Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

3
votes
1answer
87 views

DOS Protection EX Series

So I've read a number of white papers from Juniper containing some DOS prevention strategies. I'm not looking to prevent any one in particular, but rather just ensure the network is as best protected ...
2
votes
1answer
468 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ...
2
votes
1answer
454 views

Trunking between Juniper Ex3300 with Cisco Router

Hy Experts, Please tell how to create trunking with Juniper and Cisco. Cisco 2950 > Juniper EX3300 > Cisco 2621 I create VLAN 100,VLAN 200, VLAN 300 I have create trunk on juniper switch with : set ...
1
vote
1answer
927 views

ssh command not working on juniper router

I'm trying to use ssh command on my MX juniper router but i get the following-error -cli: unable to execute ssh: No such file or directory this is the command i'm using: ssh 10.27.1.2 source ...
1
vote
1answer
179 views

Juniper AX411 access points and 2.4ghz

I'm using the Juniper AX411 access points in my office. I have set them up to broadcast 3 different virtual access points all over 2.4 ghz. This all works fine for maybe 1-2 days and then this slows ...
1
vote
1answer
181 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
0
votes
1answer
15 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1answer
21 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
0
votes
1answer
23 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
0
votes
1answer
140 views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0
votes
1answer
53 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
0
votes
1answer
71 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
1answer
17 views

SRX240 - unable to ping Default DG from router

Just want to ask how come i couldn't get a connection form srx directly to my PC. My configuration goes like this: set interface ge-0/0/5 unit 0 family inet address 10.10.1.1/24 commit When i ...
0
votes
1answer
130 views

Juniper SRX210 routing vlans

Ive got a Juniper SRX210 only using 2 ports Model: srx210he-poe JUNOS Software Release [11.4R2.14] WAN ge-0/0/0 up up ge-0/0/0.0 up up inet ...
0
votes
1answer
2k views

Juniper SSG5 suddenly slow throughput

I'm trying to find out where in my configuration the problem might be. About a month ago we were easily getting 100 up 50 down through our provider through the Juniper SSG5. Starting a few weeks ago ...
0
votes
1answer
41 views

configure juniper SSL VPN on seperate server for users

we have some client servers in USA and users in our LAN connect these servers using juniper SSL vpn client provided by the client. Now the issue is, numbers of users are increasing here and its been ...
0
votes
1answer
776 views

Direct Link through Juniper Portal

We have a Juniper portal in front of our web applications. When we navigate to our primary URL (e.g., https://apps.ourdomain.com), everything routes properly to our primary web site. However, if we ...
6
votes
0answers
119 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
2
votes
0answers
89 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
2k views

Outbound traffic being blocked for MIP/VIPped servers (Juniper SSG5)

As we've been having some problems with sporadic packet loss, I've been preparing a replacement router (also an SSG5) for our current Juniper SSG5. I've setup the new SSG5 identically to the old one. ...
2
votes
0answers
839 views

Is using GIADDR when relaying DHCP requests beneficial?

I am setting up three Juniper EX3200 switches simply named 1,2, and 3. Switch 2 will have two VLANs, one being the internet uplink from the Firewall and one being the gateway for the Workstations. ...
2
votes
0answers
613 views

Juniper SSG5… How to setup VPN to Netgear FVS338

I'm trying to configure a Juniper SSG5 for VPN. So far I'd say I'm lost lost lost. The server (just one for now) is a dedicated host at a hosting company. I have a block of 8 public IPs (/29), the ...
1
vote
0answers
20 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
1
vote
0answers
68 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
1
vote
0answers
107 views

How does Juniper vlan.0 work with policies?

I'm trying to understand vlan.0 and Juniper policies. Referring to here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16667 According to the link above, it seems that if I use ...
1
vote
0answers
284 views

Connecting to incoming VPN clients from local ip

I have a dynamic VPN set up on a SRX 220 running Junos 11.4R10.3 Clients can connect and access the protected resources, but systems on the local network can not access connected clients. ...
1
vote
0answers
137 views

BOOTP on Juniper 4200 stack works one one subnet, not another

I have a Juniper Stack that connects vlans 10,11 and 50. 10 is servers, 11 is desktops and 50 management. Bootp is redirecting DHCP requests to a AD box on 10.x just fine for 50 vlan, and worked well ...
1
vote
0answers
74 views

Juniper 802.3ad Link between Switch and Router 3x link issue

We have a live 20Gbps link between our switch and router and we are trying to add another 10Gbps link to the LAG, we've changed all the settings on both end to add the third interface to the LAG yet ...
1
vote
0answers
2k views

VMWare ESXi 5.0 Networking Issue

I have an issue with 2 new ESXi hosts. OS - ESXi5.0 Custom Dell ISO patched up to Build 1024429 DELL R820 with 1G network 2 ports from integrated MB NIC(Intel) connected to 2 juniper switches, one is ...
1
vote
0answers
416 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
0answers
1k views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
2k views

Does a Juniper SSG work well as an NTP server?

I have an old SSG-140 that I wanted to use as an NTP server for a number of devices - is this device able to act as a stable NTP time source? My Linux clients can't seem to stay synced to the device ...
1
vote
0answers
486 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the ...
1
vote
0answers
897 views

Juniper SSG5 redundant interfaces

I've been trying to set up redundant interfaces on the Juniper SSG5 (this model has no redundant interface mode) and I'm wondering if someone can help me determine whether it's actually possible. ...
1
vote
0answers
1k views

OpenVPN & Juniper SSG-140

I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
0
votes
0answers
26 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
0answers
11 views

Juniper routing-based VPN - does it requires a lot of F/W's resource?

Recently, I got complains about IPSec VPN performance. I got two Juniper Devices - NS204 for center, and SSG-5 on site. There are 1 routing-based IPSec VPN Tunnel, and user reports that they got tons ...
0
votes
0answers
21 views

Juniper EX200 factory reset

Probably a really simple question I just cannot find the answer online or on Juniper's website. On most switches I have used, you could always just hold the power button for 5-10 seconds and this ...
0
votes
0answers
38 views

azure dynamic vpn juniper ssg5

i was asked to disable some Site-to-site VPN connections on azure and a few days later to enable them again. Some of the site-to-site tunnels were able to connect, but not the ones that connect to ...
0
votes
0answers
24 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
0answers
47 views

Netscreen VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> ...
0
votes
0answers
87 views

How to route traffic between tagged and untagged traffic on Juniper EX3300 switch?

I have 3 different subnets as below subnet1: 11.11.11.0/24 tagged with vid 1111 subnet2: 22.22.22.0/24 untagged subnet3: 33.33.33.0/24 tagged with vid 3333 now machines in subnet2 want to ...
0
votes
0answers
209 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
0answers
20 views

What could cause issue with accessing server over vpn

We have two servers at point A, users at point B connect to the servers We use juniper firewalls to do the VPN, Server 2 OS was just reinstalled. Access to server 2 stopped working. Users at point ...
0
votes
0answers
148 views

collectd snmp Juniper CoS statistics

I'm struggling to derive meaningful metric names out of my collectd configuration for grabbing CoS statistics from some Juniper switches. The <Data> definition looks like this: <Data ...
0
votes
0answers
345 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
0
votes
0answers
156 views

Juniper SSG Port Forwarding over a Site-to-Site VPN

Our company has severs in two locations -- our main office, and a colocation. We're getting ready to move one of our servers, a PBX, from our main office to our colocation for better service, but ...
0
votes
0answers
795 views

Wierd traceroute / ICMP issues on Juniper SRX 210BE

I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that). I've got FTTC (fiber to the cabnet) ...
0
votes
0answers
682 views

Need advice on Juniper OSPF networking

I have been thrown in to this project because of a coworker's termination. I have a set of Juniper SRX 550 Routers. I need to create an OSPF network that passes all traffic (All subnets) as if it ...
0
votes
0answers
381 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...