2022 Developer Survey is open! Take survey.

Questions tagged [juniper]

Juniper Networks is a networking technology company headquartered in Sunnyvale, California. They design and manufacture core and edge routers, as well as switches and security devices, most of which run their custom operating system JunOS.

Filter by
Sorted by
Tagged with
0 votes
0 answers
5 views

Juniper SRX 300 REST-api user verification fails

I'm trying to enable REST-api for my Juniper SRX 300 device and I'm going nuts. The main crux of the problem is that whenever I try to make a call to an RPC URL I'm being told that the request is ...
user avatar
0 votes
1 answer
18 views

ScreenOS SSG-320M Source Interface Based Routing

quick question. Couldn't figure this out with even the ScreenOS Bible. Juniper SSG-320M Firewall, Just added an 8port PIM Module(ETH1/0 to 1/7): ETH0/0(Trust) 172.16.1.1/16 ETH0/2(UnTrust) 192.168.0.5/...
user avatar
  • 1
1 vote
1 answer
46 views

Increasing MTU size

Why would increasing the VLAN MTU size cause things to break? We have a customer who wants 2000 byte packets for some reason, so I increased all the physical links to 9216, which didn't cause any ...
user avatar
  • 93
-1 votes
1 answer
17 views

how to enable intervlan between juniper core switch and Cisco catalyst 1000

i have a juniper 4600 core with 2300 Access switches in my VLAN, one of the 2300 failed and replaced with cisco 2300 in one VLAN, DHCP is assigning IP to clients and internet is working fine, the ...
user avatar
1 vote
1 answer
27 views

vlan routing redirected by remote change?

We are replacing a Juniper EX4200 stack with a new EX3400 stack. During the migration, we setup a bridge link between the two so that things that hadn't migrated yet could talk to things that had. ...
user avatar
  • 93
0 votes
0 answers
12 views

How to identify whether device is primary or secondary while implementing configuration on Juniper JUNOS devices

I want to identify whether device is primary or secondary while implementing configuration on Juniper JUNOS devices through ansible. If device is primary then i can commit active configuration to ...
user avatar
0 votes
1 answer
702 views

How to force 1G speed for Juniper QFX5100 10G ports?

I have available a Juniper QFX5100-48S switch (48 SFP 10G ports, 6 QSFP ports) that I cannot join into our network since an SFP DAC 10G cable connecting it to an SFP port on a HP V1810-48G switch does ...
user avatar
1 vote
0 answers
102 views

Freeradius doesn't start when CoS user attributes are configured

I have a problem with a POC, I tried use Freeradius for authentication purpose and assign attributes for users of a broadband network (PPPoE). When I configure the user with this parameters I can ...
user avatar
1 vote
0 answers
338 views

Juniper EX4200-48t LACP on 10GB module not working

I'm new to Juniper products and I bough two older EX4200-48t. I setup virtual chassis and add a few LAGs with LACP. All LAGs on copper connections works fine but on the 10GB module not. The module is ...
user avatar
  • 11
0 votes
1 answer
216 views

Juniper EX4200 Stack with PFSense DHCP (Discover/Offer Loop)

I'm currently struggling with my Juniper Switch Stack. Topology is like this Topology The Client Ports on the Stack are configured as tagged-access with dot1x (multiple supplicant) and they switch ...
user avatar
  • 1
0 votes
1 answer
554 views

Ansible playbook "path specified in src not found"

I am runnning into this message when I do this : ansible-playbook -i inventory junos_config_new.yml --check -vvv ansible-playbook 2.9.9 config file = /etc/ansible/ansible.cfg configured module ...
user avatar
0 votes
0 answers
162 views

Juniper MX traffic shaping - bypass rate limits for just a few destinations

The aforementioned MX router is a BRAS providing access for about 3,000 subscribers, using the 'dynamic-clients' functionality. Each subscriber demux interface gets assigned a specific firewall rate-...
user avatar
0 votes
0 answers
158 views

rsyslog logging based on sending host behind NAT

I have multiple Juniper devices behind one NAT'd IP sending their logs to a single host. On the wire the message looks like this: Dec 4 07:38:31 tor-29-1: dot1xd[1585]: task_connect: task PNACAUTH./...
user avatar
0 votes
0 answers
185 views

Objects in firewall filters on Juniper devices

Greetings and sorry for my English. I'm setting firewall filters on several Juniper SRX3xx appliances running Junos 15.1X49. What I'm actually trying to accomplish is to minimize my future manual ...
user avatar
  • 69
0 votes
1 answer
608 views

JUNOS set system syntax error

I'm trying to enable the web interface on JUNOS 11.4R13.5 (outdated I know) I'm trying to use the command set system services web-management https interface But I'm unable to run it as I get a ...
user avatar
  • 1
0 votes
1 answer
71 views

Subnetting: Access 10.1.0.1 from 10.1.2.1?

Here is the newly configured vlan on my Juniper: vlans { vlan1 { vlan-id 3; l3-interface vlan.1; } } interfaces { vlan { unit 1 { family inet { ...
user avatar
2 votes
2 answers
4k views

Set Putty Window Title Dynamically to Hostname

Is any way to dynamically change the window title within Putty when jumping between devices? The majority of my work is on Cisco/Juniper devices and in order to reach these devices, I use a Linux ...
user avatar
  • 21
1 vote
0 answers
278 views

Juniper SRX300 Maximum BGP routes

I've got a Juniper SRX300 which i'm using to connect to 2 BGP peers. The documentation i've read says this SRX only supports 300,000 BGP routes, so for each peer I created an import policy (based on ...
user avatar
  • 111
0 votes
1 answer
72 views

JunOS SCU (source class) matching not working on vMX 18

I testing Junos Subscriber Manager on virtual playgroung. All seems fine and work as expected on real hardware. But with dynamic profile with source-class sclass_mytest option not working. If I ...
user avatar
  • 69
0 votes
1 answer
166 views

SRX Juniper port forwarding

I am trying to punch a hole through the Juniper to allow access to a rasperry pi web camera running on a DHCP IP address and on port 8081. This is what I tried: set security zones security-zone trust ...
user avatar
  • 113
-2 votes
1 answer
28 views

Whether the Speed Auto can have a network speed reach to the switchport top?

My Juniper EX4300 Switch ge-0/0/42 switchport configuration is bellow: admin@1409A# run show interfaces ge-0/0/42 Physical interface: ge-0/0/42, Enabled, ...
user avatar
0 votes
0 answers
222 views

Source NAT on Juniper SRX300

I'm having issues setting up the Source NAT on my SRX300 firewall. The firewall is connected to an LC-panel through a fibre optic cable in port 0/6. I have set the public ip on that interface and have ...
user avatar
0 votes
1 answer
310 views

Configuring Juniper EX2200 Ethernet-Switching

Recently I started configuring an Juniper EX2200 to be used with an fibre optic connection in it's SFP module. The switch itself is online and can ping remote hosts without an issue after setting the ...
user avatar
-1 votes
1 answer
222 views

Virtually no bandwidth via Juniper QFX5100 switch

I have a Juniper QFX5100 with pretty much stock configs. I am using aggregated interfaces between them. When I use a cross over between the servers everything works fine and I get 10GB of bandwidth. ...
user avatar
1 vote
1 answer
90 views

Juniper => D-Link => pfSense - how make WAN for pfSense

Ssory for, maybe, stupid question(and bad english), i'm newbie in system administration, but task it is. We have this net scheme - simple view: ISP Gateway || Juniper SRX240H(our gateway) ||...
user avatar
  • 11
0 votes
1 answer
1k views

ISC-DHCPD classes for ZTP (with Juniper)

I'm currently trying to setup a DHCP server to use it in a ZTP environment. My first goal is to be able to upgrade my Juniper devices automatically based on the hardware. What I'm really trying to ...
user avatar
1 vote
1 answer
267 views

Juniper Switches: Extend network without adding new switches to virtual chassis

We have a virtual chassis composed of four EX-3300 48-port switches: One master, one backup, and two linecard, all located in the same LAN closet. All of the switches have uplinks to a Palo Alto PA-...
user avatar
  • 153
1 vote
0 answers
229 views

Separate Azure S2S VPN tunnel per subnet with Juniper SRX

It looks like this question and variants of it are very common, but I have been unable to come up with an answer after a full day researching and testing. I appreciate any feedback! GOAL: In Azure, I ...
user avatar
  • 11
1 vote
1 answer
1k views

Juniper SRX refuses to add new ip addresses to ARP (unless)

I have a juniper SRX340 running as default gateway, I have a linux server (virtual machine actually) running debian 8. juniper ip: 192.168.1.1 Debian ip: 192.168.1.101 (eth0) I would like to add ...
user avatar
  • 703
2 votes
0 answers
720 views

How to configure Juniper SSG5 with VLANs and DHCP

I just purchased a used SSG5, upgraded the firmware, and now I'd like to set it up as my Firewall/DHCP/VPN. I'm new to Juniper, so please forgive any blatant missteps in terminology. I am familiar ...
user avatar
0 votes
1 answer
141 views

Why is the 'Move' box always disabled on our SRX 500 running JunOS 12?

I've been trying to determine what has happened with the SRX500's we have at work. They are running JunOS 12 [12.1X46-D40.2]. For some reason the 'Move' box in the upper right of the Security > ...
user avatar
1 vote
1 answer
175 views

QSFP28 DAC cables causing packet loss and framing issues

So the systems I am using are MX960 MPC7e. When I use the 1meter 100G DAC I have zero errors + zero packet loss. When I use the 3meter 100G DAC cables I have packet loss & framing errors. I ...
user avatar
  • 123
0 votes
0 answers
230 views

Libreswan to Juniper SRX. Tunnel is up and running but nothing is going through

ipsec auto --status says that the connection is established: 000 #544: "VPN":4500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 208s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; ...
user avatar
  • 101
0 votes
1 answer
80 views

What is the use of the 'exit' statement in a screenOS juniper firewall config?

I want to audit a screenOS juniper firewall. I have been provided with the configuration file, but I am not familiar with the syntax. I am wondering about the 'exit' command. In the config file, most ...
user avatar
1 vote
0 answers
513 views

How to debug tun0 issues with OpenConnect Juniper

I'm using OpenConnect in Debian testing to connect to a corporate Juniper VPN, this way: sudo openconnect --juniper -v <my_corporate_VPN_url> I'm doing this from three physical instances of ...
user avatar
0 votes
0 answers
367 views

Juniper SRX345 goes into Recovery Mode on power failure; doesn't come all the way up

So we just purchased and installed a Juniper SRX345 as the edge device for our office network. For various reasons, the power in our office periodically goes down for longer than our 2 minutes of UPS ...
user avatar
  • 467
1 vote
0 answers
1k views

How to tell Ansible to prompt user for passwd when SSH Key connection fails?

I work with a team of network engineers that are scared of linux, and I am trying to create a seamless user experience for my team. How do I create a condition that says: when key authentication ...
user avatar
3 votes
1 answer
7k views

Ping works but TCP doesn't in a bit of an unusual topology

I'll first say that I didn't design this network from the get go, so the topology came as a surprise even to me. There are two subnets (one is our companys and one is our clients) which reside in the ...
user avatar
0 votes
0 answers
632 views

Can Juniper SRX300 act as VPN Client/SOHO Router?

I have a pair of Juniper SRX300 Services Gateway, that I was hoping to use at each end of a VPN Tunnel. I can see how to setup the VPN server-end, but I am trying to find the documentation to ...
user avatar
  • 111
0 votes
1 answer
2k views

Get detailed info via snmp from Juniper switch stack for monitoring

I try to get the following information out of the switch stack for monitoring purposes. Here is the command and its output executed directly on the switch stack via ssh login: root@stack> show ...
user avatar
  • 3
0 votes
1 answer
1k views

IPsec tunnel won't stay up

I have a static IPsec tunnel configured between a Debian cloud server running StrongSwan and a Juniper SRX 210. The tunnel goes up just fine, but it never stays up for long, the longest may be about ...
user avatar
  • 180
0 votes
2 answers
506 views

How to check part id in Juniper Router?

In Cisco router I am able to see part id's XXXXXX#show inventory NAME: "subslot 0/0 transceiver 5", DESCR: "GE LX" PID: FTLF1318P3BTL-RN , VID: A , SN: PV90L6P But when I execute show ...
user avatar
  • 101
1 vote
0 answers
220 views

How to set snmp trap threshold

I want to monitor some firewall devices by snmp.Now, I can get cpu info of device by snmp4j. But I have no idea how to use snmp trap to get specified warning and error messages from device. How to set ...
user avatar
  • 11
0 votes
2 answers
817 views

I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet

I'm new to Juniper and need some troubleshooting help. I have a Juniper SRX100 and a WIN 10 PC connected, but they can't seem to ping each other, although they are on the same subnet (192.168.10.0/24)....
user avatar
  • 1
0 votes
1 answer
204 views

Juniper Netscreen email alert SSG-550M

I'm having some problems configuring email alerts on Netscreen 6.3r22 on 2 SSG-550M in an NSRP group active/active. I'm aware that there are limitations of sending SMTP alerts via mail servers ...
user avatar
  • 143
2 votes
2 answers
164 views

Testing VPN from same network I want to VPN into

This is a general question. I'm building a VPN for my work network on a Juniper SRX firewall, and I need to troubleshoot it. Right now, I have to walk to a cafe or library to test it and then go ...
user avatar
  • 23
-1 votes
1 answer
158 views

Does Juniper support linux RDP terminal session?

I have user defined rdp bookmarks on sslvpn but I can't launch that. I get terminal session is not supported. Is there anyway to launch RDP session through vpn? By default it seems it launches Juniper ...
user avatar
  • 1
1 vote
1 answer
1k views

LACP - Load Balancing Network 2Gbit Ubuntu

I have configured my server as bonding interface to achieve 2Gbit network speed but it seems ubuntu can not go over than 1gbit and the outgoing traffic from server is not balanced over 2 interfaces. ...
user avatar
0 votes
1 answer
957 views

juniper SRX vs Cisco strange VPN error

the IKE seems to fail, and I can not figure out why... here is ike log: Jun 13 10:38:28 No proposal selected in first phase for local=ipv4(any:0,[0..3]=X.X.X.X) remote=ipv4(udp:500,[0..3]=Y.Y.Y.Y) ...
user avatar
  • 703
0 votes
1 answer
120 views

What is the exact Juniper and Cisco router per-packet balancing hash algorithm?

Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
user avatar

1
2 3 4 5 6