Junos OS. 2nd edition FOR. Walter Goralski, Cathy Gadecki, and Michael Bushong. John Wiley & Sons, Inc. WILEY

Transcription

1 Junos OS FOR 2nd edition Walter Goralski, Cathy Gadecki, and Michael Bushong WILEY John Wiley & Sons, Inc.

2 Table of Contents tllii(tii«e<i><ts9e*eis«ees>s9«9i<iiiiiil(<iil Introduction 1 About This Book 2 Conventions Used in This Book 2 Foolish Assumptions 2 How This Book Is Organized 3 Part I: Discovering Junos OS 3 Part II: Setting Up Junos OS 3 Part III: Deploying a Device 3 Part IV: Running a Junos Network 3 Part V: The Part of Tens 4 Icons Used in the Book 4 Where to Go from Here 4 Part 1: Discoi/erina Junos OS... 7 Chapter 1: Junos Is Everywhere You Need to Be 9 Functions of a Network OS 9 Control functions 10 Service functions 10 Forwarding functions 11 Taking Advantage of One Network OS 11 Taking a Peek Inside the Junos OS 12 World-class architecture 12 Plain smart: The planes of Junos OS 13 That's not a problem: The many benefits of modular architecture 14 Developing Junos OS 15 Beyond the OS 16 Junos Space 17 Junos Pulse 17 Chapter 2: Jumping Into Junos 19 Jumpstart Instructions 19 Command-Line Essentials 21 A tale of two command modes 22 Knowing your location in the CLI 23 Saving time with typing shortcuts 25 Getting help 27

3 Junos OS For Dummies, 2nd Edition Defining How You Want Devices to Work 28 Understanding the configuration process 28 Creating and editing the configuration 30 Committing your configuration 31 Going Back to a Prior Configuration 34 Rolling back to a past configuration 34 Verifying the restored configuration 35 This Way to the Exit 36 Chapter 3: Operating Your Network with Junos 39 Exploring Operational Mode 39 Understanding the command hierarchy 39 Recognizing common utility commands 43 Displaying Output 43 Choosing your format 44 Tell me more 44 Using the pipe command tool 45 Using Onboard Instrumentation Tools 47 Monitoring the operations of your network 48 Logging and tracing events 48 Applying onboard automation 49 Exploring Junos Space 50 Service Now 50 Service Insight 51 Route Insight 51 Using the System Software 51 Restarting and requesting system-wide functions 51 Upgrading to new releases 52 Chapter 4: Migrating to Junos 55 Collapsing Switching Layers 55 Mountains of gear 56 Collapsing to a two-layer network 56 Virtual Chassis technology for collapsing layers 57 Scaling the Access Switching Layer 57 Top or end of row 57 Best of both design options 58 Virtual Chassis technology for scaling data center networks 58 Speeding Up the Data Center Network 59 A need for speed 59 Collapsing to a single layer network 60 QFabric as a one layer backbone 60 Securing the Infrastructure 61 Inbound and outbound threats 61 Meeting new security needs 62 Juniper security solutions 62

4 Faster Table of Contents About the Devices Running Junos 63 Routers 63 Switches 64 Security Devices 66 Part 11: Setting Up Junos OS. 67 Chapter 5: Configuring the Device with the CLI and J-Web 69 Installing the Hardware and Software 69 Installing hardware for the MX80 70 Installing hardware for the MX Installing software for your network 71 Connecting to the Junos OS 72 Console connection 73 CLI interface 73 J-Web interface 73 Configuring Junos OS Devices with the CLI 74 Getting the configuration information 75 Configuring the device 75 Displaying set Commands 79 Making Changes to the Junos OS Configuration Renaming a section of the configuration 80 Copying parts of the configuration 81 Replacing a part of the configuration 82 Inserting a configuration statement 83 Archiving Configurations 83 Using the rollback command 83 Restoring the full archive 84 Archiving manually from a server 85 Creating and saving configurations 86 Configuring Junos OS Devices with J-Web 86 Chapter 6: Setting Up Junos Devices 91 Understanding the Initial Configuration 91 Setting Up System Options 92 Configuring syslogs 93 Tracing routing events 95 Configuring User Accounts 95 Local user configuration 97 Authentication server user configuration 98 User configuration and permissions 99 Configuring the Management and Loopback Interfaces 99 Knowing the physical and logical interface properties 100 Configuring the management interface 101 Configuring the loopback interface 101

5 Junos OS For Dummies, 2nd Edition Configuring Network Interfaces 102 Configuring other Gigabit Ethernet properties 104 Configuring Other Options 105 Configuring a banner for login 105 Setting the time and time zone 107 Logging Out 107 Chapter 7: Managing Your Network with Junos OS 109 Choosing a Management Interface 109 Setting Up Out-of-Band Management 111 Setting Up In-Band Management Ill Accessing the Device 113 Accessing your device with Telnet 113 Accessing your device with SSH 114 Managing Devices with Simple Network Management Protocol 115 Monitoring a Device with System Logging 118 Digging into syslog messages 119 Mood music: Turning on logging 121 Viewing syslog messages 122 Filtering syslog to different files 122 Refining your access to events 123 Managing your log files 124 Monitoring a Device Using Trace Logging 125 Chapter 8: Monitoring Junos 127 Checking Host-to-Host 127 Tracerouting the Network 130 Using Diagnostic Commands 132 Monitoring your interfaces 132 Monitoring your routing information 137 Keeping an Eye on Latency 143 Real-time performance monitoring 143 Configuring RPM 144 Monitoring RPM tests 145 Chapter 9: Securing Your Junos OS Devices 147 Stop! Physical Security 148 Go! Junos Default Security Features 148 Encryption and hashing algorithms 150 Tighten the root login account 150 Checking Who's on the Router 152 Knowing who's logged in 152 Figuring out who's configuring 152 Logging Out 154

6 Table of Contents JC(/H Controlling SSH and Telnet Access to the Router 154 Limiting Traffic on Router Interfaces 157 Protecting the Routing Engine: A More Complete Strategy 158 Securing Routing Protocols 160 Securing RIP 161 Securing IS-IS and OSPF 161 Securing OSPF 161 Authenticating BGP peers 162 Enabling authentication on MPLS signaling protocols 162 Part 111: Deploying a Device 165 Chapter 10: Deploying a Router 167 Understanding Network Routing 167 Dynamic routing protocols 169 Routing tables 170 Choosing the best route 172 Choosing the Next Hop 173 Routing, Bridging, and Switching 174 Layer 2: Bridging 174 Layer 3: Routing 175 (Layer 2) Switching 176 Running RIPv2 177 Running OSPF 178 Dividing an OSPF network into areas 179 Configuring and monitoring OSPF 180 Running IS-IS 181 Using IS-IS addresses only when needed 182 Minding your IS-IS areas 183 Configuring and monitoring IS-IS 183 Chapter 11: Deploying an EX Switch 185 Ethernet, VLANs, and Juniper EX-Series Switches 185 Understanding Ethernet 186 Understanding VLANs 187 Understanding LAN Switches 188 Setting Up the Switch 188 Racking the switch 189 Configuring the switch initially 189 Plugging devices into the switch 190 Connecting switches 190 Segmenting a LAN with VLANs 192 Configuring the default VLAN 192 Configuring more VLANs 194

7 %\)\\\ Junos OS For Dummies, 2nd Edition Trunking together VLANs 196 Controlling access to VLANs 197 Interconnecting Switches with Virtual Chassis 200 Going virtual 200 Providing redundancy with Virtual Chassis 203 Using the Switch as a Router 205 Connecting to the Internet 205 Connecting to a router in your LAN 206 Chapter 12: Deploying Security with the SRX 207 Setting Up the SRX 207 Accessing the services gateway 208 Using the Network and Security Manager 208 Initial SRX console access 208 Understanding Flow Processing 210 Managing the System 213 Security zones 213 Security zones and interfaces 214 Writing Basic Security Policies 215 Multiple security policies 216 Configuring address books 217 Configuring services 218 Configuring the security policies 219 Verifying the policies 220 Configuring NAT Source Address Translation 221 Major NAT options 221 NAT configuration 222 Part IV: Running a Junos NetWork 227 Chapter 13: Working with Border Gateway Control 229 An Island of Their Own: Autonomous Systems 229 Making AS Connections 230 Configuring BGP 232 Monitoring BGP 235 Knowing why you can't ping 237 Configuring routing policies that advertise routes 240 Using next-hop self 243 Pinging to the loopbacks 245 Configuring Route Reflection 246 Route reflectors on large networks 248 Route reflector configuration 251 Dual route reflectors for backup 252

8 Table of Contents m Chapter 14: Working with Router Policies 255 Constructing Routing Policies 255 Working with terms 256 Match conditions 260 Match actions 262 Default actions 264 Application of policies 265 Evaluation of routing policies 267 Configuring Route Filters 268 Prefixes and prefix lengths 269 Match types 269 Match actions 271 Configuring an Aggregate Route 273 Chapter 15: Enabling Class of Service 277 Knowing What Pieces a COS Configuration Requires 278 Classifying Inbound Traffic 279 Differentiated Services Code Points (DSCP) 281 Configuring BA classifiers 284 Controlling Outbound Traffic 290 Scheduler configuration 290 Shaping outbound traffic 291 Setting up outbound buffers 294 ^Configuring priority scheduling 295 Massaging BA Classifiers for Core Transit 297 Matching traffic based on the source address 297 Matching traffic based on destination port 299 Setting DSCP values for transit 299 Chapter 16: Using Multi-Protocol Level Switching 303 Packet-Switched Networking 303 Label switching 305 Label-switched paths 306 Label-switching routers 306 Labels 307 Label operations 308 Establishing Label-Switched Paths 310 Signaling Protocols 310 Configuring RSVP-Signaled LSPs 311 Enabling MPLS and RSVP 312 Enabling MPLS on your transit interfaces 313 Configuring an LSP 314 Verifying the LSPs 315

9 Junos OS For Dummies, 2nd Edition Placing Constraints on Packet Forwarding 316 Reserving bandwidth on an LSP 317 Verifying traffic using the LSP 321 Chapter 17: Operating and Troubleshooting Your Network 325 Identifying the Cause of Problems 325 System logging 326 SNMP polling 328 SNMP traps 328 CL1 show commands 329 Implementing Controlled Change -330 Understanding Traffic Engineering 331 Troubleshooting Your Network Issues at Layer 1 and Layer Issues at Layer End-to-end considerations 343 Part V: The Part of Tens 345 Chapter 18: Ten Most Used Junos Commands 347 Show Me the Version and Version Detail 347 Show Me the Chassis Hardware and Chassis Hardware Detail 347 Show Me and Confirm My Configuration 348 Back Up and Roll Back My Configurations 348 Show Me the Interfaces in the Device 349 Give Me More Detail About the Interfaces 349 Show Me Something About Routing 349 Give Me More Detail About Routing 350 Show Me Something About Switching 351 Show Me Details for Maintenance 351 Chapter 19: Ten Migration Tools 353 Junosphere Labs 353 Juniper Documents 354 Juniper Networks Books 355 Translators 355 Installation Guides and Training 356 J-Web 356 Junos Space Applications 356 Custom Commands 357 Professional Services 357

10 Table of Contents Chapter 20: Ten Help Resources 359 Using the Command-Line Interface Help Commands 359 Using Juniper Networks Technical Publications 360 Joining J-Net Forums 360 Finding Videos and Webcasts 360 Finding Books 361 Using the Knowledge Base 361 Taking Certification Courses 361 Getting Support 362 Contacting Customer Care 362 Contacting JTAC 362 Index 363