Questions tagged [juniper]
Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.
273
questions
0
votes
0
answers
29
views
(Networking noob) I can't get network to work on a server using pfsense and juniper switch
I work at a company as an IT administrator, but my experience with networking is very limited. I was always focused on the OS and application side of things. Recently the only other IT administrator ...
0
votes
0
answers
65
views
Error in IKE phase 1 when trying create IPSeC tunnel with Juniper SRX 300
Less than month ago we had to replace our old SRX 210 HE device with a new SRX 300 because the old device started to become unreliable. We had two IPSeC tunnels to two different places both working ...
- 65
0
votes
0
answers
69
views
Libreswan to Juniper. The tunnel is not going up
authentication-method pre-shared-keys
dh-group group14
authentication-algorithm sha1
encryption-algorithm aes-256-cbc
lifetime-seconds 28800
protocol esp
authentication-algorithm hmac-sha1-96
...
0
votes
0
answers
48
views
Aruba to Juniper EX4200
So I have a bit of an unusual situation -- I'm trying to use a EX4200-48-PoE juniper switch with our Aruba (HP) network in place -- just as a transitional move as we're doing some construction to give ...
- 59
1
vote
1
answer
1k
views
How to troubleshoot LACP flapping interface triggered by layer 3 IP Address. (Juniper)
I am currently working on solving a network issue that has led to network outages across my organization. (I have included a picture of our simple topology below). Our network consists of a Router/...
- 11
0
votes
0
answers
39
views
Configuring Routers using IRRToolset/IRR Power Tools
Recently, I've started configuring routers using irrpt.
It offers the features I require, which are described in the section under "Purpose" (https://github.com/6connect/irrpt#purpose).
But ...
- 1
0
votes
0
answers
37
views
TCP Session drops because of FIN signal
I have two servers communicating with each other through ISO 8385 messages over TCP sessions. Basically host-to-host interface between two payment switches. The problem is that the session keeps ...
0
votes
0
answers
132
views
Juniper - SNMP not working with prefix list
I have a problem with configuration SNMP on juniper MX2200.
My configuration:
snmp {
description "Juniper MX2200";
location "MyHome";
community tango {
...
- 101
0
votes
0
answers
97
views
Is it possible to whitelist file extension in Juniper SRX UTM AntiVirus module for specific website
I have a SRX300 running 21.2R3-S2.9 and syslog got message:juniper.srx300 RT_UTM:
AV_FILE_NOT_SCANNED_PASSED_MT: AntiVirus: SESSION_ID=47244670993 source-zone "TRUST" destination-zone "...
0
votes
1
answer
119
views
Why does this single value SNMP OID have a bunch of sub-values?
I have a Juniper MIB in which this OID: 1.3.6.1.4.1.2636.3.1.13.1.24 corresponds to this value: 1.3.6.1.4.1.2636.3.1.13.1.2.
When I run an snmpwalk of 1.3.6.1.4.1.2636.3.1.13.1.24 I get this:
JUNIPER-...
- 400
1
vote
0
answers
27
views
An error on Junos model ex3300 ( VLAN error )
I'm trying to remove a VLAN from JUNOS and then I get this error
error: tag value 40 is being used by more than one vlan
and
error: configuration check-out failed
Is there any solution ?
0
votes
1
answer
248
views
Juniper LACP with linux server not increase speed
And:
I'm using R630 with Debian 11 and Ex2200 with version 12.3R12.4
The network: each server using 4 link to sw
server 1 ==== switch ==== server 2
Here is server config ( both server )
auto lo
...
- 133
0
votes
1
answer
66
views
ScreenOS SSG-320M Source Interface Based Routing
quick question. Couldn't figure this out with even the ScreenOS Bible.
Juniper SSG-320M Firewall, Just added an 8port PIM Module(ETH1/0 to 1/7):
ETH0/0(Trust) 172.16.1.1/16
ETH0/2(UnTrust) 192.168.0.5/...
- 1
1
vote
1
answer
670
views
Increasing MTU size
Why would increasing the VLAN MTU size cause things to break?
We have a customer who wants 2000 byte packets for some reason, so I increased all the physical links to 9216, which didn't cause any ...
- 93
-1
votes
1
answer
39
views
how to enable intervlan between juniper core switch and Cisco catalyst 1000
i have a juniper 4600 core with 2300 Access switches in my VLAN, one of the 2300 failed and replaced with cisco 2300 in one VLAN, DHCP is assigning IP to clients and internet is working fine, the ...
1
vote
1
answer
30
views
vlan routing redirected by remote change?
We are replacing a Juniper EX4200 stack with a new EX3400 stack. During the migration, we setup a bridge link between the two so that things that hadn't migrated yet could talk to things that had. ...
- 93
0
votes
1
answer
3k
views
How to force 1G speed for Juniper QFX5100 10G ports?
I have available a Juniper QFX5100-48S switch (48 SFP 10G ports, 6 QSFP ports) that I cannot join into our network since an SFP DAC 10G cable connecting it to an SFP port on a HP V1810-48G switch does ...
- 45
1
vote
0
answers
232
views
Freeradius doesn't start when CoS user attributes are configured
I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
- 11
1
vote
0
answers
831
views
Juniper EX4200-48t LACP on 10GB module not working
I'm new to Juniper products and I bough two older EX4200-48t. I setup virtual chassis and add a few LAGs with LACP. All LAGs on copper connections works fine but on the 10GB module not. The module is ...
- 11
0
votes
1
answer
405
views
Juniper EX4200 Stack with PFSense DHCP (Discover/Offer Loop)
I'm currently struggling with my Juniper Switch Stack.
Topology is like this Topology
The Client Ports on the Stack are configured as tagged-access with dot1x (multiple supplicant) and they switch ...
- 1
0
votes
1
answer
784
views
Ansible playbook "path specified in src not found"
I am runnning into this message when I do this :
ansible-playbook -i inventory junos_config_new.yml --check -vvv
ansible-playbook 2.9.9 config file = /etc/ansible/ansible.cfg configured module ...
0
votes
0
answers
296
views
Juniper MX traffic shaping - bypass rate limits for just a few destinations
The aforementioned MX router is a BRAS providing access for about 3,000 subscribers, using the 'dynamic-clients' functionality. Each subscriber demux interface gets assigned a specific firewall rate-...
0
votes
0
answers
214
views
rsyslog logging based on sending host behind NAT
I have multiple Juniper devices behind one NAT'd IP sending their logs to a single host. On the wire the message looks like this:
Dec 4 07:38:31 tor-29-1: dot1xd[1585]: task_connect: task PNACAUTH./...
- 427
0
votes
0
answers
248
views
Objects in firewall filters on Juniper devices
Greetings and sorry for my English.
I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
- 79
0
votes
1
answer
1k
views
JUNOS set system syntax error
I'm trying to enable the web interface on JUNOS 11.4R13.5 (outdated I know)
I'm trying to use the command set system services web-management https interface
But I'm unable to run it as I get a ...
- 1
0
votes
1
answer
86
views
Subnetting: Access 10.1.0.1 from 10.1.2.1?
Here is the newly configured vlan on my Juniper:
vlans {
vlan1 {
vlan-id 3;
l3-interface vlan.1;
}
}
interfaces {
vlan {
unit 1 {
family inet {
...
- 275
2
votes
2
answers
5k
views
Set Putty Window Title Dynamically to Hostname
Is any way to dynamically change the window title within Putty when jumping between devices?
The majority of my work is on Cisco/Juniper devices and in order to reach these devices, I use a Linux ...
- 21
1
vote
0
answers
383
views
Juniper SRX300 Maximum BGP routes
I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
- 111
0
votes
1
answer
107
views
JunOS SCU (source class) matching not working on vMX 18
I testing Junos Subscriber Manager on virtual playgroung.
All seems fine and work as expected on real hardware. But with dynamic profile with source-class sclass_mytest option not working.
If I ...
- 79
0
votes
1
answer
219
views
SRX Juniper port forwarding
I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried:
set security zones security-zone trust ...
- 113
-2
votes
1
answer
36
views
Whether the Speed Auto can have a network speed reach to the switchport top?
My Juniper EX4300 Switch ge-0/0/42 switchport configuration is bellow:
admin@1409A# run show interfaces ge-0/0/42
Physical interface: ge-0/0/42, Enabled, ...
- 117
0
votes
0
answers
281
views
Source NAT on Juniper SRX300
I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
- 13
0
votes
1
answer
419
views
Configuring Juniper EX2200 Ethernet-Switching
Recently I started configuring an Juniper EX2200 to be used with an fibre optic connection in it's SFP module.
The switch itself is online and can ping remote hosts without an issue after setting the ...
- 13
-1
votes
1
answer
377
views
Virtually no bandwidth via Juniper QFX5100 switch
I have a Juniper QFX5100 with pretty much stock configs. I am using aggregated interfaces between them. When I use a cross over between the servers everything works fine and I get 10GB of bandwidth. ...
- 427
1
vote
1
answer
97
views
Juniper => D-Link => pfSense - how make WAN for pfSense
Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is.
We have this net scheme - simple view:
ISP Gateway
||
Juniper SRX240H(our gateway)
||...
- 11
0
votes
1
answer
2k
views
ISC-DHCPD classes for ZTP (with Juniper)
I'm currently trying to setup a DHCP server to use it in a ZTP environment. My first goal is to be able to upgrade my Juniper devices automatically based on the hardware.
What I'm really trying to ...
- 51
1
vote
1
answer
332
views
Juniper Switches: Extend network without adding new switches to virtual chassis
We have a virtual chassis composed of four EX-3300 48-port switches: One master, one backup, and two linecard, all located in the same LAN closet. All of the switches have uplinks to a Palo Alto PA-...
- 153
1
vote
0
answers
284
views
Separate Azure S2S VPN tunnel per subnet with Juniper SRX
It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback!
GOAL:
In Azure, I ...
- 11
1
vote
1
answer
2k
views
Juniper SRX refuses to add new ip addresses to ARP (unless)
I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8.
juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0)
I would like to add ...
- 763
2
votes
0
answers
1k
views
How to configure Juniper SSG5 with VLANs and DHCP
I just purchased a used SSG5, upgraded the firmware, and now I'd like to set it up as my Firewall/DHCP/VPN. I'm new to Juniper, so please forgive any blatant missteps in terminology.
I am familiar ...
- 21
0
votes
1
answer
151
views
Why is the 'Move' box always disabled on our SRX 500 running JunOS 12?
I've been trying to determine what has happened with the SRX500's we have at work. They are running JunOS 12 [12.1X46-D40.2].
For some reason the 'Move' box in the upper right of the Security > ...
- 13
1
vote
1
answer
272
views
QSFP28 DAC cables causing packet loss and framing issues
So the systems I am using are MX960 MPC7e.
When I use the 1meter 100G DAC I have zero errors + zero packet loss.
When I use the 3meter 100G DAC cables I have packet loss & framing errors. I ...
- 143
0
votes
0
answers
270
views
Libreswan to Juniper SRX. Tunnel is up and running but nothing is going through
ipsec auto --status says that the connection is established:
000 #544: "VPN":4500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 208s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; ...
- 103
0
votes
1
answer
91
views
What is the use of the 'exit' statement in a screenOS juniper firewall config?
I want to audit a screenOS juniper firewall. I have been provided with the configuration file, but I am not familiar with the syntax. I am wondering about the 'exit' command.
In the config file, most ...
1
vote
0
answers
585
views
How to debug tun0 issues with OpenConnect Juniper
I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way:
sudo openconnect --juniper -v <my_corporate_VPN_url>
I'm doing this from three physical instances of ...
- 133
0
votes
0
answers
549
views
Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up
So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
- 467
1
vote
0
answers
2k
views
How to tell Ansible to prompt user for passwd when SSH Key connection fails?
I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team.
How do I create a condition that says: when key authentication ...
- 11
3
votes
1
answer
9k
views
Ping works but TCP doesn't in a bit of an unusual topology
I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me.
There are two subnets (one is our companys and one is our clients) which reside in the ...
- 65
0
votes
0
answers
710
views
Can Juniper SRX300 act as VPN Client/SOHO Router?
I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
- 111
0
votes
1
answer
2k
views
Get detailed info via snmp from Juniper switch stack for monitoring
I try to get the following information out of the switch stack for monitoring purposes. Here is the command and its output executed directly on the switch stack via ssh login:
root@stack> show ...
- 3