|
Techpubs Home
Report an Error
Short Contents
Entire manual as PDF [8274 KB]
|
 |
- Chapter:
About This Guide
[PDF 52 KB]
- Objectives
- Audience
- Document Organization
- Part Organization
- Using the Indexes
- Documentation Conventions
- General Conventions
- Conventions for Software Commands and Statements
- List of Technical Publications
- Documentation Feedback
- How to Request Support
- Chapter:
JUNOS Software Overview
[PDF 192 KB]
- Routing Engine Software Components
- Routing Protocol Process
- IPv4 Routing Protocols
- IPv6 Routing Protocols
- Routing and Forwarding Tables
- Routing Policy
- VPNs
- Interface Process
- Chassis Process
- SNMP and MIB II Processes
- Management Process
- Routing Engine Kernel
- Software Installation Overview
- Tools for Accessing and Controlling the Software
- Software Configuration Overview
- Methods of Configuring the Software
- Configuring the Software
- Activating a Configuration
- Using Software Monitoring Tools
- Router Security
- JUNOS Default Settings
- Router Access
- User Authentication
- Specifying Plain-Text Passwords
- Routing Protocol Security Features
- Firewall Filters
- Auditing for Security
- Supported Software Standards
- Supported Internet RFCs and Drafts
- Asynchronous Transfer Mode (ATM)
- BGP
- Challenge Handshake Authentication Protocol (CHAP)
- Firewall Filters
- Frame Relay
- Generalized MPLS (GMPLS)
- Generalized Routing Encapsulation (GRE) and IP-IP Encapsulation
- Integrated Local Management Interface (ILMI)
- IP Multicast
- IPSec and IKE
- IPv6
- IS-IS
- LDP
- Link Management Protocol (LMP
- Layer 2 Tunneling Protocol (L2TP)
- MIBs
- MPLS
- Network Address Translation (NAT)
- OSPF
- Point-to-Point Protocol (PPP)
- RIP
- RSVP
- Secure Sockets Layer (SSL)
- TCP/IP v4
- Voice Services
- VPNs
- Supported ISO Standards
- IS-IS
- Supported SDH and SONET Standards
- Other Supported Standards
- ATM
- Ethernet
- Frame Relay
- Serial
- T3
- Chapter:
Product Architecture
[PDF 30 KB]
- Hardware Overview
- Product Architecture
- Packet Forwarding Engine
- Routing Engine
- Chapter:
Complete Configuration Mode Commands and Statements for M-series and T-series Platforms
[PDF 535 KB]
- Complete Configuration Mode Commands
- Complete Configuration Statement Hierarchy
- [edit access] Hierarchy Level
- [edit accounting-options] Hierarchy Level
- [edit applications] Hierarchy Level
- [edit chassis] Hierarchy Level
- [edit class-of-service] Hierarchy Level
- [edit firewall] Hierarchy Level
- [edit forwarding-options] Hierarchy Level
- [edit groups] Hierarchy Level
- [edit interfaces] Hierarchy Level
- [edit logical-routers] Hierarchy Level
- [edit policy-options] Hierarchy Level
- [edit protocols] Hierarchy Level
- [edit routing-instances] Hierarchy Level
- [edit routing-options] Hierarchy Level
- [edit security] Hierarchy Level
- [edit services] hierarchy level
- [edit snmp] Hierarchy Level
- [edit system] Hierarchy Level
- Chapter:
Complete Configuration Mode Commands and Statements for J-series Services Routers
[PDF 298 KB]
- Complete Configuration Mode Commands
- Complete Configuration Statement Hierarchy
- [edit access] Hierarchy Level
- [edit accounting-options] Hierarchy Level
- [edit applications] Hierarchy Level
- [edit chassis] Hierarchy Level
- [edit class-of-service] Hierarchy Level
- [edit firewall] Hierarchy Level
- [edit forwarding-options] Hierarchy Level
- [edit groups] Hierarchy Level
- [edit interfaces] Hierarchy Level
- [edit policy-options] Hierarchy Level
- [edit protocols] Hierarchy Level
- [edit routing-options] Hierarchy Level
- [edit security] Hierarchy Level
- [edit services] hierarchy level
- [edit snmp] Hierarchy Level
- [edit system] Hierarchy Level
- Chapter:
CLI Overview
[PDF 22 KB]
- CLI Modes
- CLI Command Hierarchy
- Chapter:
CLI Operational Mode
[PDF 221 KB]
- Using the CLI
- Getting Help about Commands
- Getting Help Based on a String in a Statement Name
- Displaying Tips About CLI Commands
- Using CLI Complete Commands
- Examples: Using CLI Command Completion
- CLI Messages
- Moving Around and Editing the Command Line
- How Output Appears on the Screen
- Displaying Output One Screen at a Time
- Filtering Command Output
- Setting the Current Date and Time
- Setting the Date and Time from NTP Servers
- Setting the Source Address to Contact the NTP Server
- Displaying CLI Command History
- Monitoring Who Uses the CLI
- Using the Comment Character #
- Example: Using Comments
- Routing Matrix CLI Enhancements
- Routing Matrix Overview
- How the Routing Matrix Is Identified in the CLI
- Viewing the Routing Matrix as a Single Router
- CLI Options for Selecting Routing Matrix Components
- Examples of Routing Matrix Command Options
- Using of FPC Numbers in Routing Matrix CLI Commands
- Using FPC Numbers in Operational Mode Chassis Commands
- Specifying FPC Numbers at the [edit chassis lcc number] Hierarchy Level
- Specifying FPC Numbers When Configuring Interfaces
- Operational Commands Issued on Routing Engines
- General Operational Tasks
- Upgrading Software on a Routing Matrix
- Managing Backup Routing Engines
- Halting and Rebooting Routing Matrix Components
- Bringing Routing Nodes Offline or Online
- Managing Files on Routing Engines
- Displaying Logs on Any Routing Engine
- Checking the Status of T640 Routing Nodes
- Configuring the Routing Matrix
- Additional Groups
- Chapter:
Controlling the CLI Environment
[PDF 35 KB]
- Setting the Terminal Type
- Setting the Screen Length
- Setting the Screen Width
- Setting the CLI Prompt
- Setting the CLI Directory
- Setting the Idle Timeout
- Setting the CLI to Prompt after a Software Upgrade
- Setting Command Completion
- Displaying CLI Settings
- Example: Controlling the CLI Environment
- Chapter:
Configuring the Router with the CLI
[PDF 416 KB]
- Configuration Statement Hierarchy
- How the Configuration Is Stored
- Entering Configuration Mode
- Using the Configure Command
- Using the Configure Exclusive Command
- Using the Configure Private Command
- Updating the Configure Private Configuration
- Configuration Mode Prompt
- Configuration Mode Banner
- Configuration Statements and Identifiers
- Getting Help About Configuration Mode Commands, Statements, and Identifiers
- Using Command Completion in Configuration Mode
- Examples: Using Command Completion in Configuration Mode
- Getting Help Based on a String in a Statement Name
- Example: Getting Help Based on a String in a Statement Name
- Creating and Modifying the Configuration
- Examples: Creating and Modifying the Configuration
- Moving Among Levels of the Hierarchy
- Moving Down to a Specific Level
- Moving Back Up to Your Previous Level
- Moving Up One Level
- Moving Directly to the Top of the Hierarchy
- Warning Messages When Moving Up
- Issuing Relative Configuration Commands
- Exiting Configuration Mode
- Displaying the Current Configuration
- Examples: Displaying the Current Configuration
- Displaying set Commands from the Configuration
- Example: Displaying set Commands from the Configuration
- Example: Displaying Required Set Commands at the Current Hierarchy Level
- Example: Displaying set Commands with the Match Option
- Displaying Users Currently Editing the Configuration
- Removing a Statement from the Configuration
- Examples: Removing a Statement from the Configuration
- Using Regular Expressions to Remove Related Configuration Items
- Example: Deleting Interfaces from the Configuration
- Example: Deleting Routes from the Configuration
- Copying a Statement in the Configuration
- Example: Copying a Statement in the Configuration
- Renaming an Identifier
- Example: Renaming an Identifier
- Inserting a New Identifier
- Examples: Inserting a New Identifier
- Running an Operational Mode CLI Command from Configuration Mode
- Example: Running an Operational Mode CLI Command from Configuration Mode
- Displaying Configuration Mode Command History
- Verifying a Configuration
- Committing a Configuration
- Committing a Configuration and Exit Configuration Mode
- Activating a Configuration but Requiring Confirmation
- Scheduling a Commit
- Monitoring the Commit Process
- Adding a Comment to Describe the Committed Configuration
- Synchronizing Routing Engines
- Example: Using Apply Groups re0 and re1
- Example: Setting Apply Groups Re0 and Re1
- Saving a Configuration to a File
- Loading a Configuration
- Examples: Load a Configuration from a File
- Returning to a Previously Committed Configuration
- Example: Returning to a Previously Committed Version of the Configuration
- Returning to the Rescue Configuration
- Configuration Mode Error Messages
- Deactivating and Reactivating Statements and Identifiers in a Configuration
- Examples: Deactivating and Reactivating Statements and Identifiers in a Configuration
- Adding Comments in a Configuration
- Examples: Including Comments in Configurations
- Having Multiple Users Configure the Software
- Example: Using the CLI to Configure the Router
- Shortcut
- Longer Configuration Example
- Additional Details About Specifying Statements and Identifiers
- Specifying Statements
- Performing CLI Type-Checking
- Chapter:
Summary of CLI Environment Commands
[PDF 52 KB]
- set cli complete-on-space
- set cli directory
- set cli idle-timeout
- set cli prompt
- set cli restart-on-upgrade
- set cli screen-length
- set cli screen-width
- set cli terminal
- set date
- set date ntp
- set date ntp source-address
- show cli
- show cli history
- Chapter:
Summary of CLI Configuration Mode Commands
[PDF 112 KB]
- activate
- annotate
- commit
- copy
- deactivate
- delete
- edit
- exit
- help
- insert
- load
- quit
- rename
- rollback
- run
- save
- set
- show
- show | display inheritance defaults
- show | display set
- show | display set relative
- show groups junos-defaults
- status
- top
- up
- wildcard
- Chapter:
Summary of CLI Operational Mode Commands
[PDF 86 KB]
- clear
- configure
- file
- file archive
- help
- monitor
- mtrace
- ping
- | (pipe)
- quit
- request
- request security certificate
- request security certificate (for CA Certificate)
- request security certificate (for Signed Certificate)
- restart
- restart (Routing Matrix)
- restart (J-Series Services)
- restart routing
- set
- show
- ssh
- start
- telnet
- test
- traceroute
- update
- Chapter:
Installation Overview
[PDF 42 KB]
- JUNOS Software Distribution
- Software Release Names
- Package Names
- Storage Media
- Boot Devices
- Boot Sequence
- Chapter:
Configuring the Software Initially
[PDF 28 KB]
- Chapter:
Reinstalling the Software Using the Install Media
[PDF 31 KB]
- Preparing to Reinstall the JUNOS Software
- Reinstalling the JUNOS Software
- Reconfiguring the JUNOS Software
- Chapter:
Upgrading Software Packages
[PDF 49 KB]
- Upgrading All Software Packages
- Upgrading Individual Software Packages
- Copying a Configuration to a PC Card or LS-120 Floppy Disk
- Chapter:
Reinstalling Software Using jinstall
[PDF 30 KB]
- Chapter:
Upgrading to Release 7.x from Release 5.x
[PDF 41 KB]
- Chapter:
System Management Overview
[PDF 40 KB]
- Specifying IP Addresses, Network Masks, and Prefixes
- Specifying Filenames and URLs
- Directories on the Router
- Tracing and Logging Operations
- Configuring Protocol Authentication
- Configuring User Authentication
- Chapter:
System Management Configuration Statements
[PDF 63 KB]
- Chapter:
Configuring Basic System Management
[PDF 79 KB]
- Configuring the Router's Name and Addresses
- Configuring the Router's Name
- Mapping the Router's Name to IP Addresses
- Configuring an ISO System Identifier
- Example: Configuring a Router's Name, IP Address, and System ID
- Configuring the Router's Domain Name
- Example: Configuring the Router's Domain Name
- Configuring Which Domains to Search
- Example: Configuring Which Domains to Search
- Configuring a DNS Name Server
- Example: Configuring a DNS Name Server
- Configuring a Backup Router
- Example: Configuring a Backup Router Running IPv4
- Example: Configuring a Backup Router Running IPv6
- Configuring Flash Disk Mirroring
- Configuring the System Location
- Configuring the Root Password
- Example: Configuring the Root Password
- Compressing the Current Configuration File
- Chapter:
Configuring System Authentication
[PDF 99 KB]
- Configuring RADIUS Authentication
- Configuring Juniper Networks-Specific RADIUS Attributes
- Configuring TACACS+ Authentication
- Configuring Juniper Networks-Specific TACACS+ Attributes
- Specifying a Source Address for RADIUS and TACACS+ Servers
- Configuring the Same Authentication Service for Multiple TACACS+ Servers
- Example: Configuring Multiple TACACS+ Servers
- Configuring Template Accounts for RADIUS and TACACS+ Authentication
- Using Remote Template Accounts
- Using Local User Template Accounts
- Using Local User Template Example
- Configuring the Authentication Order
- Example: Removing an Order Set from the Authentication Order
- Example: Inserting an Order Set in the Authentication Order
- Examples: Configuring System Authentication
- Using the Local User Fallback Mechanism
- Example: Inserting Password into the Authentication Order
- Example: Defaulting to Local User Password Authentication, TACACS +
- Example: Defaulting to Local User Password Authentication, RADIUS
- Example: Defaulting to Local User Password Authentication, TACACS + and RADIUS
- Chapter:
Configuring User Access
[PDF 110 KB]
- Defining Login Classes
- Configuring Access Privilege Levels
- Example: Configuring Access Privilege Levels
- Denying or Allowing Individual Commands
- Specifying Operational Mode Commands
- Example 1: Defining Access Privileges to Individual Operational Mode Commands
- Example 2: Defining Access Privileges to Individual Operational Mode Commands
- Specifying Configuration Mode Commands
- Example 3: Defining Access Privileges to Individual Configuration Mode Commands
- Example 4: Configuring Access Privileges to Individual Configuration Mode Commands
- Configuring the Timeout Value for Idle Login Sessions
- Configuring Tips
- Configuring User Accounts
- Example: Configuring User Accounts
- Chapter:
Configuring Time
[PDF 71 KB]
- Setting the Time Zone
- Examples: Setting the Time Zone
- Configuring the Network Time Protocol
- Configuring the NTP Boot Server
- Specifying a Source Address for an NTP Server
- Configuring the NTP Time Server and Time Services
- Configuring the Router to Operate in Client Mode
- Example: Configuring Client Mode
- Configuring the Router to Operate in Symmetric Active Mode
- Configuring the Router to Operate in Broadcast Mode
- Configuring the Router to Operate in Server Mode
- Example: Configuring Server Mode
- Configuring NTP Authentication Keys
- Configuring the Router to Listen for Broadcast Messages
- Configuring the Router to Listen for Multicast Messages
- Chapter:
Configuring System Log Messages
[PDF 195 KB]
- System Logging Configuration Statements
- Minimum System Logging Configuration
- Configuring System Logging for a Single-Chassis System
- Directing Messages to a Log File
- Directing Messages to a User Terminal
- Directing Messages to the Console
- Directing Messages to a Remote Machine or the Other Routing Engine
- Specifying an Alternate Source Address
- Changing the Alternate Facility for Remote Messages
- Examples: Assigning an Alternate Facility
- Adding a String to System Log Messages
- Example: Adding a String
- Configuring Log File Archiving
- Including Priority in System Log Messages
- Including the Year or Millisecond in Timestamps
- Disabling Logging of a Facility
- Examples: Configuring System Logging
- Configuring System Logging for a Routing Matrix
- Configuring Message Forwarding in the Routing Matrix
- Messages Logged when Local and Forwarded Severity Level Is the Same
- Messages Logged when Local Severity Level Is Lower
- Messages Logged when Local Severity Level Is Higher
- Configuring Optional Features for Forwarded Messages
- Directing Messages to a Remote Destination from the Routing Matrix
- Configuring System Logging Differently on Each Platform
- Chapter:
Configuring Miscellaneous System Management Features
[PDF 120 KB]
- Configuring Console and Auxiliary Port Properties
- Disabling the Sending of Redirect Messages on the Router
- Configuring the Source Address for Locally Generated TCP/IP Packets
- Configuring the Router or Interface to Act as a DHCP/BOOTP Relay Agent
- Configuring System Services
- Configuring Finger Service
- Configuring FTP Service
- Configuring JUNOScript Clear-Text Service
- Configure JUNOScript SSL Service
- Configuring SSH Service
- Configuring the Root Login
- Configuring the SSH Protocol Version
- Configuring Telnet Service
- Configuring Console Access to PICs
- Configuring a System Login Message
- Configuring JUNOS Software Processes
- Disabling JUNOS Software Processes
- Configuring Failover to Backup Media if a Software Process Fails
- Configuring the Password on the Diagnostics Port
- Core Dump Files
- Configuring a Router to Transfer its Configuration to an Archive Site
- Configuring the Transfer Interval
- Configuring Transfer on Commit
- Configuring Archive Sites
- Specifying the Number of Configurations Stored on the Flash Drive
- Configuring TACACS+ System Accounting
- Specifying Events
- Configuring TACACS+ Accounting
- Enabling the SDX Software
- Configuring the Path MTU Discovery
- Configuring Source Quench
- Configuring the Range of Port Addresses
- Chapter:
Security Configuration Example
[PDF 187 KB]
- Configuring System Information
- Configuring RADIUS
- Creating Login Classes
- Defining User Login Accounts
- Defining RADIUS Template Accounts
- Enabling Connection Services
- Configuring System Logging
- Configuring the Time Source
- Configuring Interfaces
- Configuring SNMP
- Configuring Protocol-Independent Routing Properties
- Configuring Routing Protocols
- Configuring BGP
- Configuring IS-IS
- Configuring Firewalls
- Example: Consolidated Security Configuration
- Chapter:
Summary of System Management Configuration Statements
[PDF 456 KB]
- accounting
- allow-commands
- allow-configuration
- archival
- archive
- archive-sites
- authentication
- authentication-key
- authentication-order
- auxiliary
- autoinstallation
- backup-router
- boot-server
- broadcast
- broadcast-client
- class
- class (Assign a Class to an Individual User)
- class (Define Login Classes)
- compress-configuration-files
- configuration
- configuration-servers
- connection-limit
- console
- console (Physical Port)
- console (System Logging)
- default-address-selection
- deny-commands
- deny-configuration
- destination
- diag-port-authentication
- domain-name
- domain-search
- dump-device
- events
- explicit-priority
- facility-override
- file
- files
- finger
- ftp
- full-name
- host
- host-name
- http
- https
- idle-timeout
- inet6-backup-router
- interfaces
- internet-options
- load-key-file
- local-certificate
- location
- log-prefix
- login
- max-configurations-on-flash
- message
- mirror-flash-on-disk
- multicast-client
- name-server
- no-compression-configuration-files
- no-redirects
- no-saved-core-context
- no-tip
- no-world-readable
- ntp
- path-mtu-discovery
- peer
- permissions
- pic-console-authentication
- port
- port (HTTP/HTTPS)
- port (RADIUS Server)
- port (SDX Server)
- port (TACACS+ Server)
- ports
- processes
- protocol-version
- radius-server
- rate-limit
- retry
- root-authentication
- root-login
- saved-core-context
- saved-core-files
- secret
- server
- server (Accounting)
- server (NTP)
- servers
- service-deployment
- services
- ssh
- single-connection
- size
- source-address
- source-address (NTP, RADIUS, System Logging, or TACACS+)
- source-address (SDX Software)
- source-port
- source-quench
- static-host-mapping
- syslog
- system
- tacplus
- tacplus-options
- tacplus-server
- telnet
- time-format
- timeout
- time-zone
- transfer-interval
- transfer-on-commit
- trusted-key
- uid
- user
- user (Access)
- user (System Logging)
- web-management
- world-readable
- xnm-clear-text
- xnm-ssl
- Chapter:
Configuration Groups
[PDF 170 KB]
- Overview
- Inheritance Model
- Configuration Groups Configuration Statements
- Configuration Groups Configuration Guidelines
- Creating a Configuration Group
- Applying a Configuration Group
- Example: Configuring and Applying Configuration Groups
- Example: Creating and Applying Configuration Groups on a TX Matrix Platform
- Disabling Inheritance of a Configuration Group
- Example: Disabling Inheritance on Interface s0-1/1/0
- Displaying Inherited Values
- Using Wildcards
- Example: Using Wildcards
- Examples: Configuration Groups
- Configuring Sets of Statements
- Configuring Interfaces
- Configuring Peer Entities
- Establishing Regional Configurations
- Selecting Wildcard Names
- Using JUNOS Default Groups
- Example: Referencing the Preset Statement from the JUNOS Default Group
- Example: Viewing Default Statements That Have Been Applied to the Configuration
- Summary of Configuration Group Statements
- apply-groups
- apply-groups-except
- groups
- Chapter:
Configuring Access
[PDF 238 KB]
- Configuring the Point-to-Point Protocol
- Configuring the Challenge Handshake Authentication Protocol
- Example: PPP Challenge Handshake Authentication Protocol
- Configuring the Authentication Order
- Tracing Access Processes
- Configuring the Layer 2 Tunneling Protocol
- Minimum L2TP Configuration
- Configuring the Address Pool
- Configuring the Group Profile
- Configuring L2TP for a Group Profile
- Configuring the PPP Attributes for a Group Profile
- Example: Group Profile Configuration
- Configuring the Profile
- Configuring the Authentication Order
- Configuring the Client
- Example: Configuring L2TP
- Configuring RADIUS Authentication for L2TP
- Example: RADIUS Authentication
- Configuring the RADIUS Disconnect Server for L2TP
- Example: Configuring the RADIUS Disconnect Server
- Chapter:
Summary of Access Configuration Statements
[PDF 184 KB]
- accounting-port
- address
- address-pool
- address-range
- authentication-order
- chap-secret
- client
- drop-timeout
- fragmentation-threshold
- framed-ip-address
- framed-pool
- group-profile
- group-profile (Group Profile)
- group-profile (Profile)
- idle-timeout
- interface-id
- keepalive
- l2tp
- l2tp (Group Profile)
- l2tp (Profile)
- lcp-renegotiation
- local-chap
- maximum-sessions-per-tunnel
- multilink
- pap-password
- port
- ppp
- ppp (Group Profile)
- ppp (Profile)
- ppp-authentication
- primary-dns
- primary-wins
- profile
- radius-disconnect
- radius-disconnect-port
- radius-server
- retry
- secondary-dns
- secondary-wins
- secret
- shared-secret
- source-address
- timeout
- traceoptions
- user-group-profile
- Chapter:
Security Services Overview
[PDF 17 KB]
- IPSec Overview
- Security Associations
- IKE
- Chapter:
Security Services Configuration Guidelines
[PDF 329 KB]
- Minimum Manual SA Configuration
- Minimum IKE Configuration
- Minimum Digital Certificates Configuration for IKE
- Configuring Security Associations
- Configuring the Description for an SA
- Configuring IPSec Mode
- Configuring Transport Mode
- Configuring Tunnel Mode
- Configuring Manual Security Associations
- Configuring the Processing Direction
- Configuring the Protocol for a Manual SA
- Configuring the Security Parameter Index
- Configuring the Auxiliary Security Parameter Index
- Configuring the Authentication Algorithm and Key
- Configuring the Encryption Algorithm and Key
- Configuring Dynamic Security Associations
- Configuring an IKE Proposal (Dynamic SAs Only)
- Configuring the Authentication Algorithm for an IKE Proposal
- Configuring the Authentication Method for an IKE Proposal
- Configuring the Description for an IKE Proposal
- Configuring the Diffie-Hellman Group for an IKE Proposal
- Configuring the Encryption Algorithm for an IKE Proposal
- Configuring the Lifetime for an IKE SA
- Example: Configuring an IKE Proposal
- Configuring an IKE Policy for Preshared Keys
- Configuring the Description for an IKE Policy
- Configuring the Mode for an IKE Policy
- Configuring the Preshared Key for an IKE Policy
- Associating Proposals with an IKE Policy
- Example: Configuring an IKE Policy
- Configuring an IPSec Proposal
- Configuring the Authentication Algorithm for an IPSec Proposal
- Configuring the Description for an IPSec Proposal
- Configuring the Encryption Algorithm for an IPSec Proposal
- Configuring the Lifetime for an IPSec SA
- Configuring the Protocol for a Dynamic IPSec SA
- Configuring the IPSec Policy
- Configuring Perfect Forward Secrecy
- Example: IPSec Policy Configuration
- Configuring Digital Certificates
- Overview
- Obtaining a Certificate from a Certificate Authority
- Example: Obtaining a Certificate from a Certificate Authority
- Generating a Private and Public Key
- Example: Generating a Key Pair
- Configuring Digital Certificates
- Configuring the Certificate Authority Properties
- Configuring the Cache Size
- Configuring the Negative Cache
- Configuring the Number of Enrollment Retries
- Configuring the Maximum Number of Peer Certificates
- Configuring the Path Length for the Certificate Hierarchy
- Configuring an IKE Policy for Digital Certificates
- Configuring the Type of Encoding Your CA Supports
- Configuring the Identity to Define the Remote Certificate Name
- Specifying the Certificate Filename
- Specifying the Private and Public Key File
- Obtaining a Signed Certificate from the CA
- Example: Obtaining a Signed Certificate
- Configuring Trace Options
- Configuring the ES PIC
- Example: Configuring the ES PIC
- Configuring Traffic
- Traffic Overview
- Example: Configuring Outbound Traffic Filter
- Example: Applying Outbound Traffic Filter
- Example: Configuring Inbound Traffic Filter for Policy Check
- Example: Applying Inbound Traffic Filter to ES PIC for Policy Check
- Configuring an ES Tunnel Interface for a Layer 3 VPN
- Using JUNOScript SSL Service
- Configuring the JUNOScript SSL Service
- Loading the SSL Certificate from a File or URL
- Chapter:
Summary of Security Services Configuration Statements
[PDF 211 KB]
- authentication
- authentication-algorithm
- authentication-algorithm (IKE)
- authentication-algorithm (IPSec)
- authentication-method
- auxiliary-spi
- ca-name
- cache-size
- cache-timeout-negative
- certificates
- certification-authority
- crl
- description
- dh-group
- direction
- dynamic
- encoding
- encryption
- encryption-algorithm
- enrollment-retry
- enrollment-url
- file
- identity
- ike
- ipsec
- ldap-url
- lifetime-seconds
- local
- local-certificate
- local-key-pair
- manual
- maximum-certificates
- mode
- mode (IKE)
- mode (IPSec)
- path-length
- perfect-forward-secrecy
- policy
- policy (IKE)
- policy (IPSec)
- pre-shared-key
- proposal
- proposal (IKE)
- proposal (IPSec)
- proposals
- protocol
- security-association
- spi
- traceoptions
- Chapter:
Router Chassis Configuration Guidelines
[PDF 420 KB]
- Minimum Chassis Configuration
- Configuring Aggregated Devices
- Configuring ATM Cell-Relay Accumulation Mode on an ATM1 PIC
- Configuring Conditions That Trigger Alarms
- Chassis Conditions That Trigger Alarms
- Silencing External Devices
- Configuring SONET/SDH Framing
- Configuring Sparse DLCI Mode
- Configuring Channelized PIC Operation
- Concatenated and Nonconcatenated Mode
- Configuring Channelized DS3-to-DS0 Naming
- Configuring Eight Queues on IQ Interfaces
- Configuring Channelized E1 Naming
- Configuring Channelized STM1 Interface Virtual Tributary Mapping
- Configuring ATM2 Intelligent Queuing Layer 2 Circuit Transport Mode
- Enabling ILMI for Cell Relay
- Configuring the Drop Policy for Traffic with Source-Route Constraints
- Configuring Packet Scheduling
- Configuring the Link Services PICs
- Configuring the Idle Cell Format
- Configuring an MTU Path Check for a Routing Instance
- Enabling MTU Check for a Routing Instance
- Assigning an IP Address to an Interface in the Routing Instance
- Configuring Redundancy
- Configuring Routing Engine Redundancy
- Copying a Configuration File from One Routing Engine to the Other
- Loading a Package from the Other Routing Engine
- Changing to the Backup Routing Engine if It Detects Loss of KeepAlive Signal
- Changing to the Backup Routing Engine if It Detects a Hard Disk Error on the Master Routing Engine
- Changing to the Backup Routing Engine Without Interruption to Packet Forwarding (Graceful Switchover)
- Default Routing Engine Redundancy Behavior
- Configuring SFM Redundancy
- Configuring SSB Redundancy
- Running Different JUNOS Software Releases on the Routing Engines on a TX Matrix Platform
- TX Matrix Platform and T640 Routing Node Configuration Guidelines
- Routing Matrix Overview
- Running Different JUNOS Software Releases
- Software Upgrades and Reinstallation
- Rebooting Process
- Committing Configurations
- Configuring a T640 Routing Node Within a Routing Matrix
- Chassis and Interface Names
- Configuring the Online Expected Alarm
- Creating Configuration Groups
- Configuring Syslog Messages
- Chapter:
Summary of Router Chassis Configuration Statements
[PDF 174 KB]
- aggregated-devices
- alarm
- atm-cell-relay-accumulation
- atm-l2circuit-mode
- ce1
- channel-group
- chassis
- ct3
- device-count
- e1
- ethernet
- fpc
- fpc (M320, T320, T640 Routing Platforms)
- fpc (TX Matrix Platform)
- framing
- graceful-switchover
- idle-cell-format
- keepalive-time
- lcc
- max-queues-per-interface
- mlfr-uni-nni-bundles
- no-concatenate
- offline
- on-disk-failure
- online-expected
- on-loss-of-keepalives
- packet-scheduling
- pic
- pic (M-series and T-series Routing Platforms)
- pic (TX Matrix Platform)
- port
- redundancy
- routing-engine
- sfm
- sonet
- source-route
- sparse-dlcis
- ssb
- t1
- timeslots
- vrf-mtu-check
- vtmapping
- Chapter:
Index
[]
- Chapter:
Index of Statements and Commands
[]
|