Tag Info

Hot answers tagged

4

It is unclear whether you want topology A or B below (I think you need B, but your question seems to ask for A) Vlan10 Vlan10 A) [Users]----------[EX330]----------[ISP] x.x.x.x/zz Vlan10 Vlan11 B) [Users]----------[EX330]---------------------------[ISP] y.y.y.y/24 xx.xx.xx.109/30 ...


3

Well, I can see that this is because your system doesn't have a default route installed, for some reason. Compare your forwarding table with mine: > show route forwarding-table Routing table: default.inet Internet: Destination Type RtRef Next hop Type Index NhRef Netif default user 2 0:13:5f:3:af:8f ucst 580 ...


3

I want this computer to be connected to the internet. What am I doing wrong? Summary info Recalling information from the discussion in Using the Juniper EX3300 as a router: ge-0/1/0 is assigned a public /30 address by Cogent. For sake of illustration, we will call EX3300's address on this subnet 192.0.2.109/30. Your default gateway is ...


3

You plugged into port 0/0/0 but configured port 0/0/1, that's your issue.


2

Do you have specific problems with your setup? It looks roughly okay, although I still cannot understand where your multicast sender is located. You probably would not need PIM - your diagram looks like there always will be exactly one path from each host to another passing through the Juniper router. Introducing dynamic multicast routing here is probably ...


2

cisco's virtual tunnel interfaces is just cisco's implementation of route based vpn juniper does route based vpn by default So like many things, Juniper "just works" when it comes to things Cisco has added on.


2

You could look at other patterns on the defaul attack objects whit the command show log /var/db/idpd/sec-download/SignatureUpdate.xml here are a few exadecimal examples: <Pattern><![CDATA[.*\xeb 2c 5b 89 d9 80 c1 06 39 d9 7c 07 80 01\x.*]]></Pattern> <Pattern><![CDATA[.*\xffff ff2f 4249 4e2f 5348 00\x.*]]></Pattern> ...


2

On linux, you're interested in: % sysctl net.ipv4.neigh.eth0.mcast_solicit net.ipv4.neigh.eth0.mcast_solicit = 3 The linux kernel will return an icmp host unreachable to the original sending process if it's unable to resolve an ARP after the mcast_solicit tries. In BSD (including Junos), you can set it thusly: % sysctl net.link.ether.inet.maxtries ...


2

While there is nothing wrong with Chopper's instructions per se, the SRX210 does not have a dedicate management interface. Out of the box, it will have port 0 configured as a WAN DHCP client, and all the rest of the ports as ethernet switching on VLAN0, and VLAN0 will have the IP 192.168.1.1. You'll want to login to J-Web, go to the configure tab, on the ...


2

Intra-VLAN Routing In your first question, your correct in your first assumption that users in VLAN 0 won’t be able to contact users in VLAN 2, to include the l3-interface you have set up on SW3, but only because you haven’t set up a default-gateway on PC2 or SW3. What is the next thing a host does if it sends out a broadcast on its VLAN and receives ...


2

There is a redundant path in the network as the loop between SW3 and SW6 is closed.There is no broadcast storm in the network? What is the reason for this? Spanning Tree Protocol


2

You don't need to include the filename. JunOS will name the file itself: Change it to this: set system archival configuration archive-sites "scp://karthik@192.168.1.10:/home/karthik/ws_karthik/" password godfather Make sure to delete your old archive sites (since it doesn't replace them with the new value).


2

Have you looked at the nice Juniper KB article that is titled "How to setup Hairpin NAT"? Configuration example from their page (obviously not using your IP address space): set security nat source rule-set hairpin from zone default set security nat source rule-set hairpin to zone default set security nat source rule-set hairpin rule hairpin-source match ...


1

As stated here on page 10(PDF Page 24): Temp is unavailable for an EX2200-C switch. I Also was reading the correct MIB: jnxOperatingTemp OBJECT-TYPE SYNTAX Gauge32 MAX-ACCESS read-only STATUS current DESCRIPTION "The temperature in Celsius (degrees C) of this subject. Zero if unavailable or ...


1

I can see two orders of problems with this setup: You need to setup trunks between the switches or nothing that is not in the default vlan will actually be delivered. Any link between two switches needs to be setup as a 802.1q trunk. Port 12 and Port 22 are in a different broadcast domain. All the "l3 interfaces" on the switches are (as you said) in ...


1

The two configuration statements you've included will tell a JunOS device to do two things: 1) Start transmitting link state advertisements on that interface. 2) Advertise the subnets configured on those interfaces. For each device, you should be using the command: set protocols ospf area 0.0.0.0 interface lo0.0 passive The passive option tells JunOS ...


1

You probably want show interfaces: > show interfaces terse If you want to exclude interfaces without an IP you can match on inet: > show interfaces terse | match inet


1

As I understand it, the bridge mode will turn the Sonic Wall into a L2 Bridge. They use confusing terminology on their homepage but that is how I understand it. If so you can imagine it as being just a wire between your EX and the ISP gateway. So you configure your port on the EX as if your ISP gateway would be plugged right into that port. You set the ...


1

1.0.0.0/8 and 1.0.0.0/24 (for example) aren't the same route, so there is no competition between the two /8's and the one /24's to get into the FIB. The two /8's go in, and when it learns the /24 it goes in too because it is more specific (so a different route). You can't have a /8's rejected because of the presence of a /24 could you (You'd be missing a ...


1

Assuming you want to match on any AS path that consists of exactly 3 AS numbers, with the first being 9121, you would want this: 9121 .+ .+


1

I don't know if you can stop the daemon entirely, but you can just delete the NTP section of the configuration. From configuration mode: delete system ntp commit


1

I should think this would do: set firewall family inet filter test term 1 from source-address 10.10.0.35/32 set firewall family inet filter test term 1 then loss-priority high set firewall family inet filter test term 1 then forwarding-class expedited-forwarding set firewall family inet filter test term 2 then accept Then on the interface: set interfaces ...


1

Because this is an SRX, there are a number of requirements here. Step 1: Define VLANS (think layer 2) set vlans vlan1 description desktops vlan-id 1 l3-interface vlan.1 set vlans vlan2 description servers vlan-id 2 l3-interface vlan.2 Step 2: Define L3 interfaces bound to those vlans... set interfaces vlan unit 1 family inet address 10.0.1.1/24 set ...


1

The leds are useful, but not a lot... The POWER led is on, with a steady green. This mean that the router is powered up. The STATUS led is on. An error has been detected. But it doesn't provide much more informations. The orange ALARM led indicate a "Minor alarm condition [that] requires monitoring or maintenance". Not very useful, but they mention a ...


1

I think you're talking about the Cisco SPAN feature. Juniper calls this port mirroring, and it isn't supported on the J 2350. Juniper KB


1

I have found the following page which states that, with caveats, off the shelf SanDisk cards should work. http://juniper.cluepon.net/index.php/Flash_compatibility It looks like modern, high throughput, cards could cause issues though. I am still interested in hearing anyone else's experiences.


1

I've successfully installelled Transcend 1GB compact flash cards internally in some lab m10i's. I was a bit of a novice and had to learn a few things. Perhaps these notes will help someone like me. The new third party CF is probably formatted some non-USF way (FAT or something). If you just install it and try to boot the routing engine, it might hang at ...


1

MIPs are basically just static 1:1 NAT - that might help searching the docs (sorry, still all ScreenOS here). This looks like it might be useful: http://www.mail-archive.com/juniper-nsp@puck.nether.net/msg06827.html


1

From Juniper's own online documentation: Configure the default SBL server lookup as enabled or disabled. If you are using server-based spam filtering, you should enter sbl-default-server to enable the default SBL server. (The SBL server is predefined on the device. It ships with the name and address of the SBL server.) Doesn't sound like you can do ...


1

From the online manual, not many clicks away from Google; In the J-Web user interface, select Configure>System Properties>Management Access. Click Edit. The Edit Management Access dialog box appears. Select the Management tab. If you want to enable an IPv4 address for the device, select IPv4 address and enter a corresponding management port, subnet mask, ...



Only top voted, non community-wiki answers of a minimum length are eligible