Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Running the Juniper Networks Database in Community Mode (SRC CLI)

    Enabling the Juniper Networks Database to Run in Community Mode (SRC CLI)

    If you are adding a Juniper Networks database to an existing community, see Adding a Juniper Networks Database to an Established Community (SRC CLI).

    Use the following configuration statements to enable the Juniper Networks database on a C Series Controller in community mode:

    system ldap server community {role (primary | secondary);primary-neighbors [primary-neighbor...]; primary-connection-type (clear | secure);secondary-neighbors [secondary-neighbor...]; secondary-connection-type (clear | secure);}

    To enable the Juniper Networks database to run in community mode:

    1. From configuration mode, access the configuration statement that configures the Juniper Networks database in community mode:
      user@host# edit system ldap server community
    2. Specify the role of the database as primary or secondary:
      [edit system ldap server community] user@host# set role primary

      or

      [edit system ldap server community] user@host# set role secondary
    3. Configure primary neighbors. Specify each neighbor by IP address, fully qualified hostname, or a hostname that can be resolved through the domain name system:
      [edit system ldap server community] user@host# set primary-neighbors neighbor ...

      For example, set C1 and C2 as primary neighbors:

      [edit system ldap server community]

      user@host# set primary-neighbors C1 C2

    4. Specify the connection type of the configured primary neighbors as clear or secure:
      [edit system ldap server community] user@host# set primary-connection-type clear

      or

      [edit system ldap server community] user@host# set primary-connection-type secure

      Where:

      • clear—Sets LDAP as a data replication protocol between SRC and the LDAP nodes that are configured in the primary neighbors.
      • secure—Sets LDAPS as a data replication protocol between SRC and the LDAP nodes that are configured in the primary neighbors.
    5. Configure secondary neighbors. Specify each neighbor by IP address, fully qualified hostname, or a hostname that can be resolved through the domain name system:
      [edit system ldap server community] user@host# set secondary-neighbors neighbor ...

      For example, set C3 and C4 as secondary neighbors:

      [edit system ldap server community]

      user@host# set secondary-neighbors C3 C4

    6. Specify the connection type of the configured secondary neighbors as clear or secure:
      [edit system ldap server community] user@host# set secondary-connection-type clear

      or

      [edit system ldap server community] user@host# set secondary-connection-type secure

      Where:

      • clear—Sets LDAP as a data replication protocol between SRC and the LDAP nodes that are configured in the secondary neighbors.
      • secure—Sets LDAPS as a data replication protocol between SRC and the LDAP nodes that are configured in the secondary neighbors.

    Configuring the Hostname When Running the Juniper Networks Database in Community Mode (SRC CLI)

    If you run Juniper Networks databases in community mode, all C Series Controllers that have a Juniper Networks database configured to be part of a community require hostname configuration.

    You can either configure Domain Name System (DNS) and enter the controller names into DNS or configure the controller names as static hostnames in all C Series Controllers.

    To configure each C Series Controller to use DNS:

    1. Navigate to the [edit system] hierarchy level.
      [edit]user@host# edit system
    2. Specify the name of a name server.
      [edit system]user@host# set name-server name-server

      where name-server is the IP address of a DNS name server.

    To configure static hostnames for each C Series Controller:

    1. Navigate to the [edit system] hierarchy level.
      [edit]user@host# edit system
    2. Specify the name of a C Series Controller as the static hostname.
      [edit system]user@host# set static-host-mapping host-name

      where host-name is the fully qualified name.

    Modified: 2016-12-29