Junos - Tag - Fryguy's Blog

New Network Tools Section

Fryguy — Sun, 12 Apr 2026 21:29:42 +0000

I have been meaning to put together some network tools for a while now, and I finally got around to it. I added a new Network Tools section to the site with eight tools that I find myself needing on a regular basis. They all run in the browser – nothing gets sent to a server, they either do the math locally or call a public API directly.

Juniper SRX Password Recovery

Fryguy — Thu, 28 Sep 2017 12:00:03 +0000

I can imagine that is how I looked when I got my “new” Juniper SRX from (insert favorite auction site) and booted it the first time. All ready to play with my new toy – lab some new ideas – and boom, it has a password on it already. Grrrr…. Since I had to recover the root password, figured I would post the procedure here in case others are looking for it. Not only in case others are looking for it, the next time that I need it as well! 🙂 So the first thing we need to do here is to make sure the device is powered off and we have a console cable connected to it. I will assume you know how to use your terminal program and access the console already for this post otherwise I suspect you would not be here. Now that you are connected we can go ahead and power the SRX on and watch it boot. In order to boot the system into single user mode, we need to press the space bar when prompted. It will be right at this point in the boot process – right when you see _Hit [Enter} to boot immediately, or space bar for command prompt. _Here you need to press the SPACE BAR quick to interrupt the boot process.

FreeBSD/MIPS U-Boot bootstrap loader, Revision 2.5
(slt-builder@slt-junos15.juniper.net, Tue Apr 2 12:36:46 PDT 2013)
Memory: 2048MB
[0]Booting from nand-flash slice 1
Un-Protected 1 sectors
writing to flash…
Protected 1 sectors
Loading /boot/defaults/loader.conf
/kernel data=0xb99284+0x13c8b4 syms=[0x4+0x91b00+0x4+0xd5dfb]

Juniper Junos Genius – Relaunched

Fryguy — Thu, 31 Aug 2017 12:15:59 +0000

A few days ago I received an email from Juniper that Junos Genius had been relaunched. If you have never used the old version, no worries as I rarely used it as well. With the new version, you have to setup a new account anyway. This re-launch however, looks a bit more interesting as it is more geared towards online classes and training and education. In fact, you can actually purchase real courseware (very limited at launch) on this site and attend a “virtual presentation” of the material. There are two variants of Junos Genius available. One is free and comes with limited content, the other is subscription based and has some additional content. You can access the new Junos Genius at www.junosgenius.net. Besides just the web interface, you can also get an iOS (iPad and iPhone) and Android app to help you learn wherever or whenever you want. [slideshow_deploy id=’4993′] The Free version grants you access to some practice tests (JNCIA-Junos, JNCIS-ENT, and JNCIS-SP), over 80 learning bytes (short and concise video tips), and hardware overview and deployment courses. While the content is still limited, it is a nice start and looks to have a promising future. [slideshow_deploy id=’4968′] I took a brief look at the free practice tests and was pleasantly surprised. There were 65 questions in total that reflected what one will find on the actual test. They were presented in a similar way to the actual test and do test your knowledge (I got a bunch of Binary questions, yech!). If you are planning to take any one of those tests soon, the free version can help you gauge yourself on the material that is tested. I also took a look at one of the free Learning Bytes, _Route Sharing on Junos Devices Using RIB Groups._ It can be a complicated to understand at first and is one that many have a problem with. I was impressed to see it as one of the free Learning Bytes. I won’t go into detail as to what it is, I will save that for to watch and learn on Junos Genius (or perhaps a future blog post). It was nice to see it there – it can be a tough one for people to grasp. The subscription model is available in 6-month and 12-month options currently priced at $200 and $250 respectively. The subscription provides you with an additional 80+ Learning Bytes (160+ in total) and additional JNCP practice tests (JNCIS-SEC, JNCIS-SDNA, JNCIP-ENT, JNCIP-SP, JNCIP-SEC, and JNCIP-DC). There are plenty of free preview videos for the paid courses, so you don’t have to go blindly to see what is available. They play the first few minutes of the video for you to see what they cover. From looking around, it is easily worth the $250/yr for the content if you want to learn new Juniper skills. [slideshow_deploy id=’4969′] Also, if you are planning to take any one of the mentioned JNCIS ($300/test) or JNCIP ($400/test) tests, spending the $200 or $250 for this subscription is not a bad option to help ensure you are ready. While they won’t guarantee a pass, the tests should help you gauge your level of competence and readiness for the test. Lastly, there are some actual courses that you can purchase on Junos Genius. These are separate from the Plus subscription, these are actual classroom type courses. Currently, they offer:

[slideshow_deploy id=’4971′]

All these courses are the full courseware you would get if you attended in-person training and you also do get access to the labs remotely for the course. The prices for these courses is $5 more than attending an instructor-led course of the same title. One other important item to be aware of is that you only get access to the courseware for 30 days and 20 hours of lab access. You do not get any physical books, everything is delivered via the Junos Genius portal.
In my opinion that is very odd – the price is actually $5 more for the recorded content for some reason. The 30-day limitation on course access and 20 hours of lab access seems a bit light to me as well. I hope they consider extending the access to at least 120 days and increase the lab time to 40 hours. I also do not know how they course books are delivered; are they secured PDF; are you able to also order them if you want? I do not know the answers and if I find out I will be sure to update the post.
Overall though, if you want to learn Juniper or increase your Juniper skills, I would be sure to go and sign up for Junos Genius and kick the tires. I would focus on the free courses if you are starting out, and subscription if you are going for JNCIP level certifications and knowledge.
Update Sept 2017 – Juniper reached out to me on the price difference. The list price of Juniper classes is $2400. There is a training partner that discounts their classes by $5 and that is why we see the price difference.

Juniper Networks 2015 Innovation Showcase

Fryguy — Mon, 06 Apr 2015 13:00:55 +0000

The other week (3/11/15) I was invited by Juniper Networks to their Sunnyvale, CA HQ location to particiapte in their 2015 Innovation Showcase. I have participated in Tech Field Day events in the past so I had an understanding of what to expect but what Juniper did blew me away – it turned out that this was the launch event for their new QFX10000 series switches, the Converged Supercore Architecture based on the PTX, and Express Path for their SRX5000, and ultimately their Q5 ASIC chip.

QFX 10000

The QFX10000 is Juniper Networks latest addition to Data Center networking and it comes with Juniper Networks latest purpose-built ASIC -the Q5. The Q5 chip enables unprecedented performance, port density, and scale as can be seen in the QFX 10000. What is also very interesting is that the Q5 chip uses Memory Cube technology, something that is not found in merchant silicon. The QFX10000 is a high density spine switch optimized for the Data Center (or as many call it, “the cloud.”) How high density? If you look at the image above you will see an image of the QFX100002–72Q switch. Those are 72 – 40 GbE ports in that 2U switch! That equates to 288 – 10 GbE ports! Not enough bandwidth for you? Well, you can also order these boxes with 24 – 100 GbE QSFP28 interfaces instead! That is some serious bandwidth options right there! Still not enough for you? You can get these switches in a chassis design – 8–slot and 16–slot chassis options are available. The 8–slot chassis will support up to 1152 – 10GbE ports and the 16–slot will support up to 2304 – 10GbE ports! You can find out more about the QFX 10000 here – JUNIPER QFX10000. For more information on the Memory Cube / 3-D Memory technology, there is an great post by Chang-Hong Wu on the Juniper forums – 3-D Memory.

Juniper Password Recovery

Fryguy — Thu, 07 Aug 2014 17:17:47 +0000

I recently purchased a Juniper J2320 from eBay for a fair price. I know it is an older router, but it has the features I need in order to test and write a few things. When I received the router it was not sent with a wiped config, so I was unable to log into it upon booting. Since I need to recover the device, figured might as well write and share how to do it! Obviously the first thing you will need will be a Serial connection to the device. I am assuming you have a USB -> Serial adapter, if not this is the one I have and I got it from Amazon here LINK. 1. Make sure the power to the device is turned off. If it is turned on, please use the power button to force the system to shut down cleanly. If you do not do this and just yank the power, you risk corrupting the OS and having more fun later.

Junos – Workbook Volume 1 – Full

Fryguy — Mon, 13 Jan 2014 13:00:22 +0000

Ok, you have survived all my individual posts and now, finally, the whole workbook in PDF format. You can find it…. CLICK HERE If you are looking for more information, I have recently published a 500+ page JNCIE Enterprise prep guide via LeanPub. You can find more information about that workbook at this link – http://www.fryguy.net/2014/10/31/jncie-ent-prep-guide-has-been-published/. [][1]

Junos – Route Filtering

Fryguy — Fri, 10 Jan 2014 13:05:57 +0000

And now the final post before the whole workbook is posted, Route Filtering

Ok, lets discuss Route Filtering in this lab, and to keep is simple, we will use eBGP for the routing protocol. For this lab we will need to create another loopback on R4 for 44.44.44.44/32.

The goal of this lab is in 3 parts.

Junos – System Services

Fryguy — Wed, 08 Jan 2014 13:05:42 +0000

Now to talk about some of the system services. Services like NTP, Telnet, SSH, SNMP, Monitor and LAG interfaces. This is a biggie!

There are a few services that I wanted to cover but wanted to wait until near the end. The reason for waiting is that I wanted you to focus on the configuration on the protocols and not so much the access and supporting features. Plus, having a routing protocol configured simplifies the testing of these commands.

Junos – NHRP

Fryguy — Mon, 06 Jan 2014 13:05:04 +0000

Ok, now we can reset back to some basic stuff – NHRP or VRRP!

Before beginning, reset all configs back to rescue/base.

Junos only supports the standard NHRP, VRRP. For this lab we will configure a VRRP address of 192.168.23.23 on the link between J2 and J3. We will then PING that address from R4 to validate traffic. In order to test failover, we will deactivate an interface on J2 (Master VRRP) and check that J3 is now the active VRRP device.

Junos – eBGP Juniper to Cisco (and some MD5)

Fryguy — Fri, 03 Jan 2014 13:05:34 +0000

Ok, time for some eBGP between Cisco and Juniper

Before we begin this lab, reset all the configs back to the rescue/base before beginning.

Ok, let’s configure our J1-J2-J3 OSPF Configuration.

J1: