Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

2
votes
0answers
206 views

Is using GIADDR when relaying DHCP requests beneficial?

I am setting up three Juniper EX3200 switches simply named 1,2, and 3. Switch 2 will have two VLANs, one being the internet uplink from the Firewall and one being the gateway for the Workstations. ...
2
votes
0answers
477 views

Juniper SSG5… How to setup VPN to Netgear FVS338

I'm trying to configure a Juniper SSG5 for VPN. So far I'd say I'm lost lost lost. The server (just one for now) is a dedicated host at a hosting company. I have a block of 8 public IPs (/29), the ...
2
votes
2answers
837 views

Juniper Network Connect and Ubuntu

I'm trying to install the Juniper Network Connect client on Ubuntu -- I'm wondering if any seasoned network admins or otherwise knowledgeable individuals know if it's possible for me to download the ...
1
vote
1answer
4k views

ECMP Load Balancing in JUNOS

I'm trying to figure out how to use ECMP load balancing in JUNOS. I know this isn't the best way to load balance, but its quick and dirty and gets done what I need to. In ScreenOS this was pretty ...
1
vote
1answer
370 views

Multiple External IP Addresses, Two Routers & Amazon VPC

I'm out of my depth here as I'm a database developer trying to do network stuff and really need some help. We have a leased line with multiple external IP addresses (subnet mask 255.255.255.248). ...
1
vote
2answers
821 views

How to get two subnets to talk to each other (foundry and juniper)

I have two switches, one which hosts a 10.130.32.x subnet (which is a foundry switch) and the other which is a juniper SSG and it is hosting a 10.130.30.x subnet. The users on the .32 subnet cannot ...
1
vote
2answers
7k views

VLAN trunking between Juniper EX -> Cisco Catalyst -> and Cisco Router

I have the following scenario: EX2200 Switch whit ge-0/0/8 set as an access port on VLAN 80 ge-0/0/0 set as a trunk port connected to a catalyst switch and various vlans allowed to pass includin ...
1
vote
2answers
2k views

VLAN support on Juniper EX - 2200 switches

I have 6 Juniper switches (EX - 2200) connected to each other as shown in the network topology. ![enter image description here][1] I have two PC's that I am using PC1 - (used for configuring the 6 ...
1
vote
3answers
373 views

What is the minimum enable level to permit config download (Cisco & other vendors)

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc., What is the minimum enable level we need to grant to the service account? If the answer ...
1
vote
3answers
354 views

Juniper networks firewall [closed]

I had Juniper networks which made block to websites so I want to prevent it from blocking any website what can I do?
1
vote
2answers
65 views

LAN routing without vlan tagging?

On my old Allied Telesis router I had a single interface for internal traffic. I had multiple networks talking on this one interface. For example 192.168.2.X was vlan 1-2, and 192.168.3.X was vlan ...
1
vote
1answer
2k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
1
vote
1answer
260 views

Juniper Firewall SRX210 questions

Total newbie to Juniper. Okay, I've been messing with the web interface on a SRX210 Firewall for a few hours now and looking like I need specific help now. So the overall architecture is that I have ...
1
vote
1answer
1k views

DNS Server resolves external address,when vpn dns should resolve internal address

We have a special situation where Juniper Network Connect is used as VPN connection. When the VPN starts it creates the network adapter. When the vpn closes the network adapter disappears. Each time ...
1
vote
1answer
96 views

How can i disable ip binding in Juniper SSL VPN SA-2500?

At the moment it is set to allow Admins with specific ip addresses to log into the admin console. I'd like to allow everyone to open the admin console without checking the machine's ip. Anyone knows ...
1
vote
1answer
298 views

Throttling Throughput on a Metro Ethernet Uplink port using a policer?

I have a Juniper EX4200 that acts as a router in our remote data center. The Juniper is plugged into a 10 mbps metro ethernet link that connects to our office. The traffic over this link is mostly ...
1
vote
1answer
177 views

Ideal VPN setup for multiplatform and geo distributed network of servers and clients

As per subject. To give you an idea of what type of devices and client OSes. Servers/network devices: Windows, Linux servers; Juniper, Cisco, Checkpoint Routers/Firewalls Clients: Windows, Linux, ...
1
vote
3answers
1k views

juniper j2300 console connection?

I've been given a Juniper Networks J2300 router, but I've never used a juniper device before and no idea where to begin on how to connect to the console of the device. I have a serial to RJ45 cable ...
1
vote
3answers
149 views

Why should I use Firewall Zones and not just Address Objects?

I appreciate Firewall Address Objects and Address Groups - they simplify management by letting me give a name to a group of addresses. But I don't understand what Firewall Zones (LAN, WAN, DMZ, etc.) ...
1
vote
2answers
1k views

Juniper firewall - large pings for testing

Is there an way to permit ping packets larger than 1472 through a Juniper SSG520M firewall? "Ping of Death" and "Large Size ICMP Packet" protection has already been disabled under the 'Screening' ...
1
vote
2answers
63 views

juniper ex2200c get temperature via snmp

I have a juniper ex2200c and am trying to get the temperature via snmp. I'v tried this tutorial by juniper, but my switch doesn't seem to answer. snmpwalk -v 2c -c foobar23 192.168.1.10 ...
1
vote
1answer
1k views

Do you need to enable ALG features in order to NAT H323 traffic on a Juniper firewall?

Can you NAT H323 traffic if ALG features are disabled (ultimately disabled H323 traffic inspection capabilities), or is that feature required in order to NAT such traffic?
1
vote
1answer
69 views

Junos Routes - Route Specificity vs Protocol

I am trying to load balance a router to send traffic over two uplinks (with equal capacity). I generated static routes for every /8 on the internet (for ipv4) and plugged it in. Unfortunately it does ...
1
vote
1answer
363 views

How do I span my WAN subnet to my L3 switch using SonicOS L2 bridge mode? (Sonicwall and JunOS)

I have two sets of ESXi hosts, one set for management and one for tenants. Each ESXi host has 8 nics and four vSwitches. All vSwitches are trunked via aggregated interfaces to a pair of EX in VC mode. ...
1
vote
1answer
687 views

Junos: find out each interface's ip

Sorry if my explanation is confusing. I need to get all the ip addresses of a Juniper Switch and Router (different models). On Cisco IOS I can get that with show ip interface brief | exclude ...
1
vote
3answers
329 views

What is Juniper's equivalent to netcat/nc command?

On Linux there is a nice tool for testing connections, bandwidth, opening temp. connections etc: nc What is equivalent on Juniper firewalls?
1
vote
1answer
777 views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option ...
1
vote
1answer
161 views

Retrieve number of bytes send over logical interface from CLI (Juniper router)

Is there any simple method to check from CLI how many bytes has been sent over physical/logical router interface? I am interested in Juniper devices. It would be great if command result was a short ...
1
vote
1answer
6k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
1
vote
1answer
124 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
1
vote
1answer
767 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
1
vote
4answers
4k views

Export firewall rules on Juniper SSG-550

I'd like to export all the policies set up in my Juniper SSG-550 running JunOS 5.1 but i can't find any way to do so. Preferably in an easy to parse format (csv would be great). Problem is the ...
1
vote
2answers
843 views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
1
vote
3answers
2k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
1
vote
6answers
11k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
1
vote
0answers
39 views

Juniper Junos SRX (with HA Cluster): filter on lo0 not working

config: 2 srx firewalls in a ha cluster on lo0 we use ssh. i tried to log the ssh packages: # show firewall family inet { filter deny_ssh_default_port { term deny_ssh_default_port_term { ...
1
vote
0answers
58 views

Connecting to incoming VPN clients from local ip

I have a dynamic VPN set up on a SRX 220 running Junos 11.4R10.3 Clients can connect and access the protected resources, but systems on the local network can not access connected clients. ...
1
vote
0answers
56 views

BOOTP on Juniper 4200 stack works one one subnet, not another

I have a Juniper Stack that connects vlans 10,11 and 50. 10 is servers, 11 is desktops and 50 management. Bootp is redirecting DHCP requests to a AD box on 10.x just fine for 50 vlan, and worked well ...
1
vote
0answers
42 views

Juniper 802.3ad Link between Switch and Router 3x link issue

We have a live 20Gbps link between our switch and router and we are trying to add another 10Gbps link to the LAG, we've changed all the settings on both end to add the third interface to the LAG yet ...
1
vote
0answers
401 views

VMWare ESXi 5.0 Networking Issue

I have an issue with 2 new ESXi hosts. OS - ESXi5.0 Custom Dell ISO patched up to Build 1024429 DELL R820 with 1G network 2 ports from integrated MB NIC(Intel) connected to 2 juniper switches, one is ...
1
vote
0answers
133 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
1answer
254 views

ssh command not working on juniper router

I'm trying to use ssh command on my MX juniper router but i get the following-error -cli: unable to execute ssh: No such file or directory this is the command i'm using: ssh 10.27.1.2 source ...
1
vote
1answer
1k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
0answers
522 views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
846 views

Does a Juniper SSG work well as an NTP server?

I have an old SSG-140 that I wanted to use as an NTP server for a number of devices - is this device able to act as a stable NTP time source? My Linux clients can't seem to stay synced to the device ...
1
vote
0answers
295 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
1answer
145 views

Juniper AX411 access points and 2.4ghz

I'm using the Juniper AX411 access points in my office. I have set them up to broadcast 3 different virtual access points all over 2.4 ghz. This all works fine for maybe 1-2 days and then this slows ...
1
vote
1answer
408 views

Wireless LAN Bridge with WAN VPN Failover

My network is below, it's currently just an ordinary 192.168.0.0/24, the branch offices needs to have access to resources on the main site. Currently all internet traffic go across the bridge and ...
1
vote
1answer
326 views

Juniper SRX240H occasionally dropping connections

One of our clients has an SRX240H in their office that occasionally is dropping connections going LAN to WAN. For example: they could be on an IRC server and they will drop out for 2 minutes and then ...
1
vote
2answers
472 views

Connection timed out after plenty of new TCP connections through Juniper firewall

I have the following scenario: Two Windows Server 2008 are communicating in a client/server fassion with a Juniper ISG 1000 (6.3.0r6) in between. The client is creating around 100 new tcp connections ...