Juniper Networks :: Technical Documentation :: JunosE 15.1.x IP Services Configuration Guide

JunosE 15.1.x IP Services Configuration Guide

A B C D E F G H I J K L M N O P Q R S T U X

A

AAA
and Mobile IP home agent
access lists, IP
monitoring    1, 2
redirecting traffic with null interface instead
redistributing access routes
redistributing access-internal routes
access-list command    1, 2, 3
adjustment-factor command
aggregation flow caches    1
configuring
ANCP (Access Node Control Protocol)
adjusting downstream rates    1, 2, 3
monitoring
overview
ANCP commands
clear l2c neighbor    1, 2
id
l2c    1, 2, 3, 4
l2c end-user-id
l2c max-branches
l2c peer-attachment-id
max-branches
neighbor
qos-adaptive-mode    1, 2, 3
session-timeout    1, 2, 3, 4
authentication
Mobile IP home agent
authentication commands
authentication    1, 2

B

baseline commands
baseline ip
baseline ip mobile home-agent    1, 2
baseline ip tunnel-reassembly
baseline, setting
Mobile IP home agent    1, 2
tunnel reassembly
BFD (Bidirectional Forwarding Detection)
BGP peer reachability detection
license
liveness detection
liveness detection interval, negotiating the
transmit interval, negotiating the
BFD commands
clear bfd session
clear ipv6 bfd session
show license bfd
BGP (Border Gateway Protocol)
BFD
clearing IP routing table
community lists
reinstalling routes in IP routing table
Bidirectional Forwarding Detection.     See BFD

C

cache flow, IP
monitoring    1, 2
certificate revocation list.     See CRL
checksum computation
clear commands
clear ip mobile binding    1, 2
clear l2c neighbor    1, 2
clear ip commands
clear ip routes
community lists, BGP
conventions
notice icons
text and syntax
CRL (certificate revocation list)    1
checking
viewing
customer support    1
contacting JTAC

D

dead peer detection.     See DPD
default-information originate command
destruct timeout period for single-shot tunnels
digital certificates
authenticating the peer
base64
CA hierarchy
certificate chains
checking CRLs
configuring
file extensions
generating private/public key pairs
monitoring
obtaining a public key certificate
obtaining a root CA certificate
obtaining public keys without    1, 2
offline configuration
offline enrollment
online configuration
online enrollment
overview
signature authentication
standards
viewing    1, 2, 3, 4
X.509v3
documentation set
comments on
DPD (dead peer detection)
DVMRP (Distance Vector Multicast Routing Protocol)
reassembly of tunnel packets
tunnels
DVMRP with IPsec
how it works
setting up secure connection
dynamic IP tunnels
monitoring    1, 2, 3, 4
overview
dynamic tunnels

E

enable commands
enable ipsec-transport
endpoints, tunnel

F

filter lists, BGP
filtering
undesirable traffic
flow statistics commands
cache entries
cache timeout
enabled
export destination
export source    1, 2
ip flow-aggregation cache
mask destination
FQDN (fully qualified domain name)    1, 2, 3
aggressive mode
user@fqdn format
with digital certificates
with preshared keys
fully qualified domain name.     See FQDN

G

GRE (Generic Routing Encapsulation)
reassembly of tunnel packets
tunnels
GRE with IPsec
how it works
setting up secure connection

H

home agent, Mobile IP. See Mobile IP home agent

I

idle timeout period for single-shot tunnels
IKE (Internet Key Exchange)
aggressive mode characteristics
aggressive mode negotiations
authentication without digital certificates    1, 2
initiator proposals and policy rules
main mode characteristics
overview
SA negotiation
using digital certificates
IKE commands    1
ike local-identity
ike peer-identity
IKE message notification type
IKE policies    1
authentication mode
Diffie-Hellman group
encryption algorithms
3DES
DES
hash function
MD5
SHA-1
IPsec tunnels
lifetime
priority
instance, route map
interface commands
interface null
interface tunnel    1, 2
ipsec-transport keyword
interfaces
NAT, marking
Internet Key Exchange.     See IKE
invalid cookies, IPsec
IP
managing the routing table
ip commands
ip bgp-community new-format
ip refresh-route
ip route
ip tunnel reassembly
IP flow
export
sampling
IP fragmentation
reassembling for tunnel packets
ip mobile commands
ip mobile home-agent
ip mobile host
ip mobile profile
ip mobile secure foreign-agent
ip mobile secure host
ip nat commands    1, See also show ip nat commands
address
ip nat
ip nat inside source list
ip nat inside source static
ip nat outside source list
ip nat outside source static
ip nat pool
ip nat translation
ip nat translation max-entries
IP reassembly of tunnel packets    1
configuring
monitoring
IP security policies
IP tunnels    1, 2
configuring
monitoring    1, 2, 3, 4, 5
IP-in-IP tunnels    1, 2
IPsec (IP Security)    1, 2, See also L2TP with IPsec
AH
AH processing
concepts
configuration
examples
tasks
configuring
IKE policy
IPsec parameters
tunnels
digital certificates
encapsulation modes
encapsulation protocols
ESP
ESP processing
invalid cookies
L2TP with IPsec    1, 2
license
monitoring
overview
packet encapsulation
protocol stack
reassembly of tunnel packets
remote access    1, 2
secure IP interfaces
security parameters
security parameters per policy type
tunnel destination endpoint
tunnel failover    1, 2
tunnel source endpoint
IPsec CA identity commands
crl
enrollment retry-limit
enrollment retry-period
enrollment url
ipsec ca identity
issuer-identifier
root proxy url
ipsec certificate commands
ipsec certificate-database refresh
ipsec certificate-request generate
ipsec commands    1, See also show ipsec commands
ipsec ca authenticate
ipsec ca enroll
ipsec ca identity
ipsec clear
ipsec crl    1, 2
ipsec identity
ipsec ike-policy-rule
ipsec isakmp-policy-rule
ipsec key generate    1, 2, 3
ipsec key manual pre-share
ipsec key pubkey-chain rsa
ipsec key zeroize    1, 2
ipsec lifetime
ipsec local-endpoint
ipsec option dpd
ipsec option tx-invalid-cookie
ipsec transform-set
key
masked-key
IPsec identity commands
common-name
country
domain-name
ipsec identity
organization
IPsec IKE policy commands
aggressive-mode    1, 2
authentication    1, 2, 3, 4
encryption
group
hash
ip address virtual-router
ipsec ike-policy-rule    1, 2, 3
ipsec isakmp-policy-rule    1, 2
lifetime
IPsec security parameters
in relation to IPsec interface
inbound SAs    1, 2
lifetime
lifetime for user SAs
manual versus signaled
negotiating transforms
operational VR
outbound SAs    1, 2
per IPsec policy type
perfect forward secrecy (PFS)    1, 2
transform combinations supported
transform sets    1, 2
transforms supported
transport VR    1, 2
IPsec transport local profile commands
pre-share
pre-share-masked
IPsec transport profile commands    1, See also show ipsec transport commands
application
ipsec transport profile
lifetime
local ip address
pfs group
transform-set
IPsec tunnel profile commands
domain-suffix
extended-authentication
ike local-identity
ike peer-identity
ip profile
ipsec tunnel profile
lifetime
local ip address
local ip identity
local ip network
max-interfaces
peer ip identity
pfs group
transform
tunnel mtu
IPsec tunnel profiles
IPv6
license
monitoring    1, 2

J

J-Flow commands
clear ip flow stats
ip flow statistics
ip flow-cache entries
ip flow-cache timeout active
ip flow-cache timeout inactive
ip flow-export
ip flow-sampling-mode packet-interval
ip route-cache flow sampled
J-Flow statistics, clearing

K

keepalive messages, NAT-T
key-string command
keys, public
displaying on router
format of
obtaining without digital certificates 1, 2

L

L2C (Layer 2 Control)     See ANCP (Access Node Control Protocol)
L2F, reassembly of tunnel packets
L2TP (Layer 2 Tunneling Protocol)
reassembly of tunnel packets
l2tp commands
l2tp destination profile    1, 2
l2tp ignore-receive-data-sequencing
L2TP RWS (receive window size)
show l2tp destination profile command    1, 2
L2TP with IPsec    1, 2
client software supported
compatibility
configuring
client PC
E Series router    1, 2
IPsec transport profiles
L2TP destination profiles    1, 2
single-shot tunnels
control and data frames
group preshared key
how it works
LNS change of port
monitoring
NAT interactions
overview    1, 2
references
requirements
setting up secure connection
tunnel creation
with PPP
license commands
license ipsec-tunnels
license mobile-ip home-agent
license nat
lifetime, IPsec    1, 2
limiting translation entries
loopback interfaces    1, 2

M

manual IPsec interfaces
manuals
comments on
map tag, route map
match commands    1
and route maps
match as-paths
match community
match distance
match extcommunity
match ip address
match ip next-hop    1, 2
match ipv6 address
match ipv6 next-hop
match ipv6 route-source
match level
match metric
match metric-type
match policy-list
match route-type
match tag
match-set summary prefix-tree    1, 2
max-interfaces command    1, 2
Mobile IP home agent
AAA
agent discovery
authentication
clearing the binding details from binding table
configuration prerequisites
configuring
home address assignment
licensing
monitoring
monitoring the binding table information
monitoring the configuration information
monitoring the configuration of all or specified mobile nodes or domain users
monitoring the interface profile name
monitoring the license key
monitoring the protocol statistics
monitoring the security associations configured for all foreign agents
monitoring the security associations configured on all mobile node hosts
overview
platform considerations
references
registration
routing and forwarding
security associations
for foreign agents
for mobile nodes
subscriber management
MTU (maximum transmission unit)
IP tunnels

N

NAT (Network Address Translation)
access list rules, creating
address pools, defining
address translation
dynamic
inside source
outside source
static
bidirectional
configuration examples
configuration types
configuring
dynamic address translation, defining
dynamic inside source translation, creating
dynamic outside source translation, creating
interfaces, specifying inside and outside
license
monitoring
NAT-T
overview
passthrough mode
references
static address translation, defining
terms    1
inside global address
inside local address
outside global address
outside local address
timeouts, defining
translation entries, limiting
translation rules, defining
translations, clearing
NAT-T (Network Address Translation Traversal)
keepalive messages
overview
show ike sa command
show ipsec ike-sa command
show ipsec option command
tasks
UDP encapsulation
UDP statistics
neighbor commands
neighbor filter-list
Network Address Translation Traversal.     See NAT-T
Network Address Translation.     See NAT
next-hop routers
setting/redistributing routes for    1, 2
notice icons
null interface

O

OSPF (Open Shortest Path First)
clearing IP routing table
reinstalling routes in IP routing table

P

peer public keys
displaying on router
obtaining without digital certificates    1, 2
perfect forward secrecy
platform considerations
routing policy
preventing recursive tunnels
public keys
displaying on router
format of
obtaining without digital certificates    1, 2

Q

qos-adaptive-mode command 1, 2, 3

R

recursive tunnels, preventing
redistribute command
redistribution policy (IP), monitoring    1, 2
redundancy    1
tunnel server    1, 2
RIP (Routing Information Protocol)
clearing IP routing table
reinstalling routes in IP routing table
route maps
and routing policy
deny keyword
instance
IP, monitoring
map tag
match clause
permit keyword
sequence number
set clause
routing policy
configuring
managing the routing table
monitoring
overview
platform considerations
route maps
routing policy, BGP
access lists
monitoring
route maps
routing table
managing the IP
routing, IP    1, See also IP
monitoring    1, 2

S

secure IP interfaces
security parameters
sequence number, route map
Service Modules.     See SMs
set commands    1
and route maps
set automatic-tag
set comm-list delete
set community
set dampening
set distance
set extcommunity
set ip next-hop
set ipv6 next-hop
set level
set local-preference
set metric
set metric-type
set origin
set route-class
set route-type
set tag
set weight
shared tunnel-server ports    1, 2, 3, 4, 5, 6
show access-list command    1, 2
show adjustment-factor command
show bfd session command
show dvmrp commands
show dvmrp destination profile
show dvmrp tunnel    1, 2, 3
show dvmrp tunnel summary    1, 2
show gre commands
show gre destination profile
show gre tunnel    1, 2, 3
show gre tunnel summary    1, 2
show ike commands
show ike policy-rule
show ike sa    1, 2
show ip commands
show ip as-path-access-list    1, 2
show ip cache flow
show ip cache flow aggregation
show ip community-list
show ip protocols
show ip redistribute
show ip route
show ip route slot
show ip static
show ip tunnel reassembly statistics
show ip flow sampling command    1, 2
show ip mobile commands
show ip mobile binding
show ip mobile home-agent
show ip mobile host
show ip mobile profile
show ip mobile secure foreign-agent
show ip mobile secure host
show ip mobile traffic
show license mobile-ip home-agent
show ip nat commands
show ip nat inside rule
show ip nat outside rule
show ip nat statistics
show ip nat translations    1, 2
show ipsec commands
show ike certificates
show ike configuration
show ike identity
show ipsec ca identity
show ipsec certificates
show ipsec identity    1, 2
show ipsec ike-configuration
show ipsec ike-policy-rule
show ipsec ike-sa    1, 2
show ipsec key mypubkey rsa
show ipsec key pubkey-chain rsa
show ipsec lifetime
show ipsec local-endpoint
show ipsec option    1, 2
show ipsec transform-set
show ipsec tunnel detail
show ipsec tunnel summary
show ipsec tunnel virtual-router
show license ipsec-tunnels
show ipsec transport commands
show ipsec transport interface
show ipsec transport interface summary
show ipsec transport profile
show ipv6 commands
show license nat
show l2c commands
show l2c
show l2c label
show l2c neighbor
show l2c statistics    1, 2
show route-map command
single-shot tunnels
configuring
handling timeout periods
overview
SMs (Service modules)
installing    1, 2, 3, 4
monitoring parameters
redundancy    1, 2
source, tunnel
static routes    1
monitoring
static tunnels
statistics, tunnel reassembly
displaying
setting baseline for
subscriber management
Mobile IP home agent
support, technical     See technical support

T

table-map command
IP    1, 2
technical support
contacting JTAC
text and syntax conventions
timeout periods for single-shot tunnels
transform sets, IPsec
transport network
tunnel commands, IP
tunnel checksum
tunnel destination
tunnel mtu
tunnel source
tunnel commands, IPsec
tunnel destination
tunnel destination backup
tunnel lifetime
tunnel local-identity
tunnel mtu
tunnel peer-identity
tunnel pfs group
tunnel session-key-inbound
tunnel session-key-outbound
tunnel signaling
tunnel source
tunnel transform set
tunnel-server ports
shared    1, 2, 3
tunnels, IP
DVMRP
DVMRP (IP in IP)
dynamic
endpoints
GRE
reassembling tunnel packets
shared tunnel-server ports    1, 2, 3, 4, 5, 6
static
tunnels, IPsec monitoring
DVMRP/IPsec
GRE/IPsec
L2TP/IPsec
tunnels, single-shot
configuring
handling timeout periods
overview

U

UDP (User Datagram Protocol)
encapsulation for NAT-T
statistics for NAT-T
updates, BGP
AS-path filters

X

X.509v3 certificates