Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

0
votes
0answers
10 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
0
votes
0answers
8 views

juniper netscreen-50 management access only when admin station interface in promiscous mode

I have just received a netscreen-50 Juniper and i am trying to configure it. On one interface, I have defined an IP address and an management access for telnet/ssh: set interface "ethernet1" zone "...
0
votes
1answer
24 views

LACP - Load Balancing Network 2Gbit Ubuntu

I have configured my server as bonding interface to achieve 2Gbit network speed but it seems ubuntu can not go over than 1gbit and the outgoing traffic from server is not balanced over 2 interfaces. ...
0
votes
1answer
10 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
0
votes
1answer
17 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
2answers
32 views

How to connect a Juniper EX4500 to netapp X1107A

What is the best and not expensive way to connect a Juniper EX4500 to a X1107A Chelsio PCI Netapp card? Will these do (10GBASE-SR) for both end? and then connect with fiber cable? How important is it ...
0
votes
0answers
50 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
0answers
11 views

Juniper routing-based VPN - does it requires a lot of F/W's resource?

Recently, I got complains about IPSec VPN performance. I got two Juniper Devices - NS204 for center, and SSG-5 on site. There are 1 routing-based IPSec VPN Tunnel, and user reports that they got tons ...
1
vote
1answer
27 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0
votes
1answer
23 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
2
votes
1answer
64 views

Juniper EX3200 connected to Cisco 2900 series router - incomplete ARP entry

I'm tying to connect a Call Manager Express running on a Cisco 2900 series router to a Juniper EX3200 switch. I have both configured on VLAN 4, with both ports in access mode but when I connect the ...
0
votes
0answers
30 views

Juniper EX200 factory reset

Probably a really simple question I just cannot find the answer online or on Juniper's website. On most switches I have used, you could always just hold the power button for 5-10 seconds and this ...
0
votes
1answer
28 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
0
votes
1answer
25 views

Remotely remove MAC table entry from Juniper router

In our colocation we have multiple linux servers with a public uplink connected to a juniper MX40 (that we can not control) and an internal link each. Sometimes we get incoming UDP flooding ...
0
votes
0answers
41 views

azure dynamic vpn juniper ssg5

i was asked to disable some Site-to-site VPN connections on azure and a few days later to enable them again. Some of the site-to-site tunnels were able to connect, but not the ones that connect to ...
0
votes
1answer
67 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
0
votes
0answers
24 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
1answer
30 views

RSTP over tunnel?

tl;dr: Is it possible to run RSTP over l2tp or MPLS? We have leased one gig capacity from a service provider's network, over which we sent a udp multicast traffic. The provider gives us drop at our ...
0
votes
0answers
49 views

Netscreen VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100....
0
votes
1answer
175 views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0
votes
1answer
63 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
1
vote
0answers
22 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
0
votes
1answer
59 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
0
votes
0answers
93 views

How to route traffic between tagged and untagged traffic on Juniper EX3300 switch?

I have 3 different subnets as below subnet1: 11.11.11.0/24 tagged with vid 1111 subnet2: 22.22.22.0/24 untagged subnet3: 33.33.33.0/24 tagged with vid 3333 now machines in subnet2 want to ...
0
votes
1answer
79 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
0answers
233 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
1
vote
0answers
71 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
0
votes
1answer
17 views

SRX240 - unable to ping Default DG from router

Just want to ask how come i couldn't get a connection form srx directly to my PC. My configuration goes like this: set interface ge-0/0/5 unit 0 family inet address 10.10.1.1/24 commit When i ...
2
votes
1answer
503 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ~/.juniper_networks/...
1
vote
1answer
13 views

Juniper bytes-from-server meaning

I'm looking through some Juniper firewall logs that look like this. There are servers and user machines on the network. Most of the logs refer to source and destination, which makes sense to me, but ...
0
votes
1answer
41 views

Use port forwarding to access several computers via one public IP address

I am trying to set up remote desktop access to several computers. I created the following custom service: I then added the following VIP entries against the untrusted interface: I then created ...
0
votes
0answers
20 views

What could cause issue with accessing server over vpn

We have two servers at point A, users at point B connect to the servers We use juniper firewalls to do the VPN, Server 2 OS was just reinstalled. Access to server 2 stopped working. Users at point ...
0
votes
0answers
156 views

collectd snmp Juniper CoS statistics

I'm struggling to derive meaningful metric names out of my collectd configuration for grabbing CoS statistics from some Juniper switches. The <Data> definition looks like this: <Data "...
0
votes
1answer
83 views

Juniper SSG5 DDNS https socket creation failed

I have a Juniper SSG5 firewall, Version: 6.3.0r19.0, that is on a dynamic IP. We are using DDNS service from dyndns. The service is supported by the SSG device. There has been no problems getting it ...
0
votes
0answers
360 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
2
votes
1answer
289 views

OSPF among Cisco and Juniper

Below are snippets of ospf configs among Cisco and Juniper devices. However, not all are seeing each other in "show ip ospf", especially the redistributed routes into ospf. I'm sure the router id(s) ...
-3
votes
1answer
125 views

Practice/learning “Junos OS” available? ( Junos OS/Juniper system ) [closed]

I would like to learn Junos OS/Juniper by practicing on the system itself. Is there such a resource on the internet? Possibly provided by Juniper for learning?
2
votes
1answer
113 views

Load Balancing between 2 ISPs

I'm having 2 ISPs, need to balance traffic between the internal users ... Firewall is SRX210 The question is: Each ISP has there own DNS, how to make the dns resolving based on the used ISP? ...
0
votes
1answer
113 views

Network maintenence time - Cisco & Juniper

I maintain Cisco & Juniper equipment, lately developers are complaining that router upgrades take too long. Since we don't have high availability yet. How would I cut downtime? I currently do: (...
0
votes
1answer
132 views

Juniper SRX210 routing vlans

Ive got a Juniper SRX210 only using 2 ports Model: srx210he-poe JUNOS Software Release [11.4R2.14] WAN ge-0/0/0 up up ge-0/0/0.0 up up inet 192.168.10.4/...
0
votes
0answers
163 views

Juniper SSG Port Forwarding over a Site-to-Site VPN

Our company has severs in two locations -- our main office, and a colocation. We're getting ready to move one of our servers, a PBX, from our main office to our colocation for better service, but we'...
0
votes
1answer
36 views

routing between juniper NS Firewalls

we have site to site VPN between new york office Firewall (NS) and dublin client firewall. we have another office located in mumbai and configured site to site VPN between new york and mumbai office, ...
1
vote
1answer
163 views

Juniper SSG20 Additional subnet on adsl interface

I've configured a Juniper SSG20 to have some clients natted to the internet with the main ip address (X.X.27.90/30) of my IPoA ADSL connection but i have also some servers i wish to connect with a ...
0
votes
2answers
2k views

How to get/retrive the list of Interface, vlans, port id, and mac address in juniper via snmp?

Below are the following commands I used to get the specific data that I need in a juniper switch. Get Port Id and Interface snmpwalk -r:"switchName" -v:2 -t:10 -c:"*******" -os:"1.3.6.1.2.1.2.2.1.2"...
2
votes
5answers
2k views

Junos Pulse users are competing with eachother for VPN connection

We've having the issues described here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB26822 where one user kicks another user off the VPN when connecting. Our PCs were cloned after the ...
6
votes
0answers
120 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
1
vote
0answers
115 views

How does Juniper vlan.0 work with policies?

I'm trying to understand vlan.0 and Juniper policies. Referring to here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16667 According to the link above, it seems that if I use vlan.0,...
6
votes
1answer
541 views

Do Juniper switches support vtp?

We have a mostly Cisco network, though for our access layer we usually deploy Juniper Virtual Chassis switches. To replicate this, we are interested in deploying a few juniper switches in our product ...
0
votes
0answers
823 views

Wierd traceroute / ICMP issues on Juniper SRX 210BE

I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that). I've got FTTC (fiber to the cabnet) ...