Junos OS Administration Guide for Security Devices
Copyright and Trademark Information- Table of Contents
-
About This Guide - Configuring the Device for Administration
- User Interface Overview
- Configuring Secure Web Access
- Managing Administrator Authentication
- User Authentication Terms
- User Authentication Overview
- Before You Begin
- Managing User Authentication
- Managing User Authentication with a Configuration Editor
- Securing the Console Port
- Accessing Remote Devices with the CLI
- Configuring Password Retry Limits for Telnet and SSH Access
- Reverse Telnet
- Recovering the Root Password (SRX Series)
- Recovering the Root Password (J Series)
- Setting Up USB Modems for Remote Management
- Configuring SNMP for Network Management
- Configuring the Device for DHCP
- Configuring Autoinstallation
- Automating Network Operations and Troubleshooting
-
- Monitoring the Device
- Monitoring the Device and Routing Operations
- Monitoring Overview
- Monitoring Interfaces
- Monitoring Events and Alarms
- Monitoring the System
- Monitoring NAT
- Monitoring Security Features
- Monitoring Policies
- Monitoring Screen Counters
- Monitoring IDP
- Monitoring Flow Session Statistics
- Monitoring Flow Session Statistics Summary Information
- Monitoring Flow Information for All Sessions
- Monitoring Flow Information for Application Sessions
- Monitoring Flow Session Destination Port Information
- Monitoring Flow Session Destination Prefix Information
- Monitoring Flow Session Interface Information
- Monitoring Flow Session Protocol
Information
- Monitoring Flow Session Resource Manager
- Monitoring Flow Session Identifier Session
- Monitoring Flow Session Source Port Information
- Monitoring
Flow Session Source Prefix Information
- Monitoring Flow Session Tunnel Information
- Monitoring IDP
- Monitoring Flow Gate Information
- Monitoring Firewall Authentication
- Monitoring 802.1x
-
- Monitoring ALGs
- Monitoring VPNs
- Monitoring Enhanced Switching
- Monitoring Routing Information
- Monitoring Class-of-Service Performance
- Monitoring MPLS Traffic Engineering Information
- Monitoring PPPoE
- Monitoring PPP
- Monitoring the WAN Acceleration Interface
- Monitoring Services
-
- Monitoring Events and Managing System Log Files
- Configuring and Monitoring Alarms
-
- Managing Device Software
- Performing Software Upgrades and Reboots for the SRX Series
Services Gateways
- Performing Software Upgrades and Reboots for the SRX Series
Services Gateways
- Understanding Software Upgrades for the SRX Series Services
Gateways
- Overview on Upgrade and Downgrade Procedures for the Software
Upgrades on the SRX Series Services Gateways
- Preparing Your SRX Series Services Gateway for Software Upgrades
- Configuring External CompactFlash on SRX650 Services Gateways
- Downloading Junos OS Upgrades for the SRX Series Services Gateways
- Installing Software Upgrades on the SRX Series Services Gateways
- Installing Junos OS on the SRX Series Services Gateways from
the TFTP Server
- Installing Software from the Boot Loader Using a USB Storage
Device on SRX Series Services Gateways
- Downgrading Software on the SRX Series Services Gateways
- Configuring Boot Devices for SRX Series Services Gateways
- Rebooting or Halting the Device in SRX Series Services Gateways
- Rebooting the SRX Series Services Gateways (J-Web Procedure)
- Rebooting the SRX Series Services Gateways (CLI Procedure)
- Halting the SRX Series Services Gateways (CLI Procedure)
- Bringing Chassis Components Online and Offline on SRX Series
Services Gateways
- Chassis Control Restart Options on SRX Series Services Gateways
- Dual-Root Partitioning Scheme on the SRX Series Services Gateways
(Junos OS Release 10.0 or Later)
- Performing Software Upgrades to Junos OS Release 10.0 or Later
for the SRX Series Services Gateways
- Software Upgrade Methods on the SRX Series Services Gateways
- Upgrading to Junos OS Release 10.0 Without Transitioning to
Dual-Root Partitioning
- Upgrading to Junos OS Release 10.0 or Later with Dual-Root
Partitioning on SRX Series Services Gateways
- Installing Software on SRX Series Services Gateways from the
Boot Loader Using a TFTP Server
- Installing Software on SRX Series Services Gateways from the
Boot Loader Using an USB Storage Device
- Installing Software on SRX Series Services Gateways Using the
Partition Option (CLI Procedure)
- Installing Software on SRX Series Services Gateways Using the
Partition Option (J-Web Procedure)
- Upgrading the Boot Loader on SRX Series Services Gateways
- Verifying the Boot Loader Version on SRX Series Services Gateways
(CLI Procedure)
- Verifying the Root Partition Details on SRX Series Services
Gateway (CLI Procedures)
- Installing an Earlier Version of Junos OS on SRX Series Services
Gateways
- Recovery of the Primary Junos OS Image with Dual-Root Partitioning
on SRX Series Services Gateways
- Auto BIOS Upgrade on SRX Series Services Gateways
-
- Performing Software Upgrades and Reboots for the J Series Services
Routers
- Overview on Software Upgrades for J Series Services Routers
- Overview on Upgrade and Downgrade Procedures for the J Series
Services Routers
- Before You Begin Software Upgrades on J Series Services Routers
- Downloading Software Upgrades for J Series Services Routers
from Juniper Networks
- Installing Software Upgrades on J Series Services Routers
- Rebooting or Halting the Device in J Series Services Routers
- Bringing Chassis Components Online and Offline on J Series
Services Routers
- Chassis Control Restart Options on J Series Services Routers
- Configuring Selective Stateless Packet-Based Services
- Understanding Packet-Based and Flow-Based Forwarding
- Understanding Selective Stateless Packet-Based Services
- Configuring Selective Stateless Packet-Based Services
- Example: Configuring Selective Stateless Packet-Based Services—End-to-End
Packet-Based
- Verifying the Selective Stateless Packet-Based Services Configuration—End-to-End
Packet-Based
- Example: Configuring Selective Stateless Packet-Based Services—Packet-Based
to Flow-Based
- Verifying the Selective Stateless Packet-Based Services Configuration—Packet-Based
to Flow-Based
-
- Installing and Managing Licenses
- Managing Files
-
- Diagnosing Performance and Network Problems
- Index
Symbols
- #, comments in configuration statements 1
- #, configuration mode command prompt 1
- ( ), in syntax descriptions 1
- .gz.jc file extension See file encryption
- /cf/var/crash directory See crash files
- /cf/var/log directory See system logs
- /cf/var/tmp directory See temporary files
- /config directory
- file encryption See file encryption
- /var/db/config directory See file encryption
- /var/db/scripts/commit directory See commit scripts
- /var/db/scripts/op directory See operation scripts
- /var/log directory See system log messages
- < >, in syntax descriptions 1
- >, operational mode command prompt 1
- ? command
- [ ], in configuration statements 1
- { }, in configuration statements 1
- | (pipe) command 1
- | (pipe), in syntax descriptions 1
A
- Access Manager license 1
- access privileges
- accounts See template accounts; user accounts
- action modifier
- packet-mode 1
- activate system scripts commit command 1
- activate system scripts op command 1
- adaptive services interfaces
- alarm conditions and configuration options 1
- Advanced Encryption Standard (AES) See AES encryption
- AES encryption
- agents, SNMP See SNMP agents
- alarm class See alarm severity
- ALARM LED, color 1
- alarm severity
- alarms
- alert logging severity 1
- alias, CoS value 1
- any level statement 1
- any logging facility 1
- archiving system logs 1
- arithmetic operators, for multicast traffic 1
- AS path, displaying 1
- AT commands, for modem initialization
- attacks
- authentication
- adding a RADIUS server (Quick Configuration) 1
- adding a TACACS+ server (Quick Configuration) 1
- local password, by default 1
- login classes 1, 2
- methods 1, 2
- order of user authentication (configuration editor) 1
- RADIUS authentication (configuration editor) 1
- specifying a method (Quick Configuration) 1
- specifying access privileges (Quick Configuration) 1
- TACACS+ authentication (configuration editor) 1
- user accounts 1, 2
- authorization logging facility 1
- autoinstallation
- automatic configuration process 1
- CLI configuration editor 1
- default configuration file 1
- establishing 1
- host-specific configuration file 1
- interfaces 1
- IP address procurement process 1
- J-Web configuration editor 1
- overview 1
- protocols for procuring an IP address 1
- requirements 1
- status 1
- TFTP server 1
- verifying 1
- autoinstallation, compatibility with the DHCP server 1
- automatic configuration See autoinstallation
B
- basic connectivity
- secure Web access 1
- BGP (Border Gateway Protocol)
- BGP groups, displaying 1
- BGP neighbors
- BGP peers See BGP neighbors
- BGP route reflectors license 1
- BGP routing information 1
- BGP RPM probes
- BGP sessions, status 1
- binary operators, for multicast traffic 1
- BOOTP, for autoinstallation 1
- Border Gateway Protocol (BGP) route reflectors license 1
- braces, in configuration statements 1
- brackets
- browser interface See J-Web interface
- brute force attacks, preventing 1
- built-in Ethernet ports See Ethernet ports; management interfaces
- bypassing flow-based forwarding 1
C
- cables
- caller ID, for dial-in over USB modems 1, See also dialer interface, for USB modem
- capturing packets See packet capture
- certificates See SSL certificates
- Challenge Handshake Authentication Protocol, enabling on dialer interfaces 1
- change-log logging facility 1
- CHAP (Challenge Handshake Authentication Protocol), enabling on dialer interfaces 1
- chassis
- chassis software process 1
- chassis-control
- restart options 1
- chassisd process 1
- classifiers, CoS 1
- Clean Up Files page 1
- cleaning up files 1, 2
- clear system services dhcp conflicts command 1
- CLI See Junos OS CLI
- CLI configuration editor
- autoinstallation 1
- CHAP on dialer interfaces 1
- controlling user access 1
- enabling commit scripts 1
- enabling operation scripts 1
- event policies 1
- interface alarms 1
- RADIUS authentication 1
- RPM 1
- secure access configuration 1
- SNMP 1
- statement types 1
- system log messages, sending to a file 1
- system log messages, sending to a terminal 1
- TACACS+ authentication 1
- USB modem connections 1
- CLI terminal See Junos OS CLI
- code point aliases, CoS 1
- command completion
- command hierarchy 1
- command prompts
- comments, in configuration statements 1
- commit scripts
- communities, SNMP See SNMP communities
- configuration
- configuration files
- configuration management, automating 1, See also commit scripts; operation scripts
- configuration mode
- Confirm File Delete page 1
- console port
- container statements 1
- control plane logs 1
- controlling user access 1
- conventions
- CoS (class of service)
- crash files
- critical logging severity 1
- cron logging facility 1
- curly braces, in configuration statements 1
- customer support 1
- contacting JTAC 1
D
- daemon logging facility 1
- daemons See processes, software
- Data Encryption Standard (DES) See DES encryption
- data plane logs 1
- deactivate system scripts commit command 1
- deactivate system scripts op command 1
- debug logging severity 1
- decryption, configuration files See file encryption
- default configuration file, for autoinstallation 1
- delete system scripts commit command 1
- delete system scripts op command 1
- deleting
- DES encryption
- device
- DHCP (Dynamic Host Configuration Protocol)
- DHCP leases
- monitoring 1
- DHCP pools
- monitoring 1
- DHCP server
- dhcpd process 1
- diagnosis
- alarm configurations 1
- automating with event policies 1, See also event policies
- CLI command summary 1
- DHCP conflicts 1
- displaying firewall filter for 1
- displaying packet capture configurations 1
- displaying selective stateless packet-based services configuration 1, 2
- interfaces 1, 2
- J-Web tools overview 1
- license infringement 1
- monitoring network performance 1
- MPLS connections (J-Web) 1
- multicast paths 1
- network traffic 1
- packet capture 1
- packet capture (J-Web) 1
- ping command 1
- ping host (J-Web) 1
- ping MPLS (J-Web) 1
- ports 1
- preparation 1
- SNMP health monitor 1
- system logs 1
- system operation 1
- traceroute (J-Web) 1
- traceroute command 1
- traceroute monitor command 1
- traffic analysis with packet capture 1
- verifying captured packets 1
- verifying DHCP server operation 1
- verifying dialer interfaces 1
- verifying RPM probe servers 1
- verifying RPM statistics 1
- verifying USB modem interfaces 1
- diagnostic commands 1
- dial-in, USB modem (configuration editor) 1, See also dialer interface, for USB modem
- dial-up modem connection
- dialer interface, for USB modem
- dialer pools, for USB modems 1, See also dialer interface, for USB modem
- dictionary attacks, preventing 1
- DiffServ code points, bits for RPM probes 1
- disabling
- disconnection of console cable for console logout 1
- dl0 1
- documentation
- comments on 1
- downgrading
- download URL 1
- downloading
- drop probabilities, CoS 1
- drop profiles, CoS 1
- DS1 ports See T1 ports
- DS3 ports See E3 ports; T3 ports
- DSCPs (DiffServ code points), bits for RPM probes 1
- dual-root partitioning 1
- dual-root partitioning scheme 1
- dynamic host configuration process 1
- Dynamic Host Configuration Protocol See DHCP
E
- E3 ports, alarm conditions and configuration options 1
- egress See RPM probes, outbound times
- emergency logging severity 1
- encapsulation, modifying on packet capture-enabled interfaces 1
- encrypted access
- encryption, configuration files See file encryption
- enforcement of configuration rules 1
- environment, CLI
- error logging severity 1
- Ethernet ports
- Ethernet rollover cable, connecting the router to a management device 1, 2
- event notifications, automating response to with event policies 1, See also SNMP traps; system log messages
- event policies
- event viewer, J-Web
- overview 1, See also system log messages
- Extensible Stylesheet Language Transformations (XSLT) See commit scripts; operation scripts
F
- facility none statement 1
- feature licenses See licenses
- file encryption
- file management
- filtering
- command output 1
- firewall authentication process 1
- firewall filters
- flowd process 1
- font conventions 1
- forwarding classes, CoS 1
- forwarding software process 1
- frequency, test See RPM probes, test intervals
- fwauthd process 1
G
H
- hardware
- Hayes-compatible modem commands, USB modem initialization 1
- health monitor See SNMP health monitor
- heat status, checking 1
- help apropos command 1
- help reference command 1
- help syslog ? command 1
- help topic command 1
- Help, Junos OS CLI 1
- host reachability
- host-specific configuration file, for autoinstallation 1
- hostname
- monitoring traffic by matching 1
- opening an SSH session to 1
- overriding for SNMP (configuration editor) 1
- overriding for SNMP (Quick Configuration) 1
- pinging (CLI) 1
- pinging (J-Web) 1
- resolving 1
- SNMP trap target (Quick Configuration) 1
- telnetting to 1
- tracing a route to (CLI) 1, 2
- tracing a route to (J-Web) 1
- hostname.conf file, for autoinstallation 1, 2
- HTTP (Hypertext Transfer Protocol)
- HTTP (Hypertext Transfer Protocol), RPM probes 1
- HTTPS (Hypertext Transfer Protocol over SSL)
- HTTPS Web access, establishing 1
- Hypertext Transfer Protocol See HTTP
- Hypertext Transfer Protocol over SSL See HTTPS
- Hypertext Transfer Protocol, RPM probes 1
I
- ICMP (Internet Control Message Protocol)
- idle time, setting for a CLI session 1
- IDP signature update license 1
- ifd process 1
- iked process 1
- inbound time See RPM probes
- info logging severity 1
- ingress See RPM probes, inbound times
- init-command-string command 1
- Install Package 1
- Install Remote page
- installation
- Instance to which this connection belongs
- interactive-commands logging facility 1
- interface software process 1
- interfaces See management interfaces; network interfaces; ports
- Internet Explorer, modifying for worldwide version of Junos OS 1
- Internet Key Exchange process 1
- intervals, probe and test See RPM probes
- Intrusion Detection and Prevention (IDP) signature update license 1
- ipconfig command 1
- explanation 1
J
- J Series 1
- J series
- install remote page
- field summary 1
- J series services router
- boot devices 1, See also CompactFlash card
- storing memory snapshots 1
- bring components online/offline 1
- chassis-control
- restart options 1
- compactFlash 1
- CompactFlash card
- configuration
- configuration, downgrading software (J-Web) 1
- device
- halting (J-Web) 1
- downgrading
- software, with the CLI 1
- downgrading software ( J-Web) 1
- downloading 1
- halting (CLI) 1
- halting a
- with J-Web 1
- installation
- installing by uploading 1
- internal CompactFlash card See CompactFlash card
- rebooting
- with J-Web 1
- rebooting (CLI) 1
- request system halt command 1
- request system reboot command 1
- request system snapshot command 1
- options 1
- reverting to a previous configuration file (J-Web) 1
- rolling back a configuration file 1
- snapshots
- configuring for failure snapshot storage 1
- software 1
- software upgrades 1, 2
- software upgrades, uploading 1
- storage media
- configuring boot devices 1
- upgrades
- upgrades requirements 1
- upgrading 1
- upload package page
- field summary 1
- USB
- J Series Services Router
- licenses 1
- J series services router boot devices
- J-Web configuration editor
- autoinstallation 1
- CHAP on dialer interfaces 1
- controlling user access 1
- enabling commit scripts 1
- enabling operation scripts 1
- event policies 1
- interface alarms 1
- RADIUS authentication 1
- RPM 1
- secure access 1
- SNMP 1
- system log messages, sending to a file 1
- system log messages, sending to a terminal 1
- TACACS+ authentication 1
- USB modem connections 1
- J-Web interface
- jitter
- Juniper-Kaspersky Anti-Virus license 1
- Juniper-Sophos Anti-Spam license 1
- Juniper-Websense Integrated Web Filtering license 1
- Junos OS
- Junos OS CLI
- access privilege levels 1
- automatic command execution with event policies 1
- CLI terminal 1
- command completion 1
- command hierarchy 1
- command modes 1
- command prompts See command prompts
- console 1
- context-sensitive Help 1
- denying and allowing commands 1
- diagnostic command summary 1
- editing keystrokes 1
- environment, changing 1
- filtering command output 1
- idle time 1
- managing licenses 1
- overview 1
- screen length 1
- screen width 1
- ssh 1
- starting 1
- telnet 1
- terminal type 1
- working directory 1
- Junos Scope application 1
- Junos XML management protocol
- Junos XML protocol Extensible Markup Language (XML) See commit scripts; operation scripts
- Junos XML protocol over SSL 1
K
L
- label-switched paths See LSPs
- laptop See management device
- latency, in RPM probes, improving with timestamps 1
- Layer 2 circuits, monitoring 1
- Layer 2 VPNs, monitoring 1
- Layer 3 VPNs, monitoring 1
- leaf statements 1
- libpcap format, for packet capture files 1
- license infringement
- license keys
- licenses
- Access Manager 1
- adding (CLI) 1
- adding (J-Web) 1
- application signature update (Application Identification) 1
- BGP route reflectors 1
- deleting (CLI) 1
- deleting (J-Web) 1
- displaying (CLI) 1
- displaying (J-Web) 1
- displaying usage 1
- downloading (J-Web) 1
- group 1
- IDP signature update 1
- infringement, preventing 1, See also license infringement
- J Series Services Router 1
- Juniper-Kaspersky Anti-Virus 1
- Juniper-Sophos Anti-Spam 1
- Juniper-Websense Integrated Web Filtering license 1
- key 1, See also license keys
- managing (CLI) 1
- managing (J-Web) 1
- overview 1
- saving (CLI) 1
- SRX Series Services Gateway 1
- SRX100 Memory Upgrade license 1
- updating (CLI) 1
- UTM 1
- verifying 1
- licenses, alarm conditions and remedies 1
- limitations
- ALARM LED lights yellow whether alarm is minor or major 1
- DHCP, no support on VPN interfaces 1
- MPLS, no LSP statistics on outbound device 1
- mtrace from-source packet statistics always 0 1
- performance degradation with monitor traffic command 1
- PPP, no J-Web monitoring information available 1
- Server relay and DHCP client cannot coexist in device 1
- SNMP not supported on Gigabit Ethernet interfaces 1
- software downgrade cannot be undone 1
- local password
- local template accounts 1
- Locate LSP from interface name
- Locate LSP from virtual circuit information
- Locate LSP using interface name
- log files
- Log Files page (Download) 1
- log messages See system log messages
- logging facilities 1
- logging severity levels 1
- logical interfaces, CoS 1
- logical operators, for multicast traffic 1
- login classes
- login retry limits, setting 1
- logs See system logs
- loss priority, CoS 1
- LSPs (label-switched paths)
M
- major (red) alarms
- description 1
- management device
- Management Information Bases See MIBs
- management interfaces
- management software process 1
- managing
- manuals
- comments on 1
- match conditions, for multicast traffic
- memory usage
- monitoring, SNMP See SNMP health monitor
- messages See system log messages
- mgd process 1
- MIBs (Management Information Bases)
- Microsoft Windows XP commands, connecting to device from a management device 1
- minor (yellow) alarms
- description 1
- modem connection to device USB port See USB modem connections
- modem connection to user management device See USB modem connections
- monitor interface command 1
- controlling output 1
- monitor interface traffic command 1
- controlling output 1
- monitor list command 1
- monitor start command 1
- monitor stop command 1
- monitor traffic command 1
- monitor traffic matching command 1
- monitoring
- BGP 1
- BGP neighbors, with RPM probes 1
- chassis 1
- device health See SNMP health monitor
- health of the device See SNMP health monitor
- interfaces 1, 2
- Layer 2 circuits 1
- Layer 2 VPNs 1
- Layer 3 VPNs 1
- MPLS traffic engineering 1, 2, 3, 4, 5, 6
- multicast paths 1
- network interface traffic 1
- network traffic with packet capture 1
- OSPF 1
- ports 1
- PPP (CLI) 1
- PPPoE 1
- preparation 1
- RIP 1
- routing information 1
- routing tables 1
- RPM probes 1
- SNMP health monitor See SNMP health monitor
- system log messages 1
- system logs 1
- trace files 1
- monitoring the wx interface 1
- MPLS (Multiprotocol Label Switching)
- mtrace monitor command 1
- results 1
- mtrace-from-source command 1
- multicast
- MultiModem, recommended for USB modem connections 1
- multiple routers
- deploying See autoinstallation
- Multiprotocol Label Switching See MPLS
N
- neighbors, BGP See BGP neighbors; BGP RPM probes
- network interfaces
- alarm conditions and configuration options 1
- configuring alarms on 1
- integrated services, alarm conditions and configuration options 1
- monitoring 1, 2
- monitoring MPLS traffic engineering 1
- monitoring traffic 1
- monitoring, CoS 1
- monitoring, PPPoE 1
- monitoring, RSVP 1
- packet capture, configuring on 1
- packet capture, disabling before changing encapsulation 1
- packet capture, supported on 1
- services, alarm conditions and configuration options 1
- statistics 1
- network management 1, See also SNMP
- network management system (NMS) 1
- network performance See RPM
- network security process 1
- network.conf file, default for autoinstallation 1, 2
- next hop, displaying 1
- NMS (network management system) 1
- no-world-readable statement 1
- notice icons 1
- notice logging severity 1
- notifications See event policies; system log messages; SNMP traps
- nsd process 1
- nsrpd process 1
O
- object identifiers (OIDs) 1
- OIDs (object identifiers) 1
- op command 1
- Open Shortest Path First See OSPF
- openssl command 1
- operation scripts
- operational mode
- operational mode, filtering command output 1
- operator login class permissions 1
- operators
- OSPF (Open Shortest Path First)
- OSPF interfaces
- OSPF neighbors
- OSPF routing information 1
- outbound time See RPM probes
P
- packet capture
- configuring 1
- configuring (J-Web) 1
- configuring on an interface 1
- device interfaces supported 1
- disabling 1
- disabling before changing encapsulation on interfaces 1
- displaying configurations 1
- displaying firewall filter for 1
- enabling 1
- encapsulation on interfaces, disabling before modifying 1
- files See packet capture files
- firewall filters, configuring 1
- firewall filters, overview 1
- J-Web tool 1
- overview 1
- overview (J-Web) 1
- preparation 1
- verifying captured packets 1
- verifying configuration 1
- verifying firewall filter for 1
- packet capture files
- Packet Capture page
- packet loss priority, CoS 1
- packet-based forwarding
- selective stateless 1
- packet-mode 1
- packets
- parentheses, in syntax descriptions 1
- password retry limits, setting 1
- passwords
- paths, multicast, tracing 1
- PC See management device
- PCAP See packet capture
- peers, BGP See BGP neighbors; BGP RPM probes
- performance, monitoring See RPM
- permission bits, for login classes 1
- permissions
- physical interfaces, CoS 1
- PIMs (Physical Interface Modules)
- checking power and heat status 1
- ping
- ping command 1
- Ping end point of LSP
- ping host
- results 1
- Ping Host page 1
- Ping LDP-signaled LSP
- Ping LSP to Layer 3 VPN prefix
- ping MPLS (J-Web)
- ping mpls l2circuit command 1
- results 1
- ping mpls l2vpn command 1
- results 1
- ping mpls l3vpn command 1
- results 1
- ping mpls ldp command 1
- results 1
- ping mpls lsp-end-point command 1
- results 1
- Ping MPLS page 1
- ping mpls rsvp command 1
- results 1
- Ping RSVP-signaled LSP
- pipe (|) command, to filter output 1
- Point-to-Point Protocol See PPP
- Point-to-Point Protocol over Ethernet See PPPoE
- ports
- power management, chassis 1
- PPP (Point-to-Point Protocol)
- PPPoE (Point-to-Point Protocol over Ethernet)
- printf statements 1
- probe loss
- probes, monitoring 1, 2, See also RPM probes
- processes, software
- prompt See command prompts; restart-after-upgrade prompt
- protocols
Q
R
- RADIUS
- random early detection (RED) drop profiles, CoS 1
- RARP, for autoinstallation 1
- read-only login class permissions 1
- real-time performance monitoring See RPM
- RED drop profiles, CoS 1
- registration form, for software upgrades 1
- relational operators, for multicast traffic 1
- remote accounts
- remote connection to device
- remote management, with USB modems 1, See also USB modem connections; USB modems
- remote monitoring (RMON) See SNMP health monitor
- remote server, upgrading from 1
- remote template accounts 1
- request interface modem reset umd0 command 1
- request system license add command 1
- request system license add terminal command 1
- request system license delete command 1
- request system license save command 1
- request system license update command 1
- request system set-encryption-key algorithm des command 1
- request system set-encryption-key command 1
- request system set-encryption-key des unique 1
- request system set-encryption-key unique 1
- request system storage cleanup command 1
- request system storage cleanup dry-run command 1
- rescue configuration, alarm about 1
- Resource Reservation Protocol See RSVP
- restart-after-upgrade prompt 1
- retry limits for passwords 1
- Reverse Address Resolution Protocol (RARP), for autoinstallation 1
- reverse SSH 1
- reverse Telnet 1
- reverting to a previous configuration file (J-Web) 1
- rewrite rules, CoS 1
- RIP (Routing Information Protocol)
- RIP neighbors
- RIP routing information 1
- RJ-45 to DB-9 serial port adapter 1, 2
- RMON (remote monitoring) See SNMP health monitor
- rolling back a configuration file, to downgrade software (CLI) 1
- rollover cable, connecting the console port 1, 2
- root login to the console, disabling 1
- root password recovery 1, 2, 3, 4
- rotating files 1
- round-trip time
- route reflectors, BGP, license 1
- router.conf file, for autoinstallation 1
- routing
- routing protocol software process 1
- routing table
- monitoring 1
- rpd process 1
- RPM (real-time performance monitoring)
- basic probes (configuration editor) 1
- BGP monitoring See BGP RPM probes
- inbound and outbound times 1
- jitter, viewing 1
- monitoring probes 1
- overview 1, See also RPM probes
- preparation 1
- probe and test intervals 1
- probe counts 1
- Quick Configuration 1
- round-trip times, description 1
- round-trip times, viewing 1
- sample configuration 1
- sample graphs 1
- statistics 1
- statistics, verifying 1
- TCP probes (configuration editor) 1, See also TCP RPM probes
- tests 1
- tests, viewing 1
- threshold values 1
- tuning probes 1
- UDP probes (configuration editor) 1, See also UDP RPM probes
- verifying probe servers 1
- RPM pages 1, 2
- field summary 1
- RPM probe timestamps
- RPM probes
- basic (configuration editor) 1
- BGP neighbors See BGP RPM probes
- cumulative jitter 1
- current tests 1
- DSCP bits (Quick Configuration) 1
- graph results 1
- ICMP (configuration editor) 1
- inbound times 1
- jitter threshold 1
- monitoring 1
- outbound times 1
- probe count, setting (Quick Configuration) 1
- probe count, tuning 1
- probe counts 1
- probe intervals 1
- probe intervals, setting (Quick Configuration) 1
- probe intervals, tuning 1
- probe loss count 1
- probe owner 1
- probe type, setting (Quick Configuration) 1
- probe types 1
- round-trip time threshold 1
- round-trip times, description 1
- round-trip times, viewing 1
- SNMP traps (Quick Configuration) 1
- source address, setting 1
- TCP (configuration editor) 1, See also TCP RPM probes
- TCP server port 1
- test intervals 1
- test intervals, setting (Quick Configuration) 1
- test target 1
- threshold values, description 1
- threshold values, setting (Quick Configuration) 1
- timestamps See RPM probe timestamps
- tuning 1
- UDP (configuration editor) 1, See also UDP RPM probes
- UDP server port 1
- verifying TCP and UDP probe servers 1
- RSVP (Resource Reservation Protocol)
- RTT See RPM probes, round-trip times
S
- sample configuration
- sample configurations
- samples
- saving licenses (CLI) 1
- scheduler maps, CoS 1
- screen length, CLI, setting 1
- screen width, CLI, setting 1
- scripts See commit scripts; operation scripts
- secret
- secure access
- establishing 1
- generating SSL certificates 1
- HTTPS access (configuration editor) 1
- HTTPS access (Quick Configuration) 1
- HTTPS recommended 1
- installing SSL certificates (configuration editor) 1
- installing SSL certificates (Quick Configuration) 1
- Junos XML protocol SSL access 1
- overview 1
- requirements 1
- sample configuration 1
- verifying secure access configuration 1
- Secure Sockets Layer See SSL
- security
- security logs 1
- streaming through revenue ports 1
- selective stateless packet-based services 1
- serial cable, disconnection for console logout 1
- Serial Line Address Resolution Protocol (SLARP), for autoinstallation 1
- serial ports
- Series
- user interfaces See user interfaces
- Services Gateway
- licenses 1
- user interfaces See user interfaces
- services module
- alarm conditions and configuration options 1
- Services Router
- services router
- sessions
- sessions, J-Web 1
- set cli commands 1
- set no-encrypt-configuration-files command 1
- set requests 1
- severity levels
- for alarms See alarm severity
- for system logs 1
- show bgp neighbor command 1
- show bgp summary command 1
- show chassis alarms command 1, 2
- show chassis environment command 1
- show chassis hardware command 1, 2, 3, 4
- show chassis power-ratings command 1
- show chassis redundant-power-supply command 1
- show chassis routing-engine bios 1
- show chassis routing-engine command 1, 2
- show class-of-service classifier command 1
- show class-of-service code-point-aliases command 1
- show class-of-service command 1
- show class-of-service drop-profile command 1
- show class-of-service forwarding-class command 1
- show class-of-service rewrite-rules command 1
- show class-of-service scheduler-map command 1
- show cli command 1
- show firewall command 1, 2
- show firewall filter dest-all command 1
- show interfaces detail command 1
- show interfaces dl0 extensive command 1
- show interfaces interface-name command 1
- show interfaces pp0 command 1
- show interfaces terse command 1
- show interfaces umd0 extensive command 1
- explanation, for USB modem interfaces 1
- show log command 1
- show mpls interface command 1
- show mpls lsp command 1
- show mpls statistics command 1
- show ospf interfaces command 1
- show ospf neighbors command 1
- show ospf statistics command 1
- show ppp address-pool command 1
- show ppp interface command 1
- show ppp statistics command 1
- show ppp summary command 1
- show pppoe interfaces command 1
- show pppoe statistics command 1
- show pppoe version command 1
- show redundant-power-supply command 1
- show rip neighbors command 1
- show rip statistics command 1
- show route detail command 1
- show route terse command 1
- show services rpm active-servers command 1
- explanation 1
- show services rpm probe-results command 1, 2
- explanation 1
- show snmp health-monitor command 1
- show snmp statistics command 1
- show system autoinstallation status command 1
- show system license command 1
- explanation 1
- show system license keys command 1
- show system license usage command 1
- explanation 1
- show system process command 1
- show system processes command 1
- show system services dhcp binding command 1
- show system services dhcp binding detail command 1
- show system services dhcp client command 1
- show system services dhcp client interface command 1
- show system services dhcp client statistics command 1
- show system services dhcp conflict command 1
- show system services dhcp global command 1
- show system services dhcp relay-statistics command 1
- explanation 1
- show system snapshot media 1
- show system storage command 1, 2
- show system uptime command 1, 2
- show system users command 1, 2
- show version command 1, 2
- show forwarding-options command 1
- signature update, IDP, license 1
- Simple Network Management Protocol See SNMP
- SLARP, for autoinstallation 1
- SMI (Structure of Management Information) 1
- Snapshot page 1
- SNMP (Simple Network Management Protocol)
- agents See SNMP agents
- architecture 1
- communities See SNMP communities
- controlling access (configuration editor) 1, 2
- get requests 1
- health monitor See SNMP health monitor
- managers 1
- MIBs See MIBs
- on Gigabit Ethernet interfaces 1
- overview 1
- preparation 1
- Quick Configuration 1
- set requests 1
- spoofed traps 1
- system identification (configuration editor) 1
- traps See SNMP traps
- views (configuration editor) 1
- SNMP agents 1
- SNMP communities
- SNMP health monitor
- SNMP managers 1
- SNMP page 1
- SNMP traps
- spoofed SNMP traps 1
- SRC application 1
- SRX Series 1
- SRX series devices
- software upgrades 1
- SRX Series Services Gateway 1, See storage media See also boot devices
- auto bios upgrade methods 1
- boot devices
- Chassis Components
- configuring boot devices 1
- dual-root partitioning 1
- halting a with J-Web 1
- halting immediately (CLI) 1
- halting with the CLI 1
- Install Remote page
- field summary 1
- installing earlier version of Junos OS 1
- with dual-root 1
- installing software
- Junos OS Release 10.0
- licenses 1
- multiple devices, using snapshots to replicate configurations
- J-Web 1
- rebooting (CLI) 1
- rebooting with J-Web 1
- reboots 1
- recover of primary image 1
- reinstalling
- request system halt command 1
- request system reboot command 1
- request system snapshot command 1
- show system storage partitions 1
- Snapshot page 1
- snapshots 1, 2
- software upgrade methods 1
- SRX100 Memory Upgrade license 1
- SSH
- ssh command 1
- options 1
- SSL (Secure Sockets Layer)
- SSL 3.0 option, disabling on Internet Explorer for worldwide version of Junos OS 1
- SSL access, establishing 1
- SSL certificates
- startup
- statements, configuration types 1
- statistics
- status
- streaming security logs through revenue ports 1
- Structure of Management Information (SMI) 1
- super-user login class permissions 1
- superuser login class permissions 1
- support, technical See technical support
- syntax conventions 1
- syslog See system logs
- system log messages
- /var/log directory 1
- capturing in a file (configuration editor) 1
- destinations 1, 2, 3
- displaying at a terminal (configuration editor) 1
- event viewer 1
- facilities 1
- monitoring (Quick Configuration) 1
- overview 1
- preparation 1
- sending messages to a file (configuration editor) 1
- sending messages to a terminal (configuration editor) 1
- severity levels 1
- system logs
- archiving 1
- control plane logs 1
- data plane logs 1
- destinations for log files 1
- disabling 1
- event triggers for SNMP traps, setting in event policies 1
- file cleanup (CLI) 1
- file cleanup (J-Web) 1
- functions 1
- logging facilities 1
- logging severity levels 1
- messages See system log messages
- monitoring 1
- overview 1
- redundant syslog server 1
- remote system log server 1
- sending through eventd 1
- system management
T
- T1 ports
- T3 ports
- TACACS+
- taskbar 1
- TCP RPM probes
- technical support
- contacting JTAC 1
- Telnet
- telnet
- telnet command 1
- options 1
- Telnet session 1
- template accounts
- temporary files
- terminal session, sending system log messages to 1
- terminal type, setting 1
- terminology
- tests See RPM
- TFTP, for autoinstallation 1
- threshold
- threshold values, for RPM probes See RPM probes
- time to live See TTL
- timestamps
- trace files
- traceroute
- traceroute command 1
- options 1
- traceroute monitor
- CLI command 1
- traceroute monitor command 1
- Traceroute page 1
- field summary 1
- traffic
- traps See SNMP traps
- triggers for SNMP traps, setting in event policies 1
- Trivial File Transfer Protocol (TFTP), for autoinstallation 1
- troubleshooting
- TTL (time to live)
- types of configuration statements 1
U
- UDP RPM probes
- umd0 1
- unauthorized login class permissions 1
- Unified Threat Management (UTM) license 1
- updating
- licenses (CLI) 1
- upgrades
- Upload package page 1
- URLs
- USB modem connections
- adding an interface 1
- CHAP on dialer interfaces (configuration editor) 1
- configuring device end 1
- configuring dial-up modem at user end 1
- connecting device end 1
- connecting dial-up modem at user end 1
- connecting to user end 1
- dial-in (configuration editor) 1
- dialer interface See dialer interface, USB modem
- interface naming conventions 1
- overview 1
- requirements 1
- USB modem interface types 1
- verifying dialer interfaces 1
- verifying USB modem interfaces 1
- USB modem interfaces
- USB modems
- administering 1
- AT commands 1
- AT commands, modifying 1
- configuration overview 1
- connecting at device end 1
- connecting at user end 1
- default modem initialization commands 1
- default modem initialization commands, modifying 1
- initialization by device 1
- overview 1, See also dialer interface, for USB modem; USB modem connections
- recommended modem 1
- resetting 1
- US Robotics 1
- verifying 1
- user accounts
- user interfaces
- user logging facility 1
- username
- users
- UTM license 1
V
- verification
- active licenses 1
- alarm configurations 1
- autoinstallation 1
- captured packets 1
- destination path (J-Web) 1
- DHCP server operation 1
- DHCP statistics 1
- dialer interfaces 1
- firewall filter for packet capture 1
- host reachability (CLI) 1
- host reachability (J-Web) 1
- license usage 1
- licenses 1
- LSPs (J-Web) 1
- packet capture 1
- RPM configuration 1
- RPM probe servers 1
- RPM statistics 1
- secure access 1
- selective stateless packet-based services 1, 2
- SNMP 1
- SNMP health monitor 1
- traceroute command 1
- traceroute monitor command 1
- tracing multicast paths 1
- USB modem interfaces 1
- version
- PPPoE, information about 1
- version, license key 1
- View Events page
- field summary (filtering log messages) 1
- views, SNMP 1
- VPNs (virtual private networks), DHCP support on interfaces 1
W
X
- XML See commit scripts; operation scripts
- XSLT See commit scripts; operation scripts
Y
- yellow alarms See minor alarms
