Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

learn more… | top users | synonyms

10
votes
9answers
2k views

Why buy high end hardware firewalls?

There exist firewalls from Juniper and Cisco that cost more than a house. So I wonder: what does one get from a $10.000+ firewall compared to an 2U server with 4x 10Gbit network cards running e.g. ...
9
votes
4answers
19k views

How to connect to a Juniper VPN from Linux

The Windows users have a new client "Juniper Pulse" to connect to the Juniper VPN server. On Linux, what VPN client do we have to connect to that Juniper VPN, with maximum compatibility? Please ...
6
votes
2answers
719 views

Gigabit network with a 100 megabit firewall

We have set up all the equipment necessary to have a gigabit network. All servers + workstations are running gigabit cards, just bought a 16 port switch that can handle gigabit as well. My concern is ...
6
votes
4answers
547 views

How to buy from Cisco and/or Juniper when you're a small company? [closed]

I find it quite difficult to buy from Cisco and Juniper : no price-tags can be found on their websites, let alone buy-online capabilities a "buy cisco" google-search will mostly return websites ...
5
votes
9answers
4k views

Why DELL PowerConnect and Juniper are so rare ? Why do enterprises stick with Cisco? [closed]

I have a little question, I'm actually studing IT in France, and when looking on alternative on the very [...] very expensive Cisco equipments, I've found Juniper and DELL PowerConnect pretty ...
5
votes
1answer
248 views

Do Juniper switches support vtp?

We have a mostly Cisco network, though for our access layer we usually deploy Juniper Virtual Chassis switches. To replicate this, we are interested in deploying a few juniper switches in our product ...
5
votes
2answers
951 views

What is the equivalent of Cisco's 'ip virtual-reassembly' for a Juniper ISG 2000

I tested my dns servers with the oarc test and my size limit is at least 1403 bytes. I performed the same test before my Juniper ISG 2000 and the result is 2047 bytes. According to the chapter IP ...
5
votes
3answers
2k views

Can't send commands via SSH to Juniper firewalls

I have some Juniper SSG firewalls which I need to manage, and I'd like to be able to send commands to them from some monitoring scripts. I configured SSH access using public keys, and I'm able to ...
5
votes
1answer
687 views

Juniper SSG20 - Bridge ADSL to ethernet interface

We're trying to reuse some leftover equipment we've got. I've got a Juniper SSG20 with 2x ADSL2/2+ mini-PIMs and we've already got a firewall solution (Which will act as the PPPoE Client) but what we ...
4
votes
4answers
2k views

Juniper Firewall - software that can report on traffic analysis?

I'd like to find some open source software (or relatively inexpensive) that can run analysis against the syslog messages of a Juniper SSG (netscreen OS) firewall and provide things like "Top ...
4
votes
0answers
103 views

Configure Juniper M320 as Ethernet/STM transparent converter

There is Juniper M320. We need to move ALL the traffic from one port to another. Everything that comes to one port goes to another and vice versa. No snooping or any other processing is required. One ...
3
votes
2answers
721 views

PowerConnect switches, Juniper firewalls and esx redundancy

Let me preface this question by saying that I am a developer and have basic knowledge of networking. My current job requires that I wear many hats. I am building out a DataCenter for our SaaS ...
3
votes
3answers
2k views

To LAG or not LAG?

I have a new ex4200 switch stack, my 3 esxi hyper-visors connect to the SAN via vlan 200 which is EST. I have loaded the Equallogic multipathing plugins. When I have the 4 cables per server dedicated ...
3
votes
2answers
1k views

Juniper EX3300 routing issue

The routing on my Juniper EX3300 does not seem to be working. My ISP's gateway is at xx.xx.xx.xx. And I have the following in the configuration: routing-options { static { route 0.0.0.0/0 ...
3
votes
3answers
345 views

Having ssh access only, determine if the device is router or a switch (Cisco and Juniper)

There are some Cisco and Juniper devices on our network that I need to make a python script to determine what they are: switches or routers. I have ssh access, so I can show version and parse ...
3
votes
1answer
2k views

Juniper SSG 5 VPN

I have a host who set up our Juniper SSG 5 VPN with Firmware version-6.2.0r5.0 I've been trying to set up VPN on it using this guide: http://kb.juniper.net/InfoCenter/index?page=content&id=KB4094 ...
3
votes
1answer
3k views

Juniper SSG5 Help!

Newbie in firewall here. . .I need my trust zone to access the internet but the problem is I cant make it happen. So far, from the trust zone, I'm able to ping the IP's in the unstrust zone but I ...
3
votes
1answer
1k views

configuration transfer over scp on commit not working on Juniper EX-2200 switch

I am making a series of configuration changes on Junos EX- 2200 switch.I have this router connected to another PC via an ethernet cable.The IP address of the switch is 192.168.1.1.I am able to ping ...
3
votes
1answer
370 views

Getting false-positive SQL Injection reports

We have installed a new Juniper SRX firewall with IDP, so the firewall is inspecting the traffic for suspicious activity. I've encountered 3 "false-positive" reports for SQL injection attacks that ...
3
votes
1answer
859 views

Juniper Netscreen Reset to factory defaults. Does license remain in tact?

I bought an SSG-5 with the extended license off of ebay. I was messing with the config, and now I want to reset it in order to start fresh. If I do this, will I loose my license information or will it ...
3
votes
1answer
2k views

How to route all traffic over site to site VPN tunnel?

I have a site to site VPN configured between our main site (Site A) and a remote site (Site B). Site A is 10.60.0.0/16 Site B is 192.168.99.0/24 The firewall in Site B is a Juniper SSG running ...
3
votes
2answers
2k views

Juniper router dropping pings to external interface

My organization has a Juniper SSG20-WLAN that routes our traffic to the outside world. We've been having intermittent problems with our internet connection so I wrote up a Python script to ping the ...
3
votes
6answers
12k views

Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal

I've followed the instructions to configure a VPN between a netscreen device and a Cisco PIX as directed by Cisco's [netscreen to PIX ...
3
votes
1answer
72 views

DOS Protection EX Series

So I've read a number of white papers from Juniper containing some DOS prevention strategies. I'm not looking to prevent any one in particular, but rather just ensure the network is as best protected ...
2
votes
3answers
2k views

Why should I use a switched network over routed?

Now that routers are affordable, why should I build a network using Layer 2 switches, which degenerate to broadcasting under poor conditions, and not just use real routing at Layer 3? Edit: Got some ...
2
votes
3answers
8k views

Easily obtain list of sessions from Juniper Netscreen

I've got a Juniper Netscreen SSG-5 that occasionally gets a high session count. I've got 4096 licensed sessions, and there are times I see 3000+ for a small office (a dozen or so people). This is ...
2
votes
5answers
6k views

How do I keep a Juniper ScreenOS interface IP up when no one is plugged into it?

I have a VPN connection to a remote site and whenever nothing is plugged into the remote sites LAN bgroup the interface IP isn't managable or pingable. Anyone know what command I skipped on CLI for ...
2
votes
2answers
186 views

Colocation, Full Rack, Layer2/Layer3 Clarification

We are moving from several 1U servers colo'ed out across several data centers to a full rack in a nearby data center for both physical access reasons, as well as having space for expansion. We also ...
2
votes
1answer
3k views

Using the Juniper EX3300 Switch as a router?

I have a Juniper EX3300 switch in a data center. And I have connected one of the uplink ports (ge-0/1/0) to my ISP's router. I want to configure it so that all the devices connected to ports in the ...
2
votes
2answers
4k views

Juniper’s Network Connect ncsvc on Linux: “host checker failed, error 10”

I’m trying to log in to a Juniper VPN with Network Connect from a headless Linux client. I followed the instructions and used the script from http://mad-scientist.us/juniper.html. When running the ...
2
votes
3answers
6k views

Assign multiple external ips with Juniper SRX100

I have a single Juniper SRX100 setup between several servers and a WAN. Is it possible to give all the servers external IP addresses and still use the SRX100 as a firewall? (My ISP has provisioned ...
2
votes
1answer
1k views

Using Juniper EX3300 as a router [duplicate]

Possible Duplicate: Using the Juniper EX3300 Switch as a router? So I have a Juniper EX3300 Switch. One of its uplink ports (ge-0/1/0) is connected to my ISP's router. ISP router's port ...
2
votes
7answers
6k views

Force Juniper-network client to use split routing

I'm using the Juniper client for OSX ('Network Connect') to access a client's VPN. It appears that the client is configured to not use split-routing. The client's VPN host is not willing to enable ...
2
votes
3answers
3k views

SSRS Export to Excel not working through VPN (Juniper SA4000)

We have a SharePoint (MOSS 2007 on Win2003 R2) with SSRS reports (from SQL 2005) embedded in it. When we connect to the SharePoint portal through our VPN (firewall is Juniper SA4000) and using ...
2
votes
1answer
48 views

Load Balancing between 2 ISPs

I'm having 2 ISPs, need to balance traffic between the internal users ... Firewall is SRX210 The question is: Each ISP has there own DNS, how to make the dns resolving based on the used ISP? ...
2
votes
1answer
117 views

Does Juniper ScreenOS support IPCOMP?

Given an oldish Juniper Netscreen device running ScreenOS 6.2 (Juniper NS5GT-ADSL), would it support IPCOMP payload compression (RFC 2393) in IPSEC tunnels? If so, any reference on how to set it up?
2
votes
2answers
2k views

Juniper EX BGP with Default Routes

I'm new to BGP - so this is certainly a learning exercise. I'm moving away from PA space provided on 2 routed uplinks to having my own IP space and multi-homing my transit. To begin with, there will ...
2
votes
2answers
2k views

Problems with ipsec betwen Cisco ASA 5505 and Juniper ssg5

I am trying to set up an ipsec tunnel between our ASA 5505 and a Juniper ssg5. The tunnel is up and running, but I cannot get any data through it. The local network I am on is 172.16.1.0 and the ...
2
votes
1answer
1k views

Juniper SRX210, How can i enable the port 554, 9001 for 192.168.1.151 local IP?

I have been strugling to solve this but still i can not fix it. I have 192.168.1.151 PC and it has 554 and 9001 TCP/UDP open. But i need to publicly access that. In my juniper srx210 i have this ...
2
votes
2answers
4k views

How do you implement NAT-T passthrough on a Juniper SRX series Firewall?

We have 3 juniper SRX-100 firewalls, they are configured like so: FW1 -> FW2 -> INTERNET -> FW3 We would like to create an IPSEC tunnel between FW3 and FW1 passing through FW2 preferably using ...
2
votes
3answers
4k views

Juniper SSG5 find bandwidth eater

I looking for a way to get the list of the top bandwidth eater on my Juniper ssg5. On my old OpenBSD Box I had a command line version of ntop. It was just perfect. How can I do the same thing whith ...
2
votes
7answers
1k views

Networking issues with Linux server (CentOS 5.3)

I have a Linux server hosting our bug tracking software (CentOS 5.2 Kernel 2.6.18-128.4.1.el5) that I have having some strange network problems with. The machine is configured with two NICS, one for ...
2
votes
4answers
2k views

Can I use Third Party Compact Flash in a Juniper M10i Router?

Juniper list price for 1GB of CF is around 100 times what I would expect to pay for a third party card. The J-Series release notes have a list of supported third party parts, but there is no ...
2
votes
1answer
1k views

Disable NTP on Juniper SRX-240

I'm trying to shutdown/disable the ntp daemon running on a Juniper SRX-240 (junos 11.4), but the obvious solution is apparently not valid for this hardware/software combination.
2
votes
1answer
1k views

How to get Juniper SRX220 to respond to multiple IP Addresses

How can I get an SRX220 to respond to multiple ip addresses on same subnet, but with different gateways. e.g., Subnet: 1.1.1.40/30 (.41 gateway, .42 actual ip) Subnet: 1.1.1.44/30 (.45 gateway, .46 ...
2
votes
2answers
997 views

Cisco Sticky Mac vs Juniper Persistant-Mac

I’m trying to figure out if there is an inherent flaw in the way JUNOS handles sticky-mac addresses across their switch-ports versus how Cisco handles them. I’ll elaborate. Below, you can see that ...
2
votes
1answer
941 views

Pushing IP routes to various VPN clients

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client. I would like to know if there is an equivalent of this option ...
2
votes
1answer
2k views

Configuring routing in Juniper router

I have a Juniper SRX220 (junos) router where I have configured vlan.1 and vlan.2 with IP 10.0.1.1/24 and 10.0.2.1/24. Now I want to route between these networks. How do I configure that in Junos? I ...
2
votes
2answers
4k views

Multiple External IP Ranges on a Juniper SSG5

I have a Juniper SSG 5 firewall in a datacenter. The first interface (eth0/0) has been assigned a static IP address and has three other addresses configured for VIP Nat. I have a static route ...
2
votes
5answers
3k views

Juniper NetScreen NS-5GT traffic monitoring

I've done casual research into the subject and am truly dismayed at the lack of compatible tools for such a simple task. Maybe someone can provide assistance. We have a NetScreen NS-5GT in the ...