Generated by All in One SEO v5.0.0.1, this is an llms.txt file, used by LLMs to index the site.

# Free Network

Tutorials

## Sitemaps

- [XML Sitemap](https://freenetworktutorials.com/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [How to Upgrade and Patch Huawei Router OS or System Software using Command Line](https://freenetworktutorials.com/how-to-upgrade-and-patch-huawei-router-os-or-system-software-using-command-line/) - Here are the following steps of upgrading and patching the Operating System or System software using the command line interface (CLI) for Huawei Routers. Pre-requisite: Upload the software to FTP/SFTP server,e.g. IP: 192.168.100.100 username: freenetwork password: tutorials Directory: ftproot/NXXX.cc Login to Huawei router and download the necessary software a. Go to system-view and do sftp
- [Configure Port Mirroring on Huawei NetEngine Series Routers](https://freenetworktutorials.com/configure-port-mirroring-on-huawei-netengine-series-routers/) - Option1: If the current line cards installed support your PC/laptop's 1GE UTP port, then you can install SFP-1000BaseT(SFP-T) transceiver directly to be used as the observing port. Fig.1 port-mirroring inbound port-mirroring outbound port-mirroring to observe-index 1 interface port-observing observe-index Sample Configuration: Objective: To further do analysis on all traffic going to the
- [Home Internet Setup using Cisco as NAT Router (PAT) and DHCP server](https://freenetworktutorials.com/home-internet-setup-using-cisco-as-nat-router-pat-and-dhcp-server/) - PAT or Port Address Translation or also known as NAT Overloading is like a modified form of dynamic NAT where multiple inside local addresses are translated to single inside global IP address. It is the most popular form of NAT as the setup is the same what we use on our home connectivity as your
- [Types of Network Address Translation (NAT) Implementation](https://freenetworktutorials.com/types-of-network-address-translation-nat-implementation/) - Network Address Translation or NAT, is a process of converting or translating a set of IP addresses to another set of IP addresses. Benefits of NAT: Solve IPv4 exhaustion issue by conserving IP address space. Cost effective as can connect multiple devices to Internet without to purchase multiple public IP Enhance security by hiding the
- [NAT Configuration on Cisco Routers (Static, Dynamic and NAT Overload)](https://freenetworktutorials.com/nat-configuration-on-cisco-routers-static-dynamic-and-nat-overload/) - Here are the basic configuration on implementing different types of Network Address Translation (NAT) on Cisco Routers. Fig.1 Static NAT (1-to-1 Translation) (Objective: to translate PC-1 private IP of 192.168.0.2 to public IP 200.200.200.3) Configuration: Router1 Main Static NAT configuration: ip nat inside source static Sample Config: Router1(config)# ip
- [Cisco IOS-XR vs Huawei Commands Cheat Sheet](https://freenetworktutorials.com/cisco-ios-xr-vs-huawei-commands-cheat-sheet/) - Here's the Cisco IOS-XR commands vs Huawei OS commands
- [Checking 400GE Transmit (TX) and Receive (RX) Optical Power in Huawei Routers](https://freenetworktutorials.com/checking-400ge-transmit-tx-and-receive-rx-optical-power-in-huawei-routers/) - For checking transmission links on Huawei routers, it is important to know how to check the optical power of 400GE modules or interfaces for troubleshooting and to ensure the desired or optimal range is met. Here are the sample commands for checking the Transmit/Output (TX) and Receive/Input (RX) optical power. display optical-module base information interface
- [Displaying Hardware Information on Huawei Routers](https://freenetworktutorials.com/displaying-hardware-information-on-huawei-routers/) - Here are the common commands to use to display hardware-related information on Huawei Routers. The inventory information such as serial number, product code,optical module,device, power,voltage,temperature,fan, CPU and memory are very important on operation and troubleshooting purposes.
- [Finding ARP count and ARP PPS on Cisco ASR9000](https://freenetworktutorials.com/finding-arp-count-and-arp-pps-on-cisco-asr9000/) - ARP (Address Resolution Protocol) is a network protocol used to map an IP address (Layer 3) to a corresponding MAC address (Layer 2) on a local area network (LAN). These are sample ways to find ARP on Cisco ASR 9000 running on IOS-XR. To find out the ARP statistics for a particular linecard, the command
- [ACL Configuration on Huawei Router using IP and Source Pool](https://freenetworktutorials.com/acl-configuration-on-huawei-router-using-ip-and-source-pool/) - Here are the step by step configuration of implementing Access-Lists or ACL on Huawei routers such as NetEngine Series Routers utilizing the ip-pool and source-pool for simplicity and convenience. 1.Create ip-pool and source-pool acl ip-pool allowed_ip ip address 192.168.0.0 0.0.0.255 acl port-pool allowed_port eq 22 2. Create ACL acl number 88 description ACL88 rule 10
- [ACL Configuration on Cisco ASR9000 (IOS-XR) using object-group](https://freenetworktutorials.com/acl-configuration-on-cisco-asr9000-ios-xr-using-object-group/) - Here are the step by step configuration of implementing Access-Lists or ACL on Cisco routers such as ASR9000 running on IOS-XR, utilizing the object-group for simplicity and convenience. 1.Create object-group object-group network ipv4 allowed_ip 192.168.0.0/24 object-group port allowed_port eq ssh 2. Create ACL ipv4 access-list ACL88 10 permit tcp net-group allowed_ip any port-group allowed_port 20
- [SNMP Polling and Traps Configuration on Huawei Router](https://freenetworktutorials.com/snmp-polling-and-traps-configuration-on-huawei-router/) - Here's the SNMP configuration examples for Huawei routers. Taking the following details: SNMP community: snmpcomm123 Loopback/management IP address: 192.168.10.100 SNMP Polling Server: 192.168.20.199 SNMP Trap Server: 192.168.20.200 Pre-config: (assuming Loopback0 is your source interface to send those SNMP traffic) interface LoopBack0 description _ Loopback for Huawei Router ip address 192.168.10.100 255.255.255.255 SNMPv2c Polling:
- [Checking 100GE Transmit (TX) and Receive (RX) Optical Power in Juniper Routers](https://freenetworktutorials.com/checking-100ge-transmit-tx-and-receive-rx-optical-power-in-juniper-routers/) - For checking transmission links on Cisco Routers, it is good to know how to find out the optical power of 100GE modules or interfaces for troubleshooting and making sure the desired or optimal range is meet. Here are the sample commands for checking the Transmit/Output (TX) and Receive/Input (RX) optical power. show interfaces diagnostics optics
- [Checking 100GE Transmit (TX) and Receive (RX) Optical Power on Cisco Routers (IOS-XR)](https://freenetworktutorials.com/checking-100ge-transmit-tx-and-receive-rx-optical-power-on-cisco-routers-ios-xr/) - For checking transmission links on Cisco Routers, it is good to know how to find out the optical power of 100GE modules or interfaces for troubleshooting and making sure the desired or optimal range is meet. Here are the sample commands for checking the TX/RX optical power. show controllers phy Sample Output:
- [Checking 100GE Transmit (TX) and Receive (RX) Optical Power on Huawei Routers](https://freenetworktutorials.com/checking-100ge-transmit-tx-and-receive-rx-optical-power-on-huawei-routers/) - For checking transmission links on Huawei Routers, it is good to know how to find out the optical power of 100GE modules or interfaces for troubleshooting and making sure the desired or optimal range is meet. Here are the sample commands for checking the TX/RX optical power. display interface 100GE Sample Output: display
- [Management Port Configuration on Cisco IOS Catalyst 4500 (SSH,SNMP,NTP,AAA,Syslog)](https://freenetworktutorials.com/management-port-configuration-on-cisco-ios-catalyst-4500-ssh-snmp-ntp-aaa-syslog/) - Objective: To separate management traffic from data/customer traffic on your Cisco Catalyst 4500 L3 Switch Preferably, Data and Management are into 2 separate network domains. Pre-requisite: UTP cable to connect to management port (via FastEthernet 1) and the other end is connected to a network switch to access the OOB management gateway Tested on Cisco
- [Common Networking Acronyms](https://freenetworktutorials.com/common-networking-acronyms/) - These are common computer networking acronyms that you must know and you will encounter if you are in Information Technology (IT) or Telecommunication (Telco) industry especially if your are working as network and systems engineer.
- [Commit and Rollback Configuration on Huawei Routers](https://freenetworktutorials.com/commit-and-rollback-configuration-on-huawei-routers/) - Here are the steps on committing/saving and rollback configuration on Huawei Routers system-view commit or system-view commit label Example: Change1: Change description on Ether-Trunk88 Change2: Enable ipv6 system-view [~Huawei]interface Eth-Trunk88 [*Huawei-Eth-Trunk88]description Connection to Router1 [*Huawei-Eth-Trunk88]commit label Eth88Desc description Eth88IntDesc Committing.....done. [~Huawei-Eth-Trunk88]ipv6 enable [~Huawei-Eth-Trunk88]commit label Eth88v6Enable Verification: display configuration commit list display configuration commit
- [BGP Best Security Practices on Juniper Routers](https://freenetworktutorials.com/bgp-best-security-practices-on-juniper-routers/) - Border Gateway Protocol or BGP, is a gateway protocol that enables the Internet to exchange routing information between AS or Autonomous Systems. It is used by Large Enterprise and Service Providers. Here are the recommended Best Security Practices that need to be implemented on your Juniper Routers. Authentication need to be set for all peering
- [Trace Access users on Huawei Router](https://freenetworktutorials.com/trace-access-users-on-huawei-router/) - Here is a simple tutorial on tracing access users on Huawei Router. There are few ways to trace access-user based on the given information and most common are circuit-id, ip-address,ipv6-address and mac-address. [~Huawei]trace access-user object 1 ? access-mode The access mode calling-number The Calling Number ce-vlan The CE VLAN ID circuit-id User's circuit-id interface The
- [Find the interface based on MAC or IP address on Cisco Switch (Cisco IOS)](https://freenetworktutorials.com/find-the-interface-based-on-mac-or-ip-address-on-cisco-switch-cisco-ios/) - Here are the sample steps on finding the interface where the host is connected based on IP address or MAC address on Cisco Catalyst L3 Switch running on Cisco IOS Scenario 1: IP address is given, find which interface it is connected IP address: 192.168.0.35 a. Find the routing entry for the IP to know
- [Find the interface based on MAC or IP address on Juniper Routers (JunOS)](https://freenetworktutorials.com/find-the-interface-based-on-mac-or-ip-address-on-juniper-routers-junos/) - Here are the sample steps on finding the interface where the host is connected based on IP address or MAC address on Juniper Routers. Scenario 1: IP address is given, find which interface it is connected IP address: 192.168.15.6 a. Find the routing entry for the IP to know where it is connected show route
- [Find the interface based on MAC or IP address on Cisco ASR 9000 (IOS-XR)](https://freenetworktutorials.com/find-the-interface-based-on-mac-or-ip-address-on-cisco-asr-9000-ios-xr/) - Note: This steps are based on bridge domain/VPLS setup on Cisco ASR 9000 running Cisco IOS-XR. For normal routed interfaces, you can find it using the command: show arp Scenario 1: IP address is given, find which interface it is connected IP address: 192.168.15.6 a. Find the routing entry for the IP to know
- [Find the interface based on MAC or IP address on Cisco Nexus 7000 (NX-OS)](https://freenetworktutorials.com/find-the-interface-based-on-mac-or-ip-address-on-cisco-nexus-7000-nx-os/) - Here are the sample steps on finding the interface where the host is connected based on IP address or MAC address on Cisco Switch Nexus 7000 series running in Nexus OS. Scenario 1: IP address is given, find which interface it is connected IP address: 192.168.15.6 a. Find the routing entry for the IP to
- [Mnemonics for Networking](https://freenetworktutorials.com/mnemonics-for-networking/) - According to dictionary.com, the word "mnemonics" a device such as a pattern of letters, ideas, or associations that assists in remembering something.In the world of networking, for us to easily remember how technology works is by using mnemonics. Here are popular handy mnemonics that can help us. Syslog Message Types”Every Alley Cat Eats Watery Noodles
- [Bridge Virtual Interface (BVI) Configuration on Cisco ASR 9000](https://freenetworktutorials.com/bridge-virtual-interface-bvi-configuration-on-cisco-asr-9000/) - Cisco BVI (Bridge Virtual Interface) enables Layer 3 routing on a bridge group, connecting different Layer 2 networks. BVI (Bridge Group Virtual Interface) is a routed interface that represents a set of interfaces that gets bridge. Here is the sample Bridge Virtual Interface (BVI) Configuration on Cisco ASR 9000. Fig1. Configuration: RP/0/RSP1/CPU0:ASR9000#configure Configure the interface
- [How to find LACP partner interface or port in Cisco Router and Switch?](https://freenetworktutorials.com/how-to-find-lacp-partner-interface-or-port-in-cisco-router-and-switch/) - Interface description is one of the most important configuration when bringing up interfaces between two devices. In a bundle or port-channel interface, there is a way to find the partner interface or which member in that bundle is your interface or port is connected especially if there's no description or outdated. Here are the steps
- [Top Networking Interview Questions and Answers](https://freenetworktutorials.com/top-networking-interview-questions-and-answers/) - Here are the sample answers for interview for Network Engineer/Administrator/Technician job position. Top Networking Interview Questions and Answers
- [Redundancy and Switchover Route Switch Processor (RSP) or Route Processor (RP) in Cisco ASR9000](https://freenetworktutorials.com/redundancy-and-switchover-route-switch-processor-rsp-or-route-processor-rp-in-cisco-asr9000/) - Here are the steps on performing the switchover of Route Switch Processor (RSP) or Route Processor (RP) in Cisco ASR9000 platforms running in Cisco IOS-XR. Check the redundancy status information to see which RSP or RP running active or standby. show redundancy Example: RP/0/RSP0/CPU0:IOS-XR#show redundancyRedundancy information for node 0/RSP0/CPU0:==========================================Node 0/RSP0/CPU0 is in ACTIVE roleNode Redundancy
- [Steps in Upgrading Cisco IOS-XR code](https://freenetworktutorials.com/steps-in-upgrading-cisco-ios-xr-code/) - These are the steps in upgrading Cisco IOS-XR from 5.x.x to 6.x.x1. Download from Cisco website the necessary files for the upgrade, usually images are in package installation envelope (.pie) format. One way of transferring files to the router is via USB port, thus copy these files in your USB thumb drive and insert in
- [BGP Configuration between Huawei, Juniper and Cisco Routers](https://freenetworktutorials.com/bgp-configuration-for-huawei-juniper-and-cisco-routers/) - Here's the basic BGP (eBGP) configuration of connecting 3 different router vendors namely Huawei, Juniper and Cisco Routers. Assuming we connect via their physical interfaces and incoming and outgoing policies are basically allow all. Sample Configuration Huawei system-view Enter system view, return user view with return command. [~Huawei] interface GigabitEthernet1/0/0 description Connection to Cisco ip
- [Huawei Health Check Commands](https://freenetworktutorials.com/huawei-health-check-commands/) - These are the some commands being used when performing network change or maintenance, depending on the features or services being run in the network. Typically, this is very useful in verification, troubleshooting and comparison between before and after the change.
- [VLAN Configuration Cisco Nexus vs Huawei Switch](https://freenetworktutorials.com/vlan-configuration-cisco-nexus-vs-huawei-switch/) - Here are the sample VLAN configuration and commands comparing Cisco Nexus and Huawei switches. VLAN Creation:
- [Configuring Filter-Based Forwarding (FBF) on Juniper](https://freenetworktutorials.com/configuring-filter-based-forwarding-fbf-on-juniper/) - Filter-Based Forwarding (FBF) or (for some vendor is also called Policy Based Routing (PBR)) is a simple method to route IP traffic to different interfaces on the basis of Layer 3 parameters (e.g. source or destination IP) or Layer 4 parameters (source or destination ports). Example: Objective: - to configure R1 to forward traffic originating
- [RFC Request for Comments in Networking](https://freenetworktutorials.com/rfc-request-for-comments-in-networking/) - RFC or Request for Comments is a publication in a series from the principal technical development and standards-setting bodies for the Internet. It contains technical specifications and organizational for Internet and TCP/IP. It is produced by Internet Engineering Task Force or (IETF). Those members of Internet Society (ISOC) can submit RFCs for consideration. 5
- [IANA and Regional Internet Registries (RIR)](https://freenetworktutorials.com/iana-and-regional-internet-registries-rir/) - IANA or Internet Assigned Numbers Authority is responsible for the global coordination of the DNS Root, IP addressing, and other Internet protocol resources including Autonomous System (AS) numbers used for routing Internet traffic. IANA established the Regional Internet Registries (RIRs) to allocate IP address in geographical regions.There are total of five Regional Internet Registry (RIR)
- [Registered TCP & UDP Ports in Networking](https://freenetworktutorials.com/registered-tcp-udp-ports-in-networking/) - Network ports are software defined number that is associated to a network protocol that transmits or receives or transmits communication for a specific application or service. It is used by Transport Layer of IP Suite, e.g. TCP & UDP. A port number is a 16-bit unsigned integer that ranges from 0 to 65535. There are
- [Installation Packages and Files needed for Cisco IOS-XR](https://freenetworktutorials.com/installation-packages-and-files-needed-for-cisco-ios-xr/) - Installation Files needed for Cisco IOS-XR The required files can only be downloaded via Cisco official website and needs an authorized account. Just go to 'Software Download' and search for the product name. Select for the software types, sample as follows: IOS XR Service Packs IOS XR Software (this is where you can download main
- [Best Practice Configuration for Cisco IOS-XR (Part 1)](https://freenetworktutorials.com/best-practice-configuration-for-cisco-ios-xr-part-1/) - There are sample best practice commands that need to be configured in Cisco IOS-XR devices for additional security. Global config: nsr process-failures switchover tcp path-mtu-discovery tcp selective-ack logging console disable snmp-server ifmib stats cache ssh server logging no telnet vrf $vrf-name ipv4 server ssh client source-interface $$loopback0 logging events link-status software-interfaces Admin config: upgrade fpd
- [SNMPv2c and SNMPv3 Polling and Traps Configuration in Juniper](https://freenetworktutorials.com/snmpv2c-and-snmpv3-polling-and-traps-configuration-in-juniper/) - Here is sample SNMPv2 and SNMPv3 configuration in Juniper routers. It also detailed on configuring SNMP trap for your Network Monitoring System(NMS). SNMPv2c community: snmpcomm123 management IP address: 192.168.10.100 SNMP Polling Server: 192.168.20.199 SNMP Trap Server: 192.168.20.200 Configuration: set snmp name JUNIPER-SNMP set snmp description "Juniper SNMP" set snmp location Datacentre set snmp community snmp
- [SNMPv2c and SNMPv3 Polling and Traps Configuration in Cisco (IOS-XR)](https://freenetworktutorials.com/snmpv2c-and-snmpv3-polling-and-traps-configuration-in-cisco-ios-xr/) - Here is sample commands in configuring SNMPv2 and SNMPv3 in Cisco IOS-XR devices. It also detailed on how to configure SNMP traps for your Network Monitoring System. SNMPv2c community: snmpcomm123 management IP address: 192.168.10.100 SNMP Polling Server: 192.168.20.199 SNMP Trap Server: 192.168.20.200 SNMPv2c Polling Configuration: ipv4 access-list SNMP-ALLOW 10 permit ipv4 host 192.168.20.199 any snmp-server contact
- [Border Gateway Protocol (BGP) Best Path Selection Mnemonic](https://freenetworktutorials.com/border-gateway-protocol-bgp-best-path-selection-mnemonic/) - Here is the most popular Mnemonic for Border Gateway Protocol (BGP) for Best Path Selection. This helps to easily remember on how BGP choosing its best path instead of memorizing it. “We Love Oranges AS Oranges Mean Pure Refreshment” W Weight (Highest) L LOCAL_PREF (Highest) O Originate (local) routes that are advertise through the "network" command or redistributed from
- [Equal-cost multipath (ECMP) or Load-Balance in Juniper](https://freenetworktutorials.com/equal-cost-multipath-ecmp-or-load-balance-in-juniper/) - Here are the steps of configuring Equal cost multipath (ECMP) in Juniper routers for Load balancing purposes. Step1:Configure ECMP routing policy set policy-options policy-statement LBPOLICY then load-balance per-packet Step2: Export the policy to forwarding table set routing-options forwarding-table export LBPOLICY Verification: (Use the command "show route forwarding-table") user1@QFX-re0> show route forwarding-table Routing table: default.inet Internet:
- [Best Security Template of Cisco IOS-XR for AAA,SSH,NTP,SNMP and Syslog](https://freenetworktutorials.com/best-security-template-of-cisco-ios-xr-for-aaasshntpsnmp-and-syslog/)
- [Syslog Configuration on Huawei Router](https://freenetworktutorials.com/syslog-configuration-on-huawei-router/) - Here's a syslog configuration examples for Huawei Routers Remote Syslog Server IP = 10.50.50.50 Pre-configured: sysname Syslog Configuration: 1. Enable the logging functionality info-center enable 2. Configure the channel to send logs to the remote syslog server info-center channel 6 name info-center source channel trap level debug level
- [Netstream (Netflow) Configuration on Huawei Router](https://freenetworktutorials.com/netstream-netflow-configuration-on-huawei-router/) - Here's a sample steps for configuring Netstream or Netflow on Huawe Router: Netstream Server = 192.168.30.100 Netstream UDP port = 9991 version = v9 Loopback IP = 1.1.1.1 Configure Netstream for IPv4 & IPv6 ip netstream timeout active ip netstream export version origin-as ip netstream export template timeout-rate ip netstream sampler fix-packets
- [SFP+ 10G Transceiver Modules Tables](https://freenetworktutorials.com/sfp-10g-transceiver-modules-tables/) - Some Useful 10GBASE Small Form-Factor Pluggable (SFP) Transceiver Modules Model Distance Wavelength Mode Medium Interface Temp. SFP-10G-SR 300m 850nm Multimode Fiber Duplex LC 0-70℃ SFP-10G-LR 10km 1310nm Singlemode Fiber Duplex LC 0-70℃ SFP-10G-LRM 220m 1310nm Multimode Fiber Duplex LC 0-70℃ SFP-10G-ER 40km 1550nm Snglemode Fiber Duplex LC 0-70℃ SFP-10G-ZR 80km 1550nm Singlemode Fiber Duplex LC
- [uRPF Configuration on Cisco (IOS,IOS-XR,NX-OS)](https://freenetworktutorials.com/urpf-configuration-on-cisco-iosios-xrnx-os/) - uRPF or Unicast Reverse Path Forwarding is a security feature/tool that help verifies reachability of source address in packets being forwarded. It can prevents malicious and spoofing attacks as it will perform forwarding table lookup on the source IP address. - it as defined in RFC3704 - it follows RFC2827 for ingress filtering. - it
- [Static Management Configuration for Cisco vs Juniper vs Huawei Comparison](https://freenetworktutorials.com/static-management-configuration-for-cisco-vs-juniper-vs-huawei-comparison/) - Here's the sample configuration for setting up the management port for different router platforms using static route. Assuming we have this IP configuration:RSP0/RE0 Physical IP : 10.10.10.98/24RSP1/RE1 Physical IP: 10.10.10.99/24 Virtual IP: 10.10.10.100/24 Gateway: 10.10.10.1/24 Note: It is advisable to connect the management plane connectivity to another network separate from data/voice network. Free Network
- [Useful Cisco IOS-XR Hardware-related commands](https://freenetworktutorials.com/useful-cisco-ios-xr-hardware-related-commands/) - Here are common and useful Cisco IOS-XR commands to check any hardware-related information. General/Overall: admin show inventory chassis admin show inventory all admin show inventory rack admin show environment all admin show environment alarms admin show diag admin show diag chassis admin show hw-module fpd location all admin show environment trace admin show platform admin - Free Network
- [OSPF and OSPFv3 Configuration on Huawei Routers](https://freenetworktutorials.com/ospf-and-ospfv3-configuration-on-huawei-routers/) - Here is sample basic IPv4 & IPv6(OSPFv3) Open Shortest Path First (OSPF) configuration between 2 Huawei Routers with MD5 authentication. Fig1. RouterA Configuration: Configure physical interface interface 100GE6/0/0 description Connection to RouterB undo shutdown eth-trunk 1 undo lldp enable undo dcn 2. Configure the Eth-Trunk IPv4/IPv6 address interface Eth-Trunk1 description Eth-Trunk to RouterB ipv6 enable
- [Steps in Upgrading Juniper OS (JunOS)](https://freenetworktutorials.com/steps-in-upgrading-juniper-os-junos/) - These are the steps in upgrading Juniper Routers. This was tested using the JunOS SRX router. Assumption: JunOS is downloaded and stored in an FTP server. Step1: Download the necessary image from the FTP server. Save it in the /var/tmp folder. user1@SRX-Router1> file copy ftp://user1@172.25.11.254/junos-vsrx-x86-64-19.2R1.8.tgz /var/tmp/ Password for user1@172.25.11.254: /var/home/user1/...transferring.file.........ush100% of 1127 MB 5426 kBps
- [Hidden Command to support 3rd-Party Transceivers for Cisco](https://freenetworktutorials.com/hidden-command-to-support-3rd-party-transceivers-for-cisco/) - Why is considered hidden? Because you won't see it in the command in Cisco Routers Command Line Interface (CLI). Sample output: RP/0/RSP1/CPU0:CORE1#ser? service RP/0/RSP1/CPU0:CORE1#service ? redundancy Service Director related commands. Then what it is? service unsupported-transceiver Configuration: Cisco IOS-XE Router1(config)#service unsupported-transceiver Warning: When Cisco determines that a fault or defect can be traced to
- [Configuring NetFlow in Cisco (IOS-XR and Nexus OS)](https://freenetworktutorials.com/configuring-netflow-in-cisco-ios-xr-nexus-os/) - Here's the sample configuration of Netflow in Cisco running IOS and Nexus-OS. Cisco IOS-XR: The NetFlow use these 3 maps to configure Step1. EXPORTER MAP - configure parameters like export destination IP, udp port (only supported transport protocol), source interface IPv4: flow exporter-map NETFLOW-EXPORTER-MAP version v9 transport udp 9991 source Loopback0 destination
- [Configuring Banner or Login Message in Juniper](https://freenetworktutorials.com/configuring-banner-or-login-message-in-juniper/) - Juniper darwin@vMX-1>configure darwin@vMX-1#set system login message "\n*************************************************************************\n UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED\n\nYou must have explicit, authorized permission to access or configure this \ndevice.Unauthorized attempts and actions to access or use this system may \nresult in civil and/or criminal penalties.\nAll activities performed on this device are logged and monitored.\n\n*************************************************************************\n\n" darwin@vMX-1#commit As per
- [Control Plane Policing (CoPP) Configuration in Cisco IOS](https://freenetworktutorials.com/control-plane-policing-copp-configuration-in-cisco-ios/) - As per Cisco website definition: Control Plane Policing (CoPP) is a Cisco IOS-wide feature designed to allow users to manage the flow of traffic handled by the route processor of their network devices. CoPP is designed to prevent unnecessary traffic from overwhelming the route processor that, if left unabated, could affect system performance. Here's a
- [IPv4 and IPv6 Static Route Configuration in Juniper](https://freenetworktutorials.com/ipv4-and-ipv6-static-route-configuration-in-juniper/) - Here's a sample IPv4 and IPv6 Static Route Configuration in Juniper Routers Configuration: IPv4: Route the block (1.1.1.0/24) to next hop 2.2.2.1 with metric 255 user@MX-re0>configure #set routing-options static route 1.1.1.0/24 next-hop 2.2.2.1 #set routing-options static route 1.1.1.0/24 metric 255 Optional: Set comment using annotate command #edit routing-options static #annotate route 1.1.1.0/24 "/* STATIC ROUTE IPv4*/"
- [Sample IS-IS Configuration in Cisco IOS-XR, IOS and Nexus OS](https://freenetworktutorials.com/sample-is-is-configuration-in-cisco-ios-xr-ios-and-nexus-os/) - Here's the sample IS-IS dynamic routing configuration in different Cisco platforms. Fig.1 IOS-XR Configure Loopback interface Loopback0 ipv4 address 172.16.2.1 255.255.255.255 ipv6 address fdfe:abcd:ef12:0:172:16:2:1/128 ipv6 enable Configure P2P IP interface Gi0/0/0/0 description Connection to IOS Fa0/0 ipv4 address 172.17.0.1 255.255.255.252 ipv4 verify unicast source reachable-via any ipv4 unreachables disable ipv6 nd suppress-ra ipv6 verify
- [Best Security Practices for SSH (Secure Shell) Remote Access in Cisco](https://freenetworktutorials.com/best-security-practices-for-ssh-secure-shell-remote-access-in-cisco/) - 1.Remote access should be via SSH and telnet is disabled IOS-XR: no telnet ipv4 server Nexus OS: no feature telnet feature ssh feature tacacs+ 2. SSH should be version 2 or higher. Do not run v1. IOS-XR: ssh server v2 ssh server vrf management Nexus OS: ssh server v2 ssh server vrf management ssh timeout
- [Best Security Practices for SSH (Secure Shell) Remote Access in Juniper](https://freenetworktutorials.com/best-security-practices-for-ssh-secure-shell-remote-access-in-juniper/) - Here's some Best practices that you can implement in Juniper devices in securing your SSH. 1.Remote access should be via SSH and telnet is disabled delete system services telnet 2. SSH should be version 2 or higher. Do not run v1 set system services ssh protocol-version v2 3. Configure Login Banner set system
- [Checking TX / RX optical power in Juniper (JunOS)](https://freenetworktutorials.com/checking-tx-rx-optical-power-in-juniper-junos/) - Checking TX / RX optical power for Juniper Routers For checking transmission links, it is good to know how to find out the optical power for troubleshooting and making sure the desired or optimal range is meet. Here is the sample command for checking the TX/RX optical power show interfaces diagnostics optics Sample Output
- [Originating BGP advertisements and BGP community tagging in Juniper](https://freenetworktutorials.com/originating-bgp-advertisements-and-bgp-community-tagging-in-juniper/) - Originating BGP advertisement can be configured to any iBGP peer router. Here's the sample configuration of originating BGP routes and community tagging in Juniper. Assuming these are the summarized prefixes that you want to advertise via BGP. 111.111.0.0/16 222.222.0.0/16 Configuration: routing-options { graceful-restart; router-id 1.1.1.1; autonomous-system 11111; protocols { bgp { group RR-IBGP { type
- [Static Route Configuration Examples in Juniper for BGP Aggregated Prefix](https://freenetworktutorials.com/static-route-configuration-examples-in-juniper-for-bgp-aggregated-prefix/) - Static Route Configuration Examples in Juniper for BGP aggregated prefix advertisements In order to advertise the aggregated routes (and default routes) via BGP, it should exists in the routing table, that's the #1 rule. If these summarized routes (/16) are not existing and only smaller subnets are learned via the IGP(e.g. OSPF,IS-IS), then configure static
- [Where to apply ACL? ingress vs egress](https://freenetworktutorials.com/where-to-apply-acl-ingress-vs-egress/) - I really find this post from user "jlim13" from (thwack.solarwinds.com)quite useful in understanding where to apply the ACL. In order to brush off your confusion, think for a moment that you are a router, your left hand is the WAN and your right hand is the LAN. Whenever you say Ingress, it means traffic is
- [Types of AC Power Cables in Datacenter](https://freenetworktutorials.com/types-of-ac-power-cables-in-datacenter/) - It is good to know these types of power cables/plug in case you need to bring up servers from external parties. Normally servers are C13 plug but the other end can be different depending on the rack you have, (country specific). These are the common types that you need to be familiar with if you
- [Types of Fiber Optic Cable Connector](https://freenetworktutorials.com/types-of-fiber-optic-cable-connector/) - Fiber Optic Cable Connectors provide alignment of microscopic glass fibers used in fiber cables in transmitting high speed data. These are the types of fiber optic cable connectors that you will come across in a datacenter. There's few more that I excluded in the list as already obsolete and seldom use. 1. SC (Standard/Subscriber/Square Connector)
- [BGP Public and Private AS Cheat Sheet](https://freenetworktutorials.com/bgp-public-and-private-as-cheat-sheet/) - Autonomous System or AS is a set of routable IP prefixes that belongs to a network or collections of networks managed by a single entity such as ISP, corporate network, university, etc. and maintain a single or common routing policy. Each AS has to be represented by unique number called Autonomous System Number or ASN
- [Juniper Health Check Commands](https://freenetworktutorials.com/juniper-health-check-commands/) - These are the some commands being used when performing network change or maintenance, depending on the features or services being run in the network. Typically, this is very useful in verification, troubleshooting and comparison between before and after the change. #Log Time set cli timestamp set cli screen-width 200 show ntp associations no-resolve | no-more
- [Best Security Practices for Cisco IOS-XR on Management Plane](https://freenetworktutorials.com/best-security-practices-for-cisco-ios-xr-on-management-plane/) - It is recommended to implement the separation of management and data/customer traffic in your Datacenter switches like Cisco IOS-XR devices (e.g. ASR 9000, CRS). Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. Here's the recommended configuration or practices for these management
- [Best Security Practices for Cisco IOS and IOS-XE (Part 1)](https://freenetworktutorials.com/best-security-practices-for-cisco-ios-and-ios-xe-part-1/) - It is recommended to implement the separation of management and data/customer traffic in your Datacenter switches like Cisco IOS and IOS-XE (e.g. ASR1000). Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. Here's the recommended configuration or practices for these management services.
- [Static Route Configuration on Cisco IOS-XR Routers](https://freenetworktutorials.com/static-route-configuration-on-cisco-ios-xr-routers/) - Here are sample static route configuration on Cisco IOS-XR routers such as CRS and ASR9000. 1.Configure IPv4 default route to next hop 192.168.10.3 (via Bundle-Ether1) router static address-family ipv4 unicast 0.0.0.0/0 Bundle-Ether1 192.168.10.3 2.Configure IPv4 default route to next hop 192.168.10.3 (via Bundle-Ether1) underr vrf management router static vrf management address-family ipv4 unicast 0.0.0.0/0
- [Static Route Configuration on Juniper (JunOS) Routers](https://freenetworktutorials.com/static-route-configuration-on-juniper-junos-routers/) - Here are sample static route configuration on Juniper routers such as MX and QFX series. 1.Configure IPv4 default route to next hop 192.168.10.3 set routing-options static route 0.0.0.0/0 next-hop 192.168.10.3 2.Configure IPv4 default route to next hop 192.168.10.3 via management port set routing-instances mgmt_junos routing-options static route 0.0.0.0/0 next-hop 192.168.10.3 3. Configure IPv4
- [VRRP and BGP Setup Configuration in Cisco](https://freenetworktutorials.com/vrrp-and-bgp-setup-configuration-in-cisco/) - We are going to configure VRRP between the 2 pairs of routers and the expected behavior, setup as per below: Setup: 1. Routers PE1,PE2,FW1 and FW2 are connected to the same Layer 2 Switch and belongs to the same VLAN. 2. L2-Switch will just function as Layer 2 switch (subnet 192.168.2.240/29) 3. VRRP is configured
- [Checking ASR 9000 Linecard Health Commands](https://freenetworktutorials.com/checking-asr-9000-linecard-health-commands/) - Assuming you have this type of card on your Cisco ASR9000 Series Router and inserted on Slot 0 A9K-MOD80-SE --> 80G Modular Linecard, Service Edge Optimized A9K-MPA-4X10GE --> ASR 9000 4-port 10GE Modular Port Adapter Here's the following commands that can be used: show pfm location all show asic-errors all location 0/0/cpu0 show controllers fabric
- [Cisco IOS-XR Smart Call Home Configuration using Email and HTTP](https://freenetworktutorials.com/cisco-smart-call-home-configuration-email-and-http/) - As per Cisco documentation, Smart Call Home offers proactive diagnostics and real-time alerts on select Cisco devices, which provides higher network availability and increased operational efficiency. There are few ways on sending these alerts, it can be either by email or http. Sample Configuration using Email Method call-home service active sender reply-to sender from
- [HSRP Configuration on Cisco IOS-XR](https://freenetworktutorials.com/hsrp-configuration-on-cisco-ios-xr/) - As per Cisco definition: Hot Standby Router Protocol (HSRP) provides redundancy for IP networks, ensuring that user traffic immediately and transparently recovers from first hop router failures. HSRP allows multiple routers on a single LAN to share a virtual IP and MAC address which is configured as the default gateway on the hosts. From the
- [LACP Configuration on Cisco IOS, IOS-XE, IOS-XR and NX-OS](https://freenetworktutorials.com/lacp-configuration-on-cisco-ios-ios-xe-ios-xr-and-nx-os/) - Link Aggregation Control Protocol or IEEE 802.3ad (LACP) is an open standard of Ethernet link aggregation protocol. It is a method used by routers/switches to automatically establish link aggregation groups or LAG ( sometimes called as channel groups, bundle or port-channels). Here's LACP configuration examples for different Cisco platforms using LACP active mode, where it
- [CIDR IPv4 Subnet Cheat Sheet](https://freenetworktutorials.com/cidr-ipv4-subnet-cheat-sheet/) - For number of addresses, I always used this formula:32 - (cidr) = Xthen 2^x = number of addressesTo get the number of hosts, subtract with 2 (network and subnet mask) Example: (to get # of addresses and hosts of /24)32 - 24 = 82^8 = 256 (total number of addresses)256 -2 = 254 (total number
- [IPv4 Classful and Reserved Addresses](https://freenetworktutorials.com/ipv4-classful-and-reserved-addresses/) - Reserved (Private) IPv4 APIPA or short for Automatic Private Internet Protocol Addressing, is also alternatively referred to Autonet, Zero configuration network and Zeroconf.
- [IPv4 and IPv6 Bogon Address List](https://freenetworktutorials.com/ipv4-and-ipv6-bogon-address-list/) - "Bogon" or coined from the word "bogus", In computer world, these are IP addresses that have not been officially assigned to an entity such as IANA or Internet Assigned Number Authority which is an organization who managed allocation of globally unique IPs. Bogon IP adddress/ranges should not appear on the public Internet so network engineers should
- [Bogon IPv4 Ingress and Egress Filtering in Cisco IOS-XR](https://freenetworktutorials.com/bogon-ipv4-ingress-and-egress-filtering-in-cisco/) - As mentioned from the previous post, Bogon prefixes or routes should never appear in the Internet routing table. Network Engineers should implement "Best Practices" in their network, that includes filtering of bogons as it maybe used in DDoS attacks or Spams. Refer to https://freenetworktutorials.com/ipv4-and-ipv6-bogon-address-list for more info. "Martians" bogons may changed occasionally so at least make
- [DHCP Server Configuration in Cisco Switch](https://freenetworktutorials.com/dhcp-server-configuration-in-cisco-switch/) - Dynamic Host Configuration Protocol, or DHCP, is a network protocol used (via DHCP server) to dynamically or automatically assign IP address and other info (e.g.Gateway,DNS) to each hosts in the network. Here's a sample configuration of running DHCP server in a Layer 3 switch. Host Setup: Gateway: 192.168.10.1 Netmask: 255.255.255.0 DNS Server: 192.168.20.254, 8.8.8.8 Layer
- [Cisco's Administrative Distance Juniper's Route Preference and Huawei's Preference Cheat Sheet](https://freenetworktutorials.com/ciscos-administrative-distance-junipers-route-preference-and-huaweis-preference-cheat-sheet/) - In routing world, Administrative Distance refers to the reliability of the routing protocol. It is equivalent to Juniper's Route Preference and Huawei's Preference. It is important to consider these values as in the scenario that there are multiple routes to a destination (with same prefix length), the route (learned via the routing protocol) with the
- [UTP Cable Color Coding](https://freenetworktutorials.com/utp-cable-color-coding/) - UTP or Unshielded Twisted Pair is a type of copper cabling used in LANs and has several categories based on the TIA/EIA 568 standard namely as CAT3,CAT4,CAT5,CAT5E and CAT6. Common connector used with these UTP cables are RJ-45. Most common used now are CAT5e as it supports up to 1Gbps for 100 meters, and now
- [Bogon IPv4 Ingress and Egress Filtering in Juniper](https://freenetworktutorials.com/bogon-ipv4-ingress-and-egress-filtering-in-juniper/) - As mentioned from the previous post, Bogon prefixes or routes should never appear in the Internet routing table. Network Engineers should implement “Best Practices” in their network, that includes filtering of bogons as it maybe used in DDoS attacks or Spams. Refer to https://freenetworktutorials.com/ipv4-and-ipv6-bogon-address-list for more info. “Martians” bogons may changed occasionally so at least make
- [Virtual Port Channel (vPC) Configuration on Cisco Nexus](https://freenetworktutorials.com/virtual-port-channel-vpc-configuration-on-cisco-nexus/) - As per Cisco documentation: A virtual PortChannel (vPC) allows links that are physically connected to two different Cisco Nexus devices to appear as a single Port Channel to a third device. The third device can be a Cisco Nexus 2000 Series Fabric Extender or a switch, server, or any other networking device. A vPC can
- [Cisco Nexus Smart Call Home Configuration using Email](https://freenetworktutorials.com/cisco-nexus-smart-call-home-configuration-using-email/) - As per Cisco documentation, Smart Call Home offers proactive diagnostics and real-time alerts on select Cisco devices, which provides higher network availability and increased operational efficiency. There are few ways on sending these alerts, it can be either by email or http. Sample Configuration using Email Method: callhome contract-id [value] switch-priority 7 email-contact [email-address] phone-contact
- [SSH Configuration on Huawei Router](https://freenetworktutorials.com/ssh-configuration-on-huawei-router/) - SSH Configuration Examples in Huawei Router Here are the configuration examples: whereas: 192.168.100.100 = Jumphost IP (Allowed IP to SSH into the device) Enable the SSH service stelnet server enable 2. Configure key exchange algorithm ssh server key-exchange { dh_group_exchange_sha256 dh_group_exchange_sha1 ecdh_sha2_nistp256 ecdh_sha2_nistp384 ecdh_sha2_nistp521 sm2_kep} 3. Configure encryption algorithm ssh server cipher { aes256_ctr aes128_ctr
- [NTP Configuration on Huawei Router](https://freenetworktutorials.com/ntp-configuration-on-huawei-router/) - One of the Best Security Practice and Recommendation is to configure Huawei Router in client mode and never run as NTP server. NTP Server1: 192.168.10.101 NTP Server1: 192.168.10.102 Configuration: ntp-service server disable ntp-service ipv6 server disable ntp-service unicast-server 192.168.10.101 ntp-service unicast-server 192.168.10.102 Verification: display ntp-service status display ntp-service sessions If authentication is enabled on your
- [TACACS (AAA) Configuration on Huawei Router](https://freenetworktutorials.com/tacacs-aaa-configuration-on-huawei/) - Configuring Huawei Router to authenticate (also including authorization and accounting) to Tacacs+ server 10.10.10.10 - Tacacs+/ACS/ISE/AAA server#1 10.10.10.11 - Tacacs+/ACS/ISE/AAA server#2 20.20.20.2 - Loopback/source IP Configure the tacacs server profile or template hwtacacs-server template hwtacacs-server authentication hwtacacs-server authentication secondary hwtacacs-server authorization hwtacacs-server authorization secondary hwtacacs-server accounting
- [Checking TX / RX optical power for Cisco IOS, IOS-XR, NX-OS](https://freenetworktutorials.com/checking-tx-rx-optical-power-for-cisco-ios-ios-xr-nx-os/) - Checking TX / RX optical power for Cisco IOS, IOS-XR, NX-OSFor checking transmission links, it is good to know how to find out the optical power for troubleshooting and making sure the desired or optimal range is meet. Here are the sample commands for checking the TX/RX optical power. IOS / IOS-XE If want to
- [Cisco IOS-XR Minimum System Requirements for Upgrade](https://freenetworktutorials.com/cisco-ios-xr-minimum-system-requirements-for-upgrade/) - Cisco IOS-XR Minimum System Requirements for Upgrade For upgrading IOS-XR devices like ASR9000 routers, e.g. from 5.x to 6.x , the minimum memory requirements for ver. 6.2.3 are: minimum 2 GB compact flash on RSPs or Route Switch Processors minimum 6 GB memory on the RSP-440 and RP (ASR99xx) minimum 4 GB memory on LCs
- [Cisco IOS-XR Pre & Post Upgrade Installation Commands](https://freenetworktutorials.com/cisco-ios-xr-pre-post-upgrade-installation-commands/) - These are the some commands being used when performing network change or maintenance, depending on the features or services being run in the network. Typically, this is very useful in verification, troubleshooting and comparison between before and after the change. terminal exec prompt timestamp terminal length 0 show version show run show filesystem location 0/rsp0/cpu0
- [How to upgrade Field Programmable Device (FPD) on Cisco IOS-XR](https://freenetworktutorials.com/how-to-upgrade-field-programmable-device-fpd-on-cisco-ios-xr/) - How to upgrade Field Programmable Device (FPD) on Cisco IOS XRAs per Cisco official documentation, the definition of FPD as follows: An FPD refers to any programmable hardware device on a router, which includes a Field Programmable Gate Array (FPGA) and Read Only Memory Monitor (ROMMON). Cisco IOS® XR routers use a number of FPDs
- [Wipe out running configuration in Cisco IOS-XR](https://freenetworktutorials.com/wipe-out-running-configuration-in-cisco-ios-xr/) - For IOS, the equivalent command of "write erase" to IOS-XR is the command "commit replace" RP/0/RSP0/CPU0:ASR9K(config)#commit replace ? best-effort Commit the configuration changes via best-effort operation comment Assign a comment to this commit confirmed Rollback this commit unless there is a confirming commit force Override the memory checks label
- [Sample Network Scanning of Routers using Nmap](https://freenetworktutorials.com/sample-network-scanning-of-routers-using-nmap/) - Nmap, or short for Network Mapper, is a free and pen-source tool for scanning vulnerabilities and can also be used for network discovery. It can help identify what devices are running on their systems, discovering hosts that are available and the services they running. To see the open ports or running daemon/services in your routers
- [Isolating OSPF and ISIS traffic in Cisco IOS-XR routers](https://freenetworktutorials.com/isolating-ospf-and-isis-traffic-in-cisco-ios-xr-routers/) - This can be done by increasing metric @OSPF Set the max-metric in OSPF and OSPFv3 in IOS-XR devices: RP/0/RSP0/CPU0:IOS-XR(config)# router ospf 65555 max-metric router-lsa external-lsa router ospfv3 65555 stub-router router-lsa v6-bit always Save the changes: commit RP/0/RSP0/CPU0:IOS-XR(config)#commit Verify: show ospf database @ISIS Increase ISIS metric router isis XXXX set-overload-bit Save the
- [Fixing IOU Keygen Error Running Cisco IOS on Linux in Eve-NG](https://freenetworktutorials.com/fixing-iou-keygen-error-running-cisco-ios-on-linux-in-eve-ng/) - If you keep getting this error when generating key as license for running IOL or IOS On Linux, (also called IOU or IOS On Unix) in EVE-NG darwin@eve-ng:/$ cd /opt/unetlab/addons/iol/bin darwin@eve-ng:/opt/unetlab/addons/iol/bin$ python keygen.py ********************************************************************* Cisco IOU License Generator - Kal 2011, python port of 2006 C version hostid=bada0c0f, hostname=eve-ng, ioukey=bada0e51 Traceback (most recent call last):
- [Originating BGP advertisements and BGP community tagging in Cisco IOS-XR](https://freenetworktutorials.com/originating-bgp-advertisements-and-bgp-community-tagging-in-cisco-ios-xr/) - Originating BGP advertisement can be configured to any iBGP peer router. Here's the sample configuration of originating BGP routes and community tagging in Cisco Assuming these are the summarized prefixes that you want to advertise via BGP. 111.111.0.0/16 222.222.0.0/16 Configuration: Configure the prefix-set prefix-set SITE1 111.111.0.0/16, 222.222.0.0/16 end-set 2. Configure the community route-policy bgp-statement if
- [Static Route Configuration Examples in Cisco IOS-XR for BGP Aggregated Prefix](https://freenetworktutorials.com/static-route-configuration-examples-in-cisco-ios-xr-and-juniper-for-bgp-aggregated-prefix/) - Static Route Configuration Examples in Cisco (IOS-XR) for BGP aggregated prefix advertisements In order to advertise the aggregated routes (and default routes) via BGP, it should exists in the routing table, that's the #1 rule. If these summarized routes (/16) are not existing and only smaller subnets are learned via the IGP(e.g. OSPF,IS-IS), then configure
- [Upgrading Field Programmable Device (FPD) in Cisco IOS-XR (Updated)](https://freenetworktutorials.com/upgrading-field-programmable-device-fpd-in-cisco-ios-xr-updated/) - As per Cisco official site definition of FPD: An FPD refers to any programmable hardware device on a router, which includes a Field Programmable Gate Array (FPGA) and Read Only Memory Monitor (ROMMON). Cisco IOS® XR routers use a number of FPDs that are crucial for the function of route processors, line cards, shared port
- [Configuring Management Interface in Juniper Routers](https://freenetworktutorials.com/configuring-management-interface-in-juniper-routers/) - One of the best security practices in networking is separation of management traffic and data/control traffic. One way to achieve this is to use the management ports of Juniper devices to physically connect it preferably to different network. The management Ethernet interface is usually em0 or fxp0 in Juniper, and provides out-of-band(OOB)management network of the
- [NTP Configuration via Management Routing Instance in Juniper](https://freenetworktutorials.com/ntp-configuration-via-management-routing-instance-in-juniper/) - In related to configuring management interface in Juniper, NTP traffic should go via the management port and not through the data ports. Pre-requisite configuration can be found here: https://freenetworktutorials.com/configuring-management-interface-in-juniper-routers/ NTP Server1: 192.168.10.101 NTP Server1: 192.168.10.102 Configuration: set system ntp server 192.168.10.101 routing-instance mgmt_junos set system ntp server 192.168.10.102 routing-instance mgmt_junos set system ntp source-address 172.16.0.100
- [EBGP Configuration on Huawei Router](https://freenetworktutorials.com/ebgp-configuration-on-huawei-router/) - Here is sample tutorial on how to configure External Border Gateway Protocol (EBGP) between Huawei Router and another router. I will focus on the configuration of the Huawei router (RouterA). Fig.1.1 Procedure: 1. Configure the Loopback IP address a. Enter system view command: system-view system-view Enter system view, return user view with return command. interface
- [TCP vs UDP Comparison Table](https://freenetworktutorials.com/tcp-vs-udp-comparison-table/) - Transmission Control Protocol (TCP) - is a connection-oriented communications protocol that is used to ensure reliable transmission of packets between computing devices in a network. User Datagram Protocol (UDP) - is a connection-less communications protocol that is used especially for time-sensitive and low latency transmissions across the network. Here's a table of comparison:
- [Out of Band (OOB) Management Configuration on Huawei Routers (SSH,SNMP,NTP,AAA,Syslog)](https://freenetworktutorials.com/out-of-band-oob-management-configuration-on-huawei-routers-sshsnmpntpaaasyslog/) - Objective: To separate management traffic from data/customer traffic in your Huawei Routers Preferably, Data and Management are into 2 separate network domains. Pre-requisite: UTP cables (for each MPU management port in case for switchover) are connected to a network switch to access the OOB management gateway To go configuration mode: system-view To preview configuration change
- [Converting Physical to Bundle interface (LACP) on Juniper Routers](https://freenetworktutorials.com/converting-physical-to-bundle-interface-lacp-on-juniper-routers/) - This is a sample steps of migrating IP configuration from physical interface to bundle interface. Take note that this may result service impact during the migration as the existing interface need to be shutdown and re-configure. Remember to shift your traffic prior with the maintenance. Existing Config: freenetwork@MX1-re0> show configuration interfaces et-0/0/1 description "Link to
- [VLAN and Port-Channel Configuration (Cisco to Juniper Conversion)](https://freenetworktutorials.com/vlan-and-port-channel-configuration-cisco-to-juniper-conversion/) - Scenario:2 physical interfaces bundled together (port-channel) and associated in the same vlan. Tested in:Cisco NexusJuniper EX Series
- [Cisco RPL vs Huawei XPL Route Policy Language Configuration](https://freenetworktutorials.com/cisco-rpl-vs-huawei-xpl-route-policy-language-configuration/) - Cisco uses RPL (Route Policy Language) while Huawei uses XPL (Extended Route Policy language). Basically they are the same concept but of course the commands are slightly different, though editing the policy or prefix-set requires vi/vim knowlege.
- [Resequence Access Lists on Cisco Routers (IOS, IOS-XE, IOS-XR, Nexus-OS)](https://freenetworktutorials.com/resequence-access-lists-on-cisco-routers-ios-ios-xe-ios-xr-nexus-os/) - Here are sample configuration on resequencing access lists in Cisco Routers for IOS, IOS-XE, IOS-XR and Nexus OS Cisco IOS/IOS-XE a. Show the existing access-list IOS#show access-lists acl_123 Extended IP access list acl_123 10 permit tcp 192.168.10.8 255.255.255.255 192.168.20.5 255.255.255.255 eq 22 20 permit tcp 172.16.0.10.8 255.255.255.255 192.168.20.5 255.255.255.255 eq 22 30 deny ip any
- [Best Security Practices for Huawei Routers on Management Plane](https://freenetworktutorials.com/best-security-practices-for-huawei-routers-on-management-plane/) - It is recommended to implement the separation of management and data/customer traffic in your Huawei Service Routers (e.g. NE40E Series). Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. These are the steps on hardening the security on Huawei Routers. Management instance
- [Well-Known TCP & UDP Ports in Networking](https://freenetworktutorials.com/well-known-tcp-udp-ports-in-networking/) - Network ports are software defined number that is associated to a network protocol that transmits or receives or transmits communication for a specific application or service. It is used by Transport Layer of IP Suite, e.g. TCP & UDP. A port number is a 16-bit unsigned integer that ranges from 0 to 65535.There are 3
- [Out of Band (OOB) Management Configuration in Cisco IOS-XR (SSH,SNMP,NTP,AAA,Syslog)](https://freenetworktutorials.com/out-of-band-oob-management-configuration-in-cisco-ios-xr-sshsnmpntpaaasyslog/) - Objective: To separate management traffic from data/customer traffic in your Cisco XR routers. Preferably, Data and Management are into 2 separate network domains. Pre-requisite: UTP cables (for each RSP management port in case for switchover) are connected to a network switch to access the OOB management gateway * * Management IP Configuration* * 1. Configure the vrf for
- [TACACS (AAA) Configuration in Cisco (IOS-XR, IOS-XE, IOS, NX-OS)](https://freenetworktutorials.com/tacacs-aaa-configuration-in-juniper-and-cisco-ios-xr-ios-xe-ios-nx-os/) - Configuring Cisco to authenticate (also including authorization and accounting) to Tacacs+ server 10.10.10.10 - Tacacs+ AAA server IOS: aaa authentication login VTY group tacacs+ line aaa authentication enable default group tacacs+ enable aaa authorization commands 1 default group tacacs+ none aaa authorization commands 15 default group tacacs+ none aaa accounting exec default start-stop group tacacs+
- [Tacacs (Authentication and Accounting) Configuration in Juniper](https://freenetworktutorials.com/tacacs-authentication-and-accounting-configuration-in-juniper/) - Tacacs/AAA/ISE Server: 192.168.10.222 Tacacs Password: tacpassword1 Router's Management IP: 192.168.0.4 (under mgmt_junos routing instance) Assumption: There's an existing local account e.g. "user1" set system login user user1 class super-user set system login user user1 authentication plain-text-password (passwordhere) 1. Configure the tacacs server IP set system tacplus-server 192.168.10.222 routing-instance mgmt_junos set system tacplus-server 192.168.10.222 secret tacpassword1 set system
- [Fixing Link Aggregation Control Protocol  or LACP Timeout in Juniper](https://freenetworktutorials.com/fixing-link-aggregation-control-protocol-or-lacp-timeout-in-juniper/) - By default in Juniper, LACP timer is fast which is 1 sec, while in Cisco the default setting is slow which is 30 secs. If connecting Juniper devices to non-Juniper routers or switches, the LACP timer will have mismatch thus it can cause LACP timing out due to not receiving PDU packets in a timely
- [Configuring Network Time Protocol (NTP) the Secured way in Cisco Routers and Switches (IOS, IOS-XE, IOS-XR, NX-OS)](https://freenetworktutorials.com/configuring-network-time-protocol-ntp-the-secured-way-in-cisco-routers-and-switches-ios-ios-xe-ios-xr-nx-os/) - Cisco IOS e.g. Vlan10 = interface management vlan NTP Server = 192.168.10.100 1. Configure ACL to deny NTP requests and query conf t access-list 100 remark to block NTP requests and query access-list 100 deny any 2. Configure ACL to allow only the NTP servers to peer or synch with access-list 200 remark NTP to
- [Configuring Port-Channel and VLAN in Cisco Nexus](https://freenetworktutorials.com/configuring-port-channel-and-vlan-in-cisco-nexus/) - Objective: To configure port-channel and associate it to vlan. Servers will use Cisco-NXOS as their gateway and uplink to Internet. Server-switch have Layer 2 (access mode) connectivity to Cisco-NXOS router. (see Fig.1) Fig.1 1. Configure the Vlan (interface vlan will be the server's gateway) Cisco-NXOS# configure vlan 8 name Server-Farm interface Vlan8 description Server
- [Configuring Port-Channel and VLAN in Juniper](https://freenetworktutorials.com/configuring-port-channel-and-vlan-in-juniper/) - Objective: To configure port-channel and associate it to vlan. Servers will use Juniper-Router as their gateway and uplink to Internet. Server-switch have Layer 2 (access mode) connectivity to Juniper-Router. (see Fig.1) Fig.1 1. Configure the Vlan (interface vlan will be the server's gateway) Juniper-Router# configure set vlans VLAN-8 description Server-Farm set vlans VLAN-8 vlan-id 8
- [IP Service Level Agreements (SLA) , Embedded Event Manager (EEM) and Policy-Based Routing (PBR) in Cisco IOS](https://freenetworktutorials.com/ip-service-level-agreements-sla-embedded-event-manager-eem-and-policy-based-routing-pbr-in-cisco-ios/) - Objective: The PBR policy will be removed facing Uplink-Router once it detected that the server is unreachable. Policy-based routing (PBR) is a method used to make routing decisions based on policies. Scenario: Server1 providing web caching to customers for faster web page loading. Since there is route-map in place to route their http/https traffic to
- [Sample  Juniper Firewall Configuration to Protect Routing Engines](https://freenetworktutorials.com/sample-juniper-firewall-configuration-to-protect-routing-engines/) - Here's sample firewall configuration in protecting the box and its services. ICMP: ICMP message types are essential for network administration and troubleshooting. There are quite a number of ICMP parameters, you can refer to IANA ICMP Parameters for the list or if you want to learn more details about ICMP can refer to RFC792. Here's the 4 types
- [Configuring Banner or Login Message in Cisco](https://freenetworktutorials.com/configuring-banner-or-login-message-in-cisco-and-juniper/) - Taking Cisco's Sample Legal Banner message from their Network Security Baseline page. Sample Legal Banner Notification Configuration ! Present a legal notification banner approved by company legal counsel banner login # UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED You must have explicit, authorized permission to access or configure this device. Unauthorized attempts and actions to access
- [Configuring NetFlow in Juniper (JunOS)](https://freenetworktutorials.com/configuring-netflow-in-juniper-junos/) - Step1. Configure EXPORTER MAP set services flow-monitoring version9 template NETFLOW_MONITOR template-refresh-rate seconds 15 set services flow-monitoring version9 template NETFLOW_MONITOR option-refresh-rate seconds 15 set services flow-monitoring version9 template NETFLOW_MONITOR ipv4-template Step2. Configure MONITOR MAP set forwarding-options sampling instance NETFLOW_INSTANCE family inet output flow-server 192.168.30.100 port 9991 set forwarding-options sampling instance NETFLOW_INSTANCE family inet output flow-server 192.168.30.100
- [SSH Configuration Examples in Juniper(JunOS)](https://freenetworktutorials.com/ssh-configuration-examples-in-juniperjunos/) - SSH Configuration Examples in Juniper(JunOS) Here are the configuration examples: whereas: 192.168.100.100 = Jumphost IP (Allowed IP to SSH into the device) system { services { ssh { root-login deny; protocol-version v2; connection-limit 5; rate-limit 5; policy-options { prefix-list PERMIT-SSH { 192.168.100.100/32; } firewall { family inet { filter PROTECT-ENGINE { term PERMIT-SSH { from
- [TACACS (AAA) Configuration in Juniper](https://freenetworktutorials.com/tacacs-aaa-configuration-in-juniper/) - Configuring Juniper to authenticate (also including authorization and accounting) to Tacacs+ server 10.10.10.10 - Tacacs+ AAA server 20.20.20.2 - Loopback IP Juniper: system { host-name JUNIPER-ROUTER1; } authentication-order [ tacplus password ]; root-authentication { encrypted-password "$r00tp44sw0rdh3r3/1"; ## SECRET-DATA } tacplus-server { 10.10.10.10 { secret "$4ut0g3n3r4t3t4c4c5p455w0rd1"; ## SECRET-DATA single-connection; source-address 20.20.20.2; } } accounting { events
- [Types of Fiber Optic Transceiver Modules](https://freenetworktutorials.com/types-of-fiber-optic-transceiver-modules/) - Fiber Optic Transceivers are wavelength-specific lasers that can convert electrical data signals into optical signals via optical fiber. It is basically a device that uses fiber optical technology in sending and receiving data. Here's the classifications: Based on form factors 1. XENPAK - original 10G pluggable optics using SC connector type 2. X2 -provides
- [Best Security Practices for Cisco Nexus OS (NX-OS) on Management Plane](https://freenetworktutorials.com/best-security-practices-for-cisco-nexus-os-nx-os-in-management-plane/) - It is recommended to implement the separation of management and data/customer traffic in your Datacenter switches like Cisco Nexus devices (e.g. Nexus 7000, Nexus 9000). Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. Here's the recommended configuration or practices for these
- [Best Security Practices for Juniper (Junos OS ) on Management Plane](https://freenetworktutorials.com/best-security-practices-for-juniper-junos-os-in-management-plane/) - It is recommended to implement the separation of management and data/customer traffic in your Juniper devices (e.g. QFX Series Switches, MX Series). Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. Here's the recommended configuration or practices for these management services. Configure
- [Configuring Port Monitoring in Cisco Catalyst 4948 (via network optical tap)](https://freenetworktutorials.com/configuring-port-monitoring-in-cisco-catalyst-4948-via-network-optical-tap/) - SPAN mirrors receive or transmit (or both) traffic on one or more source ports to a destination port for analysis. A copy of the packets received or sent by the source interfaces are sent to the destination interfacePrerequisites:Need to understand how optical tap works, here's some interesting information (ctto) Link:https://community.fs.com/blog/do-you-know-about-optical-tap-test-access-point-cassettes.html https://en.wikipedia.org/wiki/Network_tap#/media/File:Optical-tap-schema-wiki.gif Setup: Cisco Catalyst 4948
- [SSH Configuration Examples in Cisco (IOS,IOS-XE,NX-OS,IOS-XR)](https://freenetworktutorials.com/ssh-configuration-examples-in-cisco-iosios-xenx-osios-xr-and-juniperjunos/) - SSH Configuration Examples in Cisco (IOS,IOS-XE,NX-OS,IOS-XR) Here are the configuration examples: whereas: 192.168.100.100 = Jumphost IP (Allowed IP to SSH into the device)Prerequisites in configuring SSH for Cisco devices include SSH key generation, please refer to Cisco Official Documentation. command: crypto key generate rsaPreferably, RSA key bits at least 2048, else use 1024 for better
- [Resetting Cisco ASR9000 Network Processor(NP)](https://freenetworktutorials.com/resetting-cisco-asr9000-network-processornp/) - Resetting Cisco ASR9000 Network Processor(NP) NP or network processor is the component on ASR9000 line cards that handle the feature processing of packets as they go through the system. Sample LC: ASR9K MOD160 RP/0/RSP0/CPU0:ASR9000#  show controller np ports all location 0/1/cpu0 Node: 0/0/CPU0: ---------------------------------------------------------------- NP Bridge Fia Ports -- ------ --- --------------------------------------------------- 0 --
- [100G world](https://freenetworktutorials.com/100g-world/) - 100G transceivers have been around for few years already and it is getting affordable since 2016 I guess, and it is now practical to shift to 100G instead of burning N x 10GEs. To see more info about 100G transmission principles, I find this link very informative -> https://community.fs.com/blog/understand-100g-transceivers-transmission-principles.html Here are sample 100G transceivers we deployed
- [Troubleshooting (Debugging) BGP in Juniper using Traceoptions](https://freenetworktutorials.com/troubleshooting-debugging-bgp-in-juniper-using-traceoptions/) - The "traceoptions" statement in Juniper let you debug BGP protocol issues. If cannot connect BGP peering, you can set the "traceoptions" to understand further about the issue. 1. Configure "traceoptions" and name the log as debug-bgp set protocols bgp group BGP-GROUP1 traceoptions file debug-bgp set protocols bgp group BGP-GROUP1traceoptions file size 1m set protocols bgp
- [Configuring Access Lists or ACL in Cisco Switch using object-group with Examples](https://freenetworktutorials.com/configuring-access-lists-or-acl-in-cisco-switch-using-object-group-with-examples/) - An Access List or ACL is set of rules to filter network traffic that can be applied to router or switches. In some large networks where it requires like hundreds of lines, it's a bit a pain in the ass to manage and configure this. Another thing if user keeps on requesting for changes like
- [Cisco IOS-XR vs Juniper Commands    Cheat Sheet](https://freenetworktutorials.com/cisco-ios-xr-vs-juniper-commands-cheat-sheet/) - Here's the Cisco IOS-XR commands vs Juniper OS commands
- [Cisco IOS vs Huawei Commands Cheat Sheet](https://freenetworktutorials.com/cisco-ios-vs-huawei-commands-cheat-sheet/) - Here's the Cisco IOS commands vs Huawei OS commands
- [7 Layers of OSI Model: Functions and Examples](https://freenetworktutorials.com/7-layers-of-osi-model-functions-and-examples/) - OSI or Open Systems Interconnection model consists of 7 Layers that describes how telecommunication or computing systems use to communicate or operate over a network. It was the first standard model for network communications and still widely used for network isolation and troubleshooting.
- [Layers of OSI Model Mnemonics](https://freenetworktutorials.com/layers-of-osi-model-mnemonics/) - Here's you can choose to remember the 7 Layers of Open Systems Interconnection (OSI) From Application to Physical: Some other Mnemonics are: A Penguin Said That Nobody Drinks PepsiA Priest Saw Two Nuns Doing PushupsAll Pros Search Top Notch Donut Places From Physical to Application: Some other Mnemonics are: Pete Doesn’t Need To Sell
- [OSI vs TCP/IP Network Models Comparison](https://freenetworktutorials.com/osi-vs-tcp-ip-network-models-comparison/) - Here's a comparison table between the two network models: Open Systems Interconnect (OSI) vs Transmission Control Protocol/Internet Protocol (TCP/IP) Similarities: both are defined in layered architecture both define standards for networking both are logical models both provide framework for creation and implementation of networking standards and devices both models simplify network troubleshooting process Differences: OSI
- [Checking TX / RX optical power for Huawei Switches and Routers](https://freenetworktutorials.com/checking-tx-rx-optical-power-for-huawei-switches-and-routers/) - Here is an example on how to query or display optical power of an interface in a Huawei Router. This is tested using NetEngine40E Universal Service Router or NE40E running version 8.x OS. display interface extensive Sample Output: (Can see link down and not receiving any power from the neighboring device) display interface GigabitEthernet1/1/1
- [uRPF Configuration on Juniper (MX,SRX,EX,QFX Series)](https://freenetworktutorials.com/urpf-configuration-on-juniper-mxsrxexqfx-series/) - uRPF or Unicast Reverse Path Forwarding is a security feature/tool that help verifies reachability of source address in packets being forwarded. It can prevents malicious and spoofing attacks as it will perform forwarding table lookup on the source IP address. - it as defined in RFC3704 - it follows RFC2827 for ingress filtering. - it

## Pages

- [Huawei](https://freenetworktutorials.com/huawei/) - Huawei-related posts and links: SSH Configuration on Huawei Router NTP Configuration on Huawei Router TACACS (AAA) Configuration on Huawei Router SNMP Polling and Traps Configuration on Huawei Router Syslog Configuration on Huawei Router Netstream (Netflow) Configuration on Huawei Router Checking TX / RX optical power for Huawei Switches and Routers Out of Band (OOB) Management
- [Juniper](https://freenetworktutorials.com/juniper/) - Juniper-Related Posts and Links Configuring Management Interface in Juniper RoutersNTP Configuration via Management Routing Instance in JuniperSNMPv2c and SNMPv3 Polling and Traps Configuration in JuniperEqual-cost multipath (ECMP) or Load-Balance in JuniperTACACS (AAA) Configuration in JuniperTacacs (Authentication and Accounting) Configuration in JuniperFixing Link Aggregation Control Protocol or LACP Timeout in JuniperConfiguring Port-Channel and VLAN in JuniperSteps
- [Cisco](https://freenetworktutorials.com/cisco/) - Cisco-Related Posts and Links Checking TX / RX optical power for Cisco IOS, IOS-XR, NX-OSCisco IOS-XR Pre & Post Upgrade Installation CommandsCisco IOS-XR Minimum System Requirements for UpgradeInstallation Packages and Files needed for Cisco IOS-XRSteps in Upgrading Cisco IOS-XR codeHow to upgrade Field Programmable Device (FPD) on Cisco IOS-XRUpgrading Field Programmable Device (FPD) in Cisco
- [Cheat Sheets](https://freenetworktutorials.com/cheat-sheets/) - Networking Useful Cheat Sheets Tools and Scripts Cisco IOS-XR vs Juniper Commands Cheat Sheet Cisco IOS-XR vs Huawei Commands Cheat Sheet Cisco IOS vs Huawei Commands Cheat Sheet Static Management Configuration for Cisco vs Juniper vs Huawei Comparison VLAN Configuration Cisco Nexus vs Huawei Switch Cisco RPL vs Huawei XPL Route Policy Language Configuration CIDR
- [Security](https://freenetworktutorials.com/security/) - Best Security Practices and Configuration Links: Best Security Practices for Cisco IOS and IOS-XE (Part 1) Best Security Practices for Cisco IOS-XR on Management Plane Best Security Practices for Cisco Nexus OS (NX-OS) on Management Plane Best Security Practices for Juniper (Junos OS ) on Management Plane Best Security Practices for SSH (Secure Shell) Remote
- [Tools](https://freenetworktutorials.com/tools/) - Here are some cool tools for Network enthusiasts and engineers on troubleshooting and making your network healthy. Looking Glass Public Route Servers Network and Diagnostic Tools SpeedTest Servers
- [Interview Questions and Answers](https://freenetworktutorials.com/blog/top-networking-interview-questions-and-answers/) - Here are the sample answers for interview questions for Network Engineer/Administrator/Technician job position. Top Networking Interview Questions and Answers
- [SpeedTest Servers](https://freenetworktutorials.com/tools/speedtest/) - The most common is going to Google.com and typing "speed test" :
- [Looking Glass](https://freenetworktutorials.com/tools/looking-glass/) - Here's updated and free Looking Glass for Network Testing and Troubleshooting
- [Public Route Servers](https://freenetworktutorials.com/tools/public-route-servers/) - Free Public Route Servers
- [Datacenter](https://freenetworktutorials.com/datacenter/) - These are the things you will come across in Datacenter (Enterprise, Service Providers or Managed Services, Colocation and Cloud) Types of AC Power Cables in Datacenter Types of Fiber Optic Cable Connector UTP Cable Color Coding Types of Fiber Optic Transceiver Modules
- [Blog](https://freenetworktutorials.com/blog/) - Think it's time to move to a new home after using the free blog site (my old site: https://mynetworkbio.blogspot.com) for quite some time to post networking contents about my experience as network engineer. I'll use this page to post links about general networking stuffs with some of personal insights. General Networking links and posts: 100G
- [Network Diagnostic](https://freenetworktutorials.com/tools/network-diagnostic/) - My Favorite Network Testing and Diagnostic Tools:

## Categories

- [Cisco](https://freenetworktutorials.com/category/cisco/) - Cisco related stuffs
- [Juniper](https://freenetworktutorials.com/category/juniper/)
- [Networking](https://freenetworktutorials.com/category/networking/)
- [Datacenter](https://freenetworktutorials.com/category/datacenter/)
- [Huawei](https://freenetworktutorials.com/category/huawei/) - Huawei Configuration

## Tags

- [Cisco](https://freenetworktutorials.com/tag/cisco/)
- [IOS-XR](https://freenetworktutorials.com/tag/ios-xr/)
- [FPD](https://freenetworktutorials.com/tag/fpd/)
- [Upgrade](https://freenetworktutorials.com/tag/upgrade/)
- [Firmware](https://freenetworktutorials.com/tag/firmware/)
- [ASR9K](https://freenetworktutorials.com/tag/asr9k/)
- [ASR9000](https://freenetworktutorials.com/tag/asr9000/)
- [Fan](https://freenetworktutorials.com/tag/fan/)
- [Power](https://freenetworktutorials.com/tag/power/)
- [commands](https://freenetworktutorials.com/tag/commands/)
- [security](https://freenetworktutorials.com/tag/security/)
- [Juniper](https://freenetworktutorials.com/tag/juniper/)
- [management](https://freenetworktutorials.com/tag/management/)
- [JunOS](https://freenetworktutorials.com/tag/junos/)
- [SNMP](https://freenetworktutorials.com/tag/snmp/)
- [NTP](https://freenetworktutorials.com/tag/ntp/)
- [SSH](https://freenetworktutorials.com/tag/ssh/)
- [AAA](https://freenetworktutorials.com/tag/aaa/)
- [Syslog](https://freenetworktutorials.com/tag/syslog/)
- [OOB](https://freenetworktutorials.com/tag/oob/)
- [Vlan](https://freenetworktutorials.com/tag/vlan/)
- [EEM](https://freenetworktutorials.com/tag/eem/)
- [SLA](https://freenetworktutorials.com/tag/sla/)
- [PBR](https://freenetworktutorials.com/tag/pbr/)
- [SFP](https://freenetworktutorials.com/tag/sfp/)
- [Firewall](https://freenetworktutorials.com/tag/firewall/)
- [Banner](https://freenetworktutorials.com/tag/banner/)
- [Netflow](https://freenetworktutorials.com/tag/netflow/)
- [tacacs](https://freenetworktutorials.com/tag/tacacs/)
- [Nexus](https://freenetworktutorials.com/tag/nexus/)
- [COPP](https://freenetworktutorials.com/tag/copp/)
- [100G](https://freenetworktutorials.com/tag/100g/)
- [QSFP](https://freenetworktutorials.com/tag/qsfp/)
- [CPAK](https://freenetworktutorials.com/tag/cpak/)
- [Static](https://freenetworktutorials.com/tag/static/)
- [Routing](https://freenetworktutorials.com/tag/routing/)
- [debug](https://freenetworktutorials.com/tag/debug/)
- [traceoptions](https://freenetworktutorials.com/tag/traceoptions/)
- [BGP](https://freenetworktutorials.com/tag/bgp/)
- [ISIS](https://freenetworktutorials.com/tag/isis/)
- [best practice](https://freenetworktutorials.com/tag/best-practice/)
- [optical](https://freenetworktutorials.com/tag/optical/)
- [community](https://freenetworktutorials.com/tag/community/)
- [huawei](https://freenetworktutorials.com/tag/huawei/)
- [cheat sheet](https://freenetworktutorials.com/tag/cheat-sheet/)
- [ipv4](https://freenetworktutorials.com/tag/ipv4/)
- [classes](https://freenetworktutorials.com/tag/classes/)
- [private](https://freenetworktutorials.com/tag/private/)
- [reserved](https://freenetworktutorials.com/tag/reserved/)
- [bogon](https://freenetworktutorials.com/tag/bogon/)
- [IPv6](https://freenetworktutorials.com/tag/ipv6/)
- [IANA](https://freenetworktutorials.com/tag/iana/)
- [IP](https://freenetworktutorials.com/tag/ip/)
- [ACL](https://freenetworktutorials.com/tag/acl/)
- [RFC1918](https://freenetworktutorials.com/tag/rfc1918/)
- [dhcp](https://freenetworktutorials.com/tag/dhcp/)
- [layer3](https://freenetworktutorials.com/tag/layer3/)
- [switch](https://freenetworktutorials.com/tag/switch/)
- [access](https://freenetworktutorials.com/tag/access/)
- [AD](https://freenetworktutorials.com/tag/ad/)
- [Administrative Distance](https://freenetworktutorials.com/tag/administrative-distance/)
- [Route Preference](https://freenetworktutorials.com/tag/route-preference/)
- [bogons](https://freenetworktutorials.com/tag/bogons/)
- [fiber](https://freenetworktutorials.com/tag/fiber/)
- [fibre](https://freenetworktutorials.com/tag/fibre/)
- [optics](https://freenetworktutorials.com/tag/optics/)
- [connectors](https://freenetworktutorials.com/tag/connectors/)
- [fiber optics](https://freenetworktutorials.com/tag/fiber-optics/)
- [transceivers](https://freenetworktutorials.com/tag/transceivers/)
- [wavelegth](https://freenetworktutorials.com/tag/wavelegth/)
- [DWDM](https://freenetworktutorials.com/tag/dwdm/)
- [CWDM](https://freenetworktutorials.com/tag/cwdm/)
- [management plane](https://freenetworktutorials.com/tag/management-plane/)
- [password](https://freenetworktutorials.com/tag/password/)
- [maintenance](https://freenetworktutorials.com/tag/maintenance/)
- [vrrp](https://freenetworktutorials.com/tag/vrrp/)
- [vip](https://freenetworktutorials.com/tag/vip/)
- [linecard](https://freenetworktutorials.com/tag/linecard/)
- [asr](https://freenetworktutorials.com/tag/asr/)
- [mod80](https://freenetworktutorials.com/tag/mod80/)
- [controller](https://freenetworktutorials.com/tag/controller/)
- [pfmfabric](https://freenetworktutorials.com/tag/pfmfabric/)
- [call-home](https://freenetworktutorials.com/tag/call-home/)
- [smart call](https://freenetworktutorials.com/tag/smart-call/)
- [configuration](https://freenetworktutorials.com/tag/configuration/)
- [email](https://freenetworktutorials.com/tag/email/)
- [http](https://freenetworktutorials.com/tag/http/)
- [proxy](https://freenetworktutorials.com/tag/proxy/)
- [licensing](https://freenetworktutorials.com/tag/licensing/)
- [hsrp](https://freenetworktutorials.com/tag/hsrp/)
- [preempt](https://freenetworktutorials.com/tag/preempt/)
- [9000](https://freenetworktutorials.com/tag/9000/)
- [LACP](https://freenetworktutorials.com/tag/lacp/)
- [LAG](https://freenetworktutorials.com/tag/lag/)
- [Bundle-Ether](https://freenetworktutorials.com/tag/bundle-ether/)
- [Port-channel](https://freenetworktutorials.com/tag/port-channel/)
- [802.3ad](https://freenetworktutorials.com/tag/802-3ad/)
- [Etherchannel](https://freenetworktutorials.com/tag/etherchannel/)
- [ios](https://freenetworktutorials.com/tag/ios/)
- [ios-xe](https://freenetworktutorials.com/tag/ios-xe/)
- [nx-os](https://freenetworktutorials.com/tag/nx-os/)
- [resiliency](https://freenetworktutorials.com/tag/resiliency/)
- [bandwidth](https://freenetworktutorials.com/tag/bandwidth/)
- [redundancy](https://freenetworktutorials.com/tag/redundancy/)
- [vpc](https://freenetworktutorials.com/tag/vpc/)
- [peer](https://freenetworktutorials.com/tag/peer/)
- [priority](https://freenetworktutorials.com/tag/priority/)
- [vty](https://freenetworktutorials.com/tag/vty/)
- [md5](https://freenetworktutorials.com/tag/md5/)
- [acs](https://freenetworktutorials.com/tag/acs/)
- [ise](https://freenetworktutorials.com/tag/ise/)
- [authentication](https://freenetworktutorials.com/tag/authentication/)
- [authorization](https://freenetworktutorials.com/tag/authorization/)
- [accounting](https://freenetworktutorials.com/tag/accounting/)
- [local-user](https://freenetworktutorials.com/tag/local-user/)
- [scheme](https://freenetworktutorials.com/tag/scheme/)
- [hwtacacs](https://freenetworktutorials.com/tag/hwtacacs/)
- [trap](https://freenetworktutorials.com/tag/trap/)
- [polling](https://freenetworktutorials.com/tag/polling/)
- [cipher](https://freenetworktutorials.com/tag/cipher/)
- [logging](https://freenetworktutorials.com/tag/logging/)
- [info-center](https://freenetworktutorials.com/tag/info-center/)
- [facility](https://freenetworktutorials.com/tag/facility/)
- [netstream](https://freenetworktutorials.com/tag/netstream/)
- [aggregation](https://freenetworktutorials.com/tag/aggregation/)
- [inbound](https://freenetworktutorials.com/tag/inbound/)
- [layers](https://freenetworktutorials.com/tag/layers/)
- [OSI](https://freenetworktutorials.com/tag/osi/)
- [model](https://freenetworktutorials.com/tag/model/)
- [physical](https://freenetworktutorials.com/tag/physical/)
- [data link](https://freenetworktutorials.com/tag/data-link/)
- [network](https://freenetworktutorials.com/tag/network/)
- [transport](https://freenetworktutorials.com/tag/transport/)
- [session](https://freenetworktutorials.com/tag/session/)
- [presentation](https://freenetworktutorials.com/tag/presentation/)
- [application](https://freenetworktutorials.com/tag/application/)
- [OSI model](https://freenetworktutorials.com/tag/osi-model/)
- [mnemonics](https://freenetworktutorials.com/tag/mnemonics/)
- [TCP/IP](https://freenetworktutorials.com/tag/tcp-ip/)
- [networking](https://freenetworktutorials.com/tag/networking/)
- [optical power](https://freenetworktutorials.com/tag/optical-power/)
- [rx](https://freenetworktutorials.com/tag/rx/)
- [tx](https://freenetworktutorials.com/tag/tx/)
- [wavelength](https://freenetworktutorials.com/tag/wavelength/)
- [distance](https://freenetworktutorials.com/tag/distance/)
- [mode](https://freenetworktutorials.com/tag/mode/)
- [medium](https://freenetworktutorials.com/tag/medium/)
- [temperature](https://freenetworktutorials.com/tag/temperature/)
- [connector](https://freenetworktutorials.com/tag/connector/)
- [color codes](https://freenetworktutorials.com/tag/color-codes/)
- [urpf](https://freenetworktutorials.com/tag/urpf/)
- [strict](https://freenetworktutorials.com/tag/strict/)
- [loose](https://freenetworktutorials.com/tag/loose/)
- [feasible](https://freenetworktutorials.com/tag/feasible/)
- [vrf](https://freenetworktutorials.com/tag/vrf/)
- [cef](https://freenetworktutorials.com/tag/cef/)
- [fib](https://freenetworktutorials.com/tag/fib/)
- [spoofing](https://freenetworktutorials.com/tag/spoofing/)
- [anti-spoof](https://freenetworktutorials.com/tag/anti-spoof/)
- [tcp](https://freenetworktutorials.com/tag/tcp/)
- [udp](https://freenetworktutorials.com/tag/udp/)
- [rpf-check](https://freenetworktutorials.com/tag/rpf-check/)
- [fail-filter](https://freenetworktutorials.com/tag/fail-filter/)
- [interview](https://freenetworktutorials.com/tag/interview/)
- [questions](https://freenetworktutorials.com/tag/questions/)
- [answers](https://freenetworktutorials.com/tag/answers/)
- [MPU](https://freenetworktutorials.com/tag/mpu/)
- [vpn-instance](https://freenetworktutorials.com/tag/vpn-instance/)
- [aggregated-ether-options](https://freenetworktutorials.com/tag/aggregated-ether-options/)
- [bundle](https://freenetworktutorials.com/tag/bundle/)
- [irb](https://freenetworktutorials.com/tag/irb/)
- [ethernet-switching](https://freenetworktutorials.com/tag/ethernet-switching/)
- [mgmt_junos](https://freenetworktutorials.com/tag/mgmt_junos/)
- [virtual](https://freenetworktutorials.com/tag/virtual/)
- [static route](https://freenetworktutorials.com/tag/static-route/)
- [next-hop](https://freenetworktutorials.com/tag/next-hop/)
- [hardware](https://freenetworktutorials.com/tag/hardware/)
- [inventory](https://freenetworktutorials.com/tag/inventory/)
- [platform](https://freenetworktutorials.com/tag/platform/)
- [ebgp](https://freenetworktutorials.com/tag/ebgp/)
- [route policy](https://freenetworktutorials.com/tag/route-policy/)
- [prefix](https://freenetworktutorials.com/tag/prefix/)
- [ospf](https://freenetworktutorials.com/tag/ospf/)
- [p2p](https://freenetworktutorials.com/tag/p2p/)
- [ospfv3](https://freenetworktutorials.com/tag/ospfv3/)
- [rpl.xpl](https://freenetworktutorials.com/tag/rpl-xpl/)
- [prefix-set](https://freenetworktutorials.com/tag/prefix-set/)
- [edit](https://freenetworktutorials.com/tag/edit/)
- [iox](https://freenetworktutorials.com/tag/iox/)
- [access-list](https://freenetworktutorials.com/tag/access-list/)
- [resequence](https://freenetworktutorials.com/tag/resequence/)
- [timezone](https://freenetworktutorials.com/tag/timezone/)
- [header](https://freenetworktutorials.com/tag/header/)
- [login](https://freenetworktutorials.com/tag/login/)
- [ports](https://freenetworktutorials.com/tag/ports/)
- [registered](https://freenetworktutorials.com/tag/registered/)
- [RIR](https://freenetworktutorials.com/tag/rir/)
- [APNIC<AFRINIC](https://freenetworktutorials.com/tag/apnicafrinic/)
- [ARIN](https://freenetworktutorials.com/tag/arin/)
- [LACNIC](https://freenetworktutorials.com/tag/lacnic/)
- [RIPE](https://freenetworktutorials.com/tag/ripe/)
- [RFC](https://freenetworktutorials.com/tag/rfc/)
- [request for comments](https://freenetworktutorials.com/tag/request-for-comments/)
- [IETF](https://freenetworktutorials.com/tag/ietf/)
- [ISOC](https://freenetworktutorials.com/tag/isoc/)
- [1918](https://freenetworktutorials.com/tag/1918/)
- [standard](https://freenetworktutorials.com/tag/standard/)
- [internet](https://freenetworktutorials.com/tag/internet/)
- [FBF](https://freenetworktutorials.com/tag/fbf/)
- [filter-based forwarding](https://freenetworktutorials.com/tag/filter-based-forwarding/)
- [policy-based routing](https://freenetworktutorials.com/tag/policy-based-routing/)
- [routing-instance](https://freenetworktutorials.com/tag/routing-instance/)
- [trunk](https://freenetworktutorials.com/tag/trunk/)
- [health](https://freenetworktutorials.com/tag/health/)
- [check](https://freenetworktutorials.com/tag/check/)
- [display](https://freenetworktutorials.com/tag/display/)
- [switchover](https://freenetworktutorials.com/tag/switchover/)
- [mac](https://freenetworktutorials.com/tag/mac/)
- [partner](https://freenetworktutorials.com/tag/partner/)
- [BVI](https://freenetworktutorials.com/tag/bvi/)
- [l2vpn](https://freenetworktutorials.com/tag/l2vpn/)
- [catalyst](https://freenetworktutorials.com/tag/catalyst/)
- [4500](https://freenetworktutorials.com/tag/4500/)
- [4948](https://freenetworktutorials.com/tag/4948/)
- [IP address](https://freenetworktutorials.com/tag/ip-address/)
- [MAC address](https://freenetworktutorials.com/tag/mac-address/)
- [arp](https://freenetworktutorials.com/tag/arp/)
- [interface](https://freenetworktutorials.com/tag/interface/)
- [bridge-domain](https://freenetworktutorials.com/tag/bridge-domain/)
- [bridge-group](https://freenetworktutorials.com/tag/bridge-group/)
- [route](https://freenetworktutorials.com/tag/route/)
- [trace](https://freenetworktutorials.com/tag/trace/)
- [access-user](https://freenetworktutorials.com/tag/access-user/)
- [router](https://freenetworktutorials.com/tag/router/)
- [network address translation](https://freenetworktutorials.com/tag/network-address-translation/)
- [NAT](https://freenetworktutorials.com/tag/nat/)
- [exhaustion](https://freenetworktutorials.com/tag/exhaustion/)
- [PAT](https://freenetworktutorials.com/tag/pat/)
- [Dynamic](https://freenetworktutorials.com/tag/dynamic/)
- [Overload](https://freenetworktutorials.com/tag/overload/)
- [port](https://freenetworktutorials.com/tag/port/)
- [binding](https://freenetworktutorials.com/tag/binding/)
- [pool](https://freenetworktutorials.com/tag/pool/)
- [translation](https://freenetworktutorials.com/tag/translation/)
- [patch](https://freenetworktutorials.com/tag/patch/)
- [system](https://freenetworktutorials.com/tag/system/)
- [software](https://freenetworktutorials.com/tag/software/)
- [startup](https://freenetworktutorials.com/tag/startup/)
- [OS](https://freenetworktutorials.com/tag/os/)
- [operating system](https://freenetworktutorials.com/tag/operating-system/)
- [port mirror](https://freenetworktutorials.com/tag/port-mirror/)
- [port observing](https://freenetworktutorials.com/tag/port-observing/)
- [port mirroring](https://freenetworktutorials.com/tag/port-mirroring/)
- [outbound](https://freenetworktutorials.com/tag/outbound/)
- [wireshark](https://freenetworktutorials.com/tag/wireshark/)
- [RPKI](https://freenetworktutorials.com/tag/rpki/)
- [validator](https://freenetworktutorials.com/tag/validator/)
- [martians](https://freenetworktutorials.com/tag/martians/)
- [ingress](https://freenetworktutorials.com/tag/ingress/)
- [filtering](https://freenetworktutorials.com/tag/filtering/)
- [AS](https://freenetworktutorials.com/tag/as/)
- [commit](https://freenetworktutorials.com/tag/commit/)
- [rollback](https://freenetworktutorials.com/tag/rollback/)
- [ID](https://freenetworktutorials.com/tag/id/)
- [changes](https://freenetworktutorials.com/tag/changes/)
- [acronyms](https://freenetworktutorials.com/tag/acronyms/)
- [abbreviation](https://freenetworktutorials.com/tag/abbreviation/)
- [computer](https://freenetworktutorials.com/tag/computer/)
- [receive](https://freenetworktutorials.com/tag/receive/)
- [transmit](https://freenetworktutorials.com/tag/transmit/)
- [100GE](https://freenetworktutorials.com/tag/100ge/)
- [bias](https://freenetworktutorials.com/tag/bias/)
- [dBm](https://freenetworktutorials.com/tag/dbm/)
- [decibel-milliwatts](https://freenetworktutorials.com/tag/decibel-milliwatts/)
- [diagnostics](https://freenetworktutorials.com/tag/diagnostics/)
- [simulate](https://freenetworktutorials.com/tag/simulate/)
- [diagnose](https://freenetworktutorials.com/tag/diagnose/)
- [alarm-name](https://freenetworktutorials.com/tag/alarm-name/)
- [object-group](https://freenetworktutorials.com/tag/object-group/)
- [pfilter](https://freenetworktutorials.com/tag/pfilter/)
- [ip-pool](https://freenetworktutorials.com/tag/ip-pool/)
- [port-pool](https://freenetworktutorials.com/tag/port-pool/)
- [traffic-policy](https://freenetworktutorials.com/tag/traffic-policy/)
- [NE40E](https://freenetworktutorials.com/tag/ne40e/)
- [NetEngine](https://freenetworktutorials.com/tag/netengine/)
- [Count](https://freenetworktutorials.com/tag/count/)
- [PPS](https://freenetworktutorials.com/tag/pps/)
- [device](https://freenetworktutorials.com/tag/device/)
- [voltage](https://freenetworktutorials.com/tag/voltage/)
- [cpu](https://freenetworktutorials.com/tag/cpu/)
- [memory](https://freenetworktutorials.com/tag/memory/)
- [serial](https://freenetworktutorials.com/tag/serial/)
- [400G](https://freenetworktutorials.com/tag/400g/)
- [transceiver](https://freenetworktutorials.com/tag/transceiver/)
- [singlemode](https://freenetworktutorials.com/tag/singlemode/)