If you were running JunOS v20 or lower, recently upgraded to v21 or above and experiencee SFTP connection failure, this is most likely because you are missing the newly introduced “sftp-server” service subsystem statement in your configuration. Indeed, Juniper introduced this feature starting JunOS v21 for security purposes. Looking at the logs : show log… Read More »
If you are into jWeb, here is how to install a Certificate Authority issued certificate to your JunOS device for jWeb interface. 1. Create a PEM bundle of your CA issued certificate (private key followed by the certificate) 2. Place the certificate on the device filesystem a. Using the shell, “vi /var/tmp/hostname.domain.tld.pem” b. Using SFTP… Read More »
The following error may occur during the JunOS software upgrade process : [Jul 28 15:11:32]: Checking pending install on fpc0 fpc0: Verify the signature of the new package verify-sig: cannot validate certs.pem certificate is not yet valid: /C=US/ST=CA/L=Sunnyvale/O=Juniper Networks/OU=Juniper CA/CN=PackageProductionSHA1RSACA/emailAddress=ca@juniper.net ERROR: Package signature validation failed. Aborting install. This is usually a sign that your Juniper… Read More »
If your Juniper device indicate an alarm status (red light shown on the unit), you can run the following command to find out the details : show system alarm And the following output is shown: 1 alarms currently active Alarm time Class Description 2021-10-19 03:06:00 UTC Minor Autorecovery information needs to be saved This mean… Read More »
While adding a new security zone on your SRX firewall, you may encountered the following error while committing your changes: [edit security zones security-zone VLAN1] ‘interfaces irb.1’ Interface irb.1 must be configured under interfaces error: configuration check-out failed This is a common mistake where the irb interface configuration was forgotten. For those unfamiliar with the… Read More »
If you have a HPE Comware switch stack, you may at some point need to access the CLI of a particular unit member in the stack for troubleshooting purpose. When running a switch stack, when accessing the CLI, the commands will always perform actions on the unit running as “master”, so this easy tutorial will… Read More »
In this article we will cover the procedure to reset a Cisco Catalyst to factory default settings. This will wipe out the current configuration written in flash and also the VLan database file as well. 1. Connect the switch serial console port to a computer and open up a terminal so you can see the… Read More »
The following error message may happen from time to time when attempting to load new software version in Palo Alto Firewall or Panorama : Successfully downloaded Preloading into software manager Error: Image File Authentication Error Failed to load into software manager. Please retry. Post processing failed. Please retry PanOS always do software image integrity check… Read More »
Encountering the following log event on your Juniper MX router? fpc0 qsfp-0/0/0 failed to init hw This could be caused by various factors, such as : Defective FPC Defective PIC Defective transceiver Incompatible transceiver* *I have observed this error on customer equipment when DAC cables were used. The Juniper MX series does not officially support… Read More »
This article will explain how to add a security zone with a dedicated VLan, DHCP scope and DNS proxy rule. For the purpose of this example, we will add a guest zone with the following parameters : VLan ID : 40 Subnet : 10.10.40.0/24 Gateway IP (layer 3 interface) : 10.10.40.1 DHCP Scope : 10.10.40.128/25… Read More »