Questions tagged [juniper]

Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

(Networking noob) I can't get network to work on a server using pfsense and juniper switch

I work at a company as an IT administrator, but my experience with networking is very limited. I was always focused on the OS and application side of things. Recently the only other IT administrator ...
MutedVideo's user avatar
0 votes
0 answers
292 views

Error in IKE phase 1 when trying create IPSeC tunnel with Juniper SRX 300

Less than month ago we had to replace our old SRX 210 HE device with a new SRX 300 because the old device started to become unreliable. We had two IPSeC tunnels to two different places both working ...
nyoatype's user avatar
0 votes
0 answers
128 views

Libreswan to Juniper. The tunnel is not going up

authentication-method pre-shared-keys dh-group group14 authentication-algorithm sha1 encryption-algorithm aes-256-cbc lifetime-seconds 28800 protocol esp authentication-algorithm hmac-sha1-96 ...
Dakka_Dakka_Dakka_Dakka_Dakka_'s user avatar
0 votes
0 answers
122 views

Aruba to Juniper EX4200

So I have a bit of an unusual situation -- I'm trying to use a EX4200-48-PoE juniper switch with our Aruba (HP) network in place -- just as a transitional move as we're doing some construction to give ...
Brian Lamb's user avatar
1 vote
1 answer
3k views

How to troubleshoot LACP flapping interface triggered by layer 3 IP Address. (Juniper)

I am currently working on solving a network issue that has led to network outages across my organization. (I have included a picture of our simple topology below). Our network consists of a Router/...
nickcrv06's user avatar
0 votes
0 answers
57 views

TCP Session drops because of FIN signal

I have two servers communicating with each other through ISO 8385 messages over TCP sessions. Basically host-to-host interface between two payment switches. The problem is that the session keeps ...
Mohammed Tellesy's user avatar
0 votes
1 answer
136 views

Why does this single value SNMP OID have a bunch of sub-values?

I have a Juniper MIB in which this OID: 1.3.6.1.4.1.2636.3.1.13.1.24 corresponds to this value: 1.3.6.1.4.1.2636.3.1.13.1.2. When I run an snmpwalk of 1.3.6.1.4.1.2636.3.1.13.1.24 I get this: JUNIPER-...
Omnifarious's user avatar
1 vote
0 answers
37 views

An error on Junos model ex3300 ( VLAN error )

I'm trying to remove a VLAN from JUNOS and then I get this error error: tag value 40 is being used by more than one vlan and error: configuration check-out failed Is there any solution ?
Ibrahim Salah's user avatar
0 votes
1 answer
333 views

Juniper LACP with linux server not increase speed

And: I'm using R630 with Debian 11 and Ex2200 with version 12.3R12.4 The network: each server using 4 link to sw server 1 ==== switch ==== server 2 Here is server config ( both server ) auto lo ...
Alceatraz's user avatar
  • 133
0 votes
1 answer
85 views

ScreenOS SSG-320M Source Interface Based Routing

quick question. Couldn't figure this out with even the ScreenOS Bible. Juniper SSG-320M Firewall, Just added an 8port PIM Module(ETH1/0 to 1/7): ETH0/0(Trust) 172.16.1.1/16 ETH0/2(UnTrust) 192.168.0.5/...
Chalen's user avatar
  • 1
1 vote
1 answer
895 views

Increasing MTU size

Why would increasing the VLAN MTU size cause things to break? We have a customer who wants 2000 byte packets for some reason, so I increased all the physical links to 9216, which didn't cause any ...
abatie's user avatar
  • 93
-1 votes
1 answer
47 views

how to enable intervlan between juniper core switch and Cisco catalyst 1000

i have a juniper 4600 core with 2300 Access switches in my VLAN, one of the 2300 failed and replaced with cisco 2300 in one VLAN, DHCP is assigning IP to clients and internet is working fine, the ...
Rabbani Syed's user avatar
1 vote
1 answer
30 views

vlan routing redirected by remote change?

We are replacing a Juniper EX4200 stack with a new EX3400 stack. During the migration, we setup a bridge link between the two so that things that hadn't migrated yet could talk to things that had. ...
abatie's user avatar
  • 93
0 votes
1 answer
3k views

How to force 1G speed for Juniper QFX5100 10G ports?

I have available a Juniper QFX5100-48S switch (48 SFP 10G ports, 6 QSFP ports) that I cannot join into our network since an SFP DAC 10G cable connecting it to an SFP port on a HP V1810-48G switch does ...
Francesco's user avatar
1 vote
0 answers
278 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
Pablo Xavier's user avatar
1 vote
0 answers
926 views

Juniper EX4200-48t LACP on 10GB module not working

I'm new to Juniper products and I bough two older EX4200-48t. I setup virtual chassis and add a few LAGs with LACP. All LAGs on copper connections works fine but on the 10GB module not. The module is ...
Alex's user avatar
  • 11
0 votes
1 answer
442 views

Juniper EX4200 Stack with PFSense DHCP (Discover/Offer Loop)

I'm currently struggling with my Juniper Switch Stack. Topology is like this Topology The Client Ports on the Stack are configured as tagged-access with dot1x (multiple supplicant) and they switch ...
babum's user avatar
  • 1
0 votes
1 answer
855 views

Ansible playbook "path specified in src not found"

I am runnning into this message when I do this : ansible-playbook -i inventory junos_config_new.yml --check -vvv ansible-playbook 2.9.9 config file = /etc/ansible/ansible.cfg configured module ...
user409817's user avatar
0 votes
0 answers
321 views

Juniper MX traffic shaping - bypass rate limits for just a few destinations

The aforementioned MX router is a BRAS providing access for about 3,000 subscribers, using the 'dynamic-clients' functionality. Each subscriber demux interface gets assigned a specific firewall rate-...
Branislav Krzanic's user avatar
0 votes
0 answers
259 views

rsyslog logging based on sending host behind NAT

I have multiple Juniper devices behind one NAT'd IP sending their logs to a single host. On the wire the message looks like this: Dec 4 07:38:31 tor-29-1: dot1xd[1585]: task_connect: task PNACAUTH./...
Dovid Bender's user avatar
0 votes
0 answers
265 views

Objects in firewall filters on Juniper devices

Greetings and sorry for my English. I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
Fmy Oen's user avatar
  • 79
0 votes
1 answer
1k views

JUNOS set system syntax error

I'm trying to enable the web interface on JUNOS 11.4R13.5 (outdated I know) I'm trying to use the command set system services web-management https interface But I'm unable to run it as I get a ...
J_tt's user avatar
  • 1
0 votes
1 answer
91 views

Subnetting: Access 10.1.0.1 from 10.1.2.1?

Here is the newly configured vlan on my Juniper: vlans { vlan1 { vlan-id 3; l3-interface vlan.1; } } interfaces { vlan { unit 1 { family inet { ...
THE JOATMON's user avatar
3 votes
2 answers
5k views

Set Putty Window Title Dynamically to Hostname

Is any way to dynamically change the window title within Putty when jumping between devices? The majority of my work is on Cisco/Juniper devices and in order to reach these devices, I use a Linux ...
Nathan's user avatar
  • 31
1 vote
0 answers
404 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
Ben's user avatar
  • 111
0 votes
1 answer
111 views

JunOS SCU (source class) matching not working on vMX 18

I testing Junos Subscriber Manager on virtual playgroung. All seems fine and work as expected on real hardware. But with dynamic profile with source-class sclass_mytest option not working. If I ...
Tomato's user avatar
  • 79
0 votes
1 answer
229 views

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust ...
lbutlr's user avatar
  • 113
-2 votes
1 answer
38 views

Whether the Speed Auto can have a network speed reach to the switchport top?

My Juniper EX4300 Switch ge-0/0/42 switchport configuration is bellow: admin@1409A# run show interfaces ge-0/0/42 Physical interface: ge-0/0/42, Enabled, ...
three-blocks's user avatar
0 votes
0 answers
308 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
HastDuPasta's user avatar
0 votes
1 answer
448 views

Configuring Juniper EX2200 Ethernet-Switching

Recently I started configuring an Juniper EX2200 to be used with an fibre optic connection in it's SFP module. The switch itself is online and can ping remote hosts without an issue after setting the ...
HastDuPasta's user avatar
-1 votes
1 answer
429 views

Virtually no bandwidth via Juniper QFX5100 switch

I have a Juniper QFX5100 with pretty much stock configs. I am using aggregated interfaces between them. When I use a cross over between the servers everything works fine and I get 10GB of bandwidth. ...
Dovid Bender's user avatar
1 vote
1 answer
98 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
Yan's user avatar
  • 11
0 votes
1 answer
2k views

ISC-DHCPD classes for ZTP (with Juniper)

I'm currently trying to setup a DHCP server to use it in a ZTP environment. My first goal is to be able to upgrade my Juniper devices automatically based on the hardware. What I'm really trying to ...
gmazoyer's user avatar
1 vote
1 answer
357 views

Juniper Switches: Extend network without adding new switches to virtual chassis

We have a virtual chassis composed of four EX-3300 48-port switches: One master, one backup, and two linecard, all located in the same LAN closet. All of the switches have uplinks to a Palo Alto PA-...
Chris's user avatar
  • 153
1 vote
0 answers
305 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
Matthew's user avatar
  • 11
1 vote
1 answer
2k views

Juniper SRX refuses to add new ip addresses to ARP (unless)

I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8. juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0) I would like to add ...
Sverre's user avatar
  • 763
2 votes
0 answers
1k views

How to configure Juniper SSG5 with VLANs and DHCP

I just purchased a used SSG5, upgraded the firmware, and now I'd like to set it up as my Firewall/DHCP/VPN. I'm new to Juniper, so please forgive any blatant missteps in terminology. I am familiar ...
juan julio's user avatar
0 votes
1 answer
152 views

Why is the 'Move' box always disabled on our SRX 500 running JunOS 12?

I've been trying to determine what has happened with the SRX500's we have at work. They are running JunOS 12 [12.1X46-D40.2]. For some reason the 'Move' box in the upper right of the Security > ...
Routhinator's user avatar
1 vote
1 answer
330 views

QSFP28 DAC cables causing packet loss and framing issues

So the systems I am using are MX960 MPC7e. When I use the 1meter 100G DAC I have zero errors + zero packet loss. When I use the 3meter 100G DAC cables I have packet loss & framing errors. I ...
KrisGT's user avatar
  • 143
0 votes
0 answers
286 views

Libreswan to Juniper SRX. Tunnel is up and running but nothing is going through

ipsec auto --status says that the connection is established: 000 #544: "VPN":4500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 208s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; ...
Kamsiinov's user avatar
  • 103
0 votes
1 answer
94 views

What is the use of the 'exit' statement in a screenOS juniper firewall config?

I want to audit a screenOS juniper firewall. I have been provided with the configuration file, but I am not familiar with the syntax. I am wondering about the 'exit' command. In the config file, most ...
Michael Palm's user avatar
1 vote
0 answers
612 views

How to debug tun0 issues with OpenConnect Juniper

I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way: sudo openconnect --juniper -v <my_corporate_VPN_url> I'm doing this from three physical instances of ...
Antonio López's user avatar
0 votes
0 answers
646 views

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
Aaron R.'s user avatar
  • 467
1 vote
0 answers
2k views

How to tell Ansible to prompt user for passwd when SSH Key connection fails?

I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team. How do I create a condition that says: when key authentication ...
Louie Louie's user avatar
3 votes
1 answer
10k views

Ping works but TCP doesn't in a bit of an unusual topology

I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me. There are two subnets (one is our companys and one is our clients) which reside in the ...
nyoatype's user avatar
0 votes
0 answers
751 views

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
Ben's user avatar
  • 111
0 votes
1 answer
3k views

Get detailed info via snmp from Juniper switch stack for monitoring

I try to get the following information out of the switch stack for monitoring purposes. Here is the command and its output executed directly on the switch stack via ssh login: root@stack> show ...
Kay's user avatar
  • 3
0 votes
1 answer
2k views

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
Agrajag9's user avatar
  • 180
0 votes
2 answers
863 views

How to check part id in Juniper Router?

In Cisco router I am able to see part id's XXXXXX#show inventory NAME: "subslot 0/0 transceiver 5", DESCR: "GE LX" PID: FTLF1318P3BTL-RN , VID: A , SN: PV90L6P But when I execute show ...
R__raki__'s user avatar
  • 101
1 vote
0 answers
260 views

How to set snmp trap threshold

I want to monitor some firewall devices by snmp.Now, I can get cpu info of device by snmp4j. But I have no idea how to use snmp trap to get specified warning and error messages from device. How to set ...
Wendy's user avatar
  • 11

1
2 3 4 5 6