Skip to content

Support

Techpubs Home
Report an Error

Short Contents

Entire manual as PDF [8743 KB]
Chapter: About This Guide
[PDF 114 KB]
Objectives
Supported Routing Platforms
Audience
Document Organization
Using the Examples in This Manual
Merging a Full Example
Merging a Snippet
Documentation Conventions
Related Juniper Networks Documentation
Documentation Feedback
Requesting Support
Chapter: Channelized Intelligent Queuing Interfaces
[PDF 664 KB]
Overview
System Requirements
Terms and Acronyms
Configuring Channelized IQ Interfaces
Configuring a Clear Channel on a Channelized IQ Interface
Configuring Single-Level Channels on a Channelized IQ Interface
Configuring Multilevel Channels on a Channelized IQ Interface
Example: Clear Channel Configuration for a Channelized OC12 IQ Interface
Checking Your Work
Example: Complex Configuration for a Channelized OC12 IQ Interface
Checking Your Work
Channelized OC12
SONET OC3
T3
Channelized T3
Channelized OC1
Channelized T1
T1
DS0
Example: Converting a Channelized OC12 IQ PIC to a Channelized STM4 IQ Interface
Checking Your Work
Example: Channelized OC3 IQ Interface Configuration
Checking Your Work
Channelized OC3
Channelized OC1
T3
Channelized T3
T1
Channelized T1
NxDS0
Clear Channel SONET OC3
Example: Channelized DS3 IQ Interface Configuration
Checking Your Work
Example: Channelized T1 IQ Interface Configuration
Checking Your Work
Example: Channelized STM1 IQ Interface Configuration
Checking Your Work
Example: Channelized E1 IQ Interface Configuration
Checking Your Work
Configuring Class of Service for Channelized IQ Interfaces
Configuring a Class-of-Service Scheduler Map
Associating the Scheduler with a DLCI on a Channelized IQ Interface
Example: DLCI Class of Service on a Channelized IQ Interface Configuration
Checking Your Work
For More Information
Revision History
Chapter: Class of Service Using IPv6 DiffServ
[PDF 305 KB]
Overview
System Requirements
Terms and Acronyms
Configuring CoS with IPv6 DiffServ
Configuring a Firewall Filter for an MF Classifier on Customer Interfaces
Applying the Firewall Filter to Customer Interfaces
Assigning Forwarding Classes to Output Queues
Configuring Rewrite Rules
Applying Rewrite Rules to an Interface
Configuring BA Classifiers
Applying a BA Classifier to an Interface
Configuring RED Drop Profiles
Configuring Schedulers
Configuring Scheduler Maps
Applying a Scheduler Map to an Interface
Example: CoS with IPv6 DiffServ Configuration
Checking Your Work
For More Information
Revision History
Chapter: Routing Matrix
[PDF 376 KB]
Overview
System Requirements
Terms and Acronyms
Configuring a Routing Matrix
Adjusting the Configuration to Accommodate Increased FPC Numbers
Configuring Groups to Support Routing Matrix Components
Configuring Protocols and Other Features
Option: Configuring Chassis-Specific Statements
Example: Routing Matrix Configuration
TX Matrix Platform—SCC
Checking Your Work
Displaying the Software Version
Displaying Interfaces
Displaying Routes
Displaying Alarms and System Uptime
Displaying Chassis Hardware and Status
Other Miscellaneous Commands
Routing Matrix Hardware and Software Considerations
Identifying Routing Matrix Components
Viewing the Routing Matrix as a Single Routing Platform
Connecting to a Routing Matrix
Committing Configurations on a Routing Matrix
Upgrading the Software for a Routing Matrix
Managing System Processes in the Routing Matrix
Rebooting and Halting Routing Matrix Components
Enabling and Disabling Specific Routing Matrix Hardware Components
Managing Files on Routing Engines in a Routing Matrix
For More Information
Revision History
Chapter: Source Class Usage
[PDF 275 KB]
Overview
System Requirements
Terms and Acronyms
Configuring SCU
Configuring Route Filters and Source Classes in a Routing Policy
Applying the Policy to the Forwarding Table
Enabling Accounting on Inbound and Outbound Interfaces
Example: SCU Configuration
Checking Your Work
Configuring SCU with Layer 3 VPNs
Configuring Input SCU on the vt Interface of the Egress PE Router
Mapping the SCU-Enabled vt Interface to the VRF Instance
Configuring SCU on the Output Interface
Example: SCU in a Layer 3 VPN Configuration
Checking Your Work
Configuring Accounting Profiles with SCU
Configuring Standard SCU
Associating an Accounting Profile with SCU Classes
Checking Your Work
For More Information
Revision History
Chapter: GMPLS
[PDF 310 KB]
Overview
System Requirements
Terms and Acronyms
GMPLS Phase 2 Implementation
GMPLS Operation
Configuring GMPLS
Configuring Link Management Protocol Traffic Engineering Links
Configuring Link Management Protocol Peers
Configuring Peer Interfaces in OSPF and RSVP
Establishing GMPLS LSP Path Information
Defining GMPLS Label-Switched Paths
Discovering Local Identifiers and Configuring Remote Identifiers
Option: Tearing Down GMPLS LSPs Gracefully
Option: Selecting the Peer Model or the Overlay Model for GMPLS
Option: GMPLS Graceful Restart
Option: Configuring an LMP Control Channel
Example: GMPLS Configuration
Checking Your Work
Router A Status
Router C Status
Example: LMP Control Channel Configuration
Checking Your Work
Router 1 Status
Router 4 Status
For More Information
Revision History
Chapter: Connecting IPv6 Islands with IPv4 MPLS
[PDF 201 KB]
Overview
System Requirements
Terms and Acronyms
Configuring an IPv4 MPLS Tunnel to Carry IPv6 Traffic
Configuring IPv6 on the Customer and Core-Facing Interfaces
Configuring MPLS and RSVP from PE Router to PE Router to Create a Tunnel
Enabling IPv6 Tunneling in MPLS
Configuring Multiprotocol BGP to Carry IPv6 Traffic
Example: Connecting IPv6 Islands over an MPLS Tunnel Configuration
Checking Your Work
Router CE1 Status
Router PE1 Status
Router PE2 Status
Router CE2 Status
For More Information
Revision History
Chapter: Multiple Instances for Label Distribution Protocol
[PDF 378 KB]
Overview
System Requirements
Terms and Acronyms
Configuring Multiple-Instance LDP
Configuring a Master LDP Instance
Configuring a VRF-Based LDP Instance
Example: Multiple-Instance LDP Configuration
Checking Your Work
Router CE3 Status
Router PE3 Status
Router CE1 Status
Router PE1 Status
Router PE2 Status
Router CE2 Status
Router PE4 Status
Router CE4 Status
For More Information
Revision History
Chapter: MPLS LSP Link Protection and Node-Link Protection
[PDF 388 KB]
Overview
Link Protection
Node-Link Protection
System Requirements
Terms and Acronyms
Configuring MPLS LSP Link Protection or Node-Link Protection
Configuring Link Protection or Node-Link Protection on the LSP
Configuring Link Protection on the RSVP Interfaces Traversed by the LSP
Option: Configuring Multiple Bypass LSPs, Manual Bypass LSPs, and Link Protection Priority
Option: Adding Class of Service to a Link-Protected LSP or a Bypass LSP
Option: Using Enhanced Operational Mode Commands and System Log Messages
Example: MPLS LSP Link Protection Configuration
Checking Your Work
Case 1: Normal Operation
Case 2: When the Link from Router 1 to Router 3 Is Disabled
Case 3: When the Link from Router 3 to Router 2 Is Disabled
Example: Node-Link Protection Configuration
Checking Your Work
For More Information
Revision History
Chapter: RSVP LSP Tunnels
[PDF 251 KB]
Overview
System Requirements
Terms and Acronyms
RSVP LSP Tunneling Operation
Configuring an RSVP LSP Tunnel
Configuring Link Management Protocol Traffic Engineering Links
Configuring Link Management Protocol Peers
Configuring Peer Interfaces in OSPF and RSVP
Establishing FA-LSP Path Information
Defining Label-Switched Paths for the FA-LSP
Creating End-to-End LSPs to Traverse the FA-LSP
Option: Tearing Down RSVP LSPs Gracefully
Example: RSVP LSP Tunnel Configuration
Checking Your Work
Router 0
Router 1
For More Information
Revision History
Chapter: Simplified Interinstance Route Sharing
[PDF 249 KB]
Overview
System Requirements
Terms and Acronyms
Simplified Interinstance Configuration
Instance Export Using an IGP Export Policy
Configuring Overlapping VPNs
Example: Overlapping VPNs Configuration
Checking Your Work
Router PE1 Status
Configuring Nonforwarding Instances
Example: Nonforwarding Instances Configuration
Checking Your Work
Router PE2 Status
Router CE3 Status
For More Information
Revision History
Chapter: Graceful Restart
[PDF 365 KB]
Overview
System Requirements
Terms and Acronyms
Configuring Routing Protocol and Summaries Graceful Restart
Configuring Graceful Restart for All Routing Protocols
Configuring Graceful Restart Options for BGP
Configuring Graceful Restart Options for IS-IS
Configuring Graceful Restart Options for OSPF and OSPFv3
Configuring Graceful Restart Options for RIP and RIPng
Configuring Graceful Restart Options for PIM Sparse Mode
Configuring Graceful Restart for an MPLS-Related Protocol
Configuring Graceful Restart for All MPLS-Related Protocols
Configuring Graceful Restart Options for RSVP, CCC, and TCC
Configuring Graceful Restart Options for LDP
Configuring VPN Graceful Restart
Configuring Graceful Restart for All Routing and MPLS-Related Protocols
Enabling Graceful Restart in the Routing Instance
Example: Layer 3 VPN Graceful Restart Configuration
Checking Your Work
Router PE1 Status Before a Restart
Router PE1 Status During a Restart
Verifying OSPF Graceful Restart
Verifying BGP Graceful Restart
Verifying CCC and TCC Graceful Restart
Configuring Logical Router Graceful Restart
Configuring Graceful Restart for All Routing and MPLS-Related Protocols in a Logical Router
Enabling Graceful Restart in the Routing Instance in a Logical Router
Option: Enabling Graceful Routing Engine Switchover
For More Information
Revision History
Chapter: Logical Routers
[PDF 385 KB]
Overview
System Requirements
Terms and Acronyms
Configuring Logical Routers
Configuring Interfaces and Assigning Logical Interfaces to the Logical Router
Configuring Protocols, Routing, and Policy Statements for the Logical Router
Option: Configuring Other Logical Router Statements
Example: Logical Router Configuration
Checking Your Work
Router CE1 Status
Router CE2 Status
Router CE3 Status
Router PE1 Status: Main Router
Router PE1 Status: LR1
Router PE1 Status: LR2
Router P0 Status: Main Router
Router P0 Status: LR1
Router P0 Status: LR2
Router PE2 Status: Main Router
Router PE2 Status: LR1
Router PE2 Status: LR2
Router CE5 Status
Router CE6 Status
Router CE7 Status
Verifying That Each Routing Instance Has the Proper Connectivity
For More Information
Revision History
Chapter: OSPF Version 3 for IPv6
[PDF 272 KB]
Overview
System Requirements
Terms and Acronyms
Configuring OSPFv3 for IPv6
Configuring OSPFv3 as the Routing Protocol
Configuring Interfaces in OSPFv3 Areas
Configuring Virtual Links for OSPFv3
Example: OSPFv3 for IPv6 Configuration
Checking Your Work
Router 0 Status
Router 1 Status
Router 2 Status
Router 3 Status
Router 4 Status
Router 5 Status
For More Information
Revision History
Chapter: Flow Monitoring
[PDF 789 KB]
Overview
Passive Flow Monitoring
Active Flow Monitoring
System Requirements
Terms and Acronyms
Configuring Passive Flow Monitoring
Monitoring Traffic with a VRF Instance and a Monitoring Group
Specifying a Firewall Filter to Select Traffic to Monitor
Configuring Input Interfaces, Monitoring Services Interfaces, and Export Interfaces
Establishing a VRF Instance for the Monitored Traffic
Configuring a Monitoring Group to Send Traffic to the cflowd Server
Configuring Policy Options
Option: Stripping MPLS Labels on ATM, Ethernet-Based, and SONET/SDH Interfaces
Copying and Redirecting Traffic with Port Mirroring and Filter-Based Forwarding
Specifying Port Mirroring Input and Output
Creating a Firewall Filter to Split the Port-Mirrored Traffic into Different Instances
Applying the Firewall Filter to a Tunnel PIC Interface
Using Filter-Based Forwarding to Export Monitored Traffic to Multiple Destinations
Configuring a Routing Table Group to Add Interface Routes into the Forwarding Instance
Option: Using an ES PIC to Send Traffic to a Packet Analyzer
Option: Applying a Firewall Filter to an Output Interface
Using a Flow Collector Interface to Process and Export Multiple cflowd Records
Using a Dynamic Flow Capture Interface to Monitor Traffic On Demand
Configuring the Capture Group
Configuring the Content Destination
Configuring the Control Source
Configuring the Dynamic Flow Capture Interface
Option: Configuring Thresholds
Option: Configuring System Logging
Option: Monitoring Dynamic Flow Capture by Using SNMP
Hardware and Software Considerations
Example: Passive Flow Monitoring Configuration
Checking Your Work
Example: Flow Collector Interface Configuration
Checking Your Work
Example: Dynamic Flow Capture Configuration
Router 1
Checking Your Work
Router 1
Configuring Active Flow Monitoring
Defining a Firewall Filter to Select Traffic for Active Flow Monitoring
Configuring the Interfaces That Will Be Actively Monitored
Enabling the Monitoring Services or Adaptive Services Interfaces and the Export Interface
Collecting cflowd Records
Collecting cflowd Records with a Sampling Group
Collecting cflowd Records with an Accounting Group
Option: Configuring an Aggregate Export Timer
Option: Configuring Port Mirroring
Option: Configuring Port Mirroring with Filter-Based Forwarding and a Monitoring Group
Option: Sending Traffic to Multiple Export Interfaces by Using Next-Hop Groups
Option: Using the Flow-Tap Application to Send Packets to a Mediation Device
Flow-Tap Architecture
Configuring the Flow-Tap Interface
Configuring Flow-Tap Security Properties
Flow-Tap Application Restrictions
Example: Flow-Tap Configuration
Example: Sampling Configuration
Checking Your Work
Example: Sampling and Discard Accounting Configuration
Checking Your Work
Example: Multiple Port Mirroring with Next-Hop Groups Configuration
cflowd Output Formats
cflowd Version 5 Formats and Fields
cflowd Version 8 Formats and Fields
For More Information
Revision History
Chapter: IPSec
[PDF 876 KB]
Overview
IPSec-Enabled PICs
Authentication Algorithms
Encryption Algorithms
IPSec Protocols
Security Associations
IPSec Modes
Digital Certificates
Service Sets
System Requirements
Terms and Acronyms
Configuring IPSec
Considering General IPSec Issues
Configuring Security Associations
Configuring Manual SAs
Configuring IKE Dynamic SAs
Using a Filter to Select Traffic to Be Secured
Applying the Filter or Service Set to the Interface Receiving Traffic to Be Secured
Option: Using Digital Certificates
Configuring a CA Profile
Configuring a Certificate Revocation List
Requesting a CA Digital Certificate
Generating a Private/Public Key Pair
Generating and Enrolling a Local Digital Certificate
Applying the Local Digital Certificate to an IPSec Configuration
Monitoring and Clearing Digital Certificates
Option: Using Filter-Based Forwarding to Select Traffic to Be Secured
Option: Using IPSec with a Layer 3 VPN
Option: Securing BGP Sessions with Transport Mode
Option: Securing OSPFv3 Networks with Transport Mode
Option: Monitoring IPSec by Using SNMP
Option: Configuring IPSec Dynamic Endpoints
Dynamic Endpoint Tunnel Architecture
Configuring an IKE Access Profile
Configuring the Service Set
Configuring the Interface Identifier
Option: Configuring Multiple Routed Tunnels in a Single Next-Hop Service Set
Example: ES PIC Manual SA Configuration
Checking Your Work
Router 1
Router 2
Router 3
Router 4
Example: AS PIC Manual SA Configuration
Checking Your Work
Router 1
Router 2
Router 3
Example: ES PIC IKE Dynamic SA Configuration
Checking Your Work
Router 1
Router 2
Router 3
Router 4
Example: AS PIC IKE Dynamic SA Configuration
Checking Your Work
Router 1
Router 2
Router 3
Router 4
Example: IKE Dynamic SA Between an AS PIC and an ES PIC Configuration
Checking Your Work
Router 1
Router 2
Router 3
Router 4
Example: AS PIC IKE Dynamic SA with Digital Certificates Configuration
Checking Your Work
Router 1
Router 2
Router 3
Router 4
Example: Dynamic Endpoint Tunneling Configuration
Checking Your Work
For More Information
Revision History
Chapter: Layer 2 Circuits
[PDF 504 KB]
Overview
System Requirements
Terms and Acronyms
Configuring Layer 2 Circuits
Configuring an Interface Encapsulation on CE-Facing Interfaces
Configuring CCC Encapsulation on CE-Facing Ethernet Interfaces
Configuring CCC Encapsulation on CE-Facing SONET/SDH Interfaces
Configuring a CCC Encapsulation and a Layer 2 Circuit Mode on CE-Facing ATM2 IQ Interfaces
Configuring the MPLS Family on Core Interfaces
Configuring Layer 2 Circuits
Configuring LDP and an IGP to Transport Layer 2 Circuits
Option: Applying Traffic Engineering to a Layer 2 Circuit
Option: Mapping Layer 2 Protocol Control Information into a Layer 2 Circuit
Option: Configuring APS for Layer 2 Circuits
Option: Configuring Layer 2 Circuit Trunk Mode on ATM2 IQ Interfaces
Option: Reserving LSP Bandwidth for a Layer 2 Circuit
Option: Selecting an MTU for a Layer 2 Circuit
Option: Configuring Local Interface Switching for a Layer 2 Circuit
Option: Configuring Layer 2 Circuits Simultaneously over RSVP and LDP LSPs
Example: Ethernet-Based Layer 2 Circuit Configuration
Checking Your Work
Router PE1 Status
Router P0 Status
Router PE2 Status
Example: SONET/SDH-Based Layer 2 Circuit Configuration
Checking Your Work
Example: ATM2 IQ-Based Layer 2 Circuit Configuration
Checking Your Work
Example: Layer 2 Circuit Traffic Engineering over Multiple LSPs Configuration
Checking Your Work
Example: APS for a Layer 2 Circuit Configuration
Checking Your Work
For More Information
Revision History
Chapter: Multicast over Layer 3 VPNs
[PDF 383 KB]
Overview
System Requirements
Terms and Acronyms
Configuring IPv4 Multicast for Layer 3 VPNs
Configuring BGP, MPLS, RSVP, and an IGP on the PE and Core Routers
Creating a Unique Logical Loopback Interface for the Routing Instance
Configuring the Master PIM Instance on the PE Router
Configuring PIM and the VPN Group Address in a Routing Instance
Option: Configuring PIM Sparse Mode Graceful Restart for a Layer 3 VPN
Option: Configuring Multicast Distribution Trees for Data
Option: Configuring MSDP Within a Layer 3 VPN
Example: Basic IPv4 Multicast over a Layer 3 VPN Configuration
Checking Your Work
RP Information
PIM Information Prior to Multicast Transmission
Successful PIM Join Verification
Example: IPv4 Multicast with Interprovider VPNs Configuration
Checking Your Work
Router CE0 Status
Router PE0 Status
Router P0 Status
Router P1 Status
Router PE1 Status
Router CE1 Status
For More Information
Revision History
Chapter: Translational Cross-Connect and Layer 2.5 VPNs
[PDF 299 KB]
Overview
System Requirements
Terms and Acronyms
Configuring TCC Interface Switching
Defining the Encapsulation for Layer 2 TCC Switching
Configuring Ethernet Encapsulation with Remote and Proxy ARP Addresses
Configuring Extended VLAN Encapsulation with Remote and Proxy ARP Addresses
Option: Configuring Static ARP on the Ethernet Neighbor Instead of Proxy ARP
Defining the Connection for Layer 2 TCC Switching
Configuring MPLS
Example: PPP to ATM TCC Configuration
Checking Your Work
Example: Frame Relay to Fast Ethernet TCC Configuration
Checking Your Work
Configuring Layer 2.5 VPNs
Configuring the Encapsulation on Interfaces Participating in the Layer 2.5 VPN
Configuring the Layer 2.5 VPN
Example: Layer 2.5 VPN Configuration
Checking Your Work
Router PE1 Status
Router PE2 Status
Router P Status
For More Information
Revision History
Chapter: Virtual Private LAN Service
[PDF 340 KB]
Overview
System Requirements
Terms and Acronyms
Configuring VPLS
Configuring BGP, MPLS, RSVP, and an IGP on the PE and Core Routers
Configuring VPLS Encapsulation on CE-Facing Interfaces
Configuring a VPLS Routing Instance
Option: Configuring VPLS to Use LSI Interfaces
Option: Selecting an LSP for the VPLS Routing Instance to Traverse
Option: Applying VPLS Policers and Filters
Option: Enabling VPLS Class of Service
Option: Enabling VPLS Graceful Restart
Option: Clearing MAC Addresses and Modifying the VPLS Table Timeout Interval
Option: Configuring VPLS Interinstance Bridging and Routing
Option: Selecting PICs to Process VPLS Traffic
Option: Limiting the Number of MAC Addresses Learned on an Interface
Option: Optimizing VPLS Traffic Flows
Option: VPLS Multihoming
Example: VPLS Configuration
Checking Your Work
For More Information
Revision History
Chapter: Index
[]