Issues with Juniper SRX and Zoom Meetings

[kevins33]

Hey All,

I am experiencing a weird issue, and I can't for the life of me track down what is going on.  Some brief background:

•  I have a Juniper SRX340 running JUNOS 23.4R2
• I join my meeting via my Mac which is a 2023 M3 Pro with 36GB of RAM
• From my Juniper SRX I connect to 2 Arista 7280's in an MLAG setup, which feeds my Arista 720 and Arista C330 AP's
• I am joining all my meeting via Wifi - where my recent speed/bufferbloat test show nearly 1Gbps symetrical and A+ rating for no bufferbloat.

Symptoms:

During my Zoom meetings calls will typically start relatively normal.  At some point during the call, but always within the first 30 minutes, I will start to hear choppy audio and frozen video and I get the message "Your Internet Connection is Unstable".  Ultimately after a few minutes of really choppy audio, the call drops and reforms.  Sometimes this is the end of it, sometimes it isn't and this cycle can go on for 15-30 minutes.

On the network side of things, I look at my logs and I see my port-channel/AE has dropped due to LACP timeout.  This is odd, since there is no queue exhaustion, between the Juniper SRX and the Arista 7280's.  I escalated a case with Arista and it seems to be a Juniper issue.

That being said - Zoom is the only teleconferencing service that causes issues.  I can use Hangouts and Teams without any issues like with Zoom.  Some things I have noticed since trying to track this down:

• Zoom client has created 4 flows for 1 Zoom call.  I don't think this is normal, and may be a side effect of the dropping issue

show security flow session destination-port 8801
Session ID: 167503915625, Policy name: trust-to-untrust/5, Timeout: 24, Session State: Valid
In: 192.168.0.27/57932 --> 144.195.35.200/8801;udp, Conn Tag: 0x0, If: ae0.3, Pkts: 973, Bytes: 119980,
Out: 144.195.35.200/8801 --> x.x.x.x/21336;udp, Conn Tag: 0x0, If: pp0.0, Pkts: 101537, Bytes: 31256905,

Session ID: 167503917921, Policy name: trust-to-untrust/5, Timeout: 24, Session State: Valid
In: 192.168.0.27/65355 --> 144.195.35.200/8801;udp, Conn Tag: 0x0, If: ae0.3, Pkts: 953, Bytes: 117362,
Out: 144.195.35.200/8801 --> x.x.x.x/24698;udp, Conn Tag: 0x0, If: pp0.0, Pkts: 952, Bytes: 108550,

Session ID: 167503918701, Policy name: trust-to-untrust/5, Timeout: 24, Session State: Valid
In: 192.168.0.27/63968 --> 144.195.35.200/8801;udp, Conn Tag: 0x0, If: ae0.3, Pkts: 953, Bytes: 117359,
Out: 144.195.35.200/8801 --> x.x.x.x/21022;udp, Conn Tag: 0x0, If: pp0.0, Pkts: 952, Bytes: 108547,

Session ID: 167503920196, Policy name: trust-to-untrust/5, Timeout: 24, Session State: Valid
In: 192.168.0.27/51674 --> 144.195.35.200/8801;udp, Conn Tag: 0x0, If: ae0.3, Pkts: 48911, Bytes: 28251944,
Out: 144.195.35.200/8801 --> x.x.x.x/4207;udp, Conn Tag: 0x0, If: pp0.0, Pkts: 112652, Bytes: 88112545,
Total sessions: 4

Routing seems to be okay as well

inet.0: 52 destinations, 52 routes (52 active, 0 holddown, 0 hidden)
192.168.0.27/32 (1 entry, 0 announced)
        *Access-internal Preference: 12
                Next hop type: Router, Next hop index: 0
                Address: 0x4cd8d34
                Next-hop reference count: 30, Next-hop session id: 0
                Kernel Table Id: 0
                Next hop: 192.168.0.1 via ae0.3, selected
                Session Id: 0
                State: <Active NotInstall Int NSR-incapable>
                Age: 3w4d 2:37:06
                Validation State: unverified
                Task: RPD Unix Domain Server./var/run/rpd_serv.local
                AS path: I
                Route-nexthop:
                Router (0x4cd8d34) 192.168.0.1
                Thread: junos-main

No drops in queues and the interface is hardly being used

 show interfaces ae0 extensive
Physical interface: ae0, Enabled, Physical link is Up
  Interface index: 129, SNMP ifIndex: 559, Generation: 132
  Description: LAG to Arista 720XP
  Link-level type: Ethernet, MTU: 1518, Speed: 2Gbps, BPDU Error: None, Ethernet-Switching Error: None, MAC-REWRITE Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Disabled, Minimum links needed: 1, Minimum bandwidth needed: 1bps
  Device flags   : Present Running
  Interface flags: SNMP-Traps Internal: 0x0
  Current address: 12:39:e9:59:3b:a3, Hardware address: 12:39:e9:59:3b:a3
  Last flapped   : 2025-09-16 12:49:14 MDT (2w6d 01:36 ago)
  Statistics last cleared: Never
  Traffic statistics:
   Input  bytes  :          63064012289               130904 bps
   Output bytes  :         929159615281               104536 bps
   Input  packets:            246368883                   91 pps
   Output packets:            762012547                   50 pps
  Dropped traffic statistics due to STP State:
   Input  bytes  :                    0
   Output bytes  :                    0
   Input  packets:                    0
   Output packets:                    0
  Input errors:
    Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Giants: 0, Policed discards: 0, Resource errors: 0
  Output errors:
    Carrier transitions: 17, Errors: 0, Drops: 0, MTU errors: 0, Resource errors: 0
  Ingress queues: 8 supported, 4 in use
  Queue counters:       Queued packets  Transmitted packets      Dropped packets
    0                                0                    0                    0
    1                                0                    0                    0
    2                                0                    0                    0
    3                                0                    0                    0
  Egress queues: 8 supported, 4 in use
  Queue counters:       Queued packets  Transmitted packets      Dropped packets
    0                        761204716            761204716                    0
    1                                0                    0                    0
    2                                0                    0                    0
    3                           952646               952646                    0

I don't have CPU grpahs, but I don't see any CPU warnings in the logs, etc...  Hoping someone has seen something like this before and can help out.

TIA

[storyhub]

First make an ethernet connection to bypass wifi issues. Certain firewalls can introduce issues with the multiple encoding/decoding that takes place when using wifi. If that resolves the issue I would recommend using ethernet instead of wifi.

If this works please click accept as a solution.