23

The MX platform does not have the general concept of a "VLAN" that is present on the whole platform. The MX only "sees" VLAN tags on incoming packets and can then act on these tags. What you want is to bridge packets from two ports that have the same VLAN-ID in the L2 header and then add a L3 interface to that bridge. On the MX platform you have two ways of ...


13

Yes, this data is populated in the Firewall MIB .1.3.6.1.4.1.2636.3.5.2.1.5 contains your counters .1.3.6.1.4.1.2636.3.5.2.1.6 contains your filter names .1.3.6.1.4.1.2636.3.5.2.1.7 contains your counter names show firewall filter RE-FILTER | match mgmt_ntp mgmt_ntp 199728 2628 % snmpbulkwalk jnpr .1.3.6.1.4.1.2636.3.5.2.1.7|grep ...


12

If you mean using a switch to break out your 10g router port into individual VLANs and then using subinterfaces to route each port individually, I don't see how that is really wrong. Yes you'll lose the immediate failover when the physical port goes down, but as they say that's the "cost of doing business". Router ports are expensive compared to switch ports ...


9

The problem is the: [edit protocols rsvp] load-balance bandwidth If you look at the Juniper documentation for Unequal Cost Load Balancing RSVP LSPs, it states: For uneven load balancing using bandwidth to work, you must have at least two equal-cost LSPs toward the same egress router and at least one of the LSPs must have a bandwidth value configured at ...


8

Short answer, just use Resource ReSerVation Protocol (RSVP). Long answer, you could use multi-topology-routing and have multiple metrics in each interface and force some packets to different topology than another packets. But I would not really venture there. You might want to talk to your account team that you want segment routing implemented: http://...


6

I don't know for sure, but set routing-instances red instance-type vpls protocols vpls control-word commits for me on 12.3R2.5 and this is mentioned here: On MX Series routers with the Channelized OC3/STM1 (Multi-Rate) Circuit Emulation MIC with SFP, Junos OS substantially supports RFC 4385, Pseudowire Emulation Edge-to-Edge (PWE3) Control Word for ...


6

The way eBGP works is that it will always set the next-hop to the directly connected address of the sending router (except for multihop sessions or when the original next-hop is in the same subnet). As you can see in your output the router is sending the route with Nexthop: Self, not with the nexthop you have configured. You can find the decision tree for ...


6

Just to provide an answer for anyone else experiencing similar issues, this was a cosmetic bug that was fixed from JUNOS 12.3 onwards. Actual update from TAC "There is an issue with the stats collection command where the HW counter was not getting cleared. Thus the stats reporting was continuously incrementing it's counter even though no actual EOPE ...


5

The best you'll be able to get is inetCidrRouteTable from IP-FORWARD-MIB - this will give you all routes, regardless of protocol. The OID is .1.3.6.1.2.1.4.24.7 and if you walk it, you'll see a table of entries. The format of entries is: IP-MIB::ip.24.7.1.7.1.4.0.0.0.0.0.2.0.0.1.4.10.0.0.254 = INTEGER: 13 | | | | ...


5

If you don't see those logs there anymore, they've most likely been rotated to reduce disk space used, but it could be that messages.19.gz contains logs from July, it all depends on when that log was created. So you could use show log messages.19.gz to check that. You can change the number of files stored on disk: set file messages archive files 100 Make ...


5

The syntax of the show log command is show log "filename". First try: show log This command will show you all files in the log directory. You will probably get the log entries you want simply by typing: show log messages.0.gz No need to think about decompressing the file. Junos will do this for you.


5

have you read this? How to setup trunk and access ports in an MX80? - J-Net Community It explains quickly how to set a bridge domain for your L3 interface, and add ports as either access or trunk. irb.200 would be your ve 200


5

There are technical and operational considerations. The technical consideration is anticipating or determining how much load the RR platform will be subjected to. Are you going to be carrying 100>1000>??? of routes? Will there be lots of churn? Generally, RRs obtain a complete copy of the BGP RIB. So if you have a churn event, it propagates to all of your ...


4

negotiation of the control-word between the BGP VPLS PE routers is added in Juniper MX series starting from Junos 14.1. so only BGP-signaled VPLS. BR


4

If RR isn't close by in the forwarding path then it might reflect sub-optimal route to your PE. In future this problem will be fixed by BGP-ORR If you are running MPLS network, then you should also consider if your core should be BGP free or not. Benefit of BGP free core is that it won't crash next time there is parser bug for BGP UPDATE message. Problem ...


4

Unfortunately the DOM MIB does not seem to be supported on any of the EX 22/32/42/82xx switches. I've been bitten by this in the past. The values are present on the device eg: show interfaces diagnostics optics xe-1/1/0, but not exported into the MIB tree.


4

1) How many virtual router [routing instances] can be created on the QFX5100? The QFX5100 platform currently supports up to 512 virtual router routing instances. 2) How many VRF [routing instances] can be created on the MX480? There are a few variables you may want to consider, (both software and hardware) namely the number of routes, routing ...


4

Junos Olive is an unofficial and unsupported image/version that was developed by Juniper for development purposes. As for the vMX, it's "a full-featured, virtualized MX Series 3D Universal Edge Router" (quote from Juniper). It's an official and supported product that allows the usage of a virtualized MX router in a cloud/virtual network environment. As such, ...


4

Just for sake of interest I've built a test topology, which displayed in image below: Little remark: all router's configs are pretty much default. What I did: ISP router with loopback of 1.1.1.1/32. Announcing route 1.1.1.0/24 via BGP to vMX-1. BGP session to vMX-2 not configured; vMX-1 and vMX-2 share virtual IP 198.18.100.3 via VRRP; this IP is set as ...


4

JunOS will divide your policer into multiple policers for each physical interface in proportion to the percentage this interface has in the AE. In your example you have two interfaces so each will get a policer for 50% of your configured rate. In summary your policer will have the expected effect even when applied on an AE. However if you have your links on ...


4

It's a bit complicated. :) To apply a filter to the physical interface you need to apply a "physical interface policer" to all units of the ae. This can only be done via a firewall filter. You can avoid configuring this on all units by using apply-groups. Here is the step-by-step: Configure the policer [edit firewall] policer shared-phy-policer-50g { ...


4

The solution seems to be to use rib-group. I always assumed rib-group and instance-import were interchangeable though, as the name suggests, rib-group works in the RIB whereas instance-import only works on the FIB. Syntax is significantly more complex but it's nice in such that you can apply rib-group to individual BGP peers which avoids the need to ...


3

It is correct to say that each of that card, DPC,DPCe and MPC provides packet forwarding engines. Everyone of this card uses this mechanism to forwarding. Several types of DPCs are available. Each DPC includes either two or four Packet Forwarding Engines. Each Packet Forwarding Engine enables a throughput of 10 Gbps. (http://www.juniper.net/techpubs/en_US/...


3

Pretty sure you need to add family ccc to the interface on the PE_MX80. set interfaces ge-1/0/9 unit 555 family ccc


3

As you said, the Junos documentation for IPSec is pretty confusing; it took a while to find a definitive reference for how to get IPSec in HW on the MX80. Since you're looking for site-to-site VPN support, this means higher throughput and certainly you don't want to do this on a CPU. As such, you should use the MS-MIC-16G, which started supporting IPSec ...


3

If you want to refuse that route, you could add another import statement to those two peergroups, in which you reject the prefix: policy-statement reject_unwanted { from { route-filter 14.135.4.0/24 exact; } then reject; } For peergroupd B the import statement would change to something like this: import [ reject_unwanted im_B ]; And ...


3

Check out https://www.juniper.net/documentation/en_US/junos/topics/usage-guidelines/services-configuring-port-mirroring.html First, set up a filter filter filter-name { term term-name { then { port-mirror; accept; } } } and then [edit forwarding-options port-mirroring] input { maximum-packet-length bytes; rate rate; run-...


3

monitor interface and show interface <...> detail are the commands most often used. However, I don't think many people use a CLI nowadays to get this information. There are many tools which use either SNMP or (even better) streaming telemetry to retrieve this information from a network device and display it in any way you like.


3

Firstly, there looks to be something wrong with ae13 - if you have 16x 10G interfaces attached to it, you should have an RSVP interface bandwidth of 160Gbps, not 130Gbps as per your output? So is it a good practice to change RSVP bandwidth value of an interface? There is nothing inherently good or bad about manually overriding the speed of an interface ...


3

BGP really isn't the tool to achieve this. Bandwidth utilisation is not one of the criteria which is used to select best paths. If you really want to go down this path (and this can have huge drawbacks as well, balancing traffic can lead to a lot of packet reordering, routing instability and other problems), you should look into traffic optimizers. I am ...


Only top voted, non community-wiki answers of a minimum length are eligible