Policing, also known as rate-limiting, can be used as an instrument to control how much traffic is allowed to flow in a certain direction. In Juniper, you can do this by using a policer as an action in a firewall filter. This article is about the configuration of two simple... [Read More]
Juniper multihomed IP VPN location.
This article offers some insight into how you could decide to build a multihomed Layer 3 IP VPN or Layer 3 MPLS VPN. First I’ll go over the topology. After this, you will find the PE and CPE configuration. I’ll end with some verification and show commands. The topology: [Read More]
QFX5100 802.1Q Tunneling (Q-in-Q)
A QFX5100 allows for dot1q-tunneling, or Q-in-Q. If you ever configured dot1q-tunneling on an EX-switch, this configuration differs a lot from what you may be used to. This article offers an attempt to clarify and explain the configuration of a dot1q-tunnel on a standalone QFX5100 without an enhanced feature license.... [Read More]
Juniper LDP, follow that label
This article explains how you can analyze the forwarding table on Junos. On this lab, I altered several metrics to make the traffic flow look like this: [Read More]
Juniper MPLS VPN basics.
For a little while now, I have been wanting to do a Juniper IP VPN lab. I wanted to gather most of the basics into one post. In this post, I will elaborate on the different protocols and how they are configured. The complete configuration is posted at the bottom... [Read More]
Juniper QFX and storm control
Recently, I deployed a VCF consisting of some QFX5100's and some EX4300's. I found that the default configuration did not really protect the network well enough and I thought I’d share it in this post. On the QFX, you’ll find that storm-control is enabled by default. The first thing you'll... [Read More]
Juniper OSPF authentication options.
In Junos , OSPF authentication can come in one of three ways; none, simple or MD5. The default is to have no authentication. This means that the router will form a neighbor relationship with a neighboring router as long as the proper fields in the OSPF Hello’s are matching. Another... [Read More]
Using apply-path in a prefix-list on Juniper.
Juniper's Junos offers a lot of flexibility as well as nifty little tricks. I recently ran into the situation in which 'apply-path' really came in handy. For a particular service, a different subnet was provisioned under the same interface over and over again. I wanted to advertise all of the... [Read More]