Hot answers tagged

13 votes
Accepted

How can I find what optic is in an interface for a Juniper MX-series router?

You need to be looking under the show chassis hardware stanza. That gives you all the inner-workings of the devices plugged into the chassis, including VC members. On an MX platform, this is along ...
  • 5,469
8 votes
Accepted

Is it possible to set idle-timeout for the Junos root user?

UPDATE: As of 16.1 this is possible with the following configuration: set system login idle-timeout n Where n is the number of minutes. https://www.juniper.net/documentation/us/en/software/junos/...
  • 6,480
8 votes
Accepted

How to detect loops created by unmanaged switches?

Preventing Unmanaged Switches and Loops: The best solution would be to block unmanaged switches entirely, except those that you explicitly allow. This can be done by enabling bpduguard on access ...
8 votes
Accepted

set cli complete-on-space Cisco equivalent

The Cisco command completion uses the <TAB> key (one of the Juniper options). Cisco commands also do not even need to be complete to work; they only need to be complete enough to be unambiguous....
  • 95.8k
8 votes
Accepted

Why eBGP don't need config local-address?

There's no real difference between iBGP and eBGP here since you can specify a local-address for both. If you do not specify a local-address, the router will pick the address itself, typically the IP ...
  • 16.3k
7 votes

Juniper user creation and password

I don't think that will work, Juniper will just refuse the login since there's no valid authentication mechanism configured. The only way to do this properly is by actually setting a password: user@...
  • 16.3k
7 votes
Accepted

What is the difference between "set community" and "add community" in juniper?

set replaces the current communities on a route with the specified community, while add adds the specified community to any communities already present on that route.
  • 16.3k
7 votes
Accepted

Is it possible to limit a IP's traffic in gateway Juniper switch?

You can apply a filter to an interface in the interface: irb { unit 9 { family inet { address 40.224.224.14/29; filter input my-filter; } } } And then ...
  • 16.3k
7 votes
Accepted

How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?

There are two labels, so as traffic ingresses the PE from the CE there is a double push. Inner Label Every interface gets a label from that L2VPNs label block. The inner label is based on this ...
  • 6,480
6 votes

How to observe logs/steps MX has taken to peer BGP

I think you're looking for traceoptions for BGP. From the documentation on Juniper's site: Configuring Traceoptions [edit protocols bgp traceoptions] user@router# set file bgp.log size 10m files 10 ...
6 votes
Accepted

How to specify username for SSH in Juniper router?

For some reason the Juniper documentation (http://www.juniper.net/techpubs/en_US/junos13.2/topics/reference/command-summary/ssh.html) doesn't mention it, but it is possible. The command is: ssh <...
  • 1,909
6 votes
Accepted

Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?

Sadly the EX4200 (or any EX) is not able to do this. You would need a separate logical unit for the VLAN which has its own VLAN counters. This works for example on Junipers MX routers but not on EX. ...
6 votes
Accepted

EVPN/VXLAN RD & RT

I'll try to help where I can. I know next to nothing about Juniper, but the theory should be the same. Implementation should be the only difference. So let's start with RD's. Each tenant has one VRF. ...
  • 201
6 votes

Can we have multiple AS number in the same router?

Sort of. You can have an AS number configured globally for the router and a local AS defined for a specific peer. From Juniper documentaion page Examples: Configuring BGP Local AS: Overview ...
  • 18.8k
6 votes
Accepted

Junos how to execute a lot of repetitive commands?

The easiest way to do this is: create a file with the set statements (probably using some script) copy that file to your router use load set <filename> to execute the set of statements More ...
  • 16.3k
6 votes
Accepted

How can I retrieve a configuration programmatically on a JunOS device?

There are a number of ways to do this. You can do a 'show configuration | display xml' to get an XML output from the router. Another, probably better option would be to use netconf, which uses the ...
  • 16.3k
6 votes
Accepted

There have uncommitted changes, but `show | compare` do not show it

Try this one: show | compare rollback 1 Also this situation may rise in case when you change value(option), then in the same session revert this changed value to previous state. < This is my ...
6 votes
Accepted

What's the difference between "show arp no-resolve" and "show arp" in Juniper?

no-resolve indicates you don't want to do DNS lookups for every IP address in the ARP table: teun@juniper> show arp ? Possible completions: ... no-resolve Don't attempt to print ...
  • 16.3k
5 votes
Accepted

Juniper Private VLAN isolated port on a trunk

Unfortunately not. This is a frustrating limitation of the way Juniper have implemented Isolated ports and Promiscuos ports in PVLANs - it essentially boils down to if the interfaces is in access ...
5 votes

Not receiving netflow v9, v5 works - Juniper SRX

You've got two out of the three necessary sections listed, and they look OK. There's a third section needed "forwarding-options" that tells the Juniper whether and how to sample packets to generate ...
5 votes
Accepted

Decrypt passwords in JunOS show configuration

The string shown in the password field of user and root accounts in the Junos configuration is not the password encrypted, but a salted MD5 hash of the password. A hash by nature is a one-way ...
5 votes

Juniper MX snmp oid for static route

The best you'll be able to get is inetCidrRouteTable from IP-FORWARD-MIB - this will give you all routes, regardless of protocol. The OID is .1.3.6.1.2.1.4.24.7 and if you walk it, you'll see a table ...
5 votes
Accepted

How do i clear icmp statistics (JUNOS)

show system statistics icmp shows the involvement of the Route Processor in handling ICMP. It's a useful capacity planning tool for setting filters to avoid the RP being attacked by ICMP floods. The ...
  • 1,161
5 votes
Accepted

Juniper: WakeOnLan over 802.1x without using default VLAN

There is a quite nice and simple solution: We have utilized the voice VLAN to send Magic Packets. Voice VLAN is configurable under: ethernet-switching-options { voip { interface access-...
5 votes
Accepted

understanding naming of Junos routing tables

Yes, that's correct. Here's a list of routing tables on one of our juniper boxes for example, all non-default routing instances are prefixed with ri-: teun@juniperbox> show route table ? Possible ...
  • 16.3k
5 votes

Connect Cisco 2900 to Juniper SRX550

Matt! That is achievable. You can pass trunk (multiple tagged vlan's) to Cisco router by using sub-interfaces. Configuration example: interface GigabitEthernet 0/0 no ip address no shutdown ...
5 votes

With respect to Juniper Networks , what is the difference between 'Fabric Plane and 'Switch Fabric'?

The wording in that document isn't great - IMO it should read What happens on the MX240 and MX480 is that these unused connections are grouped together and another fabric is created so that the ...
5 votes
Accepted

Why the last AS PATH item always is `I` or `?`?

This tells you how this prefix was learned by BGP. This is an attribute called origin, which may help BGP decide the preferred path to take (if all higher weight attributes are tied - local-preference,...
  • 1,526
5 votes
Accepted

Dump traffic on routing-instance with a Juniper SRX firewall

This works fine on the lower-end SRX models - try using the layer 3 interface bound to your VLAN eg: tcpdump -i vlan.10 My configuration looks like this: routing-instances { TCPDUMP-TEST { ...

Only top scored, non community-wiki answers of a minimum length are eligible