Advanced Junos Enterprise Switching ... - 1 File Download

Advanced Junos Enterprise

Switching Troubleshooting

LAB DIAGRAMS Revision 12.a

Advanced Junos Enterprise

Switching Troubleshooting

12.a

Worldwide Education Services

1194 North Mathilda Avenue

Sunnyvale, CA 94089

USA

408-745-2000

www.juniper.net

Course Number: EDU-JUN-AJEXT

Lab Diagrams

[email protected]

This document is produced by Juniper Networks, Inc.

This document or any part thereof may not be reproduced or transmitted in any form under penalty of law, without the prior written permission of Juniper Networks

Education Services.

Juniper Networks, Ju nos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other

countries. The Juniper Networks Logo, the Ju nos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered

trademarks, or registered service marks are the property of their respective owners.

Advanced Junos Enterprise Switching Troubleshooting Lab Diagrams, Revision 12.a

Copyright© 2013 Juniper Networks, Inc. All rights reserved.

Printed in USA.

Revision History:

Revision 12.a-June 2013

The information in this document is current as of the date listed above.

The information in this document has been carefully verified and is believed to be accurate for software Release 12.3R1.7. Juniper Networks assumes no responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental, or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

YEAR 2000 NOTICE

Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The Junos operating system has

no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.

SOFTWARE LICENSE

The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper

Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should consult the software license for further details.

[email protected]

::,;::::r m ::l

::::r • ::l

(C c:

'< (1) ::l

tn <

(1) C') ::::r •

C') 0

3 • < ::l

Management Network Diagram

Server

srxA-1

srxA-2

srxB-1

srxB-2

srxC-1

srxC-2

Student Workstations

Management Addressing

/_ srxD-1 /_

____ /_ srxD-2 /_

/_ vr-device /_

/_ Server

/_ Gateway

/_ Term Server

Note: The instructor will provide address and access information.

© 2013 Juniper Networks, Inc. All rights reserved. J un1Per Worldwide Education Services WWW.juniper.net M.:lWOR!'-5

t' I: a» ..

ca ..... ,, I: ca Cl) Cl) 0 ..... ..

a» .a ..:.= ca

� ... A.

u I:·-..

0 0 .c: Cl) a»-.a :::s 0 ..

....

[email protected]

� :::T m ::::,

:::T •::::,

(C c:

'< (D ::::,

tn <

(D n :::T• n 0

3 • < ::::,

Pod A Network Diagram: Troubleshooting

Packet Loss and Latency Lab

I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxA-1 srxA-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exA-1 exA-2

172.23.11.100/24 172.23.12.100/24 172.23.21.100/24

I MAC: 00:26:88:02:7 4:86 • , 1 11 MAC: 00:26:88:02:7 4:87 111, . MAC: 00:26:88:02:6b:86 ,

Network1 Network2 Network1 Network2

© 2013 Juniper Networks, Inc. All rights reserved. J un1Per Worldwide Education Services WWW.juniper.net M.:lWOR!',;5

::,;� m :l

�• :l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 •

< :l

Pod B Network Diagram: Troubleshooting


I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxB-1 srxB-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exB-1 exB-2

172.23.11.100/24 172.23.12.100/24 172.23.21.100/24

I MAC: 00:26:88:02:74:86 • II II MAC:. 00:26;88:02:.7 4:8:7 · 1111. MAC: 00:26:88:02:6b:86 I

Network1 Network2 Network1


::,;� m :l

� •

:l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 • < :l

Pod C Network Diagram: Troubleshooting


I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxC-1 srxC-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exC-1 exC-2

172.23.11.100/24 172.23.12.100/24 172.23.21.100/24

I MAC: 00:26:88:02:7 4:86 • , 1 11 MAC: 00:26:88:02:7 4:87 111, .· MAC: 00:26:88:02:6b:86 ,

Network1 Network2 Network1 Network2


� :::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

tn <

(D n :::T• n 0

3 •

< ::::,

Pod D Network Diagram: Troubleshooting


I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxD-1 srxD-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exD-1 exD-2

172.23.11.100/24 172.23.12.100/24 172.23.21.100/24 17223.22.100/24

I MAC:00:26:88:02:74:86 .11 II MAC:. 00:26;88:02:.7 4:8.7 'H II . MAC: 00:26:88:02:6b:86 INetwork1 Network2 Network1


,,

I: ca Cl) ·-

Cl)Cl)ca.cCJ .a - caca_.:::s Cl) t: a» ·- c.i»> caqll-1: ..·- a»......

O I: o-.c Cl) a» -

.a :::s 0 ..

....

[email protected]

::,;�

m :l � •

:l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 • < :l


Virtual Chassis and Interfaces Lab (Part 1)

I MAC: 00:26:88:02:7 4:88 I

srxA-1

172.23.11.10/241172.23.12.10/24

00

() () fil>

exA-1

172.23.11.100/24 17.2.23.12.100/24 ... - ·· - ·· . ..

Virtual Routers

I MAC: 00:26:88:02:74:86 '1111 MAC; 00:26:88:02;74:87 1 ·Network1 ,t,Jetwork2

I MAC: 00:26:88:02:6b:88 I

srxA-2

172.23.21.10/241172.23.22.10/24

00

() () fil>

exA-2

, ·,,;:n1 \J?3?�·*2.:iqq72.4

· Netw6rk1


::,;� m :l

�• :l

(C c:

'< (1) :l

tn <

(1) C') � •

C')

• <:l



Virtual Chassis

srxA-1

co 6 6

'o..O

co 6 6

ge-0/0/6/

Virtual Routers I , a Network1

VLAN: v11

exA-1

Master

\ge-0/0/7

� Network2

VLAN: v12

vcp-0

vcp-1

I

172.23.11.100/2411172.23.12.100/24

L.:.xA-2

co 6 6

I

fil,

co 6 �I VLAN Interfaces

fil, I I vlan.11: 172.23.11.1/24

exA-2� vlan.12: 172.23.12.1/24

Backup vlan.21: 172.23.21.1/24

vlan.22: 172.23.22.1/24

vr22

Network1 Network2

VLAN: v21 VLAN: v22

172.23.21.100/24 II 172.23.22.100/24


� :::T m ::::, :::T •

::::, (C c:

'< (D ::::,

tn <

(D n :::T• n 0

3 •

< ::::,



I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxB-1 srxB-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exB-1 exB-2

172.23.11.100/24 : ';:�H�f\)1f?3.*2JQQ/2.4

I MAC: 00:26:88:02:74:86 ' 1111 . MAC; 00:26:88:02:74:87 I ·Network1 Network2 · Netw6rk1


� :::T m ::::,

:::T •::::,

(C c: '< (D ::::,

tn <

(D n :::T • n

•< ::::,



Virtual Chassis

Virtual Routers � �

srxB-1

vr11

Network1

VLAN: v11

co 6 6

'o..O

co 6 6

*°

exB-1Master

vr12

Network2

VLAN: v12

vcp-0

vcp-1

I I

172.23.11.100/2411172.23.12.100/24

�B-2

exB-2Backup

ge-1/0f

vr21

Network1

VLAN: v21

co 6 6

I

fil,

co 6 �

*°

I I

\.ge-1/0/7

t::� Network2

VLAN: v22

172.23.21.100/24 II 172.23.22.100/24

VLAN Interfaces

vlan.11: 172.23.11.1/24

vlan.12: 172.23.12.1/24

vlan.21: 172.23.21.1/24

vlan.22: 172.23.22.1/24


::,;� m :l

� •

:l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 • < :l



[ MAC: 00:26:88:02:7 4:88 I

srxC-1

172.23.11.10/241172.23.12.10/24

CX)

C)

C) t

exC-1

I MAC: 00:26:88:02:6b:88 I

srxC-2

172.23.21.10/241172.23.22.10/24

CX)

C)

C) t

exC-2

172.23.11.100/24 172.23.12.100/241 1172.23.21.100/24 ·

I. MAC:00:26:88:02:74:86JI 11. MAC: 00:26:88:02:7Ll:87 I MAC: 00:26:88:02:6b:86

Network1 Network2 Network1 Network2'

© 2013 Juniper Networks, Inc. All rights reserved. JUnlPer Worldwide Education Services WWW.juniper.net hCl'NORK5

::,;� m :l

�• :l

(C c:

'< (1) :l

tn <

(1) C') �•

C')

• < :l



srxC-1

Virtual Chassis

co 6 6

'o..O

co 6 6

*°

ge-0/0/6/

Virtual Routers I · ', I vr11 f

Network1

VLAN: v11

exC-1Master

\ge-0/0/7

� Network2

VLAN: v12

vcp-0

vcp-1

I I

172.23.11.100/2411172.23.12.100/24

�C-2

exC-2Backup

ge-1/0/6/

�

Network1

VLAN: v21

co 6 6

I

fil,

co 6 �

*°

I I

\ge-1/0/7

��

Network2

VLAN: v22

17 2.23.21.100/2411172. 23.22.100/24

VLAN Interfacesvlan.11: 172.23.11.1/24

vlan.12: 172.23.12.1/24

vlan.21: 172.23.21.1/24

vlan.22: 172.23.22.1/24


� :::T m ::::,

:::T •

::::,

(C c:

'< (D ::::,

tn <

(D n :::T• n 0

3 •

< ::::,



I MAC: 00:26:88:02:7 4:88 I I MAC: 00:26:88:02:6b:88 I

srxD-1 srxD-2

172.23.11.10/241172.23.12.10/24 172.23.21.10/241172.23.22.10/24

00

() () fil>

00

() () fil>

exD-1 exD-2

172.23.11.100/24 172.23.12.100/24 172.23.21.100/24

I . MAC:00:26:88:02:74:86 ... 11 II . MAC: 00:�6:8�:02:J�:87 .1111. MAC: 00:26:88:02:6b:86. INetwork1 Network2 Network1 Network2


� :::T m ::::,

:::T •::::,

(C c: '< (D ::::,

tn <

(D n :::T • n

•< ::::,



Virtual Chassis

Virtual Routers 1 111

srxD-1

•I

vr11

Network1

VLAN: v11

co 6 6

'o..O

co 6 6

*°

I exD-1 vcp-0

Master vcp-1

I

Network2

VLAN: v12

172.23.11.100/2411172.23.12.100/24

�D-2

exD-2Backup

ge-1/0/6/

�

Network1

VLAN: v21

co 6 6

I

fil,

co 6 �

*°

I I

\.ge-1/0/7

��

Network2

VLAN: v22

172.23.21.100/2411172.23.22.100/24

VLAN Interfaces

vlan.11: 172.23.11.1/24

vlan.12: 172.23.12.1/24

vlan.21: 172.23.21.1/24

vlan.22: 172.23.22.1/24


Cl) -

0 u 0 ..

0 ..

A.

G)

G) ..

....

'0.0 I: ·-

1: I: ca 1:1. en

'0.0 I: ·-

..

00 .c: Cl) G) -

.ca :::s 0 ..

....

[email protected]

::,;� m :l

� •

:l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 • < :l


Spanning Tree Protocols Lab (RSTP Part 1)

I Bridge Priority: 4K I

ge-0/0/9

": VLAN: v11 · .. ..

172.23.11.100/24

0Network;l.

srxA-1

00

6 6

t

exA-1

VLAN::v12.

'Networ�'

I Bridge Priority: 8K I ge-0/0/1

VLAN: v11 .. ..

172.23.11.101/24

Network1

srxA-2

00

6 6

t

exA-2

I Bridge Priority: OK I

ge-0/0/9


::,;� m :l

� •

:l

(C c:

'< (1) :l

CE;,

C') � •

C') 0

3 • < :l


Spanning Tree Protocols Lab (MSTP Part 2) MSTP Instance 1Bridge Priority: 4K (v11, v13)

MSTP Instance 2 Bridge-Priority: 8k (v12, v14)

MSTP Instance 1Bridge Priority: 8K (v11, v13)


ge-0/0/1

MSTP Instance 1 (v11, v13)


ge-0/0/9

VLAN: v11

172.23.11.100/24

Netw9rki

srxA-1

00

6 6

I

fill

exA-1

VLAN:V12T .;: : . VLAN::\/11

172.23.11 '.101/24. -------

Networki

srxA-2

00

6 6

iMSTP Instance 1 (v11, v13)


exA-2 1- ge-0/0/9

.VLAN: v12


� :::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

tn <

(D n :::T • n 0

3 •

< ::::,



I Bridge Priority: 4K I I Bridge Priority: 8K I

ge-0/0/9

": VLAN: v11 · .. ..

172.23.11.100/24

0Network;I.

srxB-1

00

6 6

t

exB-1

ge-0/0/1

VLAN:: v12 VLAN: v11

172.23'.12.100/241 I 172.23.11.101/24 I > I ... I I -�

Virtual Routers

'Network�' Network1

srxB-2

00

6 6

t

exB-2

� 0


ge-0/0/9

;: '::�. ':!. ':,VLAN:\112' :. ;::A


� :::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

�a

n :::T • n 0

3 •

< ::::,






ge-0/0/1



ge-0/0/9

VLAN: v11

172.23.11.100/24

Netw9rki

srxB-1

00

6 6

I

fill

exB-1

VLAN:V12T .;: : . VLAN:'\/11

172.23.11 '.101/24. -------

Networki

srxB-2

00

6 6

i exB-2



1- ge-0/0/9

VLAN: v12

Network2


::,;� m :l

� •

:l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 • < :l




ge-0/0/9

VLAN: v11

172.23.11.100/24

Network 1.

srxC-1

00

6 6

t

exC-1

ge-0/0/1

VLAN:.v12' VLAN: v11

·112.23.12.100/241 I 172.23.11.101/24� I i .:--,..

Virtual Routers

Network2, Network1

srxC-2

00

6 6

t

exC-2


ge-0/0/9

VLAN:v12

Network2


::,;� m :l

� •

:l

(C c:

'< (1) :l

CE;,

C') � •

C') 0

3 • < :l








ge-0/0/9

VLAN: v11

172.23.11.100/24

Network1

srxC-1

00

6 6

I

fill

exC-1

ge-0/0/1

VLAN: v12 VLAN: v11

172.23.12.100/241 I 172.23.11.101/24 I > I .j I �

Virtual Routers

Network2 Network1

srxC-2

00

6 6



exC-2 1- ge-0/0/9

VLAN: v12

Network2


� :::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

tn <

(D n :::T • n 0

3 •

< ::::,




ge-0/0/9

VLAN: v11

172.23.11.100/24

Network 1.

srxD-1

00

6 6

t

exD-1

ge-0/0/1

VLAN:'v12' VLAN: v11

172.23.12.100/241 I 172.23.11.101/24 � I i .:--,..

Virtual Routers

Network2 Network1

srxD-2

00

6 6

t

exD-2


ge-0/0/9

VLAN:v12

.,,,,. Network2


� :::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

�a

n :::T • n 0

3 •

< ::::,








ge-0/0/9

VLAN: v11

172.23.11.100/24

Network1

srxD-1

00

6 6

I

fill

exD-1

ge-0/0/1

VLAN: v12 VLAN: v11

172.23.12.100/241 I 172.23.11.101/24 I > I .j I �

Virtual Routers

Network2 Network1

srxD-2

00

6 6



exD-2 1- ge-0/0/9

• VI.AN: v12 ••

Network2


.t' ·-

.. :I �

a» fl)

1: 0 a.

'OI c ·-

.. 0 0 .c -a» -

.a :I 0 .. ....

[email protected]

::,;�m :l

�•

:l

(C c:

'< (1) :l

tn <

(1) C') �•

C') 0

3 • < :l

Pod A Network Diagram:

Troubleshooting Port Security Lab

I loO.O: 172.17.1.1 I

Virtual

host

ge-0/0/14

.Receiver

srxA-1

.1

00 ..., ........ ..., 0 > ........ . . O Z

*° � >

exA-1

VLAN: v11

.1

0 ('!')

6 � �

�

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.17.1.2

I loO.O: 172.17.1.2 I .2

srxA-2

.1

N

00 6 6 ('(')6 co

I ..., '0..0 N

.2

exA-2 I LoO.O: 172.17.1.3 I .1

172.16.4.0/24

�

Source


� :::T m ::::,

:::T •

::::,

(C c:

(D ::::,

tn < ....

(D n :::T • n 0

•

< ::::,

Pod B Network Diagram:


I loO.O: 172.17.1.1 I

I srxB-1 I .1

I .1

00

6 ..-1

6 z I

� fill > 0 ('!')

6 �

exB-1 � 0 ..-1

ge-0/0/14 / VLAN: v11

Receiver

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.17.1.2

I loO.O: 172.17.1.2 I .2

srxB-2

.1

N

00 6 6 ('(') 6

I ..-1

'0..0 N

.2

exB-2 11 LoO.O: 172.17.1.3 I .1

172.16.4.0/24

·�Source


�:::T m ::::,

:::T • ::::,

(C c:

(D ::::,

tn < ....

(D n :::T • n 0

• < ::::,

Pod C Network Diagram:


I loO.O: 172.17.1.1 I

I srxC-1 I .1

I .1

00

6 ..-1

6 z I

�fill >0 ('!')

6�

exC-1 �0 ..-1

ge-0/0/14 / VLAN: v11

Receiver

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.17.1.2

I loO.O: 172.17.1.2 I .2

srxC-2

.1

N

00 6 6 ('(')6

I ..-1

'0..0 N

.2

exC-2 11 LoO.O: 172.17.1.3 I .1

172.16.4.0/24

�

Source


::,;�m :l

�• :l

(C c:

'< (1) :l

tn <

(1) C') �•

C') 0

3 •

< :l

Pod D Network Diagram:


I loO.O: 172.17.1.1 I

Virtual

host

ge-0/0/14

Receiver:

srxD-1

.1

00 ...,

6 j ......... .. O Z

Q) � '0.0 >

exD-1

VLAN: v11

.1

0 ('!')

6 � �

�

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.17.1.2

I loO.O: 172.17.1.2 I .2

srxD-2

.1

N

00 6 6 ('(')6 co

I ..., '0.0 N

.2

exD-2 l LoO.O: 172.17.1.3 l .1

172.16.4.0/24

�

Source

© 2013 Juniper Networks, Inc. All rights reserved. JUnlPer Worldwide Education Services WWW.juniper.net hCl'NORK5

fn a» ..

:I ..

ca a» I&.

,, a» �

I: ca > ,,

c

'OI I: ·-

..

00.cfna»-

.a :I 0 ..

....

[email protected]

� :::T m ::::,

:::T •

::::,

(C c:

'< (D ::::,

tn <

(D n :::T •

n 0

3 •

< ::::,

Pod A Network Diagram:

Troubleshooting Advanced Features Lab

I loO.O: 172.17.1.1 I I loO.O: 172.17.1.2 I .1 ge-0/0/1 .2

srxA-1 srxA-2

172.16.2.0/24

.1 .1

OSPF N 00 ..-1 00 6 6 ..-1

6 > PIM-SM ('(') 6 z 6 co

I

� RP= 172.1.7.1.2 I ..-1

fill Q.)

> '0..0 N

t--

0 ..-1

('!')

6 .2

exA-1 �

exA-2 0 ..-1 I LoO.O: 172.17.1. I LoO.O: 172.17.1.3 I

-


�:::T m ::::,

:::T •

::::,

(C c: '< (D ::::,

tn <

(D n :::T • n 0

3 •

< ::::,

Pod B Network Diagram:


I loO.O: 172.17.1.1 I

ge-0/0/14

IGMPGroup:

224.7.7.123

Virtual

host

Receiver

srxB-1

.1

00 ..., ........ ..., 0 > ........ " O Z

*° � >

exB-1

VLAN: v11

.1

0 ('!')

C)��

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.1.7.1.2

I loO.O: 172.17.1.2 I .2

srxB-2

.1

N

00 C)C) ('I) C)

I ..., '0.0 N

.2

exB-2 I LoO.O: 172.17.1.3 I .1

172.16.4.0/24

�

Source


� :::T m ::::,

:::T • ::::,

(C c: '< (D ::::,

tn <

(D n :::T • n 0

3 • < ::::,

Pod C Network Diagram:


I loO.O: 172.17.1.1 I I loO.O: 172.17.1.2 I .1 ge-0/0/1 .2

srxC-1 srxC-2

172.16.2.0/24

.1 .1

OSPF N 00 ..-1 00 6 6 ..-1

6 > PIM-SM ('(') 6 z 6 co

I

� RP= 172.1.7.1.2 I ..-1

fill Q.)

> '0..0 N t--

0 ..-1

('!')

6 .2

exC-1 �

exC-2 0 ..-1 I LoO.O: 172.17.1. I LoO.O: 172.17.1.3 I

-


::,;� m :l

� • :l

(C c:

'< (1) :l

tn <

(1) C') � •

C') 0

3 •

< :l

Pod D Network Diagram:


I loO.O: 172.17.1.1 I

ge-0/0/14

IGMPGroup:

224.7.7.123

..

Virtual

host

Receiver

srxD-1

.1

00 ..., ........ ..., 0 > ........ . . O Z

*° � >

exD-1

VLAN: v11

.1

0 ('!')

6 � �

�

ge-0/0/1

172.16.2.0/24

OSPF

PIM-SM

RP= 172.1.7.1.2

I loO.O: 172.17.1.2 I .2

srxD-2

.1

N

00 6 6 ('(') 6

I ...,

'0..0 N

.2

exD-2 I LoO.O: 172.17.1.3 I .1

172.16.4.0/24

�i

· Sm.free


Documents

Advanced Junos Enterprise Switching ... - 1 File Download