Network Configuration Example

Size: px
Start display at page:

Download "Network Configuration Example"

Transcription

1 Network Configuration Example Validated Reference - Business Edge Solution - Device R-10 Release 1.0 Published:

2 Juniper Networks, Inc North Mathilda Avenue Sunnyvale, California USA Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Network Configuration Example Validated Reference - Business Edge Solution - Device R-10 NCE0129 All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year However, the NTP application is known to have some difficulty in the year END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement ( EULA ) posted at By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii

3 Table of Contents Introduction Business Edge Overview Business Edge Solution Lab Testing and Validation Architecture Related Business Edge Validated Reference NCEs Device R-10 Chassis Hardware Device R-10 Business Edge Solution Test Lab Configuration iii

4 Validated Reference NCE - Business Edge Solution - Device R-10 iv

5 Introduction Business Edge Overview This document provides a validated reference network configuration example (NCE) for Device R-10 as used in various configurations detailed in the Business Edge Solution 1.0 Design Guide. Device R-10 is a Juniper Networks SRX240 Services Gateway functioning as a firewall. A validated reference NCE is a direct presentation of a tested, validated, and working configuration. This document is intended for experienced engineers who possess a working knowledge of Junos operating system (Junos OS) software configurations in a hierarchal format. The Juniper Networks business edge solution provides design guidance and configurations that enable the provisioning of services to business customers and that support other carrier services to residential and mobile operating units. The solution provides a proven path to service convergence using common IP infrastructure so that the provider can quickly, safely, and conveniently realize the benefits of a fully verified Juniper Networks-based reference architecture. The solution is a complete and deployable network architecture designed to intelligently leverage the variety of advanced and often overlooked technologies inherent in Juniper Networks software and hardware. Juniper Networks has developed this solution with the goal of enabling a streamlined business edge that can create new areas for monetization and help prevent erosion of service margins. By accelerating time to revenue at the business edge, the solution is the first step in streamlining the provider edge and creates new areas for expansion and consolidation. The next step in this transformation is the introduction of the Juniper Networks universal edge. The universal edge is a consolidation of business services, residential services, and wireless edge onto a common IP infrastructure that reduces the need for redundant networks and network elements, enabling expense reduction and optimizing traffic flow to support a complete footprint of service provider offerings. Service providers constantly look to extract additional value from the network by positioning themselves to profitably leverage converging services and network functionality. A performance focused, highly reliable business edge is needed to cost-effectively meet the extraordinary growth in subscribers, services, and traffic driven by an increasingly connected workforce, and business requirements that leverage the network as a commodity rather than a luxury. Transformation to a universal edge solution starts with the adoption of a complete business edge architecture that enables a smooth transition to an edge that supports not only business, but residential subscribers and mobility networks. 1

6 Validated Reference NCE - Business Edge Solution - Device R-10 Business Edge Solution Lab Testing and Validation Architecture This validated reference NCE is part of a complete, tested, and validated business edge solution topology. This document focuses specifically on Device R-10 as shown in Figure 1 on page 2. Device R-10 is a Juniper Networks SRX240 Services Gateway functioning as a firewall. Figure 1: Business Edge Solution Lab Testing Architecture 2

7 Related Business Edge Validated Reference NCEs For configurations of the other routing devices used in the Business Edge solution test lab topology, refer to the following: Validated Reference - Business Edge Solution - Device P-0 Validated Reference - Business Edge Solution - Device P-1 Validated Reference - Business Edge Solution - Device PE-2 Validated Reference - Business Edge Solution - Device PE-3 Validated Reference - Business Edge Solution - Device PE-4 Validated Reference - Business Edge Solution - Device PE-5 Validated Reference - Business Edge Solution - Device PE-6 Validated Reference - Business Edge Solution - Device R7 Validated Reference - Business Edge Solution - Device CE-1 Validated Reference - Business Edge Solution - Device R9 3

8 Validated Reference NCE - Business Edge Solution - Device R-10 Device R-10 Chassis Hardware The Juniper Networks Business Edge Solution Design Guide makes reference to several configuration scenarios. The scenarios described contain various routers that were configured and tested in the Juniper Networks test lab. Device R-10 is a Juniper Networks SRX240 Services Gateway functioning as a firewall. Table 1 on page 4 lists the hardware contained in this router. Table 1: Chassis Hardware (R-10) Chassis Component Version Part Number FRU Model Number Chassis SRX240H Routing Engine REV RE-SRX240H FPC 0 FPC PIC 0 16x GE Base PIC FPC 1 REV FPC PIC 0 1x T1E1 mpim FPC 2 REV FPC PIC 0 1x T1E1 mpim Power Supply 4

9 Device R-10 Business Edge Solution Test Lab Configuration The following configuration was used for Device R-10 in Release 1.0 of the Business Edge test lab configuration: CAUTION: The following configuration contains values specific to the Juniper Networks test lab environment. This configuration is intended for use as an example router configuration and not for actual network deployment without first making the modifications necessary to suit an external deployment scenario. version 12.1R6-S2; groups { global { system { domain-name juniper.net; time-zone America/Los_Angeles; authentication-order [ password radius tacplus ]; root-authentication { encrypted-password <password removed>; ## SECRET-DATA name-server { ; ; radius-server { secret <password removed>; ## SECRET-DATA secret <password removed>; ## SECRET-DATA tacplus-server { { secret <password removed>; ## SECRET-DATA timeout 15; single-connection; login { class readonly { permissions [ interface network routing system trace view ]; user remote { uid 9999; class superuser; shell csh; services { finger; ftp; rlogin; rsh; ssh; 5

10 Validated Reference NCE - Business Edge Solution - Device R-10 telnet; xnm-clear-text; netconf { ssh; web-management { http; syslog { host log { kernel info; any notice; pfe info; interactive-commands any; file messages { kernel info; any notice; authorization info; pfe info; archive world-readable; file security { interactive-commands any; archive world-readable; ntp { boot-server ; server ; chassis { interfaces { lo0 { unit 0 { family inet { address /32; address /32 { primary; family iso { address ff.f ; family inet6 { address abcd::10:255:50:205/128 { primary; snmp { 6

11 location "Business Edge Solution Lab"; contact "Business Edge Lab Admin"; interface ge-0/0/0.0; community public { authorization read-only; community private { authorization read-write; routing-options { static { route /12 { next-hop ; retain; no-readvertise; route /16 { next-hop ; retain; no-readvertise; router-id ; security { forwarding-options { family { inet6 { mode flow-based; zones { security-zone HOST { host-inbound-traffic { system-services { any-service; protocols { all; interfaces { ge-0/0/0.0; applications { application junos-telnet inactivity-timeout never; application junos-ssh inactivity-timeout never; re0 { system { 7

12 Validated Reference NCE - Business Edge Solution - Device R-10 host-name pdt-srxwan-b; backup-router ; interfaces { ge-0/0/0 { unit 0 { family inet { address /25; apply-groups [ global re0 ]; system { no-redirects; ports { console log-out-on-disconnect; interfaces { ge-0/0/12 { vlan-tagging; unit 1 { vlan-id 1; family inet { address /30; family inet6 { address 2002:: /126; unit 2 { vlan-id 2; family inet { address /30; family inet6 { address 2002:: /126; unit 3 { vlan-id 3; family inet { address /30; family inet6 { address 2002:: /126; unit 4 { vlan-id 4; family inet { address /30; 8

13 routing-options { autonomous-system 64513; policy-options { policy-statement dst-nat-pool { term a { from { protocol static; rib vr1.inet.0; route-filter /28 exact; condition fwnat-active-device; then accept; term b { then reject; policy-statement export-beacon { from { protocol static; route-filter /32 exact; then accept; policy-statement fwservice-conditional-export { term a { from { protocol bgp; condition fwnat-active-device; then accept; term b { from { protocol bgp; rib vr1.inet6.0; condition fwnat-active-device; then accept; term c { then reject; policy-statement set-preference-based-on-community { term primary { from community c-primary; preference 171; term secondary { 9

14 Validated Reference NCE - Business Edge Solution - Device R-10 from community c-secondary; preference 172; policy-statement use-static-beacon-only { term accept-static-beacon { from { protocol static; route-filter /32 exact; then accept; term reject-the-rest { then reject; community c-primary members 900:1; community c-secondary members 1000:1; condition fwnat-active-device { if-route-exists { /0; table RedundTrack.inet.0; security { screen { ids-option trust-screen { limit-session { source-ip-based 300; destination-ip-based 310; ids-option untrust-screen { tcp { syn-ack-ack-proxy threshold 1000; limit-session { source-ip-based 10; destination-ip-based 5; nat { source { pool NAT-range-v4 { routing-instance { vr1; address { /32 to /32; pool NAT-range-v6 { 10

15 routing-instance { vr1; address { 2002:: /128 to 2002:: /128; rule-set internet-access { from zone [ hubs spokes ]; to zone untrust; rule customer-a { source-address /0; destination-address /0; source-nat { pool { NAT-range-v4; rule customer-a-v6 { source-address 0::0/0; destination-address 0::0/0; source-nat { pool { NAT-range-v6; destination { pool dst-nat-pool-1 { routing-instance { vr1; address /32; pool dst-nat-pool-2 { routing-instance { vr1; address /32; pool dst-nat-pool-3 { routing-instance { vr1; address /32; 11

16 Validated Reference NCE - Business Edge Solution - Device R-10 pool dst-nat-pool-4 { routing-instance { vr1; address /32; rule-set server-access { from zone untrust; rule server1 { destination-address /32; destination-nat pool dst-nat-pool-1; rule server2 { destination-address /32; destination-nat pool dst-nat-pool-2; rule server3 { destination-address /32; destination-nat pool dst-nat-pool-3; rule server4 { destination-address /32; destination-nat pool dst-nat-pool-4; proxy-arp { interface ge-0/0/12.1 { address { /32 to /32; policies { from-zone spokes to-zone spokes { policy permit-all { source-address any; 12

17 destination-address any; application any; permit; from-zone spokes to-zone hubs { policy permit-all { source-address any; destination-address any; application any; permit; from-zone hubs to-zone spokes { policy permit-all { source-address any; destination-address any; application any; permit; from-zone untrust to-zone spokes { policy server-access { source-address any; destination-address [ spoke-site1 spoke-site2 spoke-site3 ]; application any; permit; policy server-accessv6 { source-address any; destination-address spoke-site1-v6; application any; permit; from-zone untrust to-zone hubs { policy server-access { 13

18 Validated Reference NCE - Business Edge Solution - Device R-10 source-address any; destination-address hub-site1; application any; permit; from-zone spokes to-zone redundancy { policy permit-all { source-address any; destination-address any; application any; permit; from-zone hubs to-zone redundancy { policy permit-all { source-address any; destination-address any; application any; permit; from-zone spokes to-zone untrust { policy server-access { source-address any; destination-address any; application any; permit; from-zone hubs to-zone untrust { policy server-access { source-address any; destination-address any; application any; permit; 14

19 zones { security-zone untrust { screen untrust-screen; interfaces { ge-0/0/12.1; security-zone redundancy { host-inbound-traffic { system-services { all; interfaces { ge-0/0/12.4; security-zone spokes { tcp-rst; address-book { address spoke-site /32; address spoke-site /32; address spoke-site /32; address spoke-site1-v6 2002:: /128; screen trust-screen; host-inbound-traffic { system-services { all; interfaces { ge-0/0/12.2; security-zone hubs { tcp-rst; address-book { address hub-site /32; screen trust-screen; host-inbound-traffic { system-services { all; interfaces { ge-0/0/12.3; routing-instances { 15

20 Validated Reference NCE - Business Edge Solution - Device R-10 RedundTrack { instance-type virtual-router; interface ge-0/0/12.4; routing-options { static { route /32 { discard; preference 172; community 1000:1; aggregate { route /0 policy use-static-beacon-only; protocols { bgp { group ebgp-l3vpn { metric-out 172; import set-preference-based-on-community; export export-beacon; peer-as 70; neighbor ; vr1 { instance-type virtual-router; interface ge-0/0/12.1; interface ge-0/0/12.2; interface ge-0/0/12.3; routing-options { rib vr1.inet6.0 { static { route 2002:: /124 discard; static { route /28 discard; autonomous-system 64513; protocols { bgp { group DIA-PE { export [ dst-nat-pool fwservice-conditional-export ]; peer-as 70; neighbor { as-override; neighbor 2002:: { family inet6 { unicast; as-override; 16

21 group L3VPN-PE { export fwservice-conditional-export; peer-as 70; neighbor { as-override; neighbor { as-override; neighbor 2002:: { family inet6 { unicast; as-override; neighbor 2002:: { family inet6 { unicast; as-override; 17

22 Validated Reference NCE - Business Edge Solution - Device R-10 18

Network Configuration Example

Network Configuration Example Network Configuration Example Virtual Router Use Case for Educational Networks Release NCE0039 Modified: 2017-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring a Two-Tiered Virtualized Data Center for Large Enterprise Networks Release NCE 33 Modified: 2016-08-01 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring the BGP Local Preference Release NCE0046 Modified: 2016-11-08 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring a Single SRX Series Device in a Branch Office Modified: 2017-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Adding a New Routing Device to Your Network Modified: 2017-01-17 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All

More information

Junos OS Multiple Instances for Label Distribution Protocol Feature Guide Release 11.4 Published: Copyright 2011, Juniper Networks, Inc.

Junos OS Multiple Instances for Label Distribution Protocol Feature Guide Release 11.4 Published: Copyright 2011, Juniper Networks, Inc. Junos OS Multiple Instances for Label Distribution Protocol Feature Guide Release 11.4 Published: 2011-11-08 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Active Flow Monitoring Version 9 Modified: 2017-01-18 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Deploying Secure Multicast Market Data Services for Financial Services Environments Modified: 2016-07-29 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Deploying Scalable Services on an MX Series Router Acting as a Broadband Network Gateway Release NCE0062 Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale,

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring the BGP Local Autonomous System Attribute Release NCE0045 Modified: 2016-11-08 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Dual-Stack Lite for IPv6 Access Release NCE0025 Modified: 2016-10-12 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Ethernet CFM Over VPLS Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring BGP Autodiscovery for LDP VPLS Release NCE0035 Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Stateful NAT64 for Handling IPv4 Address Depletion Release NCE0030 Modified: 2017-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Protocol Independent Multicast Join Load Balancing Release NCE0054 Modified: 2017-01-20 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Load Balancing Layer 3 VPN Traffic While Simultaneously Using IP Header Filtering Modified: 2017-01-19 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

CBA850 3G/4G/LTE Wireless WAN Bridge Application Guide

CBA850 3G/4G/LTE Wireless WAN Bridge Application Guide CBA850 3G/4G/LTE Wireless WAN Bridge Application Guide Modified: 2016-06-06 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights reserved.

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring External BGP Peering Release NCE0056 Modified: 2017-01-20 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring IS-IS Dual Stacking of IPv4 and IPv6 Unicast Addresses Release NCE0068 Modified: 2017-01-20 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring VPLS Multihoming Using Autodiscovery (FEC 129) Release NCE0072 Modified: 2016-10-26 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Private VLANs on a QFX Switch Using Extended Functionality Modified: 2016-08-01 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring a Routing Matrix with a TX Matrix Plus Router in Mixed Mode Modified: 2016-12-13 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

QUICKSTART GUIDE FOR BRANCH SRX SERIES SERVICES GATEWAYS

QUICKSTART GUIDE FOR BRANCH SRX SERIES SERVICES GATEWAYS APPLICATION NOTE QUICKSTART GUIDE FOR BRANCH SRX SERIES SERVICES GATEWAYS Configuring Basic Security and Connectivity on Branch SRX Series Services Gateways Copyright 2009, Juniper Networks, Inc. Table

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Authentication and Enforcement Using SRX Series Services Gateways and Aruba ClearPass Policy Manager Modified: 2016-08-01 Juniper Networks, Inc. 1133 Innovation

More information

Junos Security. Chapter 3: Zones Juniper Networks, Inc. All rights reserved. Worldwide Education Services

Junos Security. Chapter 3: Zones Juniper Networks, Inc. All rights reserved.   Worldwide Education Services Junos Security Chapter 3: Zones 2012 Juniper Networks, Inc. All rights reserved. www.juniper.net Worldwide Education Services Chapter Objectives After successfully completing this chapter, you will be

More information

JSA Common Ports Lists

JSA Common Ports Lists Juniper Secure Analytics Release 2014.6 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2016-04-21 Copyright Notice Copyright 2016 Juniper

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring RSVP-Signaled Point-to-Multipoint LSPs on Logical Systems Modified: 2017-01-18 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Ingress Replication for MVPN and for IP Multicast Using Next Gen MVPN Modified: 2016-12-20 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Technology Overview. Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch. Published:

Technology Overview. Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch. Published: Technology Overview Retrieving VLAN Information Using SNMP on an EX Series Ethernet Switch Published: 2014-01-10 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000

More information

CONFIGURING THE CX111 FOR THE SSG SERIES

CONFIGURING THE CX111 FOR THE SSG SERIES APPLICATION NOTE CONFIGURING THE CX111 FOR THE SSG SERIES How to Configure the SSG Series for 3G Wireless WAN Termination Using the CX111 Cellular Broadband Data Bridge Copyright 2010, Juniper Networks,

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Channelized IQ Interfaces Modified: 2016-12-13 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Managing Unintended Traffic Black-Hole Conditions in a T Series Router Modified: 2017-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Junos Security. Chapter 4: Security Policies Juniper Networks, Inc. All rights reserved. Worldwide Education Services

Junos Security. Chapter 4: Security Policies Juniper Networks, Inc. All rights reserved.  Worldwide Education Services Junos Security Chapter 4: Security Policies 2012 Juniper Networks, Inc. All rights reserved. www.juniper.net Worldwide Education Services Chapter Objectives After successfully completing this chapter,

More information

Junos OS Release 12.1X47 Feature Guide

Junos OS Release 12.1X47 Feature Guide Junos OS Release 12.1X47 Feature Guide Junos OS Release 12.1X47-D15 19 November 2014 Revision 1 This feature guide accompanies Junos OS Release 12.1X47-D15. This guide contains detailed information about

More information

version 10.2R3.10; Configuring Basic System Information system { domain-name foo.bar; time-zone America/New_York;

version 10.2R3.10; Configuring Basic System Information system { domain-name foo.bar; time-zone America/New_York; version 10.2R3.10; Configuring Cluster Groups groups { node0 { system { host-name hh-node0; interfaces { fxp0 { unit 0 { family inet { address 1.1.1.1/24; node1 { system { host-name th-node1; interfaces

More information

J-series Advanced Switching Configuration

J-series Advanced Switching Configuration Application Note J-series Advanced Switching Configuration Configuring JUNOS Software Advanced Switching on J-series Services Routers Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Interconnecting a Layer 2 Circuit with a Layer 3 VPN Modified: 2017-01-19 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring DCBX Application Protocol TLV Exchange Release NCE 63 Modified: 2016-08-01 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000

More information

Integrating WX WAN Optimization with Netscreen Firewall/VPN

Integrating WX WAN Optimization with Netscreen Firewall/VPN Application Note Integrating WX WAN Optimization with Netscreen Firewall/VPN Joint Solution for Firewall/VPN and WX Platforms Alan Sardella Portfolio Marketing Choh Mun Kok and Jaymin Patel Lab Configuration

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring SRX Chassis Clusters for High Availability Modified: 2018-09-26 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Junos OS. RSVP LSP Tunnels Feature Guide. Release Published: Copyright 2011, Juniper Networks, Inc.

Junos OS. RSVP LSP Tunnels Feature Guide. Release Published: Copyright 2011, Juniper Networks, Inc. Junos OS RSVP LSP Tunnels Feature Guide Release 11.4 Published: 2011-11-08 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net This product includes

More information

Configuring Dynamic VPN

Configuring Dynamic VPN Configuring Dynamic VPN Version 1.0 October 2009 JUNIPER NETWORKS Page 1 of 15 Table of Contents Introduction...3 Feature License...3 Platform support...3 Limitations...3 Dynamic VPN Example...3 Topology...4

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring the Broadband Edge as a Service Node Within Seamless MPLS Network Designs Modified: 2016-07-29 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Translational Cross-Connect and Layer 2.5 VPNs Modified: 2016-12-16 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network Configuration Example

Network Configuration Example Network Configuration Example RSVP LSP Tunnels Modified: 2016-12-14 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights reserved. Juniper

More information

Technology Overview. Frequently Asked Questions: Routing Protocol Process Memory. Published: Copyright 2014, Juniper Networks, Inc.

Technology Overview. Frequently Asked Questions: Routing Protocol Process Memory. Published: Copyright 2014, Juniper Networks, Inc. Technology Overview Frequently Asked Questions: Routing Protocol Process Memory Published: 2014-01-10 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Juniper Secure Analytics

Juniper Secure Analytics Juniper Secure Analytics Managing Juniper SRX PCAP Data Release 2014.1 Modified: 2016-03-16 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Media Access Control Security (MACsec) over an MPLS Circuit Cross-Connect (CCC) Modified: 2017-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California

More information

CONFIGURING THE CX111 FOR THE SSG SERIES

CONFIGURING THE CX111 FOR THE SSG SERIES APPLICATION NOTE CONFIGURING THE CX111 FOR THE SSG SERIES How to Configure the SSG Series for 3G Wireless WAN Termination Using the CX111 Cellular Broadband Data Bridge Copyright 2013, Juniper Networks,

More information

How to Set Up Your SRX340 Services Gateway

How to Set Up Your SRX340 Services Gateway How to Set Up Your SRX340 Services Gateway The SRX340 Services Gateway consolidates security, routing, switching, and WAN interfaces for midsize distributed enterprises. With advanced threat mitigation

More information

Junos OS. Designing and Implementing a Junos Node Unifier Network. Release 1.4J1. Published: Copyright 2015, Juniper Networks, Inc.

Junos OS. Designing and Implementing a Junos Node Unifier Network. Release 1.4J1. Published: Copyright 2015, Juniper Networks, Inc. Junos OS Designing and Implementing a Junos Node Unifier Network Release 1.4J1 Published: 2015-02-26 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

How to Set Up Your SRX300 Services Gateway

How to Set Up Your SRX300 Services Gateway How to Set Up Your SRX300 Services Gateway The SRX300 Services Gateway consolidates security, routing, switching, and WAN interfaces for small retail offices. With advanced threat mitigation capabilities,

More information

How to Set Up Your SRX320 Services Gateway

How to Set Up Your SRX320 Services Gateway How to Set Up Your SRX320 Services Gateway The SRX320 Services Gateway consolidates security, routing, switching, and WAN interfaces for small distributed enterprises. With advanced threat mitigation capabilities,

More information

Technology Overview. Frequently Asked Questions: MX Series 3D Universal Edge Routers Quality of Service. Published:

Technology Overview. Frequently Asked Questions: MX Series 3D Universal Edge Routers Quality of Service. Published: Technology Overview Frequently Asked Questions: MX Series 3D Universal Edge Routers Quality of Service Published: 2014-01-10 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089

More information

Deploying JSA in an IPV6 Environment

Deploying JSA in an IPV6 Environment Juniper Secure Analytics Deploying JSA in an IPV6 Environment Release 7.3.0 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2017-09-14

More information

Flow Monitoring Feature Guide for EX9200 Switches

Flow Monitoring Feature Guide for EX9200 Switches Flow Monitoring Feature Guide for EX9200 Switches Modified: 2017-01-24 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, Junos, Steel-Belted

More information

SRX240 Services Gateway Quick Start

SRX240 Services Gateway Quick Start SRX240 Services Gateway Quick Start Use the instructions in this quick start to help you connect the SRX240 Services Gateway to your network. For details, see the SRX240 Services Gateway Hardware Guide

More information

SETTING UP A JSA SERVER

SETTING UP A JSA SERVER Juniper Secure Analytics SETTING UP A JSA SERVER Release 2014.1 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2014-03-14 Copyright Notice

More information

Implementing AutoVPN Network Design Using the SRX Series with ibgp as the Dynamic Routing Protocol

Implementing AutoVPN Network Design Using the SRX Series with ibgp as the Dynamic Routing Protocol APPLICATION NOTE Introduction to AutoVPN Implementing AutoVPN Network Design Using the SRX Series with ibgp as the Dynamic Routing Protocol Copyright 2013, Juniper Networks, Inc. 1 Table of Contents Introduction...3

More information

Junos Pulse Access Control Service

Junos Pulse Access Control Service Junos Pulse Access Control Service RADIUS Server Management Guide Release 4.4 Published: 2013-02-15 Part Number: Juniper Networks, Inc. 1194 rth Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000

More information

JUNIPER JN0-102 EXAM QUESTIONS & ANSWERS

JUNIPER JN0-102 EXAM QUESTIONS & ANSWERS JUNIPER JN0-102 EXAM QUESTIONS & ANSWERS Number: JN0-102 Passing Score: 800 Time Limit: 120 min File Version: 48.5 ht t p:/ / w w w.gratisexam.com/ JUNIPER JN0-102 EXAM QUESTIONS & ANSWERS Exam Name: Junos,

More information

Forwarding Logs Using Tail2Syslog. Release Security Threat Response Manager. Juniper Networks, Inc.

Forwarding Logs Using Tail2Syslog. Release Security Threat Response Manager. Juniper Networks, Inc. Security Threat Response Manager Release 2013.2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2013-07-19 Copyright Notice Copyright 2013

More information

Deploying STRM in an IPV6 Environment

Deploying STRM in an IPV6 Environment Security Threat Response Manager Release 2013.2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2013-07-19 Copyright Notice Copyright 2013

More information

Juniper Examsheets JNO-101 Questions and Answers

Juniper Examsheets JNO-101 Questions and Answers Juniper Examsheets JNO-101 Questions and Answers Number: JN0-101 Passing Score: 850 Time Limit: 120 min File Version: 25.6 ht t p:/ / w w w.gratisexam.com/ Juniper JNO-101 Questions and Answers Exam Name

More information

Network and Security Manager (NSM) Release Notes DMI Schema

Network and Security Manager (NSM) Release Notes DMI Schema Network and Security Manager (NSM) Release Notes DMI Schema Release version 223 ver 1.0, 3-1-2012 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net

More information

Certkiller JN q

Certkiller JN q Certkiller JN0-102 242q Number: JN0-102 Passing Score: 800 Time Limit: 120 min File Version: 26.5 http://www.gratisexam.com/ Juniper JN0-102 Juniper Networks Certified Internet Associate, Junos 100% Valid

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Multichassis Link Aggregation on a QFX Series Switch Release NCE 64 Modified: 2016-08-01 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

Setting Up an STRM Update Server

Setting Up an STRM Update Server Security Threat Response Manager Release 2013.2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2013-07-19 Copyright Notice Copyright 2013

More information

How to Set Up Your SRX550 High Memory Services Gateway

How to Set Up Your SRX550 High Memory Services Gateway How to Set Up Your SRX550 High Memory Services Gateway The SRX550 High Memory Services Gateway is a large branch office gateway that combines security, routing, switching, and WAN interfaces with next-generation

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Zero Touch Deployment for ACX Routers Modified: 2018-01-23 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Vendor: Juniper. Exam Code: JN Exam Name: JNCIA-JUNOS EXAM OBJECTIVES. Version: Demo

Vendor: Juniper. Exam Code: JN Exam Name: JNCIA-JUNOS EXAM OBJECTIVES. Version: Demo Vendor: Juniper Exam Code: JN0-101 Exam Name: JNCIA-JUNOS EXAM OBJECTIVES Version: Demo QUESTION 1 Which command is used to enable access to J-Web using HTTPS? A. set system remote-access profile https

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Logging Network Statistics Using Accounting Profiles Modified: 2017-01-18 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Managing User-Defined QID Map Entries

Managing User-Defined QID Map Entries Security Threat Response Manager Managing User-Defined QID Map Entries Release 2013.2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2013-07-19

More information

Subscriber Traffic Redirection

Subscriber Traffic Redirection Subscriber Traffic Redirection Published: 2014-06-06 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights reserved. Juniper Networks,

More information

Juniper Exam JN0-696 Security Support, Professional (JNCSP-SEC) Version: 9.0 [ Total Questions: 71 ]

Juniper Exam JN0-696 Security Support, Professional (JNCSP-SEC) Version: 9.0 [ Total Questions: 71 ] s@lm@n Juniper Exam JN0-696 Security Support, Professional (JNCSP-SEC) Version: 9.0 [ Total Questions: 71 ] Question No : 1 Click the Exhibit button. 2 A customer has a problem connecting to an SRX Series

More information

Restore Data. Release Juniper Secure Analytics. Juniper Networks, Inc.

Restore Data. Release Juniper Secure Analytics. Juniper Networks, Inc. Juniper Secure Analytics Release 2014.4 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2015-03-02 Copyright Notice Copyright 2015 Juniper

More information

Table 1 List of Common Ports Used by STRM Components. Port Direction Reason. components. your SMTP gateway

Table 1 List of Common Ports Used by STRM Components. Port Direction Reason. components. your SMTP gateway TECHNICAL NOTE OPEN PORTS USED BY STRM November 2010 This document provides information about the ports used by and between STRM components. Table 1 lists the common ports used by STRM components, identifies

More information

Juniper JN0-101 Questions & Answers

Juniper JN0-101 Questions & Answers Juniper JN0-101 Questions & Answers Number: JN0-101 Passing Score: 660 Time Limit: 155 min File Version: 25.7 ht t p:/ / w w w.gratisexam.com/ Juniper JN0-101 Questions & Answers Exam Name: Juniper Networks

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Service Provider Wi-Fi Modified: 2017-01-18 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights

More information

How to Set Up Your SRX4100 Services Gateway

How to Set Up Your SRX4100 Services Gateway How to Set Up Your SRX4100 Services Gateway The SRX4100 Services Gateway is a high-performance, scalable mid-range services gateway that consolidates security, next-generation firewall, and advanced threat

More information

Using IPsec with Multiservices MICs on MX Series Routers

Using IPsec with Multiservices MICs on MX Series Routers Using IPsec with Multiservices MICs on MX Series Routers Test Case April 2017 Version 1.0 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper

More information

SRX110 Services Gateway Quick Start

SRX110 Services Gateway Quick Start SRX110 Services Gateway Quick Start Use the instructions in this quick start to help you connect the SRX110 Services Gateway to your network. For details, see the SRX110 Services Gateway Hardware Guide

More information

Partition Splitting. Release Juniper Secure Analytics. Juniper Networks, Inc.

Partition Splitting. Release Juniper Secure Analytics. Juniper Networks, Inc. Juniper Secure Analytics Release 2014.8 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2016-11-29 Copyright Notice Copyright 2016 Juniper

More information

Virtual Route Reflector

Virtual Route Reflector Virtual Route Reflector Getting Started Guide for VMware Modified: 2017-12-18 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, the

More information

Customizing the Right-Click Menu

Customizing the Right-Click Menu Juniper Secure Analytics Customizing the Right-Click Menu Release 2014.1 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published: 2014-03-14 Copyright

More information

Junos OS. Translational Cross-Connect and Layer 2.5 VPNs Feature Guide. Release Published: Copyright 2011, Juniper Networks, Inc.

Junos OS. Translational Cross-Connect and Layer 2.5 VPNs Feature Guide. Release Published: Copyright 2011, Juniper Networks, Inc. Junos OS Translational Cross-Connect and Layer 2.5 VPNs Feature Guide Release 11.4 Published: 2011-11-08 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Network and Security Manager (NSM) Release Notes DMI Schema

Network and Security Manager (NSM) Release Notes DMI Schema Network and Security Manager (NSM) Release Notes DMI Schema Release version 233 ver 1.0, 09-06-2012 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net

More information

Juniper JN0-101 Questions & Answers

Juniper JN0-101 Questions & Answers Juniper JN0-101 Questions & Answers Number: JN0-101 Passing Score: 800 Time Limit: 120 min File Version: 25.4 ht t p:/ / w w w.gratisexam.com/ Juniper JN0-101 Questions & Answers Exam: JN0-101 - Juniper

More information

Not For Reproduction. Operating Enhanced Services for JUNOS Software. 9.a. Detailed Lab Guide

Not For Reproduction. Operating Enhanced Services for JUNOS Software. 9.a. Detailed Lab Guide Operating Enhanced Services for JUNOS Software 9.a 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Detailed Lab Guide Course Number: EDU-JUN-OESJ Juniper Networks, the Juniper

More information

UPGRADING STRM TO R1 PATCH

UPGRADING STRM TO R1 PATCH UPGRADING STRM TO 2012.1.R1 PATCH RELEASE 2012.1 MARCH 2013 This Upgrade Guide provides information on the following: Before You Upgrade Clearing the Cache After You Upgrade Before You Upgrade Upgrade

More information

INSTALLATION RUNBOOK FOR. VNF (virtual firewall) 15.1X49-D30.3. Liberty. Application Type: vsrx Version: MOS Version: 8.0. OpenStack Version:

INSTALLATION RUNBOOK FOR. VNF (virtual firewall) 15.1X49-D30.3. Liberty. Application Type: vsrx Version: MOS Version: 8.0. OpenStack Version: INSTALLATION RUNBOOK FOR Juniper vsrx Application Type: vsrx Version: VNF (virtual firewall) 15.1X49-D30.3 MOS Version: 8.0 OpenStack Version: Liberty 1 Introduction 1.1 Target Audience 2 Application Overview

More information

BRANCH SRX SERIES AND J SERIES CHASSIS CLUSTERING

BRANCH SRX SERIES AND J SERIES CHASSIS CLUSTERING APPLICATION NOTE BRANCH SRX SERIES AND J SERIES CHASSIS CLUSTERING Configuring Chassis Clusters on Branch SRX Series Services Gateways and J Series Services Routers Copyright 2012, Juniper Networks, Inc.

More information

Wireless LAN. SmartPass Quick Start Guide. Release 9.0. Published: Copyright 2013, Juniper Networks, Inc.

Wireless LAN. SmartPass Quick Start Guide. Release 9.0. Published: Copyright 2013, Juniper Networks, Inc. Wireless LAN SmartPass Quick Start Guide Release 9.0 Published: 2013-07-14 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net All rights reserved.

More information

JUNOS SCOPE SOFTWARE IP SERVICE MANAGER

JUNOS SCOPE SOFTWARE IP SERVICE MANAGER DATASHEET JUNOS SCOPE SOFTWARE IP SERVICE MANAGER Product Overview Product Description As service providers and enterprises evolve to meet the demands of their customer base, one key to success is the

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring CoS Hierarchical Port Scheduling Release NCE 71 Modified: 2016-12-16 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net

More information

Junos OS. 2nd edition FOR. Walter Goralski, Cathy Gadecki, and Michael Bushong. John Wiley & Sons, Inc. WILEY

Junos OS. 2nd edition FOR. Walter Goralski, Cathy Gadecki, and Michael Bushong. John Wiley & Sons, Inc. WILEY Junos OS FOR 2nd edition Walter Goralski, Cathy Gadecki, and Michael Bushong WILEY John Wiley & Sons, Inc. Table of Contents tllii(tii«es9«9i

More information

Installing JSA Using a Bootable USB Flash Drive

Installing JSA Using a Bootable USB Flash Drive Juniper Secure Analytics Installing JSA Using a Bootable USB Flash Drive Release 2014.2 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Published:

More information

Junos Pulse Secure Access Service

Junos Pulse Secure Access Service Junos Pulse Secure Access Service Intrusion Detection and Prevention Sensors Release 8.0 Published: 2013-11-15 Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000

More information

Configuring Dynamic VPN v2.0 Junos 10.4 and above

Configuring Dynamic VPN v2.0 Junos 10.4 and above Configuring Dynamic VPN v2.0 Junos 10.4 and above Configuring and deploying Dynamic VPNs (remote access VPNs) using SRX service gateways Juniper Networks, Inc. 1 Introduction Remote access VPNs, sometimes

More information

CONFIGURING AND DEPLOYING THE AX411 WIRELESS ACCESS POINT

CONFIGURING AND DEPLOYING THE AX411 WIRELESS ACCESS POINT APPLICATION NOTE CONFIGURING AND DEPLOYING THE AX411 WIRELESS ACCESS POINT Copyright 2009, Juniper Networks, Inc. 1 Table of Contents Introduction......................................................................................................3

More information