Tag Info

Hot answers tagged

4

It is unclear whether you want topology A or B below (I think you need B, but your question seems to ask for A) Vlan10 Vlan10 A) [Users]----------[EX330]----------[ISP] x.x.x.x/zz Vlan10 Vlan11 B) [Users]----------[EX330]---------------------------[ISP] y.y.y.y/24 xx.xx.xx.109/30 ...


3

You plugged into port 0/0/0 but configured port 0/0/1, that's your issue.


3

I want this computer to be connected to the internet. What am I doing wrong? Summary info Recalling information from the discussion in Using the Juniper EX3300 as a router: ge-0/1/0 is assigned a public /30 address by Cogent. For sake of illustration, we will call EX3300's address on this subnet 192.0.2.109/30. Your default gateway is ...


3

Well, I can see that this is because your system doesn't have a default route installed, for some reason. Compare your forwarding table with mine: > show route forwarding-table Routing table: default.inet Internet: Destination Type RtRef Next hop Type Index NhRef Netif default user 2 0:13:5f:3:af:8f ucst 580 ...


2

On linux, you're interested in: % sysctl net.ipv4.neigh.eth0.mcast_solicit net.ipv4.neigh.eth0.mcast_solicit = 3 The linux kernel will return an icmp host unreachable to the original sending process if it's unable to resolve an ARP after the mcast_solicit tries. In BSD (including Junos), you can set it thusly: % sysctl net.link.ether.inet.maxtries ...


2

You could look at other patterns on the defaul attack objects whit the command show log /var/db/idpd/sec-download/SignatureUpdate.xml here are a few exadecimal examples: <Pattern><![CDATA[.*\xeb 2c 5b 89 d9 80 c1 06 39 d9 7c 07 80 01\x.*]]></Pattern> <Pattern><![CDATA[.*\xffff ff2f 4249 4e2f 5348 00\x.*]]></Pattern> ...


2

Do you have specific problems with your setup? It looks roughly okay, although I still cannot understand where your multicast sender is located. You probably would not need PIM - your diagram looks like there always will be exactly one path from each host to another passing through the Juniper router. Introducing dynamic multicast routing here is probably ...


2

While there is nothing wrong with Chopper's instructions per se, the SRX210 does not have a dedicate management interface. Out of the box, it will have port 0 configured as a WAN DHCP client, and all the rest of the ports as ethernet switching on VLAN0, and VLAN0 will have the IP 192.168.1.1. You'll want to login to J-Web, go to the configure tab, on the ...


2

cisco's virtual tunnel interfaces is just cisco's implementation of route based vpn juniper does route based vpn by default So like many things, Juniper "just works" when it comes to things Cisco has added on.


2

You don't need to include the filename. JunOS will name the file itself: Change it to this: set system archival configuration archive-sites "scp://karthik@192.168.1.10:/home/karthik/ws_karthik/" password godfather Make sure to delete your old archive sites (since it doesn't replace them with the new value).


2

There is a redundant path in the network as the loop between SW3 and SW6 is closed.There is no broadcast storm in the network? What is the reason for this? Spanning Tree Protocol


2

Intra-VLAN Routing In your first question, your correct in your first assumption that users in VLAN 0 won’t be able to contact users in VLAN 2, to include the l3-interface you have set up on SW3, but only because you haven’t set up a default-gateway on PC2 or SW3. What is the next thing a host does if it sends out a broadcast on its VLAN and receives ...


2

Have you looked at the nice Juniper KB article that is titled "How to setup Hairpin NAT"? Configuration example from their page (obviously not using your IP address space): set security nat source rule-set hairpin from zone default set security nat source rule-set hairpin to zone default set security nat source rule-set hairpin rule hairpin-source match ...


1

I don't know if you can stop the daemon entirely, but you can just delete the NTP section of the configuration. From configuration mode: delete system ntp commit


1

Assuming you want to match on any AS path that consists of exactly 3 AS numbers, with the first being 9121, you would want this: 9121 .+ .+


1

1.0.0.0/8 and 1.0.0.0/24 (for example) aren't the same route, so there is no competition between the two /8's and the one /24's to get into the FIB. The two /8's go in, and when it learns the /24 it goes in too because it is more specific (so a different route). You can't have a /8's rejected because of the presence of a /24 could you (You'd be missing a ...


1

As I understand it, the bridge mode will turn the Sonic Wall into a L2 Bridge. They use confusing terminology on their homepage but that is how I understand it. If so you can imagine it as being just a wire between your EX and the ISP gateway. So you configure your port on the EX as if your ISP gateway would be plugged right into that port. You set the ...


1

You probably want show interfaces: > show interfaces terse If you want to exclude interfaces without an IP you can match on inet: > show interfaces terse | match inet


1

The two configuration statements you've included will tell a JunOS device to do two things: 1) Start transmitting link state advertisements on that interface. 2) Advertise the subnets configured on those interfaces. For each device, you should be using the command: set protocols ospf area 0.0.0.0 interface lo0.0 passive The passive option tells JunOS ...


1

I can see two orders of problems with this setup: You need to setup trunks between the switches or nothing that is not in the default vlan will actually be delivered. Any link between two switches needs to be setup as a 802.1q trunk. Port 12 and Port 22 are in a different broadcast domain. All the "l3 interfaces" on the switches are (as you said) in ...


1

runscript is what you're looking for. print "Starting Juniper EX-2200 switch configuration: " send "" expect { "EX-2200>" } send "cli" expect { "..." } ... Give it a try.


1

I am not too familar with Juniper switches, but I am sure it supports Local RADIUS server (i.e. the RADIUS server running on the switch itself) and MAC authentication. In fact, using the local RADIUS server and MAC authentication would have been my first choice in your situation rather than trying to mimic the proprietary behaviour of Cisco devices. What's ...


1

From Juniper's own online documentation: Configure the default SBL server lookup as enabled or disabled. If you are using server-based spam filtering, you should enter sbl-default-server to enable the default SBL server. (The SBL server is predefined on the device. It ships with the name and address of the SBL server.) Doesn't sound like you can do ...


1

The leds are useful, but not a lot... The POWER led is on, with a steady green. This mean that the router is powered up. The STATUS led is on. An error has been detected. But it doesn't provide much more informations. The orange ALARM led indicate a "Minor alarm condition [that] requires monitoring or maintenance". Not very useful, but they mention a ...


1

Because this is an SRX, there are a number of requirements here. Step 1: Define VLANS (think layer 2) set vlans vlan1 description desktops vlan-id 1 l3-interface vlan.1 set vlans vlan2 description servers vlan-id 2 l3-interface vlan.2 Step 2: Define L3 interfaces bound to those vlans... set interfaces vlan unit 1 family inet address 10.0.1.1/24 set ...


1

I should think this would do: set firewall family inet filter test term 1 from source-address 10.10.0.35/32 set firewall family inet filter test term 1 then loss-priority high set firewall family inet filter test term 1 then forwarding-class expedited-forwarding set firewall family inet filter test term 2 then accept Then on the interface: set interfaces ...


1

From the online manual, not many clicks away from Google; In the J-Web user interface, select Configure>System Properties>Management Access. Click Edit. The Edit Management Access dialog box appears. Select the Management tab. If you want to enable an IPv4 address for the device, select IPv4 address and enter a corresponding management port, subnet mask, ...


1

I think you're talking about the Cisco SPAN feature. Juniper calls this port mirroring, and it isn't supported on the J 2350. Juniper KB


1

MIPs are basically just static 1:1 NAT - that might help searching the docs (sorry, still all ScreenOS here). This looks like it might be useful: http://www.mail-archive.com/juniper-nsp@puck.nether.net/msg06827.html


1

I've successfully installelled Transcend 1GB compact flash cards internally in some lab m10i's. I was a bit of a novice and had to learn a few things. Perhaps these notes will help someone like me. The new third party CF is probably formatted some non-USF way (FAT or something). If you just install it and try to boot the routing engine, it might hang at ...



Only top voted, non community-wiki answers of a minimum length are eligible