junos cli demo v4.5

8/19/2019 Junos CLI Demo v4.5

1/126

JUNOS CLI Demo

John Jacobs

[email protected]

http://www.juniper.net


2/126

Juni er Networks Inc. Co ri ht 2

Aen!a

CLI intro "presentation with #$A%

Inc&u!es 'IOS to JUNOS(

)*+, architecture "presentation%

-outin conuration "OS01 231 -S41 LD% "Li5e on )*+, &ab routers or e6terna&%

0irewa&& 0i&ters "ACLs7 basics an! conuration% "Li5e on )*+, &ab routers or e6terna&%

o&ic8 "basics an! conuration% "Li5e on )*+, &ab routers or e6terna&%


3/126

Juni er Networks Inc. Co ri ht "

JUNOS CLI Demo

)his Demo is meant to estab&ish a basicun!erstan!in o9 the JUNOS operatins8stem Comman! Line Inter9ace "CLI%

Simi&arities e6ist between JUNOS an! IOS

o!u&ar structure ta;es JUNOS to the ne6t&e5e& 9or ease o9 conuration

A!!itiona& 9eatures imp&emente! 9orconuration 5erication


4/126

Juni er Networks Inc. Co ri ht #

Juniper Con5entions

JUNOS a&wa8s uses CID- notation

/?


5/126


Juniper Inter9aces

Bach router has three permanent inter9aces: 96p,

outo9ban! manaement inter9ace

96p Interna& Bthernet inter9ace.

Connects the route enine to the 0B Do not conure on a rea& router

96p< Interna& Bthernet inter9ace. Connects the route enine to the 0B

Do not conure on a rea& router

RE0 RE1

CB1

Switch

CB0

Switch

fxp0 fxp0

fxp1 fxp1fxp2fxp2


6/126

Juni er Networks Inc. Co ri ht $

Juniper Inter9aces

Loopbac; Inter9ace

&o, Loopbac; ero

On the router1 8ou can conure one ph8sica&&oopbac; inter9ace1 &o,1 an! one or morea!!resses on the inter9ace.


7/126Juni er Networks Inc. Co ri ht %

Inter9ace Names

h8sica& inter9acesha5e stan!ar! names)8pe

0C s&ot

IC s&ot

ort number

so=/


8/126Juni er Networks Inc. Co ri ht

Juniper Inter9ace Namin

t8pe9pc/pic/port.&oica& )8pe )he inter9ace name1 which !enes the

me!ia t8pe

0C )he s&ot in which the 0C is &ocate!

IC )he &ocation on the 0C in which the IC isinsta&&e!

)he IC port

)he inter9aceEs channe& an! &oica& unit numbers,*?+ "optiona&%

so,/,/., OS inter9ace on 0C ,1 IC ,1 port

Unit ,


9/126Juni er Networks Inc. Co ri ht '

Loica& Inter9ace Settins

Bach ph8sica& inter9ace has one or more&oica& inter9aces Li;e a Cisco subinter9ace

Loica& inter9ace separates conuration

in9ormation 9or each A) 5irtua& circuit10rame -e&a8 DLCI1 or 4LAN

Some ph8sica& inter9ace encapsu&ationsa&&ow on&8 one possib&e &oica& inter9ace

FDLC


10/126Juni er Networks Inc. Co ri ht (0

Loica& inter9ace!escriptors

Loica& inter9aces are use! to set up0rame -e&a8 DLCIs1 A) 5irtua& circuits1or 4LANs

so=/


11/126Juni er Networks Inc. Co ri ht ((

Juniper Inter9ace Namin

ae Areate! Bthernet inter9ace.

as Areate! SONB)/SDF inter9ace.

at A) inter9ace.

!s DS, inter9ace "conure! on either Channe&ie! DS to DS, IC orChanne&ie! B IC%.

e B inter9ace "inc&u!in Channe&ie! S) to B inter9aces%.

e B inter9ace.

es Bncr8ption inter9ace. 9e 0ast Bthernet inter9ace.

96p anaement an! interna& Bthernet inter9aces.

e 3iabit Bthernet inter9ace.

r 3eneric -oute Bncapsu&ation tunne& inter9ace.

ip Io5erI encapsu&ation tunne& inter9ace.

&o Loopbac; inter9ace. m& u&ti&in; inter9ace.

so SONB)/SDF inter9ace.

t ) inter9ace "inc&u!in Channe&ie! DS an! Channe&ie! OC to )inter9aces%.

t ) inter9ace "inc&u!in Channe&ie! OC< inter9aces%.



Ge a&wa8s number 9rom ero

Juniper routers a&wa8s start numberin at ero.

so,/,/, 0irst 0C 0irst IC

0irst port soH/,/, Biht 0C 0irst IC 0irst port

so/,/, 0C < "we see this in the ) on&8% 0irst IC 0irst port


13/126Juni er Networks Inc. Co ri ht ("

Ga8s to access the router

Conso&e/Au6 ort te&net ssh/ssh<

0or securit8 reasons1 no remote access to the router isenab&e! b8 !e9au&t. Kou must conure the routere6p&icit&8 so that users on remote s8stems can accessit.

Authentication usin )ACACS or -ADIUS

Separate &oin1 authentication1 an! permissions9or each user can a&so be a!ministere! &oca&&8


14/126Juni er Networks Inc. Co ri ht (#

Operationa& o!e

CLI Li;e Cisco enab&e mo!e

)he CLI is in!icate! b8 the presence o9 theMM prompt

It is prece!e! b8 a strin that !e9au&ts tothe name o9 the user an! the name o9 therouter.

0or e6amp&e: user@host

mailto:user@hostmailto:user@host



Comman! &ine comp&etion

Use Space or tab show 5ersion

show 5er press space or tabP

Q)A2 wi&& autocomp&ete user!ene!po&icies1 rewa&& &ters1 etc.


16/126Juni er Networks Inc. Co ri ht ($

3et Fe&p

)8pe RE an8where on comman! &ine Fe&p !epen!s on where 8ou are

2einnin o9 &ineShows he&p 9or top &e5e& o9 hierarch8

Bn! o9 comman!Shows he&p 9or ne6t &e5e& in hierarch8

i!!&e o9 comman!Shows &ist o9 matchin comman!s at current &e5e& in

hierarch8

)he Tuestion mar; is 8our 9rien!


17/126Juni er Networks Inc. Co ri ht (%

3et Fe&p with

show

show s8stem

set protoco&s


18/126Juni er Networks Inc. Co ri ht (

Juniper !ocumentation set"&ess pictures% is on&ine

he&p topic Conuration 3ui!e

he&p re9erence

Comman! re9erence

he&p s8s&o Qta S8stem &o "s8s&o% error messaes

show messaes Fe&p s8s&o


19/126Juni er Networks Inc. Co ri ht ('

Juniper !ocumentation set"&ess pictures% is on&ine

juniper@R16> help syslog RPD_OS_MEMHIGH

Nae! RPD_OS_MEMHIGH

Message! "sing #$ilo%y&es'use(> )* o+ eory, #per-en&age'use(> per-en& o+ a.aila%le

Help! rp( eory use is e/-essi.e

Des-rip&ion! 0he rou&ing pro&o-ol pro-ess rp(2 is using &he in(i-a&e( aoun& an( per-en&ageo+ Rou&ing Engine eory, 3hi-h is -onsi(ere( e/-essi.e4

0ype! E.en&! 0his essage repor&s an e.en&, no& an error

Se.eri&y! error5ause! Ei&her rp( is lea$ing eory or &he use o+ sys&e resour-es is e/-essi.e,

perhaps %e-ause rou&ing +il&ers are

is-on+igure( or &he -on+igure( ne&3or$ &opology is .ery -ople/4

-&ion! In-rease &he aoun& o+ RM in &he Rou&ing Engine4


20/126Juni er Networks Inc. Co ri ht 20

Comman! Fistor8

Comman! histor8 9or CLI an! conuremo!e

Up / Down arrow "4),,%

"Ctr& / Ctr&N%

show c&i histor8 "CLI mo!e on&8% De9au&t is to show &ast ,, comman!s

Qcount a6imum number o9 comman!s to!isp&a8


21/126Juni er Networks Inc. Co ri ht 2(

B!it Line Comman!s

2ase! on Uni6 Bmacs B!itor B6act&8 Li;e Cisco

Ctr&U Brase Line

Ctr&G Brase wor! Ctr&A / Ctr&B 3oto 2einnin/Bn! o9 &ine

Ctr&0 0orwar!

Ctr&2 2ac;war!s

!e&ete/bac;space De&ete char be9ore cursor

Crt&L -e!raw &ine



Uni6 &ess "more% output

A&& output in Junos is Uni6 '&ess( just &i;e 'more( but with a!!itiona& options Output !oes not scro&& oV the screen / strin W search

n W repeat search T W Tuit b W pre5ious screen space W ne6t screen s W &ename

"sa5es in user !e9au&t !irector8 /5ar/home/user%

Bnter W &ine h W he&p N W 9u&& &istin

3 W Bn! o9 &e B6amp&e:

show inter9aces / &o,


23/126Juni er Networks Inc. Co ri ht 2"

O5er5iew

Comman! hierarch8

c&ear conure monitor set show

brie9 e6act protoco& tab&e terse

bp chassis inter9aces isis osp9 route 5ersion

Less Specic

ore Specic


24/126Juni er Networks Inc. Co ri ht 2#

show c&i / set c&i

show c&i juniper@- show c&i

CLI comp&eteonspace set to on

CLI i!&etimeout !isab&e!

CLI restartonupra!e set to on CLI screen&enth set to



show c&i / set c&i

> set cli terminal vt100


26/126Juni er Networks Inc. Co ri ht 2$

Inter9ace Comman!s

show interface show interface terse

#$i%e Cisco&s show ip interface brief'

show interface terse so*

Summar( )iew of a$$ Sonet interfaces show interface extensive show interface fxp1 detail

What will this command do?

show interface fxp1 extensive


27/126Juni er Networks Inc. Co ri ht 2%

Inter9ace Comman!s

show interfaces statistics*isp$a( statistics an! !etai$e! information

clear interfaces statistics +ero interface statistics

clear interfaces statistics all+ero statistics on a$$ interfaces



isc Comman!s

request support information #$i%e Cisco&s show tech'

,se (our ,nix -more. options

Tr( usin (our more options


29/126Juni er Networks Inc. Co ri ht 2'

isc Comman!s

show version Software process that are runnin on the s(stem show system software

Show $oa!e! /,NOS extensions

show system boot-messages Show boot time messaes

show system processes Show the process tab$e i%e Cisco sh proc cpu

show system storage isplay statistics about the amount of free dis! space in the router"s

#le systems$

show system ? show chassis ?


30/126Juni er Networks Inc. Co ri ht "0

isc Comman!s

juniper@Yoda> show chassis hardware

Hardware inventory:

Item Version Part number Serial number Description

hassis !"#$$ %&'

%idplane ()V '* +&',''!' H-'!"&

Power supply . (ev '/ +/',''$/#+ %&'0+! .

Display ()V '/ +&',''#! H)"&$"

Host b$'''''+c"0cd1'& Present

-)2 ()V &$ +&',''/" H.//0$ Internet Processor II

-P '

PI ' ()V '/ +!',''$##$ H)&+!& /3 -4)5 &'' 2.S),67

PI & ()V '* +!',''*'*+ HD'/$& /3 6&5 (8/"

PI * ()V '& +!',''$#"$ H-$!&* &3 6unnel

-P &

PI ' ()V '* +!',''*'*+ HD'//! /3 6&5 (8/"

PI $ ()V '& +!',''$#"$ .8$#*0 &3 6unnel

PI * ()V '& +!',''$#"$ .9/''0 &3 6unnel


31/126

Juni er Networks Inc. Co ri ht "(

Date/)ime Comman!s

set date &''1'(1)'+)$'' #**hhmm3ss'

show system uptime *isp$a( the current time an! information about how $on the

router4 router software4 an! routin protoco$s ha)e been runnin3

set date ntp ,se an NT5 ser)er to s(nchroni6e the current !ate an! time

settin on the router from the C73 set date ntp 1,&$1,$+$1'1

Set from specic ser)er #N7ST C$oc%' http899www3bou$!er3nist3o)9timefre:9ser)ice9time;ser)ers3htm$

set date ntp ,se the NT5 ser)ers from the conuration


32/126

Juni er Networks Inc. Co ri ht "2

User Comman!s

show system users Show users current$( $oe! into the s(stem

show user a$so wor%s

request system logout user username


33/126

Juni er Networks Inc. Co ri ht ""

Coo& Comman!s

monitor interface *isp$a( rea$;time statistics about a ph(sica$ interface

monitor interface tra.c

*isp$a( rea$;time tra=c !ata for a$$ acti)e interfaces

a( nee! to set termina$ t(pe set cli terminal vt1''


35/126

Juni er Networks Inc. Co ri ht "5

Conuration o!e

Conure Li;e Cisco 'con t(

Conure the JUNOS so9tware withconuration statements

)he conure is in!icate! b8 the presence o9the 'M prompt

it is prece!e! b8 a strin that !e9au&ts to thename o9 the user an! the name o9 the router.

0or e6amp&e: user@host

mailto:user@hostmailto:user@host


36/126

Juni er Networks Inc. Co ri ht "$

Conuration o!e O5er5iew

Kou e!it a cop8 o9 current conuration ca&&e! thecan!i!ate conuration

Chanes 8ou ma;e are 5isib&e to other CLI users Chanes the8 ma;e miht conYict with 8our chanes

Chanes !o not ta;e eVect unti& 8ou commit them

Ghen committe!1 can!i!ate conuration

becomes acti5e an! a new can!i!ate is create!


37/126

Juni er Networks Inc. Co ri ht "%

Can!i!ate conuration

Initia&&8 a cop8 o9 the current acti5econuration

Chanes !o not ta;e eVect unti& commitcomman!

Can!i!ate

Conuration

Acti)e

Conuration

0

1 2 >

Commit

ro$$bac% n

?@

cong!uniper.conf.n "n#0-$%

vardbcong!uniper.conf.n "n#&-&'%


38/126


Conuration o!e ,1,,,W0oot 4iew

o5e aroun! statement hierarch8 usine(i& comman! Li;e UNI -( comman!

A&ter conuration usin se& $ (ele&e comman!

Acti5ate conuration usin -oi&

comman!


39/126

Juni er Networks Inc. Co ri ht "'

congure comman!

enter conuration mo!e conure the JUNOS so9tware with

conuration statements

user@host conureEnterin conuration mo!e

e!it

user@host

mailto:user@hostmailto:user@hostmailto:user@hostmailto:user@host


40/126

Juni er Networks Inc. Co ri ht #0

exit comman!

exit at the top &e5e& e6its conurationmo!e an! puts 8ou bac; into operationa&mo!e

(uit is the same as exit


41/126

Juni er Networks Inc. Co ri ht #(

set comman!

Use the set comman! to a!! or chaneconuration statements

set comman! creates conuration statements1 orchanes them i9 the8 a&rea!8 e6ist

)set s*stem host-name Denver

)set interface fxp+ unit 0 famil* inet address 1.1.1.1+&

)set routing-options router-id +.+.+.+


42/126


show comman!

Kou can 5iew the can!i!ate conurationwithin con mo!e.

In con mo!e:

show interfaces Shows the 'inter9aces( section o9 the con

In CLI mo!e:

show interfaces Shows the the state o9 the 'inter9aces( on the

router


43/126

Juni er Networks Inc. Co ri ht #"

show comman!

Use the sho3 comman! to see the can!i!ateconuration 2eins at current hierarch8 &e5e&

)show

Kou can speci98 startin &e5e&

)show s*stem

)show interfaces

)show interfaces fxp1

)show routing-options

)show protocols


44/126

Juni er Networks Inc. Co ri ht ##

delete comman!

-emo5e conuration statements

)edit interfaces fxp1 unit 0

)show

)set famil* inet address 1.1.1.1+&

)show

)delete famil* inet address 1.1.1.1+&

)show

)top

)delete protocol ospf

)delete protocol bgp


45/126


o5e aroun! the Fierarch8

Conuration statements oranie! as a tree Simi&ar to UNI/Gin!owsWst8&e !irectories

top

atm e sonet t

c&oc; 9pc

rewa&& inter9aces protoco&s s8stem more,

Less Specic

ore Specicethernet

a&arm

chassis


46/126

Juni er Networks Inc. Co ri ht #$

o5e aroun! the Fierarch8

Use the e(i& comman! to 9ocus 8our attention on aparticu&ar part o9 the hierarch8

user@host e(i& -hassis alar e&herne&

;edit chassis alarm ethernet<

top

atm e sonet t

c&oc; 9pc

rewa&& inter9aces protoco&s s8stem more,

ethernet

a&arm

chassis


47/126

Juni er Networks Inc. Co ri ht #%

edit comman!

B!it is &i;e !oin a 'c!( in Uni6 or DOS Kou mo5e !own the !irector8 &e5e&

Gith B!it 8ou mo5e !own the comman! hierach8

B6amp&e:topshow

e!it inter9aces

show

top

B!it


48/126


top

top &e5e& W mo5es to top o9 e!it hierarch8 Li;e a uni6 'c! /(

B6amp&e:

)edit interfaces)show

)top

)show


49/126

Juni er Networks Inc. Co ri ht #'

up

mo5e up one &e5e& in e!it hierarch8 Li;e a uni6 'c! ..(

B6amp&e:

)edit s*stem login)show

)up

)show

)up)show


50/126


ore on the exit comman!

Use the e/i& comman! to mo5e bac; towhere 8ou just were

exit at the top &e5e& e6its conuration mo!e an!puts 8ou bac; into operationa& mo!e

exit configuration'o(e e6its no matter where8ou are

B6amp&e:

)edit s*stem login)show

)exit

)show


51/126

Juni er Networks Inc. Co ri ht 5(

commit comman!

Acti5ate conuration chanes usin the-oi&

comman!

commit chec;s conuration s8nta6 an! acti5ates it

commit chec S8nta6 chec; on&81 !o not app&8chanes

commit and-(uit #uit conuration mo!e i9 commitsuccee!s

commit conrmed next page,


52/126


commit conrmed option

commit conrmed Automatica&&8 ro&&bac; i9 notconrme!.

28 !e9au&t1 the conuration runs 9or , minutes be9orethe ro&&bac;.

Kou can chane the time b8 speci98in the number o9minutes at the en! o9 the comman!. I9 8ou !o not want the ro&&bac; to occur1 issue a secon!

commit comman! be9ore the ro&&bac; occurs.

Current con is juniper.con9 "/con on Yash% Sa5e! cons are juniper.con9.1 juniper.con9.


53/126

Juni er Networks Inc. Co ri ht 5"

commit s*nchronie option

-e!un!ant route enine cons8nchroniation

metho! o9 ensurin that the conurations

on the master an! bac;up routin eninesremain i!entica&.

causes the commit to 9ai& un&ess the

conuration is success9u&&8 committe! onboth routin enines


54/126

Juni er Networks Inc. Co ri ht 5#

2ac; out Chanes

Use the roll%a-$ comman! to restore one o9 the &ast=, pre5ious&8 committe! conurations

roll%a-$ or roll%a-$ 7 resets the can!i!ateconuration to the current&8 runnin conuration1

which is the &ast 5ersion committe!.

roll%a-$ 1 &oa!s the conuration be9ore that

an! so on


55/126


Conure B6amp&e

>congure)show

)set s*stem host-name Dallas

)show

)show s*stem)commit

)exit


56/126

Juni er Networks Inc. Co ri ht 5$

Conure B6amp&e

>congure

)edit s*stem

)show

)set host-name 2

)show

)up)show

)commit

)show

)rollbac 1

)showcommit

)exit


57/126

Juni er Networks Inc. Co ri ht 5%

status comman!

Disp&a8 other users conurin router

u&tip&e users can e!it the same can!i!ateconuration1 an! the conuration chanes are5isib&e to e5er8one.

I9 another user is in the conuration mo!e at thesame time1 this in9ormation is !isp&a8e! when 8ouenter the conuration mo!e

>congure exclusive >congure private


58/126


save comman!

save lename sa5es the conuration to an ASCII &e on

har! !ri5e1 Yopp8 !ri5e1 9tp site1 [ De9au&t !irector8 is 8our user !irector8

/5ar/home/username sa5es 9rom current &e5e& an! be&ow

)top

)save lename

Note: on&8 commit acti5ates an! sa5es a&&8our chanes to Yash "/con%.


59/126

Juni er Networks Inc. Co ri ht 5'

show conguration comman!

Use the show configuration comman! 9rom the CLI tosee the runnin con

>show conguration >show conf

Just &i;e CiscoEs show running

Kou can a&so speci98 startin &e5e&

>show conguration s*stem

>show conguration interfaces

>show conguration routing-options

>show conguration protocols


60/126

Juni er Networks Inc. Co ri ht $0

Conuration 0i&e DiVerences

Show !iVerences between can!i!ateconuration &e an! Acti5e conuration

'-o&&bac;( conuration

An8 sa5e! conuration &e

) show | compare rollbac number

) show | compare lename

3onguration mode onl* Li;e Uni6 !iV


61/126

Juni er Networks Inc. Co ri ht $(

Loa! a Conuration 0i&e

Conuration in9ormation can come 9rom an ASCII&e prepare! o]ine S8nta6 loa( repla-e 8 erge 8 o.erri(e2 filename

Chanes can!i!ate conuration on&8 Kou must commit to acti5ate

Use the load comman! to O5erri!e an e6istin conuration

To replace an entire configuration, specify the override option.

mere new statements into e6istin conuration

rep&ace e6istin statement in current conuration"usin rep&ace: tas in a &e%


62/126


Cut an! aste

load can ta;e input 9rom the termina& load "replace | merge | override% terminal

Cop8 8our con to Gin!ows buVerBnter JUNOS con mo!e

load override terminal

aste 9rom Gin!ows buVerress ctrl-d to te&& JUNOS 8ou are

!one

Sa5e an! Loa!


63/126

Juni er Networks Inc. Co ri ht $"

Sa5e an! Loa!Conuration 0i&es

-oi&

roll%a-$ n

Can!i!ateconuration

Acti5econuration

< ...

,l

o a (

s a

. e


64/126

Juni er Networks Inc. Co ri ht $#

De&ete entire con

>congure

)save demo

)delete

)show

)load replace ?

)load replace demo

)show

45

>congure

)delete

)show

)rollbac

)show


65/126


run comman!

B6ecute CLI comman!s 9rom conurationmo!e with the run comman!

)run show interface fxp0

)run show bgp sum


66/126

Juni er Networks Inc. Co ri ht $$

rename comman!

Ghen mo!i98in a conuration1 8ou canrename an i!entier that is a&rea!8 in theconuration.

Kou can !o this either b8 !e&etin thei!entier "usin the !e&ete comman!% an!then a!!in the rename! i!entier "usinthe set an! e!it comman!s%1

or 8ou can rename the i!entier usin therename conuration mo!e comman!


67/126

Juni er Networks Inc. Co ri ht $%

rename comman!

e!itP

juniper@-* show inter9acesso/


68/126


ConurationComman! Summar8

A!! an! mo!i98 conuration statements e(i&, se&1 renae1 an! inser& comman!s

Disp&a8 current conuration sho3 comman!

Sa5e1 5a&i!ate1 an! acti5ate a comp&ete conuration

-oi& comman!

-eturn to pre5ious&8 sa5e! conuration roll%a-$ comman!

-emo5e conuration statements (ele&e comman!

Disp&a8 other users conurin router s&a&us comman!


69/126

Juni er Networks Inc. Co ri ht $'

Directories on the -outer

9con #ash' Duniper3conf4 Duniper3conf314 Duniper3conf324 an! Duniper3conf3

9)ar #!is%' 9)ar9home ; users& home !irectories 9)ar9!b9con ; Duniper3conf3? throuh Duniper3conf3?@ 9)ar9$o ; Contains s(stem $o an! tracin $es 9)ar9tmp ; core $es4 temp !irector( for new software 9)ar9crash ; !ump $es

9a$troot #!is%' re:uest s(stem snapshot comman! the root $e s(stem #9' is bac%e! up to 9a$troot

9a$tcon #!is%' re:uest s(stem snapshot comman! 9con !irector( is bac%e! up to 9a$tcon3


70/126

Juni er Networks Inc. Co ri ht %0

0i&enames

In some CLI comman!s an! conurationstatements 8ou can inc&u!e a &ename. 7nc$u!in8 $e cop(4 $oa!4 sa)e4 set s(stem $oin user

user;name authentication $oa!;%e(;$e4 an! re:uests(stem software a!!3


71/126

Juni er Networks Inc. Co ri ht %(

0i&enames ou can specif( a $ename in one of the fo$$owin wa(s8

$ename


72/126


0i&e Comman!s #le ?

#le list ist of $es

#remember4 !efau$t is (our home !irector('

#le show #lename *isp$a( the contents of a $e

#le delete #lename

#le copy #le copy demo ftp/00nic!/uniper2,$&&$1'($&0demo

Can use wi$! car!s I

show system storage

ftp://nick:[email protected]/demoftp://nick:[email protected]/demo


73/126

Juni er Networks Inc. Co ri ht %"

0i&e Comman!s

#le copy 0tmp0dir10* 0tmp0dir&0

#le delete 0tmp0&''&'*

#le list 0tmp0fo*

#le copy 0tmp0stats0&''&'1(* a/0stats0 #le rename 0tmp0fo* 0tmp0goo

3ile copy does not support wildcarding for 345operations


74/126

Juni er Networks Inc. Co ri ht %#

9tp

Kou can a&so use 9tp 9rom the CLI prompt 9tp ,...,bi

hash

&c! /5ar/tmp

et JUNOS&ename

Note: )his is a hi!!en comman!

erio!ic Conuration


75/126


erio!ic ConurationUp&oa!s

Automatic up&oa!s o9 conuration &es "con/juniper.con9 or

/con/juniper.con9.% Uses 9tp Destination &e name is

Qroutername`juniper.con9.P`KKKKDD`FFSS.con9

Conuration:s8stem ^

archi5a& ^conuration ^

trans9erinter5a& Qminutes7

trans9eroncommit7

archi5esites ^

9tp://!ump:[email protected]/pub/incomin/con7

9tp://no:[email protected]&ahb&ahb&ah.com/pub/b&ah

__

_

_

ftp://dump:[email protected]/pub/incoming/configftp://no:[email protected]/pub/blahftp://no:[email protected]/pub/blahftp://dump:[email protected]/pub/incoming/config


76/126

Juni er Networks Inc. Co ri ht %$

S8stem Loin an! )racin


77/126

Juni er Networks Inc. Co ri ht %%

S8s&o Options B6amp&e

syslo=

1ile filename

facility level?

archive

1iles number ?

sie size?

Aworld,readable B no,world,readableC?

host hostname

facility level?

user Ausername B EC

facility level?

console

facility level?

archive

1iles number ?

sie size?Aworld,readable B no,world,readableC?


78/126

Juni er Networks Inc. Co ri ht %

S8s&o 0aci&ities

Speci98 the c&ass "9aci&it8% o9 messaes to&o an! the minimum se5erit8 &e5e& o9 themessae

0aci&ities anyJAn8 9aci&it8

au&hori9a&ionJAuthoriation s8stem

-ronJCron !aemon

(aeonJ4arious s8stem !aemons

in&era-&i.e'-oan(sJCLI comman!s

$ernelJessaes enerate! b8 the JUNOS ;erne& userJessaes 9rom ran!om user processes


79/126

Juni er Networks Inc. Co ri ht %'

S8s&o Le5e&s

Se5erit8 &e5e&s1 in or!er o9 !ecreasin se5erit8 eergen-yJanic or other con!itions that ma;e the

s8stem unusab&e

aler&JCon!itions that shou&! be correcte!imme!iate&81 such as a corrupte! s8stem !atabase

-ri&i-alJCritica& con!itions1 such as har! !ri5e errors

errorJStan!ar! error con!itions

3arningJS8stem warnin messaes

no&i-eJCon!itions that are not error con!itions1 butthat miht warrant specia& han!&in

in+oJIn9ormationa& messaes "the !e9au&t%

anyJSo9tware !ebuin messaes


80/126


S8s&o Le5e&s

Settin a se5erit8 &e5e& causes router to &o a&&messaes at that &e5e& an! more se5ere

0or e6amp&e Loin at the -ri&i-al &e5e& a&so causes aler& an!

eergen-y messaes to appear

eergen-y aler& -ri&i-al error 3arning no&i-e in+o any

ore se5ere


81/126

Juni er Networks Inc. Co ri ht (

S8s&o Options

Gritin to a &e 28 !e9au&t1 &es are p&ace! in :.ar:log on the routerEs

har! !is;

1ile filename

facility level?

archive

1iles number ?

sie size?

Aworld,readable B no,world,readableC?


82/126


)8pes o9 S8s&o

Grite to a host hos& hostname ;

facility level<

=

Grite to a user user username 8 2 ;

facility level< =

Grite to the conso&e -onsole ;

facility level<

=


83/126


S8s&o B6amp&esyslog ;

: sen( all se-uri&y'rela&e( in+ora&ion &o +ile ?se-uri&y? :.ar:log:se-uri&y2 :

+ile security ;

au&hori9a&ion in+o<

in&era-&i.e'-oan(s in+o<

=

: sen( generi- essages au&hori9a&ion a& le.el no&i-e an( a%o.e,

&he res& a& le.el 3arning an( a%o.e2 &o +ile ?essages? :

+ile messages ;

au&hori9a&ion no&i-e<

any 3arning<

=

: sen( any -ri&i-al essages &o ale/ i+ he is logge( in :

user alex ;

any -ri&i-al<

=

: sen( all (aeon, le.el in+o an( a%o.e, or any&hing, 3arning an( a%o.e, &o ho&'(og4juniper4ne& :

hos& ho&'(og4juniper4ne& ;

(aeon in+o<

any 3arning<

=

: sen( any error essages, or higher, &o &he sys&e -onsole : -onsole ;

any error<

=

=

9 i


84/126


)8pes o9 )racin

Kou can enab&e tracin 9or 3&oba& tracin operationsDene tracin 9or a&& routin protoco&s

rotoco&specic tracin operationsDene tracin 9or a specic routin protoco&

)racin operations within in!i5i!ua& routinprotoco& entitiesDene more ranu&ar tracin operations 9or some

protoco&s

Inter9ace tracin operations

Dene tracin operations 9or in!i5i!ua& routerinter9aces an! 9or the inter9ace process itse&9

3 & ) i


85/126


3enera& )racin

)racin 9or each so9tware 9eature sharessimi&ar conuration

;edit feature-name<

user@host sho3

traceoptions

1ile filename ;replace< ;sie size< ;1iles number < ;no,stamp


86/126


)race Options

set traceoptions le lename les "default 10% sie "default 1+6%

world-readable

set traceoptions 7ag Ghat !o 8ou want to &oo; at

4arious options that are !iVerent base! on where8ou are in the hierarch8

OS0 ) O ti


87/126

Juni er Networks Inc. Co ri ht %

OS0 )race Options B6amp&e:

e!it protoco&s osp9

set traceoptions &e osp9.&oset traceoptions Ya

ossib&e comp&etions: a&& )race e5er8thin

!atabase!escription )race !atabase !escription pac;ets

error )race errore! pac;ets

e5ent )race OS0 state machine e5ents

Yoo!in )race LSA Yoo!in

enera& )race enera& e5ents

he&&o )race he&&o pac;ets

&saac; )race LSA ac;now&e!ement pac;ets

&sareTuest )race LSA reTuest pac;ets &saup!ate )race LSA up!ate pac;ets

norma& )race norma& e5ents

pac;et!ump Dump the contents o9 se&ecte! pac;et t8pes

pac;ets )race a&& OS0 pac;ets

po&ic8 )race po&ic8 processin

route )race routin in9ormation

sp9 )race S0 ca&cu&ations

state )race state transitions

tas; )race routin protoco& tas; processin

timer )race routin protoco& timer processinset traceoptions Ya a&&

commit an!Tuitmonitor start osp9.&o

Gatch 9or messaes[

monitor stop

IS IS ) O ti


88/126

Juni er Networks Inc. Co ri ht

ISIS )race Options B6amp&e:

e!it protoco&s isis

set traceoptions &e isis.&oset traceoptions Ya

ossib&e comp&etions: a&& )race e5er8thin

csn )race Comp&ete SeTuence Number pac;ets

error )race errore! pac;ets


he&&o )race Fe&&o pac;ets

&sp )race Lin; State pac;ets

&speneration )race LS eneration

norma& )race norma& e5ents pac;ets )race ISIS pac;ets


psn )race artia& SeTuence Number pac;ets


sp9 )race S0 e5ents



timer )race routin protoco& timer processincommit an!Tuit

commit an!Tuitmonitor start isis.&o

Gatch 9or messaes[

monitor stop

23 ) O ti


89/126

Juni er Networks Inc. Co ri ht '

23 )race Options

B6amp&e:e!it protoco&s bpset traceoptions &e bp.&o

set traceoptions Ya ossib&e comp&etions:

a&& )race e5er8thin

aspath

!ampin


;eepa&i5e

norma& )race norma& e5ents open )race 23 open pac;ets

pac;ets )race a&& 23 protoco& pac;ets





timer )race routin protoco& timer processin

up!ate )race 23 up!ate pac;etscommit an!Tuit

commit an!Tuitmonitor start bp.&o

Gatch 9or messaes[

monitor stop

I t 9 ) O ti


90/126

Juni er Networks Inc. Co ri ht '0

Inter9ace )race Options

B6amp&e:e!it inter9acesset traceoptions &e inter9ace.&o

set traceoptions Ya

ossib&e comp&etions:

a&& Bnab&e a&& inter9ace trace Yas

e5ent )race inter9ace e5ents

ipc )race inter9ace IC messaes me!ia )race inter9ace me!ia chanes

commit an!Tuit

monitor start inter9ace.&o

Gatch 9or messaes[

monitor stop

"can a&so enab&e !iVerent Yas per specic inter9aces%

- ti ti ) O ti


91/126

Juni er Networks Inc. Co ri ht '(

-outinoptions )race Options

B6amp&e:e!it protoco&s routinoptions

set traceoptions &e enera&routin.&o

set traceoptions Ya ossib&e comp&etions:

a&& )race e5er8thin

coninterna& )race conuration interna&s


norma& )race norma& e5ents

parse )race conuration parsin


ree6parse )race reu&are6pression parsin




timer )race routin protoco& timer processincommit an!Tuit

commit an!Tuitmonitor start enera&routin.&o

Gatch 9or messaes[

monitor stop

S & ! ) ti 0i&


92/126


S8s&o an! )raceoptions 0i&es

28 !e9au&t1 trace &es are store! in:.ar:log

4iewin store! &o &es >show log

&ist o9 &o &es in /5ar/&o

4iew a specic &o >show log lename

more the &ename

onitor Options


93/126

Juni er Networks Inc. Co ri ht '"

onitor Options

Use the monitor CLI comman! to 5iew rea&time &o in9ormation

user@host> oni&or s&ar& 8 s&op2 +ilenaes

Shows new entries in monitore! &es unti&cance&e!

onitor Options


94/126

Juni er Networks Inc. Co ri ht '#

onitor Options

>monitor start lename &i;e Uni6 tai& W9 mu&tip&e peop&e can 5iew &o &es at same time

>monitor stop lename Stop monitorin a &o &e

>monitor stop Stop monitorin a&& &o &es Li;e Cisco 'no !ebu a&&(

>monitor list Disp&a8 status o9 monitore! &es

Lo 0i&es


95/126


Lo 0i&es

S8stem ;eeps a&& &o &es in /5ar/&o

>show log &ist o9 &o &es in /5ar/&o

>show log lename more &ename

>monitor start lename &i;e Uni6 tai& W9

essages &e contains runnin commentar8 abouts8stem operation W "S8s&o% Can be tune! to pro5i!e minima& to e6tensi5e &oin

>show log messages

JUNOS So9tware


96/126

Juni er Networks Inc. Co ri ht '$

JUNOS So9tware

JUNOS So9tware


97/126

Juni er Networks Inc. Co ri ht '%

JUNOS So9tware

Juniper has one so9tware pac;ae that runs on a&& o9 our

p&at9orms

Arri5es preinsta&&e! 9rom 9actor8 onto 0&ash !ri5e Far! !ri5e "a&ternate cop8%

CCIA Yash car! "use as a &ast resort%

Can boot 9rom a&ternate cop8 I9 Yash !ri5e 9ai&s1 router can sti&& boot 9rom har! !ri5e or

remo5ab&e me!ia

Upra!ab&e Upra!e pac;aes a5ai&ab&e throuh the Internet or on

remo5ab&e me!ia

2oot SeTuence


98/126

Juni er Networks Inc. Co ri ht '

2oot SeTuence

Far!ware contro&&e! So9tware noties har!ware when boot comp&etes

Success Success Success

-emo5ab&eme!ia

Fa&t

Done

So&i!stateYash !is;

-otatin!is;

Done Done

JUNOS So9tware 4ersion


99/126

Juni er Networks Inc. Co ri ht ''

JUNOS So9tware 4ersion

CLI comman!s to !isp&a8 insta&&e! pac;aes show s*stem software

show version

JUNOS So9tware


100/126

Juni er Networks Inc. Co ri ht (00

JUNOS So9tware

Bach JUNOS so9tware re&ease consists o9 thebase operatin s8stem "jbase% an! so9twarepac;aes: j;erne& Operatin s8stem pac;ae

jbaseA!!itions to the operatin s8stem

jroute So9tware that runs on the -outin Bnine jp9e So9tware that runs on the routerEs ac;et

0orwar!in Bnine

j!ocs Documentation 9or the so9tware

jcr8ptoBncr8ption so9tware "in !omestic so9tware

on&8%

)he 9our pac;aes are a&so roupe! toether ina bun!&e1 which is ca&&e! jbun!&e.

jbun!&e 5s jinsta&&


101/126

Juni er Networks Inc. Co ri ht (0(

jbun!&e 5s jinsta&&

jinsta&& contains a&& pac;aes p&us j;erne&an! jbase7 8ou can a&wa8s use it to upra!e

Jbun!&e on&8 contains the pac;aes

Chec; re&ease notes to ma;e sure 8ou area&&owe! to upra!e usin jbun!&e

I9 in !oubt1 upra!e usin jinsta&&

JUNOS ac;ae Namini


102/126


Con5ention So9tware pac;aes ha5e stan!ar! names

ac;aem.nnumber.t

m.n is the major 5ersion

is a sin&e uppercase &etterA A&pha2 2eta- W -e&ease I W Interna& )est or B6perimenta&

Number is the re&ease number

JUNOS ac;ae NaminC i


103/126

Juni er Networks Inc. Co ri ht (0"

Con5ention jinsta&&H.-.


104/126

Juni er Networks Inc. Co ri ht (0#

reTuest s8stem snapshot

2ac; up the current&8 runnin an! acti5e &es8stem so that 8ou can reco5er to a ;nown1stab&e en5ironment in case somethin oeswron with an upra!e 9a$troot

the root $e s(stem #9' is bac%e! up to 9a$troot

9a$tcon 9con !irector( is bac%e! up to 9a$tcon3

Use 're(uest s*stem software rollbac ( toreco5er

Do this be9ore 8ou &oa! new so9tware.

So9tware Upra!e rocess


105/126


So9tware Upra!e rocess

Down&oa! the so9tware pac;aes 8ou nee!9rom the Juniper Networ;s Support Gebpae http://www.juniper.net/support/

2ac; up the current&8 runnin an! acti5e &es8stem so that 8ou can reco5er to a ;nown1stab&e en5ironment in case somethin oeswron with the upra!e re(uest s*stem snapshot

So9tware Upra!e


106/126

Juni er Networks Inc. Co ri ht (0$

So9tware Upra!e

Cop8 the jbun!&ejinsta&& so9tware pac;aeto the router 8ou are oin to upra!e.

Ge recommen! that 8ou cop8 it to the/5ar/tmp !irector81 which is on the har! !is;

an! is a &are &e s8stem.

&e cop8 9tp://useri!:passwor!@9tpser5era!!ress/JUNOS&ename /5ar/tmp/JUNOS&ename

One bi comman! uses 0)1 SC1 or S0)"not )0)%

B6amp&e:&e cop8 9tp://juniper:juniper@,...,/jbun!&eH.-.


107/126

Juni er Networks Inc. Co ri ht (0%

So9tware Upra!e

Kou can a&so use 9tp 9rom the C&i prompt 9tp ,...,

bi

hash

&c! /5ar/tmp

et JUNOS&ename

So9tware Upra!e


108/126


So9tware Upra!e

A!! the new pac;ae

>re(uest s*stem software add lename 0i&ename cou&! be:

/5ar/tmp/jbun!&e=.-.


109/126

Juni er Networks Inc. Co ri ht (0'

So9tware Upra!e

A9ter 8ou ha5e upra!e! or !ownra!e! theso9tware an! are satise! that the newso9tware is success9u&&8 runnin1 issue thereTuest s8stem snapshot comman! to bac;up the new so9tware

re(uest s*stem snapshot

Initia& s8stem conuration


110/126

Juni er Networks Inc. Co ri ht ((0


2asic s8stem start up an!sh t !o n


111/126

Juni er Networks Inc. Co ri ht (((

shut !own owerup

)urn on power supp&8

ower !own >re(uest s*stem halt

-eboot >re(uest s*stem reboot

)he rst time 8ou &oin


112/126


)he rst time 8ou &oin

Start the CLI manua&&8

lab$ Attyd'C

lo=in: roo&

Password:

Fast lo=in: -ri -eb &" :$*:&0 on ttyd'

opyri=ht AcC "'5 "*5 "05 ""5 #'5 #&5 #*5 #/

6he (e=ents o1 the Gniversity o1 ali1ornia

,,,8GJS /&(& built $''','+,$/ '#:$#:// G6

K -li

root@lab$>

root@lab$> ui&

K logou&

lab$ Attyd'C

lo=in:

root &oin


113/126

Juni er Networks Inc. Co ri ht (("

root &oin

-oot passwor! -oot passwor! not set at 9actor8

Specia& treatment 9or 'root( &oin Can on&8 &o in as root 9rom conso&e port

Un&ess root&oin is specica&&8 enab&e!

ust create a!!itiona& user with superuserpri5i&ees to &o in 5ia networ; ports

2e sure to re5iew securit8 imp&ications

Initia& Conuration


114/126

Juni er Networks Inc. Co ri ht ((#

Initia& Conuration

-oot passwor! -oot passwor! not set at 9actor8

ust use conso&e to conure root passwor!

-outer name

anaement inter9ace "96p,% I a!!ress an!pre6 &enth

De9au&t route

DNS ser5er I a!!ress

)urn on ssh or te&net or 9tp

Initia& Conuration


115/126


Initia& Conuration

Bnter conuration mo!eroot@> -on+igure

;edit<

root@

Set root passwor! &ain te6t ;nown

root@ se& sys&e roo&'au&hen&i-a&ion plain'&e/&'pass3or(

Initia& Conuration


116/126

Juni er Networks Inc. Co ri ht (($

Initia& Conuration

Set router name;edit<root@ se& sys&e hos&'nae Den.er

Set router !omain name;edit<root@ se& sys&e (oain'nae juniper4ne&

Initia& Conuration


117/126

Juni er Networks Inc. Co ri ht ((%

Initia& Conuration

Set manaement Bthernet I a!!ress an!pre6;edit<

root@lab$ se& in&er+a-es +/p7 uni& 7 +aily ine& a((ress ip-address/prefix-length

Set !e9au&t route;edit<

root@lab$ se& sys&e %a-$up'rou&er gateway-address

root@lab$ se& rou&ing'op&ions s&a&i- rou&e (e+aul& ne/&hop gateway-address re&ain

Set name ser5er a!!ress;edit<

root@lab$ se& sys&e nae'ser.er ns-address

Initia& Conuration


118/126

Juni er Networks Inc. Co ri ht ((

Initia& Conuration

Commit chanes so 9ar;edit<root@ -oi&

commit complete

;edit<

root@Denver



119/126

Juni er Networks Inc. Co ri ht (('

a s8s e co u a o

congure

set s*stem host-name Denver set s*stem domain name !uniper.net

set s*stem services telnet

set s*stem services ftp

set s8stem rootauthentication p&ainte6tpasswor!

set s8stem &oin user juniper authentication p&ainte6tpasswor!set s8stem &oin user juniper c&ass superuser

set s*slog le lename interactive-commands info

set interfaces fxp0 unit 0 famil* inet 1.1.1.1+&

set s8stem bac;uprouter gatewa*-address

set routinoptions static route !e9au&t ne6thop gatewa*-address

commit



120/126


8

>set date

0rom the c&i

-e9erences


121/126

Juni er Networks Inc. Co ri ht (2(

http://www.juniper.net/pro!ucts/

Juniper ro!ucts

http://www.juniper.net/so&utions/ Ghite papers1 App&ication Notes1 2rochures1 So&ution

2rie9s1[

http://www.juniper.net/compan8/presscenter/imae&ibrar8/&ibrar8.htm&

7mae ibrar(

) Icons1 4isio Stenci&s1 JB31 3I01 21 etc

-e9erences

http://www.juniper.net/products/http://www.juniper.net/solutions/http://www.juniper.net/company/presscenter/imagelibrary/library.htmlhttp://www.juniper.net/company/presscenter/imagelibrary/library.htmlhttp://www.juniper.net/company/presscenter/imagelibrary/library.htmlhttp://www.juniper.net/company/presscenter/imagelibrary/library.htmlhttp://www.juniper.net/solutions/http://www.juniper.net/products/


122/126


Conuration ui!e:

Insta&&ation an! s8stem manaement

www.juniper.net/support So9tware upra!es1 support re&ate! in9o

www.juniper.net/techpubs

B&ectronic 5ersions o9 a&& !ocumentation F)L1 D01 )ar1 a&m i&ot1 CD-O )A-1 e2oo;

www.juniper.net/techpubs/Trc/ )echnica& Documentation #uic; -e9erence Car!s in D0 Far!ware1 Insta&&ation1 Comman!Line Inter9ace1 Inter9aces1

-outin rotoco&s

www.juniper.net

http://www.juniper.net/supporthttp://www.juniper.net/techpubshttp://www.juniper.net/techpubs/qrc/http://www.juniper.net/techpubs/qrc/http://www.juniper.net/techpubshttp://www.juniper.net/support


123/126

Juni er Networks Inc. Co ri ht (2"

j p

3et access to restricte! areas o9 Juniper.net Support an! so9tware !own&oa!s[

http://www.juniper.net/ainaccess.htm

J)AC -esources


124/126

Juni er Networks Inc. Co ri ht (2#

J

JTAC Contact InformationBmai& support: [email protected]

hone support 9or U.S. customers an!artners: ???+J)AC "=?


125/126


Certification Program (JNTCP) )echnica& Certication roram

O5er5iew B6am -eistration -esources -ecertication -eTuirements 0A#s )echnica& B!ucation

Certication Statistics

http://www.juniper.net/trainin/certication/


126/126

)han; 8ou

John Jacobs [email protected]

http://www juniper net

junos cli demo v4.5

Documents