6PE and 6VPE
Troubleshooting packet loss with firewall filters
Packet loss can be caused by all sorts of reasons. Could be faulty hardware, a software issue on a device, a congested link or some policers and shapers that are working against you. In order to fix packet loss in a network, you first have pinpoint where the packets are...
[Read More]
Junos OS route-reflection considerations
Introducing packet loss with RED
Recently, a customer had several issues going on at the same time. The customer had an MPLS L3VPN with a default route towards a central firewall in the datacenter. Behind this firewall, there was some rackspace and a cloud environment. A lot of components were involved and after solving the...
[Read More]
Verifying a BGP signaled VPLS
Q-in-Q on EX, QFX or VCF
Configuring Q-in-Q, or dot1q tunneling can lead to some confusion. I’ve seen confusion due to changes in the new enhanced Layer 2 CLI configuration and because of a mismatch in Ethertype. This is a short article on how QinQ can be configured on an EX, QFX or VCF. I’ll configure...
[Read More]
Configuring a basic BGP signalled VPLS
Huawei basic layer 3 MPLS VPN
Normally, I use Huawei for all sorts of CPE stuff. But this time, instead of connecting a Huawei CPE to an MPLS VPN, I thought I’d use Huawei to create the Layer 3 MPLS VPN itself. Using eNSP, the free and open Enterprise Simulation Platform, I created the following scenario:...
[Read More]
tunneling LDP over RSVP and establishing a pseudowire
This article is about establishing an LDP session across RSVP signaled LSPs and using those sessions to signal a Martini-draft style pseudowire.
[Read More]
Policy based LSP mapping with Junos OS
LSPs can be configured with a whole variety of characteristics. You can police traffic that is send onto an LSP, steer the LSP through certain location in the network and much more. When you create several LSPs towards the same destination router, prefixes using that router as a next-hop are...
[Read More]
Basic BGP import filtering example on Junos OS
What your BGP peers decide to advertise is out of your control. What you accept is not.
This is a short article on basic route-filtering using Junos. The focus here is on a BGP import policy for public peering.
Let’s start of by rejecting all 0.0.0.0/x routes:
[Read More]
Interprovider Layer 3 VPN option C
Junos and all things syslog
This article is about Junos and all things syslog. I'll go over several examples showing you what you can configure under the [ system syslog ] stanza. Parts of the examples I use here are based on what I think can benefit a device running Junos OS. I'll cover logging...
[Read More]
Juniper OSPFv3 IPsec authentication
Though the OSPFv3 protocol does not offer a built-in authentication method, IPsec can be used to secure protocol exchanges between devices running OSPFv3. To authenticate OSPFv3 on a Juniper device, you first start out with the configuration of a Security Association (SA). The SA describes how the devices will communicate...
[Read More]
Juniper MX and RSVP refresh reduction
The past few weeks I have been working on the replacement of several core nodes. After finally installing the last MX, I wanted revise several configurations that were applied. One of the configurations that I revised was the configuration used in the RSVP stanza. I ‘optimized’ it by implementing RSVP...
[Read More]
Setting up your own vSRX lab
Recently, I’ve been having some fun with the vSRX. I wanted to share the lab I created so others can see how easy it is to get things going with the vSRX. The vSRX doesn’t require a lot of resources and it is a really nice way to get acquainted...
[Read More]
EVPN on Juniper MX and interconnecting Data Centers on layer 2 and 3
After creating a single-homed layer 2 EVPN here, let’s add some layer 3 routing and see in what way EVPN can benefit the datacenter.
But first, have a look at a situation wherein a VPLS is connecting two data centers together:
[Read More]
Basic BGP MPLS-Based Ethernet VPN on Juniper MX
For a while now I wanted to try out EVPN on the MX.
I decided to go for the easiest of scenarios that EVPN has to offer: a single-homed VLAN-based EVPN:
[Read More]
IPFIX configuration example
Turning on IPFIX (IP Flow Information Export) on Juniper MX is a good idea if you want to know what’s going on. Not only can it provide you with a tremendous insight into the traffic traversing your network, you can also use the information provided by IPFIX to automatically divert...
[Read More]
Juniper Virtual Chassis Fabric AE interface
Connecting other parts of the network to the VCF in a redundant way using Link Aggregation Groups (LAG) is very easy. A LAG can combine several Ethernet interfaces into a single logical link called an Aggregate Ethernet (AE) interface. When you are running a VCF, you’d best spread a LAG...
[Read More]
Juniper Virtual Chassis Fabric
Having to deal with a network edge that organically grew as time passed, evolving into an ever more complicated constellation of switches, is frustrating. Looming in the back of my mind were choices made in a past I had no part of. Those choices strained growth and frustrated my attempt...
[Read More]
Site-to-Site IPsec VPN between Huawei AR and Juniper MX
Today I configured an IPsec VPN between a Huawei AR1220F and a Juniper M104. I wanted to keep the configuration around for future reference.
The configuration on a Huawei is rather straightforward. To put the Huawei AR IPsec configuration in a picture:
[Read More]
BIRD BGP filter example
BIRD BGP route-reflector
In this example, a server running BIRD will function as a route-reflector for two MX-routers:
[Read More]
Juniper MX routing engine redundancy
Juniper MX routers, except for the MX80, are capable of having two routing-engines (RE). In this article, I’ll configure an MX480 with some of the high-availability features offered by Junos. By using these features, you can decrease the downtime normally associated with a RE failure to an absolute minimum. Hardware...
[Read More]
MX RSVP firewall filter
Of course, you need to allow RSVP in the firewall filter you are using to protect the routing-engine. The book 'Juniper MX series' covers this very in-depth in chapter 4. It offers a very extensive guide or example on how you could go about building a proper firewall filter to...
[Read More]
Installing a bypass LSP into the forwarding table
After covering link-protection and node-link-protection here, I realized that I forgot one aspect. You can make Junos install the pre-signaled bypass LSP into the forwarding table. This is done by configuring a policy and by applying that policy under the [routing-options forwarding-table export ] stanza.
A short example;
[Read More]
Link-protection and node-link-protection on Juniper MX
Protecting LSPs in an MPLS enabled network can save quite some downtime whenever a link or a node in your network fails.
In this article, we’ll go through the configuration of both link-protection and node-link-protection. We’ll configure it for the following scenario:
[Read More]
Link-protection and node-link-protection on Juniper MX - complete configuration
This is the complete configuration used in Link-protection and node-link-protection on Juniper MX and several other articles. The routers in the topology drawing are all logical systems. The routers are running IS-IS. All interfaces are MPLS and RSVP-enabled. Under the RSVP configuration, there are also the ‘aggregate’ and the ‘reliable’...
[Read More]