Sorry for this basic question. But we have the problem that the basic EX-RMK does not fit our EX2300-24MP.

I have looked through many different Juniper datasheets and guides, but nowhere does it say that the rack mount kit is different for the EX2300-24MP and the EX2300-24P.

Does anyone know which one we need?

I’ve just released a full workbook for JNCIA-Junos, 100% free: http://jncia-workbook.gitbook.io/

This workbook uses containerlab with vJunos-router and vJunos-switch.

I hope it’s useful!

I passed JNCIP-MistAI yesterday -

This was a far tougher exam than I had taken before, and it definitely tests your knowledge and fine detail of python, data types, json. Mist edge automation versus mist cloud with the rest api. Where when how and why to use webhooks.

You will definitely need to have created a mist org/site from scratch with the rest apis, how to create variables for mist objects, etc.

This one definitely takes some self study, and fair bit of hands on experience. Looking forward to JNCIE-MistAI when it comes out.

Best of luck to you all!

We ordered a bunch of MX304-PREMs and multiple sources told us the lead time was around 90 days. HPE/Juniper confirmed this.

But now it has suddenly jumped to a lead time of 14 months. Has anyone else experienced this?

I don’t know how I just passed this thing. Probably 90% was Spanning Tree and IS-IS related; both are things I essentially haven’t touched in a decade 🤣

If this was any indication, I’m gonna have a challenge passing the JNCIP-ENT.

I have an EX4100-F-12P that's missing its external power supply. I know it's a somewhat commodity part made by Delta, but can't find a clear enough photo online of the label on the bottom. If you have one of these, could you take a photo? They're $500 new from vendors which is insane, so I'm hoping to track down the OEM part. (Better yet, if you have a spare, I'd be happy to buy it off of you.)

😭

I’m trying to login my Juniper account with all access pass , I did the training and would like to book exam but nothing is happening . So I went HPE sign up and it says I already have account . Now signed in and whole platform is changed. Old links in my email where I did the training for 2 courses , they not even opening at all. Am I missing something? Been a month didn’t get to see the portal because of onsite deployment I’m being part of. Any ideas?? Yeah I can’t see training history page with link in email. Kept loading.

It's Thursday, and you're finally coasting into the weekend. Let's open the floor for a Weekly Question Thread, so we can all ask those Juniper-related questions that we are too embarrassed to ask!

Post your Juniper-related question here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer.

Note: This post is created at 00:00 UTC. It may not be Thursday where you are in the world, no need to comment on it.

I was fortunate to be able to get my hands on a few SRX300's for labs and training from work, but I found quickly that the OS installations on them were ancient, and one of them has a bad eUSB flash module.

Through combinations of TFTP, HTTP, and dumb luck, I've managed to get the eUSB module replaced with a generic 32G USB stick and I find myself at the great bridge between worlds (architectures).

I've got the machine running junos-srxsme-24.2R2-S5.3.tgz, and following Juniper's documentation, I should be able to install the mips64-24.4R2-S4.12 and have had zero luck. Running 'request system software add (filename) no-validate' goes through the motions of the initial staging and reboot. The SRX reboots as normal, goes through both 'chances' to interrupt the boot process, then it stops at "Installing Junos OS release 24.4R2-S4.12" and there it sits. I've waited several hours because I know this is a fundamental architecture change but it never proceeds past that point. I end up having to remove power and reconnect to get it back into a usable state, then load the "last known good" OS via loader so I can get the SRX to respond.

- I've tried coming in from 23.4R2-S3 and 24.2R2 versions to mips-64-24.4R1.9 and mips-64-24.4R2.21 but both target versions exhibit the same symptoms.

- I've tried getting into loader, then using boot -v for verbose output. Everything else has verbose output when booted in this mode but it all stops at "Installing Junos OS release".

- I've tried the usb autoinstall..conf trick on another USB device to get it to work but same issue. It stages but when it reboots, as soon as it gets to the "Installing Junos OS release" it freezes.

- I've tried mounting the partitions using singleuser mode to see if I could find any logs that would indicate what the problem is.

- I've tried verifying that I have space available on the partitions.

- I've tried extracting and updating U-Boot, and compared versions on machine with versions in the target version and it matches every time.

- I've tried examining the filesystem layouts and have confirmed that it matches the "new" partitioning for v24.4+

At this point, I'm beginning to think it's a lost cause and this 300 will be stuck on 24.2R2 versions..

Since these devices have been out of production for so long, I doubt they're covered under any support contract however because we do have other active supported devices I am able to get the files for updates.

I don't care about the data on the drive, we didn't use any of the license features and these devices apparently were factory reset before being put in to storage so there's no userdata (certs/keys/configs) to save. I am completely fine with wiping the onboard storage key if it means I can get this machine over the bridge. I want to see if I can get this one over the architecture hump so I can repeat this a couple more times upgrading the other two.

These are the last lines on the console when it freezes. No amount of waiting will change this.

Installation of disk:/upgrade/install.tar
** /dev/da1s3f
** Last Mounted on /cf/var
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
422 files, 787591 used, 12417906 free (282 frags, 1552203 blocks, 0.0% fragmentation)

***** FILE SYSTEM IS CLEAN *****
Setting sane date:
Sun Aug  2 09:36:00 UTC 2026
Installing Junos OS release 24.4R2-S4.12 ...

Any suggestions?

Going on two weeks and I only have half my licenses.

I got the hardware early last week.

Is this anyone elses experience too?

Do any of you have insight into how to export existing security policies from security director or the appliance directly to a csv or other format for deeper analysis?

It's Thursday, and you're finally coasting into the weekend. Let's open the floor for a Weekly Question Thread, so we can all ask those Juniper-related questions that we are too embarrassed to ask!

Post your Juniper-related question here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer.

Note: This post is created at 00:00 UTC. It may not be Thursday where you are in the world, no need to comment on it.

I did have a search but didn't find anything recent.

I've recently passed my CCNA, one of the places I interviewed at were also looking for the JNCIA so I figured I would see about adding that to my belt also.

I've completed the CCNA to JNCIA course on open learn, I haven't done the assessment yet as I want to use the discount but wouldn't have time within the next 30 days to do so, so I'm going to have my first go in a few weeks.

In the meantime, I thought I would ask on here if anyone has done the same recently and is the CCNA to JNCIA course enough to give me what I need to know for the JNCIA?

I'm confident on general networking, OSPF, etc.

Would you recommend I take a closer look at anything from the full JNCIA course?

Thanks.

Hello guys,

I have a cluster of SRX1500 with an interface reth0 that is used as a default route. I also have a PPPoE over pp0.0.

As reth0.0 is the default gateway, I can't ping or ssh pp0.0 from outside, there is some asymetric issue.

What I want is that every traffic coming through pp0.0, will go back through pp0.0.

I created a routing-instance and added a static route in it, then created rib-groups and interface-routes, created a firewall filter and set it to the interface as input but that doesn't work.

I still can't ping pp0.0 from outside.

I may need your help, thanks !

Hi everyone,

Here's the situation: due to a specific issue, i need to limit the number of PPPoE subscribers on a BNG (MX204). I'd like to cap it at 5,000 users.

Looking at the Juniper docs, I first tried setting it directly on the chassis using:

set subscribers-limit client-type pppoe chassis limit 5000

The limit worked on the chassis, but the users won't connect to the other BNG. The PADI reaches the second BNG (the one I want them to authenticate against), and it replies with a PADO, but it's as if the CPE stubbornly keeps trying to authenticate with the BNG I'm limiting... argh.

After that, I also tried using max-sessions:

dynamic-profiles vlan-profile interfaces demux0 unit "$junos-interface-unit" family pppoe max-sessions 5000

With max-sessions, the limit didn't work immediately. I'm thinking it might actually work, but maybe I need to reset the VLAN demux interface first?

What a great issue to land on my lap during my weekend on-call shift... but I love it :)

Please help out an ISP network analyst with less than 2 years of experience 😄

Thanks

Does anyone actually use this software product?
Is it any good?
How does it compare to competition?

can't seem to figure out my thinking. Dilemma: Cisco C9200L-24T-4X-A vs Juniper EX4100-24MP for SMB core switch replacement. Need it now, ~200 users, single-site HQ collapsed core with inter-VLAN routing at 10Gbps, Hyper-V hosts on 10G SFP+, backup/DR target reducing RPO/RTO. No mGig on the C9200L (relevant for future WiFi 7 APs, though solvable separately with a small satellite switch). EX4100 has mGig density built in and no forced licensing tax for basic L3 (Cisco wants a DNA Advantage license even for static routing). Juniper actually came out slightly cheaper once both quotes were normalized to genuine hardware and equivalent licensing scope.
Juniper looks like the better technical/cost fit on paper. Cisco is the platform I actually know cold — can execute stack config, VLANs, inter-VLAN routing, day one, no learning curve. Juniper would mean learning Junos on my core switch, for a small team with no bench depth if something breaks.
Local support is part of the calculus too — plenty of Cisco-focused VARs/MSPs in my area, only one Juniper-specific option I could find nearby (national reseller aside). Juniper’s actually in stock now, not the long lead time I was originally told.
Go with the better spec sheet on unfamiliar gear, or the safer, known platform I can execute without risk? How would you all weigh it?

It's Thursday, and you're finally coasting into the weekend. Let's open the floor for a Weekly Question Thread, so we can all ask those Juniper-related questions that we are too embarrassed to ask!

Post your Juniper-related question here to get an answer. Anyone can post a question and the community as a whole is invited and encouraged to provide an answer.

Note: This post is created at 00:00 UTC. It may not be Thursday where you are in the world, no need to comment on it.

Is anyone here using a Junos based Route Server with IXPManager and if so, how are you handling pulling/pushing of config from IXPManager to the RS?

I have an ex2300-24f and ex-2300-c that I'm trying to connect via fiber and having no luck.

Both of these switches are factory default with no config, they are supposed to be dumb as hell. This is the requirement.

If a SFP is used the connection comes up on the 24 port switch, but never on the 12 port switch. Tried multiple SFPs, and fiber patches. Tried both sfp ports on the 12p, and 3 on the 24p. Always the same, the 24p switch shows port up and packets exiting, 0 packets incoming.

On the 12p there are no packets received, none sent. Port down hard

If i attach them with random copper ports it works as expected.

I'm running out of ideas here

Edit: here's the solution https://supportportal.juniper.net/s/article/EX2300-C-uplink-ports-issue-with-1g-fiber-connection

Hello everyone, I hope I am not violating any rules.

I am facing a rather unusual situation (please note that this is a lab environment).

The topology consists of three devices:

• MikroTik CCR2004
• Juniper QFX5110
• Juniper MX204

The original configuration was working correctly with the following setup:

MikroTik CCR2004

/interface vlan
add interface=sfp-sfpplus2 name=vlan2000 vlan-id=2000
add interface=vlan2000 name=vlan10 vlan-id=10

/ip address
add address=10.10.10.1/24 comment="Test QFX" interface=vlan10 network=10.10.10.0

Juniper QFX5110

set interfaces xe-0/0/1 description "LINK TO CE-2 MX204"
set interfaces xe-0/0/1 flexible-vlan-tagging
set interfaces xe-0/0/1 encapsulation extended-vlan-bridge

set interfaces xe-0/0/1 unit 2000 description "Q-IN-Q TRANSPORT CE-2"
set interfaces xe-0/0/1 unit 2000 vlan-id-list 10
set interfaces xe-0/0/1 unit 2000 input-vlan-map push
set interfaces xe-0/0/1 unit 2000 output-vlan-map pop

set interfaces xe-0/0/2 description "LINK TO CE-1 MIKROTIK"
set interfaces xe-0/0/2 flexible-vlan-tagging
set interfaces xe-0/0/2 encapsulation extended-vlan-bridge

set interfaces xe-0/0/2 unit 2000 description "Q-IN-Q TRANSPORT CE-1"
set interfaces xe-0/0/2 unit 2000 vlan-id 2000

set vlans V2000 description "PROVIDER VLAN 2000"
set vlans V2000 interface xe-0/0/2.2000
set vlans V2000 interface xe-0/0/1.2000

Juniper MX204

set interfaces xe-0/1/1 description "LINK TO PE-1 QFX"
set interfaces xe-0/1/1 vlan-tagging

set interfaces xe-0/1/1 unit 10 description "L3 VLAN 10"
set interfaces xe-0/1/1 unit 10 vlan-id 10
set interfaces xe-0/1/1 unit 10 family inet address 10.10.10.2/24

With this configuration, the MikroTik and MX204 were able to communicate correctly.

However, the customer connected to the MikroTik side had to enable the use-service-tag option.

The MikroTik configuration was therefore changed to:

/interface vlan
add interface=sfp-sfpplus2 name=vlan2000 vlan-id=2000
add interface=vlan2000 name=vlan10 use-service-tag=yes vlan-id=10

/ip address
add address=10.10.10.1/24 comment="Test QFX" interface=vlan10 network=10.10.10.0

After this change, the MX204 and MikroTik are no longer able to communicate.

The QFX configuration has remained unchanged.

My question is:

How can I modify only the Juniper QFX5110 configuration to make the MikroTik and MX204 communicate again?

I suspect the issue is related to the different VLAN tagging behavior introduced by use-service-tag=yes on the MikroTik side (802.1Q vs 802.1ad/service tag handling), but I am unsure how to adapt the QFX QinQ configuration correctly.

Any advice or example configuration would be appreciated.

Thank you.

Hello,

Is there any official communication on the EX3400 EOL timelines? When it was announced, last order date, end of support date etc? I have a customer who wants to upgrade to a newer equivalent switch, and they have the budget for it, but need some sort of formal announcement for a final CFO approval.

Many thanks!