Multicast NAT on Juniper router

I am trying to do source NAT on a J-series router (junos 9.2). I have two separate NAT rules setup (using security policies + source-nat interface). One is for regular unicast TCP connections and the other is for UDP multicasat. The two rules are essentially identical except the match statements. The NAT for unicast works … Read more

Why is my JunOS firewall filter cutting off management access?

We’ve recently installed a second Internet connection so I’ve somewhat successfully configured policy based routing on the edge router which is a Juniper J4350 running JunOS 9.5R1.8. I followed a guide more or less exactly by example (found here: http://community.riverbed.com/rvrb/attachments/rvrb/rvrb-7/2886/1/Juniper%20PBR.pdf) and the PBR routing works outbound, routing traffic from specific ranges inside the LAN out … Read more

How can I disable console password-authentication on a Juniper EX4500 switch?

I am building a system that automatically configures Juniper and Cisco switches from the console based on user input from a web UI. I will have a full-time console connection to these devices; however, on occasion the server must be rebooted… thus forcing the system to respawn the console connections. I want to set up … Read more

Routing between SRX220 and existing network router

I’ve got a Juniper SRX220 that I’m trying to connect between our existing network and the new networks on the Juniper side. However, no matter what static route I try and set, traffic doesn’t cross between them. What I’m trying to achieve is routing traffic from one of the wireless vlans onto the existing corporate … Read more

Is there a Juniper limitation on the number of SA in ‘any to any’ ACL in IKEv1

I’ve connected Juniper SRX5800 and another enodeB device (don’t know the vendor) by an IPSec tunnel. It uses IKEv1 for negotiation of keys. there are 10 ACLs on the enodeB side and on Juniper SRX, I have configured ip-to-any ACLs for all 10 enodeB IP addresses. When in this setup, I observe that only 5 … Read more

Redistribution of iBGP learned routes to all routers?

I am trying to accommodate for a link failure between LB1 (a Linux machine running Quagga) and either PAT1 or PAT2 (Juniper MX80 routers). The following diagram is a canonical version of my network layout: BGP setup: PAT1 and PAT2 each have a eBGP session with ISP1 and ISP2 to announce 199.192.100.0/24. LB1 announces 199.192.100.0/28 … Read more

Juniper Router – Load Balancing

I have a single Juniper router which is connected to multiple external ASs. I am looking to load balancing for best way to automatically move traffic away from one link the others (without hardcoded static routes) and have a few questions about the statements from this source: The forwarding table balances the traffic headed to … Read more

Juniper SRX 240 dynamic VPN soft timeout

I have been struggling with this for over 2 weeks now and tried everything i possibly can. The Dyanmic vpn connection works fine, but the pulse client randomly pop’s up with a password promt and disconnects if the password is not re-entered. I found this KB :http://kb.juniper.net/InfoCenter/index?page=content&id=KB28835&actp=search&viewlocale=en_US&searchid… Basicly it says : When the Pulse Dynamic … Read more

Get detailed info via snmp from Juniper switch stack for monitoring

I try to get the following information out of the switch stack for monitoring purposes. Here is the command and its output executed directly on the switch stack via ssh login: root@stack> show virtual-chassis Preprovisioned Virtual Chassis Virtual Chassis ID: cf44.0df5.1234 Virtual Chassis Mode: Enabled Mstr Mixed Neighbor List Member ID Status Serial No Model … Read more