Skip to main content
8 votes
Accepted

How to detect loops created by unmanaged switches?

Preventing Unmanaged Switches and Loops: The best solution would be to block unmanaged switches entirely, except those that you explicitly allow. This can be done by enabling bpduguard on access ...
Brian Winning Jr.'s user avatar
8 votes
Accepted

set cli complete-on-space Cisco equivalent

The Cisco command completion uses the <TAB> key (one of the Juniper options). Cisco commands also do not even need to be complete to work; they only need to be complete enough to be unambiguous....
Ron Maupin's user avatar
  • 99.9k
8 votes
Accepted

Why eBGP don't need config local-address?

There's no real difference between iBGP and eBGP here since you can specify a local-address for both. If you do not specify a local-address, the router will pick the address itself, typically the IP ...
Teun Vink's user avatar
  • 17.4k
7 votes
Accepted

What is the difference between "set community" and "add community" in juniper?

set replaces the current communities on a route with the specified community, while add adds the specified community to any communities already present on that route.
Teun Vink's user avatar
  • 17.4k
7 votes
Accepted

Is it possible to limit a IP's traffic in gateway Juniper switch?

You can apply a filter to an interface in the interface: irb { unit 9 { family inet { address 40.224.224.14/29; filter input my-filter; } } } And then ...
Teun Vink's user avatar
  • 17.4k
7 votes
Accepted

How does a Juniper PE associate frames from the CE with correct route in <VPN_name>.l2vpn.0 table in case of Kompella L2 VPNs?

There are two labels, so as traffic ingresses the PE from the CE there is a double push. Inner Label Every interface gets a label from that L2VPNs label block. The inner label is based on this ...
Jordan Head's user avatar
  • 7,119
6 votes
Accepted

Juniper EX4200 How to read SNMP traffic counters for specific VLAN id from trunk interface?

Sadly the EX4200 (or any EX) is not able to do this. You would need a separate logical unit for the VLAN which has its own VLAN counters. This works for example on Junipers MX routers but not on EX. ...
Sebastian Wiesinger's user avatar
6 votes
Accepted

EVPN/VXLAN RD & RT

I'll try to help where I can. I know next to nothing about Juniper, but the theory should be the same. Implementation should be the only difference. So let's start with RD's. Each tenant has one VRF. ...
mark_3094's user avatar
  • 201
6 votes

Can we have multiple AS number in the same router?

Sort of. You can have an AS number configured globally for the router and a local AS defined for a specific peer. From Juniper documentaion page Examples: Configuring BGP Local AS: Overview ...
JFL's user avatar
  • 19.7k
6 votes
Accepted

Junos how to execute a lot of repetitive commands?

The easiest way to do this is: create a file with the set statements (probably using some script) copy that file to your router use load set <filename> to execute the set of statements More ...
Teun Vink's user avatar
  • 17.4k
6 votes
Accepted

How can I retrieve a configuration programmatically on a JunOS device?

There are a number of ways to do this. You can do a 'show configuration | display xml' to get an XML output from the router. Another, probably better option would be to use netconf, which uses the ...
Teun Vink's user avatar
  • 17.4k
6 votes
Accepted

There have uncommitted changes, but `show | compare` do not show it

Try this one: show | compare rollback 1 Also this situation may rise in case when you change value(option), then in the same session revert this changed value to previous state. < This is my ...
Ivan Gurzhiy's user avatar
6 votes
Accepted

What's the difference between "show arp no-resolve" and "show arp" in Juniper?

no-resolve indicates you don't want to do DNS lookups for every IP address in the ARP table: teun@juniper> show arp ? Possible completions: ... no-resolve Don't attempt to print ...
Teun Vink's user avatar
  • 17.4k
5 votes

Not receiving netflow v9, v5 works - Juniper SRX

You've got two out of the three necessary sections listed, and they look OK. There's a third section needed "forwarding-options" that tells the Juniper whether and how to sample packets to generate ...
John Murphy's user avatar
5 votes
Accepted

Decrypt passwords in JunOS show configuration

The string shown in the password field of user and root accounts in the Junos configuration is not the password encrypted, but a salted MD5 hash of the password. A hash by nature is a one-way ...
Benjamin Dale's user avatar
5 votes

Juniper MX snmp oid for static route

The best you'll be able to get is inetCidrRouteTable from IP-FORWARD-MIB - this will give you all routes, regardless of protocol. The OID is .1.3.6.1.2.1.4.24.7 and if you walk it, you'll see a table ...
Benjamin Dale's user avatar
5 votes
Accepted

How do i clear icmp statistics (JUNOS)

show system statistics icmp shows the involvement of the Route Processor in handling ICMP. It's a useful capacity planning tool for setting filters to avoid the RP being attacked by ICMP floods. The ...
vk5tu's user avatar
  • 1,171
5 votes
Accepted

Juniper: WakeOnLan over 802.1x without using default VLAN

There is a quite nice and simple solution: We have utilized the voice VLAN to send Magic Packets. Voice VLAN is configurable under: ethernet-switching-options { voip { interface access-...
Michał Sacharewicz's user avatar
5 votes
Accepted

understanding naming of Junos routing tables

Yes, that's correct. Here's a list of routing tables on one of our juniper boxes for example, all non-default routing instances are prefixed with ri-: teun@juniperbox> show route table ? Possible ...
Teun Vink's user avatar
  • 17.4k
5 votes

Connect Cisco 2900 to Juniper SRX550

Matt! That is achievable. You can pass trunk (multiple tagged vlan's) to Cisco router by using sub-interfaces. Configuration example: interface GigabitEthernet 0/0 no ip address no shutdown ...
Andrey Prokhorov's user avatar
5 votes

With respect to Juniper Networks , what is the difference between 'Fabric Plane and 'Switch Fabric'?

The wording in that document isn't great - IMO it should read What happens on the MX240 and MX480 is that these unused connections are grouped together and another fabric is created so that the ...
Benjamin Dale's user avatar
5 votes
Accepted

Why the last AS PATH item always is `I` or `?`?

This tells you how this prefix was learned by BGP. This is an attribute called origin, which may help BGP decide the preferred path to take (if all higher weight attributes are tied - local-preference,...
manish ma's user avatar
  • 1,644
5 votes
Accepted

Dump traffic on routing-instance with a Juniper SRX firewall

This works fine on the lower-end SRX models - try using the layer 3 interface bound to your VLAN eg: tcpdump -i vlan.10 My configuration looks like this: routing-instances { TCPDUMP-TEST { ...
Benjamin Dale's user avatar
5 votes
Accepted

Every `aex` have a `aex.0` in my QFX5100, why?

It's default behavior on Juniper devices. From documentation: Configure a logical interface on the physical device. You must configure a logical interface to be able to use the physical device. ...
Ivan Gurzhiy's user avatar
5 votes

Is it possible to limit a IP's traffic in gateway Juniper switch?

Adjust your filter to allow all other traffic - at the moment, you are blocking everything except the two IP addresses in question. term Limit-traffic { from { source-address { ...
Benjamin Dale's user avatar
5 votes
Accepted

How does ISIS find a next hop address for a prefix learned by ISIS?

I guess this is because there is no next-hop IP address for those two routes? Correct, but let's be clear, it's not that one is there and the router can't find it, it's because no next-hop IP address ...
Jordan Head's user avatar
  • 7,119
5 votes
Accepted

Junos "request system software validate" safety

This is one of those things that is a grey area and a bit of a personal preference. Generally speaking, it is safe, yes. However this command performs the same validation function that request ...
Jordan Head's user avatar
  • 7,119
5 votes

Why eBGP don't need config local-address?

In almost all situations, iBGP sessions should be between loopback addresses. To achieve this, you must configure a local-address. In almost all situations, eBGP sessions should be between interface ...
Jeff Wheeler's user avatar
  • 5,502
5 votes
Accepted

What determines if a Juniper router is a route reflector client?

It's right there above the diagram: Device D and Device E are considered to be nonclients because they have explicitly configured peer relationships with each other. To make them RRroute reflector ...
Ron Trunk's user avatar
  • 67.7k

Only top scored, non community-wiki answers of a minimum length are eligible