monitor traffic doesn’t show any icmp traffic

If you want to capture some icmp traffic destined for a Junos router by using “monitor traffic“, you must re-think what you are doing. For example you issued the following command and you started ping from another host towards this Junos router. admin@host> monitor traffic interface ge-0/0/1 matching "icmp or tcp" verbose output suppressed, use
Read More »

Quagga and SRX BGP communication

Since the gated daemon, IGP/EGP software has evolved tremendously. I had used zebra long time ago but now to better manage my lab network I wanted to use quagga BGP and OSPF daemons. Quagga is spectacular and its syntax is almost the same like Cisco IOS. After having used JunOS for 2 years, it is
Read More »

Public key authentication in JUNOS

Enabling public key authentication isn’t much different than Linux. You create your public private key and then push your public key to the remote device. Here are instructions; For example you would like to connect from the machine linrouter to the remote junos device. My test devices are Linux and SRX firewall. 1) Create public
Read More »

Port Scanner in Python

Python is a great tool to do some socket operations. I have written a piece of code by which I can scan a port range. It is very basic and missing bunch of checks as aim is the simplicity here. #!/usr/bin/python import socket,sys try: sys.argv[3] except: print "Usage: port_scanner.py [hostname|IP] [port_start] [port_end]" sys.exit() host =
Read More »

VIM syntax highlighting on SecureCRT

My SecureCRT terminal window wasn’t displaying ANSI colors which was really annoying me. To be honest I dislike procrastination and finally I have enabled ANSI colors:) In Ubuntu installing “vim” package is sufficient I suppose. In other distributions you may have to install supplementary packages. Here are the possible steps; 1) Set your terminal to
Read More »

SRX for beginners

I was thinking if I should write a short article for beginners to quickly configure an SRX firewall. I don’t know how many people will find it useful but I hope it will be for those who use SRX for the first time in their life. Let’s get started. Our topology in this tutorial is
Read More »

NSM Cluster operations & Tuning

I would like to share some of my experience about NSM High Availability service management and tuning of NSM server.  I have gathered a list of items;   1)      Interpretation of HA status command 2)      Relocating NSM services 3)      Troubleshoot NSM DB backup process and syncronization of non-db files 4)      Synchronization of NSM db manually
Read More »

How to uninstall NSM

If you would like to remove NSM(Network & Security Manager) related software packages and disk files to do a fresh install, the following command does this; rpm -qa | grep netscreen | xargs rpm -e ; rm -rf /usr/netscreen/* /var/netscreen/* It removes rpm packages containing “netscreen” and then deletes everything under default installation directories /usr/netscreen/
Read More »

Why is BGP route not advertised?

There may be several reasons why a BGP route isn’t advertised to its eBGP neighbor in JUNOS. I was doing some tests and noticed that one of my routes 172.16.10.0 isn’t advertised to its neighbor. Show route indicates that route is also learned via OSPF as well due to my crap topology at the moment:)
Read More »

Archiving junos configurations

There is a very handy feature in junos which you may find very useful if you have lots of junos devices. JunOS can send your active configuration after every commit to a configured remote destination server by using scp,http or ftp protocols. A small configuration is sufficient to achieve this. For example with the configuration
Read More »