Juniper IPSEC VPN not established – one possible reason

[edit] LaR3@spoke-vSRX2# run show security ipsec sa Total active tunnels: 0 [edit] LaR3@spoke-vSRX2# run show security ipsec inactive-tunnels Total inactive tunnels: 2 Total inactive tunnels with establish immediately: 2 ID Port Nego# Fail# Flag Gateway Tunnel Down Reason 131073 500 0 0 600228 10.0.23.1 Bind interface’s zone information not available 131074 500 0 0 600228 […]

Compare Junos configuration between two previous commits

[edit] root@P5# set interfaces ge-0/0/5 description “interface 5″ [edit] root@P5# commit commit complete [edit] root@P5# set interfaces ge-0/0/6 description “interface 6″ [edit] root@P5# commit commit complete [edit] root@P5# set interfaces ge-0/0/7 description “interface 7″ [edit] root@P5# commit commit complete [edit] root@P5# set interfaces ge-0/0/8 description “interface 8″ [edit] root@P5# commit commit complete [edit] root@P5# quit […]

Junos: OSPF graceful restart verification on helper node

Graceful restart in OSPF makes uses of OSPF Type-9 LSAs – Link Local Opaque type 3. Quote from Appendix A of RFC 3623 Graceful OSPF Restart: A. Grace-LSA Format The grace-LSA is a link-local scoped Opaque-LSA [2], having an Opaque Type of 3 and an Opaque ID equal to 0. Grace-LSAs are originated by a […]

Juniper vMX (Virtual MX) Router in VMWare ESXi 5.5

The VMX is Juniper’s latest product in it’s virtual products portfolio. Official page is https://www.juniper.net/us/en/products-services/routing/mx-series/vmx/. Update: Juniper Virtual MX (vMX) 14.2R5.3 Phase 2 (RE and MPC on different VMs). At the time of this article, VMX is not released yet, but it can be obtained for beta testing through sales channel so you can request […]

Juniper Zero Touch Provisioning in action on QFX 5100

Juniper ZTP (Zero Touch Provisioning) feature allows us to provision an out-of-the-box Juniper QFX switch without remote hands (to the cli). ZTP can be triggered either after a system factory defaults (>request system zeroize) or by enabling dhcp client on an interface facing the dhcp server or by committing # set chassis auto-image-upgrade . Deploying […]

Juniper ACX: Layer 2 bridge between access interfaces

[edit] admin@juniper-acx# show interfaces ge-0/1/8 flexible-vlan-tagging; encapsulation flexible-ethernet-services; unit 100 { encapsulation vlan-bridge; vlan-id 100; family bridge; } unit 200 { encapsulation vlan-bridge; vlan-id 200; family bridge; } [edit] admin@juniper-acx# show interfaces ge-0/1/5 flexible-vlan-tagging; encapsulation flexible-ethernet-services; unit 100 { encapsulation vlan-bridge; vlan-id 100; family bridge; } unit 200 { encapsulation vlan-bridge; vlan-id 200; family bridge; […]

asdfasa

How to load config from file in Junos

Saving configuration to file in Junos [edit] root@hub-vSRX1# show | save configuration.txt Wrote 280 lines of output to ‘configuration.txt’ [edit] root@hub-vSRX1# save configuration.txt Wrote 280 lines of configuration to ‘configuration.txt’ Loading configuration from a file [edit] root@hub-vSRX1# load ? Possible completions: factory-default Override existing configuration with factory default merge Merge contents with existing configuration override […]