10 votes
Accepted

What's the difference between TPID of 0x88a8 or 0x8100

What is the functional difference between these two TPID values? 0x8100 This TPID is used in 802.1Q - its your average, everyday VLAN tagging. A common use for VLANs is for enterprises to organize ...
user avatar
  • 6,450
9 votes
Accepted

Why are my equal cost LSP's not load balancing equally when using auto-bandwidth?

The problem is the: [edit protocols rsvp] load-balance bandwidth If you look at the Juniper documentation for Unequal Cost Load Balancing RSVP LSPs, it states: For uneven load balancing using ...
user avatar
  • 6,450
8 votes
Accepted

Is it possible to set idle-timeout for the Junos root user?

UPDATE: As of 16.1 this is possible with the following configuration: set system login idle-timeout n Where n is the number of minutes. https://www.juniper.net/documentation/us/en/software/junos/...
user avatar
  • 6,450
8 votes
Accepted

set cli complete-on-space Cisco equivalent

The Cisco command completion uses the <TAB> key (one of the Juniper options). Cisco commands also do not even need to be complete to work; they only need to be complete enough to be unambiguous....
user avatar
  • 94.1k
8 votes
Accepted

Why eBGP don't need config local-address?

There's no real difference between iBGP and eBGP here since you can specify a local-address for both. If you do not specify a local-address, the router will pick the address itself, typically the IP ...
user avatar
  • 15.7k
7 votes
Accepted

Is the root user on juniper switches useful?

Ryan is correct, you can do absolutely anything from root. JUNOS is built on FreeBSD and inherits that behavior. But to be honest, it's rarely used directly. The biggest practical example I can ...
user avatar
  • 6,450
7 votes

Juniper user creation and password

I don't think that will work, Juniper will just refuse the login since there's no valid authentication mechanism configured. The only way to do this properly is by actually setting a password: user@...
user avatar
  • 15.7k
7 votes
Accepted

What is the difference between "set community" and "add community" in juniper?

set replaces the current communities on a route with the specified community, while add adds the specified community to any communities already present on that route.
user avatar
  • 15.7k
6 votes
Accepted

Juniper SRX - No traffic after 17 minutes

I solved this problem finally. By capturing and comparing DHCP Discover packets sent from JunOS and Cisco, I found Cisco sends Option 64 Client Identifier and Option 12 Host Name by default. However, ...
user avatar
6 votes

why we can't create multiple loopback interfaces in Junos?

You can add an individual lo0.x to each routing-instance present. So if you configure multiple routing-instances, you can configure multiple, separate loopback interfaces. And this is 'the proper way ...
user avatar
  • 381
6 votes

why we can't create multiple loopback interfaces in Junos?

Because it's entirely unnecessary. In JunOS you can have multiple addresses on a single logical interface. > show configuration interfaces lo0.0 family inet { address 127.0.0.1/32; ...
user avatar
  • 847
6 votes

Juniper EX Flooding on STP Topology Change

TCNs are only generated from non-edge ports when they receive a BPDU. Verify that your access ports are configured as edge ports under your spanning-tree config. set protocols rstp interface ge-0/0/...
user avatar
  • 538
6 votes
Accepted

Can you only allow local login when TACACS is unavailable on a Juniper?

This is actually default behavior. The only way a local login will even be attempted is if all other authentication types fail (TACACS and/or RADIUS). So in your case, the only time your local ...
user avatar
  • 6,450
6 votes
Accepted

Junos cli regex requirement

It's just slightly different syntax, if you're trying to match lines containing specific strings, you'd use: show configuration | match "abc|xyz" Also, here's the documentation in case you want to ...
user avatar
  • 6,450
6 votes
Accepted

How can I view a list of which MACs an interface is restricted to on a Juniper SRX?

You can use show ethernet switching table. The following is taken from, Configuring MAC Limiting (Official Juniper Documentation). Configure: [edit ethernet-switching-options secure-access-port] ...
user avatar
  • 6,450
6 votes
Accepted

How to specify username for SSH in Juniper router?

For some reason the Juniper documentation (http://www.juniper.net/techpubs/en_US/junos13.2/topics/reference/command-summary/ssh.html) doesn't mention it, but it is possible. The command is: ssh <...
user avatar
  • 1,909
6 votes
Accepted

Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?

Sadly the EX4200 (or any EX) is not able to do this. You would need a separate logical unit for the VLAN which has its own VLAN counters. This works for example on Junipers MX routers but not on EX. ...
user avatar
6 votes
Accepted

EVPN/VXLAN RD & RT

I'll try to help where I can. I know next to nothing about Juniper, but the theory should be the same. Implementation should be the only difference. So let's start with RD's. Each tenant has one VRF. ...
user avatar
  • 201
6 votes
Accepted

Configure Juniper Router Advertisements

As per the RFC, link-local addresses will be used for any Neighbour Discovery including RA messages. Source: https://www.rfc-editor.org/rfc/rfc4861#section-4.2 PacketLife has a good blog post that ...
user avatar
6 votes
Accepted

Junos how to execute a lot of repetitive commands?

The easiest way to do this is: create a file with the set statements (probably using some script) copy that file to your router use load set <filename> to execute the set of statements More ...
user avatar
  • 15.7k
6 votes
Accepted

How can I retrieve a configuration programmatically on a JunOS device?

There are a number of ways to do this. You can do a 'show configuration | display xml' to get an XML output from the router. Another, probably better option would be to use netconf, which uses the ...
user avatar
  • 15.7k
5 votes
Accepted

BGP authentication-key-chain vs. authentication-key

Well I managed to figure this out. The bottom line is: Using authentication-key-chains uses the "TCP Enhanced Authentication Option" Using authentication-key uses the "TCP MD5 ...
user avatar
  • 6,450
5 votes

Log Messages In Juniper MX960

The syntax of the show log command is show log "filename". First try: show log This command will show you all files in the log directory. You will probably get the log entries you want simply by ...
user avatar
  • 141
5 votes
Accepted

Screen to Junos "Set route ...." command

In screenos the command set vrouter "trust-vr" is moving you into editing the trust-vr router section. trust-vr is normally the default routing instance. The next command set route 80.70.128.142/32 ...
user avatar
5 votes
Accepted

How do you alias a command in JunOS?

I was working with a customer who was implementing OAM in JunOS, the show commands to display statistics are unwieldy. They wanted a way not to have to type the full command everytime they needed to ...
user avatar
  • 6,450
5 votes
Accepted

Junos VRF equal-cost, multi-next-hop static routes not balancing

It appears that you're applying the load balancing policy to the routing-instance. It needs to be applied to the forwarding-table in order for it to perform ECMP on the forwarding plane. routing-...
user avatar
  • 5,449
5 votes
Accepted

How to view old Log messages on Junos

If you don't see those logs there anymore, they've most likely been rotated to reduce disk space used, but it could be that messages.19.gz contains logs from July, it all depends on when that log was ...
user avatar
  • 15.7k
5 votes
Accepted

Decrypt passwords in JunOS show configuration

The string shown in the password field of user and root accounts in the Junos configuration is not the password encrypted, but a salted MD5 hash of the password. A hash by nature is a one-way ...
user avatar
5 votes
Accepted

How do i clear icmp statistics (JUNOS)

show system statistics icmp shows the involvement of the Route Processor in handling ICMP. It's a useful capacity planning tool for setting filters to avoid the RP being attacked by ICMP floods. The ...
user avatar
  • 1,161
5 votes
Accepted

Juniper: WakeOnLan over 802.1x without using default VLAN

There is a quite nice and simple solution: We have utilized the voice VLAN to send Magic Packets. Voice VLAN is configurable under: ethernet-switching-options { voip { interface access-...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible