Wednesday, May 27, 2015

Juniper Basic configuration Part 1

How to configure the Vlan in juniper switch


Step 1 , For all configuration process
root@CORESWITCH:RE:0% cli     ß---------------------        CLI MODE only for maintenances
({master:0} ß--------------------------------------------- Operational Mode
root@CORESWITCH>Edit ß-------------------------------- enter into configuration mode for changing the devices configuration only for show commands

{master:0}[edit] ß-----------------------configuration mode for configuration change

Layer 3 Vlan creation in Juniper 

set vlans v1 vlan-id 1                         <v1 is just name /Vlan-id 1 is vlan tagging number it should be same for L3-interface vlan.1

set vlans v1 l3-interface vlan.1   < making this vlan as Layer 3 vlan
set interfaces vlan unit 1 family inet address 10.1.1.1/24                <assigning vlan ip address


Juniper user modes for more please refer below link from Juniper Knowledge web


Vlan assignment in juniper 

Assigning the ge-0/0/5 to vlan 1
Step 1 then enter
set interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members v1



Juniper Vlan creation for more please refer below link from Juniper Knowledge web


Verification commands for vlan

root@CORE_EX3300_VLAN5# run show ethernet-switching interfaces
ge-0/0/15.0  up     v1                  1    untagged unblocked


Flooding of vlans using trunking

Vlan flooding commands (interface xe-1/0/0 and xe-0/0/0)
set interfaces  xe-1/0/0 unit 0 family ethernet-switching vlan members all
set interfaces  xe-0/0/0 unit 0 family ethernet-switching vlan members all

Trunking commands (interface xe-1/0/0 and xe-0/0/0)
set interfaces xe-1/0/0 unit 0 family ethernet-switching port-mode trunk
set interfaces xe-0/0/0 unit 0 family ethernet-switching port-mode trunk







Juniper Link aggregation (LACP Link aggregation on juniper ex switch)
Step1 need to follow

Before configuring the ae0 need delete the ethernet switch under the interface 

set chassis aggregated-devices ethernet device-count 5
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ge-0/0/0 ether-options 802.3ad ae0              >>>>>Link switch 1 for High Availability
set interfaces ge-0/0/1 ether-options 802.3ad ae0             >>>>>Link switch 2 High Availability

root> show interfaces terse |match ae0
ae0                     up    UP
ae0.0                   up    UP eth-switch

For more references  


How to configure the DHCP relay
Step 1 need to follow

set forwarding-options helpers bootp server 10.1.2.11  ß------ server ip address of DHCP
set forwarding-options helpers bootp interface vlan.4  ß--which vlan should get the ip address
set forwarding-options helpers bootp interface vlan.5
set forwarding-options helpers bootp interface vlan.6
set forwarding-options helpers bootp interface vlan.8
set forwarding-options helpers bootp interface vlan.7

For more references


How enable Juniper stacking


In Juniper Ex3300 is using hardware stacking so not required to  put the CLI commands for doing the stacking Port number xe-0/0/2 and xe-0/0/3 are already in stacked mode (only required to doing the cabling part)

For more information on Ex3300 stacking



Stacking in 4550 juniper switch

We required choosing the link first and enabling the stacking on them.

Request virtual-chassis vc-port set pic-slot 0 port  xe-0/0/31 ß and restart  /switch1
Request virtual-chassis vc-port set pic-slot 0 port  xe-0/0/31 ß switch 2



Verification commands

Show interface terse
Show interface Xe-0/0/30
root> show virtual-chassis status

Virtual Chassis ID: cff4.00d3.611b
Virtual Chassis Mode: Enabled
                                           Mstr           Mixed Neighbor List
Member ID  Status   Serial No    Model     prio  Role      Mode ID  Interface
0 (FPC 0)  Prsnt    GB0215061093 ex3300-48p 128  Master*     NA  1  vcp-255/1/2
                                                                 3  vcp-255/1/3
1 (FPC 1)  Prsnt    GB0215060650 ex3300-48p 128  Linecard    NA  2  vcp-255/1/2
                                                                 0  vcp-255/1/3
2 (FPC 2)  Prsnt    GB0215060913 ex3300-48p 128  Linecard    NA  3  vcp-255/1/2
                                                                 1  vcp-255/1/3
3 (FPC 3)  Prsnt    GB0215060607 ex3300-48p 128  Backup      NA  0  vcp-255/1/2
                                                                 2  vcp-255/1/3


For more references



  

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...