I need to choose one from three examples. Please , help to define correct choice and describe what the ...
5
votes
1answer
6k views

Juniper - eBGP change next-hop on advertised routes

unable to advertise a route to ebgp peer and modify next-hop address. on receive router this can be resolved by configuring a import policy that matches on community and sets next hop to proper ...
6
votes
1answer
622 views

Juniper MX-5 EOPE Drop Pkt Cnt Incrementing

When running show pfe statistics error on a a couple of MX platforms, I see the EOPE Drop Pkt Cnt counter incrementing on 6 MX's out of 22. I believe these are "End-Of-Packet errors", but can't find ...
3
votes
1answer
2k views

Junos feature to accept multiple BGP paths from multiple peer AS

Cisco IOS provides this hidden BGP command: router bgp <ASN> bgp bestpath as-path multipath-relax It allows the router to install multiple BGP prefixes with distinct as-path'es (but ...
1
vote
0answers
811 views

Juniper SRX MPLS Egress Prioritization

I can't for the life of me to get any egress queue prioritization to happen on an SRX. I have a single label switched path out of the SRX, and a couple of ethernet-ccc's. One ccc is entirely ...
7
votes
1answer
4k views

Juniper EX 3300 Incorrectly Identifies SFP+ Transceiver Module

We have 2 Juniper EX 3300 switches operating in a stack. It is running Junos 12.3R3.4. The switches have 4 SFP/SFP+ Ports. On FPC 1, PIC 1, Xcvr 0 you see a description of "SFP-FC8G-SW." However, the ...
2
votes
3answers
537 views

vlan creation with just vlan name

I created a vlan in Juniper qfx3600 switch by specifying just VLAN name. When I tried to commit the configuration I got an error saying "need L2domain configured". I asked with my collegue, he said ...
5
votes
3answers
5k views

Logging in to console port on Juniper EX2200

I have a Juniper EX2200 with JunOS 10.3R1.9 in a remote location, making it impossible for me to test. I will be on-site for one day and while there, I would like to login through the console port ...
7
votes
2answers
665 views

OSPF on ASA 8.2 not advertising /32

We have set up OSPF between our 2 ASA 5540 running in Active/Passive and our Internet provider's Juniper routers. We would like to advertise routes based on the content of an ACL through a route-map : ...
5
votes
1answer
1k views

Juniper destination based CoS

I'm trying to do destination based CoS on Juniper MX basing on destination ASN. I've tried config below. set policy-options as-path BGP-PATH-TO-MARK-COS "65512 .* set policy-options policy-statement ...
6
votes
1answer
3k views

What is the jsrv.1 interface for?

I have a Juniper EX2200 switch running JunOS 10.4R4.5. Under Configure -> System Properties -> Management Access, I can configure which interface allow management access. There is a mystery ...
4
votes
1answer
331 views

ScreenOS: See Peak bandwidth on an Interface and Alarm if it crosses a threshold

I have a Juniper SSG320M running ScreenOS 6.2 (actually 2 of them in an HA active/passive). I want to measure the bandwidth consumed on one of the interfaces, and throw an alarm if that exceeds a ...
7
votes
1answer
3k views

Why does export/import policy addition/removal cause a BGP session reset?

I was adding a new policy to both import and export list for BGP. Then I observed a bgp session reset. Can anyone explain this for me? The only change I made was to prepend a new policy to reject ...
4
votes
3answers
2k views

Is there any recommended range for ip router id

Generally a router id will be set to highest loopback address if present or the highest ip address of physical interface. But most vendors provide a way to configure a specific value example:- " ip ...
1
vote
2answers
2k views

How can i make Public IP of this ISP given information?

I have a Draytek Vigor 2920, Juniper SRX 210 router, and Cisco SC300-10 switch. I am very confused; how can I set it up so that I have a public IP address on my Dell R310? 1 - My ISP, Telenet from ...
9
votes
3answers
7k views

Cisco can't connect to Juniper device via SSH - Invalid modulus length

I'm trying to connect from a Cisco 886VA to a Juniper EX2200 via SSH. The connection fails with the following messages on the Cisco: *Jan 17 09:51:20.823: SSH2 CLIENT 0: Server has chosen 2056 -bit ...
5
votes
2answers
594 views

Newer JunOS Versions numbers

What is the meaning of the new JunOS version numbers in the 12.1 line? 12.1X44 12.1X45 12.1X46 What does the XNN mean? How can I tell which one I want?
3
votes
1answer
246 views

Juniper SRX3600 Maximum Load Set Size

What is the maximum size load set that a Juniper SRX3600, running Junos 11.4R7.5, can load and commit? I am attempting to add a 100,000+ line commit change and do not want to overwhelm the RE and ...
3
votes
0answers
451 views

Policy Based Routing (not matching packets) - Virtual Template

I have this configuration runnning : Larger image I tested the policy based routing int the lab using two linksys router acting as ppp clients of the Cisco 7206VXR and another linksys emulating the ...
5
votes
1answer
5k views

Juniper netscreen: What failover/NSRP commands are available to troubleshoot?

I have a main (active) Juniper Netscreen SSG firewall that I can access. I can't access the standby unit. I'd love to find out more about the standby unit from the main unit. Are there commands that ...
5
votes
3answers
8k views

Juniper equivalent to Cisco's vPC?

I'm looking to implement a new network design with Juniper EX Series switches. Part of this involves implementing vPC between my core and ToR switches (and also between ToR and host). The goal is to ...
8
votes
7answers
22k views

Juniper EX-series: How can I transfer a config from one switch to another?

I have a lab EX-2200 that has a config on it that I now want to replicate onto four more EX-2200's... I'm sure there's probably an easy way to do this, but couldn't find it on the Juniper KB or by (a ...
3
votes
1answer
832 views

Router equipment and interface info in reverse DNS

Question about pages 17 and 18, of 49, at http://www.nanog.org/meetings/nanog45/presentations/Sunday/RAS_traceroute_N45.pdf It is mentioned that prefixes and numbers in DNS (when doing traceroute) ...
6
votes
1answer
3k views

Is it possible to run an IPv6 only MPLS core?

I am looking for information on whether it is actually possible to run an IPv6 only MPLS Core with respect to the transport labels, without the current requirement to tunnel across IPv4. To put this ...
6
votes
1answer
2k views

SRX100 in bootloop. Flash storage problem?

About a month ago one of my SRX100 started to go into a bootloop for no obvious reason to me. After some hours, it eventually stopped and booted up the system again (primary) and I was happy that I ...
16
votes
2answers
26k views

Adding a simple VLAN on a Juniper MX

after years away from JunOS, working with Foundry (now Brocade) routers, I find myself with a new Juniper MX10. All I want to do is create a simple VLAN such that two ports share one routing ...
9
votes
1answer
2k views

JUNIPER: Why is OSPF adjacency breaking when I enable FBF on an OSPF interface?

I've built a test lab where I am testing Filter Based Forwarding (FBF), aka Policy Based Routing. Question will follow below, but first, the details: Below is the topology diagram: OBJECTIVE: Any ...
5
votes
2answers
432 views

Juniper SRX security utm missing

I've been trying to set up local web-filtering (no license required, right?) on customer's SRX 240. Every guide that I had managed to find said that it was to be configured under "edit security utm". ...
5
votes
3answers
16k views

Site-to-site VPN between Cisco ASA and Juniper SRX

I'm trying to create route-based VPN connection between Cisco ASA and Juniper SRX, but I have a problem with ACL and Proxy IDs. Cisco ASA log states that [IKEv1]Group = A.A.A.A, IP = A.A.A.A, ...
6
votes
1answer
1k views

Strange IPv6 packet seen when enabling interface on Juniper MX

I have two MX80 routers which are connected. When I enable the interface on one router I get the following packet from the other router which I can't explain: 17:23:46.004429 In IP6 (hlim 1, next-...
2
votes
0answers
692 views

Juniper EX2500 - default gateway enabled but down

I'm trying to configure an EX2500 (first time with a Juniper), and I configured a trunk on our Cisco device, and then tagged the port on the EX2500. The link between the two comes up fine. However, I ...
7
votes
1answer
15k views

Juniper SRX: Where do I look to see IKE debug messages?

Going through a JSEC book I noticed the following slide explains that there are 6 ike phase 1 messages that take place for a tunnel to establish. I am looking in the kmd log and traceoptions data but ...
19
votes
2answers
29k views

Cause of high CPU load on Juniper peering router's routing engine

Recently the routing engine CPU utilization on two of our Juniper peering routers increased from ~10-20% average load to 80+%. I'm trying to figure out what's causing this (and how to get this high ...
10
votes
1answer
4k views

Can I poll firewall counters on Juniper routers via SNMP

I have a firewall counter on a Juniper MX router (set firewall filter myfilter term myterm then count mycounter) and want to poll its packet/byte count via SNMP. I searched for an OID but I'm unable ...
9
votes
2answers
10k views

BGP remote-triggered blackhole (RTBH) filter for Juniper

I'm trying to find the most elegant way to implement a RTBH filter for routes received from a customer. The filter should: Only accept the customers own prefixes from a prefix-list Only accept /32 ...
7
votes
1answer
622 views

Is CoS supported in a logical system?

This reference states that class of service is supported in a logical system, but another reference disagrees. This may be a disparity between versions, but I have notoiced there is no class of ...
9
votes
1answer
1k views

Blocking IPv6 RA advertisements on Juniper EX series switch

How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not ...
10
votes
4answers
3k views

Embedded routers vs. software routers in the datacentre

I've been looking for a new 'core' router to put in our new rack which is colo'd at a nearby datacentre. What I've come across is the usual Cisco/Juniper/Brocade lineup, with the usual unattractive ...
7
votes
2answers
963 views

DSCP trust boundary

I have performed some analysis and noticed that traffic coming in from the Internet contains a myriad of DSCP values. This traffic competes for voice and video resources on the internal network. How ...
7
votes
3answers
13k views

How do I configure a port as STP “non-edge” on Juniper EX switches?

Juniper EX switches automatically categorize a port as an spanning-tree "edge" (there should only be one device behind the port) or "non-edge" (another switch) port. You can force this mode for a port ...
8
votes
4answers
4k views

How to signal a VPLS multihoming change to a L2 CE device

We have the following setup: Two MX routers connect to the same L2 site. Loop protection / redundancy is done via VPLS multihoming. On the other end are two switches (EX4200 for example). When the ...
10
votes
3answers
3k views

SRX DHCP client compatibility with HP Procurve DHCP Relay

I am trying to bootstrap the config on some Juniper SRX100s and am having some DHCP issues. Specifically, I am connecting the 0/0 port (fe-0/0/0 in the software) to my existing network, where DHCP ...
17
votes
4answers
8k views

Are there any reasons to not use BFD?

In looking to implement Bidirectional Forwarding Detection (BFD) it seems to be very flexible in terms of timer tuning, light weight regarding any overhead and it's flexibility in terms of overall ...
7
votes
1answer
2k views

What are some workarounds / fixes for UTM/IDP on Junos 12.1X44-D10.4 for SRX Series branch devices?

The JNCIP / JNCIE-SEC latest courses use 12.1X44-D10.4 as the recommended Junos version. I setup a 30-day evaluation on my home SRX device to study JIPS, based on 12.1. At this point, I'm guessing ...

1
6 7 8
9
10