Tuesday, March 3, 2015

RE0 stuck in the # prompt while performing the Junos upgrade

Problem :-  RE0 stuck in the # prompt while performing the Junos upgrade from 13.2 to 13.3 and you want to fix the issue in the respective RE.



1.     We found the RE0 trying to boot with the compact flash as primary and disk 1 as the next bootable device; however, it is continuously stuck in the # prompt mode.

2.     We made the disk 2 as a next bootable device and tried to reload; however, it still stuck in the # prompt mode.

3.     We downloaded the 13.3 install media to made the USB as an emergency bootable media and recovered the RE0 from the booting issue.

4.     We performed the “request system screenshot” and made the compact flash to boot with the proper Junos image.

5.     We transferred the Junos 13.3 from RE1 to RE0 to upgrade it.

6.     We deactivated the commit sync under system and graceful restart under routing-option configuration; however, we found the GRES is not configure under chassis redundancy.

7.     We successfully upgrade the Junos 13.3 in the RE0 and reverted the configuration with the GRES and made mastership toggle from RE1 to RE0.



Suggestion:

1.     Please deactivate the GRES, NSR/Graceful restart and commit sync before performing the Junos upgrade/downgrade in the dual routing engine platforms.

2.     Please perform the “request system snapshot” on both the routing engine before executing the Junos upgrade/downgrade.

Tuesday, September 9, 2014

Juniper MC-LAG Active / Active








Core Switch B configuration



set chassis aggregated-devices ethernet device-count 100
set interfaces xe-1/2/6 description ***ICCP-LINK-MEM***
set interfaces xe-1/2/6 ether-options 802.3ad ae0
set interfaces xe-1/3/1 description ***ICCP-LINK-MEM***
set interfaces xe-1/3/1 ether-options 802.3ad ae0
set interfaces ge-5/0/0 ether-options 802.3ad ae6
set interfaces ae0 description ***ICCP-LINK-BUNDLE***
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members all


Core configuration for MC-LAG 


set version 13.2R5.10
set system host-name IGTE_CHN_SIP_PH2_COREA
set system arp aging-timer 5
set system root-authentication encrypted-password "$1$lMQOImBk$MHdIosHh0E6gIYlpg7ai60"
set system login user igate uid 2001
set system login user igate class super-user
set system login user igate authentication encrypted-password "$1$wtZGfmM9$FkZYN3PTTVqFexAUpDM5/0"
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system commit synchronize
set chassis redundancy routing-engine 0 master
set chassis redundancy routing-engine 1 backup
set chassis redundancy graceful-switchover
set chassis aggregated-devices ethernet device-count 100

set interfaces xe-1/2/6 description ***ICCP-LINK-PORT-MEM***
set interfaces xe-1/2/6 ether-options 802.3ad ae0

set interfaces xe-1/3/1 description ***ICCP-LINK-PORT-MEM***
set interfaces xe-1/3/1 ether-options 802.3ad ae0
set interfaces ge-5/0/0 ether-options 802.3ad ae6

set interfaces ae0 description ***ICCP-LINK-BUNDLE***
set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members all

set interfaces ae6 aggregated-ether-options lacp active
set interfaces ae6 aggregated-ether-options lacp system-id 00:00:00:00:00:02
set interfaces ae6 aggregated-ether-options lacp admin-key 20
set interfaces ae6 aggregated-ether-options mc-ae mc-ae-id 6
set interfaces ae6 aggregated-ether-options mc-ae redundancy-group 1
set interfaces ae6 aggregated-ether-options mc-ae chassis-id 0
set interfaces ae6 aggregated-ether-options mc-ae mode active-active
set interfaces ae6 aggregated-ether-options mc-ae status-control active
set interfaces ae6 aggregated-ether-options mc-ae init-delay-time 240
set interfaces ae6 unit 0 family ethernet-switching interface-mode trunk
set interfaces ae6 unit 0 family ethernet-switching vlan members GODC1

set interfaces irb unit 6 family inet address 10.219.11.2/24 arp 10.219.11.3 l2-interface ae0.0
set interfaces irb unit 6 family inet address 10.219.11.2/24 arp 10.219.11.3 mac cc:e1:7f:06:4b:f0
set interfaces irb unit 6 family inet address 10.219.11.2/24 vrrp-group 6 virtual-address 10.219.11.1
set interfaces irb unit 6 family inet address 10.219.11.2/24 vrrp-group 6 priority 120
set interfaces irb unit 6 family inet address 10.219.11.2/24 vrrp-group 6 accept-data

set interfaces irb unit 99 family inet address 3.3.3.1/30
set multi-chassis multi-chassis-protection 3.3.3.1 interface ae0
set routing-options nonstop-routing

set protocols iccp local-ip-addr 3.3.3.1
set protocols iccp peer 3.3.3.2 session-establishment-hold-time 50
set protocols iccp peer 3.3.3.2 redundancy-group-id-list 1
set protocols iccp peer 3.3.3.2 liveness-detection minimum-interval 60
set protocols iccp peer 3.3.3.2 liveness-detection transmit-interval minimum-interval 60

set protocols lldp interface all
set switch-options service-id 2
set vlans GODC1 vlan-id 6
set vlans GODC1 l3-interface irb.6
set vlans iccp vlan-id 99
set vlans iccp l3-interface irb.99






Access Switch configuration


root# show |display set
set version 12.3R6.6
set system root-authentication encrypted-password "$1$Ek0Moath$5eWQXZpXvShoGGzGumYbK/"
set system syslog user * any emergency
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system commit synchronize
set chassis redundancy graceful-switchover
set chassis aggregated-devices ethernet device-count 10
set interfaces ge-0/0/0 description ***connection_coreA***
set interfaces ge-0/0/0 ether-options 802.3ad ae0

set interfaces ge-0/0/1 ether-options 802.3ad ae0
set interfaces ge-1/0/0 description ***Connection_coreB***
set interfaces ge-1/0/0 ether-options 802.3ad ae0
set interfaces ae0 description ***connection_core_Link***
set interfaces ae0 aggregated-ether-options lacp active
set interfaces ae0 unit 0 family ethernet-switching port-mode trunk
set interfaces ae0 unit 0 family ethernet-switching vlan members godc
set interfaces vlan unit 6 family inet address 10.219.11.100/24
set protocols igmp-snooping vlan all
set protocols rstp
set protocols lldp interface all
set protocols lldp-med interface all
set ethernet-switching-options storm-control interface all
set vlans godc vlan-id 6
set vlans godc interface ge-0/0/2.0
set vlans godc l3-interface vlan.6
set poe interface all
set virtual-chassis member 0 mastership-priority 254
set virtual-chassis member 1 mastership-priority 250


{master:0}[edit]
root#

Friday, August 22, 2014

Juniper Commands

admin@STORAGE_ROOM> show chassis hardware detail
Hardware inventory:
Item             Version  Part number  Serial number     Description
Chassis                                GP0214176896      EX2200-C-12T-2G
Routing Engine 0 REV 09   650-036546   GP0214176896      EX2200-C-12T-2G
Routing Engine 0                       GP0214176896      EX2200-C-12T-2G
FPC 0            REV 09   650-036546   GP0214176896      EX2200-C-12T-2G
  CPU                     BUILTIN      BUILTIN           FPC CPU
  PIC 0                   BUILTIN      BUILTIN           12x 10/100/1000 Base-T
  PIC 1          REV 09   650-036546   GP0214176896      2x (10/100/1000 Base-T or GE SFP)
    Xcvr 0       REV 01   740-011614   PQT2Q9M           SFP-LX10
Power Supply 0                                           PS 30W AC

admin@STORAGE_ROOM>

admin@STORAGE_ROOM> show chassis hardware models
Hardware inventory:
Item             Version  Part number  Serial number     FRU model number
Routing Engine 0 REV 09   650-036546   GP0214176896      EX2200-C-12T-2G
FPC 0            REV 09   650-036546   GP0214176896      EX2200-C-12T-2G
  PIC 0                   BUILTIN      BUILTIN           EX2200-C-12T-2G
  PIC 1          REV 09   650-036546   GP0214176896      EX2200-C-12T-2G

admin@STORAGE_ROOM>



admin@STORAGE_ROOM> show chassis hardware clei-models
Hardware inventory:
Item             Version  Part number  CLEI code         FRU model number
Routing Engine 0 REV 09   650-036546   CMMA710BRA        EX2200-C-12T-2G
FPC 0            REV 09   650-036546   CMMA710BRA        EX2200-C-12T-2G
  PIC 0                   BUILTIN      CMMA710BRA        EX2200-C-12T-2G
  PIC 1          REV 09   650-036546   CMMA710BRA        EX2200-C-12T-2G

admin@STORAGE_ROOM>




admin@STORAGE_ROOM> show system uptime
Current time: 2013-03-08 13:32:31 UTC
System booted: 2013-03-01 13:39:37 UTC (6d 23:52 ago)
Protocols started: 2013-03-01 13:42:41 UTC (6d 23:49 ago)
Last configured: 2013-03-08 12:55:05 UTC (00:37:26 ago) by admin
 1:32PM  up 6 days, 23:53, 3 users, load averages: 0.60, 0.19, 0.11

admin@STORAGE_ROOM>



admin@STORAGE_ROOM> show system storage detail
Filesystem       1024-blocks       Used      Avail   Capacity   Mounted on
/dev/da0s1a           187300      96966      75350        56%  /
devfs                      1          1          0       100%  /dev
/dev/md0               32378      32378          0       100%  /packages/mnt/jbase
/dev/md1                1356       1356          0       100%  /packages/mnt/fips-mode-arm-11.4R7.5
/dev/md2               10810      10810          0       100%  /packages/mnt/jcrypto-ex-11.4R7.5
/dev/md3                5142       5142          0       100%  /packages/mnt/jdocs-ex-11.4R7.5
/dev/md4               84184      84184          0       100%  /packages/mnt/jkernel-ex-2200-11.4R7.5
/dev/md5               16930      16930          0       100%  /packages/mnt/jpfe-ex22x-11.4R7.5
/dev/md6               28864      28864          0       100%  /packages/mnt/jroute-ex-11.4R7.5
/dev/md7               13256      13256          0       100%  /packages/mnt/jswitch-ex-11.4R7.5
/dev/md8               19342      19342          0       100%  /packages/mnt/jweb-ex-11.4R7.5
/dev/md9              128876         12     118554         0%  /tmp
/dev/da0s3e           125804       1198     114542         1%  /var
/dev/da0s3d           377828         28     347574         0%  /var/tmp
/dev/da0s4d            63332         74      58192         0%  /config
/dev/md10              60332      14536      40970        26%  /var/rundb
procfs                     4          4          0       100%  /proc
/var/jail/etc         125804       1198     114542         1%  /packages/mnt/jweb-ex-11.4R7.5/jail/var/etc
/var/jail/run         125804       1198     114542         1%  /packages/mnt/jweb-ex-11.4R7.5/jail/var/run
/var/jail/tmp         125804       1198     114542         1%  /packages/mnt/jweb-ex-11.4R7.5/jail/var/tmp
/var/tmp              377828         28     347574         0%  /packages/mnt/jweb-ex-11.4R7.5/jail/var/tmp/uploads
devfs                      1          1          0       100%  /packages/mnt/jweb-ex-11.4R7.5/jail/dev

admin@STORAGE_ROOM>

admin@STORAGE_ROOM> show chassis routing-engine
Routing Engine status:
  Slot 0:
    Current state                  Master
    Election priority              Master (default)
    DRAM                       512 MB
    Memory utilization          46 percent
    CPU utilization:
      User                       3 percent
      Background                 0 percent
      Kernel                     4 percent
      Interrupt                  0 percent
      Idle                      93 percent
    Model                          EX2200-C-12T-2G
    Serial ID                      GP0214176896
    Start time                     2013-03-01 13:39:37 UTC
    Uptime                         6 days, 23 hours, 55 minutes, 31 seconds
    Last reboot reason             Router rebooted after a normal shutdown.
    Load averages:                 1 minute   5 minute  15 minute
                                       0.13       0.15       0.09

admin@STORAGE_ROOM>
admin@STORAGE_ROOM> show chassis environment
Class Item                           Status     Measurement
Power FPC 0 Power Supply 0           OK
Temp  FPC 0 GEPHY1                   OK         15 degrees C / 59 degrees F
      FPC 0 GEPHY2                   OK         15 degrees C / 59 degrees F
      FPC 0 GEPHY3                   OK         15 degrees C / 59 degrees F
      FPC 0 GEPHY4                   OK         10 degrees C / 50 degrees F

admin@STORAGE_ROOM>

admin@DC_SWITCH1_UP> show arp inspection statistics
Interface     Packets received     ARP inspection pass  ARP inspection failed
  ge-0/0/0                    0                      0                      0
  ge-0/0/1                    0                      0                      0
  ge-0/0/2                    0                      0                      0
  ge-0/0/3                    0                      0                      0
  ge-0/0/4                    0                      0                      0
  ge-0/0/5                    0                      0                      0
  ge-0/0/6                    0                      0                      0
  ge-0/0/7                    0                      0                      0
  ge-0/0/8                    0                      0                      0
  ge-0/0/9                    0                      0                      0
 ge-0/0/10                    0                      0                      0
 ge-0/0/11                    0                      0                      0
 ge-0/0/12                    0                      0                      0
 ge-0/0/13                    0                      0                      0
 ge-0/0/14                    0                      0                      0
 ge-0/0/15                    0                      0                      0
 ge-0/0/16                    0                      0                      0
 ge-0/0/17                    0                      0                      0
 ge-0/0/18                    0                      0                      0
 ge-0/0/19                    0                      0                      0
 ge-0/0/20                    0                      0                      0
 ge-0/0/21                    0                      0                      0
 ge-0/0/22                    0                      0                      0
 ge-0/0/23                    0                      0                      0
  ge-0/1/0                    0                      0                      0
  ge-0/1/1                    0                      0                      0
  ge-0/1/2                    0                      0                      0
  ge-0/1/3                    0                      0                      0

{master:0}
admin@DC_SWITCH1_UP>

BGP load balancing with different AS Number



R3#sh version
Cisco IOS Software, 7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)S2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2012 by Cisco Systems, Inc.
Compiled Tue 11-Dec-12 13:32 by prod_rel_team

ROM: ROMMON Emulation Microcode
BOOTLDR: 7200 Software (C7200-ADVENTERPRISEK9-M), Version 15.2(4)S2, RELEASE SOFTWARE (fc1)

R3 uptime is 33 minutes
System returned to ROM by unknown reload cause - suspect boot_data[BOOT_COUNT] 0x0, BOOT_COUNT 0, BOOTDATA 19
System image file is "tftp://255.255.255.255/unknown"
Last reload reason: Unknown reason



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 7206VXR (NPE400) processor (revision A) with 245760K/16384K bytes of memory.
Processor board ID 4279256517
R3#

!
! Last configuration change at 22:48:49 UTC Wed Aug 20 2014
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
!
no aaa new-model
no ip icmp rate-limit unreachable
!
!
!
!
!
!
no ip domain lookup
ip cef
ipv6 multicast rpf use-bgp
no ipv6 cef
!
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
ip tcp synwait-time 5
!
!
!
!
!
!
!
!
interface Loopback1
 ip address 1.1.1.1 255.255.255.255
!
interface FastEthernet0/0
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/0
 ip address 2.1.1.1 255.255.255.0
 duplex full
!
interface Ethernet1/1
 ip address 3.1.1.1 255.255.255.0
 duplex full
!
interface Ethernet1/2
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/3
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/4
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/5
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/6
 no ip address
 shutdown
 duplex full
!
interface Ethernet1/7
 no ip address
 shutdown
 duplex full
!
interface Serial2/0
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/1
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/2
 no ip address
 shutdown
 serial restart-delay 0
!
interface Serial2/3
 no ip address
 shutdown
 serial restart-delay 0
!
router bgp 10
 bgp log-neighbor-changes
 network 1.1.1.1
 network 1.1.1.1 mask 255.255.255.255
 neighbor 2.1.1.2 remote-as 110
 neighbor 3.1.1.2 remote-as 100
 maximum-paths 2
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 privilege level 15
 logging synchronous
 stopbits 1
line aux 0









Thursday, July 31, 2014

Password breaking in Ex2200 .

ELF file is 32 bit
Consoles: U-Boot console

FreeBSD/arm U-Boot loader, Revision 1.1
(builder@dagmath.juniper.net, Tue Jul 26 01:25:53 UTC 2011)
Memory: 512MB
bootsequencing is enabled
bootsuccess is set
new boot device = disk0s2:
Loading /boot/defaults/loader.conf
/kernel data=0x87e6c0+0xdde4c syms=[0x4+0xf04b0+0x4+0xc7bce]


Hit [Enter] to boot immediately, or space bar for command prompt.

HOLD the space bar when booting up the Juniper ex2200

Type '?' for a list of commands, 'help' for more detailed help.
loader>
loader>
loader>
loader>
loader> boot -s
Kernel entry at 0x1400100 ...
GDB: debug ports: uart
GDB: current port: uart
KDB: debugger backends: ddb gdb
KDB: current backend: ddb
Copyright (c) 1996-2013, Juniper Networks, Inc.
All rights reserved.
Copyright (c) 1992-2006 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
JUNOS 12.3R4.6 #0: 2013-09-13 02:38:59 UTC
    builder@kessuth.juniper.net:/volume/build/junos/12.3/release/12.3R4.6/obj-ar
m/junos/bsd/kernels/JUNIPER-EX-2200/kernel
can't re-use a leaf (all_slot_serialid)!
CPU: Feroceon 88FR131 rev 1 (Marvell core)
cpu53: Feroceon 88FR131 revision   WB enabled EABT branch prediction enabled
  16KB/32B 4-way Instruction cache
  16KB/32B 4-way write-back-locking-C Data cache
real memory  = 536870912 (512 MB)
avail memory = 503255040 (479 MB)
SOC: Marvell 88F6281 rev A0, TClock 200MHz
Security policy loaded: Junos MAC/veriexec (mac_veriexec)
MAC/veriexec fingerprint module loaded: SHA256
MAC/veriexec fingerprint module loaded: SHA1
ETHERNET SOCKET BRIDGE initialising
Initializing EXSERIES properties ...
mbus0: <Marvell Internal Bus (Mbus)> on motherboard
ic0: <Marvell Integrated Interrupt Controller> at mem 0xf1020200-0xf102023b on m
bus0
timer0: <Marvell CPU Timer> at mem 0xf1020300-0xf102032f irq 1 on mbus0
gpio0: <Marvell Integrated GPIO Controller> at mem 0xf1010100-0xf101011f irq 35,
36,37,38,39,40,41 on mbus0
uart0: <16550 or compatible> at mem 0xf1012000-0xf101201f irq 33 on mbus0
uart0: console (9600,n,8,1)
uart1: <16550 or compatible> at mem 0xf1012100-0xf101211f irq 34 on mbus0
ehci0: <88F5XXX Integrated USB 2.0 controller> at mem 0xf1050000-0xf1050fff irq
48,19 on mbus0
usb0: EHCI version 1.0
usb0 on ehci0
usb0: USB revision 2.0
uhub0: Marvell EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub0: 1 port with 1 removable, self powered
uhub1: vendor 0x04b4 product 0x6560, class 9/0, rev 2.00/90.15, addr 2
uhub1: single transaction translator
uhub1: 2 ports with 2 removable, self powered
umass0: STMicroelectronics ST72682  High Speed Mode, rev 2.00/2.10, addr 3
mge0: <Marvell Gigabit Ethernet controller> at mem 0xf1072000-0xf1073fff irq 12,
13,14,11,46 on mbus0
mge0: hardware MAC address 84:b5:9c:83:24:3f
miibus0: <MII bus> on mge0
e1000phy0: <Marvell 88E1118 Gigabit PHY> on miibus0
e1000phy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseTX-FDX, auto

i2c0: <Marvell I2C ARM OnChip Controller> at mem 0xf1011000-0xf101101f irq 29 on
 mbus0
syspld0: <SYSPLD> on i2c0
8564 rtc0: <8564 RTC> on i2c0
poe0: <POE> on i2c0
poe_attach: re-types method failed
device_attach: poe0 attach returned 19
cfi0: <SPI flash - 8MB> at mem 0xf1010600-0xf101062f,0xf8000000-0xf87fffff irq 2
3 on mbus0
mpfe0: <Juniper EX-series Packet Forwarding Engine> at mem 0xf4000000-0xf7ffffff
 irq 113 on mbus0
pcib0: <Marvell 88F6281 PCI-Express host controller> at mem 0xf1040000-0xf1041ff
f,0xe8000000-0xefffffff irq 9 on mbus0
pci0: <PCI bus> on pcib0
Initializing product: 75 ..
bmeb: bmeb_lib_init done 0xc337e800, addr 0xc1d564bc
bme0:Virtual BME driver initializing
Timecounter "CPU Timer" frequency 200000000 Hz quality 1000
###PCB Group initialized for udppcbgroup
###PCB Group initialized for tcppcbgroup
da0 at umass-sim0 bus 0 target 0 lun 0
da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device
da0: 40.000MB/s transfers
da0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)
Kernel thread "wkupdaemon" (pid 42) exited prematurely.
Trying to mount root from ufs:/dev/da0s2a
Invalid time in real time clock.
Check and reset the date immediately!
Attaching /packages/jbase via /dev/mdctl...
Mounted jbase package on /dev/md0...
System watchdog timer disabled
Enter full pathname of shell or 'recovery' for root password recovery or RETURN
for /bin/sh: recovery

After this command (recovery) you will be prompt for root>


END..................................


Thursday, May 15, 2014

Vpn-instance in HP routers and switches(VRF in cisco)

Notes :- VRF in H3C/Comware is called vpn-instance and is configured much like VRF on a Cisco device.


#
ip vpn-instance red
 description Customer red
#
interface GigabitEthernet2/0/1
 description Int to cust red
 ip binding vpn-instance red
#


#
ip vpn-instance red
 description Customer red
 route-distinguisher 1:1
#
interface GigabitEthernet2/0/1
 description Int to cust red
 ip binding vpn-instance red
#

Some commands from BGP IPV4 VPN-INSTANCE
#
bgp 100
undo synchronization
peer 3.3.3.3 as-number 100
peer 3.3.3.3 connect-interface LoopBack0
#
ipv4-family vpn-instance cust1_site1
import-route direct
import-route ospf 200
#
ipv4-family vpnv4
peer 3.3.3.3 enable

#

Friday, April 4, 2014

Basic Networking

Tagged VS Untagged


Cisco Trunk Port = Tagged (IEEE 802.1q tagging vlans and sending inside the trunk)
Cisco Access Port = Untagged

Tagged VLAN means frame can be tagged which vlan that frame belongs to, that can be happen in trunk port of switch. Types of Trunk Tagging protocol 802.1Q and ISL and DTP.

Untagged VLAN. Frame cant be tagged while travelling from one switch to another switch. Eg: VLAN1 Native Vlan or Management VLAN. Frame cant mention which vlan the frame belongs.


Saturday, March 29, 2014

Juniper Hardware/Software diagnostics commands for troubleshooting Part 2

                                                                  Juniper commands




set cli timestamp
request support information | no-more

Log
----------------
show log messages | no-more
show log chassisd | no-more

Ospf
----------------
show ospf overview
show ospf neighbor detail
show ospf route
show ospf statistics
show ospf interface
show ospf log
show route protocol ospf
show ospf database
show ospf database summary
show ospf database extensive

BGP

show route advertising-protocol bgp 220.227.29.7
show route receive-protocol bgp 220.27.29.8
show route receive-protocol bgp 125.17.74.4
show route receive-protocol bgp 121.241.5.117

SYSTEM

set cli timestamp
show chassis routing-engine
show system processes extensive
show system users
show system connections
show system statistics
show chassis forwarding
show security monitor fpc pic <SPC-slot> (use 0 for Branch platforms)
show security monitor performance spu
show security monitor performance sess


OSPF

set cli timestamp
show ospf overview
show ospf database
show ospf neighbor detail
show ospf route
show ospf statistics
show ospf interface
show ospf log
show route protocol ospf
show route <x.x.x.x> extensive
show ospf database extensive


UTM

set cli timestamp
show system licenses
show security utm status
show security utm session
show security utm anti-virus status detail
show security utm anti-virus statistics
show chassis routing-engine
show system processes extensive
show security utm session
show security utm web-filtering status
show security utm web-filtering statistics
show chassis routing-engine
show system processes extensive

IPSEC


show security ike security-association
show security ike security-association index <#> detail
show security ipsec security-association
show security ipsec security-association index <#> detail
show security ipsec statistics
show security ipsec statistics index <#>
show security ipsec next-hop-tunnels
monitor interface st0.x


 IPSEC IKE

show interfaces extensive st0.x
show security flow session tunnel
show route
show security pki local-cert detail
show security pki ca-cert detail
show security pki crl detail
show security ike security-association
show security ike security-association index <#> detail
show security ipsec security-association
show security ipsec security-association index <#> detail
show security ipsec statistics
show security ipsec statistics index <#>
show security ipsec next-hop-tunnels
show security flow session tunnel
IF PKI certs are used:
show security pki local-cert detail
show security pki ca-cert detail
show security pki crl detail
show security policies detail
show log /var/etc/policy.id



VRF Instance commands
----------------------------------

> show ospf interface instance AVAYA extensive
> show ospf neighbor instance AVAYA extensive
> show ospf database instance AVAYA extensive
> show ospf route instance AVAYA extensive
> show route protocol ospf table AVAYA.inet.0 extensive

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...