What are /r/Juniper's favorite Products & Services?

From 3.5 billion Reddit comments

Assuming your computer is running Windows then I'd recommend PuTTY. You'll need to find what COM port your serial port is - Device Manager will tell you - and then set the speed to 9600bps, 8 data bits, no parity, 1 stop bit. This is usually known as "9600 8n1".

A few here and there are fine. It tends to start conversations that generally wouldn't be touched. If you want to be as purist, use lynx instead, and as a bonus, no more ads :)

I think your last paragraph summarized what's up. I've got close to 20 years of networking experience, with only about the last 5 years being only Juniper, and now I am in the Utility space as well in the last 2yrs. Are you going to trade shows, the networking conferences for Utilities? The Juniper NXT Conference is in October in CA. Are you going?

You don't make business contacts overnight, relationships take time to develop. Just like you said you can't progress to higher better paying jobs without actual seat time to even back it up. Being in California, that whole silicon valley thing is where you want to be especially with that cert you got. A ton of .com's run on Juniper gear.

Your first task is going to be to buddy up with your SE from Juniper. Goto lunch with them, pick their brain, ask questions. I am not talking technical, exactly what your asking here, jobs career, seat time, things like that. Ask them about opportunities as well, they know things from their other accounts. Find out who their VAR's are they use for Juniper stuff. Integration Partners is what is out here in the SW, with a few from Torrey Point who moved over when they shot themselves in the foot. Pretty much any VAR who sells Juniper, probably has a staff team to support it as well.

http://www.indeed.com/q-Juniper-Networks-jobs.html

Yes, as long as you are able to create 2 IKE gateways (do you have enough IP?)

JSC do not count in the licenses (yet) but do not allow you as granular features. All you can do is IKEv2 configuration payload.

I like to describe the JCS solution as the technology behind NordVPN or any other Internet VPN providers you may know.

None of the EX4300s we've ever received came with USB console cables. We keep these adapters onsite so we can use the USB ports on our laptop

https://www.amazon.com/StarTech-com-USB-Serial-Adapter-Powered/dp/B004ZMYTYC/ref=sr\_1\_5?keywords=startech+usb+to+serial+adapter&qid=1661349776&s=electronics&sprefix=Startech+usb+to+Serial%2Celectronics%2C75&sr=1-5

Basically just an industrialized version of a simple router with NAT capability.

There are some pretty expensive industrial routers but considering you only really need one to one nat, something like these should do.

https://www.newark.com/advantech/icr-3201/iot-lan-router-gateway-10mbps/dp/81AH4904

https://blackhawksupply.com/products/contemporary-controls-eipr-e-ethernet-ip-router-with-four-port-switch

I assume you have access to the cabinets. You can install one nat device at each cabinet to convert all your robot controllers to a common subnet that you can link back up to the juniper.

SRX is a Swiss Army knife but you’d be better off keeping the translation down at the industrial side of things and not having 1000 lines to commit every time you make a change on your juniper.

I would label/document the hell out of whatever solution you come up with because it won’t be easy to keep track and even harder for others to troubleshoot.

OK... Quick follow-up... THESE do NOT work in the SRX. They produce cam status errors. Ugh. Oh well. At least I know of one type that does work.

I can highly recommend using the Elastic Filebeat agent to receive JunOS syslog data. It has ECS built in, so knows how to map the JunOS events to the filebeat index (e.g you don’t need to write grok patterns to get the data indexed). Filebeat will also run a TCP/UDP listener which you can point your SRX at. Checkout the /etc/filebeat/modules.d/juniper.yml file for more details Juniper Filebeat

I think you might be better off with something like nginx software load balancing for those servers.

https://www.linode.com/docs/uptime/loadbalancing/use-nginx-as-a-front-end-proxy-and-software-load-balancer/

These ones work best for me man https://www.amazon.com/Console-Essential-Accesory-Ubiquity-Switches/dp/B01AFNBC3K - the built in USB ones, really good with drivers.

Also in that default config, itolks like all ports are ready to accept DHCP for the irb interface https://www.juniper.net/documentation/en_US/release-independent/junos/topics/topic-map/ex2300-configuring-junos-os.html

So have you got a DHCP server on your network? In theory it should grab an IP, but it's not the other way around where it has a DHCP server according to that

1. Yes you can plug it into the normal power outlets if it’s an AC PSU. UPS is nice but not necessary. Just make sure and set a recovery config and snapshot once you’re done setting it up.
2. No, you need a rollover cable. They make USB to RJ45 serial adapters for cheap that you can pick up on Amazon. There’s also the usb management port on that where you can use a usb mini(?) with the appropriate drivers installed but I’ve never tried that so can’t say how well it works. Is try that first if I didn’t have a console cable lying around already. Something like this should do the trick.

I didn't know NordVPN supposed IKE2, and I would be happy to collaborate getting this working on the SRX (running vSRX myself at home)

I found a guide for Cisco IOS so this might be doable:

I've never built a VPN to NordVPN, but I would assume you need a certificate from NordVPN and your username would be the eap_identity. You'll need to play around and attempt to get it working.

\

You may try working through this yourself. I've never built one to NordVPN, but I don't see why it wouldn't be possible. Below is a link to Junipers VPN generator. Be sure to select IKEv2 under IKE version.

That may work. I haven't used one like that personally.

I use something like this:

https://www.amazon.com/Plugable-Compatible-RS-232-DB9-Connector-Prolific/dp/B00425S1H8/ref=mp_s_a_1_16?keywords=usb+serial&qid=1574990295&sr=8-16

+

https://www.amazon.com/Cisco-72-3383-01-Rollover-Console-Female/dp/B005S2KPPU/ref=mp_s_a_1_15?keywords=cisco+console+cable&qid=1574990384&sprefix=cisco+co&sr=8-15

This gives you some flexibility to also use it with some network equipment that uses a db9 serial port instead of rj45

You only need one power supplied powered. Two is used to keep one on house power and the other on a UPS, typically, for maximum uptime during power events.

Get something like: https://www.amazon.com/Gopala-Cisco-Console-Cable-cable/dp/B01N0LMWGQ/ref=sr_1_3?ie=UTF8&qid=1545340628&sr=8-3&keywords=usb+console+cable to console in.

And follow this: https://kb.juniper.net/InfoCenter/index?page=content&id=KB6011 to connect.

u/ricosiphone is right about the day one books. For tips and tricks, there are a couple of Day One Cookbooks on Juniper's site. You could also try the book from O'Reilly : https://www.amazon.com/JUNOS-Cookbook-Time-Saving-Techniques-Configuration/dp/0596100140

Never go mPim. Your router always manages to end up in the one spot with shoddy cell service.

Just get yourself a LTE bridge. You can put them anywhere on the property and nice ones have a POE lan connection for remotely powering the bridge.

Example: https://www.amazon.com/NETGEAR-Modem-Gigabit-Ethernet-Ports/dp/B01MQRHQW4?th=1

Forget what I have turned on, followed pretty much what was in one of these books, can't remember which: https://smile.amazon.com/gp/product/0596100140

https://smile.amazon.com/Juniper-Networks-Warrior-Guide-Implementations/dp/1449316638/

They are both pretty good reads for learning juniper stuff. Good for best practices etc.

Amazon... specifically this one:

https://www.amazon.com/gp/product/B01ICEO2U4/ref=oh_aui_detailpage_o00_s00?ie=UTF8&psc=1

I already have the ability to download JunOS as needed, is that all I need or is there a license that needs to be applied? This is very confusing to me and unless I'm missing it there isn't squat on Juniper's site explaining this.