8

There's no real difference between iBGP and eBGP here since you can specify a local-address for both. If you do not specify a local-address, the router will pick the address itself, typically the IP of the interface used to reach the peer. If you want to use a different address as a BGP source address, you can specify a local-address. In iBGP, this can be ...


5

show lacp interfaces <aeX> displays detailed state information for each member-link in a LAG. For example: user@router> show lacp interfaces ae0 extensive LACP state: Role Exp Def Dist Col Syn Aggr Timeout Activity ge-0/0/1 Actor No No Yes Yes Yes Yes Fast Active ge-0/0/1 Partner No No ...


5

This is one of those things that is a grey area and a bit of a personal preference. Generally speaking, it is safe, yes. However this command performs the same validation function that request system software add /var/tmp/image.tgz performs. In the most general sense, the validation component initializes instances of the daemons from the new version of ...


5

There's a generic rename command in JunOS. So something like this should work: edit protocols bgp rename group ebgp-AS1009 to group ebgp-AS23100


5

In almost all situations, iBGP sessions should be between loopback addresses. To achieve this, you must configure a local-address. In almost all situations, eBGP sessions should be between interface addresses. This is the default.


4

When upgrading a fabric e.g. from SCB to SCBE, there is a process to train the fabric links so they operate at higher speed. The require upgrade/training alarm is documented in the related upgrade processes (juniper doc link). It's confusing this alarm is raised following installation of a new FPC. However, it's not anything to worry about. I suspect this ...


4

Solved! I checked the /var/log/httpd.log log and I found the required interface (not the one I thought to): httpd: 0: GET IFNAME WORKED st0.6 httpd: 0: GET ALLOWED FAILED st0.6 now I can reach the Web Gui. Thanks to all.


4

I strongly recommend you look at upgrading your IOS to something a lot more recent as IOS XE 3.16 is no longer in support for Security Vulnerabilities as of August 2016. For your reference, I have an ASR1001 (non X) running IOS XE 16.06.08 and as seen below, this appears to support a much larger BFD interval than 3.16. <redacted>#conf t Enter ...


3

In edit mode you can use the load set <filename> statement for that. Alternatively, if you have a Juniper configuration file, you can import it using load merge <filename> or load replace <filename>, depending on if you want to update or replace the existing configuration.


3

j-web is not available for the MX platform, as the page you refer to explicitly states: Supported Platforms SRX Series vSRX


2

This was resolved after modifying the format of the authentication key in the Juniper router. We had to enter the key a specific way. For example, if the key was aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa (40 charachters), we would need to set the value in the router as "\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa\xaa"...


2

You need to filter for Ethertype 0x8809 frames (for Slow Protocols) with subtype 0x01 (for LACP). You need to run the capture on the physical interfaces, ie. xe. The aggregated, logical ae link doesn't carry those LACPDUs any more - they are consumed by the aggregation layer. See IEEE 802.1AX Clause 6.2.1: Note that problems with the DWDM scheme should show ...


2

What rule do you think it breaks? Note, when leaking BGP routes from your Ext VRF to master.inet.0 you need to take care to also leak the routes used by BGP as next-hops. If you neglect this, the leaked BGP routes may not be valid for master.inet.0.


2

There isn't a show command that shows this information. Invalidated sessions are sessions that are due for cleanup/deletion, holding them in memory so that they could be viewed may present other issues. The behavior can change slightly depending on some configuration settings (i.e. set security flow tcp-session rst-invalidate-session). If your issue is a ...


2

whether I can regard the mx480 as two independent routers? Yes, these can be considered as two logical routers. The Routing Protocol Daemon (RPD) typically runs a single instance for all protocols. Each logical-system creates its own instance of RPD in addition to the default. See next answer for more details. but you know they're only one config file(I ...


2

Inside a junOS device where is the image store path/.tgz , so that I can copy from one to another ?(example in a vc - i can copy from master to Line card) You as the operator decide where the installation file goes. This is the file you'd reference in the request system software command. Once installed, Junos is no longer contained in a single image file. ...


2

I have found answer from the Juniper documentation as below:- The graceful Routing Engine switchover (GRES) feature in Junos OS and Junos OS Evolved enables a router with redundant Routing Engines to continue forwarding packets, even if one Routing Engine fails. GRES preserves interface and kernel information. Traffic is not interrupted. However, GRES does ...


2

after a debug session with Juniper support, we found the problem: it's a bug related to the 15.1X49-D70.3 firmware version. Basically the flow matched self-traffic-policy and SRX dropped packet because it not recognized the address as local. Thanks to all, Gianluca


2

First, some context - snmpd isn't the only process involved in facilitating SNMP requests. It uses other processes as sub-agents to get data relevant to the particular statistic you're gathering. For example, if you are collecting RIB information, snmpd will talk to rpd to get the necessary data. mib2d has a similar function except in this case it has two ...


1

Not that I'm aware of. This feature was targeted at smaller form-factor platforms (e.g. SRX) that don't have full blown hard drives like the MX (hence why you see it say unsupported). SRX also has another statement to specify the number of rollbacks stored on the flash as well. I work with some devices that have massive configurations (~450000 lines / 16M),...


1

The partition table shows the partition level. Usage within a partition is up to the file system. The article you've linked to suggests (pre Junos OS 15.1 / FreeBSD 6.1): show system storage | match "/dev/ad0s1a|/dev/ad1s1f" or (Junos OS 15.1+ / FreeBSD 10): show system storage | match "/dev/gpt/junos" On JunOS OS 15.1+, the Compact ...


1

First a quick note (even though it might not be terribly relevant for you) /var/rundb/private and /var/run/db/private are symlinked. I digress, /var/run/db/private is a directory used to manage configuration state for configure private mode. You can delete the contents, but DO NOT delete the actual directory structure. Before doing so, I would double check ...


1

QFX5200-48Y Channelization When one of the 6 QSFP28 ports are configured for 40-Gigabit Ethernet and a 4x10G breakout cable is detected, the system converts the port into 4 independent 10-Gigabit Ethernet ports. Channelization is not supported on the 48 SFP28 ports. https://www.juniper.net/documentation/en_US/release-independent/junos/information-products/...


1

Also why they say that we can have one learning domain in a bridge domain versus many learning domains in a bridge domain? Bridge Domains contain Learning Domains, they are not mutually exclusive. What does this mean and whats the use case? First, let's look at a Bridge Domain with a single Learning Domain. This effectively means that you have a single ...


1

I'll replace the variables with some example variables for this just to make it clearer. The short version is that set firewall filter EXAMPLE-FILTER is an artifact in Junos, it still works but generally speaking using the syntax that specifies family is more uniform. In some cases different families have different options for match conditions and ...


1

The burst-size is most effective when the policer rate-limit is low enough that a single TCP flow can reach the rate-limit and consume all the burst tokens before experiencing any packet loss. As the number of TCP (or other application protocol) flows increases, or the used bandwidth commonly approaches the rate-limit, the actual effect of the configured ...


1

The reason you couldn't login is you set an encrypted-password which to Junos means it should've already be hashed using one of the supported password hashing algorithms, e.g. SHA256, MD5, etc. To change your Junos password by typing it into the command-line, you should use set plain-text-password which will prompt you (twice) for the new password, then hash ...


1

Sebastian Wiesinger post was good but did not fully work for my set up. I needed to enable flexible-vlan-tagging as well as encapsulation flexible-ethernet-services on each interface in the mx104. I also want to break down the actual configuration commands I ran to make the configuration more clear. Will also include connections to other switches that the ...


Only top voted, non community-wiki answers of a minimum length are eligible