Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

1
vote
1answer
373 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
0answers
10 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
0
votes
1answer
25 views

LACP - Load Balancing Network 2Gbit Ubuntu

I have configured my server as bonding interface to achieve 2Gbit network speed but it seems ubuntu can not go over than 1gbit and the outgoing traffic from server is not balanced over 2 interfaces. ...
0
votes
0answers
8 views

juniper netscreen-50 management access only when admin station interface in promiscous mode

I have just received a netscreen-50 Juniper and i am trying to configure it. On one interface, I have defined an IP address and an management access for telnet/ssh: set interface "ethernet1" zone "...
1
vote
2answers
3k views

Juniper SSG5 DHCP IP Pool is full. Unable to offer IP address to client

hope we have some Juniper guys around, I have configured a Juniper SSG5 as our main firewall/router the DHCP server set on interface bgroup1 to have a rang from 10.10.10.76 to 10.10.10.210 All ...
0
votes
1answer
12 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
0
votes
1answer
1k views

Juniper ScreenOS Windows 7 Vpn client

I'd like to configure my Juniper firewall so users can VPN from the windows built in client. Can anyone provide me with that information on how to go about configuring this? (I'm somewhat new to ...
0
votes
2answers
32 views

How to connect a Juniper EX4500 to netapp X1107A

What is the best and not expensive way to connect a Juniper EX4500 to a X1107A Chelsio PCI Netapp card? Will these do (10GBASE-SR) for both end? and then connect with fiber cable? How important is it ...
1
vote
2answers
3k views

VLAN support on Juniper EX - 2200 switches

I have 6 Juniper switches (EX - 2200) connected to each other as shown in the network topology. I have two PC's that I am using PC1 - (used for configuring the 6 switches via minicom) PC2 - to ...
0
votes
1answer
17 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
0answers
70 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
1answer
70 views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...
0
votes
0answers
11 views

Juniper routing-based VPN - does it requires a lot of F/W's resource?

Recently, I got complains about IPSec VPN performance. I got two Juniper Devices - NS204 for center, and SSG-5 on site. There are 1 routing-based IPSec VPN Tunnel, and user reports that they got tons ...
2
votes
5answers
2k views

Junos Pulse users are competing with eachother for VPN connection

We've having the issues described here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB26822 where one user kicks another user off the VPN when connecting. Our PCs were cloned after the ...
0
votes
1answer
184 views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
1
vote
1answer
27 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0
votes
1answer
25 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
2
votes
1answer
64 views

Juniper EX3200 connected to Cisco 2900 series router - incomplete ARP entry

I'm tying to connect a Call Manager Express running on a Cisco 2900 series router to a Juniper EX3200 switch. I have both configured on VLAN 4, with both ports in access mode but when I connect the ...
0
votes
0answers
33 views

Juniper EX200 factory reset

Probably a really simple question I just cannot find the answer online or on Juniper's website. On most switches I have used, you could always just hold the power button for 5-10 seconds and this ...
0
votes
1answer
31 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
13
votes
6answers
36k views

How to connect to a Juniper VPN from Linux

The Windows users have a new client "Juniper Pulse" to connect to the Juniper VPN server. On Linux, what VPN client do we have to connect to that Juniper VPN, with maximum compatibility? Please ...
0
votes
1answer
27 views

Remotely remove MAC table entry from Juniper router

In our colocation we have multiple linux servers with a public uplink connected to a juniper MX40 (that we can not control) and an internal link each. Sometimes we get incoming UDP flooding ...
0
votes
0answers
43 views

azure dynamic vpn juniper ssg5

i was asked to disable some Site-to-site VPN connections on azure and a few days later to enable them again. Some of the site-to-site tunnels were able to connect, but not the ones that connect to ...
2
votes
1answer
513 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ~/.juniper_networks/...
0
votes
2answers
2k views

How to get/retrive the list of Interface, vlans, port id, and mac address in juniper via snmp?

Below are the following commands I used to get the specific data that I need in a juniper switch. Get Port Id and Interface snmpwalk -r:"switchName" -v:2 -t:10 -c:"*******" -os:"1.3.6.1.2.1.2.2.1.2"...
0
votes
0answers
25 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
1answer
30 views

RSTP over tunnel?

tl;dr: Is it possible to run RSTP over l2tp or MPLS? We have leased one gig capacity from a service provider's network, over which we sent a udp multicast traffic. The provider gives us drop at our ...
0
votes
0answers
51 views

Netscreen VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100....
1
vote
1answer
11k views

SRX220: Cant ping between hosts in directly attached networks through SRX

I have such lab: SRX220H and 2 hosts. Host1 (IP-address 192.168.1.100/24) connected to SRX interface ge-0/0/1 (interface address 192.168.1.1/24); Host2 (IP-address 10.10.1.100/24) connected to SRX ...
0
votes
1answer
63 views

Is there a benefit from using an IPS for outgoing traffic?

It's probably a stupid question, but still may be it will be useful not only for me. I have an Juniper SRX firewall in a branch office. All ports are blocked from Internet to Internal network. All ...
1
vote
0answers
23 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
2
votes
3answers
5k views

Juniper’s Network Connect ncsvc on Linux: “host checker failed, error 10”

I’m trying to log in to a Juniper VPN with Network Connect from a headless Linux client. I followed the instructions and used the script from http://mad-scientist.us/juniper.html. When running the ...
0
votes
1answer
61 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
0
votes
0answers
95 views

How to route traffic between tagged and untagged traffic on Juniper EX3300 switch?

I have 3 different subnets as below subnet1: 11.11.11.0/24 tagged with vid 1111 subnet2: 22.22.22.0/24 untagged subnet3: 33.33.33.0/24 tagged with vid 3333 now machines in subnet2 want to ...
0
votes
1answer
81 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
0answers
237 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
1
vote
0answers
72 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
0
votes
1answer
17 views

SRX240 - unable to ping Default DG from router

Just want to ask how come i couldn't get a connection form srx directly to my PC. My configuration goes like this: set interface ge-0/0/5 unit 0 family inet address 10.10.1.1/24 commit When i ...
1
vote
1answer
15 views

Juniper bytes-from-server meaning

I'm looking through some Juniper firewall logs that look like this. There are servers and user machines on the network. Most of the logs refer to source and destination, which makes sense to me, but ...
1
vote
1answer
2k views

Juniper SRX1400 VPN

I have been trying to set up a client VPN on a Juniper SRX1400 without much success. All documentation I found from Juniper and elsewhere does a lot of other (difficult and wonderful) things other ...
0
votes
0answers
384 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...
0
votes
1answer
41 views

Use port forwarding to access several computers via one public IP address

I am trying to set up remote desktop access to several computers. I created the following custom service: I then added the following VIP entries against the untrusted interface: I then created ...
5
votes
8answers
9k views

Force Juniper-network client to use split routing

I'm using the Juniper client for OSX ('Network Connect') to access a client's VPN. It appears that the client is configured to not use split-routing. The client's VPN host is not willing to enable ...
0
votes
0answers
20 views

What could cause issue with accessing server over vpn

We have two servers at point A, users at point B connect to the servers We use juniper firewalls to do the VPN, Server 2 OS was just reinstalled. Access to server 2 stopped working. Users at point ...
1
vote
1answer
140 views

IOS traffic-export equivalent for Junos

In IOS the traffic-export command allows you to take incoming packets and send them, unaltered, to a specific interface. Is there an equivalent way to do this in Junos? I've got a J-series 2350 here. ...
0
votes
0answers
159 views

collectd snmp Juniper CoS statistics

I'm struggling to derive meaningful metric names out of my collectd configuration for grabbing CoS statistics from some Juniper switches. The <Data> definition looks like this: <Data "...
0
votes
1answer
83 views

Juniper SSG5 DDNS https socket creation failed

I have a Juniper SSG5 firewall, Version: 6.3.0r19.0, that is on a dynamic IP. We are using DDNS service from dyndns. The service is supported by the SSG device. There has been no problems getting it ...
2
votes
1answer
297 views

OSPF among Cisco and Juniper

Below are snippets of ospf configs among Cisco and Juniper devices. However, not all are seeing each other in "show ip ospf", especially the redistributed routes into ospf. I'm sure the router id(s) ...
3
votes
1answer
89 views

DOS Protection EX Series

So I've read a number of white papers from Juniper containing some DOS prevention strategies. I'm not looking to prevent any one in particular, but rather just ensure the network is as best protected ...