Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

0
votes
1answer
1k views

Why is my JunOS firewall filter cutting off management access?

We've recently installed a second Internet connection so I've somewhat successfully configured policy based routing on the edge router which is a Juniper J4350 running JunOS 9.5R1.8. I followed a ...
1
vote
2answers
451 views

Connection timed out after plenty of new TCP connections through Juniper firewall

I have the following scenario: Two Windows Server 2008 are communicating in a client/server fassion with a Juniper ISG 1000 (6.3.0r6) in between. The client is creating around 100 new tcp connections ...
1
vote
3answers
1k views

juniper j2300 console connection?

I've been given a Juniper Networks J2300 router, but I've never used a juniper device before and no idea where to begin on how to connect to the console of the device. I have a serial to RJ45 cable ...
1
vote
0answers
635 views

Juniper SSG5 redundant interfaces

I've been trying to set up redundant interfaces on the Juniper SSG5 (this model has no redundant interface mode) and I'm wondering if someone can help me determine whether it's actually possible. ...
1
vote
1answer
713 views

Cannot connect to firewall services through VPN on firewall device

I have a Juniper SSG5 firewall I'm using for VPN at a remote site, and I'm using Shrew Soft VPN client to connect from my office to this site. If I connect to the web GUI or SSH of the Juniper from ...
0
votes
0answers
936 views

Juniper SSG5 Dropping packets

We have a Juniper SSG 5 running Screen OS 6.2.0r9.0 at appears to be dropping packets. When downloading files (in a browser or FTP client like filezilla) sometimes they will just “hang” half way ...
0
votes
1answer
502 views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
3
votes
2answers
579 views

PowerConnect switches, Juniper firewalls and esx redundancy

Let me preface this question by saying that I am a developer and have basic knowledge of networking. My current job requires that I wear many hats. I am building out a DataCenter for our SaaS ...
3
votes
1answer
687 views

Juniper Netscreen Reset to factory defaults. Does license remain in tact?

I bought an SSG-5 with the extended license off of ebay. I was messing with the config, and now I want to reset it in order to start fresh. If I do this, will I loose my license information or will it ...
0
votes
2answers
2k views

Juniper ScreenOS vlan configuration

Trying to configure my first Juniper firewall, an SSG5 (running 6.2.0r11.0), but having some trouble with the vlans. I haven't found much documentation relating to what I'm trying to do; possibly ...
1
vote
1answer
160 views

Retrieve number of bytes send over logical interface from CLI (Juniper router)

Is there any simple method to check from CLI how many bytes has been sent over physical/logical router interface? I am interested in Juniper devices. It would be great if command result was a short ...
2
votes
2answers
3k views

Multiple External IP Ranges on a Juniper SSG5

I have a Juniper SSG 5 firewall in a datacenter. The first interface (eth0/0) has been assigned a static IP address and has three other addresses configured for VIP Nat. I have a static route ...
6
votes
2answers
529 views

Gigabit network with a 100 megabit firewall

We have set up all the equipment necessary to have a gigabit network. All servers + workstations are running gigabit cards, just bought a 16 port switch that can handle gigabit as well. My concern is ...
-1
votes
2answers
419 views

Juniper Networks SRX240 as a office router? [closed]

We're a small (7 person) fast growing startup who just got our new office and we're having a 100 Mbps line installed from Cogent. I'm not familiar with Juniper devices, however the equivalent Cisco ...
0
votes
0answers
817 views

Juniper ssg 5 web UI not working

I am facing issue with my Juniper SSG 5. I tried to configure & enable web filtering in my office following various ways to do it on the web. Even with various permutations it is still not ...
3
votes
3answers
1k views

To LAG or not LAG?

I have a new ex4200 switch stack, my 3 esxi hyper-visors connect to the SAN via vlan 200 which is EST. I have loaded the Equallogic multipathing plugins. When I have the 4 cables per server dedicated ...
1
vote
3answers
347 views

What is the minimum enable level to permit config download (Cisco & other vendors)

We are creating a service account to backup config from devices of various makes such as Cisco, Juniper etc., What is the minimum enable level we need to grant to the service account? If the answer ...
0
votes
1answer
535 views

What policy should can I set to allow my incoming Exchange mail to to get to my Exchange Server?

I have a juniper ssg 5 as my firewall These are a couple of things I have tried: I used the wizard to create route based vpn I've tried creating multiple policies based on the different services ...
0
votes
2answers
1k views

How to change the 'internal IP address' of a Juniper SRX210H

How do I change the 'internal IP address' (Not the WAN IP) (192.168.1.1) to something else via the 'Juniper Web Device Manager'? Thanks!
0
votes
2answers
2k views

Is there a username required for Juniper telnet logins

I have a very straightforward question. Unfortunately, its so simple, that I have struggled to confirm the answer and the Juniper KB stops short of answering it when telling you how to set up telnet. ...
0
votes
3answers
443 views

juniper screen os and akamai

Need to setup a policy on juniper netscreen firewall that would allow access to a content hosted by akamai. There are two options: to use an IP address or hostname. Using hostname does not work with ...
2
votes
7answers
3k views

Force Juniper-network client to use split routing

I'm using the Juniper client for OSX ('Network Connect') to access a client's VPN. It appears that the client is configured to not use split-routing. The client's VPN host is not willing to enable ...
2
votes
2answers
3k views

Juniper’s Network Connect ncsvc on Linux: “host checker failed, error 10”

I’m trying to log in to a Juniper VPN with Network Connect from a headless Linux client. I followed the instructions and used the script from http://mad-scientist.us/juniper.html. When running the ...
1
vote
1answer
5k views

How can I expire non-active sessions on my Netscreen SSG140?

I have a Juniper Netscreen SSG-140. While experimenting with a VoIP service, I defined a custom policy that was to be used to permit the possible ports in use to be sent back to the VoIP server from ...
3
votes
1answer
2k views

Juniper SSG5 Help!

Newbie in firewall here. . .I need my trust zone to access the internet but the problem is I cant make it happen. So far, from the trust zone, I'm able to ping the IP's in the unstrust zone but I ...
0
votes
3answers
1k views

Multiple IPs on Juniper SRX100 Untrust Port

I am having trouble getting multiple IP addresses on the untrust port. I have tried a few different methods, but can't seem to get it to work. Does anyone have a good tutorial that is not easily found ...
0
votes
1answer
401 views

Multicast NAT on Juniper router

I am trying to do source NAT on a J-series router (junos 9.2). I have two separate NAT rules setup (using security policies + source-nat interface). One is for regular unicast TCP connections and the ...
2
votes
3answers
4k views

Assign multiple external ips with Juniper SRX100

I have a single Juniper SRX100 setup between several servers and a WAN. Is it possible to give all the servers external IP addresses and still use the SRX100 as a firewall? (My ISP has provisioned ...
0
votes
1answer
318 views

Cisco Catalyst 3550, ScreenOS, IOS Fundamentals, Juniper ssg5 NetScreen vlan

i have two vlans configured into a juniper netscreen (a screenOS device). I have connected a catalyst to the nic i have configured the vlans on. I need an example configuration to shoot into the cisco ...
0
votes
1answer
568 views

Losing unicast traffic with “Input DA reject”

I have a rather complicated issue with an old Cisco 5509 Switch and a few kvm/qemu based virtual machines. First, the setup of the system looks like this: ...
1
vote
1answer
122 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
0
votes
0answers
529 views

How can I do NAT to local network over loopback interface on Juniper SSG-5?

Loopback1 interface has a real ip address.My question is; How can I NATing over that loopback1 interface to exit out of the internet that my internal network ? Thanks in advance.
2
votes
3answers
1k views

Why should I use a switched network over routed?

Now that routers are affordable, why should I build a network using Layer 2 switches, which degenerate to broadcasting under poor conditions, and not just use real routing at Layer 3? Edit: Got some ...
1
vote
3answers
149 views

Why should I use Firewall Zones and not just Address Objects?

I appreciate Firewall Address Objects and Address Groups - they simplify management by letting me give a name to a group of addresses. But I don't understand what Firewall Zones (LAN, WAN, DMZ, etc.) ...
2
votes
2answers
823 views

Juniper Network Connect and Ubuntu

I'm trying to install the Juniper Network Connect client on Ubuntu -- I'm wondering if any seasoned network admins or otherwise knowledgeable individuals know if it's possible for me to download the ...
1
vote
2answers
782 views

How to get two subnets to talk to each other (foundry and juniper)

I have two switches, one which hosts a 10.130.32.x subnet (which is a foundry switch) and the other which is a juniper SSG and it is hosting a 10.130.30.x subnet. The users on the .32 subnet cannot ...
0
votes
2answers
3k views

which 10Gb switch has native CX4 copper ports?

networking experts please help with a recommendation for a 10Gb switch that has at least 3 native CX4 copper ports and preferably some 10GBASE-T. rack mount only! anything in CISCO? Juniper? We ...
1
vote
1answer
4k views

ECMP Load Balancing in JUNOS

I'm trying to figure out how to use ECMP load balancing in JUNOS. I know this isn't the best way to load balance, but its quick and dirty and gets done what I need to. In ScreenOS this was pretty ...
0
votes
1answer
814 views

ATT DSL and Juniper SRX w/Integrated Modems

Here's what I'm trying to accomplish: Existing Setup: 2 x Netopia ADSL 3347 Gateways that are each connected to a Juniper SSG140 via Ethernet. The Netopia boxes appear to each have a PPPoE interface ...
1
vote
1answer
520 views

CISCO pix/asa Shun command equivalent on Junos

does any one knows if there is some equivalent of the shun command on Juniper Junos OS? The shun command on the ASA Firewall appliance is used to block connections from an attacking host. Packets ...
0
votes
1answer
3k views

Spanning Tree Portfast in JUNOS

Can someone tell me what the Juniper JUNOS equivalent is for Cisco's spanning tree portfast command? My google-fu keeps leading me to long whitepapers on Spanning tree and not so much configuration ...
0
votes
1answer
5k views

Juniper SSG-5 subinterface vlan routing to the internet

I'm unable to get a brand new Juniper SSG-5 with latest 6.3.0r05 firmware routing to the internet from a subinterface I created on bgroup0 setup as vlan2 (bgroup0.1 on "wifi" zone). When connected on ...
10
votes
9answers
2k views

Why buy high end hardware firewalls?

There exist firewalls from Juniper and Cisco that cost more than a house. So I wonder: what does one get from a $10.000+ firewall compared to an 2U server with 4x 10Gbit network cards running e.g. ...
1
vote
1answer
183 views

Do I need the license update package for Juniper SRX100 [duplicate]

Possible Duplicate: Can you help me with my software licensing question? I need a router/firewall to connect a couple of colocated servers to the internet. I was looking at the Juniper ...
3
votes
1answer
2k views

How to route all traffic over site to site VPN tunnel?

I have a site to site VPN configured between our main site (Site A) and a remote site (Site B). Site A is 10.60.0.0/16 Site B is 192.168.99.0/24 The firewall in Site B is a Juniper SSG running ...
3
votes
2answers
1k views

Juniper router dropping pings to external interface

My organization has a Juniper SSG20-WLAN that routes our traffic to the outside world. We've been having intermittent problems with our internet connection so I wrote up a Python script to ping the ...
1
vote
1answer
882 views

What is the default management state on Netscreen firewall interfaces?

in other words, is the command: unset interface ethernet1/1 ip manageable redundant? I was thinking that for security purposes, it would probably make sense for Netscreens to only enable management ...
4
votes
4answers
2k views

Juniper Firewall - software that can report on traffic analysis?

I'd like to find some open source software (or relatively inexpensive) that can run analysis against the syslog messages of a Juniper SSG (netscreen OS) firewall and provide things like "Top ...
0
votes
1answer
747 views

Juniper SSG 550 - interfaces on the ha zone not set

I am trying to set up HA on a pair of Juniper SSG550s with ScreenOS 6.1.0r2.0 The machines have multiple interfaces, configured as redundant pairs: red1 -> eth0/0 and eth0/1 red2 -> eth0/1 and ...
1
vote
3answers
341 views

Juniper networks firewall [closed]

I had Juniper networks which made block to websites so I want to prevent it from blocking any website what can I do?