Questions tagged [juniper]

Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

Ansible playbook “path specified in src not found”

I am runnning into this message when I do this : ansible-playbook -i inventory junos_config_new.yml --check -vvv ansible-playbook 2.9.9 config file = /etc/ansible/ansible.cfg configured module ...
0
votes
0answers
29 views

Juniper MX traffic shaping - bypass rate limits for just a few destinations

The aforementioned MX router is a BRAS providing access for about 3,000 subscribers, using the 'dynamic-clients' functionality. Each subscriber demux interface gets assigned a specific firewall rate-...
0
votes
0answers
10 views

Juniper SRX compliance checks using ansible tower

I am trying to construct a yaml file to be used by Ansible Tower for compliance This is the structure of the yaml file at the github site https://github.com/gefela/ansible_junos at present Now ...
0
votes
0answers
49 views

convert pf firewall rules to Juniper

I need to rewrite all my pf firewall rules to my Juniper SRX550 but I don't understand how commands I need to use to convert a simple rule like this: pass in quick on $ext_if proto udp from IP_A to ...
0
votes
0answers
52 views

rsyslog logging based on sending host behind NAT

I have multiple Juniper devices behind one NAT'd IP sending their logs to a single host. On the wire the message looks like this: Dec 4 07:38:31 tor-29-1: dot1xd[1585]: task_connect: task PNACAUTH./...
0
votes
0answers
39 views

Juniper router SRX DHCP issue

I am trying to set multiple subnets on SRX device each subnet has its own DHCP pool. I have 5 ports each port is connected to a group of servers. So, I configured 5 pools and 5 groups each group ...
0
votes
0answers
80 views

Objects in firewall filters on Juniper devices

Greetings and sorry for my English. I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
0
votes
1answer
118 views

JUNOS set system syntax error

I'm trying to enable the web interface on JUNOS 11.4R13.5 (outdated I know) I'm trying to use the command set system services web-management https interface But I'm unable to run it as I get a ...
0
votes
1answer
51 views

Subnetting: Access 10.1.0.1 from 10.1.2.1?

Here is the newly configured vlan on my Juniper: vlans { vlan1 { vlan-id 3; l3-interface vlan.1; } } interfaces { vlan { unit 1 { family inet { ...
1
vote
2answers
2k views

Set Putty Window Title Dynamically to Hostname

Is any way to dynamically change the window title within Putty when jumping between devices? The majority of my work is on Cisco/Juniper devices and in order to reach these devices, I use a Linux ...
1
vote
0answers
167 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
0
votes
1answer
43 views

JunOS SCU (source class) matching not working on vMX 18

I testing Junos Subscriber Manager on virtual playgroung. All seems fine and work as expected on real hardware. But with dynamic profile with source-class sclass_mytest option not working. If I ...
0
votes
1answer
90 views

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust ...
-2
votes
1answer
20 views

Whether the Speed Auto can have a network speed reach to the switchport top?

My Juniper EX4300 Switch ge-0/0/42 switchport configuration is bellow: admin@1409A# run show interfaces ge-0/0/42 Physical interface: ge-0/0/42, Enabled, ...
0
votes
0answers
146 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
0
votes
1answer
240 views

Configuring Juniper EX2200 Ethernet-Switching

Recently I started configuring an Juniper EX2200 to be used with an fibre optic connection in it's SFP module. The switch itself is online and can ping remote hosts without an issue after setting the ...
-1
votes
1answer
90 views

Virtually no bandwidth via Juniper QFX5100 switch

I have a Juniper QFX5100 with pretty much stock configs. I am using aggregated interfaces between them. When I use a cross over between the servers everything works fine and I get 10GB of bandwidth. ...
1
vote
1answer
73 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
0
votes
1answer
627 views

ISC-DHCPD classes for ZTP (with Juniper)

I'm currently trying to setup a DHCP server to use it in a ZTP environment. My first goal is to be able to upgrade my Juniper devices automatically based on the hardware. What I'm really trying to ...
1
vote
1answer
204 views

Juniper Switches: Extend network without adding new switches to virtual chassis

We have a virtual chassis composed of four EX-3300 48-port switches: One master, one backup, and two linecard, all located in the same LAN closet. All of the switches have uplinks to a Palo Alto PA-...
1
vote
0answers
190 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
1
vote
1answer
672 views

Juniper SRX refuses to add new ip addresses to ARP (unless)

I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8. juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0) I would like to add ...
2
votes
0answers
496 views

How to configure Juniper SSG5 with VLANs and DHCP

I just purchased a used SSG5, upgraded the firmware, and now I'd like to set it up as my Firewall/DHCP/VPN. I'm new to Juniper, so please forgive any blatant missteps in terminology. I am familiar ...
0
votes
1answer
114 views

Why is the 'Move' box always disabled on our SRX 500 running JunOS 12?

I've been trying to determine what has happened with the SRX500's we have at work. They are running JunOS 12 [12.1X46-D40.2]. For some reason the 'Move' box in the upper right of the Security > ...
1
vote
1answer
114 views

QSFP28 DAC cables causing packet loss and framing issues

So the systems I am using are MX960 MPC7e. When I use the 1meter 100G DAC I have zero errors + zero packet loss. When I use the 3meter 100G DAC cables I have packet loss & framing errors. I ...
0
votes
0answers
175 views

Libreswan to Juniper SRX. Tunnel is up and running but nothing is going through

ipsec auto --status says that the connection is established: 000 #544: "VPN":4500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 208s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; ...
0
votes
1answer
55 views

What is the use of the 'exit' statement in a screenOS juniper firewall config?

I want to audit a screenOS juniper firewall. I have been provided with the configuration file, but I am not familiar with the syntax. I am wondering about the 'exit' command. In the config file, most ...
1
vote
0answers
395 views

How to debug tun0 issues with OpenConnect Juniper

I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way: sudo openconnect --juniper -v <my_corporate_VPN_url> I'm doing this from three physical instances of ...
0
votes
0answers
198 views

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
1
vote
0answers
1k views

How to tell Ansible to prompt user for passwd when SSH Key connection fails?

I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team. How do I create a condition that says: when key authentication ...
3
votes
1answer
3k views

Ping works but TCP doesn't in a bit of an unusual topology

I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me. There are two subnets (one is our companys and one is our clients) which reside in the ...
0
votes
0answers
550 views

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
0
votes
1answer
1k views

Get detailed info via snmp from Juniper switch stack for monitoring

I try to get the following information out of the switch stack for monitoring purposes. Here is the command and its output executed directly on the switch stack via ssh login: root@stack> show ...
0
votes
1answer
1k views

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
0
votes
2answers
246 views

How to check part id in Juniper Router?

In Cisco router I am able to see part id's XXXXXX#show inventory NAME: "subslot 0/0 transceiver 5", DESCR: "GE LX" PID: FTLF1318P3BTL-RN , VID: A , SN: PV90L6P But when I execute show ...
1
vote
0answers
217 views

How to set snmp trap threshold

I want to monitor some firewall devices by snmp.Now, I can get cpu info of device by snmp4j. But I have no idea how to use snmp trap to get specified warning and error messages from device. How to set ...
0
votes
2answers
495 views

I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet

I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24)....
0
votes
1answer
149 views

Juniper Netscreen email alert SSG-550M

I'm having some problems configuring email alerts on Netscreen 6.3r22 on 2 SSG-550M in an NSRP group active/active. I'm aware that there are limitations of sending SMTP alerts via mail servers ...
2
votes
2answers
148 views

Testing VPN from same network I want to VPN into

This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it. Right now, I have to walk to a cafe or library to test it and then go ...
-1
votes
1answer
141 views

Does Juniper support linux RDP terminal session?

I have user defined rdp bookmarks on sslvpn but I can't launch that. I get terminal session is not supported. Is there anyway to launch RDP session through vpn? By default it seems it launches Juniper ...
1
vote
1answer
757 views

LACP - Load Balancing Network 2Gbit Ubuntu

I have configured my server as bonding interface to achieve 2Gbit network speed but it seems ubuntu can not go over than 1gbit and the outgoing traffic from server is not balanced over 2 interfaces. ...
0
votes
1answer
941 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
0
votes
1answer
104 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
1
vote
3answers
175 views

How to connect a Juniper EX4500 to netapp X1107A

What is the best and not expensive way to connect a Juniper EX4500 to a X1107A Chelsio PCI Netapp card? Will these do (10GBASE-SR) for both end? and then connect with fiber cable? How important is it ...
1
vote
2answers
91 views

Juniper SRX routing based on network

So, a Juniper SRX 220 in a shared use building. Two networks, 192.168.30.0/24 (The shared use) and 192.168.31.0/24 (the private network). We had once cable modem, and it currently allows only the 31....
0
votes
1answer
365 views

Determine Which IP address is using the most throughput Juniper SRX 220

We have a Juniper SRX 220 firewall, and our ISP provides a readout of our total throughput for times of the day. There is a throughput spike fairly consistently during certain hours and we are trying ...
2
votes
1answer
601 views

Juniper EX3200 connected to Cisco 2900 series router - incomplete ARP entry

I'm tying to connect a Call Manager Express running on a Cisco 2900 series router to a Juniper EX3200 switch. I have both configured on VLAN 4, with both ports in access mode but when I connect the ...
0
votes
1answer
355 views

Juniper VPN - Block connections when on internal LAN

I would like to know if it's possible to block my users from connecting to the corporate VPN when they are on the internal company network. I have users that tend to leave it connected while at work ...
0
votes
1answer
42 views

Remotely remove MAC table entry from Juniper router

In our colocation we have multiple linux servers with a public uplink connected to a juniper MX40 (that we can not control) and an internal link each. Sometimes we get incoming UDP flooding ...
0
votes
1answer
1k views

Malformed Payload recieved from juniper firewall to libreswan while setting up an IPSec Tunnel

I have a CentOS system with libreswan behind a router with static IP, and I have been trying to setup an IPSec tunnel with a server at remote location having juniper firewall. The IPSec VPN settings ...

1
2 3 4 5 6