Exactly what the title says. I'm interested in what thoughts people have on the ACX7332, ACX7348, and ACX7509. They at least look visually better than the poor MX301.

I'm a bit confused as what they're exactly for. They advertise being hardened and whatnot (at least the 7300s) but I'm unsure what their form factor and features is actually useful for.

Also kinda interested on what people think about them compared to the MX/PTX series.

For Juniper Mist. What's cool about it is you can go to "manage tools" download the .md, pop it into your favorite LLM and create a tool that you can then add back to the browser extension very easily. It does not do POST operations, for that you need my other tool, Provisionbox. https://github.com/InterconnectedSystems/mist-toolbox Hope it is useful to someone.

Hello everyone,

I am facing a RADIUS authentication issue between a Juniper QFX5120 and Cisco ISE.

When I try to SSH into the switch, authentication fails. A packet capture (monitor traffic) clearly shows that the QFX sends the Access-Request and receives an Access-Accept back from ISE. Despite receiving the Accept packet, the switch ignores it and logs No valid RADIUS responses received.

QFX Configuration:

set system authentication-order [ radius password ]
set system radius-server 10.x.x.x secret xxx
set system radius-server 10.x.x.x source-address 10.y.y.y
set system login user remote class super-user

I am sending the following VSA in the response. I suspect the data type or format might be causing Junos to drop the packet:

• Attribute: Juniper-Local-User-Name
• Value: remote

QFX Logs:

Oct 15 17:27:55 QFX sshd: PAM_RADIUS_SEND_REQ_FAIL: Sending radius request failed with error (No valid RADIUS responses received).
Oct 15 17:27:55 QFX sshd[93694]: error: PAM: authentication error for userName from 10.z.z.z
Oct 15 17:27:55 QFX sshd: SSHD_LOGIN_FAILED: Login failed for user 'userName' from host '10.z.z.z'
Oct 15 17:28:00 QFX sshd[93694]: Disconnected from authenticating user userName 10.z.z.z port 1835 [preauth]

Has anyone experienced this specific drop behavior or know if the ISE VSA format requires a specific tweak for Junos PAM module? Any help is appreciated.