Skip to main content

From IOS to Junos – Day 5

Notes from the day


*** BGP into OSPF

I forgot you need to export from a protocol into the next protocol.

root@Junos4# edit protocols ospf

 

[edit protocols ospf]

root@Junos4# delete import BGPtoOSPF

[edit protocols ospf]

root@Junos4# set export BGPtoOSPF

 

[edit protocols ospf]

root@Junos4# commit

commit complete

 

**** Before

root@Junos2> show route

 

inet.0: 13 destinations, 13 routes (13 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

10.254.200.1/32    *[RIP/100] 00:25:02, metric 2, tag 0

> to 10.254.254.1 via em0.0

10.254.200.2/32    *[Direct/0] 00:25:24

> via lo0.10

10.254.200.3/32    *[OSPF/10] 00:23:59, metric 1

> to 172.31.1.3 via em1.0

10.254.200.4/32    *[OSPF/10] 00:23:59, metric 1

> to 172.31.1.4 via em1.0

10.254.200.6/32    *[OSPF/10] 00:23:59, metric 1

> to 172.31.1.5 via em1.0

10.254.200.7/32    *[OSPF/10] 00:23:59, metric 1

> to 172.31.1.2 via em1.0

10.254.254.0/30    *[Direct/0] 00:25:24

> via em0.0

10.254.254.2/32    *[Local/0] 00:25:24

Local via em0.0

172.31.1.0/24      *[Direct/0] 00:25:24

> via em1.0

172.31.1.1/32      *[Local/0] 00:25:24

Local via em1.0

192.168.1.0/24     *[RIP/100] 00:25:02, metric 2, tag 0

> to 10.254.254.1 via em0.0

224.0.0.5/32       *[OSPF/10] 00:25:25, metric 1

MultiRecv

224.0.0.9/32       *[RIP/100] 00:25:25, metric 1

MultiRecv

 

******After

 

 

root@Junos2> show route

 

inet.0: 15 destinations, 15 routes (15 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

 

10.254.200.1/32    *[RIP/100] 00:26:56, metric 2, tag 0

> to 10.254.254.1 via em0.0

10.254.200.2/32    *[Direct/0] 00:27:18

> via lo0.10

10.254.200.3/32    *[OSPF/10] 00:25:53, metric 1

> to 172.31.1.3 via em1.0

10.254.200.4/32    *[OSPF/10] 00:25:53, metric 1

> to 172.31.1.4 via em1.0

10.254.200.5/32    *[OSPF/150] 00:00:07, metric 0, tag 0

> to 172.31.1.4 via em1.0

10.254.200.6/32    *[OSPF/10] 00:25:53, metric 1

> to 172.31.1.5 via em1.0

10.254.200.7/32    *[OSPF/10] 00:25:53, metric 1

> to 172.31.1.2 via em1.0

10.254.254.0/30    *[Direct/0] 00:27:18

> via em0.0

10.254.254.2/32    *[Local/0] 00:27:18

Local via em0.0

172.31.1.0/24      *[Direct/0] 00:27:18

> via em1.0

172.31.1.1/32      *[Local/0] 00:27:18

Local via em1.0

192.168.1.0/24     *[RIP/100] 00:26:56, metric 2, tag 0

> to 10.254.254.1 via em0.0

192.168.99.0/24    *[OSPF/150] 00:00:07, metric 0, tag 0

> to 172.31.1.4 via em1.0

224.0.0.5/32       *[OSPF/10] 00:27:19, metric 1

MultiRecv

224.0.0.9/32       *[RIP/100] 00:27:19, metric 1

MultiRecv

 

 

root@Junos6> configure

Entering configuration mode

[edit interfaces em1]

root@Junos6# edit unit 0 family inet address 10.99.10.2/24 vrrp-group 99

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6# set virtual-address 10.99.10.1

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6# set priority 110

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6# set authentication-type simple

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6# set authentication-key junosiscool

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6# commit

commit complete

[edit interfaces em1 unit 0 family inet address 10.99.10.2/24 vrrp-group 99]

root@Junos6#

root@Junos7# edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99

[edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99]

root@Junos7# set virtual-address 10.99.10.1

[edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99]

root@Junos7# set priority 100

[edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99]

root@Junos7# set authentication-type simple

[edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99]

root@Junos7# set authentication-key junosiscool

[edit interfaces em1 unit 0 family inet address 10.99.10.3/24 vrrp-group 99]

root@Junos7# commit

commit complete

root@Junos6> show vrrp

 

VRRP is not running

did a bit of googleing - VRRP does not run in Olive -- oh well

 

"http://knol.google.com/k/juniper-hacks/junos-olive-limitations-and-supported/1xqkuq3r2h459/32#"

root@Junos2>

 

VRRP

Tried to SSH to 6 and 7  forgot to enable ssh

 

What I Achieved

 

  • Got BGP into OSPF

  • VRRP Configuration to discover will not run in OLIVE - oh well


 

 

Noteworth Thoughts

 

 

  • BGP into OSPF was easier than I thought.

  • Remember export from a protocol into the new routing protocol under the protocol you want to receive the routes.


 

 

 

I will reset all configuration back to factory default then go through the process again.

 

 

 

I did take the "JN0-101 JNCIA-JUNOS Practice Test" and got a passing score of 67%, with the following weak area

 

  • vlan tagging

  • ping command

  • storage space

  • issu upgrade

  • static routes

  • multiple next hop preference

  • cos


 

So hopefully after the weekend I should be getting much higher and ready for JNCIA-Junos by the end of next week.

 

 

 

 

 


 



 

Comments

Popular posts from this blog

ASR1006 Dual Route Processors Password Recovery - Tip

I recently ran into an issue when trying to perform dual route processors password recovery on a Cisco  ASR1006
Problem
After breaking into rommon mode and using confreg to ignore the startup configuration, during the rest the ASR1006 loaded the startup configuration!!!!!!!!
Solution
So quick and simple, I pulled one of the RP and preformed password recovery running on a single RP. All went according to the Cisco documentation

http://www.cisco.com/en/US/docs/routers/asr1000/install/guide/routers/asr1_hwc.html#wp1045971



After the system running on a single RP was recovered and fully booted I waiting for 5 minutes just to be sure; then I inserted the second RP and allowed everything to sync up.



All was well again :) phew



Note: The system was previously fully functioning with dual RPs; a configuration error was made during Tacacs+ configuration which resulted in lockout.


Summary
I hit an issue recovering and ASR with dual RPs, so rather that spending hour researching, I decided very quickly to go …

Where are all the AAA and PKI solutions gone for Dot1x

More Question than answers
(This series will be based on an enterprise with >20,000 dot1x devices)

I have been looking into dot1x authentication for Wired and Wireless devices based on device identity using x.509 Certificates. While I understand PKI, AAA, PEAP and sorts I had never really had the opertunity to bring these technologies together. I quickly found out that despite this stuff being around for years,  it was difficult to answer the following questions:

Which PKI solution should I use?
Which AAA solution should I use?
How to setup the PKI solution?
Does the PKI server need to be part of AD?
What if the clients are not in AD e.g. Wireless Tablets?
How do I issue certificates for devices?
How to configure the devices (wired and wireless)?
What AAA server do I use?
How do configure the rules and policies and identify clients?


What are the answers?
I am going to kick off a series here at networking-guru.net that tries to address the question above; I have limited time but hopefully I can …

Dell Latitude D830 SSD Upgrade

Slow Laptop Syndrome
I have a LATITUDE D830 : INTEL CORE 2 DUO T7500 4GB Ram from 2008, I did get a fairly high specification at the time, so it has always had pretty decent performance. However I haven't been using it for a while and when I did it seemed slow compared to my Core 5i desktop computer. (I use Windows 7 ultimate with the latest updates)

Laptop for Work
Now I might be doing a fair bit of travelling to customer sites in the near future and the last thing I want is a poorly performing Laptop, so I decide to ditch all the crap I had on it like iTunes, movies, miscellaneous software and cut back to a basic "work" PC. After all I do have iPhone, iPad and new kindle (soon) for all my multi media needs.

I purchased a "Corsair 120GB Force 3 SSD 2.5" SATA-III 6Gb/s Read = 550MB/s, Write = 510MB/s" from ebuyer.com. Now I am guessing that SATA-II rather that SATA-III on the system board, but the price difference between SATA-II and SATA-III was nothing …