Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

2
votes
5answers
3k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the office....
2
votes
4answers
828 views

Has anyone had luck running 802.1x over ethernet using the stock Windows or other free supplicant?

I just wanted to see if anyone else has had luck implementing 802.1x over ethernet. So here's my basic setup. Switch sends out 3 eapol messages spaced out 5 seconds apart. if there's no response the ...
2
votes
1answer
64 views

Juniper EX3200 connected to Cisco 2900 series router - incomplete ARP entry

I'm tying to connect a Call Manager Express running on a Cisco 2900 series router to a Juniper EX3200 switch. I have both configured on VLAN 4, with both ports in access mode but when I connect the ...
2
votes
1answer
289 views

OSPF among Cisco and Juniper

Below are snippets of ospf configs among Cisco and Juniper devices. However, not all are seeing each other in "show ip ospf", especially the redistributed routes into ospf. I'm sure the router id(s) ...
2
votes
1answer
464 views

Trunking between Juniper Ex3300 with Cisco Router

Hy Experts, Please tell how to create trunking with Juniper and Cisco. Cisco 2950 > Juniper EX3300 > Cisco 2621 I create VLAN 100,VLAN 200, VLAN 300 I have create trunk on juniper switch with : set ...
2
votes
0answers
89 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
2answers
1k views

Cisco Sticky Mac vs Juniper Persistant-Mac

I’m trying to figure out if there is an inherent flaw in the way JUNOS handles sticky-mac addresses across their switch-ports versus how Cisco handles them. I’ll elaborate. Below, you can see that ...
2
votes
0answers
2k views

Outbound traffic being blocked for MIP/VIPped servers (Juniper SSG5)

As we've been having some problems with sporadic packet loss, I've been preparing a replacement router (also an SSG5) for our current Juniper SSG5. I've setup the new SSG5 identically to the old one. ...
2
votes
0answers
851 views

Is using GIADDR when relaying DHCP requests beneficial?

I am setting up three Juniper EX3200 switches simply named 1,2, and 3. Switch 2 will have two VLANs, one being the internet uplink from the Firewall and one being the gateway for the Workstations. ...
2
votes
0answers
614 views

Juniper SSG5… How to setup VPN to Netgear FVS338

I'm trying to configure a Juniper SSG5 for VPN. So far I'd say I'm lost lost lost. The server (just one for now) is a dedicated host at a hosting company. I have a block of 8 public IPs (/29), the ...
2
votes
2answers
916 views

Juniper Network Connect and Ubuntu

I'm trying to install the Juniper Network Connect client on Ubuntu -- I'm wondering if any seasoned network admins or otherwise knowledgeable individuals know if it's possible for me to download the ...
2
votes
1answer
506 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ~/.juniper_networks/...
1
vote
1answer
7k views

ECMP Load Balancing in JUNOS

I'm trying to figure out how to use ECMP load balancing in JUNOS. I know this isn't the best way to load balance, but its quick and dirty and gets done what I need to. In ScreenOS this was pretty easy....
1
vote
2answers
17k views

VLAN trunking between Juniper EX -> Cisco Catalyst -> and Cisco Router

I have the following scenario: EX2200 Switch whit ge-0/0/8 set as an access port on VLAN 80 ge-0/0/0 set as a trunk port connected to a catalyst switch and various vlans allowed to pass includin ...
1
vote
1answer
470 views

Multiple External IP Addresses, Two Routers & Amazon VPC

I'm out of my depth here as I'm a database developer trying to do network stuff and really need some help. We have a leased line with multiple external IP addresses (subnet mask 255.255.255.248). ...
1
vote
2answers
1k views

How to get two subnets to talk to each other (foundry and juniper)

I have two switches, one which hosts a 10.130.32.x subnet (which is a foundry switch) and the other which is a juniper SSG and it is hosting a 10.130.30.x subnet. The users on the .32 subnet cannot ...
1
vote
2answers
3k views

VLAN support on Juniper EX - 2200 switches

I have 6 Juniper switches (EX - 2200) connected to each other as shown in the network topology. I have two PC's that I am using PC1 - (used for configuring the 6 switches via minicom) PC2 - to ...
1
vote
3answers
669 views

What is the minimum enable level to permit config download (Cisco & other vendors)

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc., What is the minimum enable level we need to grant to the service account? If the answer ...
1
vote
3answers
423 views

Juniper networks firewall [closed]

I had Juniper networks which made block to websites so I want to prevent it from blocking any website what can I do?
1
vote
2answers
127 views

LAN routing without vlan tagging?

On my old Allied Telesis router I had a single interface for internal traffic. I had multiple networks talking on this one interface. For example 192.168.2.X was vlan 1-2, and 192.168.3.X was vlan ...
1
vote
1answer
11k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
1
vote
1answer
581 views

Juniper Firewall SRX210 questions

Total newbie to Juniper. Okay, I've been messing with the web interface on a SRX210 Firewall for a few hours now and looking like I need specific help now. So the overall architecture is that I have ...
1
vote
1answer
2k views

DNS Server resolves external address,when vpn dns should resolve internal address

We have a special situation where Juniper Network Connect is used as VPN connection. When the VPN starts it creates the network adapter. When the vpn closes the network adapter disappears. Each time ...
1
vote
1answer
122 views

How can i disable ip binding in Juniper SSL VPN SA-2500?

At the moment it is set to allow Admins with specific ip addresses to log into the admin console. I'd like to allow everyone to open the admin console without checking the machine's ip. Anyone knows ...
1
vote
1answer
376 views

Throttling Throughput on a Metro Ethernet Uplink port using a policer?

I have a Juniper EX4200 that acts as a router in our remote data center. The Juniper is plugged into a 10 mbps metro ethernet link that connects to our office. The traffic over this link is mostly ...
1
vote
1answer
194 views

Ideal VPN setup for multiplatform and geo distributed network of servers and clients

As per subject. To give you an idea of what type of devices and client OSes. Servers/network devices: Windows, Linux servers; Juniper, Cisco, Checkpoint Routers/Firewalls Clients: Windows, Linux, ...
1
vote
3answers
2k views

juniper j2300 console connection?

I've been given a Juniper Networks J2300 router, but I've never used a juniper device before and no idea where to begin on how to connect to the console of the device. I have a serial to RJ45 cable ...
1
vote
3answers
169 views

Why should I use Firewall Zones and not just Address Objects?

I appreciate Firewall Address Objects and Address Groups - they simplify management by letting me give a name to a group of addresses. But I don't understand what Firewall Zones (LAN, WAN, DMZ, etc.) ...
1
vote
1answer
8k views

Juniper SSG-5 subinterface vlan routing to the internet

I'm unable to get a brand new Juniper SSG-5 with latest 6.3.0r05 firmware routing to the internet from a subinterface I created on bgroup0 setup as vlan2 (bgroup0.1 on "wifi" zone). When connected on ...
1
vote
4answers
7k views

Export firewall rules on Juniper SSG-550

I'd like to export all the policies set up in my Juniper SSG-550 running JunOS 5.1 but i can't find any way to do so. Preferably in an easy to parse format (csv would be great). Problem is the ...
1
vote
3answers
2k views

Light packet loss through router

I just recently got a fiber line installed into my office, and with the exception of an odd bit of trouble that we're having, things are working good, and the network response is really amazing. The ...
1
vote
2answers
2k views

Juniper firewall - large pings for testing

Is there an way to permit ping packets larger than 1472 through a Juniper SSG520M firewall? "Ping of Death" and "Large Size ICMP Packet" protection has already been disabled under the 'Screening' ...
1
vote
1answer
13 views

Juniper bytes-from-server meaning

I'm looking through some Juniper firewall logs that look like this. There are servers and user machines on the network. Most of the logs refer to source and destination, which makes sense to me, but ...
1
vote
1answer
163 views

Juniper SSG20 Additional subnet on adsl interface

I've configured a Juniper SSG20 to have some clients natted to the internet with the main ip address (X.X.27.90/30) of my IPoA ADSL connection but i have also some servers i wish to connect with a ...
1
vote
2answers
395 views

juniper ex2200c get temperature via snmp

I have a juniper ex2200c and am trying to get the temperature via snmp. I'v tried this tutorial by juniper, but my switch doesn't seem to answer. snmpwalk -v 2c -c foobar23 192.168.1.10 1.3.6.1.4.1....
1
vote
1answer
6k views

Do you need to enable ALG features in order to NAT H323 traffic on a Juniper firewall?

Can you NAT H323 traffic if ALG features are disabled (ultimately disabled H323 traffic inspection capabilities), or is that feature required in order to NAT such traffic?
1
vote
1answer
128 views

Junos Routes - Route Specificity vs Protocol

I am trying to load balance a router to send traffic over two uplinks (with equal capacity). I generated static routes for every /8 on the internet (for ipv4) and plugged it in. Unfortunately it does ...
1
vote
1answer
672 views

How do I span my WAN subnet to my L3 switch using SonicOS L2 bridge mode? (Sonicwall and JunOS)

I have two sets of ESXi hosts, one set for management and one for tenants. Each ESXi host has 8 nics and four vSwitches. All vSwitches are trunked via aggregated interfaces to a pair of EX in VC mode. ...
1
vote
1answer
2k views

Juniper SRX1400 VPN

I have been trying to set up a client VPN on a Juniper SRX1400 without much success. All documentation I found from Juniper and elsewhere does a lot of other (difficult and wonderful) things other ...
1
vote
3answers
557 views

What is Juniper's equivalent to netcat/nc command?

On Linux there is a nice tool for testing connections, bandwidth, opening temp. connections etc: nc What is equivalent on Juniper firewalls?
1
vote
1answer
170 views

Retrieve number of bytes send over logical interface from CLI (Juniper router)

Is there any simple method to check from CLI how many bytes has been sent over physical/logical router interface? I am interested in Juniper devices. It would be great if command result was a short ...
1
vote
1answer
9k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
1
vote
1answer
140 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
1
vote
1answer
819 views

Routing for IPSec tunnel

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I ...
1
vote
2answers
972 views

Netscreen-Remote Equivalent On Linux

We're running a simple Juniper VPN tunnel (using Juniper SSG5's) for outside-network access, which works great for Windows PCs since they can connect using the supplied Netscreen-Remote VPN client. ...
1
vote
6answers
19k views

Can't get into Juniper Networks Netscreen Web interface

Have a Netscreen that appears to be functioning correctly (it's in production and has been for several years), but yet is not allowing me into the Web interface on port 80 or 443 (also tried 8080). ...
1
vote
1answer
27 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
1
vote
0answers
22 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
1
vote
0answers
71 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
1
vote
0answers
115 views

How does Juniper vlan.0 work with policies?

I'm trying to understand vlan.0 and Juniper policies. Referring to here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16667 According to the link above, it seems that if I use vlan.0,...