Skip to main content

From IOS to Junos - Day 3

Once I have configure everything I am going to wipe the lab and start again seeing if I can clean up some of the mess, but I won't post line by line here, I will just post the final configs.

Notes from the day


 
OSPF Today.

set host name and domain name to all ospf routers
set system host-name
set system root-authentication plain-text-password

apply interface configuration to all ospf routers

now do ospf???

I haven't looked at a book yet so doing this by feel
Junos2
configure protocols
set ospf area 0 interface em1

Junos3
edit protocol interface em0

Junos 3 immediately formed a neighbot with Junos 2

do the same for 4,6 and 7

ok a quick peak at a book and look like I can just add the intefaces into the area

edit protocols
set ospf area 0 interface lo0.10 passive

can see all loopback at junos 3

*** redist into rip

root@Junos2>

http://forums.juniper.net/t5/Routing/redistribute-RIP-routes-to-OSPF/td-p/22294

root@Junos2> configure
Entering configuration mode

[edit]
root@Junos2# edit policy-options

[edit policy-options]
root@Junos2# set policy-statement rip->ospf term 1 from protocol rip

[edit policy-options]
root@Junos2# set policy-statement rip->ospf term 1 then accept

[edit policy-options]
root@Junos2# set policy-statement rip->ospf term 2 then reject

[edit policy-options]
root@Junos2# commit
commit complete

[edit policy-options]
root@Junos2# set policy-statement ospf->rip term 1 from protocol ospf

[edit policy-options]
root@Junos2# set policy-statement ospf->rip term 1 then accept

[edit policy-options]
root@Junos2# set policy-statement ospf->rip term 2 then reject

[edit policy-options]
root@Junos2# commit
commit complete

[edit policy-options]
root@Junos2# top

[edit]
root@Junos2# edit protocols ospf

[edit protocols ospf]
root@Junos2# set export rip->ospf

[edit protocols ospf]
root@Junos2# up

[edit protocols]
root@Junos2# edit rip

[edit protocols]
root@Junos2# commit
commit complete

[edit]
root@Junos2# exit
Exiting configuration mode

 
protocols {
ospf {
export rip->ospf;
area 0.0.0.0 {
interface em1.0;
interface lo0.10 {
passive;
}
}
}
rip {
send multicast;
receive version-2;
group 1 {
export [ advertise-rip-routes ospf->rip ];
neighbor em0.0;
neighbor lo0.10;
}
}
}
policy-options {
policy-statement advertise-rip-routes {
term 1 {
from protocol direct;
then accept;
}
}
policy-statement ospf->rip {
term 1 {
from protocol ospf;
then accept;
}
term 2 {
then reject;
}
}
policy-statement rip->ospf {
term 1 {
from protocol rip;
then accept;
}
term 2 {
then reject;
}
}
}

root@Junos2>

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\JohnMcManus>ping 10.254.200.6

Pinging 10.254.200.6 with 32 bytes of data:
Reply from 10.254.200.6: bytes=32 time=2ms TTL=62
Reply from 10.254.200.6: bytes=32 time=2ms TTL=62

Ping statistics for 10.254.200.6:
Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 2ms, Maximum = 2ms, Average = 2ms
Control-C

C:\Users\JohnMcManus>

I can ping from 192.168.1.0/24 network

What I achieved


Got OSPF up and running

Rush through redistribution (export) between protocols

Getting smoother with configuring interface ip addressing

 

Noteworth thoughts


Like the way OSPF is assigned by Interface not a silly network statement. To be fair you can do that on IOS but being old school I often still do it the old way.

 

Finally - Just had a fight with word press, having trouble pasting show route output, no more editing just publish raw.

 

Comments

Popular posts from this blog

ASR1006 Dual Route Processors Password Recovery - Tip

I recently ran into an issue when trying to perform dual route processors password recovery on a Cisco  ASR1006
Problem
After breaking into rommon mode and using confreg to ignore the startup configuration, during the rest the ASR1006 loaded the startup configuration!!!!!!!!
Solution
So quick and simple, I pulled one of the RP and preformed password recovery running on a single RP. All went according to the Cisco documentation

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/asr1_hwc.html#wp1045971



After the system running on a single RP was recovered and fully booted I waiting for 5 minutes just to be sure; then I inserted the second RP and allowed everything to sync up.



All was well again :) phew



Note: The system was previously fully functioning with dual RPs; a configuration error was made during Tacacs+ configuration which resulted in lockout.


Summary
I hit an issue recovering and ASR with dual RPs, so rather that spending hour researching, I decided very quickly to go …

Where are all the AAA and PKI solutions gone for Dot1x

More Question than answers
(This series will be based on an enterprise with >20,000 dot1x devices)

I have been looking into dot1x authentication for Wired and Wireless devices based on device identity using x.509 Certificates. While I understand PKI, AAA, PEAP and sorts I had never really had the opertunity to bring these technologies together. I quickly found out that despite this stuff being around for years,  it was difficult to answer the following questions:

Which PKI solution should I use?
Which AAA solution should I use?
How to setup the PKI solution?
Does the PKI server need to be part of AD?
What if the clients are not in AD e.g. Wireless Tablets?
How do I issue certificates for devices?
How to configure the devices (wired and wireless)?
What AAA server do I use?
How do configure the rules and policies and identify clients?


What are the answers?
I am going to kick off a series here at networking-guru.net that tries to address the question above; I have limited time but hopefully I can …

Dell Latitude D830 SSD Upgrade

Slow Laptop Syndrome
I have a LATITUDE D830 : INTEL CORE 2 DUO T7500 4GB Ram from 2008, I did get a fairly high specification at the time, so it has always had pretty decent performance. However I haven't been using it for a while and when I did it seemed slow compared to my Core 5i desktop computer. (I use Windows 7 ultimate with the latest updates)

Laptop for Work
Now I might be doing a fair bit of travelling to customer sites in the near future and the last thing I want is a poorly performing Laptop, so I decide to ditch all the crap I had on it like iTunes, movies, miscellaneous software and cut back to a basic "work" PC. After all I do have iPhone, iPad and new kindle (soon) for all my multi media needs.

I purchased a "Corsair 120GB Force 3 SSD 2.5" SATA-III 6Gb/s Read = 550MB/s, Write = 510MB/s" from ebuyer.com. Now I am guessing that SATA-II rather that SATA-III on the system board, but the price difference between SATA-II and SATA-III was nothing …