Swconfig50 Getting Started

8/13/2019 Swconfig50 Getting Started

1/359

Juniper Networks, Inc.

1194 North Mathilda Avenue

Sunnyvale, CA 94089

USA

408-745-2000

www.juniper.net

Part Number: 530-004542-01, Revision 2

JUNOSInternet Software

Configuration Guide

Gett ing St art ed

Release 5.0


2/359

i i

This product includes the Envoy SNMP Engine, developed by Epilogue Technology, an Integrated Systems Company. Copyright 19861997, EpilogueTechnology Corporation. All rights reserved. This program and its documentation were developed at private expense, and no part of them is in the publicdomain.

This product includes memory allocation software developed by Mark Moraes, copyright1988, 1989, 1993, University of Toronto.

This product includes FreeBSD software developed by the University of California, Berkeley, and its contributors. All of the documentation and softwareincluded in the 4.4BSD and 4.4BSD-Lite Releases is copyrighted by The Regents of the University of California. Copyright1979, 1980, 1983, 1986, 1988,1989, 1991, 1992, 1993, 1994. The Regents of the University of California. All rights reserved.

GateD software copyright 1995, The Regents of the University. All rights reserved. Gate Daemon was originated and developed through release 3.0 byCornell University and its collaborators. Gated is based on Kirtons EGP, UC Berkeleys routing daemon (routed), and DCNs HELLO routing protocol.Development of Gated has been supported in part by the National Science Foundation. Portions of the GateD software copyright 1988, Regents of theUniversity of California. All rights reserved. Portions of the GateD software copyright 1991, D. L. S. Associates.

This product includes software developed by Maker Communications, Inc., Copyright 1996, 1997, Maker Communications, Inc.

Juniper Networks is a registered trademark of Juniper Networks, Inc. Internet Processor, Internet Processor II, JUNOS, JUNOScript, M5, M10, M20, M40,and M160 are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks may be theproperty of their respective owners. All specifications are subject to change without notice.

JUNOS Internet Software Configuration Guide: Getti ng Started, Release 5.0Copyright 2001, Juniper Networks, Inc.All rights reserved. Printed in USA.

Writers: Margaret Jones, John Gilbert ChanEditors: Cris Morris, Pam Muraca, Cathy SteinbergCovers and template design: Edmonds Design

Revision History10 August 2001First Edition.

The information in this document is current as of the date listed in the revision history above.

The information in this document has been carefully verified and is believed to be accurate. Juniper Networks assumes no responsibilities for anyinaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental orconsequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.

Juniper Networks reserves the right to change, modify, transfer or otherwise revise this publication without notice.

YEAR 2000 NOTICE

Juniper Networks hardware and software products are Year 2000 compliant. The JUNOS software has no known time-related limitations through the year2038. However, the NTP application is known to have some difficulty in the year 2036.

SOFTWARE LICENSE

The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to theextent applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks, Inc. By using this software, youindicate that you understand and agree to be bound by those terms and conditions.

Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certainuses. The software license may state conditions under which the license is automatically terminated. You should consult the license for further details.

For complete product documentation, please see the Juniper Networks Web site at www.juniper.net/techpubs.


3/359

Abbreviated Table of Contents i i i

Abbreviated Table of ContentsAbout this Manual

Part 1Overview

Chapter 1Product Archit ecture ............................................................................................3

Chapter 2JUNOS Software Overview .................................................................................9

Chapter 3Complete Configuration ModeCommands and Statements ............................................................................25

Part 2Sof tware Instal lat ion and Upgrade

Chapter 4Installat ion Overview ..........................................................................................55

Chapter 5Configure the Sof tware Init ially ..................................................................59

Chapter 6Reinstall t he Sof tware .......................................................................................63

Chapter 7Upgrade Software Packages .........................................................................67

Chapter 8Upgrade to Release 5.0 or Downgrade from Release 5.0 ...........73


4/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedi v

Part 3Command-Line Interf ace

Chapter 9Command-Line Interface Overview ............................................................79

Chapter 10Command-Line Interface Operational Mode.........................................81

Chapter 11Control the CLI Environment ..........................................................................99

Chapter 12Configure the Router with the CLI ...........................................................103

Chapter 13Conf igurat ion Groups ........................................................................................149

Chapter 14Summary of CLI Environment Commands............................................167

Chapter 15Summary of CLI Configuration Mode Commands ...........................173

Chapter 16Summary of CLI Operat ional Mode Commands................................183

Part 4System ManagementChapter 17

System Management Overview .................................................................. 191

Chapter 18System Management Configurati on Statements ...........................197

Chapter 19Conf igure Basic System Management ................................................... 201

Chapter 20Configure System Authenticat ion ............................................................209

Chapter 21Configure User Access .....................................................................................215

Chapter 22Conf igure Time ......................................................................................................223

Chapter 23Conf igure System Logging ............................................................................229


5/359

Abbreviated Table of Contents v

Chapter 24Conf igure Miscellaneous System Management ..............................235

Chapter 25Summary of System ManagementConf iguration Statements..............................................................................243

Part 5Rout er Chassis

Chapter 26Router Chassis Conf igurat ion Guidel ines ..........................................279

Chapter 27Summary of Router Chassis Configuration Statements............289

Part 6Appendix

Appendix AGlossary .....................................................................................................................299

Part 7Indexes

IndexIndex .............................................................................................................................317

IndexIndex of Statements and Commands......................................................327


6/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedvi


7/359

Table of Contents vi i

Table of ContentsAbout this Manual

Objectives..........................................................................................................xxiiiAudience............................................................................................................ xxivDocument Organization..................................................................................... xxivRelated Documentation.....................................................................................xxvi

Part Organization...............................................................................................xxviUsing the Index.................................................................................................xxviiDocumentation Conventions........................................................................... xxviii

General Conventions ............................................................................... xxviiiConventions for Software Commands and Statements............................. xxviii

Documentation Feedback...................................................................................xxxHow to Request Support.....................................................................................xxx

Part 1Overview

Chapter 1Product Archit ecture ............................................................................................3

Hardware Overview................................................................................................3Product Architecture...............................................................................................4

Packet Forwarding Engine ..............................................................................5Packet Flow through the Router ...............................................................5

Routing Engine ...............................................................................................6


8/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedv i i i

Chapter 2JUNOS Software Overview .................................................................................9

Routing Engine Software Components ...................................................................9Routing Protocol Process...............................................................................10

Routing Protocols...................................................................................10Routing and Forwarding Tables..............................................................11Routing Policy .......................................................................................12

Interface Process...........................................................................................13Chassis Process.............................................................................................13SNMP and MIB II Processes...........................................................................13Management Process....................................................................................13Routing Engine Kernel...................................................................................14

Software Installation Overview.............................................................................14Tools for Accessing and Controlling the Software.................................................14Software Configuration Overview.........................................................................15

Methods of Configuring the Software ............................................................15Configuring the Software...............................................................................15Activating a Configuration.............................................................................16

Software Monitoring Tools....................................................................................16Supported Software Standards..............................................................................16

Supported Internet RFCs and Drafts..............................................................17ATM.......................................................................................................17BGP........................................................................................................17Frame Relay...........................................................................................17GRE and IP-IP Encapsulation..................................................................17IP Multicast............................................................................................17IS-IS........................................................................................................18LDP........................................................................................................18MIBs ......................................................................................................18

MPLS......................................................................................................20OSPF......................................................................................................20PPP ........................................................................................................20RIP ........................................................................................................20RSVP......................................................................................................21TCP/IP v4...............................................................................................21

Supported ISO Standards...............................................................................22IS-IS........................................................................................................22

Supported SDH and SONET Standards..........................................................22Other Supported Standards...........................................................................23

ATM.......................................................................................................23Frame Relay...........................................................................................23Ethernet.................................................................................................23T3..........................................................................................................23


9/359

Table of Contents ix

Chapter 3Complete Configuration ModeCommands and Statements ............................................................................25

Complete Configuration Mode Commands...........................................................25Complete Configuration Statement Hierarchy.......................................................26

[edit accounting-options] Hierarchy Level......................................................26[edit chassis] Hierarchy Level ........................................................................27[edit class-of-service] Hierarchy Level ...........................................................27[edit firewall] Hierarchy Level........................................................................29[edit forwarding-options] Hierarchy Level......................................................29[edit groups] Hierarchy Level.........................................................................30[edit interfaces] Hierarchy Level....................................................................30[edit policy-options] Hierarchy Level .............................................................34[edit protocols] Hierarchy Level.....................................................................35[edit routing-instances] Hierarchy Level.........................................................45

[edit routing-options] Hierarchy Level............................................................47[edit snmp] Hierarchy Level ..........................................................................49[edit system] Hierarchy Level ........................................................................50

Part 2Sof tware Instal lat ion and Upgrade

Chapter 4Installat ion Overview ..........................................................................................55

JUNOS Software Distribution ................................................................................55JUNOS Software Naming Conventions..................................................................56

Software Release Name ................................................................................56Package Names.............................................................................................57

Storage Media ......................................................................................................57Boot Devices.........................................................................................................57Boot Sequence......................................................................................................58

Chapter 5Configure the Sof tware Init ially ..................................................................59

Chapter 6Reinstall t he Sof tware .......................................................................................63

Prepare to Reinstall the JUNOS Software..............................................................63Reinstall the JUNOS Software................................................................................63Reconfigure the JUNOS Software..........................................................................64


10/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedx

Chapter 7Upgrade Sof tware Packages ........................................................................67

Upgrade All Software Packages.............................................................................68Upgrade Individual Software Packages.................................................................69

Chapter 8Upgrade to Release 5.0 or Downgrade from Release 5.0 ...........73

Part 3Command-Line Interf ace

Chapter 9Command-Line Interface Overview ............................................................79

CLI Modes.............................................................................................................79CLI Command Hierarchy......................................................................................80

Chapter 10Command-Line Interface Operational Mode.........................................81

Use the CLI...........................................................................................................82Get Help About Commands...........................................................................83

Examples: Get Help About Commands...................................................83Have the CLI Complete Commands...............................................................84

Examples: Use CLI Command Completion.............................................85CLI Messages.................................................................................................85Move around and Edit the Command Line....................................................86How Output Appears on the Screen..............................................................87

Display Output One Screen at a Time....................................................87Filter Command Output ........................................................................88

Place Command Output in a File.....................................................89Search for a String in the Output.....................................................90Compare Configuration Changes with a Prior Version.....................92Count the Number of Lines in the Output .......................................94

Display All Output at Once..............................................................94Retain the Output after the Last Screen...........................................94Display Additional Information about the Configuration ................94Filter Command Output Multiple Times..........................................97

Set the Current Date and Time.............................................................................97Display CLI Command History..............................................................................97Monitor Who Uses the CLI....................................................................................98


11/359

Table of Contents x i

Chapter 11Control the CLI Environment ..........................................................................99

Set the Terminal Type...........................................................................................99Set the Screen Length...........................................................................................99Set the Screen Width ..........................................................................................100Set the CLI Prompt..............................................................................................100Set the Idle Timeout............................................................................................100Set CLI to Prompt after a Software Upgrade........................................................100Set Command Completion..................................................................................100Display CLI Settings............................................................................................101Example: Control the CLI Environment...............................................................101

Chapter 12Configure the Router with the CLI ............................................................103

Configuration Statement Hierarchy.....................................................................104How the Configuration Is Stored ........................................................................106Enter Configuration Mode...................................................................................107

Using the Configure Command....................................................................108Using the Configure Exclusive Command ...................................................108

Configuration Mode Prompt................................................................................109Configuration Mode Banner................................................................................109Configuration Statements and Identifiers............................................................109Get Help about Configuration Mode Commands,

Statements, andIdentifiers..........................................................................111Use Command Completion in Configuration Mode......................................111

Examples: Use Command Completion in Configuration Mode.............112Get Help Based on a String in a Statement Name........................................113

Example: Get Help Based on a String Containedin a Statement Name....................................................................114

Create and Modify the Configuration..................................................................114Examples: Create and Modify the Configuration..........................................115

Move among Levels of the Hierarchy..................................................................117Move Down to a Specific Level ...................................................................117Move Back Up to Your Previous Level..........................................................118Move Up One Level .....................................................................................118Move Directly to the Top of the Hierarchy...................................................118Warning Messages When Moving Up...........................................................119

Exit Configuration Mode.....................................................................................119Display the Current Configuration.......................................................................120

Examples: Display the Current Configuration..............................................120Display Users Currently Editing the Configuration ..............................................121Remove a Statement from the Configuration......................................................122

Examples: Remove a Statement from the Configuration .............................122Copy a Statement in the Configuration...............................................................123

Example: Copy a Statement in the Configuration ........................................124Rename an Identifier..........................................................................................124

Example: Rename an Identifier...................................................................124Insert a New Identifier........................................................................................125

Examples: Insert a New Identifier................................................................125


12/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedx i i

Run an Operational Mode CLI Command from Configuration Mode...................127Example: Run an Operational Mode CLI Command

from Configuration Mode.....................................................................127Display Configuration Mode Command History..................................................128

Verify a Configuration.........................................................................................128Commit a Configuration.....................................................................................128

Commit a Configuration and Exit Configuration Mode................................129Activate a Configuration for a Limited Time................................................130

Save a Configuration to a File ............................................................................131Load a Configuration .........................................................................................131

Examples: Load a Configuration from a File................................................132Return to a Previously Committed Configuration................................................134

Example: Return to a Previously Committed Version of the Configuration..135Configuration Mode Error Messages...................................................................135Deactivate and Reactivate Statements and Identifiers in a Configuration ...........136

Examples: Deactivate and Reactivate Statements andIdentifiers in aConfiguration................................................................136

Add Comments in a Configuration......................................................................137

Examples: Include Comments in Configurations.........................................138Have Multiple Users Configure the Software.......................................................139Walk-through Example: Using the CLI to Configure the Router ..........................140

Shortcut.......................................................................................................140Longer Configuration Example....................................................................140

Additional Details about Specifying Statements and Identifiers ..........................145How to Specify Statements .........................................................................145How the CLI Performs Type Checking.........................................................147

Chapter 13Conf igurat ion Groups ........................................................................................149

Overview............................................................................................................149Inheritance Model .......................................................................................149

Configuration Groups Configuration Statements.................................................150Configuration Groups Configuration Guidelines..................................................150

Create a Configuration Group......................................................................150Apply a Configuration Group.......................................................................151

Example: Configure and Apply Configuration Groups...........................152Display Inherited Values..............................................................................153Use Wildcards .............................................................................................153

Example: Use Wildcards.......................................................................156Examples: Configuration Groups........................................................................157

Configure Sets of Statements.......................................................................157Configure Interfaces....................................................................................159

Configure Peer Entities................................................................................161Establish Regional Configurations................................................................163Select Wildcard Names................................................................................164

Summary of Configuration Group Statements....................................................165apply-groups................................................................................................165groups.........................................................................................................166


13/359

Table of Contents x i i i

Chapter 14Summary of CLI Environment Commands............................................167

set cli complete-on-space ...................................................................................167set cli idle-timeout ..............................................................................................167set cli prompt......................................................................................................168set cli restart-on-upgrade....................................................................................168set cli screen-length............................................................................................169set cli screen-width.............................................................................................169set cli terminal....................................................................................................169set date...............................................................................................................170show cli ..............................................................................................................170show cli history...................................................................................................171

Chapter 15Summary of CLI Configuration Mode Commands ...........................173

activate...............................................................................................................173annotate.............................................................................................................173commit...............................................................................................................174copy....................................................................................................................174deactivate...........................................................................................................175delete .................................................................................................................175edit .....................................................................................................................176exit .....................................................................................................................176help ....................................................................................................................176insert ..................................................................................................................177load ....................................................................................................................177quit.....................................................................................................................178rename...............................................................................................................178rollback...............................................................................................................178run......................................................................................................................179save....................................................................................................................179set.......................................................................................................................180show...................................................................................................................181status..................................................................................................................181top......................................................................................................................181up.......................................................................................................................182

Chapter 16Summary of CLI Operat ional Mode Commands................................183

clear....................................................................................................................183configure............................................................................................................183file .....................................................................................................................183monitor ..............................................................................................................184ping....................................................................................................................184| (pipe)................................................................................................................184quit.....................................................................................................................185request ...............................................................................................................185restart ................................................................................................................185


14/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedx iv

set .....................................................................................................................185show...................................................................................................................186ssh......................................................................................................................186start....................................................................................................................186

telnet..................................................................................................................186test ....................................................................................................................187traceroute ..........................................................................................................187

Part 4System Management

Chapter 17System Management Overview .................................................................. 191

How to Specify IP Addresses, Network Masks, and Prefixes...............................191How to Specify Filenames and URLs...................................................................192Directories on the Router ...................................................................................193Tracing and Logging Operations.........................................................................193Protocol Authentication .....................................................................................194User Authentication............................................................................................195

Chapter 18System Management Configurati on Statements ...........................197

Chapter 19Conf igure Basic System Management ................................................... 201

Configure the Routers Name and Addresses......................................................201Configure the Routers Name......................................................................201Map the Routers Name to IP Addresses......................................................202Configure an ISO Sysid................................................................................202Example: Configure a Routers Name, IP Address, and Sysid......................203

Configure the Routers Domain Name ...............................................................203Example: Configure the Routers Domain Name.........................................203

Configure Which Domains to Search..................................................................204Example: Configure Which Domains to Search ...........................................204

Configure a DNS Name Server............................................................................204

Example: Configure a DNS Name Server.....................................................204Configure a Backup Router .................................................................................205

Example: Configure a Backup Router ..........................................................205Configure Flash Disk Mirroring...........................................................................205Configure the System Location...........................................................................206Configure the Root Password..............................................................................206

Example: Configure the Root Password.......................................................207Compress the Current Configuration File............................................................208


15/359

Table of Contents xv

Chapter 20Configure System Authentication.............................................................209

Configure RADIUS Authentication ......................................................................209Configure Juniper NetworksSpecific RADIUS Attributes.............................210

Configure TACACS+ Authentication ..................................................................210Configure Shared User Accounts for RADIUS and TACACS+ Authentication .....211Configure the Authentication Order ...................................................................212

Example: Remove an Ordered Set from the Authentication Order ..............212Example: Insert an Order Set in the Authentication Order...........................212

Examples: Configure System Authentication ......................................................213

Chapter 21Configure User Access .....................................................................................215

Define Login Classes ..........................................................................................215Configure Access Privilege Levels ................................................................216

Example: Configure Access Privilege Levels .........................................218Deny or Allow Individual Commands..........................................................218

Example: Deny or Allow Individual Commands ...................................219Configure the Timeout Value for Idle Login Sessions ...................................220

Configure User Accounts ....................................................................................220Example: Configure User Accounts..............................................................222

Chapter 22Conf igure Time .......................................................................................................223

Set the Time Zone...............................................................................................223Examples: Set the Time Zone......................................................................223

Configure the Network Time Protocol.................................................................224Configure the NTP Boot Server ....................................................................225Configure the NTP Time Server and Time Services......................................225

Configure the Router to Operate in Client Mode...................................226Configure the Router to Operate in Symmetric Active Mode................226Configure the Router to Operate in Broadcast Mode.............................227

Configure NTP Authentication Keys ............................................................227Configure the Router to Listen for Broadcast Messages................................228Configure the Router to Listen for Multicast Messages.................................228

Chapter 23Conf igure System Logging.............................................................................229

Configure System Logging..................................................................................229Archive System Logs...........................................................................................231Override the Facility ...........................................................................................232Configure Log Message Prefixes..........................................................................232Examples: Configure System Logging.................................................................233


16/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxvi

Chapter 24Conf igure Miscellaneous System Management ..............................235

Configure Console and Auxiliary Port Properties ...............................................235Disable the Sending of Redirect Messages on the Router....................................236Configure the Source Address for Locally Generated TCP/IP Packets..................236Configure the Router or Interface to Act as a

DHCP/BOOTP RelayAgent..........................................................................237Configure System Services..................................................................................238

Configure Finger Service.............................................................................238Configure Rlogin Service .............................................................................238Configure SSH Service.................................................................................239

Configure Root Login............................................................................239Configure SSH Protocol Version...........................................................240

Configure Telnet Service .............................................................................240Configure a System Login Message.....................................................................240

Configure JUNOS Software Processes .................................................................241Disable JUNOS Software Processes .............................................................241Configure Failover to Backup Media if a Software Process Fails ..................241

Configure a Password on the Diagnostics Port....................................................242

Chapter 25Summary of System ManagementConf iguration Statements .............................................................................243

allow-commands................................................................................................243authentication.....................................................................................................244

authentication-key..............................................................................................245authentication-order ..........................................................................................245auxiliary ............................................................................................................246backup-router .....................................................................................................247boot-server.........................................................................................................247broadcast............................................................................................................248broadcast-client..................................................................................................248class...................................................................................................................249compress-configuration-files...............................................................................249console ..............................................................................................................250default-address-selection ....................................................................................250deny-commands.................................................................................................251dhcp-relay...........................................................................................................252diag-port-authentication......................................................................................253

domain-name.....................................................................................................253domain-search....................................................................................................254full-name............................................................................................................254host-name..........................................................................................................254idle-timeout........................................................................................................255location...............................................................................................................256login ...................................................................................................................257message.............................................................................................................257mirror-flash-on-disk............................................................................................258multicast-client...................................................................................................258name-server .......................................................................................................259no-redirects........................................................................................................259


17/359

Table of Contents xv i i

ntp......................................................................................................................260peer....................................................................................................................260permissions........................................................................................................261port.....................................................................................................................262

ports...................................................................................................................262processes............................................................................................................263protocol-version..................................................................................................264radius-server.......................................................................................................264retry....................................................................................................................265root-authentication.............................................................................................265root-login ............................................................................................................266secret..................................................................................................................266server .................................................................................................................267services ..............................................................................................................268single-connection................................................................................................269static-host-mapping............................................................................................269syslog..................................................................................................................270system................................................................................................................271

tacplus-server......................................................................................................272timeout...............................................................................................................272time-zone............................................................................................................273trusted-key..........................................................................................................275uid......................................................................................................................275user ...................................................................................................................276

Part 5Rout er Chassis

Chapter 26Router Chassis Conf igurat ion Guidel ines ..........................................279

Minimum Chassis Configuration.........................................................................280Configure Aggregated Devices ...........................................................................280Configure Conditions That Trigger Alarms .........................................................280

Chassis Conditions That Trigger Alarms ......................................................282Silence External Devices .............................................................................282

Configure SONET/SDH Framing .........................................................................283Configure Channelized PIC Operation ................................................................283Configure the Drop Policy for Traffic with Source-Route Constraints .................284Configure Redundancy .......................................................................................284

Configure Routing Engine Redundancy ......................................................285

Copy a Configuration File from One Routing Engine to the Other .......285Load a Package from the Other Routing Engine ..................................287Change over to the Backup Routing Engine .........................................287

Configure SSB Redundancy.........................................................................288Configure Packet Scheduling ..............................................................................288


18/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxv i i i

Chapter 27Summary of Router Chassis Configuration Statements ............289

aggregated-devices.............................................................................................289alarm .................................................................................................................290chassis ...............................................................................................................290device-count.......................................................................................................291ethernet..............................................................................................................291failover ...............................................................................................................291fpc .....................................................................................................................292framing ..............................................................................................................292keepalive-time....................................................................................................292no-concatenate ..................................................................................................293packet-scheduling ..............................................................................................293pic .....................................................................................................................294redundancy .......................................................................................................294

routing-engine ...................................................................................................295sonet ..................................................................................................................295source-route .......................................................................................................296ssb .....................................................................................................................296

Part 6Appendix

Appendix AGlossary .....................................................................................................................299

Part 7Indexes

IndexIndex ............................................................................................................................317

IndexIndex of Statements and Commands .....................................................327


19/359

List of Figures x ix

List of FiguresList of Figures

Figure 1: Product Architecture.............................................................................5Figure 2: CLI Command Hierarchy Example......................................................80Figure 3: Configuration Mode Hierarchy of Statements...................................105Figure 4: Commands for Storing and Modifying the Router Configuration.......106

Figure 5: Confirm a Configuration ...................................................................130


20/359

List of Figures

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxx


21/359

List of Tables x x i

List of TablesList of Tables

Table 1: Release 5.0 Device Names.............................................................57Table 2: CLI Keyboard Sequences ...................................................................86Table 3: ---More--- Prompt Keyboard Sequences ..............................................87Table 4: Common Regular Expression Operators.............................................90

Table 5: Configuration Mode Top-Level Statements .......................................110Table 6: CLI Configuration Input Types .........................................................148Table 7: Juniper NetworksSpecific RADIUS Attributes ..................................210Table 8: Login Class Permission Bits...............................................................216Table 9: Default System Login Classes ...........................................................217Table 10: Common Regular Expression Operators...........................................219Table 11: System Logging Facilities..................................................................230Table 12: System Logging Severity Levels........................................................230Table 13: System Logging Facilities That You Can Specify

on the facility-override Statement.....................................................232Table 14: Configurable PIC Alarm Conditions ..................................................281Table 15: Chassis Component Alarm Conditions .............................................282


22/359

List of Tables

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxx i i


23/359

About this Manual xx i i i

About this Manual

This chapter provides a high-level overview of the JUNOS Internet Software Confi gurati onGuide: Getti ng Star ted:

! Objectives on pagexxiii

! Audience on pagexxiv

! Document Organization on pagexxiv

! Related Documentation on pagexxvi

! Part Organization on pagexxvi

! Using the Index on pagexxvii

! Documentation Conventions on pagexxviii

! Documentation Feedback on pagexxx

! How to Request Support on pagexxx

Objectives

This manual provides an overview of the JUNOS Internet software and describes how toinstall and upgrade the software. This manual also describes how to configure systemmanagement functions and how to configure the chassis, including user accounts,passwords, and redundancy.

This manual documents Release 5.0 of the JUNOS Internet software. To obtain additionalinformation about the JUNOS softwareeither corrections to information in this manual orinformation that might have been omitted from this manualrefer to the software release

notes.

To obtain the most current version of this manual and the most current version of thesoftware release notes, refer to the product documentation page on the Juniper NetworksWeb site, which is located at http:/ / www.juniper.net/ .

To order printed copies of this manual or to order a documentation CD-ROM, which containsthis manual, please contact your sales representative.


24/359

Audience

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxx i v

Audience

This manual is designed for network administrators who are configuring a Juniper Networksrouter. It assumes that you have a broad understanding of networks in general, the Internetin particular, networking principles, and network configuration. This manual assumes thatyou are familiar with one or more of the following Internet routing protocols: Border GatewayProtocol (BGP), Routing Information Protocol (RIP), Intermediate System-to-IntermediateSystem (IS-IS), Open Shortest Path First (OSPF), Internet Control Message Protocol (ICMP)router discovery, Internet Group Management Protocol (IGMP), Distance Vector MulticastRouting Protocol (DVMRP), Protocol-Independent Multicast (PIM), Multiprotocol LabelSwitching (MPLS), Resource Reservation Protocol (RSVP), and Simple Network ManagementProtocol (SNMP).

Document Organizat ion

This manual is divided into several parts. Each part describes a major functional area of the

JUNOS software, and the individual chapters within a part describe the software componentsof that functional area.

This manual contains the following parts and chapters:

! Part 1, Overview, provides an overview of the hardware and software components ofthe router, describes the user command-line interface, and provides the procedures forinstalling and upgrading the software.

! Chapter 1, Product Architecture, discusses the router hardware and productarchitecture.

! Chapter 2, JUNOS Software Overview, provides an overview of the JUNOSsoftware features and lists the software standards that the JUNOS software supports.

! Chapter 3, Complete Configuration Mode CommandsandStatements, lists all thecommands available in configuration mode. It also lists the complete configurationstatement hierarchy, showing all possible configuration statements and levels in theconfiguration hierarchy.

! Part 2, Software Installation and Upgrade, describes how to install, reinstall, andupgrade the JUNOS software on a router.

! Chapter 4, Installation Overview, provides background information for theinstallation process.

! Chapter5,Configure the Software Initially, describes how to initially configure theJUNOS software.

! Chapter 6, Reinstall the Software, describes how to reinstall the JUNOS software.

! Chapter 7, Upgrade Software Packages, describes how to upgrade softwarepackages.

! Chapter8, Upgrade to Release 5.0 or Downgrade from Release 5.0 describes howto upgrade to Release 5.0 or downgrade from Release to 5.0.


25/359

About this Manual xxv

Document Organization

! Part3,Command-Line Interface, describes the interface that you use to configure andmonitor the JUNOS software. The command-line interface (CLI) is the interface you usewhenever you access the router.

! Chapter 9, Command-Line Interface Overview, provides an overview of thefunctions of the CLI.

! Chapter 10,Command-Line Interface Operational Mode, describes theoperational mode of the CLI.

! Chapter 12, Configure the Router with the CLI, describes the configuration modeof the CLI.

! Chapter 13, Configuration Groups, describes configuration groups.

! Chapter 14, Summary of CLI Environment Commands, explains each of the CLIenvironment commands.

! Chapter 11,Control the CLI Environment, describes how to configure the CLIenvironment.

! Chapter 15, Summary of CLI Configuration Mode Commands, explains each ofthe CLI configuration mode commands.

! Chapter 16, Summary of CLI Operational Mode Commands, explains each of theCLI operational mode commands.

! Part 4, System Management, describes how to manage the router using the CLI.

! Chapter17, System Management Overview, provides background information forconfiguring system management functions.

! Chapter 18, System Management Configuration Statements, lists all thestatements available at the [edit system] hierarchy level.

! Chapter 19, Configure Basic System Management, describes how to configurebasic system management functions.

! Chapter20, Configure System Authentication, describes how to configure RADIUSand TACACS+ authentication.

! Chapter 21,Configure User Access, describes how to configure user access.

! Chapter22,Configure Time, describes how to set the time zone and configure theNetwork Time Protocol, which provides mechanisms to synchronize time and

coordinate time distribution in a large, diverse network.

! Chapter 23, Configure System Logging, describes how to control system loggingand how much information the system should log.

! Chapter 24, Configure Miscellaneous System Management, describes how toconfigure various system management functions, such as console and auxiliary portproperties and the source address for locally generated TCP/IP packets.

! Chapter 25, Summary of System Management Configuration Statements,explains each of the system management configuration statements.


26/359

Related Documentati on

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxxv i

! Part 5, Router Chassis, covers the configuration of router chassis properties.

! Chapter 26, Router Chassis Configuration Guidelines, describes how to configurerouter chassis properties.

! Chapter 27, Summary of Router Chassis Configuration Statements, provides adetailed listing of all configuration statements used in router chassis configuration.

This manual also contains a glossary and an index.

Related Documentation

The following additional documentation describes the JUNOS Internet software:

! JUNOS Internet Software Conf igurat ion Guide: Inter faces, Class of Service, and

FirewallsProvides an overview of the interface, class-of-service, and firewall functionsof the JUNOS Internet software and describes how to configure the interfaces on therouter.

! JUNOS Internet Software Confi gurati on Guide: MPLS Appli cationsProvides an overviewof traffic engineering concepts and describes how to configure traffic engineeringprotocols.

! JUNOS Internet Software Confi gurati on Guide: Mul ti castProvides an overview ofmulticast concepts and describes how to configure multicast routing protocols.

! JUNOS Internet Software Confi guration Guide: Networ k ManagementProvides anoverview of network management concepts and describes how to configure variousnetwork management features, such as SNMP, accounting options, and cflowd.

!

JUNOS Internet Software Confi gurati on Guide: Routing and Routing ProtocolsProvides anoverview of routing concepts and describes how to configure routing, routing policy, andunicast routing protocols.

! JUNOS Internet Software Operati onal Mode Command ReferenceDescribes the JUNOSInternet software operational mode commands you use to monitor and troubleshootJuniper Networks routers.

! JUNOScri pt API GuideDescribes how to use the JUNOScript API to monitor andconfigure Juniper Networks routers.

! JUNOScri pt API ReferenceProvides a reference page for each tag in the JUNOScript API.

Part Organizat ion

The parts in this manual generally include the following information:

! OverviewProvides background information about and discusses concepts related tothe software component described in that part of the book.

! Configuration statementsLists all the configuration statements available to configurethe software component. This list is designed to provide an overview of theconfiguration statement hierarchy for that software component.


27/359

About this Manual xxv i i

Using the Index

! Configuration guidelinesDescribes how to configure all the features of the softwarecomponent. The first section of the configuration guidelines describes the minimumconfiguration for that component, listing the configuration statements you must includeto enable the software component on the router with only the bare minimum

functionality. The remaining sections in the configuration guidelines are generallyarranged so that the most common features are near the beginning.

! Statement summaryA reference that lists all configuration statements alphabeticallyand explains each statement and all its options. The explanation of each configurationstatement consists of the following parts:

! SyntaxDescribes the full syntax of the configuration statement. For anexplanation of how to read the syntax statements, see DocumentationConventions on pagexxviii.

! Hierarchy levelTells where in the configuration statement hierarchy you includethe statement.

! DescriptionDescribes the function of the configuration statement.

! OptionsDescribes the configuration statements options, if there are any. Foroptions with numeric values, the allowed range and default value, if any, are listed.For multiple options, if one option is the default, that fact is stated. If a configurationstatement is at the top of a hierarchy of options that are other configurationstatements, these options are generally explained separately in the statementsummary section.

! Usage guidelinesPoints to the section or sections in the configuration guidelinessection that describe how to use the configuration statement.

! Required privilege levelIndicates the permissions that the user must have to viewor modify the statement in the router configuration. For an explanation of thepermissions, see the appropriate chapters in this manual.

! See alsoIndicates other configuration statements that might provide related orsimilar functionality.

Using the Index

The index entry for each configuration statement always contains at least two entries. Thefirst, with a bold page number on the same line as the statement name, references thestatement summary section. The second entry, usage guidelines, references the section ina configuration guidelines chapter that describes how to use the statement.


28/359

Documentati on Conventi ons

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxxv i i i

Documentation Conventions

Gener al Convent i onsThis manual uses the following text conventions:

! Statements, commands, filenames, directory names, IP addresses, and configurationhierarchy levels are shown in a sans serif font. In the following example, stubis astatement name and [edit protocols ospf area area-id] is a configuration hierarchy level:

To configure a stub area, include thestubstatement at the [edit protocols ospf areaarea-id]hierarchy level:

! In examples, text that you type literally is shown in bold. In the following example, youtype the word show:

[edit protocols ospf area area-id]cli#show

stub

! Examples of command output are generally shown in a fixed-width font to preserve thecolumn alignment. For example:

> show interfaces terse

Interface Admin Link Proto Local Remote

at-1/3/0 up up

at-1/3/0.0 up up inet 1.0.0.1 --> 1.0.0.2

iso

fxp0 up up

fxp0.0 up up inet 192.168.5.59/24

Convent i ons for Sof t war e Comman ds and Sta t ement s

When describing the JUNOS software, this manual uses the following type and presentationconventions:

! Statement or command names that you type literally are shown nonitalicized. In thefollowing example, the statement name is area:

You configure all these routers by including the followingareastatement at the [editprotocols ospf]hierarchy level:

! Options, which are variable terms for which you substitute appropriate values, areshown in italics. In the following example, area-idis an option. When you type the area

statement, you substitute a value for area-id.

area area-id;

! Optional portions of a configuration statement are enclosed in angle brackets. In thefollowing example, the default-metricmetric portion of the statement is optional:

stub ;


29/359

About this Manual xx i x

Documentat ion Conventions

! For text strings separated by a pipe ( | ), you must specify either string1or string2, butyou cannot specify both or neither of them. Parentheses are sometimes used to groupthe strings.

string1| string2(string1 | string2)

In the following example, you must specify either broadcastor multicast, but youcannot specify both:

broadcast | multicast

! For some statements, you can specify a set of values. The set must be enclosed in squarebrackets. For example:

community namemembers[community-id]

! The configuration examples in this manual are generally formatted in the way that they

appear when you issue a showcommand. This format includes braces ({}) andsemicolons. When you type configuration statements in the CLI, you do not type thebraces and semicolons. However, when you type configuration statements in an ASCIIfile, you must include the braces and semicolons. For example:

[edit]cli#set routing-options static route default nexthopaddressretain

[edit]

cli#show

routing-options {static {

route default {nexthop address;

retain;

}

}}

! Comments in the configuration examples are shown either preceding the lines that thecomments apply to, or more often, they appear on the same line. When commentsappear on the same line, they are preceded by a pound sign (#) to indicate where thecomment starts. In an actual configuration, comments can only precede a line; theycannot be on the same line as a configuration statement. For example:

protocols {

mpls {

interface (interface-name| all); # Required to enable MPLS on the interface

}

rsvp { # Required for dynamic MPLS only

interface interface-name;

}}

! The general syntax descriptions provide no indication of the number of times you canspecify a statement, option, or keyword. This information is provided in the text of thestatement summary.


30/359

Documentat ion Feedback

JUNOS 5.0 Internet Software Configuration Guide: Getting Startedxxx

Documentation Feedback

We are always interested in hearing from our customers. Please let us know what you likeand do not like about the Juniper Networks documentation, and let us know of anysuggestions you have for improving the documentation. Also, let us know if you find anymistakes in the documentation. Send your feedback to [email protected].

How t o Request Support

For technical support, contact Juniper Networks [email protected], or at 1-888-314-JTAC(within the United States) or 408-745-2121 (from outside the United States).


31/359

1

Part 1Overview

! Product Architecture on page3

!JUNOS Software Overview on page 9

!

Complete Configuration Mode CommandsandStatements on page 25


32/359

JUNOS 5.0 Internet Software Configuration Guide: Getting Started

2


33/359

Product Architecture

3

Chapter 1Product Architecture

The JUNOS Internet software provides IP routing protocol softwareas well as software forinterface, network, and chassis managementspecifically designed for the large productionnetworks typically supported by Internet service providers (ISPs). The JUNOS Internetsoftware runs on all Juniper Networks routers. For more detailed information about hardware

features, see the hardware installation guide for your router model.

This chapter provides an overview of the router hardware and then discusses therelationships between the hardware and the software:

! Hardware Overview on page3

! Product Architecture on page4

Hardware Overview

The routers consist of the following major hardware components:

! Sheet metal of the chassis.

! Power supplies (AC or DC).

! Impeller trays.

! Fan assemblies.

! Routing Engine.

! System Control Board (SCB), System and Switch Board (SSB), Switching and ForwardingModule (SFM), or Forwarding Engine Board (FEB).

! Flexible PIC Concentrators (FPCs), each populated by up to four Physical Interface Cards

(PICs) for various interface types, including SONET/SDH OC-192, OC-48, OC-12, andOC-3, ATM OC-12 and OC-3, DS3 (T3), E3, DS1 (T1), E1, Gigabit Ethernet, Fast Ethernet,and Channelized OC-12. Some PICs do not require an FPC.


34/359



4

A fundamental architectural feature is the use of shared memory as the interconnectionbetween slots. Specifically, when a packet arrives on an input interface, it is placed into abuffer where it stays until it is sent out of the output interface. This architecture has severalconsequences. First, because the complexity of the system is partly due to the number of

buffering stages, the architecture is relatively clean and simple. Second, the centralized buffercan support buffering for each interface that is equal to the bandwidth times the delay andtherefore can meet TCPs buffering needs in order to maximize throughput. Finally, theshared memory architecture supports multicast traffic at nearly the theoretical maximumefficiency.

Product Archit ecture

The router is composed of two components (see Figure 1):

! Packet Forwarding EngineForwards packets through the router. The Packet ForwardingEngine is a high-performance switch that is capable of forwarding 40 million packets persecond for any packet size.

! Routing EnginePerforms routing updates and system management. The RoutingEngine consists of routing-protocol software processes running inside a protectedmemory environment on a general-purpose computer platform. The Routing Engine hasa direct 100-Mbps connection to the Packet Forwarding Engine.

Because this architecture separates control operations such as routing updates and systemmanagement from packet forwarding, the router can deliver superior performance andhighly reliable Internet operation.


35/359



5

Figure 1: Product Architect ure

Packet Forw ard i ng Engine

The Packet Forwarding Engine forwards packets between input and output interfaces.

Packe t Flow t h r ough the Rout e r

The function of the Packet Forwarding Engine can be understood by following the flow of apacket through the routerfirst into a PIC, then through the switching fabric, and finally outanother PIC for transmission on a network link.

When a packet arrives on an input interface, a media-specific PIC performs all themedia-specific details such as framing and checksum verification.

The PIC then passes a serial stream of bits into the FPC, which parses and appropriatelydecapsulates the packet. The FPC also breaks the packet into 64-byte memory blocks andpasses each memory block to the Distributed Buffer Manager ASIC. The Distributed BufferManager ASIC then writes them into packet buffer memory, which is distributed evenlyacross all the FPCs installed in the router.

1410

SNMP

User

Kernel

Microkernel

Routingtables

Forwardingtable

Forwardingtable

Interfaceprocess

Command-lineinterface (CLI)

Chassisprocess

Chassisprocess

DistributedASICs

Interfaceprocess

JUNOS Internet Software

Routing

Engine

Embedded Microkernel

PacketForwardingEngine

Routingprotocol process


36/359



6

In parallel with the buffering, the Distributed Buffer Manager ASIC extracts the informationfrom the packet needed for route lookup and passes that information to the InternetProcessor ASIC, which performs a lookup in its full forwarding table and finds the outgoinginterface and the specific next hop. The forwarding table can forward all unicast packets that

do not have options and multicast packets that have been previously cached. Unicast packetswith options and noncached multicast packets are sent to the Routing Engine for resolution.

After the Internet Processor ASIC has determined the next hop, it passes the results of thelookup to a second Distributed Buffer Manager ASIC, which in turn passes it to the outgoinginterface. (Note that there could be multiple outgoing interfaces in the case of multicast.)

It is at this stage that a pointer to the packet is queued, not the packet itself. Each output porthas four queues, each of which has a configured share of the link bandwidth. Several factorscan account for queuing order, including the value of the precedence bits, utilization of theinput interface, destination address, and RED and WRED algorithms. If the outgoing interfacedecides to queue the packet for transmission, when the packet reaches the front of the queueand is ready for transmission, the memory blocks are read from packet buffer memory. Thenthe packet is reassembled and passed to the media-specific PIC for transmission on the line.

Rout in g Engin e

The Routing Engine handles all the routing protocol processes and other software processesthat control the routers interfaces, a few of the chassis components, system management,and user access to the router. These routing and software processes run on top of a kernelthat interacts with the Packet Forwarding Engine.

The Routing Engine has these features:

! Process routing protocol packetsAll routing protocol packets from the network aredirected to the Routing Engine, and therefore do not delay the Packet Forwarding Engine

unnecessarily.

! Software modularityBy dividing software functions into separate processes, a failure ofone process has little or no effect on the other software processes.

! In-depth Internet functionalityEach routing protocol is implemented with a completeset of Internet features and provides full flexibility for advertising, filtering, andmodifying routes. Routing policies are set according to route parameters, such as prefix,prefix lengths, and BGP attributes.

! ScalabilityThe JUNOS routing tables are designed to hold all the routes in current andnear-future networks. Additionally, the JUNOS software can efficiently support largenumbers of interfaces and virtual circuits.

!Management interfacesSystem management is possible with a command-lineinterface (CLI), a craft interface, and SNMP.


37/359



7

! Storage and change managementConfiguration files, system images, and microcodecan be held and maintained in one primary and two secondary storage systems,permitting local or remote upgrades.

! Monitoring efficiency and flexibilityAlarms can be generated and packets can becounted without adversely affecting packet forwarding performance.

The Routing Engine constructs and maintains one or more routing tables. From the routingtables, the Routing Engine derives a table of active routes, called the forwarding table, whichis then copied into the Packet Forwarding Engine. The forwarding table in the PacketForwarding Engine can be updated without interrupting the routers forwarding.


38/359



8


39/359

JUNOS Software Overview

9

Chapter 2JUNOS Software Overview

The JUNOS Internet software runs on the routers Routing Engine. It consists of softwareprocesses that support Internet routing protocols, control the routers interfaces and therouter chassis itself, and allow router system management. All these processes run on top ofa kernel that enables communication among all the processes and has a direct link to the

Packet Forwarding Engine software. You use the JUNOS software to configure the routingprotocols that should run on the router and to configure properties of the routers interfaces.Afterward, you use the JUNOS software to monitor the router and to troubleshoot protocoland network connectivity problems. For more information about monitoring the router andtroubleshooting problems, see the JUNOS Internet Software Operat ional Mode CommandReference.

This chapter discusses the following topics:

! Routing Engine Software Components on page9

! Software Installation Overview on page 14

! Tools for Accessing and Controlling the Software on page14

! Software Configuration Overview on page15

! Software Monitoring Tools on page16

! Supported Software Standards on page16

Rout ing Engine Soft ware Components

The Routing Engine software consists of several software processes that control routerfunctionality and a kernel that provides the communication among all the processes (seeFigure 1 on page 5). This section describes the Routing Engine components:

! Routing Protocol Process on page10

! Interface Process on page13

! Chassis Process on page 13

! SNMP and MIB II Processes on page13

! Management Process on page13

! Routing Engine Kernel on page14


40/359

Routing Engine Software Components


10

Rout i ng Pr o toco l Pr ocess

The routing protocol process controls the routing protocols that run on the router. It starts allconfigured routing protocols and handles all routing messages. It maintains one or morerouting tables, which consolidate the routing information learned from all routing protocolsinto common tables. From this routing information, the routing protocol process determinesthe active routes to network destinations and installs these routes into the Routing Enginesforwarding table. Finally, it implements routing policy, which allows you to control the routinginformation that is transferred between the routing protocols and the routing table. Usingrouting policy, you can filter routing information so that only some of it is transferred, andyou also can set properties associated with the routes.

Rout i ng Pr o tocols

The JUNOS software implements full IP routing functionality, providing support for IPVersion 4 (IPv4). The routing protocols are fully interoperable with existing IP routingprotocols, and they have been developed to provide the scale and control necessary for theInternet core.

The software provides the following routing and MPLS applications protocols:

! Unicast routing protocols

! IS-ISIntermediate System-to-Intermediate System is a link-state interior gatewayprotocol (IGP) for IP networks that uses the shortest-path-first (SPF) algorithm,which also is referred to as the Dijkstra algorithm, to determine routes. The JUNOSIS-IS software is a new and complete implementation of the protocol, addressingissues of scale, convergence, and resilience.

! OSPFOpen Shortest Path First, Version 2, is an IGP that was developed for IP

networks by the Internet Engineering Task Force (IETF). OSPF is a link-state protocolthat makes routing decisions based on the SPF algorithm. The JUNOS OSPFsoftware is a new and complete implementation of the protocol, addressing issuesof scale, convergence, and resilience.

! RIPRouting Information Protocol, Version 2, is an IGP for IP networks based onthe Bellman-Ford algorithm. RIP is a distance-vector protocol. RIP dynamicallyroutes packets between a subscriber and a service provider without the subscriberhaving to configure BGP or to participate in the service providers IGP discoveryprocess.

! ICMPInternet Control Message Protocol router discovery allows

Documents

Swconfig50 Getting Started