Connecting to multiple FPCs of QFX5100VC/VCF using ssh or telnet

Sometimes is needed to connect using ssh or telnet to specific members of a QFX5100 VC or VCF.

Using the vme interface IP address will always connect you to the master FPC of the VC or VCF.

This can be accomplished by using groups similar to the ones used to achieve the same thing on EX VC.

However, there are few changes that needs to be considered.

You need to use the ‘when’ condition:

root@QFX5100-VCF# set groups node0 when ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
  member               Member of virtual chassis
  model                Model name
  routing-engine       Routing Engine
> time                 Time at which group should be effective
{master:0}[edit]
root@QFX5100-VCF#

This is the groups configuration applied to a VCF of two members:

{master:0}[edit]
root@QFX5100-VCF# show groups
node0 {
    when {
        member member0;
    }
    system {
        host-name member0;
    }
    interfaces {
        em0 {
            description "member0 em0 interface";
            unit 0 {
                family inet {
                    address 172.30.159.251/23;
                }
            }
        }
    }
}
node1 {
    when {
        member member1;
    }
    system {
        host-name member1;
    }
    interfaces {
        em0 {
            description "member1 em0 interface";
            unit 0 {
                family inet {
                    address 172.30.159.250/23;
                }
            }
        }
    }
}

{master:0}[edit]
root@QFX5100-VCF#

Then the groups are applied:

{master:0}[edit]
root@QFX5100-VCF# show apply-groups
## Last changed: 2015-04-28 09:14:19 CEST
apply-groups [ node0 node1 ];

{master:0}[edit]
root@QFX5100-VCF#

Now let’s use ssh and connect to FPC0:

lab@UBUNTU:~$ ssh root@172.30.159.251
The authenticity of host '172.30.159.251 (172.30.159.251)' can't be established.
ECDSA key fingerprint is 85:35:36:e6:d7:60:ba:66:e9:2a:32:19:34:d7:6d:e4.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '172.30.159.251' (ECDSA) to the list of known hosts.
Password:


--- JUNOS 14.1X53-D25.2 built 2015-04-01 01:47:34 UTC
root@QFX5100-VCF:RE:0%

And to connect to FPC1:

lab@UBUNTU:~$ ssh root@172.30.159.250
The authenticity of host '172.30.159.250 (172.30.159.250)' can't be established.
ECDSA key fingerprint is 85:35:36:e6:d7:60:ba:66:e9:2a:32:19:34:d7:6d:e4.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '172.30.159.250' (ECDSA) to the list of known hosts.
Password:
--- JUNOS 14.1X53-D25.2 built 2015-04-01 01:47:34 UTC



root@QFX5100-VCF:BK:1%

I hope you will find this useful and now you should be able to connect to both QFX5100VC/VCF and EX VC FPCs using ssh or telnet.

The following two tabs change content below.

• Bio
• Latest Posts

Paris ARAU

Paris ARAU is a networking professional with strong background on routing and switching technologies. He is a holder of CCIE R&S and dual JNCIE(SP and ENT). The day to day work allows him to dive deeply in networking technologies. Part of the continuously training, he is focusing on Software Defined Network and cloud computing.

Latest posts by Paris ARAU (see all)

• Junos Fusion – Part IV – Satellite policies and uplink failure detection - 30 July 2018
• Junos Fusion – Part III – Satellite commands and traffic forwarding - 16 July 2018
• Junos Fusion – Part II – Configuration, Administration and Operation - 16 July 2018
• Junos Fusion – Part I – Overview, Components, Ports and Software - 11 July 2018
• Vagrant – Part IV – Network topology using Juniper and Cumulus - 26 April 2018