Tag: <span>Juniper</span>

For checking transmission links on Cisco Routers, it is good to know how to find out the optical power of 100GE modules or interfaces for troubleshooting and making sure the desired or optimal range is meet. Here are the sample commands for checking the Transmit/Output (TX)  and Receive/Input (RX) optical power. show interfaces diagnostics optics <interface-name> Sample Output: fnt@JUNIPER-ROUTER1-re0> show interfaces diagnostics optics et-0/0/0 Physical interface: et-0/0/0 Module temperature : 28 degrees C / 82 degrees F Module voltage :…

Juniper

Border Gateway Protocol or BGP, is a gateway protocol that enables the Internet to exchange routing information between AS or Autonomous Systems. It is used by Large Enterprise and Service Providers. Here are the recommended Best Security Practices that need to be implemented on your Juniper Routers. Authentication need to be set for all peering using MD5 set protocols bgp group <group_name> authentication-key <MD5 key> There are few supported authentication that you can use aes-128-cmac-96 Cipher-based Message Authentication Code (AES128)…

Juniper

Here are the sample steps on finding the interface where the host is connected based on IP address or MAC address on Juniper Routers. Scenario 1: IP address is given, find which interface it is connected IP address: 192.168.15.6 a. Find the routing entry for the IP to know where it is connected show route <IP> darwin@JUNIPER-re0> show route 192.168.15.6 inet.0: 3 destinations, 6 routes (3321 active, 0 holddown, 3 hidden) + = Active Route, – = Last Active, *…

Juniper

Here’s the basic BGP (eBGP) configuration of  connecting 3 different router vendors namely Huawei, Juniper and Cisco Routers. Assuming we connect via their physical interfaces and incoming and outgoing policies are basically allow all. Sample Configuration Huawei <Huawei>system-view Enter system view, return user view with return command. [~Huawei] interface GigabitEthernet1/0/0 description Connection to Cisco ip address 192.168.0.1 255.255.255.252 interface GigabitEthernet1/0/1 description Connection to Juniper ip address 192.168.1.1 255.255.255.252 xpl route-filter Cisco-Import approve end-filter xpl route-filter Cisco-Export approve end-filter xpl route-filter…

Cisco Huawei Juniper

Here’s the sample configuration for setting up the management port for different router platforms using static route. Assuming we have this IP configuration:RSP0/RE0 Physical IP : 10.10.10.98/24RSP1/RE1 Physical IP: 10.10.10.99/24 Virtual IP: 10.10.10.100/24 Gateway: 10.10.10.1/24 Note: It is advisable to connect the management plane connectivity to another network separate from data/voice network. Steps Cisco IOS-XR Cisco NX-OS Juniper OS Huawei Create VRF #vrf management#vrf management description MNGMT#vrf management address-family ipv4 unicast N/A #set system management-instance#set routing-instances mgmt_junos description MNGMT #ip…

Cisco Huawei Juniper

Scenario:2 physical interfaces bundled together (port-channel) and associated in the same vlan. Tested in:Cisco NexusJuniper EX Series Steps Cisco Juniper Configure 2 physical interfaces interface Ethernet1/1description Server Link#1switchportswitchport access vlan 888channel-group 99 mode activeno shutdown interface Ethernet2/1description Server Link#2switchportswitchport access vlan 888channel-group 99 mode activeno shutdown #set interfaces xe-0/0/0 description ” Server Link#1 “#set interfaces xe-0/0/0 gigether-options 802.3ad ae99 #set interfaces xe-1/0/0 description ” Server Link#2 “#set interfaces xe-1/0/0 gigether-options 802.3ad ae99 Configure the port-channel interface port-channel99description Server Port-channelswitchportswitchport access…

Cisco Juniper

This is a sample steps of migrating IP configuration from physical interface to bundle interface. Take note that this may result service impact during the migration as the existing interface need to be shutdown and re-configure. Remember to shift your traffic prior with the maintenance. Existing Config: freenetwork@MX1-re0> show configuration interfaces et-0/0/1 description “Link to Switch1”; unit 0 { family inet { address 192.168.0.1/24; } family inet6 { address fdf8:d3f5:1a47:bc09::1/64; } Fig.1 Shutdown the physical interface and remove existing configuration…

Juniper

uRPF or Unicast Reverse Path Forwarding is a security feature/tool that help verifies reachability of source address in packets being forwarded. It can prevents malicious and spoofing attacks as it will perform forwarding table lookup on the source IP address. – it as defined in RFC3704 – it follows RFC2827 for ingress filtering. –  it relies on the CEF (Cisco Express Forwarding) or FIB table to perform lookups. – preferably implemented at the network edge facing internet, customers and servers…

Juniper

These are the some commands being used when performing network change or maintenance, depending on the features or services being run in the network. Typically, this is very useful in verification, troubleshooting and comparison between before and after the change. #Log Time set cli timestamp set cli screen-width 200 show ntp associations no-resolve | no-more show ntp status no-resolve | no-more ## Hardware Status show chassis hardware | no-more show chassis hardware clei-models | no-more show chassis hardware detail |…

Juniper

It is recommended to implement the separation of management and data/customer traffic in your Juniper devices (e.g. QFX Series Switches, MX Series).  Traffic passing through the management plane should be exclusively for management or administrative access purposes only like SSH, SNMP, NTP and AAA. Here’s the recommended configuration or practices for these management services. Configure Authentication, Authorization and Accounting (AAA) -preferably to setup centralized TACACS+ to manage all your devices, implement central network management that can impose security protocol to…

Juniper