Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Mon Oct 16, 2017 7:40 pm


News News of Junos Tips & Tricks

Site map of Junos Tips & Tricks » Forum : Junos Tips & Tricks


 [ Total topics 16 Go to page 1, 2

Message
 Post subject: MTR / My traceroute in Junos
PostPosted: Tue Mar 17, 2015 12:04 pm 
Junos CLI provide ping and traceroute network troubleshooting commands. It also allows <b>mtr</b> to be run to monitor network path. Run <b>traceroute monitor</b> to acomplish a MTR traceroute to a destination host/ip.










admin@Juniper-vSRXA> traceroute monitor 10.1.1.51

Juniper-vSRXA (0.0.0.0)(tos=0x0 psize=64 bitpattern=0x00) Tue Mar 17 16:01:59 2015
Keys: Help Display mode Restart statistics Order of fields quit
Packets Pings
Host Loss% Snt Last Avg Best Wrst StDev
1. 172.30.1.30 0.0% 221 56.4 57.7 56.3 76.8 1.6
2. ...

Read more : MTR / My traceroute in Junos | Views : 3442 | Replies : 1

Top
 Post subject: Juniper SRX / Junos rescue configuration is not set
PostPosted: Mon Feb 16, 2015 11:42 am 
Juniper devices configuration is saved in files named "juniper.conf.gz" and historical configuratio is saved as "juniper.conf.X.gz" where X is the number of backup configurations saved (max-configuration-rollbacks). Another important configuration role is the rescue configuration which is contained in /config/rescue.conf.gz.

The SRX devices also have a feature called "Reset configuration" which is triggred by the "Reset config" button on front panel. If pressed and released, this button loads the a rescue configuration, a configuration snapshot chosen ...

Read more : Juniper SRX / Junos rescue configuration is not set | Views : 3564 | Replies : 0

Top
 Post subject: Junos: User 'remote' authenticated successfully but no local login-id configured
PostPosted: Mon Jan 26, 2015 12:04 pm 
A common mistake when configuring Junos to authenticate from a radius server is to configure radius server, authentication-order, but not to define a "remtoe" account local to Junos. This "remote" user is used for Junos to map radius successfully authenticated users. Without it, the following logs appear in /var/log/messages:
Jan 26 15:57:25 R1 sshd[12941]: Connection closed by 10.1.1.54 [preauth]
Jan 26 15:57:25 R1 inetd[1175]: /usr/sbin/sshd[12941]: exited, status 255
Jan 26 15:57:27 R1 sshd[12950]: User 'remote' ...

Read more : Junos: User 'remote' authenticated successfully but no local login-id configured | Views : 2492 | Replies : 0

Top
 Post subject: Junos: How to list routing table IDs
PostPosted: Mon Jan 19, 2015 3:53 pm 
Junos: How to list routing instance IDs

Some SRX or MX debugs may refer to routing instance as routing table ID. Example is the SRX ike debugs shown below:

[Jan 15 19:40:08][1.1.1.1 <-> 3.3.3.3] ike_send_packet: Start, send SA = { ad30d893 8225cb50 - 414e8319 944abd60}, nego = 0, dst = 3.3.3.3:500, routing table id = 4
[Jan 15 19:40:08][1.1.1.1 <-> 3.3.3.3] ike_send_packet: Start, send SA = { 6885acfe 77eda4bf - ae964ea7 7c63fda6}, nego = ...

Read more : Junos: How to list routing table IDs | Views : 1127 | Replies : 0

Top
 Post subject: How to search junos configuration option within cli help apropos
PostPosted: Mon Jan 12, 2015 12:34 pm 
How to search junos configuration option within cli

To quickly find a JUNOS configuration option always use "help apropos" operational command. It can be used even if the full junos syntax is not known.

"help apropos" will return a list of configuration mode commands containing the keyword argument.

Here is how to search how to change tcp MSS for all tcp sessions globally in Juniper SRX:

user@srx-junos> help apropos mss
help topic ...

Read more : How to search junos configuration option within cli help apropos | Views : 882 | Replies : 0

Top
 Post subject: Junos system configuration archival is not working over scp
PostPosted: Thu Jan 01, 2015 4:06 am 
Junos system configuration archival over scp does not work if following conditions are not met:
1. the password and username for remote scp server are not correct.
2. the destination directory on destination server is not owned by the scp user or if the scp user does not have appropriate write + execute permissions.

This is easily solved by doing a "chown junos-configs /destination/directory" where "junos-configs" is the user used in junos scp command.

3. ...

Read more : Junos system configuration archival is not working over scp | Views : 3080 | Replies : 0

Top
 Post subject: Junos: How to increase the number of configuration rollbacks
PostPosted: Wed Nov 05, 2014 11:00 am 
http://forums.juniper.net/t5/SRX-Servic ... 396#M19772

Junos max-configurations-on-flash and max-configuration-rollbacks

[edit]
root@junos# run show system commit
0 2014-11-05 12:49:07 UTC by root via cli
1 2014-11-04 10:56:06 UTC by root via cli
2 2014-11-04 10:50:21 UTC by root via cli
3 2014-11-04 09:13:07 UTC by root via cli
4 2014-11-03 11:45:16 UTC by root via cli
5 2014-11-03 11:44:09 UTC by root via cli
rescue 2014-07-17 07:51:04 UTC by root via cli ...

Read more : Junos: How to increase the number of configuration rollbacks | Views : 1561 | Replies : 0

Top
 Post subject: Junos: ping: invalid routing instance `RI0'
PostPosted: Fri Jan 03, 2014 10:11 am 
The following routing instance related error is not a bug, but a configuration mistake:

Here is a routing instance that commits into configuration:
# show RI_0
instance-type virtual-router;
interface ge-0/0/7.770;
interface st0.0;
routing-options {
static {
route 0.0.0.0/0 next-hop st0.0;
}
}
# run show route table RI_0.inet.0

RI_0.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

0.0.0.0/0 *[Static/5] 00:01:33
> via ...

Read more : Junos: ping: invalid routing instance `RI0' | Views : 1898 | Replies : 0

Top
 Post subject: Junos: How to show uncommitted changes and cancel them
PostPosted: Wed Sep 25, 2013 7:30 am 
Unlike other vendors CLI, Junos offers the possibility to enter multiple changes / commands and commit at the end, assuming all command are valid.

To check what has been changed, but uncommited in Junos configuration, go to cli top to be sure you inspect the whole hierarchy and do "show | compare". This will show the candidate configuration (I will discuss this later) and compare it to current commited configuration.

Example:
[edit security screen ids-option ...

Read more : Junos: How to show uncommitted changes and cancel them | Views : 18612 | Replies : 1

Top
 Post subject: Archiving files in Juniper SRX devices
PostPosted: Fri Jul 12, 2013 9:40 am 
The operational "> file archive" Junos command will archive files and compress them optionally.

Although the output of following command shows the current working directory for the user:
Code:
user@srx-220> file archive compress source ?
Possible completions:
  <source>             Path of directory to archive
  COS-config.conf      Size: 151632, Last changed: Apr 16 15:30:14


The actual command does not use the same directory. Example:
user@srx-220> file archive compress source COS-config.conf destination COS-config.conf.tgz
/usr/bin/tar: COS-config.conf: Cannot stat: No such ...

Read more : Archiving files in Juniper SRX devices | Views : 1166 | Replies : 0

Top
 [ Total topics 16 Go to page 1, 2


Last 10 active topics


Memory, Storage, Backup and Filesystems

No new posts FreeBSD: List disk drives and re-scan after adding hot-add disk (in virtual environments)
View the latest post

Routing and dynamic routing protocols

No new posts JUNOS BGP: How to drain a BGP peering router gracefully without bgp session reset
View the latest post

Apache, Nginx, Lighttpd and other web server software

No new posts NGINX: 413 Request Entity Too Large
View the latest post

System administration

No new posts MAC OS X: read image/jpeg EXIF information on command line
View the latest post

Shell Scripting and Programming

No new posts Shell scripting
View the latest post
No new posts AWK: How to replace a newline with actual \n
View the latest post
No new posts How to use $variable in conditional sentences?
View the latest post
No new posts Scan IP range using nmap
View the latest post

Virtualization

No new posts SSH Login to Vmware ESXi with ssh keys
View the latest post
No new posts How to retrieve Vmware ESXi license from ssh shell command line
View the latest post

Login

Username:   Password:   Log me on automatically each visit  

Statistics

Statistics

Total posts 607 | Total topics 977 | Total members 1193



News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO