
JunosE 11.3.x IP, IPv6, and IGP Configuration Guide
Copyright and Trademark Information
Table of Contents
List of Figures
List of Tables
About the Documentation
Internet Protocol
Configuring IP 
Overview
Platform Considerations
References
IP Features
IP Addressing
Indirect Next-Hop Support
Before You Configure IP
Creating a Profile
Address Resolution Protocol
Broadcast Addressing
Fragmentation
IP Routing
Routing Information Tables
Setting the Administrative Distance for a Route
Setting the Metric for a Route
Routing Operations
Identifying a Router Within an Autonomous System
Establishing a Static Route
Configuring Static Routes with Indirect Next Hops
Verifying Next Hops for Static Routes
Setting Up Default Routes
Setting Up an Unnumbered Interface
Adding a Host Route to a Peer on a PPP Interface
Enabling Source Address Validation
Enabling Source Address Validation Traps
Defining TCP Maximum Segment Size
Setting MSS for TCP Connections
Configuring IP Path MTU Discovery
Shutting Down an IP Interface
Removing the IP Configuration
Clearing IP Routes
Clearing IP Interfaces
Setting a Baseline
Disabling Forwarding of Packets
Enabling Forwarding of Source-Routed Packets
Forcing an Interface to Appear Up
Specifying a Debounce Time
Adding a Description
Enabling Link Status Traps
Configuring the Speed
Configuring Equal-Cost Multipath Load Sharing
Setting a TTL Value
Protecting Against TCP RST or SYN DoS Attacks
Preventing TCP PAWS Timestamp DoS Attacks
Protecting Against TCP Out of Order DoS Attacks
Distributing Routing Table Updates to Line Modules
IP Tunnel Routing Table
Shared IP Interfaces
Internet Control Message Protocol
Reachability Commands
Response Time Reporter
Monitoring IP
Configuring IPv6
IPv6 Overview
Platform Considerations
References
Before You Configure IPv6
Configuring an IPv6 License
Creating an IPv6 Profile
Assigning a Profile
Enabling Source Address Validation
Establishing a Static Route
Specifying an IPv6 Hop Count Limit
Managing IPv6 Interfaces
Configuring Shared IPv6 Interfaces
Adding a Description
IPv6 TCP Configuration
Configuring Equal-Cost Multipath Load Sharing
Removing an IPv6 Configuration
Clearing IPv6 Routes
Creating Static IPv6 Neighbors
Clearing Dynamic IPv6 Neighbors
Monitoring IPv6 
Configuring Neighbor Discovery
Internet Protocol Routing
Configuring RIP 
Configuring OSPF 
Overview
Platform Considerations
References
Features
OSPF Configuration Tasks 
Starting OSPF
Aggregating OSPF Networks
Configuring OSPF Interfaces
Configuring OSPF Areas
Optimizing the Cost to Reach a Range of OSPF Routers Within
an Area
Configuring Authentication
Configuring the BFD Protocol for OSPF
Configuring Additional Parameters
Configuring OSPF for NBMA Networks
Traffic Engineering
Using OSPF Routes for Multicast RPF Checks
OSPF and BGP/MPLS VPNs
Remote Neighbors
Configuring OSPF Graceful Restart
Disabling and Reenabling Incremental SPF
Configuring OSPF Traps
Neighbor Uptime Tracking
Monitoring OSPF
Configuring IS-IS 
Overview
Platform Considerations
References
Features
Before You Run IS-IS
Configuration Tasks
Enabling IS-IS for IP Routing
Enabling and Configuring IS-IS for IPv6 Routing
Configuring IS-IS Interface-Specific Parameters
Configuring Authentication
Configuring Link-State Metrics
Configuring a Reference Bandwidth to Set a Default Metric
Setting the CSNP Interval
Configuring Hello Packet Parameters
Padding IS-IS Hello Packets
Configuring LSP Parameters
Setting the Designated Router Priority
Configuring Passive Interfaces
Configuring Adjacency
Configuring Route Tags for IS-IS Interfaces
Configuring Point-to-Point-over-LAN Circuits
Summary Example
Configuring Global IS-IS Parameters
Setting Authentication Passwords
Configuring Authentication of CSNPs and PSNPs
Configuring Redistribution
Redistributing Routes Between Levels
Controlling Granularity of Routing Information
Configuring a Global Default Metric
Configuring Metric Type
Setting the Administrative Distance
Configuring Default Routes
Setting Router Type
Summarizing Routes
Avoiding Transient Black Holes
Ignoring LSP Errors
Logging Adjacency State Changes
Configuring LSP Parameters
Specifying the SPF Interval
Defining the SPF Route Calculation Level
Setting CLNS Parameters
Setting the Maximum Parallel Routes
Configuring a Virtual Multiaccess Network
Configuring Table Maps
Configuring Graceful Restart
Summary Example
Configuring IS-IS for MPLS
Using IS-IS Routes for Multicast RPF Checks
Configuring the BFD Protocol for IS-IS
Disabling the IS-IS Protocol
Monitoring IS-IS
IndexA
- ABRs (area border routers), OSPF
- access lists, IP
- access-list command
- address commands, OSPF
- address commands, RIP
- address ranges
- Address Resolution Protocol., See ARP
- address-family command
- adjacencies, clearing IS-IS
- adjacency levels, IS-IS
- adjacency, OPSF
- administrative distance
- aggregate addresses
- area border routers., See ABRs, OSPF
- area commands
- area IDs (OSPF packets)
- area virtual-link commands
- area virtual-link
- area virtual-link authentication message-digest
- area virtual-link authentication-key
- area virtual-link authentication-none
- area virtual-link dead-interval
- area virtual-link hello-interval
- area virtual-link message-digest-key md5
- area virtual-link retransmit-interval
- area virtual-link transmit-delay
- area-authentication command
- area-authentication-key command
- area-message-digest-key command 1, 2
- areas, IS-IS
- areas, OSPF
- ARP (Address Resolution Protocol)
- arp commands, See also show arp command
- AS (autonomous system)
- AS boundary router
- authentication
- authentication commands
- authentication-key command
- authentication-none command
- autocost, OSPF routing
- automatic virtual link, OSPF
- automatic virtual-link command
- autonomous system boundary router (AS boundary router)., See AS boundary router
B
C
- CIDR (Classless Interdomain Routing) 1, 2
- classes of IP addresses
- Classless Interdomain Routing., See CIDR
- clear arp command
- clear ip commands
- clear ipv6 commands
- clear isis commands
- clear isis adjacency
- clear isis database 1, 2
- clear isis ipv6 redistribution
- CLNP (Connectionless Network Protocol)
- CLNS (Connectionless Network Service Protocol)
- clns commands, See also show clns commands
- community lists, BGP
- complete sequence number PDU., See CSNP
- connection-oriented protocols
- Connectionless Network Protocol., See CLNP
- Connectionless Network Service Protocol., See CLNS
- connectionless protocols 1, 2
- conventions
- cost
- IS-IS interface 1, 2
- OSPF routing
- cost command
- cryptographic authentication, OSPF
- CSNP (complete sequence number PDU)
- CSNP interval, IS-IS interface
- customer support
D
- data path failure
- database, OSPF
- datagrams, IP
- dead interval, OSPF 1, 2
- dead-interval command
- debounce-time command
- debug commands
- debug-related information, IS-IS 1, 2
- default routes
- cost, OSPF
- IP routing
- IS-IS routing 1, 2
- OSPF routing
- suppressing IS-IS
- default-information originate command
- default-metric command
- description
- DHCPv6 Prefix Delegation
- directed broadcast packets
- directed broadcasts, enabling
- directly connected networks
- disable command
- disable-dynamic-redistribute command
- disable-incremental-external-spf command
- distance commands
- distance, RIP administrative
- distribute-domain-wide command
- distribute-list command 1, 2
- documentation set
- domain, OSPF
- domain-authentication command
- domain-authentication-key command
- domain-message-digest-key command 1, 2
- domain-wide prefix distribution
- dropped packets, troubleshooting
- DRs (designated routers)
- dynamic hostname resolution, IS-IS
- dynamic route redistribution, disabling
E
- ECMP (equal-cost multipath)
- end system., See ES
- entry, routing table
- equal-cost multipath., See ECMP
- ES (end system)
- Ethernet commands, interface fastEthernet
- Ethernet controllers
- exit-address-family command
- exit-remote-neighbor command
- exponential back-off SPF calculation, IS-IS
- external routes, OSPF
- E Series routers
F
G
H
I
- ICMP (Internet Control Message Protocol)
- icmp update-source command
- ignore-lsp-errors command
- IGP (interior gateway protocol)
- incremental SPF
- Integrated IS-IS routing
- interarea routes, OSPF
- interface commands
- interface-event-disable command
- interfaces
- interior gateway protocol., See IGP
- Intermediate System-to-Intermediate System., See IS-IS
- intermediate system., See IS
- Internet addresses
- Internet Control Message Protocol., See ICMP
- Internet Layer, TCP/IP
- interval rate, LSP (IS-IS)
- intra-area routes, OSPF
- IP
- ARP protocol 1, 2
- assigning router IDs
- broadcast addressing 1, 2
- E Series router features
- ECMP 1, 2
- functions of
- ICMP and 1, 2
- layers of
- monitoring
- profile
- reachability commands
- routing
- source address verification 1, 2
- IP addresses
- ip commands, See also show ip commands
- clear ip ospf neighbor
- ip access-routes 1, 2
- ip address 1, 2
- ip alwaysup
- ip broadcast-address
- ip debounce-time
- ip description
- ip directed-address
- ip directed-broadcast
- ip disable-forwarding
- ip icmp update-source
- ip ignore-df-bit
- ip irdp 1, 2
- ip mask-reply
- ip mtu 1, 2
- ip multipath round-robin
- ip proxy-arp
- ip redirects 1, 2
- ip refresh-route
- ip route 1, 2
- ip route verify rtr 1, 2
- ip route-type 1, 2, 3
- ip router isis 1, 2
- ip router-id
- ip sa-validate 1, 2, 3
- ip share-interface 1, 2
- ip share-nexthop
- ip shutdown
- ip source-route
- ip speed
- ip split-horizon
- ip tcp adjust-mss 1, 2
- ip unnumbered 1, 2
- ip unnumbered loopback
- ip unreachables
- no ip interface
- IP interfaces
- ip ospf commands, See also show ip ospf commands
- IP profile, B-RAS
- IP profile, creating
- IP redirects, enabling
- ip rip commands, See also show ip rip commands
- ip rip
- ip rip authentication key
- ip rip authentication mode
- ip rip bfd-liveness-detection
- ip rip receive version 1, 2, 3
- ip rip send version
- IP routing., See routing, IP
- IPv6
- address, defining
- addressing
- configuring neighbor discovery
- configuring neighbor discovery with profiles
- configuring neighbor discovery with RADIUS 1, 2
- E Series router features
- enabling and disabling
- headers
- ICMP and
- instance, creating an
- interfaces
- license 1, 2
- monitoring
- neighbor discovery and profiles
- neighbor discovery, defining 1, 2
- neighbors, creating 1, 2
- overview
- packet headers
- ping and
- profile
- references 1, 2
- source address verification
- static routes and
- traceroute and
- ipv6 commands
- ipv6
- ipv6 address 1, 2
- ipv6 description
- ipv6 enable
- ipv6 mtu
- ipv6 nd 1, 2, 3
- ipv6 nd dad attempts
- ipv6 nd managed-config-flag 1, 2
- ipv6 nd ns-interval
- ipv6 nd prefix-advertisement
- ipv6 nd ra-interval 1, 2
- ipv6 nd reachable-time 1, 2
- ipv6 nd suppress-ra
- ipv6 nd suppress-ra-source-link-layer
- ipv6 neighbor 1, 2, 3, 4, 5, 6
- ipv6 neighbor proxy
- ipv6 route 1, 2
- ipv6 router isis
- ipv6 routes
- ipv6 unnumbered
- ipv6 virtual-router
- IPv6 interfaces
- IPv6 local address pools
- ipv6 nd commands
- ipv6 nd
- ipv6 nd active-solicitations
- ipv6 nd dad attempts
- ipv6 nd managed-config-flag 1, 2
- ipv6 nd ns-interval
- ipv6 nd reachable-time
- IPv6 neighbor discovery commands
- ipv6 ospf commands, See also show ipv6 ospf commands
- IPv6 profile, creating
- IPv6 routing with IS-IS
- IRDP (ICMP Router Discovery Protocol), enabling
- IS (intermediate system)
- IS-IS (Intermediate System-to-Intermediate System)
- adjacencies, clearing
- avoiding black holes
- broadcast circuits
- circuit type
- configuring
- configuring the router to be ignored
- displaying CLNS 1, 2
- dynamic hostname resolution
- ECMP
- enabling
- enabling for IPv6
- exponential back-off SPF calculation
- features
- global default metric
- graceful restart
- and black hole avoidance
- configuring
- monitoring 1, 2
- overview
- timers 1, 2
- hello packet validity rate
- HMAC MD5 authentication
- Integrated IS-IS
- IPv6 routing
- level 1 routing
- level 2 routing
- LSPs., See LSPs, IS-IS
- metric, global default
- monitoring
- MPLS and
- network entity title 1, 2
- overload bit
- point-to-point circuits
- point-to-point-over-LAN circuits
- redistributing routes between levels
- route leaking
- route tags
- router type
- routes
- routing levels/layers 1, 2, 3, 4
- SPF calculation
- starting and stopping MD5 packets
- suboptimal paths, correcting 1, 2
- summarizing routes
- suppressing default routes
- system identifier
- table maps
- topology elements
- traffic engineering
- troubleshooting
- IS-IS protocol, OSPF routing with
- is-type command
- isis commands, See also show isis commands
- isis authentication-key
- isis bfd-liveness-detection
- isis circuit-type
- isis csnp-interval
- isis hello padding
- isis hello-interval
- isis hello-multiplier
- isis lsp-interval
- isis mesh-group
- isis message-digest-key
- isis metric
- isis network point-to-point
- isis priority
- isis retransmit-interval
- isis retransmit-throttle-interval
- isis tag
- ISO 10589., See IS-IS
- ISO address
L
- leakage, OSPF route
- level 1 routing, IS-IS
- level 2 routing, IS-IS
- levels of IS-IS routing 1, 2, 3, 4
- license commands
- limited broadcast packets
- line modules
- link-state advertisements., See LSAs
- link-state metrics, IS-IS 1, 2
- link-state packets., See LSPs, IS-IS
- liveness detection
- local routing table
- log-adjacency-changes command
- logical addresses
- LSAs (link-state advertisements)
- opaque LSAs
- retransmit interval and transmit delay 1, 2
- LSDB (link-state database)
- lsp-gen-interval command
- lsp-mtu command
- lsp-refresh-interval command
- LSPs (link-state packets), IS-IS
M
- MAC (media access control) addresses
- manuals
- match commands
- max-lsp-lifetime command
- max-response-failure command
- maximum transmission unit., See MTU
- maximum-paths command
- MD5 authentication
- mesh group, setting (IS-IS)
- message digests
- message-digest-key md5 command
- metric
- metric commands
- metric-style commands
- mpls commands
- MTU (maximum transmission unit)
- multicast
- multihomed hosts
- multinetting
N
- ND (neighbor discovery)
- neighbor commands
- neighbor histories, OSPF
- neighbor uptime tracking, OSPF
- neighboring routers, OSPF 1, 2
- NET (network entity title) 1, 2, 3
- net command
- network area command
- network commands
- network entity title., See NET
- network interface layer (TCP/IP)
- network layer addresses
- network masks
- network service access point., See NSAP
- network, OSPF routing
- next-hop verification
- no area command
- no ipv6 command
- nonbroadcast networks
- nonstop forwarding., See graceful restart, IS-IS
- not-so-stubby area, OSPF., See NSSA
- notice icons
- NSAP (network service access point) 1, 2
- NSF (nonstop forwarding)., See graceful restart, IS-IS
- nsf commands
- NSSA (not-so-stubby area), OSPF 1, 2
- null authentication, OSPF
O
- opaque LSAs, OSPF
- Open Shortest Path First., See OSPF
- operations-per-hop command
- OSPF (Open Shortest Path First)
- ABRs
- adjacency
- aggregate cost, optimizing
- areas 1, 2, 3
- areas, defining
- AS boundary router
- authentication
- autocost
- automatic virtual links
- backbone area
- BGP and
- BGP/MPLS VPNs and
- configuring
- creating interfaces
- database
- dead interval
- default cost
- deleting interfaces 1, 2
- domain
- ECMP
- enabling
- interaction with BGP/MPLS VPNs
- link-local states
- MD5 authentication
- metrics, default
- MIB
- monitoring
- neighbor histories
- neighbor uptime tracking
- optimizing aggregate costs
- password authentication, simple 1, 2
- route leakage
- routes, using for multicast RPF checks
- routing costs
- routing priority
- SPF hold time interval
- stub area
- topology elements
- traffic engineering
- transmit delay 1, 2
- troubleshooting
- virtual links
- ospf commands, See also show ip ospf commands; show ipv6 ospf commands
- overload bit, IS-IS
- owner command
P
- packet-switching networks
- packets, IP
- parallel routes, maximum number of
- partial sequence number PDU., See PSNP
- passive-interface command 1, 2, 3
- passwords
- IS-IS area authentication
- IS-IS authentication
- IS-IS domain authentication
- OSPF MD5 authentication
- OSPF simple password authentication 1, 2
- PDU (protocol data unit)
- physical addresses
- ping command 1, 2
- point-to-point circuits, IS-IS
- Point-to-Point Protocol., See PPP
- point-to-point-over-LAN circuits, IS-IS
- PPP (Point-to-Point Protocol)
- primary IP addresses
- primary IP interface
- priority
- IS-IS designated router
- OSPF routing 1, 2
- profile commands
- profiles
- protocol data unit., See PDU
- protocol number
- PSNP (partial sequence number PDU)
R
- reachability commands
- reassembling IP datagrams
- receive version command
- receive-interface command 1, 2
- receiving interface, setting for RTR probes
- redirects, IP
- redistribute command
- redistribute isis ip command 1, 2
- redistributing routes between IS-IS levels
- redistribution policy (IP), monitoring 1, 2, 3
- redistribution routes
- reference-bandwidth command
- refresh interval, LSP (IS-IS) 1, 2
- reliable protocols 1, 2
- remote neighbors
- remote-neighbor command 1, 2
- request messages, RIP
- request-data-size command
- response messages, RIP
- Response Time Reporter., See RTR
- restart, graceful., See graceful restart, IS-IS
- retransmission interval, IS-IS
- retransmission throttle interval, IS-IS
- retransmit interval
- retransmit-interval command
- RIB (routing information base]
- RIP (Routing Information Protocol)
- authentication
- BFD liveness detection and
- configuring
- debounce interval
- detecting path failures
- disabling dynamic route distribution
- ECMP
- maximum number of parallel routes
- message types
- monitoring
- purging learned routes
- purging the routing table
- remote neighbors
- request messages
- response messages
- route specificity
- route tags
- split horizon mechanism
- subnet masks
- summarizing routes
- triggered updates, disabling
- troubleshooting
- using routes for multicast RPF checks
- route leakage, OSPF
- route leaking between IS-IS levels
- route maps
- route tags, IS-IS
- route tags, RIP
- route-map command 1, 2, 3
- router commands
- router IDs 1, 2
- router type, IS-IS
- routes
- routing information base., See RIB
- Routing Information Protocol., See RIP
- routing table
- routing, IP, See also IP
- adding host route to peer on PPP interface
- default routes
- disabling forwarding of packets
- identifying a router
- maximum number of parallel routes 1, 2
- monitoring 1, 2, 3, 4
- next-hop verification
- routing operations
- routing tables
- source address validation 1, 2
- static routes 1, 2
- routing, IPv6, See also IPv6
- hop limit
- monitoring 1, 2, 3
- source address validation
- static routes
- routing, IS-IS, See also IS-IS
- routing, OSPF, See also OSPF
- routing, RIP, See also RIP
- RTR (Response Time Reporter)
- rtr commands, See also show rtr commands
S
- samples-of-history-kept command
- secondary IP addresses
- send version command
- send-more-specific-routes-disable command
- set-overload-bit command
- setting
- shared IP interfaces
- shared IPv6 interfaces
- show access-list command
- show arp command
- show clns commands
- show forwarding-table route-holddown
- show hosts command
- show ip commands
- show ip ospf commands
- show ip ospf
- show ip ospf border-routers
- show ip ospf database
- show ip ospf database link-local
- show ip ospf database opaque-area
- show ip ospf interface
- show ip ospf internal-statistics
- show ip ospf neighbors
- show ip ospf remote-neighbor interface
- show ip ospf spf-log
- show ip ospf traffic
- show ip ospf virtual-links
- show ip rip commands
- show ipv6 commands
- show ipv6 ospf commands
- show isis commands
- show profile commands
- show route-map command
- show rtr commands
- show tcp commands
- simple password authentication, OSPF 1, 2
- snmp commands
- source address validation traps
- source address verification 1, 2, 3
- SPF (shortest path first) calculations
- SPF hold time
- SPF, incremental
- spf-interval command
- split horizon mechanism
- split-horizon command
- SRP modules
- starting IS-IS MD5 packets
- static routes
- stopping IS-IS MD5 packets
- stub areas, OSPF 1, 2
- subnet addressing
- summarizing RIP routes
- summary addresses
- IS-IS routing
- OSPF routing 1, 2
- summary-address command 1, 2
- summary-prefix command 1, 2
- supernets
- support, technical, See technical support
- suppress-default command
- suppressing IS-IS default routes
- system identifier, IS-IS
T
- table
- table maps, IS-IS
- table-map command
- tag command
- TCP commands
- tcp ack-rst-syn 1, 2
- tcp mss 1, 2
- tcp path-mtu-discovery 1, 2
- tcp path-mtu-discovery black-hole-detect-threshold 1, 2
- tcp path-mtu-discovery max-mtu 1, 2
- tcp path-mtu-discovery min-mtu 1, 2
- tcp paws-disable 1, 2
- tcp resequence-buffers connection-maximum 1, 2
- tcp resequence-buffers default-connection-maximum 1, 2
- tcp resequence-buffers default-vr-maximum 1, 2
- tcp resequence-buffers global-maximum 1, 2
- tcp resequence-buffers vr-maximum 1, 2
- TCP/IP protocol suite
- technical support
- text and syntax conventions
- time-to-live command
- timeout command
- timers
- timers commands
- TLV (type-length-value) for resolution of IS-IS dynamic hostname
- topology
- tos command
- trace packets 1, 2
- traceroute command 1, 2, 3, 4
- traffic engineering
- traffic, IP
- transmit delay, OSPF 1, 2
- transmit-delay command
- transport layer (TCP/IP)
- traps command
- traps, OSPF
- triggered-update-disable command
- troubleshooting
- ttl command
- type command
- type-length-value for resolution of IS-IS dynamic hostname
U
- UDP (User Datagram Protocol)
- undebug commands
- unnumbered interface
- unreachable messages (ICMP)
- unreliable protocols 1, 2, 3
- update-source command 1, 2
- User Datagram Protocol., See UDP
V
- validating source addresses 1, 2, 3
- verifying next hops for static routes
- virtual links, OSPF 1, 2, 3
- virtual-router command