Symbols
A
- access privilege levels
- accounting
- applications
- description
- TACACS+, configuring
- admin permission
- admin-control permission
- all permission
- announcements at system login
- APIs (application programming interfaces)
- CORBA plug-in SPI
- CORBA remote API
- description
- SAE core API 1, 2
- application programming interfaces. See APIs
- architecture
- authentication 1, See also user accounts
- configuration example
- multiple methods
- RADIUS
- shared user accounts 1, 2
- TACACS+
- TACACS+, configuring
- TACACS+, configuring with C-Web interface
- TACACS+, configuring with SRC CLI
- template accounts
- authentication order
- configuring with C-Web interface
- configuring with SRC CLI 1, 2
- overview 1, 2
- removing authentication method
- removing authentication method with SRC CLI
B
C
- C Series Controller
- C Series Controllers
- C-Web interface
- committing a configuration
- configuration options
- configuring
- HTTP access 1, 2
- HTTPS access 1, 2
- logging properties
- copying an object
- deleting an object
- editing level
- elements
- getting Help
- icons
- layout
- loading configuration values
- logging out
- moving an object
- navigating
- overview 1, 2
- password, changing
- Policies, Services, and Subscribers
- renaming an object
- reverting a configuration
- starting
- updating configuration data
- username, changing
- C2000 Controller
- C3000 Controller
- C4000 Controller
- C5000 Controller
- clear permission
- cli
- client mode, NTP
- commands
- configuration statements
- configure permission
- control permission
- conventions
- customer support 1
- cweb-password
D
- date on system
- deployment scenarios
- DES (directory eventing system)
- differentiated QoS
- digital certificates. See security
- directory
- directory connection properties
- directory eventing system
- directory server
- documentation
- draft RFCs
- dynamic webpages
E
F
G
- Gigabit Ethernet interfaces, configuring IPv4
- Gigabit Ethernet interfaces, configuring IPv6
- GRE tunnel interfaces
- group interfaces, configuring 1
H
I
J
- Java Naming and Directory Interface. See JNDI
- java-heap-size, configuring
- JNDI (Java Naming and Directory Interface)
- Juniper Networks database
- adding Juniper Networks database to community
- changing modes
- community mode
- community mode configuration
- configuration example
- configuration statements
- configuring
- data recovery
- high availability
- loading sample data
- neighbors 1, 2
- overview 1, 2
- redundancy
- roles
- changing secondary to primary, SRC CLI
- overview 1, 2
- standalone mode
- verifying configuration
- Juniper-Allow-Commands attribute (RADIUS)
- Juniper-Allow-Configuration attribute (RADIUS)
- Juniper-Deny-Commands attribute (RADIUS)
- Juniper-Deny-Configuration attribute (RADIUS)
- Juniper-Local-User-Name attribute (RADIUS)
L
- LDAP (Lightweight Directory Access Protocol). See directory; directory server
- LDAP directory. See directory
- leases for licenses. See license server
- license
- license manager
- configuration statements
- configuring
- license server
- license usage
- Lightweight Directory Access Protocol. See LDAP
- load balancing
- local password authentication
- local properties
- logging, See also system log server
- login announcements, system
- login classes
- configuration
- configuration examples
- configuration prerequisites
- configuration statements
- configuration verification
- default classes
- idle timeout values
- options
- overview
- predefined
- privilege level options
- privilege levels
M
- maintenance permission
- manuals
- messages
- MII monitor
- configuring
- Monitoring Agent
- multicast
N
- NAS ID, configuring for SAE
- network
- network information collector. See NIC
- NIC (network information collector)
- notice icons
- NTP (Network Time Protocol)
- NTP,
O
- on-demand services 1, 2
- open interfaces
- operator login class
- operators, regular expression
- OSS integration
P
- passwords
- permissions
- policies
- Policies, Services, and Subscribers CLI. See SRC CLI
- Policies, Services, and Subscribers tasks. See C-Web interface
- policy management
- ports
- predefined login classes
- primary directory
- privilege levels 1
- product features 1, 2
R
- RADIUS
- RADIUS authentication. See authentication
- RADIUS authorization. See authentication
- read-only login class
- redundancy
- references
- regular expressions
- request license import file-name command
- reset permission
- residential portal
- resolving hostnames
- retrieving directory changes
- RFCs 1, 2, 3
- root account 1
- router running Junos OS
- router running JunosE Software
- routing permission
- routing-control permission
S
- SAE (service activation engine)
- configuring groups
- deleting default configurations
- SRC CLI 1, 2
- description 1, 2
- initial properties, overview
- starting
- stopping
- verifying status
- SAE (service activation engine), configuring initial properties
- SAE (service activation engine), configuring NAS ID
- SAE (service activation engine), configuring RADIUS address
- sample data
- secondary directory
- secret permission
- secret-control permission
- security
- digital certificates 1
- clearing certificates 1, 2
- clearing requests
- prerequisites
- requesting certificates 1, 2
- requesting certificates through SCEP
- viewing certificates
- security permission
- security-control permission
- server license. See license
- service activation engine. See SAE
- service permission
- service-control permission
- services
- shared user accounts
- shell permission
- SNMP agent
- access control, configuring on C Series Controllers
- community strings 1, 2
- named views
- SNMP groups
- VACM
- configuration statements 1, 2
- configuring
- description
- directory connection parameters, configuring
- Java Runtime Environment, configuring
- local properties, configuring
- logging, configuring
- monitoring
- named views, defining
- notification targets, configuring
- starting
- stopping
- system information, configuring
- trap history, configuring
- SNMP Agent
- snmp control permission
- snmp permission
- SNMP traps
- notification targets, configuring
- snmp-named-views-cli
- snmp-security-names-cli
- snmp-statements
- software standards
- SRC ACP (SRC Admission Control Plug-In)
- SRC CLI 1
- directory connections
- overview
- Policies, Services, and Subscribers CLI
- starting
- SRC components
- SRC software
- configuration prerequisites
- configuring
- creating, virtualized instance 1
- description
- features and benefits 1, 2
- financial advantages
- OSS integration
- recovering
- services
- snapshot on C Series Controller
- upgrading
- USB Storage Device
- virtualization
- virtualization, requirement
- SSH (secure shell)
- standards 1
- static host mapping
- static routes, configuring
- Steel-Belted Radius/SPE server 1, 2
- subscriber
- subscriber permission
- subscriber-control permission
- superuser login class
- support, technical See technical support
- symmetric active mode, NTP
- system authentication. See authentication
- system log server
- configuration prerequisites
- configuration statements
- message groups
- message severity levels
- messages
- messages, file
- messages, server
- messages, user notification
- overview
- system login
- system permission
- system-control permission
T
- TACACS+ authentication. See authentication
- tariff models
- technical support
- Telnet connection to remote host
- template authentication accounts
- text conventions defined
- third-party URLs
- tunnel interfaces
- tunnel interfaces, configuring
U
- UIDs
- unauthorized login class
- unresponsive directories
- usage data
- user accounts 1, See also login classes
- authentication
- configuring passwords
- configuring SSH authentication
- root password 1, 2
- authentication method and password
- configuration
- configuration verification 1, 2
- example
- overview 1, 2, 3
- shared
- user notification messages
V
W
- Web application server
- application deployment 1, 2
- channel stack
- configuration statements
- configuring the Web application server
- installing Web applications inside
- local properties
- multicast-address
- node-id
- overview
- removing Web applications from
- restarting
- shared cluster name
- shared cluster nodes
- shared cluster properties
- starting
- stopping
- viewing cluster history
- viewing cluster status
- viewing statistics
- Web Services Gateway
Download This Guide
Related Documentation
- Configuring the Juniper Networks Database to Run in Community Mode (C-Web Interface)
- Enabling the Juniper Networks Database to Run in Standalone Mode (SRC CLI)
- Securing the Juniper Networks Database (SRC CLI)
- Viewing Information About the Juniper Networks Database in Community Mode (C-Web Interface)
- Configuration Statements for the Juniper Networks Database (SRC CLI)
- Example: Configuration for a Database Community
- Juniper Networks Database Overview
- Configuring the Juniper Networks Database to Run in Community Mode (C-Web Interface)
- Securing the Juniper Networks Database (SRC CLI)
- Viewing Information About the Juniper Networks Database in Community Mode (C-Web Interface)
- Configuration Statements for the Juniper Networks Database (SRC CLI)
- Example: Configuration for a Database Community
- Configuring the Juniper Networks Database to Run in Community Mode (C-Web Interface)
- Enabling the Juniper Networks Database to Run in Standalone Mode (SRC CLI)
- Securing the Juniper Networks Database (SRC CLI)
- Viewing Information About the Juniper Networks Database in Community Mode (C-Web Interface)
- Configuration Statements for the Juniper Networks Database (SRC CLI)
- Example: Configuration for a Database Community
- Juniper Networks Database Overview
Running the Juniper Networks Database in Community Mode (SRC CLI)
- Enabling the Juniper Networks Database to Run in Community Mode (SRC CLI)
- Configuring the Hostname When Running the Juniper Networks Database in Community Mode (SRC CLI)
Enabling the Juniper Networks Database to Run in Community Mode (SRC CLI)
If you are adding a Juniper Networks database to an existing community, see Adding a Juniper Networks Database to an Established Community (SRC CLI).
Use the following configuration statements to enable the Juniper Networks database on a C Series Controller in community mode:
To enable the Juniper Networks database to run in community mode:
- From configuration mode, access the configuration statement
that configures the Juniper Networks database in community mode:user@host# edit system ldap server community
- Specify the role of the database as primary or secondary:[edit system ldap server community] user@host# set role primary
or
[edit system ldap server community] user@host# set role secondary - Configure primary neighbors. Specify each neighbor by
IP address, fully qualified hostname, or a hostname that can be resolved
through the domain name system:[edit system ldap server community] user@host# set primary-neighbors neighbor ...
For example, set C1 and C2 as primary neighbors:
[edit system ldap server community]user@host# set primary-neighbors C1 C2
- Specify the connection type of the configured primary
neighbors as clear or secure:[edit system ldap server community] user@host# set primary-connection-type clear
or
[edit system ldap server community] user@host# set primary-connection-type secureWhere:
- clear—Sets LDAP as a data replication protocol between SRC and the LDAP nodes that are configured in the primary neighbors.
- secure—Sets LDAPS as a data replication protocol between SRC and the LDAP nodes that are configured in the primary neighbors.
- Configure secondary neighbors. Specify each neighbor by
IP address, fully qualified hostname, or a hostname that can be resolved
through the domain name system:[edit system ldap server community] user@host# set secondary-neighbors neighbor ...
For example, set C3 and C4 as secondary neighbors:
[edit system ldap server community]user@host# set secondary-neighbors C3 C4
- Specify the connection type of the configured secondary
neighbors as clear or secure:[edit system ldap server community] user@host# set secondary-connection-type clear
or
[edit system ldap server community] user@host# set secondary-connection-type secureWhere:
- clear—Sets LDAP as a data replication protocol between SRC and the LDAP nodes that are configured in the secondary neighbors.
- secure—Sets LDAPS as a data replication protocol between SRC and the LDAP nodes that are configured in the secondary neighbors.
Configuring the Hostname When Running the Juniper Networks Database in Community Mode (SRC CLI)
If you run Juniper Networks databases in community mode, all C Series Controllers that have a Juniper Networks database configured to be part of a community require hostname configuration.
You can either configure Domain Name System (DNS) and enter the controller names into DNS or configure the controller names as static hostnames in all C Series Controllers.
To configure each C Series Controller to use DNS:
- Navigate to the [edit system] hierarchy level.[edit]user@host# edit system
- Specify the name of a name server.[edit system]user@host# set name-server name-server
where name-server is the IP address of a DNS name server.
To configure static hostnames for each C Series Controller:
- Navigate to the [edit system] hierarchy level.[edit]user@host# edit system
- Specify the name of a C Series Controller as the static
hostname.[edit system]user@host# set static-host-mapping host-name
where host-name is the fully qualified name.
Related Documentation
- Configuring the Juniper Networks Database to Run in Community Mode (C-Web Interface)
- Enabling the Juniper Networks Database to Run in Standalone Mode (SRC CLI)
- Securing the Juniper Networks Database (SRC CLI)
- Viewing Information About the Juniper Networks Database in Community Mode (C-Web Interface)
- Configuration Statements for the Juniper Networks Database (SRC CLI)
- Example: Configuration for a Database Community
- Juniper Networks Database Overview