Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

0
votes
0answers
3 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
0answers
10 views

Juniper routing-based VPN - does it requires a lot of F/W's resource?

Recently, I got complains about IPSec VPN performance. I got two Juniper Devices - NS204 for center, and SSG-5 on site. There are 1 routing-based IPSec VPN Tunnel, and user reports that they got tons ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
2
votes
5answers
1k views

Junos Pulse users are competing with eachother for VPN connection

We've having the issues described here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB26822 where one user kicks another user off the VPN when connecting. Our PCs were cloned after the ...
0
votes
1answer
107 views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
1
vote
2answers
3k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
1
vote
1answer
21 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the ...
0
votes
1answer
1k views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
1answer
19 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
2
votes
1answer
42 views

Juniper EX3200 connected to Cisco 2900 series router - incomplete ARP entry

I'm tying to connect a Call Manager Express running on a Cisco 2900 series router to a Juniper EX3200 switch. I have both configured on VLAN 4, with both ports in access mode but when I connect the ...
0
votes
0answers
17 views

Juniper EX200 factory reset

Probably a really simple question I just cannot find the answer online or on Juniper's website. On most switches I have used, you could always just hold the power button for 5-10 seconds and this ...
0
votes
1answer
18 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
12
votes
6answers
34k views

How to connect to a Juniper VPN from Linux

The Windows users have a new client "Juniper Pulse" to connect to the Juniper VPN server. On Linux, what VPN client do we have to connect to that Juniper VPN, with maximum compatibility? Please ...
0
votes
1answer
24 views

Remotely remove MAC table entry from Juniper router

In our colocation we have multiple linux servers with a public uplink connected to a juniper MX40 (that we can not control) and an internal link each. Sometimes we get incoming UDP flooding ...
0
votes
0answers
34 views

azure dynamic vpn juniper ssg5

i was asked to disable some Site-to-site VPN connections on azure and a few days later to enable them again. Some of the site-to-site tunnels were able to connect, but not the ones that connect to ...
0
votes
0answers
43 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
2
votes
1answer
426 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ...
0
votes
2answers
1k views

How to get/retrive the list of Interface, vlans, port id, and mac address in juniper via snmp?

Below are the following commands I used to get the specific data that I need in a juniper switch. Get Port Id and Interface snmpwalk -r:"switchName" -v:2 -t:10 -c:"*******" ...
0
votes
0answers
20 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
1answer
25 views

RSTP over tunnel?

tl;dr: Is it possible to run RSTP over l2tp or MPLS? We have leased one gig capacity from a service provider's network, over which we sent a udp multicast traffic. The provider gives us drop at our ...
0
votes
0answers
46 views

Netscreen VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> ...
1
vote
1answer
10k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
0
votes
1answer
50 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
1
vote
0answers
19 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
2
votes
3answers
5k views

Juniper’s Network Connect ncsvc on Linux: “host checker failed, error 10”

I’m trying to log in to a Juniper VPN with Network Connect from a headless Linux client. I followed the instructions and used the script from http://mad-scientist.us/juniper.html. When running the ...
0
votes
1answer
50 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
0
votes
0answers
83 views

How to route traffic between tagged and untagged traffic on Juniper EX3300 switch?

I have 3 different subnets as below subnet1: 11.11.11.0/24 tagged with vid 1111 subnet2: 22.22.22.0/24 untagged subnet3: 33.33.33.0/24 tagged with vid 3333 now machines in subnet2 want to ...
0
votes
1answer
62 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
0answers
176 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
1
vote
0answers
64 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
0
votes
1answer
17 views

SRX240 - unable to ping Default DG from router

Just want to ask how come i couldn't get a connection form srx directly to my PC. My configuration goes like this: set interface ge-0/0/5 unit 0 family inet address 10.10.1.1/24 commit When i ...
1
vote
1answer
11 views

Juniper bytes-from-server meaning

I'm looking through some Juniper firewall logs that look like this. There are servers and user machines on the network. Most of the logs refer to source and destination, which makes sense to me, but ...
1
vote
1answer
2k views

Juniper SRX1400 VPN

I have been trying to set up a client VPN on a Juniper SRX1400 without much success. All documentation I found from Juniper and elsewhere does a lot of other (difficult and wonderful) things other ...
0
votes
0answers
376 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...
0
votes
1answer
40 views

Use port forwarding to access several computers via one public IP address

I am trying to set up remote desktop access to several computers. I created the following custom service: I then added the following VIP entries against the untrusted interface: I then created ...
4
votes
8answers
8k views

Force Juniper-network client to use split routing

I'm using the Juniper client for OSX ('Network Connect') to access a client's VPN. It appears that the client is configured to not use split-routing. The client's VPN host is not willing to enable ...
0
votes
0answers
20 views

What could cause issue with accessing server over vpn

We have two servers at point A, users at point B connect to the servers We use juniper firewalls to do the VPN, Server 2 OS was just reinstalled. Access to server 2 stopped working. Users at point ...
1
vote
1answer
139 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
0
votes
0answers
138 views

collectd snmp Juniper CoS statistics

I'm struggling to derive meaningful metric names out of my collectd configuration for grabbing CoS statistics from some Juniper switches. The <Data> definition looks like this: <Data ...
0
votes
1answer
77 views

Juniper SSG5 DDNS https socket creation failed

I have a Juniper SSG5 firewall, Version: 6.3.0r19.0, that is on a dynamic IP. We are using DDNS service from dyndns. The service is supported by the SSG device. There has been no problems getting it ...
0
votes
0answers
330 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
2
votes
1answer
232 views

OSPF among Cisco and Juniper

Below are snippets of ospf configs among Cisco and Juniper devices. However, not all are seeing each other in "show ip ospf", especially the redistributed routes into ospf. I'm sure the router id(s) ...
3
votes
1answer
85 views

DOS Protection EX Series

So I've read a number of white papers from Juniper containing some DOS prevention strategies. I'm not looking to prevent any one in particular, but rather just ensure the network is as best protected ...
2
votes
2answers
912 views

Juniper Network Connect and Ubuntu

I'm trying to install the Juniper Network Connect client on Ubuntu -- I'm wondering if any seasoned network admins or otherwise knowledgeable individuals know if it's possible for me to download the ...
-3
votes
1answer
114 views

Practice/learning “Junos OS” available? ( Junos OS/Juniper system ) [closed]

I would like to learn Junos OS/Juniper by practicing on the system itself. Is there such a resource on the internet? Possibly provided by Juniper for learning?
2
votes
1answer
109 views

Load Balancing between 2 ISPs

I'm having 2 ISPs, need to balance traffic between the internal users ... Firewall is SRX210 The question is: Each ISP has there own DNS, how to make the dns resolving based on the used ISP? ...
0
votes
1answer
108 views

Network maintenence time - Cisco & Juniper

I maintain Cisco & Juniper equipment, lately developers are complaining that router upgrades take too long. Since we don't have high availability yet. How would I cut downtime? I currently do: ...
0
votes
1answer
116 views

Juniper SRX210 routing vlans

Ive got a Juniper SRX210 only using 2 ports Model: srx210he-poe JUNOS Software Release [11.4R2.14] WAN ge-0/0/0 up up ge-0/0/0.0 up up inet ...
0
votes
1answer
1k views

How do I configure NetFlow 5/9 export on Juniper switches? [closed]

What are the commands to make a Juniper switch send netflow data (V5 or V9) to a netflow collector for bandwidth monitoring?
0
votes
0answers
147 views

Juniper SSG Port Forwarding over a Site-to-Site VPN

Our company has severs in two locations -- our main office, and a colocation. We're getting ready to move one of our servers, a PBX, from our main office to our colocation for better service, but ...