8
votes
Accepted
Is it possible to set idle-timeout for the Junos root user?
UPDATE: As of 16.1 this is possible with the following configuration:
set system login idle-timeout n
Where n is the number of minutes.
https://www.juniper.net/documentation/us/en/software/junos/...
- 7,044
8
votes
Accepted
How to detect loops created by unmanaged switches?
Preventing Unmanaged Switches and Loops:
The best solution would be to block unmanaged switches entirely, except those that you explicitly allow. This can be done by enabling bpduguard on access ...
8
votes
Accepted
set cli complete-on-space Cisco equivalent
The Cisco command completion uses the <TAB> key (one of the Juniper options).
Cisco commands also do not even need to be complete to work; they only need to be complete enough to be unambiguous....
- 98.3k
8
votes
Accepted
Why eBGP don't need config local-address?
There's no real difference between iBGP and eBGP here since you can specify a local-address for both.
If you do not specify a local-address, the router will pick the address itself, typically the IP ...
- 17k
7
votes
Juniper user creation and password
I don't think that will work, Juniper will just refuse the login since there's no valid authentication mechanism configured. The only way to do this properly is by actually setting a password:
user@...
- 17k
7
votes
Accepted
What is the difference between "set community" and "add community" in juniper?
set replaces the current communities on a route with the specified community, while
add adds the specified community to any communities already present on that route.
- 17k
7
votes
Accepted
Is it possible to limit a IP's traffic in gateway Juniper switch?
You can apply a filter to an interface in the interface:
irb {
unit 9 {
family inet {
address 40.224.224.14/29;
filter input my-filter;
}
}
}
And then ...
- 17k
7
votes
Accepted
How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?
There are two labels, so as traffic ingresses the PE from the CE there is a double push.
Inner Label
Every interface gets a label from that L2VPNs label block. The inner label is based on this ...
- 7,044
6
votes
How to observe logs/steps MX has taken to peer BGP
I think you're looking for traceoptions for BGP. From the documentation on Juniper's site:
Configuring Traceoptions
[edit protocols bgp traceoptions]
user@router# set file bgp.log size 10m files 10 ...
6
votes
Accepted
How to specify username for SSH in Juniper router?
For some reason the Juniper documentation (http://www.juniper.net/techpubs/en_US/junos13.2/topics/reference/command-summary/ssh.html) doesn't mention it, but it is possible. The command is:
ssh <...
- 1,949
6
votes
Accepted
Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?
Sadly the EX4200 (or any EX) is not able to do this. You would need a separate logical unit for the VLAN which has its own VLAN counters. This works for example on Junipers MX routers but not on EX.
...
- 8,107
6
votes
Accepted
EVPN/VXLAN RD & RT
I'll try to help where I can. I know next to nothing about Juniper, but the theory should be the same. Implementation should be the only difference.
So let's start with RD's. Each tenant has one VRF. ...
- 201
6
votes
Can we have multiple AS number in the same router?
Sort of.
You can have an AS number configured globally for the router and a local AS defined for a specific peer.
From Juniper documentaion page Examples: Configuring BGP Local AS:
Overview
...
- 19.4k
6
votes
Accepted
Junos how to execute a lot of repetitive commands?
The easiest way to do this is:
create a file with the set statements (probably using some script)
copy that file to your router
use load set <filename> to execute the set of statements
More ...
- 17k
6
votes
Accepted
How can I retrieve a configuration programmatically on a JunOS device?
There are a number of ways to do this.
You can do a 'show configuration | display xml' to get an XML output from the router.
Another, probably better option would be to use netconf, which uses the ...
- 17k
6
votes
Accepted
There have uncommitted changes, but `show | compare` do not show it
Try this one: show | compare rollback 1
Also this situation may rise in case when you change value(option), then in the same session revert this changed value to previous state. < This is my ...
- 449
6
votes
Accepted
What's the difference between "show arp no-resolve" and "show arp" in Juniper?
no-resolve indicates you don't want to do DNS lookups for every IP address in the ARP table:
teun@juniper> show arp ?
Possible completions:
...
no-resolve Don't attempt to print ...
- 17k
5
votes
Not receiving netflow v9, v5 works - Juniper SRX
You've got two out of the three necessary sections listed, and they look OK. There's a third section needed "forwarding-options" that tells the Juniper whether and how to sample packets to generate ...
- 236
5
votes
Accepted
Decrypt passwords in JunOS show configuration
The string shown in the password field of user and root accounts in the Junos configuration is not the password encrypted, but a salted MD5 hash of the password.
A hash by nature is a one-way ...
- 9,381
5
votes
Juniper MX snmp oid for static route
The best you'll be able to get is inetCidrRouteTable from IP-FORWARD-MIB - this will give you all routes, regardless of protocol.
The OID is .1.3.6.1.2.1.4.24.7 and if you walk it, you'll see a table ...
- 9,381
5
votes
Accepted
How do i clear icmp statistics (JUNOS)
show system statistics icmp shows the involvement of the Route Processor in handling ICMP. It's a useful capacity planning tool for setting filters to avoid the RP being attacked by ICMP floods. The ...
- 1,171
5
votes
Accepted
Juniper: WakeOnLan over 802.1x without using default VLAN
There is a quite nice and simple solution:
We have utilized the voice VLAN to send Magic Packets.
Voice VLAN is configurable under:
ethernet-switching-options {
voip {
interface access-...
5
votes
Accepted
understanding naming of Junos routing tables
Yes, that's correct. Here's a list of routing tables on one of our juniper boxes for example, all non-default routing instances are prefixed with ri-:
teun@juniperbox> show route table ?
Possible ...
- 17k
5
votes
Connect Cisco 2900 to Juniper SRX550
Matt!
That is achievable. You can pass trunk (multiple tagged vlan's) to Cisco router by using sub-interfaces.
Configuration example:
interface GigabitEthernet 0/0
no ip address
no shutdown
...
- 2,774
5
votes
With respect to Juniper Networks , what is the difference between 'Fabric Plane and 'Switch Fabric'?
The wording in that document isn't great - IMO it should read
What happens on the MX240 and MX480 is that these unused connections are grouped together and another fabric is created so that the ...
- 9,381
5
votes
Accepted
Why the last AS PATH item always is `I` or `?`?
This tells you how this prefix was learned by BGP.
This is an attribute called origin, which may help BGP decide the preferred path to take (if all higher weight attributes are tied - local-preference,...
- 1,591
5
votes
Accepted
Dump traffic on routing-instance with a Juniper SRX firewall
This works fine on the lower-end SRX models - try using the layer 3 interface bound to your VLAN eg:
tcpdump -i vlan.10
My configuration looks like this:
routing-instances {
TCPDUMP-TEST {
...
- 9,381
5
votes
Accepted
Every `aex` have a `aex.0` in my QFX5100, why?
It's default behavior on Juniper devices.
From documentation:
Configure a logical interface on the physical device. You must configure a logical interface to be able to use the physical device.
...
- 449
5
votes
Is it possible to limit a IP's traffic in gateway Juniper switch?
Adjust your filter to allow all other traffic - at the moment, you are blocking everything except the two IP addresses in question.
term Limit-traffic {
from {
source-address {
...
- 9,381
Only top scored, non community-wiki answers of a minimum length are eligible