7 votes
Accepted

Juniper Filesystem Full

There are 3 real ways to fix this, all of which are fairly simple. Automated Storage Cleanup Juniper has a system cleanup tool for handling this automatically. It operates almost exclusively under ...
user avatar
  • 5,449
6 votes
Accepted

Unpredictable Juniper SNMPv3 Access Error

This issue is a result of the engine-id changing. If you run into this syslog message, that is the exact definition of the problem. Nov 6 09:44:35 MHN00416AN01 snmpd[1260]: SNMPD_ENGINE_ID_CHANGED:...
user avatar
  • 5,449
5 votes
Accepted

Juniper: WakeOnLan over 802.1x without using default VLAN

There is a quite nice and simple solution: We have utilized the voice VLAN to send Magic Packets. Voice VLAN is configurable under: ethernet-switching-options { voip { interface access-...
user avatar
5 votes

Juniper - minor host 0 /var partition usage is high

It looks like after taking the issue up with JTAC support, the /var partition was misrepresenting the amount of space that was actually in use. We haven't rebooted our switch in the last four years as ...
user avatar
4 votes
Accepted

EX Series Switch Efficient BPDU Protect Statements

Judging by your comments, you're simply trying to simplify your initial set statements. The easiest solution is to use the wildcard range statements released after 12.1. Example usage: user@host# ...
user avatar
  • 5,449
4 votes
Accepted

Juniper EX 3300 Incorrectly Identifies SFP+ Transceiver Module

Quick test: Swap the SFPs with a known working ones on the switch (if possible) and see if the condition stays with the ports or follow the SFPs. If the other SFP works in the current "problematic ...
user avatar
4 votes

VLANs: To Prune or not to Prune

There's a big difference between "allowed" vlans and "created" vlans. Very few (read: NONE) of the switches I'm aware of can handle 4095 vlans. Entering the equiv of vlan create 1-4095 (i.e. all vlans)...
user avatar
  • 29.7k
4 votes

SNMP Monitoring Juniper EX8216 switches for Rx/Tx power, temperature and bias current

Unfortunately the DOM MIB does not seem to be supported on any of the EX 22/32/42/82xx switches. I've been bitten by this in the past. The values are present on the device eg: show interfaces ...
user avatar
4 votes
Accepted

Is Olive the same as vMX?

Junos Olive is an unofficial and unsupported image/version that was developed by Juniper for development purposes. As for the vMX, it's "a full-featured, virtualized MX Series 3D Universal Edge Router"...
user avatar
  • 131
4 votes
Accepted

Cannot commit on Junos

It looks like you have the VLAN mtnc_os configured on the interface as well. When you add the MTNC_ALOM VLAN it is added to the vlan list. Your port is probably an access port and can only have one ...
user avatar
4 votes
Accepted

OSPF setup between EX2200 and EX4200

You don't have any layer-3 interfaces in area 0 other than the link between the two switches, so you don't have any routes to exchange between them. You need to add the layer-3 interfaces you wish to ...
user avatar
  • 1,899
4 votes

What's the purpose of JUNOS' sfid process?

The sfid process is the software forwarding infrastructure daemon. This process handles all traffic that the switch cannot handle in hardware alone. Common examples of such traffic are: GRE ...
user avatar
  • 1,899
4 votes
Accepted

Juniper EX4200 QinQ question

Q-in-Q on the 4200 is super non-intuitive, but here is the configuration that will work for you: If you're mixing Q-in-Q and dot1q, you need to set the dot1q tunnelling ethertype to be 0x8100 set ...
user avatar
4 votes
Accepted

In IP6 fe80::8a10:8fff:feb7:1632 > ff02::2: ICMP6, router solicitation , length 16

ARP is an IPv4 process. You are seeing IPv6 traffic. (IPv4 and IPv6 don't share anything beyond the "I" and "P".) What you are seeing is the normal initial messages from a host's interface coming ...
user avatar
  • 29.7k
3 votes

Juniper trunking with two links (not using LAG)

RSTP - configure both links the same. Ensure that RSTP is enabled on both sides of the link via 'set protocols rstp interface xe-blah' or just ensure 'set protocol rstp interface all' is configured. ...
user avatar
  • 809
3 votes
Accepted

Juniper trunking with two links (not using LAG)

One thing to keep in mind with trunk redundancy is that STP fails over slowly, even with Rapid STP. If you set up the two links as an aggregated channel, the link failover is much faster. STP ...
user avatar
  • 94k
3 votes

Juniper ztp trigger system requests

Not via ZTP, but I've just put together a couple of Ansible modules for you to handle both of these tasks here: https://github.com/dfex/dfex-ansible-modules They're pretty self-explanatory - ...
user avatar
3 votes
Accepted

Juniper routing - one way communication

Figured out what was going on. This is unique to SRX devices as they are security devices. I had to add host-system-services inbound ping to my trust zone, like so: admin@wb1# set security zones ...
user avatar
  • 191
3 votes

Segregate VLAN based on L3 subnet

It sounds like you're in a bad situation there, and trying to make it worse. Heck, I'm game - the following should get you halfway there: firewall { family ethernet-switching { filter ...
user avatar
3 votes
Accepted

EX4200 / EX3300 IPv6 Routing Question

If you aren't trying to exchange subnet information with neighboring routers about these /64's, then you'll be fine with the stock EX4200 loadout. However, if you were going to, you'll need routing ...
user avatar
  • 5,449
3 votes
Accepted

How to configure Juniper EX switch for anti-bruteforcing?

Ideally you want to use SSH Key-based authentication and move away from user-based as much as possible, but in areas where I need to use username and password logging, I tend to standardise on the ...
user avatar
3 votes
Accepted

From SFP+ to SFP + Juniper EX4200 specific question

Nope. There is no multi-speed option in 1/10G optics for Juniper (or Cisco or most others). That said, you can likely just put another 1GE SFP optic into the SFP+ slot currently occupied by the 10G ...
user avatar
  • 6,036
3 votes

From SFP+ to SFP + Juniper EX4200 specific question

Also, does installing an uplink module in an EX4200 cancels some of the other 48 built-in ports, as with the older EX3200? No, the EX4200 allows all 48 fixed interfaces to operate along with the ...
user avatar
3 votes

Juniper EX incoming packets VLAN tagged

Might be quicker to start over here - the below configuration should clean out what you have and give you a good place to start (don't commit this until the end though): delete interfaces ge-0/0/0 ...
user avatar
3 votes

How to get multiple uplinks on Juniper EX switch to work?

As Ron has mentioned, this is most likely the result of spanning-tree blocking the remaining three interfaces, as you have created a loop in your network. To achieve what you're after (load-sharing/...
user avatar
3 votes

Juniper Switch - Enabling Ports?

For layer 2 switching, these ports need to be configured for family ethernet-switching. ge-0/0/1 { unit 0 { family ethernet-switching { } } }
user avatar
3 votes
Accepted

ERROR: Package signature validation failed. Aborting install. When upgrade the JUNOS

If you look at the errors, it's saying "certificate is not yet valid". What that typically means is that your switch doesn't have its clock correctly set to today's date. As a result, from the switch'...
user avatar
3 votes
Accepted

How to check the Juniper Switch's port bandwidth?

As I said in previous question, you can check that shaping is working by transfering data to target (shaped) host by either copying something (via NetBIOS, SCP/FTP, etc.) or by running simple ...
user avatar
3 votes
Accepted

EX3300 can not use irb.x, so how to access the layer-3 address?

Check your Ethernet switching configuration setup by irb instead of vlan You may get a better answer by pasting your EX3300 configurations. In my guess, the following configurations are on your ...
user avatar
3 votes
Accepted

Weird Juniper switch behavior

At least on the switch, RSTP is active. Likely, you've got a switch group on the SRX, and STP blocks the supposedly redundant interfaces. Check the logs and add the sanitized SRX config if you can't ...
user avatar
  • 71.5k

Only top scored, non community-wiki answers of a minimum length are eligible