A networker's blogUsually when you want to trace the path through the network that the packets take to reach a destination, you are using traceroute on Juniper devices. However, this doesn’t give you the ability to see if there is any packet loss towards destination. You can use ‘ping’ to check the packet loss, but you will… Keep reading »
As you might know, starting with 13.3R1, Juniper EX9200 support OpenFlow 1.0. Openflow is a standard that allows to control traffic through a central network controller. To control the traffic in this manner, one would need an Openflow controller and Openflow capable switch. Using Openflow, one can add, delete, modify flows in the network. Flows… Keep reading »
This post will be about OSPF protocol configuration on JUNOS and IOS XR. I will not spend any time on OSPF ins and outs as this post is to show interworking between JUNOS and IOS XR. This is the topology and the R1, R2 and R3 are running JUNOS and R7, R8 and R9 are… Keep reading »
This is continuation of the first post regarding MACsec configuration. This new post will be about MACsec using static connectivity association key(CAK) security mode. When this mode is used, two keys are used to secure the point-to-point Ethernet link: – one connectivity association key is used to secure the control plane – one secure association… Keep reading »
Media Access Control Security (MACsec) is a security standard that allows secure communication on Ethernet links. The standard is called IEEE 802.1AE. This is point-to-point security between directly connected devices. MACsec can be enabled either by using static connectivity association key(CAK), either by using static secure association key(SAK). This post is about the second method… Keep reading »
I was working recently on a situation where I had to issue some commands once a specific string was seen in the logs. Juniper is supporting the configuration of an event-policy that can execute operation commands, save that output locally or remotely. Additionally, you can upload specific file to a remote destination, raise a SNMP… Keep reading »
Starting with 13.1X50-D15, Juniper Qfabric supports SSH RSA authentication. This post will show you how you can do this. First, generate your key on the client from where you will be logging to the Qfabric:
Juniper EX switches support the SNMP set command for a predefined set of MIB variables. In 12.3 JUNOS, you can set these variables: snmpCommunityTable eventTable
If you want to keep the track of what one of your firewalls is matching, you have two options. Let’s say that you have this topology: (lo0-10.255.21.243/32)R1(ge-0/0/0-1.1.1.1/24) ———- (ge-0/0/0-1.1.1.2/24)R2(lo0-10.255.26.130/32) and on R2 you want to keep track of all packets that have a destination to R2’s Loopback0 interface.
There is the possibility in JunOS to define conditions under which a group can be applied. A group can be applied based on the type of chassis, model, routing-engine, virtual-chassis member, cluster node and start and end time of day or date. By applying a group based on the time, you can have configure for… Keep reading »