Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

3
votes
1answer
89 views

DOS Protection EX Series

So I've read a number of white papers from Juniper containing some DOS prevention strategies. I'm not looking to prevent any one in particular, but rather just ensure the network is as best protected ...
2
votes
1answer
536 views

How to install a missing intermediate SSL certificate system wide client side so that a CLI tool such as Juniper ncsvc uses it?

I'm struggling with the Juniper ncsvc CLI VPN client, which used to work for me but recently broke, and I suspect it's because of a HTTPS SSL Certificate issue: cat ~/.juniper_networks/...
2
votes
1answer
472 views

Trunking between Juniper Ex3300 with Cisco Router

Hy Experts, Please tell how to create trunking with Juniper and Cisco. Cisco 2950 > Juniper EX3300 > Cisco 2621 I create VLAN 100,VLAN 200, VLAN 300 I have create trunk on juniper switch with : set ...
1
vote
1answer
389 views

Juniper SRX IPSec tunnel to Microsoft Azure Dropping

I'm a bit stumped and was hoping to find some guidance here. I've configured an IPSec tunnel to Microsoft Azure from my Juniper SRX240 (12.1X44-D45.2). The tunnel works fine but phase 2 drops when ...
1
vote
1answer
961 views

ssh command not working on juniper router

I'm trying to use ssh command on my MX juniper router but i get the following-error -cli: unable to execute ssh: No such file or directory this is the command i'm using: ssh 10.27.1.2 source 10.53.3....
1
vote
1answer
179 views

Juniper AX411 access points and 2.4ghz

I'm using the Juniper AX411 access points in my office. I have set them up to broadcast 3 different virtual access points all over 2.4 ghz. This all works fine for maybe 1-2 days and then this slows ...
1
vote
1answer
181 views

Net Screen manager setup

I'm having an issue with our NSMExpress box. I'm trying to manage all our devices, range from ns5gt to ssg320m, and some of those devices have addresses assigned by dhcp from the ISP (like pppoe or ...
0
votes
1answer
18 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
0
votes
1answer
18 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1answer
27 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
0
votes
1answer
33 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
0
votes
1answer
214 views

Juniper SRX DNS lookup in Trusted zone is not working

I am new to Juniper product, so this may be probably a silly question but I can't find any answer on the Internet.... Generally, my lab environment is sample, one Trusted zone with DHCP enabled, and ...
0
votes
1answer
65 views

Packet is not entering IPSEC tunnel Juniper SRX

IPSec tunnel to Amazon cloud doesn't work. My local subnet is 192.168.42.0/24. I'm trying to access Amazon cloud private subnet 172.0.3.0/24. My firewall model is Juniper SRX550. Tunnel is up (I can ...
0
votes
1answer
85 views

Active Directory & SRX - User Groups

I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange ...
0
votes
1answer
19 views

SRX240 - unable to ping Default DG from router

Just want to ask how come i couldn't get a connection form srx directly to my PC. My configuration goes like this: set interface ge-0/0/5 unit 0 family inet address 10.10.1.1/24 commit When i ...
0
votes
1answer
134 views

Juniper SRX210 routing vlans

Ive got a Juniper SRX210 only using 2 ports Model: srx210he-poe JUNOS Software Release [11.4R2.14] WAN ge-0/0/0 up up ge-0/0/0.0 up up inet 192.168.10.4/...
6
votes
0answers
121 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
2
votes
0answers
90 views

Juniper SSG-5 different vlans authentication

In my network infrastructur I have 2 companies right now. Every company has it own vlan. For example: Company A 192.168.100.0/24 Company B 192.168.101.0/24 I want to use a shared vlan for all ...
2
votes
0answers
2k views

Outbound traffic being blocked for MIP/VIPped servers (Juniper SSG5)

As we've been having some problems with sporadic packet loss, I've been preparing a replacement router (also an SSG5) for our current Juniper SSG5. I've setup the new SSG5 identically to the old one. ...
2
votes
0answers
857 views

Is using GIADDR when relaying DHCP requests beneficial?

I am setting up three Juniper EX3200 switches simply named 1,2, and 3. Switch 2 will have two VLANs, one being the internet uplink from the Firewall and one being the gateway for the Workstations. ...
2
votes
0answers
619 views

Juniper SSG5… How to setup VPN to Netgear FVS338

I'm trying to configure a Juniper SSG5 for VPN. So far I'd say I'm lost lost lost. The server (just one for now) is a dedicated host at a hosting company. I have a block of 8 public IPs (/29), the ...
1
vote
0answers
24 views

Juniper WLA532 with SRX220H2

I've ordered a Juniper SRX220H2 to upgrade our firewall and was thinking about upgrading the office Wifi APs at the same time. Juniper manuals mention that the SRX supports > 4 WLA APs and WLCs, but ...
1
vote
0answers
72 views

Is possible monitor the VPN's bandwidth with Check_MK? How?

I would like monitor the bandwidth in the VPN of Juniper SSG5 with Check_MK. Is possible? How? For the moment I am monitoring the status with the check automatic (check_mk-juniper_screenos_vpn). ...
1
vote
0answers
118 views

How does Juniper vlan.0 work with policies?

I'm trying to understand vlan.0 and Juniper policies. Referring to here: http://kb.juniper.net/InfoCenter/index?page=content&id=KB16667 According to the link above, it seems that if I use vlan.0,...
1
vote
0answers
290 views

Connecting to incoming VPN clients from local ip

I have a dynamic VPN set up on a SRX 220 running Junos 11.4R10.3 Clients can connect and access the protected resources, but systems on the local network can not access connected clients. ...
1
vote
0answers
146 views

BOOTP on Juniper 4200 stack works one one subnet, not another

I have a Juniper Stack that connects vlans 10,11 and 50. 10 is servers, 11 is desktops and 50 management. Bootp is redirecting DHCP requests to a AD box on 10.x just fine for 50 vlan, and worked well ...
1
vote
0answers
74 views

Juniper 802.3ad Link between Switch and Router 3x link issue

We have a live 20Gbps link between our switch and router and we are trying to add another 10Gbps link to the LAG, we've changed all the settings on both end to add the third interface to the LAG yet ...
1
vote
0answers
2k views

VMWare ESXi 5.0 Networking Issue

I have an issue with 2 new ESXi hosts. OS - ESXi5.0 Custom Dell ISO patched up to Build 1024429 DELL R820 with 1G network 2 ports from integrated MB NIC(Intel) connected to 2 juniper switches, one is ...
1
vote
0answers
429 views

Issue Routing along IPSEC VPN

I am struggling to get two different subnets routing along a IPSec tunnel. The tunnel is between a Vyatta (6.5) and a Juniper firewall. The tunnel was initially created to route between a subnet in ...
1
vote
0answers
1k views

juniper ssg320 intrazone configration issues Close - AGE OUT

We have one main office and another small office that holds only 5 people. We have recently setup OpenVPN on our main office and created a bridged vpn between our main office LAN and a windows 2003 ...
1
vote
0answers
2k views

Does a Juniper SSG work well as an NTP server?

I have an old SSG-140 that I wanted to use as an NTP server for a number of devices - is this device able to act as a stable NTP time source? My Linux clients can't seem to stay synced to the device -...
1
vote
0answers
491 views

Allowing connections initiated from outside

I've got an old Juniper SSG5 running ScreenOS 5.4.0r6.0. Once a day, more or less, it'll start randomly dropping packets at a rate of ~5-10%. We currently solve this issue by simply rebooting the unit,...
1
vote
0answers
926 views

Juniper SSG5 redundant interfaces

I've been trying to set up redundant interfaces on the Juniper SSG5 (this model has no redundant interface mode) and I'm wondering if someone can help me determine whether it's actually possible. I'...
1
vote
0answers
1k views

OpenVPN & Juniper SSG-140

I asked this question over on some Juniper Forums but they seem to be pretty dead as in over a week it hasn't had that many hits and no one has had any advice. I figure if I can find someone familiar ...
0
votes
0answers
13 views

Ipsec in juniper SRX220

Our problem is in setting up IPsec vpn between srx220 (12.1X46) and Sophos astaro. We have spent a lot of time and finally discovered that when we use only one subnet for local and remote networks no ...
0
votes
0answers
8 views

juniper netscreen-50 management access only when admin station interface in promiscous mode

I have just received a netscreen-50 Juniper and i am trying to configure it. On one interface, I have defined an IP address and an management access for telnet/ssh: set interface "ethernet1" zone "...
0
votes
0answers
111 views

Juniper SRX site2site VPN tunnel, IKE reported as down, but IPSEC still reported as up

a tunnel between my SRX juniper box and a non-juniper box failed today.. but it was very curious phase 1 (ike) was reported down in junos, but phase 2 (ipsec) was reported as still up.. seems to me ...
0
votes
0answers
11 views

Juniper routing-based VPN - does it requires a lot of F/W's resource?

Recently, I got complains about IPSec VPN performance. I got two Juniper Devices - NS204 for center, and SSG-5 on site. There are 1 routing-based IPSec VPN Tunnel, and user reports that they got tons ...
0
votes
0answers
37 views

Juniper EX200 factory reset

Probably a really simple question I just cannot find the answer online or on Juniper's website. On most switches I have used, you could always just hold the power button for 5-10 seconds and this ...
0
votes
0answers
45 views

azure dynamic vpn juniper ssg5

i was asked to disable some Site-to-site VPN connections on azure and a few days later to enable them again. Some of the site-to-site tunnels were able to connect, but not the ones that connect to ...
0
votes
0answers
26 views

How to provide QOS for VOIP in Juniper?

I have 10 computers using browser based VOIP solution and they have problem with the internet connection. they are connected (wire) to Juniper Switches then to Fortigate. How can improve the quality ...
0
votes
0answers
52 views

Netscreen VPN UP/DOWN due to loopback address source monitoring

I am dealing with a problem with Netscreen VPN. Topology is basically Server Side ーー> (Agg2)Trust/Untrust(Agg1)ーー> ーー> Remote Office (Yamaha) 100.66.xx.0/24 ーー> Netscreen VPN ーー> Internet ーー> 100....
0
votes
0answers
101 views

How to route traffic between tagged and untagged traffic on Juniper EX3300 switch?

I have 3 different subnets as below subnet1: 11.11.11.0/24 tagged with vid 1111 subnet2: 22.22.22.0/24 untagged subnet3: 33.33.33.0/24 tagged with vid 3333 now machines in subnet2 want to ...
0
votes
0answers
267 views

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop's up with a password promt and ...
0
votes
0answers
20 views

What could cause issue with accessing server over vpn

We have two servers at point A, users at point B connect to the servers We use juniper firewalls to do the VPN, Server 2 OS was just reinstalled. Access to server 2 stopped working. Users at point ...
0
votes
0answers
167 views

collectd snmp Juniper CoS statistics

I'm struggling to derive meaningful metric names out of my collectd configuration for grabbing CoS statistics from some Juniper switches. The <Data> definition looks like this: <Data "...
0
votes
0answers
168 views

Juniper SSG Port Forwarding over a Site-to-Site VPN

Our company has severs in two locations -- our main office, and a colocation. We're getting ready to move one of our servers, a PBX, from our main office to our colocation for better service, but we'...
0
votes
0answers
850 views

Wierd traceroute / ICMP issues on Juniper SRX 210BE

I recently acquired Juniper SRX 210BE; until now I've been using Cisco ASA 5505 but I really want to switch over to Juniper world (big FreeBSD fan and all that). I've got FTTC (fiber to the cabnet) ...
0
votes
0answers
700 views

Need advice on Juniper OSPF networking

I have been thrown in to this project because of a coworker's termination. I have a set of Juniper SRX 550 Routers. I need to create an OSPF network that passes all traffic (All subnets) as if it ...
0
votes
0answers
405 views

Windows 2008 R2 site-to-site IPSEC tunnel with Juniper: tunnel up but packets are lost

I am stuck on this task almost for 2 days. Organized a site-to-site IPSEC tunnel between Juniper and Windows2008R2 machine (let's call it W2008R2 for reference). W2008R2 is a multihomed machine (2 ...