From EX4450 datasheet I see route capaticy of Ex4550 is 14000
show route
inet.0: 8470 destinations, 12704 routes (5559 active, 0 holddown, 7012 hidden)
My routing table has 12704 entry but only 5559 is active. How many more route able to add my route table?
This limit for total or only for active routes?
14,000-12704 or 14,000-5559 ?
Layer 3 Features: IPv4
Maximum number of IPv4 unicast routes in hardware: 14,000*
Maximum number of IPv4 multicast routes in hardware: 4,000
Hello!
Im a newly examined IT-Operations technician whos currently employed at an consultant companys IT-department, im not a certified Juniper or Cisco technician but my studies have evolved around Cisco and im currently learning Juniper so please be patient with me.
My problem is following:
We are undergoing an exchange of ISP deliverer, we are moving from layer 2 MPLS-OSPF routing to Layer 3 OSPF routing with Cisco virtual routers that our ISP handles.
We have EX-3300 and EX-3400 switches on our offices that are routed threw our ISP routers to our datacenter.
We have a non-segmented server network with a /23 address where a CentOS client named NedI currently is present.
The primary interface leading to our ISP is configured with a routing instance to the Virtual router (Configuration will be present below), and we have routing to a loopback interface lo0 wich we would like to use for SNMP discoveries.
Allt the ports are open and i can PING the loopback interface from the CentOS client, and ping the CentOS client via the loopback interface.
I can reach the Switches that are still on MPLS with our Fiber-provider.
All help is appreciated.
Configuration:
root@SW01> show configuration snmp
community public {
authorization read-only;
routing-instance ***-Data {
clients {
***.***.8.1/32;
***.***.8.2/32;
***.***.8.3/32;
***.***.8.4/32;
}
}
}
routing-instance-access {
access-list {
*;
}
}
{master:0}
root@SW01> show configuration snmp |display set| no-more
set snmp community public authorization read-only
set snmp community public routing-instance 901-Data clients ***.***.1.1/32
set snmp community public routing-instance 901-Data clients ***.***.1.2/32
set snmp community public routing-instance 901-Data clients ***.***.1.3/32
set snmp community public routing-instance 901-Data clients ***.***.1.4/32
set snmp routing-instance-access access-list *
root@SW01> show configuration routing-instances
901-Data {
instance-type virtual-router;
interface lo0.0;
interface vlan.101;
interface vlan.901;
interface vlan.911;
routing-options {
router-id ***.***.***.30;
}
protocols {
ospf {
area 0.0.0.0 {
interface vlan.901;
interface lo0.0 {
passive;
}
interface vlan.101 {
passive;
}
interface vlan.911;
}
}
}
}
902-Voip {
instance-type virtual-router;
interface vlan.102;
interface vlan.902;
interface vlan.912;
routing-options {
router-id ***.***.***.0;
}
protocols {
ospf {
area 0.0.0.0 {
interface vlan.902;
interface vlan.102 {
passive;
}
interface vlan.912;
}
}
}
}
Hi!
Example: https://wiki.hetzner.de/index.php/Netzkonfiguration_Debian/en
I know why they do this but how can I configure something like this (point-to-point) for my own network?
Currently I've set up simple routing (/24 subnet) and all hosts ARP each other.
How do I need to configure the switches / router (all Junos) to secure the network just like Hetzner did (filtering intra-net traffic)?
Just to make sure: I don't want to setup the client, I want to do the same speration they forced (forwarding all subnet traffic to the router).
Kind regards
Kevin
Hi
Being relatively new to Juniper and all things Junos, I was wondering whether anybody here could assist me in understanding these error that I receive on one of my devices almost constantly.
Jul 3 16:00:00 mx-80-u1 newsyslog[13816]: logfile turned over due to size>1024K
Jul 3 16:00:02.161 2019 mx-80-u1 tfeb0 cmtfpc_pic_id_read: ideeprom_read failed for pic 1 on FPC1 err 7 i2c grp 0xa1
Jul 3 16:00:02.162 2019 mx-80-u1 tfeb0 CMT: cmtfpc_pic_id_read failed for FPC 1, PIC 1
I believe that they are in relation to a 20Port MIC that is installed in MIC0, given the reference to FPC1, though the card continues to provide connectivity, for ports that are active.
If it transpires that it is the MIC and it needs replacing, is it as simple as taking the card offline and inserting a new one, or would I need to reconfigure the ports once the replacement MIC is fitted?
Apologies for the newbie questions and I appreciate your time in having just read this. Any assistance is greatly appreciated.
M
Hi guys,
I am deploying MX480 with MIC-3D-20GE-SFP-E, and I am experiencing high rate of faulty MIC-3D-20GE-SFP-E, almost 1/5 of the MIC cards are faulty, I tried remove/reinsert, restart FPC/PIC/Chassis, but error still there.
is it hardware / software incompatibility ?
user1@Router12-re0> show chassis fpc pic-status Slot 2 Online MPC3E NG PQ & Flex Q PIC 0 Online 10X10GE SFPP PIC 2 Present 10x 1GE(LAN) -E SFP- Hardware Error PIC 3 Present 10x 1GE(LAN) -E SFP- Hardware Error user1@Router12-re0> show chassis alarms 2 alarms currently active Alarm time Class Description 2019-07-01 13:33:17 CET Major FPC 2 PIC 3 Failure 2019-07-01 13:33:16 CET Major FPC 2 PIC 2 Failure
User1@Router12-re0> show version Hostname: Router12-re0 Model: mx480 Junos: 17.3R3-S4.2
Hi All,
I am preparing and checking a MX104-40G-AC-BNDL before do the POC to Customer.
I have 5 SFP+ (1 Juniper and 4 Third party) and installing to builtin 10G ports (port 0 and 1 have activated by licenses).
But the SFP+ detail and serial number not showing up.
root@DEMO-MX104> show chassis hardware
Hardware inventory:
Item Version Part number Serial number Description
Chassis AXXXX MX104
Midplane REV 52 750-XXXXXX CXXXXXXX MX104
PEM 0 REV 04 740-XXXXXX 1XXXXXXX AC Power Entry Module
PEM 1 REV 04 740-XXXXXX 1XXXXXXX AC Power Entry Module
Routing Engine 0 REV 09 750-XXXXXX CXXXXXXX RE-MX-104
AFEB 0 BUILTIN BUILTIN Forwarding Engine Processor
FPC 0 BUILTIN BUILTIN MPC BUILTIN
FPC 1 BUILTIN BUILTIN MPC BUILTIN
FPC 2 BUILTIN BUILTIN MPC BUILTIN
MIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+
PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+
Fan Tray 0 REV 03 711-XXXXXX CXXXXXXX Fan Tray
The builtin 10G ports is online
root@DEMO-MX104> show chassis pic fpc-slot 2 pic-slot 0 FPC slot 2, PIC slot 0 information: Type 4x 10GE(LAN) SFP+ Builtin State Online Uptime 1 minute, 26 seconds
No errors showing
root@DEMO-MX104> show chassis fpc errors
Temp CPU Utilization (%) Memory Utilization (%)
Slot State (C) Total Interrupt DRAM (MB) Heap Buffer
0 Online 48 4 0 2048 8 13
1 Online 48 4 0 2048 8 13
2 Online 48 4 0 2048 8 13
Diagnostics optics show the SFP+ capabilities
root@DEMO-MX104> show interfaces diagnostics optics
Physical interface: xe-2/0/0
Laser bias current : 7.136 mA
Laser output power : 0.5690 mW / -2.45 dBm
Module temperature : 41 degrees C / 106 degrees F
Module voltage : 3.2560 V
Receiver signal average optical power : 0.0001 mW / -40.00 dBmThe version
root@DEMO-MX104> show version Hostname: DEMO-MX104 Model: mx104 Junos: 13.3R1.8 JUNOS Base OS boot [13.3R1.8] JUNOS Base OS Software Suite [13.3R1.8] JUNOS Kernel Software Suite [13.3R1.8] JUNOS Packet Forwarding Engine Support (MX104) [13.3R1.8] JUNOS Online Documentation [13.3R1.8] JUNOS Services Application Level Gateways [13.3R1.8] JUNOS Services Jflow Container package [13.3R1.8] JUNOS Services Stateful Firewall [13.3R1.8] JUNOS Services NAT [13.3R1.8] JUNOS Services RPM [13.3R1.8] JUNOS Routing Software Suite [13.3R1.8]
Are my SFP+ working normally ? Or any errors with my SFP+ or my builtin ports ?
Your help would be appreciated. Thanks.
Hello,
By following Juniper document, I can get 1:1 NAT works on Juniper MX204. Unfortunately, there are 2 issues I am facing.
1. Traceroute result from user show asterisk (*) like below output.
Tracing route to google.com [172.217.194.102] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms 192.168.10.1 2 * * * Request timed out. 3 * * * Request timed out. 4 * * * Request timed out. 5 * * * Request timed out. 6 * * * Request timed out. 7 * * * Request timed out. 8 * * * Request timed out. 9 42 ms 42 ms 42 ms 172.217.194.102 Trace complete.
2. When I tried to change IP of the NAT pool, the internet is not working at all. MX does not translate to the new configured IP pool, instead revert back to old IP pool is working. Please advise.
Regards,
I have a defualt route coming into ospf from BGP but then ospf needs to redistribute all routes to BGP to go out to internet.
All ospf routess are in routing table of router but for some reason its not been advertised to BGP.
show configuration | display set | match injectpolicy1
set protocols bgp group ISP export injectpolicy1
set policy-options policy-statement injectpolicy1 term injectterm1 from protocol ospf
set policy-options policy-statement injectpolicy1 term injectterm1 then accept
show configuration protocols bgp
group ISP{
type external;
family inet {
unicast;
}
export [ connected-static injectpolicy1 ];
peer-as *****;
local-as 65500;
neighbor 172.31.255.1;
}
None of the ospf routes are showing up in BGP table.
Hello all
Does anyone know about ACX5048-DC-L2-L3 and ACX5448-X-DC-AFO ARP scaling size? Mac address?
Thank you
Hello,
Is monitor traffic interface lt-0/0/0.0 supported ?
Connection is UAR, ping works to, but this command isn't providing any output, it is some sort of issue or monitor traffic interface on lt and vtep interfaces isn't possible ?
Regards
Hi Guys,
Is it possible to configure 16 or 32 queues on MX port when using MPC3E-3D NG without H-QOS license?
Thank you
Hi ,
Buenas Dias.
I've been trying to enable and make Class of Service to work on our SRX110 , but after 11 hours -still no luck, there something missing with my config .
What Im trying to achieve is to prioritize Voice and video ,traffic for IP Phones, Skype -Teams, Zoom.
Below is my COS config
##################################################
class-of-service {
classifiers {
dscp voip {
import default;
forwarding-class expedited-forwarding {
loss-priority low code-points 101110;
}
forwarding-class assured-forwarding {
loss-priority medium-low code-points [ 100000 100010 100100 100110 ];
loss-priority medium-high code-points [ 010010 010100 010110 ];
}
}
}
forwarding-classes {
queue 2 assured-forwarding;
queue 3 network-control;
queue 0 best-effort;
queue 1 expedited-forwarding;
}
interfaces {
fe-0/0/0 {
scheduler-map normal;
unit 0 {
forwarding-class expedited-forwarding;
}
}
fe-0/0/1 {
scheduler-map normal;
}
fe-0/0/2 {
scheduler-map normal;
}
fe-0/0/5 {
scheduler-map normal;
}
fe-0/0/7 {
scheduler-map normal;
}
}
scheduler-maps {
normal {
forwarding-class expedited-forwarding scheduler ef;
forwarding-class assured-forwarding scheduler af;
forwarding-class best-effort scheduler be;
forwarding-class network-control scheduler nc;
}
}
schedulers {
ef {
transmit-rate percent 15;
buffer-size percent 15;
priority high;
}
af {
transmit-rate percent 15;
buffer-size percent 15;
priority medium-high;
}
nc {
transmit-rate percent 10;
buffer-size percent 10;
priority strict-high;
}
be {
transmit-rate {
remainder;
}
buffer-size {
remainder;
}
priority low;
}
}
}
###################################
When I ran a command show inte fe0/0/x extensive , the only queues thats being utilized are Best Effort 0 and Network Control 3 .
###################################
Physical interface: fe-0/0/7, Enabled, Physical link is Up
Interface index: 141, SNMP ifIndex: 518, Generation: 144
Link-level type: Ethernet, MTU: 1514, Link-mode: Full-duplex, Speed: 100mbps, BPDU Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Disabled
Device flags : Present Running
Interface flags: SNMP-Traps Internal: 0x0
CoS queues : 8 supported, 8 maximum usable queues
Hold-times : Up 0 ms, Down 0 ms
Traffic statistics:
Input bytes : 5377004 25960 bps
Output bytes : 10268451 54824 bps
Input packets: 43511 39 pps
Output packets: 51057 44 pps
Input errors:
Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Policed discards: 0, L3 incompletes: 0, L2 channel errors: 0, L2 mismatch timeouts: 0, FIFO errors: 0, Resource errors: 0
Output errors:
Carrier transitions: 0, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0, FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0
Egress queues: 8 supported, 4 in use
Queue counters: Queued packets Transmitted packets Dropped packets
0 best-effort 49938 49938 0
1 expedited-fo 0 0 0
2 assured-forw 0 0 0
3 network-cont 842 842 0
Queue number: Mapped forwarding classes
0 best-effort
1 expedited-forwarding
2 assured-forwarding
3 network-control
Active alarms : None
Active defects : None
MAC statistics: Receive Transmit
Total octets 6288540 11126861
Total packets 43599 50792
Unicast packets 43598 50792
Broadcast packets 1 0
Multicast packets 0 0
CRC/Align errors 0 0
FIFO errors 0 0
MAC control frames 0 0
MAC pause frames 0 0
Oversized frames 0
Jabber frames 0
Fragment frames 0
VLAN tagged frames 0
Code violations 0
Filter statistics:
Input packet count 0
Input packet rejects 0
Input DA rejects 0
Input SA rejects 0
Output packet count 0
Output packet pad count 0
Output packet error count 0
CAM destination filters: 2, CAM source filters: 0
Autonegotiation information:
Negotiation status: Complete
Link partner:
Link mode: Full-duplex, Flow control: None, Remote fault: OK, Link partner Speed: 100 Mbps
Packet Forwarding Engine configuration:
Destination slot: 0
CoS information:
Direction : Output
CoS transmit queue Bandwidth Buffer Priority Limit
% bps % usec
0 best-effort r r r 0 low none
1 expedited-forwarding 15 15000000 15 0 high none
2 assured-forwarding 15 15000000 15 0 medium-high none
3 network-control 10 10000000 10 0 strict-high none
Interface transmit statistics: Disabled
Logical interface fe-0/0/7.0 (Index 78) (SNMP ifIndex 530) (Generation 143)
Flags: SNMP-Traps 0x0 Encapsulation: ENET2
Traffic statistics:
Input bytes : 5385429
Output bytes : 10309186
Input packets: 43613
Output packets: 51232
Local statistics:
Input bytes : 98573
Output bytes : 223412
Input packets: 943
Output packets: 1123
Transit statistics:
Input bytes : 5286856 34232 bps
Output bytes : 10085774 341600 bps
Input packets: 42670 51 pps
Output packets: 50109 87 pps
Security: Zone: untrust
Allowed host-inbound traffic : ike ping ssh
Flow Statistics :
Flow Input statistics :
Self packets : 1037
ICMP packets : 96
VPN packets : 10664
Multicast packets : 0
Bytes permitted by policy : 2942706
Connections established : 184
Flow Output statistics:
Multicast packets : 0
Bytes permitted by policy : 8921605
Flow error statistics (Packets dropped due to):
Address spoofing: 0
Authentication failed: 0
Incoming NAT errors: 0
Invalid zone received packet: 0
Multiple user authentications: 0
Multiple incoming NAT: 0
No parent for a gate: 0
No one interested in self packets: 0
No minor session: 0
No more sessions: 0
No NAT gate: 0
No route present: 0
No SA for incoming SPI: 0
No tunnel found: 0
No session for a gate: 0
No zone or NULL zone binding 0
Policy denied: 0
Security association not active: 0
TCP sequence number out of window: 0
Syn-attack protection: 0
User authentication errors: 0
Protocol inet, MTU: 1500, Generation: 156, Route table: 0
#################
If you could please guide me to the right track sorting out this COS , really appreciate it
Not giving up on this one , but need your assistance guys.
Thanks in advanced !!!
Cheers,
Ant
I'm trying to figure out the best way to load balance outbound traffic over two ISP links with BGP. We have two separate MX routers that have a link between them running iBGP. We have an ISP circuit from the same provider connected to each router running eBGP. On the ISP end the circuits are also connected to different routers. We currently import the default route only on both of our circuits.
Currently, we prefer one circuit for all inbound/outbound traffic, however, we are close to hitting capacity and need to start thinking about load-sharing over both circuits. For inbound traffic I can tweak the prepends for some prefixes to achieve this but for the outbound traffic, I'm not sure how to achieve this. My understanding is BGP multipath is not going to work in this scenario because the circuits are connected to two different routers. Is it possible to do this?
Hello,
I'm currently trying to configure my MX104 router to send jflow traffic to my collector. I'v tried to follow different documentations but I still can't make it work. The scheme is the following one:
My router must collect traffic from interfaces xe-2/0/0 and ge-0/0/0 and send it to Y.Y.Y.Y server, contactable using a specific routing-instance MY_INSTANCE. Using this routing-instance I can ping my collector (and the firewall allow my jflow traffic). The logs are saying some flows and flow packets are exported, and I don't see any errors in my logs. But, in fact, I can't see any traffic corresponding to my jflow arriving on my collector (using tcpdump -i any port 9055). If I try to use a specific routing-instance I get the following error:
[edit forwarding-options sampling instance SAMPLING family inet output flow-server Y.Y.Y.Y routing-instance]
'routing-instance MY_INSTANCE'
routing instance should be defined and should be of type Virtual routing forwarding instance(VRF)But I would like to use my already existing interface and routing-instance associated to avoid using another IP on the same subnetwork to contact my collector.
My configuration is as follow:
set chassis afeb slot 0 sampling-instance SAMPLING # activate sampling logs set forwarding-options sampling traceoptions file sampled set forwarding-options sampling traceoptions file world-readable set forwarding-options sampling traceoptions flag all # configure template set services flow-monitoring version-ipfix template template1 flow-active-timeout 120 set services flow-monitoring version-ipfix template template1 flow-inactive-timeout 60 set services flow-monitoring version-ipfix template template1 ipv4-template set services flow-monitoring version-ipfix template template1 template-refresh-rate packets 100 set services flow-monitoring version-ipfix template template1 template-refresh-rate seconds 600 set services flow-monitoring version-ipfix template template1 option-refresh-rate packets 100 set services flow-monitoring version-ipfix template template1 option-refresh-rate seconds 600 set forwarding-options sampling instance SAMPLING input rate 100 set forwarding-options sampling instance SAMPLING family inet output flow-server Y.Y.Y.Y port 9055 set forwarding-options sampling instance SAMPLING family inet output flow-server Y.Y.Y.Y version-ipfix template template1 set forwarding-options sampling instance SAMPLING family inet output inline-jflow source-address X.X.X.X set services flow-monitoring version-ipfix template template-ipv4 ipv4-template # set interfaces creating jflow traffic set interfaces ge-0/0/0 unit 0 family inet sampling input set interfaces xe-2/0/0 unit 0 family inet sampling input set interfaces ge-0/0/0 unit 0 family inet sampling output set interfaces xe-2/0/0 unit 0 family inet sampling output
Here are (maybe) some good informations:
> show services accounting flow inline-jflow
Flow information
AFEB Slot: 0
Flow Packets: 1739456367, Flow Bytes: 422217491662
Active Flows: 3691, Total Flows: 592499881
Flows Exported: 521256032, Flow Packets Exported: 131663183
Flows Inactive Timed Out: 497118016, Flows Active Timed Out: 95378174
> show services accounting status inline-jflow
Status information
AFEB Slot: 0
IPV4 export format: Version-IPFIX, IPV6 export format: Not set
VPLS export format: Not set
IPv4 Route Record Count: 0, IPv6 Route Record Count: 0
Route Record Count: 0, AS Record Count: 0
Route-Records Set: No, Config Set: Yes> ping Y.Y.Y.Y routing-instance MY_INSTANCE
PING Y.Y.Y.Y (Y.Y.Y.Y): 56 data bytes
64 bytes from Y.Y.Y.Y: icmp_seq=0 ttl=63 time=1.030 ms
64 bytes from Y.Y.Y.Y: icmp_seq=1 ttl=63 time=1.347 ms
> show chassis hardware
Hardware inventory:
Item Version Part number Serial number Description
Chassis AM625 MX104
Midplane REV 52 750-044219 CAFT0946 MX104
PEM 0 REV 04 740-045933 1H176050173 AC Power Entry Module
PEM 1 REV 04 740-045933 1H176050265 AC Power Entry Module
Routing Engine 0 REV 09 750-053342 CAFE2880 RE-MX-104
AFEB 0 BUILTIN BUILTIN Forwarding Engine Processor
FPC 0 BUILTIN BUILTIN MPC BUILTIN
MIC 0 REV 11 750-049846 CAFH5814 3D 20x 1GE(LAN)-E,SFP
PIC 0 BUILTIN BUILTIN 10x 1GE(LAN) -E SFP
Xcvr 0 U NON-JNPR S1LSDQT60100007 SFP-T
Xcvr 4 NON-JNPR PHL0LLH SFP-LH
Xcvr 8 REV 02 740-013111 F460309 SFP-T
PIC 1 BUILTIN BUILTIN 10x 1GE(LAN) -E SFP
Xcvr 4 %' NON-JNPR H21K063 UNSUPPORTED
Xcvr 8 REV 02 740-013111 F461655 SFP-T
FPC 1 BUILTIN BUILTIN MPC BUILTIN
FPC 2 BUILTIN BUILTIN MPC BUILTIN
MIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+
PIC 0 BUILTIN BUILTIN 4x 10GE(LAN) SFP+
Xcvr 0 REV 01 740-011613 S1802239730 SFP+-10G-LR
Xcvr 1 6 I NON-JNPR F820LFE 1270 SFP+-10G-LR
Fan Tray 0 REV 03 711-049570 CAFW0428 Fan Tray
Is there anything I should do to make it work ? I tried making a static route for my Y.Y.Y.Y/32 but it doesn't change anything.
Thanks for your help.
Hi,
I'd been looking for mx104 release 13.3 manual but unable to find it.
Also looking for fw upgrade to 15.1 how to
About natting feature in release 13.3
Isn't static routs advertised by BGP by default?
The neighbour has no export filter on it, only import filter.
set protocols bgp group N1 neighbor 10.10.10.2
set protocols bgp group N1 neighbor 10.10.10.2 import IMP-FILTER
set protocols bgp group N1 neighbor 10.10.10.2 peer-as 12345
But it doesn't redistribute it.
It is advertised on another peer on the same router. Which has an export filter where it specifies to advertise both bgp and static.
Is this something that is needed? Or is it something else that can block it? (It's a quite massive config)
In case that's the default way it works, would this be enough?
set policy-option policy-statement EXP-FILTER term STAT from protocol bgp
set policy-option policy-statement EXP-FILTER term STAT from protocol static
set policy-option policy-statement EXP-FILTER term STAT from protocol the accept
set protocols bgp group N1 neighbor 10.10.10.2 export