8
votes
Accepted
Is it possible to set idle-timeout for the Junos root user?
UPDATE: As of 16.1 this is possible with the following configuration:
set system login idle-timeout n
Where n is the number of minutes.
https://www.juniper.net/documentation/us/en/software/junos/...
- 7,044
8
votes
Accepted
set cli complete-on-space Cisco equivalent
The Cisco command completion uses the <TAB> key (one of the Juniper options).
Cisco commands also do not even need to be complete to work; they only need to be complete enough to be unambiguous....
- 98.8k
8
votes
Accepted
Why eBGP don't need config local-address?
There's no real difference between iBGP and eBGP here since you can specify a local-address for both.
If you do not specify a local-address, the router will pick the address itself, typically the IP ...
- 17.1k
7
votes
Accepted
What is the difference between "set community" and "add community" in juniper?
set replaces the current communities on a route with the specified community, while
add adds the specified community to any communities already present on that route.
- 17.1k
6
votes
Accepted
How to specify username for SSH in Juniper router?
For some reason the Juniper documentation (http://www.juniper.net/techpubs/en_US/junos13.2/topics/reference/command-summary/ssh.html) doesn't mention it, but it is possible. The command is:
ssh <...
- 1,949
6
votes
Accepted
Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?
Sadly the EX4200 (or any EX) is not able to do this. You would need a separate logical unit for the VLAN which has its own VLAN counters. This works for example on Junipers MX routers but not on EX.
...
- 8,117
6
votes
Accepted
EVPN/VXLAN RD & RT
I'll try to help where I can. I know next to nothing about Juniper, but the theory should be the same. Implementation should be the only difference.
So let's start with RD's. Each tenant has one VRF. ...
- 201
6
votes
Accepted
Configure Juniper Router Advertisements
As per the RFC, link-local addresses will be used for any Neighbour Discovery including RA messages.
Source: https://www.rfc-editor.org/rfc/rfc4861#section-4.2
PacketLife has a good blog post that ...
- 180
6
votes
Accepted
Junos how to execute a lot of repetitive commands?
The easiest way to do this is:
create a file with the set statements (probably using some script)
copy that file to your router
use load set <filename> to execute the set of statements
More ...
- 17.1k
6
votes
Accepted
How can I retrieve a configuration programmatically on a JunOS device?
There are a number of ways to do this.
You can do a 'show configuration | display xml' to get an XML output from the router.
Another, probably better option would be to use netconf, which uses the ...
- 17.1k
6
votes
Capturing LACP PDUs in an aggregated link on Juniper MX
show lacp interfaces <aeX> displays detailed state information for each member-link in a LAG. For example:
user@router> show lacp interfaces ae0 extensive
LACP state: Role Exp Def ...
- 5,449
5
votes
Accepted
How to view old Log messages on Junos
If you don't see those logs there anymore, they've most likely been rotated to reduce disk space used, but it could be that messages.19.gz contains logs from July, it all depends on when that log was ...
- 17.1k
5
votes
Accepted
Decrypt passwords in JunOS show configuration
The string shown in the password field of user and root accounts in the Junos configuration is not the password encrypted, but a salted MD5 hash of the password.
A hash by nature is a one-way ...
- 9,421
5
votes
Accepted
How do i clear icmp statistics (JUNOS)
show system statistics icmp shows the involvement of the Route Processor in handling ICMP. It's a useful capacity planning tool for setting filters to avoid the RP being attacked by ICMP floods. The ...
- 1,171
5
votes
Accepted
Juniper: WakeOnLan over 802.1x without using default VLAN
There is a quite nice and simple solution:
We have utilized the voice VLAN to send Magic Packets.
Voice VLAN is configurable under:
ethernet-switching-options {
voip {
interface access-...
5
votes
Accepted
IPv6 default route not being installed from RA
From JTAC...
The issue you are facing is described on internal PR.
Workaround
Configure IPv6 default route manually.
Add prefix info to the RA sent
Known issue will be resolved in:
junos:15.1X49-...
- 91
5
votes
Accepted
Dump traffic on routing-instance with a Juniper SRX firewall
This works fine on the lower-end SRX models - try using the layer 3 interface bound to your VLAN eg:
tcpdump -i vlan.10
My configuration looks like this:
routing-instances {
TCPDUMP-TEST {
...
- 9,421
5
votes
Accepted
Rate Limit on Main Aggregated Interface (AE) without applying on Unit Level in Juniper MX
It's a bit complicated. :) To apply a filter to the physical interface you need to apply a "physical interface policer" to all units of the ae. This can only be done via a firewall filter. You can ...
- 8,117
5
votes
Accepted
Every `aex` have a `aex.0` in my QFX5100, why?
It's default behavior on Juniper devices.
From documentation:
Configure a logical interface on the physical device. You must configure a logical interface to be able to use the physical device.
...
- 449
5
votes
Accepted
Junos not automatically advertising an address configured on loopback interface to OSPF
Yes, this changed back in Junos 8.5. You must now explicitly configure lo0.0 (ideally as a passive interface) to advertise the network.
- 7,044
5
votes
Accepted
Transporting an Ethernet Port in a LDP Based VPLS Instance on Juniper MX routers
Yes, LDP VPLS is a pretty standard deployment. Where it can get confusing is the various types of PE-CE interface encapsulation depending upon the type of service you're running. In your case of a ...
- 7,044
5
votes
Accepted
Junos "request system software validate" safety
This is one of those things that is a grey area and a bit of a personal preference. Generally speaking, it is safe, yes. However this command performs the same validation function that request ...
- 7,044
5
votes
Why eBGP don't need config local-address?
In almost all situations, iBGP sessions should be between loopback addresses. To achieve this, you must configure a local-address.
In almost all situations, eBGP sessions should be between interface ...
- 5,449
5
votes
Accepted
How do I rename a Junos BGP group?
There's a generic rename command in JunOS. So something like this should work:
edit protocols bgp
rename group ebgp-AS1009 to group ebgp-AS23100
- 17.1k
5
votes
The IRB.30 Interface cannot be pinged and i cannot SSH into the given IP
You have put the wrong ip address in the config. You have put an 9 instead of an 8.
address 192.169.31.200/24;
Should be
address 192.168.31.200/24;
- 383
4
votes
Accepted
Juniper EX4200 how to select s-vlan from c-vlan on dot1q-tunneling access port?
This should do what you are after:
set interfaces ge-0/0/0 unit 0 family ethernet-switching port-mode access
set interfaces ge-0/0/0 unit 0 family ethernet-switching vlan members SVID4
...
- 661
4
votes
Accepted
Cannot commit on Junos
It looks like you have the VLAN mtnc_os configured on the interface as well.
When you add the MTNC_ALOM VLAN it is added to the vlan list. Your port is probably an access port and can only have one ...
4
votes
Accepted
Is Olive the same as vMX?
Junos Olive is an unofficial and unsupported image/version that was developed by Juniper for development purposes.
As for the vMX, it's "a full-featured, virtualized MX Series 3D Universal Edge Router"...
- 131
4
votes
Accepted
SIP alg on juniper SRX100H2
First, ALGs are technically independent entities. If we are looking at JUST the ALG, it cares only about the SIP signaling packets, not which ports are used.
You define the ports by application ...
- 7,044
4
votes
Accepted
Difference between request system zerorize and load factory-default in Junos?
By using the request system zeroize media operation mode command via the CLI, you can reset the device to factory defaults. It will erase all the logs, data, and the load factory-default configuration ...
- 1,723
Only top scored, non community-wiki answers of a minimum length are eligible