Category Archives: Networking

JunOS : Upgrade return ERROR: Package signature validation failed. Aborting install.

Experiencing the following error while upgrading JunOS? Verify the signature of the new package verify-sig: cannot validate certs.pem certificate is not yet valid: /C=US/ST=CA/L=Sunnyvale/O=Juniper Networks/OU=Juniper CA/CN=PackageProductionRSA_2018/emailAddress=ca@juniper.net ERROR: Package signature validation failed. Aborting install. This error could be caused by incorrect date and time set on your device (back in time). To validate the current value,… Read More »

JunOS : Upgrade bank is empty or corrupted for FPC 0, please do standard upgrade sequence

Experiencing the following alarm event log on your Juniper EX switch? Alarm time Class Description 2016-01-20 07:12:04 UTC Major Upgrade bank is empty or corrupted for FPC 0, please do standard upgrade sequence This is likely because your switch was running an inferior JunOS version than 10.4r3 and it was upgraded to a greater version,… Read More »

Linux : Finding your public IP from the command line

You are probably used to all these “get my IP” or “find my IP” kind of site, which show your external / Internet IP on a Web page. However you might be facing some challenge if you are on a CLI only kind of machine. Fortunately there is a few ways to find your public… Read More »

JunOS : HowTO upgrade software on Juniper EX/QFX/MX series

Here is a step-by-step procedure how to upgrade the JunOS image on your Juniper EX, QFX or MX device. You may get the JunOS software from the vendor, creating an account and adding your device serial number to it in order to access the software download. It is very important that you use the right… Read More »

JunOS : Versions running on dual partitions are not same

Having the following notification on the console output after booting your Juniper EX switch? WARNING: JUNOS versions running on dual partitions are not same This might have been caused by an incomplete/failed upgrade of JunOS. Either way, unless this is the result of an action made on purpose, it is important that both slices have… Read More »

JunOS : Configuring the QSFP+ uplink ports on EX4300

By default, all QSFP+ ports on the EX4300 chassis are configured as virtual chassis ports (vcp). VC minimal (recommended) requirement is two ports, meaning that two out of the four ports can be used as regular 40 Gbps interfaces and/or for uplink purpose. Let’s assume we want to use the port #0 and 1 as… Read More »

ScreenOS : SSL error accessing the WebUI

If you are using the WebUI to manage your Juniper SSG / ScreenOS device, you probably encountered the following error accessing the page lately : ERR_SSL_VERSION_OR_CIPHER_MISMATCH If you use a browser that allow SSLv3, you will be able to access the device. However as we all know the weakness of this protocol, it isn’t ideal… Read More »

ScreenOS : ERR_SSL_VERSION_OR_CIPHER_MISMATCH accessing WebUI

You probably encountered the following error if you are a fan of using the Juniper SSG/ScreenOS WebUI using a “modern” browser : ERR_SSL_VERSION_OR_CIPHER_MISMATCH Well, since the latest clustered SSL exploits, the vast majority of browsers decided to disable some protocols and ciphers for everyone’s safety. To work around this issue, you may use the following… Read More »

JunOS : Warning aggregated-ether-options link-speed no kernel value

You probably have seen the following on your Juniper JunOS device : dcd[15676]: ae60 : Warning: aggregated-ether-options link-speed no kernel value! default to 0 dcd[1103]: ae60 : aggregated-ether-options link-speed set to kernel value of 1000000000 This mean that your aggregated interface (ae) does not have any link-speed statement. By the book, this statement should be… Read More »

JunOS : Alarm Management Ethernet Link Down

Having the red alarm led on but nothing is wrong with your JunOS powered Juniper device? First, look out what alarm is triggered by issuing the following command :

show chassis alarm

1	show chassis alarm

If absolutely nothing is really wrong, you will see the following alarm : Alarm time Class Description 2016-01-20 07:11:59 UTC Major Management Ethernet Link Down… Read More »