On 02. april 2018 21:00, Chris Adams wrote:
Working on a new MX204, I noticed this:
user@router> request vmhost power-o?
Possible completions:
power-offPower off the software on RE
power-on Power on the system
Really? The RE VM can tell the VM host to power ON? :
On 05. april 2018 10:44, Saku Ytti wrote:
Since of the fathers.
'Cisco did it'.
I also see no value in it.
Don't we all love that "linux" changed from eth0, eth1, eth2... to
beautiful stuff like wwp0s20u4 and enp0s25...
Just call them port-x/x/x and be done with it.
/Ola (T)
___
On 11. april 2018 11:31, Saku Ytti wrote:
On 11 April 2018 at 04:31, Chris via juniper-nsp
wrote:
Since the MX104 has user replacable RE's I really wish Juniper would at
least offer a different option with a more beefy CPU/RAM but I don't think
that would ever happen...
I think JNPR believes
On 11. april 2018 12:51, Saku Ytti wrote:
On 11 April 2018 at 13:43, Ola Thoresen wrote:
We have recently started playing with MX204 and Junos Fusion, and that makes
a really nice setup.
With either EX4300 (for 1G) or QFX5100 (for 10G), you get a lot of ports and
a great routing engine for
vlan (interface xe-100/0/0.100, vlan
100 on a MX204 with a QFX5100 as satellite) and a remote MX80 a few days
ago, and it worked flawlessly.
Rgds.
Ola Thoresen
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman
On 25. mai 2018 20:37, Roger Wiklund wrote:
Juniper sold Junos Pulse and that became Pulse Secure.
The SRX300 supports SSL VPN but requires the third party NCP client (not
free).
Well.. That "SSL-VPN" is not really SSL-VPN. It is simply dynamic IPSec
over tcp port 443, wrapped in a GUI on t
Hi,
Juniper has a few different licensing-schemes, some of which are trust based.
They have licences that are paired with the serial number, which will not
install on a different device than it was purchased for.
This is typical for subscription and time limited licenses.
Then they have some
On 08. aug. 2018 11:44, sameer mughal wrote:
Hi,
Can anyone help me to configure static NAT bidirectional?
It is pretty straight forward:
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-nat-static.html
Rgds.
Ola Thoresen
nLogic AS
urity zones and
rule-sets and rules to suit your setup.
On Wed, Aug 8, 2018, 3:27 PM Ola Thoresen <mailto:o...@nytt.no>> wrote:
On 08. aug. 2018 11:44, sameer mughal wrote:
> Hi,
>
> Can anyone help me to configure static NAT bidirectional?
It is
On 15. aug. 2018 12:36, Nathan Ward wrote:
Hi all,
Anyone know how to make an SRX (SRX300, branch thing), accept default routes
from an IPv6 RA?
It should work if you add your external interface under "protocols
router-advertisement" and make sure you allow router-advertisments in
your fire
On 15. aug. 2018 13:38, Nathan Ward wrote:
I’ve updated those to match in case it cared for some reason, still no dice.
Never tested it with a 300, but it did work fine with vSRX last time I
did it.
My 300 is connected to a IPv4-only network at the moment (shame on my ISP!).
It doesn’t ma
I believe the usb console is disabled by default, and you need to use a
regular (rs232) console cable for the initial configuration. At least it
was set up that way in earlier releases.
You can then enable the USB console in the configuration.
On 2 December 2018 11:03:59 Mohammad Khalil wrote:
Not that I am in any way authoritative... And I think Juniper has
official guidelines, but these might be a bit conservative. Depending on
your config and feature sets.
But I would at least suggest doing a few steps.
13.2 to 15.1 should be ok - skipping 14.
15.1 to 17.1 (and probably even 17
My point is only that they made a _lot_ of changes to the underlaying
systems between 12/13/14 and 15 (as far as I understand it 15 is
basically forked from 12, so changes done in 13 and 14 are not
necessarily in 15). But they still changed a lot, especially the whole
change from running as a
Hi,
File a JTAC problem report, either yourself via a Juniper Partner (where
you should have support for your devices).
Rgds.
Ola Thoresen
On 15.06.2020 08:15, Baldur Norddahl wrote:
Hello
What am I supposed to do with glaring bugs? Are Juniper interested in
knowing those or don
posting it, it is not translated,
but unfortunately the receiving end does not seem to understand the
"Content-transfer-encoding" header, and simply parses the data as it is
received.
Is there any way to tell the curl-library NOT to translate the content?
Rgds.
Ola Thoresen
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
s14.1/topics/task/installation/junos-continuity-software-package-installing.html
Rgds.
Ola Thoresen
nLogic AS
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
On 18. mars 2016 16:52, Raphael Mazelier wrote:
Hi folks,
Say I have an public IP on a interface in a VRF on a EX4550.
I can have miss something, but I do not find how placing a good filter
to protect the RE to be reach via this IP.
I've test setting a loopback with the filter on the vrf, or
f the config is
allowed.
Rgds.
/Ola Thoresen
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp
ming back.
On a local network the two statements are identical.
You don't have a "route" to the host, as you expect it to be directly
connected, hence the reply "no route to host" when you don't get an
arp-reply.
Rgds.
Ola Thoresen
___
On 08. jan. 2018 12:10, Saku Ytti wrote:
On 8 January 2018 at 12:58, Benoit Plessis wrote:
I can SCP any binary i want on any JunOS platform i own (EX,SRX,QFX),
QFX 5100 let you run arbitrary VM !
Pretty sure Gert meant that the binaries need to be signed since maybe
last 10years.
But I thin
On 01. feb. 2018 14:04, Martin T wrote:
Hi!
"version" statement in SLAX script is mandatory and argument for
version statement has to be either 1.0 or 1.1. Based on my testing,
1.2 works as well for example in Junos 16.1R2.11. However, is there
any difference between "version 1.0" and "version
On 20. feb. 2018 11:10, Imran Kamal wrote:
Hi all,
Can anyone please confirm once I enable "IPv6 Flow mode", do I need to
reboot both SRX 58K boxes at the time or one after another?
The firewall cluster in production and we can't afford any outage window at
the moment
I have not tested it o
On 25.10.2023 19:20, Richard McGovern via juniper-nsp wrote:
Crist, not quite 100% accurate. Perpetual License are permeant and last
forever, but with newer Flex License structure also require a SW Support
Contract. Subscription based licenses of course expire at end of the
subscription date,
Hi all,
I am currently investigating the use of 1G and 10G optics on the MX304.
This requires a QSA adapter -
https://mellanox.my.site.com/mellanoxcommunity/s/article/all-about-qsa-adapter
- That is fine.
But then I hear people telling me that there is a known limitation when
using these ad
On 03.11.2023 16:04, Chris Wopat wrote:
We use them on MX304 at 10g, primarily to get DWDM SFP+ to work. MTU
is fine, it's 9k as a part of LACP on a recent deployment. The adapter
simply passes through lane :0 to the port when configured as QSFP+. If
you insert the adapter and no optic, the de
On 03.11.2023 16:37, Eduardo Lopes de Haro wrote:
Hi,
Here is the public documentation of MX304 mentioning the MTU
limitation for 1G:
https://www.juniper.net/documentation/us/en/software/junos/interfaces-ethernet/topics/ref/statement/speed-gigether-options.html
* On MX304 for 1G interface
For IP feeds the limits are quite big.
But be aware that for e.g. URL feeds there is a limit of 1000 or 1500 urls in a
single feed and platform limits for the total number of Urls.
https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/security-utm-custom-ob
This is fun...
> show version
(...)
Model: acx7348
Junos: 23.4R1-S1.11-EVO
> show lldp neighbors*//*
^
'neighbors ' is ambiguous.
Possible completions:
neighbors Show LLDP neighbor information
neighbors-vlan-name-tlv-list Show list of Vlan-Name in the LLDPDU of
the interface
29 matches
Mail list logo