manualshive.com logo in svg

Dell PowerConnect J-EX8208, Software Manual

Share
Download
Dell PowerConnect J-EX8208 Software Manual Download Page 2636

IP Address Spoofing

Hosts on access interfaces can spoof source IP addresses and/or source MAC addresses
by flooding the switch with packets containing invalid addresses. Such attacks combined
with other techniques such as TCP SYN flood attacks can result in denial-of-service
(DoS) attacks. With source IP address or source MAC address spoofing, the system
administrator cannot identify the source of the attack. The attacker can spoof addresses
on the same subnet or on a different subnet.

How IP Source Guard Works

IP source guard checks the IP source address and MAC source address in a packet sent
from a host attached to an untrusted access interface on the switch against entries
stored in the DHCP snooping database. If IP source guard determines that the packet
header contains an invalid source IP address or source MAC address, it ensures that the
switch does not forward the packet—that is, the packet is discarded.

When you configure IP source guard, you enable on it on one or more VLANs. IP source
guard applies its checking rules to packets sent from untrusted access interfaces on
those VLANs. By default, on J-EX Series switches, access interfaces are untrusted and
trunk interfaces are trusted. IP source guard does not check packets that have been sent
to the switch by devices connected to either trunk interfaces or trusted access
interfaces—that is, interfaces configured as

dhcp-trusted

so that a DHCP server can be

connected to that interface to provide dynamic IP addresses.

IP source guard obtains information about IP-address/MAC-address/VLAN bindings
from the DHCP snooping database. It causes the switch to validate incoming IP packets
against the entries in that database.

After the DHCP snooping database has been populated either through dynamic DHCP
snooping or through configuration of specific static IP address/MAC address bindings,
the IP source guard feature builds its database. It then checks incoming packets from
access interfaces on the VLANs on which it is enabled. If the source IP addresses and
source MAC addresses match the IP source guard binding entries, the switch forwards
the packets to their specified destination addresses. If there are no matches, the switch
discards the packets.

The IP Source Guard Database

The IP source guard database looks like this:

user@switch>

show ip-source-guard

IP source guard information:
Interface    Tag  IP Address   MAC Address        VLAN

ge-0/0/12.0  0    10.10.10.7   00:30:48:92:A5:9D  vlan100 

ge-0/0/13.0  0    10.10.10.9   00:30:48:8D:01:3D  vlan100

ge—0/0/13.0  100  *            *                  voice

The IP source guard database table contains the VLANs enabled for IP source guard, the
untrusted access interfaces on those VLANs, the VLAN 802.1Q tag IDs if there are any,

2564

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS

Summary of Contents for PowerConnect J-EX8208

Page 1: ...Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS Published 2010 11 10 ...

Page 2: ...trademarks of Dell Inc Juniper Networks Junos NetScreen ScreenOS and Steel Belted Radius are registered trademarks of Juniper Networks Inc in the United States and other countries The Juniper Networks Logo the Junos logo and JunosE are trademarks of Juniper Networks Inc All other trademarks service marks registered trademarks or registered service marks are the property of their respective owners ...

Page 3: ...stomer shall use the Software on a single hardware chassis having a single processing unit or as many chassis or processing units for which Customer has paid the applicable license fees provided however with respect to the Steel Belted Radius or Odyssey Access Client software only Customer shall use such Software on a single computer containing a single physical random access memory space and cont...

Page 4: ... JUNIPER SUPPLIED SOFTWARE IN NO EVENT SHALL JUNIPER BE LIABLE FOR DAMAGES ARISING FROM UNAUTHORIZED OR IMPROPER USE OF ANY JUNIPER OR JUNIPER SUPPLIED SOFTWARE EXCEPT AS EXPRESSLY PROVIDED IN THE WARRANTY STATEMENT TO THE EXTENT PERMITTED BY LAW JUNIPER DISCLAIMS ANY AND ALL WARRANTIES IN AND TO THE SOFTWARE WHETHER EXPRESS IMPLIED STATUTORY OR OTHERWISE INCLUDING ANY IMPLIED WARRANTY OF MERCHANT...

Page 5: ...eral Public License LGPL Juniper will make such source code portions including Juniper modifications as appropriate available upon request for a period of up to three years from the date of distribution Such request can be made in writing to Juniper Networks Inc 1194 N Mathilda Ave Sunnyvale CA 94089 ATTN General Counsel You may obtain a copy of the GPL at http www gnu org licenses gpl html and a ...

Page 6: ...vi ...

Page 7: ...RP 18 Graceful Protocol Restart 19 Redundant Routing Engines 19 Graceful Routing Engine Switchover 20 Virtual Chassis Software Upgrade and Failover Features 20 Link Aggregation 20 Understanding Software Infrastructure and Processes 22 Routing Engine and Packet Forwarding Engine 22 Junos OS Processes 23 Chapter 2 Supported Hardware 25 J EX4200 Switches Hardware Overview 25 J EX4200 Switches 25 Upli...

Page 8: ...pter 4 Software Installation Overview 61 Installation Overview 61 Understanding Software Installation on J EX Series Switches 61 Overview of the Software Installation Process 61 Software Package Security 62 Installing Software on a Virtual Chassis 62 Installing Software on J EX8200 Switches with Redundant Routing Engines 62 Installing Software Using Automatic Software Download 63 Troubleshooting S...

Page 9: ...witches 82 Managing Licenses 83 Managing Licenses for the J EX Series Switch CLI Procedure 83 Adding New Licenses 83 Deleting Licenses 84 Saving License Keys 84 Managing Licenses for the J EX Series Switch J Web Procedure 84 Adding New Licenses 85 Deleting Licenses 85 Displaying License Keys 86 Downloading Licenses 86 Chapter 7 Verifying Software Installation 87 Routine Monitoring 87 Verifying Tha...

Page 10: ...ce Overview 127 CLI Overview 127 CLI Help and Command Completion 127 CLI Command Modes 128 J Web User Interface for J EX Series Switches Overview 129 Understanding J Web Configuration Tools 131 Understanding J Web User Interface Sessions 133 Chapter 12 Using the Configuration Tools 135 Using the CLI Terminal 135 Starting the J Web Interface 136 Chapter 13 Operational Mode Commands for User Interfa...

Page 11: ...the J EX Series Switch J Web Procedure 167 Configuring System Identity for a J EX Series Switch J Web Procedure 168 Chapter 16 Configuration Statements for System Setup 171 arp 171 authentication key 172 auxiliary 173 boot server NTP 173 broadcast 174 broadcast client 175 console Physical Port 176 default address selection 177 domain name Router 177 gre path mtu discovery 178 host name 178 icmpv4 ...

Page 12: ...ert 223 request system scripts refresh from commit 224 request system scripts refresh from event 225 request system scripts refresh from op 226 request system storage cleanup 227 restart 229 set chassis display message 233 set date 235 show chassis firmware 236 show chassis lcd 238 show configuration 244 show host 247 show ntp associations 248 show ntp status 250 show system firmware 251 show syst...

Page 13: ...r J EX Series Switches Configuration Management Chapter 23 Configuration Management Overview 321 Configuration Files Overview 321 Understanding Configuration Files for J EX Series Switches 321 Configuration Files Terms 322 Understanding Automatic Refreshing of Scripts on J EX Series Switches 323 Understanding Autoinstallation of Configuration Files on J EX Series Switches 323 Typical Uses for Auto...

Page 14: ...Load Factory Default Command 342 Reverting to the Rescue Configuration for the J EX Series Switch 343 Setting or Deleting the Rescue Configuration CLI Procedure 344 Setting or Deleting the Rescue Configuration J Web Procedure 345 Configuring Autoinstallation of Configuration Files CLI Procedure 345 Chapter 25 Verifying Configuration 349 Verifying Autoinstallation Status on a J EX Series Switch 349...

Page 15: ...cesses 392 Chapter 29 User Access Management Configuration 395 Configuring Management Access for the J EX Series Switch J Web Procedure 395 Generating SSL Certificates to Be Used for Secure Web Access 398 Configuring MS CHAPv2 to Provide Password Change Support CLI Procedure 399 Chapter 30 Monitoring Users 401 Managing Users J Web Procedure 401 Chapter 31 Troubleshooting User Access Management 405...

Page 16: ...Overview 445 DHCP BOOTP Relay for J EX Series Switches Overview 446 Chapter 35 System Services Configuration 447 Configuring DHCP Services J Web Procedure 447 Configuring a DHCP SIP Server CLI Procedure 450 Chapter 36 Monitoring System Services 451 Monitoring DHCP Services 451 Chapter 37 Configuration Statements for System Services 455 boot file 455 boot server DHCP 456 bootp 457 ca name 458 cache...

Page 17: ...o listen 481 outbound ssh 482 path length 484 pool 485 port HTTP HTTPS 486 port SRC Server 486 protocol version 487 rate limit 487 server DHCP and BOOTP Relay Agent 488 server DNS and TFTP Service 489 server identifier 490 servers 491 service deployment 491 services 492 session 494 sip server 495 source address SRC Software 495 source address giaddr 496 ssh 496 static binding 497 telnet 498 tftp 4...

Page 18: ...Dashboard for J EX Series Switches 534 System Information Panel 535 Health Status Panel 535 Capacity Utilization Panel 536 Alarms Panel 536 Chassis Viewer 537 Chapter 40 Administering and Monitoring System Functions 541 Monitoring System Log Messages 541 Checking Active Alarms with the J Web Interface 544 Monitoring Chassis Alarms for a J EX8200 Switch 545 Monitoring Switch Control Traffic 548 Mon...

Page 19: ...ounting or Sampling 579 log prefix 580 match 580 not 581 output filename 581 output format 582 policy 583 raise trap 584 refresh 585 refresh from 585 remote execution 586 retry count 587 size 588 source 589 structured data 590 syslog 591 then 593 time format 594 time interval 595 time of day 595 time zone 596 traceoptions 598 traceoptions 600 traceoptions Commit and Op Scripts 602 transfer delay 6...

Page 20: ...h from op 633 show chassis alarms 634 show chassis environment 635 show chassis environment fpc 637 show chassis environment routing engine 638 show chassis fpc 639 show chassis hardware 643 show chassis led 646 show chassis location 649 show chassis pic 650 show chassis routing engine 653 show chassis temperature thresholds 655 show log 657 show pfe next hop 659 show pfe route 661 show pfe statis...

Page 21: ...rconnection of the Virtual Chassis Members 702 Understanding Virtual Chassis Configurations and Link Aggregation 702 Understanding Virtual Chassis Configuration 704 Understanding Virtual Chassis J EX4200 Switch Version Compatibility 705 Understanding Fast Failover in a Virtual Chassis Configuration 706 Supported Topologies for Fast Failover 706 How Fast Failover Works 706 Fast Failover in a Ring T...

Page 22: ...e 786 Adding a New Switch to an Existing Virtual Chassis Configuration Within the Same Wiring Closet 786 Adding a New Switch from a Different Wiring Closet to an Existing Virtual Chassis Configuration 787 Adding a New Switch to an Existing Preprovisioned Virtual Chassis Configuration Using Autoprovisioning 789 Configuring Mastership of the Virtual Chassis CLI Procedure 790 Configuring Mastership U...

Page 23: ...ake Its Member ID Available for Reassignment to a Different Switch 812 Verifying That Graceful Routing Engine Switchover Is Working in the Virtual Chassis Configuration 813 Chapter 47 Troubleshooting Virtual Chassis 815 Troubleshooting a Virtual Chassis Configuration 815 Clear Virtual Chassis NotPrsnt Status and Make Member ID Available for Reassignment 815 Load Factory Default Does Not Commit on ...

Page 24: ...s and LACP 867 Link Aggregation Group LAG 867 Link Aggregation Control Protocol LACP 868 Understanding Interface Ranges on J EX Series Switches 869 Understanding Layer 3 Subinterfaces 871 Understanding Unicast RPF for J EX Series Switches 872 Unicast RPF for J EX Series Switches Overview 872 Unicast RPF Implementation for J EX Series Switches 873 Unicast RPF Packet Filtering 873 Bootstrap Protocol...

Page 25: ...gated Ethernet Interfaces CLI Procedure 922 Configuring Aggregated Ethernet Interfaces J Web Procedure 923 Configuring Aggregated Ethernet LACP CLI Procedure 926 Configuring Unicast RPF CLI Procedure 927 Disabling Unicast RPF CLI Procedure 928 Configuring IP Directed Broadcast CLI Procedure 929 Configuring a Layer 3 Subinterface CLI Procedure 930 Chapter 53 Verifying Interfaces 931 Monitoring Inte...

Page 26: ...ies switches 957 filter 960 flow control 961 force up 961 interface range 962 interfaces for J EX Series switches 963 lacp 968 lacp 802 3ad 969 link mode 970 link speed 971 member 972 members 973 member range 974 minimum links 974 mtu 975 native vlan id 976 periodic 977 pic 978 pic mode 978 port mode 979 rpf check 980 sfpplus 981 speed 982 targeted broadcast 983 unit 984 vlan 985 vlan id 986 vlan ...

Page 27: ...s 1049 Understanding Q in Q Tunneling on J EX Series Switches 1051 How Q in Q Tunneling Works 1051 Disabling MAC Address Learning 1052 Mapping C VLANs to S VLANs 1052 All in One Bundling 1053 Many to One Bundling 1053 Mapping a Specific Interface 1053 Routed VLAN Interfaces on Q in Q VLANs 1053 Limitations for Q in Q Tunneling 1054 Understanding Multiple VLAN Registration Protocol MVRP on J EX Ser...

Page 28: ...ocedure 1139 Creating a Series of Tagged VLANs CLI Procedure 1140 Configuring Virtual Routing Instances CLI Procedure 1142 Creating a Private VLAN CLI Procedure 1143 Configuring Q in Q Tunneling CLI Procedure 1144 Configuring GVRP J Web Procedure 1144 Configuring Redundant Trunk Groups J Web Procedure 1146 Configuring Multiple VLAN Registration Protocol MVRP CLI Procedure 1147 Enabling MVRP 1147 D...

Page 29: ...s Configuration Statement Hierarchy 1180 arp 1181 bridge priority 1182 customer vlans 1183 description 1184 disable 1184 disable MVRP 1185 dot1q tunneling Ethernet Switching 1185 dot1q tunneling VLANs 1186 drop threshold 1187 ether type 1188 ethernet switching options 1189 filter 1192 group name 1193 gvrp 1194 instance type 1195 interface 1195 interface MVRP 1196 interface 1197 interface 1197 inte...

Page 30: ...ng vlan 1239 show ethernet switching mac learning log 1241 show ethernet switching mac notification 1243 show ethernet switching statistics aging 1244 show ethernet switching statistics mac learning 1246 show ethernet switching table 1249 show gvrp 1253 show gvrp statistics 1255 show mvrp 1257 show mvrp dynamic vlan memberships 1259 show mvrp statistics 1260 show redundant trunk group 1262 show vl...

Page 31: ...ce Root Bridge Placement in Spanning Trees on J EX Series Switches 1329 Chapter 66 Configuring Spanning Tree Protocols 1335 Unblocking an Interface That Receives BPDUs in Error CLI Procedure 1335 Configuring STP CLI Procedure 1336 Configuring Spanning Tree Protocols J Web Procedure 1336 Configuring VLAN Spanning Tree Protocol CLI Procedure 1340 Chapter 67 Verifying Spanning Tree Protocols 1343 Mon...

Page 32: ...EX Series Switches 1421 Layer 3 Protocols Not Supported on J EX Series Switches 1422 Understanding Distributed Periodic Packet Management on J EX Series Switches 1424 Understanding VRRP on J EX Series Switches 1425 Overview of VRRP on J EX Series Switches 1425 Examples of VRRP Topologies 1426 Understanding IPsec Authentication for OSPF Packets on J EX Series Switches 1428 Authentication Algorithms...

Page 33: ... RIP Routing Information 1460 Monitoring Routing Information 1461 Chapter 73 Configuration Statements for Layer 3 Protocols 1465 accept remote nexthop 1465 active 1466 advertise external 1467 advertise inactive 1468 advertise peer as 1469 aggregate 1470 aggregate label 1471 allow 1472 any sender 1473 area 1474 area range 1475 as override 1476 as path 1477 asm override ssm 1478 authentication algor...

Page 34: ...g 1527 explicit null 1528 export 1529 export 1530 export 1531 export 1532 export 1532 export 1533 export rib 1533 external preference 1534 external preference 1535 family 1536 fate sharing 1539 flow 1540 flow map 1541 forwarding cache Flow Maps 1541 forwarding cache Multicast 1542 forwarding table 1542 generate 1543 graceful restart 1544 graceful restart 1545 graceful restart 1546 graceful restart...

Page 35: ...ndirect next hop 1573 inet6 advertise interval 1574 install 1575 instance export 1576 instance import 1576 inter area prefix export 1577 inter area prefix import 1578 interface 1579 interface 1581 interface Routing Options 1583 interface Multicast via Static Routes 1584 interface routes 1585 interface type 1586 ipv4 multicast 1587 ipv4 multicast metric 1587 ipv6 multicast 1588 ipv6 multicast metri...

Page 36: ...1617 metric out 1618 metric type 1619 mtu discovery 1620 multicast 1621 multihop 1622 multipath 1623 neighbor 1624 neighbor 1627 neighbor 1628 no adjacency holddown 1629 no aggregator id 1630 no authentication check 1631 no client reflect 1632 no csnp authentication 1633 no eligible backup 1633 no hello authentication 1634 no ipv4 multicast 1634 no ipv4 routing 1635 no ipv6 multicast 1635 no ipv6 ...

Page 37: ...7 ppm 1658 preempt 1659 preference 1660 preference 1661 preference 1662 preference 1663 preference 1663 preference 1664 prefix 1665 prefix export limit 1665 prefix export limit 1666 prefix limit 1667 priority 1668 priority 1669 priority 1670 qualified next hop 1671 readvertise 1672 realm 1673 receive 1674 receive 1675 redundant sources 1676 reference bandwidth 1676 reference bandwidth 1677 remove ...

Page 38: ...icy 1699 send 1700 send 1701 shortcuts 1702 source 1702 source routing 1703 spf options 1704 spf options 1705 ssm groups 1706 ssm map 1707 static 1708 stub 1710 subscriber leave timer 1711 summaries 1712 tag 1713 tcp mss 1714 threshold 1715 timeout Flow Maps 1716 timeout Multicast 1716 topologies 1717 traceoptions BGP 1718 traceoptions IS IS 1721 traceoptions OSPF 1724 traceoptions RIP 1727 traceo...

Page 39: ...erload 1764 clear isis statistics 1766 clear ospf overload 1768 clear rip general statistics 1769 clear rip statistics 1770 clear ripng general statistics 1771 clear ripng statistics 1772 show ospf ospf3 interface 1773 show ospf ospf3 io statistics 1778 show ospf ospf3 log 1779 show ospf ospf3 neighbor 1782 show ospf ospf3 overview 1787 show ospf ospf3 route 1791 show ospf ospf3 statistics 1796 sh...

Page 40: ...te community 1918 show route community name 1920 show route damping 1922 show route detail 1927 show route exact 1941 show route export 1944 show route extensive 1946 show route flow validation 1958 show route inactive path 1960 show route inactive prefix 1963 show route instance 1965 show route label 1972 show route label switched path 1974 show route martians 1976 show route next hop 1978 show r...

Page 41: ...3 Configuring IGMP Snooping J Web Procedure 2064 Changing the IGMP Snooping Group Query Membership Timeout Value CLI Procedure 2067 Configuring Multicast VLAN Registration CLI Procedure 2068 Chapter 78 Verifying IGMP Snooping and Multicast 2069 Monitoring IGMP Snooping 2069 VerifyingThattheIGMPSnoopingGroupQueryTimeoutValueHasBeenChanged Correctly 2070 Chapter 79 Configuration Statements for IGMP ...

Page 42: ...nt election 2111 maximum rps 2111 mode 2112 multicast router interface 2112 neighbor policy 2113 pim 2114 priority Bootstrap 2116 priority PIM Interfaces 2117 priority PIM RPs 2118 promiscuous mode 2118 proxy 2119 query interval 2119 query last member interval 2120 query response interval 2120 receiver 2121 restart duration 2121 rib group 2122 robust count 2122 robust count 2123 rp 2124 rp registe...

Page 43: ...2159 mtrace 2161 mtrace from source 2163 mtrace monitor 2166 mtrace to gateway 2168 show igmp group 2171 show igmp interface 2175 show igmp statistics 2178 show igmp snooping membership 2181 show igmp snooping route 2183 show igmp snooping statistics 2185 show igmp snooping vlans 2187 show multicast flow map 2189 show multicast interface 2191 show multicast mrinfo 2193 show multicast next hops 219...

Page 44: ...eries Switches 2266 Chapter 82 Examples Access Control Configuration 2267 Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch 2267 Example Configuring 802 1X Authentication Options When the RADIUS Server is Unavailable to a J EX Series Switch 2271 Example Setting Up 802 1X in Conference Rooms to Provide Internet Access to Corporate Visitors on a J EX Series Switch 2276 Example Co...

Page 45: ...P MED CLI Procedure 2346 Enabling LLDP MED on Interfaces 2347 Configuring Location Information Advertised by the Switch 2347 Configuring for Fast Start 2347 VSA Match Conditions and Actions for J EX Series Switches 2348 Configuring Captive Portal Authentication CLI Procedure 2350 Configuring Secure Access for Captive Portal 2350 Enabling an Interface for Captive Portal 2351 Configuring Bypass of C...

Page 46: ... 2394 disable 2394 dot1x 2395 elin 2396 ethernet port type virtual 2397 ethernet switching options 2398 events 2400 exclude 2401 fast start 2403 forwarding class 2404 guest vlan 2405 hold multiplier 2406 ignore 2407 immediate update 2407 interface 2408 interface description format 2409 interface Captive Portal 2410 interface 2411 interface 2412 interface 2413 interface 2414 lldp 2415 lldp configur...

Page 47: ... retry 2437 retry 2438 revert interval 2438 routing instance 2439 secret 2439 secret 2440 secure authentication 2440 server RADIUS Accounting 2441 server TACACS Accounting 2441 server fail 2442 server reject vlan 2443 server timeout 2444 server timeout Captive Portal 2445 session expiry 2445 single connection 2446 source address 2446 source address NTP RADIUS System Logging or TACACS 2447 static 2...

Page 48: ...uests 2507 Part 18 Rate Limiting Chapter 87 Rate Limiting Overview 2511 Understanding Storm Control on J EX Series Switches 2511 Understanding Unknown Unicast Forwarding on J EX Series Switches 2512 Chapter 88 Example Rate Limiting Configuration 2513 Example Configuring Storm Control to Prevent Network Outages on J EX Series Switches 2513 Chapter 89 Configuring Rate Limiting 2515 Configuring Unkno...

Page 49: ...tion Against DHCP Starvation Attacks 2548 Understanding DHCP Snooping for Port Security on J EX Series Switches 2549 DHCP Snooping Basics 2549 DHCP Snooping Process 2550 DHCP Server Access 2551 Switch DHCP Clients and DHCP Server Are All on the Same VLAN 2551 Switch Acts as DHCP Server 2553 Switch Acts as Relay Agent 2553 DHCP Snooping Table 2554 Static IP Address Additions to the DHCP Snooping Da...

Page 50: ...Switch from DHCP Starvation Attacks 2583 Example Configuring DHCP Snooping and DAI to Protect the Switch from ARP Spoofing Attacks 2586 Example Configuring Allowed MAC Addresses to Protect the Switch from DHCP Snooping Database Alteration Attacks 2590 Example Configuring DHCP Snooping DAI and MAC Limiting on a J EX Series Switch with Access to a DHCP Server Through a Second Switch 2593 Example Con...

Page 51: ...rrectly 2655 Verifying That DAI Is Working Correctly 2656 Verifying That MAC Limiting Is Working Correctly 2657 Verifying That MAC Limiting for Dynamic MAC Addresses Is Working Correctly 2657 Verifying That Allowed MAC Addresses Are Working Correctly 2658 Verifying Results of Various Action Settings When the MAC Limit Is Exceeded 2658 Customizing the Ethernet Switching Table Display to View Inform...

Page 52: ...p inspection statistics 2706 clear dhcp snooping binding 2707 clear dhcp snooping statistics 2708 show arp inspection statistics 2709 show dhcp snooping binding 2710 show dhcp snooping statistics 2711 show ethernet switching table 2712 show ip source guard 2716 show system statistics arp 2718 Part 20 Routing Policy and Packet Filtering Firewall Filters Chapter 100 Firewall Filters Overview 2721 Fi...

Page 53: ...e 2779 Configuring a Firewall Filter 2779 Applying a Firewall Filter to a Port on a Switch 2782 Applying a Firewall Filter to a VLAN on a Network 2782 Applying a Firewall Filter to a Layer 3 Routed Interface 2783 Configuring Firewall Filters J Web Procedure 2784 Configuring Policers to Control Traffic Rates CLI Procedure 2788 Configuring Policers 2789 Specifying Policers in a Firewall Filter Confi...

Page 54: ...2820 filter 2821 filter specific 2821 firewall 2822 from 2823 if exceeding 2824 interface specific 2825 policer 2826 policy statement 2827 prefix list 2829 routing instance 2830 term 2831 then 2832 then 2833 Chapter 106 Operational Mode Commands for Firewall Filters 2835 clear firewall 2836 clear firewall 2837 show firewall 2838 show firewall 2841 show firewall log 2844 show interfaces filters 284...

Page 55: ...lt Forwarding Classes 2870 Understanding CoS Tail Drop Profiles 2872 Understanding CoS Schedulers 2873 Default Schedulers 2873 Transmission Rate 2874 Scheduler Buffer Size 2874 Priority Scheduling 2874 Scheduler Drop Profile Maps 2875 Scheduler Maps 2875 Understanding CoS Two Color Marking 2876 Understanding CoS Rewrite Rules 2876 How Rewrite Rules Work 2876 Default Rewrite Rule 2877 Understanding...

Page 56: ...edure 2926 Assigning CoS Components to Interfaces CLI Procedure 2928 Assigning CoS Components to Interfaces J Web Procedure 2928 Configuring Junos OS EZQoS for CoS CLI Procedure 2930 Configuring CoS on MPLS Provider Edge Switch Using IP Over MPLS CLI Procedure 2931 Configuring CoS on MPLS Provider Edge Switch Using Circuit Cross Connect CLI Procedure 2932 Chapter 110 Verifying CoS Configuration 29...

Page 57: ...ofile 2987 show class of service forwarding class 2989 show class of service interface 2991 show pfe statistics traffic 2994 show pfe statistics traffic cpu 2997 show pfe statistics traffic egress queues 3001 show pfe statistics traffic multicast 3003 Part 22 Power over Ethernet Chapter 113 Power over Ethernet PoE Overview 3009 PoE and J EX Series Switches Overview 3009 PoE 3009 PoE Power Manageme...

Page 58: ... Configuration Statements for PoE 3033 edit poe Configuration Statement Hierarchy 3033 disable 3034 duration 3035 fpc 3036 guard band 3037 interface 3038 interval 3039 management 3040 maximum power 3041 notification control 3042 priority 3043 telemetries 3044 Chapter 119 Operational Mode Commands for PoE 3045 show poe controller 3046 show poe interface 3048 show poe notification control 3050 show ...

Page 59: ...tches 3071 Example Combining CoS with MPLS on J EX Series Switches 3085 Chapter 122 Configuring MPLS 3097 Configuring Path Protection in an MPLS Network CLI Procedure 3097 Configuring the Primary Path 3099 Configuring the Secondary Path 3099 Configuring the Revert Timer 3100 Configuring MPLS on Provider Switches CLI Procedure 3102 Configuring CoS on MPLS Provider Edge Switch Using IP Over MPLS CLI...

Page 60: ... Chapter 125 Operational Mode Commands for MPLS 3139 clear mpls lsp 3140 clear rsvp session 3142 clear rsvp statistics 3144 ping mpls l2circuit 3145 ping mpls l2vpn 3147 ping mpls l3vpn 3149 ping mpls ldp 3151 ping mpls lsp end point 3153 ping mpls rsvp 3155 request mpls lsp adjust autobandwidth 3160 show connections 3161 show connections 3164 show link management 3168 show link management peer 31...

Page 61: ... of Employee Resource Use on J EX Series Switches 3254 Configuring Port Mirroring 3260 Configuring Port Mirroring to Analyze Traffic CLI Procedure 3260 Configuring Port Mirroring for Local Traffic Analysis 3261 Configuring Port Mirroring for Remote Traffic Analysis 3261 Filtering the Traffic Entering an Analyzer 3262 Configuring Port Mirroring to Analyze Traffic J Web Procedure 3263 Verifying Port...

Page 62: ... protocols Configuration Statement Hierarchy 3292 collector 3299 disable 3299 interfaces 3300 polling interval 3301 sample rate 3302 sflow 3303 udp port 3304 Operational Mode Commands for sFlow Technology 3304 show sflow 3305 show sflow collector 3307 show sflow interface 3308 Chapter 128 SNMP 3309 Configuring SNMP 3309 Configuring SNMP J Web Procedure 3309 Configuration Statements for SNMP 3312 e...

Page 63: ...olatile 3337 notify 3338 notify filter Configuring the Profile Name 3338 notify filter Applying to the Management Target 3339 notify view 3339 oid 3340 oid 3340 owner 3341 parameters 3341 port 3342 read view 3342 request type 3343 rising event index 3343 rising threshold 3344 rising threshold 3345 rmon 3345 rmon 3346 routing instance 3347 routing instance 3348 sample type 3348 security level Gener...

Page 64: ...2 request snmp spoof trap 3374 show snmp health monitor 3380 show snmp inform statistics 3387 show snmp rmon 3388 show snmp rmon history 3392 show snmp statistics 3395 show snmp v3 3399 Chapter 129 Real Time Performance Monitoring RPM 3403 RPM Overview 3403 Understanding Real Time Performance Monitoring on J EX Series Switches 3404 RPM Packet Collection 3404 Tests and Probe Types 3404 Hardware Tim...

Page 65: ... Configuring Ethernet OAM Link Fault Management 3431 Configuring Ethernet OAM Link Fault Management CLI Procedure 3431 Configuration Statements for Ethernet OAM Link Fault Management 3434 edit protocols Configuration Statement Hierarchy 3434 action 3440 action profile 3441 allow remote loopback 3442 ethernet 3443 event 3445 event thresholds 3445 frame error 3446 frame period 3446 frame period summ...

Page 66: ...ies Switch Only 3480 connectivity fault management J EX Series Switch Only 3481 continuity check J EX Series Switch Only 3482 direction J EX Series Switch Only 3482 hold interval OAM CFM for J EX Series Switch Only 3483 interface OAM CFM for J EX Series Switch Only 3483 interval J EX Series Switch Only 3484 level J EX Series Switch Only 3485 linktrace J EX Series Switch Only 3485 loss threshold J ...

Page 67: ...s 3519 fields for Interface Profiles 3520 file Associating with a Profile 3521 file Configuring a Log File 3522 files 3522 filter profile 3523 interface profile 3524 interval 3525 mib profile 3526 object names 3526 operation 3527 routing engine profile 3527 size 3528 source classes 3528 start time 3529 transfer interval 3529 Chapter 134 Operational Mode Commands for General Network Management and ...

Page 68: ...lxviii Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 69: ...tallation replacement and safety and compliance information for J EX4200 switches Dell PowerConnect J Series J EX4200 Ethernet Switch Hardware Guide Component descriptions site preparation installation replacement and safety and compliance information for J EX8208 switches Dell PowerConnect J Series J EX8208 Ethernet Switch Hardware Guide Component descriptions site preparation installation replac...

Page 70: ...rently active Represents output that appears on the terminal screen Fixed width text like this A policy term is a named structure that defines match conditions and actions Junos OS System Basics Configuration Guide RFC 1997 BGP Communities Attribute Introduces important new terms Identifies book names Identifies RFC and Internet draft titles Italic text like this Configure the machine s domain nam...

Page 71: ...terfaces box select All Interfaces To cancel the configuration click Cancel Represents J Web graphical user interface GUI items you click or select Bold text like this In the configuration editor hierarchy select Protocols Ospf Separates levels in a hierarchy of J Web selections bold right angle bracket Repair and Warranty CAUTION Many repairs may only be done by a certified service technician You...

Page 72: ...lxxii Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 73: ...PART 1 Junos OS for J EX Series Switches Product Overview Software Overview on page 3 Supported Hardware on page 25 1 ...

Page 74: ...2 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 75: ...for J EX Series Switches and the switches on which they are supported Table 4 on page 4 Access Control Features Table 5 on page 4 Administration Features Table 6 on page 4 Class of Service CoS Features Table 7 on page 5 High Availability and Resiliency Features Table 8 on page 6 Interfaces Features Table 9 on page 7 IP Address Management Features Table 10 on page 7 IPv6 Features Table 11 on page 7...

Page 76: ...ilters on LAGs Junos OS 10 2 or earlier Junos OS 10 2 or earlier Firewall filter on loopback interface Junos OS 10 3R1 Junos OS 10 2 or earlier Firewall filters with IPv6 Junos OS 10 3R1 Junos OS 10 2 or earlier MAC RADIUS authentication Junos OS 10 2 or earlier Junos OS 10 2 or earlier Policing Junos OS 10 2 or earlier Junos OS 10 2 or earlier Server fail fallback Junos OS 10 2 or earlier Junos O...

Page 77: ...ility and Resiliency Features J EX8200 Switches J EX4200 Switches Feature Junos OS 10 2 or earlier Junos OS 10 2 or earlier Graceful protocol restart for BGP Junos OS 10 2 or earlier Junos OS 10 2 or earlier Graceful protocol restart for IS IS Junos OS 10 2 or earlier Junos OS 10 2 or earlier Graceful protocol restart for OSPF Not applicable Junos OS 10 2 or earlier Graceful Routing Engine switcho...

Page 78: ...s ports VCPs Not applicable Junos OS 10 2 or earlier Virtual Chassis Autoprovisioning of Virtual Chassis ports VCPs Not applicable Junos OS 10 2 or earlier Virtual Chassis Support for SFP uplink module ports Table 8 Interfaces Features J EX8200 Switches J EX4200 Switches Feature Junos OS 10 2 or earlier Junos OS 10 2 or earlier Digital optical monitoring DOM Junos OS 10 2 or earlier Junos OS 10 2 ...

Page 79: ...OS 10 2 or earlier Junos OS 10 2 or earlier IPv6 Management and Services Junos OS 10 2 or earlier Junos OS 10 2 or earlier IPv6 Path MTU Discovery Table 11 Layer 2 Network Protocols Features J EX8200 Switches J EX4200 Switches Feature Junos OS 10 2 or earlier Junos OS 10 2 or earlier 802 1Q VLAN tagging Junos OS 10 2 or earlier Junos OS 10 2 or earlier BPDU protection for spanning tree protocols J...

Page 80: ...l RSTP Multiple Spanning Tree Protocol MSTP Junos OS 10 2 or earlier Junos OS 10 2 or earlier Spanning tree VLAN Spanning Tree Protocol VSTP Junos OS 10 2 or earlier Junos OS 10 2 or earlier RSTP and VSTP concurrent configuration Junos OS 10 2 or earlier Junos OS 10 2 or earlier Storm control Junos OS 10 2 or earlier Junos OS 10 2 or earlier Unknown Layer 2 unicast forwarding Not supported Junos O...

Page 81: ...chpubs software junos index html Junos OS 10 2 or earlier Junos OS 10 2 or earlier OSPFv2 Not supported Junos OS 10 3R1 OSPF IPsec support Junos OS 10 2 or earlier Junos OS 10 2 or earlier Routed VLAN interfaces RVIs Junos OS 10 2 or earlier Junos OS 10 2 or earlier Routing Information Protocol version 1 RIPv1 and RIPv2 Junos OS 10 2 or earlier Junos OS 10 2 or earlier Static routes Junos OS 10 2 ...

Page 82: ...http www juniper net techpubs software junos Not supported Junos OS 10 2 or earlier Multicast VLAN registration MVR Junos OS 10 2 or earlier Junos OS 10 2 or earlier Protocol Independent Multicast dense mode PIM DM See the Junos OS Multicast Configuration Guide at http www juniper net techpubs software junos Junos OS 10 2 or earlier Junos OS 10 2 or earlier Protocol Independent Multicast source sp...

Page 83: ...w monitoring technology Junos OS 10 2 or earlier Junos OS 10 2 or earlier sFlow technology Persistent IP addresses for agent IDs and use in datagrams Junos OS 10 2 or earlier Junos OS 10 2 or earlier Simple Network Management Protocol version 1 SNMPv1 SNMPv2 and SNMPv3 Junos OS 10 2 or earlier Junos OS 10 2 or earlier Time Domain Reflectometry TDR Table 16 Port Security Features J EX8200 Switches ...

Page 84: ...soft Windows XP Service Pack 3 Browser version One of the following Other browsers might work but are not supported by J Series platforms Microsoft Internet Explorer version 7 0 Mozilla Firefox version 3 0 Additional requirements Only English language browsers are supported The browser and the network must be able to receive and process HTTP 1 1 gzip compressed data Not applicable Junos OS 10 2 or...

Page 85: ...upported on J EX Series Switches on page 14 IS IS See the Junos OS Multicast Configuration Guide at http www juniper net techpubs software junos Supported MLD versions 1 and 2 MLD See the Junos OS MPLS Applications Configuration Guide at http www juniper net techpubs software junos Supported with the exceptions noted in Layer 3 Protocols Not Supported on J EX Series Switches on page 14 MPLS See th...

Page 86: ...s J EX Series switches do not support the Junos OS Layer 3 protocols and features listed in Table 19 on page 14 Table 19 Junos OS Layer 3 Protocol Statements and Features That Are Not Supported Configuration Statements Not Supported on J EX Series Switches Feature dvmrp and subordinate statements DVMRP cflow and subordinate statements Flow aggregation cflowd Not supported GRE edit services stateme...

Page 87: ...atement label switched path and subordinate statements neighbor statement within an OSPF area peer interface and subordinate statements within an OSPF area sham link statement te metric statement OSPF l2vpn and subordinate statements ldp and subordinate statements vpls and subordinate statements Routing instances Routinginstanceforwarding sap and all subordinate statements SAP and SDP auto export ...

Page 88: ... control plane CPU is protected by rate limiting routing policy and firewall filters to ensure switch uptime even under severe attack In addition the switches fully integrate with the Juniper Networks Unified Access Control UAC product to provide both standards based 802 1X port level access and Layer 2 through Layer 4 policy enforcement based on user identity Access port security features such as...

Page 89: ...m an untrusted access interface is validated against the source MAC address in the DHCP snooping database The packet is allowed for further processing if the source IP address to source MAC address binding is valid if the binding is not valid the packet is discarded DHCP option 82 Also known as the DHCP relay agent information option Helps protect the J EX Series switch against attacks such as spo...

Page 90: ...es for J EX Series Switches Overview High availability refers to the hardware and software components that provide redundancy and reliability for packet based communications This topic covers the following high availability features of J EX Series Switches VRRP on page 18 Graceful Protocol Restart on page 19 Redundant Routing Engines on page 19 Graceful Routing Engine Switchover on page 20 Virtual...

Page 91: ...restart are uninterrupted packet forwarding and temporary suppression of all routing protocol updates Graceful protocol restart thus allows a switch to pass through intermediate convergence states that are hidden from the rest of the network Most graceful restart implementations define two types of switches the restarting switch and the helper switch The restarting switch requires rapid restoratio...

Page 92: ...ul Routing Engine switchover is not enabled the Packet Forwarding Engines initialize their state to boot up state before they connect to the new master Routing Engine In contrast in a graceful switchover configuration the Packet Forwarding Engines do not reinitialize their state but resynchronize their state with the new master Routing Engine The interruption to the traffic is minimal Virtual Chas...

Page 93: ...members of the Virtual Chassis See Understanding Virtual Chassis Configurations and Link Aggregation on page 702 Related Documentation For more information on high availability features see the Junos OS High Availability Configuration Guide at http www juniper net techpubs software junos Virtual Chassis Overview on page 691 Understanding Virtual Chassis Components on page 694 Understanding Virtual...

Page 94: ...ing system Microsoft Windows XP Service Pack 3 Browser version One of the following Other browsers might work but are not supported by J Series platforms Microsoft Internet Explorer version 7 0 Mozilla Firefox version 3 0 Additional requirements Only English language browsers are supported The browser and the network must be able to receive and process HTTP 1 1 gzip compressed data Routing Engine ...

Page 95: ...y chassisd Chassis process Handles Layer 2 switching functionality such as MAC address learning Spanning Tree protocol and access port security The process is also responsible for managing Ethernet switching interfaces VLANs and VLAN interfaces Manages Ethernet switching interfaces VLANs and VLAN interfaces eswd Ethernet switching process Defines how routing protocols operate on the switch The ove...

Page 96: ...ess Related Documentation For more information about processes see the Junos OS Network Operations Guide at http www juniper net techpubs software junos For more information about basic system parameters supported protocols and software processes see the Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos 24 Dell PowerConnect J Series Ethernet Switch Complete...

Page 97: ...orks These switches can be deployed wherever you need a high density of Gigabit Ethernet ports 24 to 480 ports or redundancy Typically J EX4200 switches are used in large branch offices campus wiring closets and data centers where they can be positioned as the top device in a rack to provide connectivity for all the devices in the rack You can connect individual J EX4200 switches together to form ...

Page 98: ...ll form factor pluggable SFP transceivers You can use SFP or SFP ports to connect an access switch to a distribution switch or to interconnect member switches of a Virtual Chassis across multiple wiring closets Power over Ethernet PoE Ports PoE ports provide electrical current to devices through the network cables so that separate power cords for devices such as IP phones wireless access points an...

Page 99: ... the Junos OS command line interface CLI and the J Web graphical interface Software on page 27 Chassis Physical Specifications on page 27 Routing Engines and Switch Fabric on page 28 Line Cards on page 29 Cooling System on page 29 Power Supplies on page 29 Software The Dell PowerConnect J EX Series Switches PowerConnect J EX4200 Ethernet Switches and PowerConnect J EX8200 Ethernet Switches run und...

Page 100: ...ement signals to various system components along with distributing power throughout the system See Chassis Physical Specifications of a J EX8208 Switch Routing Engines and Switch Fabric Switching functionality system management and system control functions of a J EX8208 switch are performed by the Switch Fabric and Routing Engine SRE module See Switch Fabric and Routing Engine SRE Module in a J EX...

Page 101: ...This line card has eight 10 gigabit SFP ports on its faceplate in which you can install SFP transceivers See 8 port SFP Line Card in a J EX8200 Switch 48 port 100 1000 SFP line card This line card has 48 1 gigabit SFP ports on its faceplate in which you can install SFP transceivers See 48 port SFP Line Card in a J EX8200 Switch 48 port 10 100 1000 RJ 45 line card This line card had 48 10 100 1000 ...

Page 102: ...ovide high performance scalable connectivity and carrier class reliability You can manage J EX8216 switches using the same Junos OS interfaces that you use for other Junos OS platforms the Junos OS command line interface CLI and the J Web graphical interface Software on page 30 Chassis Physical Specifications LCD Panel and Midplane on page 30 Routing Engines and Switch Fabric on page 32 Line Cards...

Page 103: ...Figure 2 J EX8216 Switch Front 31 Chapter 2 Supported Hardware ...

Page 104: ...nfiguration See LCD Panel in a J EX8200 Switch The J EX8216 chassis midplane distributes the data control and management signals to system components and distributes power throughout the system See Midplane in a J EX8216 Switch Routing Engines and Switch Fabric System management and system control functions of a J EX8216 switch are performed by the Routing Engine RE module An RE module contains a ...

Page 105: ...ures 16 horizontal line card slots and supports wire rate performance for all packet sizes for the installed line cards The line cards in J EX8200 switches combine a Packet Forwarding Engine and Ethernet interfaces on a single assembly They are field replaceable units FRUs and you can install them in the slots labeled 0 through 15 on the front of the switch chassis All line cards are hot insertabl...

Page 106: ... supported for the 3000 W AC power supplies on the J EX8216 switch The redundant AC configuration ships with six AC power supplies to provide the capacity to power the system using N 1 or N N power redundancy See AC Power Supply in a J EX8200 Switch and J EX8216 Switch Configurations CAUTION Mixing different types of power supplies in the same chassis is not a supported configuration Related Docum...

Page 107: ...PART 2 Complete Software Configuration Statement Hierarchy Complete Software Configuration Statement Hierarchy on page 37 35 ...

Page 108: ...36 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 109: ...figuration Statement Hierarchy on page 48 edit protocols Configuration Statement Hierarchy on page 48 edit routing instances Configuration Hierarchy on page 55 edit snmp Configuration Statement Hierarchy on page 55 edit virtual chassis Configuration Statement Hierarchy on page 55 edit vlans Configuration Statement Hierarchy on page 56 edit access Configuration Statement Hierarchy access profilepro...

Page 110: ...itchover Related Documentation Understanding Aggregated Ethernet Interfaces and LACP on page 867 Understanding Power Management on J EX Series Switches on page 302 edit class of service Configuration Statement Hierarchy class of service classifiers dscp ieee 802 1 inet precedence classifier name import classifier name default forwarding class class name loss priority loss priority code points alia...

Page 111: ...t forwarding class class name loss priority loss priority code point alias bits scheduler maps map name forwarding class class name scheduler scheduler name schedulers scheduler name buffer size percent percentage remainder drop profile map loss priority loss priority protocol protocol drop profile profile name priority priority shaping rate rate percent percentage transmit rate rate percent perce...

Page 112: ...s CLIProcedure onpage2928orAssigningCoS Components to Interfaces J Web Procedure on page 2928 edit ethernet switching options Configuration Statement Hierarchy ethernet switching options analyzer name loss priority priority ratio number input ingress interface all interface name vlan vlan id vlan name egress interface all interface name output interface interface name vlan vlan id vlan name bpdu b...

Page 113: ...inspection no arp inspection dhcp option82 circuit id prefix hostname use interface description use vlan id remote id prefix hostname mac none use interface description use string string vendor id string examine dhcp no examine dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no un...

Page 114: ...n page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwarding on J EX Series Switches on page 2512 Understanding MAC Notification on J EX Series Switches on page 1060 edit firewall Configuration Statement Hier...

Page 115: ... EX Series Switches Overview on page 2721 edit forwarding options Configuration Statement Hierarchy helpers bootp dhcp option82 circuit id prefix hostname use interface description use vlan id remote id prefix hostname mac none use interface description use string string vendor id string interface interface name dhcp option82 circuit id prefix hostname use interface description use vlan id remote ...

Page 116: ... net techpubs software junos edit interfaces Configuration Statement Hierarchy interfaces aex aggregated ether options flow control no flow control lacp mode periodic interval link speed speed minimum links number description text disable hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable fam...

Page 117: ...nit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vlan id number vlan tagging interface range interface range name description text disable ether options 802 3ad aex lacp force up auto negotiation no auto negotiation flow control no flow control link mode mode speed auto negotiation speed hold time up milliseconds down milliseconds ...

Page 118: ...lliseconds no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name traps no traps vlan id vlan id number vlan tagging vlan description text disable hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name proxy ar...

Page 119: ...s no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vlan id number vlan tagging Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Configuring a Layer 3 Subinte...

Page 120: ... Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configuring PoE CLI Procedure on page 3021 PoE and J EX Series Switches Overview on page 3009 edit protocols Configuration Statement Hierarchy protocols connections remote interface switch connection name interface interface name unit number transmit lsp label switched path receive lsp label switched path dot1x authenticato...

Page 121: ...ble join timer millseconds leave timer milliseconds leaveall timer milliseconds igmp snooping traceoptions file filename files number size size world readable no world readable match regex flag flag detail disable receive send vlan vlan id vlan number data forwarding source groups group prefix receiver source vlans vlan list install disable interface interface name immediate leave interface interf...

Page 122: ...interface name disable location elin number civic based what number country code code ca type number ca value value mpls interface all interface name label switched path lsp name to remote provider edge switch path destination address hostname strict loose mstp disable bpdu block on edge bridge priority priority configuration name name forward delay seconds hello time seconds interface all interfa...

Page 123: ...milliseconds leave timer milliseconds leaveall timer milliseconds registration forbidden normal no dynamic vlan traceoptions file filename files number size size no stamp world readable no world readable flag flag oam ethernet connectivity fault management action profile profile name default actions interface down linktrace age 30m 10m 1m 30s 10s path database size path database size maintenance d...

Page 124: ...rame error count frame period count frame period summary count symbol period count interface interface name link discovery active passive pdu interval interval event thresholds threshold value remote loopback event thresholds frame errorcount frame period count frame period summary count symbol period count negotiation options allow remote loopback no allow link events rstp disable bpdu block on e...

Page 125: ... ip address udp port port number disable interfaces interface name disable polling interval seconds sample rate number polling interval seconds sample rate number source ip stp disable bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceopt...

Page 126: ... Automatic VLAN Administration Using GVRP on page 1087 Understanding MAC RADIUS Authentication on J EX Series Switches Understanding Server Fail Fallback and 802 1X Authentication on J EX Series Switches on page 2258 IGMP Snooping on J EX Series Switches Overview on page 2047 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches...

Page 127: ...e 1112 Configuring Virtual Routing Instances CLI Procedure on page 1142 edit snmp Configuration Statement Hierarchy snmp rmon history index bucket size number interface interface name interval seconds owner owner name Related Documentation Configuring SNMP J Web Procedure on page 3309 Junos OS Network Management Configuration Guide at http www juniper net techpubs software junos edit virtual chass...

Page 128: ...ring a Virtual Chassis J Web Procedure on page 784 Virtual Chassis Overview on page 691 edit vlans Configuration Statement Hierarchy vlans vlan name description text description dot1q tunneling customer vlans id native range layer2 protocol tunneling all protocol name drop threshold number shutdown threshold number filter input filter name filter output filter name interface interface name mapping...

Page 129: ... Using GVRP on page 1087 Example Connecting an Access Switch to a Distribution Switch on page 1078 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 Example Configuring Layer 2 Protocol Tunneling on J EX Series Switches on page 1126 Creating a Private VLAN CLI Procedure on page 1143 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 57 Chapter 3 Complete Sof...

Page 130: ...58 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 131: ...age 69 Booting the Switch Upgrading Software and Managing Licenses on page 79 Verifying Software Installation on page 87 Troubleshooting Software Installation on page 91 Configuration Statements for Software Installation on page 95 Operational Mode Commands for Software Installation on page 97 59 ...

Page 132: ...60 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 133: ...ge Security on page 62 Installing Software on a Virtual Chassis on page 62 Installing Software on J EX8200 Switches with Redundant Routing Engines on page 62 Installing Software Using Automatic Software Download on page 63 Troubleshooting Software Installation on page 63 Overview of the Software Installation Process A J EX Series switch is delivered with Junos OS preinstalled When you connect powe...

Page 134: ...age Security Junos OS is delivered in signed packages that contain digital signatures to ensure it is official software For more information about signed software packages see the Junos OS Installation and Upgrade Guide at http www juniper net techpubs software junos Installing Software on a Virtual Chassis You can connect individual J EX4200 Ethernet Switches together to form one unit and manage ...

Page 135: ...re on the switch See Troubleshooting Software Installation on page 91 NOTE You can also use this procedure to load two versions of Junos OS in separate partitions on the switch Related Documentation Downloading Software Packages on page 69 Installing Software on J EX Series Switches J Web Procedure on page 75 Installing Software on a J EX Series Switch with a Single Routing Engine CLI Procedure on...

Page 136: ...and copies all of these files into an alternate internal meaning internal flash or an external meaning USB flash memory source You can then use this snapshot to boot the switch at the next bootup or as a backup boot option You can only use snapshots to move files to external memory if the switch was booted from internal memory or to move files to internal memory if the switch was booted from exter...

Page 137: ...er you are eligible to configure and use certain features Junos OS feature licenses are device specific The same feature can be installed and configured on multiple switches To conform to Junos OS feature licensing requirements you must purchase a license for each switch For a Virtual Chassis deployment two licenses are recommended for redundancy These licenses can be based on the serial numbers o...

Page 138: ... time Class Description 2009 09 03 06 00 11 UTC Minor BGP Routing Protocol usage requires a license Every time you edit or view the configuration a message displays the committed features that require a license For example when you edit the BGP configuration a warning message appears for example edit protocols user switch bgp warning requires bgp license Likewise viewing the configuration causes t...

Page 139: ...a is the license data JUNOS204558 aeaqea qmijhd amrqha ztfmbu gqzama uqceds ra32zr lsevik ftvjed o4jy5u fynzzj mgviyl kgioyf ardb5g sj7wnt rsfked wbjf5a sg The license data defines the device ID for which the license is valid and the version of the license Related Documentation Managing Licenses for the J EX Series Switch CLI Procedure on page 83 Managing Licenses for the J EX Series Switch J Web ...

Page 140: ...68 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 141: ... account To register for an account 1 Locate the chassis serial number not the Dell Service Tag on your J EX Series switch 2 Go to http www juniper net partners dell and click Register for an Account 3 Fill out the registration information required When your user registration is approved you receive login information and credentials at the e mail address you used for registration If your registrat...

Page 142: ...ation to a second storage option See the Junos OS Installation and Upgrade Guide at http www juniper net techpubs software junos for instructions on performing this task 3 Optional Copy the software package to the switch We recommend that you use FTP to copy the file to the var tmp directory This step is optional because Junos OS can also be upgraded when the software image is stored at a remote l...

Page 143: ...n page 61 Installing Software on a J EX8200 Switch with Redundant Routing Engines CLI Procedure For a J EX8200 switch with redundant Routing Engines you can minimize disrupting network operation during a Junos OS upgrade by upgrading the Routing Engines separately starting with the backup Routing Engine To upgrade the software package on a J EX8200 switch with one installed Routing Engine see Inst...

Page 144: ...r switch 3 Disable GRES graceful Routing Engine switchover edit user switch deactivate chassis redundancy graceful switchover 4 Save the configuration change on both Routing Engines edit user switch commit synchronize NOTE To ensure the most recent configuration changes are committed beforethesoftwareupgrade performthisstepevenifGRESwaspreviously disabled 5 Exit out of the CLI configuration mode e...

Page 145: ...or example jinstall ex 8200 10 2R1 5 domestic signed tgz For more information on the request system software add command see the Junos OS System Basics and Services Command Reference at http www juniper net techpubs software junos NOTE To abort the installation do not reboot your device instead finish the installation and then issue the request system software delete package name m nZx distributio...

Page 146: ... Election priority Master default Routing Engine status Slot 1 Current state Master Election priority Backup default 4 Install the new software package using the request system software add command user switch request system software add validate var tmp jinstall ex 8200 10 2R1 5 domestic signed tgz 5 Reboot the Routing Engine user switch request system reboot Reboot the system yes no no yes When ...

Page 147: ... slot 0 is indeed the master Routing Engine user switch show chassis routing engine You will see Routing Engine status Slot 0 Current state Master Election priority Master default Routing Engine status Slot 1 Current state Backup Election priority Backup default Related Documentation Installing Software on J EX Series Switches J Web Procedure on page 75 Troubleshooting Software Installation on pag...

Page 148: ... HTTP 1 Download the software package as described in Downloading Software Packages from Juniper Networks on page 69 2 Log in to the Juniper Networks authentication system using the username generally your e mail address and password supplied by Juniper Networks representatives 3 In the J Web interface select Maintain Software Install Package 4 On the Install Remote page enter information into the...

Page 149: ...s activated after the switching platform has rebooted Table 23 Upload Package Summary Your Action Function Field Type the location of the software package or click Browse to navigate to the location Specifies the location of the software package File to Upload required Select the check box if you want the switching platform to reboot automatically when the upgrade is complete Specifies that the sw...

Page 150: ...rs 4 Click Schedule The J Web interface requests confirmation to perform the reboot or halt 5 Click OK to confirm the operation If the reboot is scheduled to occur immediately the switch reboots You cannot access the J Web interface until the switch has restarted and the boot sequence is complete After the reboot is complete refresh the browser window to display the J Web interface login page If t...

Page 151: ... USB flash memory using a system snapshot and use those files to boot the switch see Creating a Snapshot and Using It to Boot a J EX Series Switch on page 80 We recommend that you use this method to boot the switch from a USB flash drive if your switch is running properly If you need to pre install the software onto the USB flash drive you can use the method described in this topic Pre installing ...

Page 152: ...witches J Web Procedure on page 75 See Rear Panel of a J EX4200 Switch for USB port location See Switch Fabric and Routing Engine SRE Module in a J EX8208 Switch for USB port location See Routing Engine RE Module in a J EX8216 Switch for USB port location Understanding Software Installation on J EX Series Switches on page 61 Creating a Snapshot and Using It to Boot a J EX Series Switch The system ...

Page 153: ...tch request system reboot media external slice 1 Creating a Snapshot on an Internal Flash Drive and Using it to Boot the Switch A snapshot can be created on internal memory after a switch is booted using files stored in external memory To create a snapshot in internal memory and use it to boot the switch 1 Place the snapshot files in internal memory user switch request system snapshot parition med...

Page 154: ...ad ensure that you have configured DHCP services for the switch including configuring a path to a boot server and a boot file See the Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos for information about using the CLI to configure DHCP services and settings See Configuring DHCP Services J Web Procedure on page 447 for information about using the J Web int...

Page 155: ...ct Dell Understand what makes up a license key For more information see License Key Components for the J EX Series Switch on page 66 This topic includes the following tasks Adding New Licenses on page 83 Deleting Licenses on page 84 Saving License Keys on page 84 Adding New Licenses To add one or more new license keys on the switch with the CLI 1 Add the license key or keys To add one or more lice...

Page 156: ... on page 88 Understanding Software Licenses for the J EX Series Switch on page 65 Managing Licenses for the J EX Series Switch J Web Procedure To enable and use some Junos OS features on a J EX Series switch you must purchase install and manage separate software licenses Each switch requires one license For a Virtual Chassis deployment two licenses are recommended for redundancy After you have con...

Page 157: ...n the switch with the J Web license manager 1 In the J Web interface select Maintain Licenses 2 Under Installed Licenses click Add to add a new license key or keys 3 Do one of the following using a blank line to separate multiple license keys In the License File URL box type the full URL to the destination file containing the license key or keys to be added In the License Key Text box paste the li...

Page 158: ...tch with the J Web license manager 1 In the J Web interface select Maintain Licenses 2 Under Installed Licenses click Download Keys to download all the license keys installed on the switch to a single file 3 Select Save it to disk and specify the file to which the license keys are to be written You can also download the license file to your system Related Documentation Managing Licenses for the J ...

Page 159: ...rdware address 00 0a 12 00 12 12 Client Status bound Vendor Identifier ether Server Address 10 1 1 1 Address obtained 10 1 1 89 Lease Obtained at 2009 08 20 18 13 04 PST Lease Expires at 2009 08 22 18 13 04 PST DHCP Options Name name server Value 10 209 194 131 2 2 2 2 3 3 3 3 Name server identifier Value 10 1 1 1 Name router Value 10 1 1 80 Name boot image Value jinstall ex 4200 10 2R1 5 domestic...

Page 160: ...itch ex 10 0I20090726_0011_user jweb ex 10 0I20090726_0011_user jpfe ex42x 10 0I20090726_0011_user Meaning The output shows the date and time when the snapshot was created and the packages that are part of the snapshot The date and time match the time when you created the snapshot You can compare the output of this command to the output of the show system software command to ensure that the snapsh...

Page 161: ...ature name used installed needed bgp 1 1 0 permanent isis 0 1 0 permanent ospf3 0 1 0 permanent ripng 0 1 0 permanent mpls 0 1 0 permanent Licenses installed License identifier JUNOS204558 License version 2 Valid for device BN0208380000 Features ex series Licensed routing protocols in ex series permanent Meaning The output shows the license or licenses for Virtual Chassis deployments installed on ...

Page 162: ...gioyf ardb5g sj7wnf rsdked wbjf5a sg Meaning The output shows the license key or keys for Virtual Chassis deployments installed on the switch Verify that each expected license key is present Related Documentation Managing Licenses for the J EX Series Switch CLI Procedure on page 83 Managing Licenses for the J EX Series Switch J Web Procedure on page 84 Understanding Software Licenses for the J EX ...

Page 163: ...disk clean before the new installation proceeds If there is no Junos OS image on the system follow the instructions in Booting a J EX Series Switch Using a Software Package Stored on a USB Flash Drive on page 79 to get an image on the system and boot the switch To perform a recovery installation 1 Power on the switch The loader script starts After the message Loading boot defaults loader conf disp...

Page 164: ... active partition when you reboot at the end of the installation process If you performed an upgrade and rebooted the system resets the active partition You can use this procedure to manually boot from the inactive partition NOTE If you have completed the installation of the software image but have not yet rebooted you can issue the requestsystemsoftwarerollback command to return to the original s...

Page 165: ...ies Switch with a Single Routing Engine CLI Procedure on page 70 Installing Software on J EX Series Switches J Web Procedure on page 75 Understanding Software Installation on J EX Series Switches on page 61 93 Chapter 8 Troubleshooting Software Installation ...

Page 166: ...94 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 167: ...er sfpplus pic modemode power budget priority priority lcd menu fpc slot number menu item menu name menu option psu redundancy n plus n redundancy graceful switchover Related Documentation Upgrading Software Using Automatic Software Download on J EX Series Switches on page 82 Configuring the LCD Panel on J EX Series Switches CLI Procedure on page 166 Configuring Graceful Routing Engine Switchover ...

Page 168: ... automatic software download ensure that you have configured DHCP services for the switch including configuring a path to a boot server and a boot file See the Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos index html for information about using the CLI to configure DHCP services and settings See Configuring DHCP Services J Web Procedure on page 447 for ...

Page 169: ...CHAPTER 10 Operational Mode Commands for Software Installation 97 ...

Page 170: ...he filename or the URL where the key is located terminal License key from the terminal Required Privilege Level maintenance List of Sample Output request system license add on page 98 Output Fields When you enter this command you are provided feedback on the status of your request requestsystemlicense add user host request system license add terminal requestsystemlicense add 98 Dell PowerConnect J...

Page 171: ...me Options license id License ID that uniquely identifies a license key Required Privilege Level maintenance List of Sample Output request system license delete on page 99 Output Fields When you enter this command you are provided feedback on the status of your request requestsystemlicense delete user host request system license delete G03000002223 requestsystemlicense delete 99 Chapter 10 Operati...

Page 172: ...y the filename or the URL where the key is located terminal License key from the terminal Required Privilege Level maintenance List of Sample Output request system license save on page 100 Output Fields When you enter this command you are provided feedback on the status of your request requestsystemlicense save user host request system license save ftp user host license conf requestsystemlicense s...

Page 173: ...one of the following ways now Stop or reboot the software immediately This is the default minutes Number of minutes from now to reboot the software yymmddhhmm Absolute time at which to reboot the software specified as year month day hour and minute hh mm Absolute time on the current day at which to stop the software specified in 24 hour time in minutes Optional Number of minutes from now to reboot...

Page 174: ...e show log Also the names of any running processes that are scheduled to be shut down are changed You can view the process names with the show system processes command see show system processes NOTE To reboot a router that has two Routing Engines reboot the backup Routing Engine if you have upgraded it first and then reboot the master Routing Engine Required Privilege Level maintenance Related Doc...

Page 175: ...0 user host request system reboot in 120 user host request system reboot at 19 00 request system reboot Immediately user host request system reboot at now request system reboot at 1 20 AM To reboot the system at 1 20 AM enter the following command Because 1 20 AM is the next day you must specify the absolute time user host request system reboot at 06060120 request system reboot at 120 Reboot the s...

Page 176: ...of the Virtual Chassis at time Optional Time at which to reboot the software specified in one of the following ways minutes Number of minutes from now to reboot the software hh mm Absolute time on the current day at which to reboot the software specified in 24 hour time now Stop or reboot the software immediately This is the default yymmddhhmm Absolute time at which to reboot the software specifie...

Page 177: ...message Maintenance time Reboot the system yes no no yes shutdown pid 186 System shutdown message from root berry network net System going down at 23 00 request system reboot in 2 Hours The following example which assumes that the time is 5 PM 17 00 illustrates three different ways to request the system to reboot in two hours user host request system reboot at 120 user host request system reboot i...

Page 178: ...lace the snapshot in Virtual Chassis configurations all members Create a snapshot for each switch that is a member of the Virtual Chassis local Create a snapshot on the local switch only member member id Create a snapshot for the specified member or member switches of the Virtual Chassis as primary Optional Create a bootable snapshot NOTE The snapshot is always bootable on J EX Series switches The...

Page 179: ...did not boot the switch at the last bootup Required Privilege Level view Related Documentation show system snapshot on page 122 Creating a Snapshot and Using It to Boot a J EX Series Switch on page 80 Output Fields When you enter this command you are provided feedback on the status of your request request system snapshot media external slice 1 user switch request system snapshot media external sli...

Page 180: ...Use ftp hostname pathname package name To specify authentication credentials use ftp username password hostname pathname package name To have the system prompt you for the password specify prompt in place of the password If a password is required and you do not specify the password or prompt an error message is displayed http Hypertext Transfer Protocol Use http hostname pathname package name To s...

Page 181: ...alInformation Before upgrading the software on the router or switch when you have a known stable system issue the request system snapshot command to back up the software including the configuration to the altroot and altconfig file systems After you have upgraded the software on the router or switch and are satisfied that the new package or bundle is successfully installed and running issue the re...

Page 182: ...sing var validate tmp jbundle jroute 7 2R1 7 tgz Validating against config juniper conf gz mgd commit complete Validation succeeded Validating against config rescue conf gz mgd commit complete Validation succeeded Installing package var tmp jinstall 7 2R1 7 domestic signed tgz Verified jinstall 7 2R1 7 domestic tgz signed by PackageProduction_7_2_0 Adding jinstall WARNING This package will load JU...

Page 183: ...Junos OS base software force Optional Ignore warnings and force removal of the software AdditionalInformation Before upgrading the software on the router or switch when you have a known stable system issue the request system snapshot command to back up the software including the configuration to the altroot and altconfig file systems After you have upgraded the software on the router or switch and...

Page 184: ...tware Suite 7 2R1 7 Information for jcrypto Comment JUNOS Crypto Software Suite 7 2R1 7 Information for jdocs Comment JUNOS Online Documentation 7 2R1 7 Information for jkernel Comment JUNOS Kernel Software Suite 7 2R1 7 user host request system software delete jdocs Removing package jdocs user host show system software Information for jbase Comment JUNOS Base OS Software Suite 7 2R1 7 Information...

Page 185: ...n the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 AdditionalInformation Use this command only to recover from a failed software upgrade you cannot issue this command to return to the previously installed software after using a jinstall package To return to the previously installed software use the corresponding jinstall package A software r...

Page 186: ...conf pre install Reloading config juniper conf gz Activating config juniper conf gz mgd commit complete Restarting mgd Restarting aprobed Restarting apsd Restarting cosd Restarting fsad Restarting fud Restarting gcdrd Restarting ilmid Restarting irsd Restarting l2tpd Restarting mib2d Restarting nasd Restarting pppoed Restarting rdd Restarting rmopd Restarting rtspd Restarting sampled Restarting se...

Page 187: ...e specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 package name Name of the software bundle or package to test Required Privilege Level maintenance Related Documentation request system software add on page 108 request system software delete on page 111 request system software rollback on page 113 List of Sample Output request system software val...

Page 188: ...ing var chroot var tmp jbundle jdocs 5 3I20020124_0520_sjg tgz Using var chroot var tmp jbundle jroute 5 3I20020124_0520_sjg tgz Validating against config juniper conf gz mgd commit complete WARNING cli has been replaced by an updated version CLI release 5 3I0 built by sjg on 2002 01 24 05 23 53 UTC Restart cli using the new version yes no yes request system software validate Failure Case user hos...

Page 189: ...mple Output show system autoinstallation status on page 117 show system autoinstallation status user host show system autoinstallation status Autoinstallation status Master state Active show system autoinstallation status Last committed file None Configuration server of last committed file 0 0 0 0 Interface Name fe 0 0 1 State None Address acquisition Protocol DHCP Client Acquired address None Pro...

Page 190: ...boot Options none Display all boot time messages all members J EX4200 switches only Optional Display boot time messages on all members of the Virtual Chassis configuration local J EX4200 switches only Optional Display boot time messages on the local Virtual Chassis member member member id J EX4200 switches only Optional Display boot time messages on the specified member of the Virtual Chassis conf...

Page 191: ... Name Name assigned to the configured feature You use this information to verify that all the features for which you installed licenses are present Feature name Number of licenses used by a router or switch You use this information to verify that the number of licenses used matches the number configured If a licensed feature is configured the feature is considered used Licenses used Information ab...

Page 192: ...uthentication permanent subscriber address assignment Radius SRC Address Pool Assignment permanent subscriber vlan Dynamic Auto sensed Vlan permanent subscriber ip Dynamic and Static IP permanent show system license installed user host show system license installed License identifier XXXXXXXXXX License version 2 Features subscriber accounting Per Subscriber Radius Accounting permanent subscriber a...

Page 193: ...0 permanent subscriber authentication 1 1 0 permanent subscriber address assignment 1 1 0 permanent subscriber vlan 0 1 0 permanent subscriber ip 0 1 0 permanent 121 Chapter 10 Operational Mode Commands for Software Installation ...

Page 194: ...he snapshot The external option specifies the snapshot on an external mass storage device such as a USB flash drive The internal option specifies the snapshot on an internal memory source such as internal flash memory slice 1 2 alternate Display the snapshot in a partition 1 Display the snapshot in partition 1 2 Display the snapshot in partition 2 alternate Display the snapshot in the alternate pa...

Page 195: ...kernel ex 10 0I20090726_0011_user jroute ex 10 0I20090726_0011_user jswitch ex 10 0I20090726_0011_user jweb ex 10 0I20090726_0011_user jpfe ex42x 10 0I20090726_0011_user 123 Chapter 10 Operational Mode Commands for Software Installation ...

Page 196: ...124 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 197: ...PART 4 User Interfaces User Interfaces Overview on page 127 Using the Configuration Tools on page 135 Operational Mode Commands for User Interfaces on page 137 125 ...

Page 198: ...126 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 199: ...LI Help and Command Completion on page 127 CLI Command Modes on page 128 CLI Overview Junos OS CLI is a command shell that runs on top of a UNIX based operating system kernel The CLI provides command help and command completion The CLI also provides a variety of UNIX utilities such as Emacs style keyboard sequences that allow you to move around on a command line and scroll through recently execute...

Page 200: ...ion in the configuration hierarchy for example edit interfaces ge 0 0 12 user switch In configuration mode you are actually viewing and changing the candidate configuration file The candidate configuration allows you to make configuration changes without causing operational changes to the current operating configuration called the active configuration When you commit the changes you added to the c...

Page 201: ... typical Web browser interface For information about the CLI user interface see CLI User Interface Overview on page 127 NOTE To access the J Web interface your management device must have the following software installed Operating system Microsoft Windows XP Service Pack 3 Browser version One of the following Other browsers might work but are not supported by J Series platforms Microsoft Internet ...

Page 202: ...nt user session along with changes from other user sessions Preference Indicates your choice of committing all configurations changes together or committing each configuration change immediately The two commit options are Commit changes immediately Sets the system to force an immediate commit on every page after every configuration change Validate changes until explicit commit Loads all configurat...

Page 203: ...ent I Inactive The configuration statement does not affect the switch M Modified The configuration statement has been added or modified Mandatory The configuration statement must have a value Icon legend Task Pane Applies to the Junos OS CLI configuration editor only Displays the hierarchy of committed statements in the switch configuration Click Expand all to display the entire hierarchy Click Hi...

Page 204: ...cess Interfaces VLAN properties Virtual Chassis properties Secure Access Services Routing protocols Web browser pages divided into panes in which you can do any of the following Expand the entire configuration hierarchy and click a configuration statement to view or edit The main pane displays all the options for the statement with a text box for each option Paste a complete configuration hierarch...

Page 205: ...alled a certificate on the switch and enabled HTTPS See Generating SSL Certificates to Be Used for Secure Web Access on page 398 When you attempt to log in through the J Web interface the switch authenticates your username with the same methods used for Telnet and SSH If the switch does not detect any activity through the J Web interface for 15 minutes the session times out and is terminated You m...

Page 206: ...134 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 207: ...ft Windows XP Service Pack 3 Browser version One of the following Other browsers might work but are not supported by J Series platforms Microsoft Internet Explorer version 7 0 Mozilla Firefox version 3 0 Additional requirements Only English language browsers are supported The browser and the network must be able to receive and process HTTP 1 1 gzip compressed data Before you can use the CLI termin...

Page 208: ...s switch To start the J Web interface 1 Launch your HTTP enabled or HTTPS enabled Web browser To use HTTPS you must have installed a certificate on the switch and enabled HTTPS 2 After http or https in your Web browser type the hostname or IP address of the switch and press Enter The J Web login page appears 3 On the login page type your username and password and click Log In To correct or change ...

Page 209: ...CHAPTER 13 Operational Mode Commands for User Interfaces 137 ...

Page 210: ...view Related Documentation show cli on page 147 List of Sample Output set cli complete on space on page 138 Output Fields When you enter this command you are provided feedback on the status of your request set cli complete on space In the following example pressing the Spacebar changes the partial command entry from com to complete on space The example shows how adding the keyword off at the end o...

Page 211: ...working directory Required Privilege Level view Related Documentation show cli directory on page 152 List of Sample Output set cli directory on page 139 Output Fields When you enter this command you are provided feedback on the status of your request set cli directory user host set cli directory var home regress Current directory var home regress set cli directory 139 Chapter 13 Operational Mode C...

Page 212: ...is command and the user s login class does not specify this value the user is never forced off the system after extended idle times Setting the value to 0 disables the timeout Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set cli idle timeout on page 140 Output Fields When you enter this command you are provided feedback on the status of your reques...

Page 213: ...clude spaces in the prompt enclose the string in quotation marks By default the string is username hostname Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set cli prompt on page 141 Output Fields When you enter this command the new CLI prompt is displayed set cli prompt user host set cli prompt lab1 router lab1 router set cli prompt 141 Chapter 13 Op...

Page 214: ...e Options off Disables the prompt on Enables the prompt Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set cli restart on upgrade on page 142 Output Fields When you enter this command you are provided feedback on the status of your request set cli restart on upgrade user host set cli restart on upgrade on Enabling restart on upgrade set cli restart o...

Page 215: ...re prompt appears on the screen is a function of this setting and the settings for the set cli screen width and set cli terminal commands Required Privilege Level view Related Documentation set cli screen width on page 144 set cli terminal on page 145 show cli on page 147 List of Sample Output set cli screen length on page 143 Output Fields When you enter this command you are provided feedback on ...

Page 216: ...is a function of this setting and the settings for the set cli screen length and set cli terminal commands Required Privilege Level view Related Documentation set cli screen length on page 143 set cli terminal on page 145 show cli on page 147 List of Sample Output set cli screen width on page 144 Output Fields When you enter this command you are provided feedback on the status of your request set ...

Page 217: ...rminal 80 characters by 24 lines small xterm Small xterm window 80 characters by 24 lines vt100 VT100 compatible terminal 80 characters by 24 lines xterm Large xterm window 80 characters by 65 lines Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set cli terminal on page 145 Output Fields This command provides no output set cli terminal user host set ...

Page 218: ...lders in any order m Two digit month d Two digit date T Six digit hour minute and seconds disable Remove the timestamp from the CLI Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set cli timestamp on page 146 Output Fields When you enter this command you are provided feedback on the status of your request set cli timestamp user host set cli timestamp...

Page 219: ...e number of minutes is displayed Otherwise the state is disabled CLI idle timeout CLI is set to prompt you to restart the router or switch after upgrading the software on or off CLI restart on upgrade Number of lines of text that the terminal screen displays CLI screen length Number of characters in a line on the terminal screen CLI screen width Terminal type CLI terminal Mode enhanced CLI is oper...

Page 220: ...148 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 221: ...t Fields Field Description Field Name Can view access configuration information access Can modify access configuration access control Can view user account information admin Can modify user account information admin control Can clear learned network information clear Can enter configuration mode configure Can modify any configuration control Can edit configuration files edit Reserved for field deb...

Page 222: ...n keys in the configuration secret control Can view security configuration information security Can modify security configuration information security control Can start a local shell shell Can view SNMP configuration information snmp Can modify SNMP configuration information snmp control Can view system configuration information system Can modify system configuration information system control Can...

Page 223: ...file settings trace control Can modify trace file settings view Can view current values and statistics maintenance Can become the super user firewall Can view firewall configuration firewall control Can modify firewall configuration secret Can view secret configuration secret control Can modify secret configuration rollback Can rollback to previous configurations security Can view security configu...

Page 224: ...y on page 152 Output Fields Table 29 on page 152 lists the output fields for the show cli directory command Output fields are listed in the approximate order in which they appear Table 29 show cli directory Output Fields Field Description Field Name Pathname of the current working directory Current directory show cli directory user host show cli directory Current directory var home regress show cl...

Page 225: ...show cli history on page 153 Output Fields Table 30 on page 153 lists the output fields for the show cli history command Output fields are listed in the approximate order in which they appear Table 30 show cli history Output Fields Field Description Field Name Time at which the command was entered timestamp Command that was entered command syntax show cli history user host show cli history 11 14 1...

Page 226: ... shell as another user AdditionalInformation When you are in the shell the shell prompt has the following format username hostname An example of the prompt is root router Required Privilege Level shell and maintenance List of Sample Output start shell csh on page 154 Output Fields When you enter this command you are provided feedback on the status of your request start shell csh start shell csh us...

Page 227: ...for J EX Series Switches System Setup System Setup Overview on page 157 Initial Configuration on page 161 Configuration Statements for System Setup on page 171 Operational Mode Commands for System Setup on page 201 155 ...

Page 228: ...156 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 229: ...ge 5 High Availability and Resiliency Features Table 8 on page 6 Interfaces Features Table 9 on page 7 IP Address Management Features Table 10 on page 7 IPv6 Features Table 11 on page 7 Layer 2 Network Protocols Features Table 12 on page 8 Layer 3 Protocols Features Table 13 on page 9 MPLS Features Table 14 on page 10 Multicast Features Table 15 on page 10 Network Management and Monitoring Feature...

Page 230: ...ocessing components Packet Forwarding Engine Processes packets applies filters routing policies and other features and forwards packets to the next hop along the route to their final destination Routing Engine Provides three main functions Creates the packet forwarding switch fabric for the switch providing route lookup filtering and switching on incoming data packets then directing outbound packe...

Page 231: ...ations Guide at http www juniper net techpubs software junos For more information about basic system parameters supported protocols and software processes see the Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos 159 Chapter 14 System Setup Overview ...

Page 232: ...160 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 233: ...onnect and configure a J EX Series switch one method is through the console using the CLI and the other is using the J Web interface This topic describes the CLI procedure NOTE To run the ezsetup script the switch must have the factory default configuration as the active configuration If you have configured anything on the switch and want to run ezsetup revert to the factory default configuration ...

Page 234: ... be able to log in to a J EX Series switch through Telnet using root credentials Root login is allowed only for SSH access 6 Use the Management Options page to select the management scenario NOTE On J EX8200 switches only the out of band management option is available Configure in band management In this scenario you have the following two options Use the default VLAN Create a new VLAN If you sele...

Page 235: ...s the J Web procedure To access the J Web interface your management device must have the following software installed Operating system Microsoft Windows XP Service Pack 3 Browser version One of the following Other browsers might work but are not supported by J Series platforms Microsoft Internet Explorer version 7 0 Mozilla Firefox version 3 0 Additional requirements Only English language browsers...

Page 236: ...t the cable to port 0 ge 0 0 0 on the front panel of the switch J EX8200 switch Connect the cable to the port labeled MGMT on the Switch Fabric and Routing Engine SRE module in slot SRE0 in a J EX8208 switch or on the Routing Engine RE module in slot RE0 in a J EX8216 switch These ports are configured as the DHCP server with the default IP address 192 168 1 1 The switch can assign an IP address to...

Page 237: ...way for the management interface 8 Click Next 9 On the Manage Access page you may select options to enable Telnet SSH and SNMP services For SNMP you can configure the read community location and contact 10 Click Next The Summary screen displays the configured settings 11 Click Finish The configuration is committed as the active switch configuration You can now log in with the CLI or the J Web inte...

Page 238: ...those menus in the LCD panel are enabled Users can configure and troubleshoot the switch using the Maintenance menu and view certain details about the switch using the Status menu If you do not want users to be able to use those menus or use some of the menu options you can disable the menus or individual menu options You can re enable the menus or menu options Issue the show chassis lcd operation...

Page 239: ...lay message message fpc slot slot number permanent NOTE The Menu button and the Enter button are disabled if the LCD is configured to display a custom message To disable the display of the custom message user switch clear chassis display message You can view the custom message by issuing the command show chassis lcd Related Documentation LCD Panel in J EX4200 Switches LCD Panel in a J EX8200 Switc...

Page 240: ... list Synchronizes the system time with that of the NTP server You can also manually set the system time and date Set Time Related Documentation J Web User Interface for J EX Series Switches Overview on page 129 Configuring System Identity for a J EX Series Switch J Web Procedure To configure identification details for a J EX Series switch 1 Select Configure System Properties System Identity The S...

Page 241: ...t can use to log in to the switching platform Root Password Retype the password Verifies that the root password has been typed correctly Confirm Root Password To add an IP address click Add To edit an IP address click Edit To delete an IP address click Delete Specifies a DNS server for the switching platform to use to resolve hostnames into addresses DNS Name Servers To add a domain click Add To e...

Page 242: ...170 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 243: ...he time between updates can improve system performance passive learning Configures backup VRRP routers or switches to learn the ARP mappings IP to MAC address for hosts sending the requests By default the backup VRRP router drops these requests therefore if the master router fails the backup router must learn all entries present in the ARP cache of the master router Configuring passive learning re...

Page 244: ...e MD5 must be identical between a set of peers sharing the same key number Options key number Positive integer that identifies the key type type Authentication type It can only be md5 value password The key itself which can be from 1 through 8 ASCII characters If the key contains spaces enclose it in quotation marks Required Privilege Level system To view this statement in the configuration system...

Page 245: ...ntp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the server that NTP queries when the router or switch boots to determine the local date and time When you boot the router or switch it issues an ntpdate request which polls a network server to determine the local date and time You need to configure a server that the router or sw...

Page 246: ...n one of the local networks or a multicast address assigned to NTP You must specify an address not a hostname If the multicast address is used it must be 224 0 1 1 key key number Optional All packets sent to the address include authentication fields that are encrypted using the specified key number Range Any unsigned 32 bit integer ttl value Optional Time to live TTL value to use Range 1 through 2...

Page 247: ...outer or switch to listen for broadcast messages on the local network to discover other servers on the same subnet Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring the Router or Switch to Listen for Broadcast Messages Using NTP 175 Chapter 16 Configuration Statements for System Se...

Page 248: ...re also prevents superusers and anyone with a user identifier UID of 0 from establishing terminal connections in multiuser mode log out on disconnect Log out the session when the data carrier on the console port is lost type terminal type Type of terminal that is connected to the port Range ansi vt100 small xterm xterm Default The terminal type is unknown and the user is prompted for the terminal ...

Page 249: ...ing the Junos OS to Select a Fixed Source Address for Locally Generated TCP IP Packets Junos OS Network Interfaces Configuration Guide domain name Router Syntax domain name domain name Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the name of the domain in which the router or switch is located This i...

Page 250: ...ation system control To add this statement to the configuration Related Documentation Configuring the Junos OS for Path MTU Discovery on Outgoing GRE Tunnel Connections host name Syntax host name hostname Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the hostname of the router or switch Options hostname Na...

Page 251: ... bucket size seconds Number of seconds in the rate limiting bucket Range 0 through 4294967295 seconds Default 5 packet rate pps Rate limiting packets earned per second Range 0 through 4294967295 pps Default 1000 Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring the Junos OS ICMPv4 Ra...

Page 252: ...ze seconds Number of seconds in the rate limiting bucket Range 0 through 4294967295 seconds Default 5 packet rate pps Rate limiting packets earned per second Range 0 through 4294967295 pps Default 1000 Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring the Junos OS ICMPv6 Rate Limit f...

Page 253: ...are starts Options address Address of the default router destinationdestination address Optional Destination address that is reachable through the backup router Include this option to achieve network reachability while loading configuring and recovering the router or switch but without the risk of installing a default route in the forwarding table Default All hosts default route are reachable thro...

Page 254: ...tatement in the configuration admin control To add this statement to the configuration Related Documentation Configuring the Junos OS ICMPv4 Rate Limit for ICMPv4 Routing Engine Messages Configuring the Junos OS ICMPv6 Rate Limit for ICMPv6 Routing Engine Messages Configuring the Junos OS for IP IP Path MTU Discovery on IP IP Tunnel Connections Configuring the Junos OS for Path MTU Discovery on Ou...

Page 255: ...statement to the configuration Related Documentation Configuring the Junos OS for IP IP Path MTU Discovery on IP IP Tunnel Connections ipv6 duplicate addr detection transmits Syntax ipv6 duplicate addr detection transmits Hierarchy Level edit system internet options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Control the number of atte...

Page 256: ...s statement to the configuration Related Documentation Configuring the Junos OS for IPv6 Path MTU Discovery ipv6 path mtu discovery timeout Syntax ipv6 path mtu discovery timeout minutes Hierarchy Level edit system internet options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the IPv6 path MTU discovery timeout interval Options minu...

Page 257: ...X Series switches Description Enable and disable rejecting incoming IPv6 packets with a zero hop limit value in their header Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring the Junos OS for Acceptance of IPv6 Packets with a Zero Hop Limit 185 Chapter 16 Configuration Statements f...

Page 258: ...number J EX4200 switches only Disable or enable the specified menu or menu options where slot number is 0 On a standalone J EX4200 switch 0 9 On a J EX4200 switch in a Virtual Chassis The value is the member ID of the switch The remaining statement is explained separately Required Privilege Level view level To view this statement in the configuration control level To add this statement to the conf...

Page 259: ...tring contains spaces enclose it in quotation marks country code code Two letter country code floor number Floor in the building hcoord horizontal coordinate Bellcore Horizontal Coordinate lata service area Long distance service area latitude degrees Latitude in degree format longitude degrees Longitude in degree format npa nxx number First six digits of the phone number area code and exchange pos...

Page 260: ...s port VCP status for a J EX4200 switch in a Virtual Chassis configuration status menusf status1 menu J EX8200 switches only Status of the switch fabric on the Switch Fabric and Routing Engine SRE module in slot SRE0 on J EX8208 switches Status of the switch fabric on the Switch Fabric SF modules in slots SF0 and SF1 on J EX8216 switches status menu sf status2 menu J EX8200 switches only Status of...

Page 261: ...ease Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For NTP configure the local router or switch to listen for multicast messages on the local network to discover other servers on the same subnet Options address Optional One or more IP addresses If you specify addresses the router or switch joins those multicast groups Default 224 0 1 1 Required ...

Page 262: ...d Documentation Configuring the Junos OS to Disable the Routing Engine Response to Multicast Ping Packets no ping record route Syntax no ping record route Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the Junos OS to disable the reporting of the IP address in ping responses Required Privilege Level s...

Page 263: ...elease Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable the sending of protocol redirect messages by the router or switch To disable the sending of redirect messages on a per interface basis include the no redirects statement at the edit interfaces interface name unit logical unit number family family hierarchy level Default The router or s...

Page 264: ...le TCP RFC 1323 Extensions no tcp rfc1323 paws Syntax no tcp rfc1323 paws Hierarchy Level edit system internet options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the Junos OS to disable the RFC 1323 Protection Against Wrapped Sequence PAWS number extension Required Privilege Level system To view this statement in the configu...

Page 265: ... add this statement to the configuration Related Documentation Synchronizing and Coordinating Time Distribution Using NTP path mtu discovery Syntax path mtu discovery no path mtu discovery Hierarchy Level edit system internet options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure path MTU discovery for outgoing Transmission Cont...

Page 266: ...st specify an address not a hostname key key number Optional All packets sent to the address include authentication fields that are encrypted using the specified key number Range Any unsigned 32 bit integer prefer Optional Mark the remote system as the preferred host which means that if all other factors are equal this remote system is chosen for synchronization among a set of correctly operating ...

Page 267: ...iliary ports The ports are located on the router s craft interface See the switch s hardware documentation for port locations The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring the Junos OS to Set Console and Auxiliary Port Propertie...

Page 268: ...conds the router or switch reboots from the alternate media or the other Routing Engine process name One of the valid process names You can obtain a complete list of process names by using the CLI command completion feature After specifying a process name command completion also indicates any additional options for that process timeoutseconds Optional Howoftenthesystemchecksthewatchdogtimer inseco...

Page 269: ...er things are equal this remote system is chosen for synchronization among a set of correctly operating systems version value Optional Specify the version number to be used in outgoing NTP packets Range 1 through 4 Default 4 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring the NTP...

Page 270: ...file size with the size option and a filename Range 2 through 1000 Default 3 files match regex Optional Refine the output to include lines that contain the regular expression no world readable Optional Disable unrestricted file access size size Optional Maximum size of each trace file in kilobytes KB megabytes MB or gigabytes GB When a trace file named trace file reaches this size it is renamed tr...

Page 271: ...ce levels as the trace level debug Log all code flow of control error Log failures with a short term effect info Log summary for normal operations such as the policy decisions made for a call trace Log program trace START and EXIT macros warning Log failure recovery events or failure of an external entity ui trace level Trace user interface operations Required Privilege Level system To view this s...

Page 272: ...ime with other systems on the network Options key numbers One or more key numbers Each key can be any 32 bit unsigned integer except 0 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring NTP Authentication Keys authentication key on page 172 broadcast on page 174 peer on page 194 ser...

Page 273: ...CHAPTER 17 Operational Mode Commands for System Setup 201 ...

Page 274: ...Privilege Level clear Related Documentation Configuring the LCD Panel Display on J EX Series Switches CLI Procedure on page 166 set chassis display message on page 233 show chassis craft interface List of Sample Output clear chassis display message on page 202 Output Fields See show chassis craft interface for an explanation of output fields clear chassis display message The following example disp...

Page 275: ... Green Red LCD screen host Up 0 17 05 47 Temperature OK 203 Chapter 17 Operational Mode Commands for System Setup ...

Page 276: ...es On a TX Matrix router clear both Routing Engines on all chassis connected to the TX Matrix router Likewise on a TX Matrix Plus router clear both Routing Engines on all chassis connected to the TX Matrix Plus router local J EX4200 switches only Optional Clear all halt or reboot requests on the local Virtual Chassis member membermember id J EX4200 switches only Optional Clear all halt or reboot r...

Page 277: ...r system reboot user host clear system reboot reboot requested by root at Sat Dec 12 19 37 34 1998 process id 17855 Terminating clear system reboot 205 Chapter 17 Operational Mode Commands for System Setup ...

Page 278: ...onfiguration mode allowing you to make changes without interference from other users Other users can enter and exit configuration mode but they cannot change the configuration private Optional Allow multiple users to edit different parts of the configuration at the same time and to commit only their own changes or to roll back without interfering with one another s changes You cannot commit change...

Page 279: ...fy a checksum hash to verify the integrity of the script You can include the key option if the checksum statement is included at the edit system scripts op file filename hierarchy level url url Optional Specify a URL where the script is located AdditionalInformation For more information about Junos OS op scripts see the Junos OS Configuration and Operations Automation Guide Required Privilege Leve...

Page 280: ...uest op user host op script1 interface ge 0 2 0 0 protocol inet op op url user host op url https www juniper net fa 2009 04 01 01 slax key md5 8de24d09e1d90b2581bb937d2a5ad590 interface ge 0 2 0 0 protocol inet 208 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 281: ...EX4200 switches in a Virtual Chassis configuration 0 through 9 switch s member ID J EX8208 switches 0 through 7 line card J EX8216 switches 0 through 15 line card pic slot slot number PIC slot number For J EX4200 switches it is 0 for built in network interfaces and 1 for interfaces on uplink modules For J EX8208 and J EX8216 switches it is 0 Required Privilege Level maintenance Related Documentati...

Page 282: ... to become the master Routing Engine release Request that the other Routing Engine become the master switch Toggle mastership between Routing Engines The acquire release and switch options have the following suboptions no confirm Optional Do not request confirmation for the switch force Optional Available only with the acquire option Force the change to a new master Routing Engine AdditionalInform...

Page 283: ...hassis routing engine master acquire user host request chassis routing engine master acquire warning Traffic will be interrupted while the PFE is re initialized request chassis routing engine master acquire warning The other routing engine s file system could be corrupted Reset other routing engine and become master yes no no request chassis routing engine master switch user host request chassis r...

Page 284: ...tional Time at which to stop the software specified in one of the following ways now Stop the software immediately This is the default minutes Number of minutes from now to stop the software yymmddhhmm Absolute time at which to stop the software specified as year month day hour and minute hh mm Absolute time on the current day at which to stop the software both routing engines Optional Halt both R...

Page 285: ...n on the boot media This option has the following suboptions 1 Halt partition 1 2 Halt partition 2 alternate Reboot from the alternate partition AdditionalInformation NOTE If you have a router or switch with two Routing Engines and you want to shut the power off to the router or switch or remove a Routing Engine you must first halt the backup Routing Engine if it has been upgraded then halt the ma...

Page 286: ...ifferent ways to request that the system stop 2 hours from now user host request system halt at 120 user host request system halt in 120 user host request system halt at 19 00 request system halt Immediately user host request system halt at now request system halt at 1 20 AM To stop the system at 1 20 AM enter the following command Because 1 20 AM is the next day you must specify the absolute time...

Page 287: ...d Log out the user session using the specified management process identifier PID The PID type must be management process terminal terminal Log out the user for the specified terminal session user username Log out the specified user AdditionalInformation For information about using the configure exclusive command see the Junos OS System Basics Configuration Guide Required Privilege Level configure ...

Page 288: ...which to power off the software specified in one of the following ways now Power off the software immediately This is the default minutes Number of minutes from now to power off the software yymmddhhmm Absolute time at which to power off the software specified as year month day hour and minute hh mm Absolute time on the current day at which to power off the software both routing engines Optional P...

Page 289: ...Optional Power off a partition on the boot media This option has the following suboptions 1 Power off partition 1 2 Power off partition 2 alternate Reboot from the alternate partition Required Privilege Level maintenance List of Sample Output request system power off on page 217 Output Fields When you enter this command you are provided feedback on the status of your request request system power o...

Page 290: ...w Stop or reboot the software immediately This is the default minutes Number of minutes from now to reboot the software yymmddhhmm Absolute time at which to reboot the software specified as year month day hour and minute hh mm Absolute time on the current day at which to stop the software specified in 24 hour time in minutes Optional Number of minutes from now to reboot the software This option is...

Page 291: ...mation Reboot requests are recorded in the system log files which you can view with the show log command see show log Also the names of any running processes that are scheduled to be shut down are changed You can view the process names with the show system processes command see show system processes NOTE To reboot a router that has two Routing Engines reboot the backup Routing Engine if you have u...

Page 292: ...em to reboot in two hours user host request system reboot at 120 user host request system reboot in 120 user host request system reboot at 19 00 request system reboot Immediately user host request system reboot at now request system reboot at 1 20 AM To reboot the system at 1 20 AM enter the following command Because 1 20 AM is the next day you must specify the absolute time user host request syst...

Page 293: ... member switch of the Virtual Chassis at time Optional Time at which to reboot the software specified in one of the following ways minutes Number of minutes from now to reboot the software hh mm Absolute time on the current day at which to reboot the software specified in 24 hour time now Stop or reboot the software immediately This is the default yymmddhhmm Absolute time at which to reboot the so...

Page 294: ...Maintenance time Reboot the system yes no no yes shutdown pid 186 System shutdown message from root berry network net System going down at 23 00 request system reboot in 2 Hours The following example which assumes that the time is 5 PM 17 00 illustrates three different ways to request the system to reboot in two hours user host request system reboot at 120 user host request system reboot in 120 us...

Page 295: ...st xsl to test slax The software converts a source file called test1 slax to test1 xsl slax to xslt Convert a SLAX script to XSLT source source filename Specify a source file that you want to convert xslt to slax Convert an XSLT script to SLAX Required Privilege Level maintenance List of Sample Output request system scripts convert slax to xslt on page 223 request system scripts convert xslt to sl...

Page 296: ...wnloaded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample Output req...

Page 297: ...to be downloaded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of ...

Page 298: ...ded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample Output...

Page 299: ...ion If logging is configured and being used the dry run option will rotate the log files In that case the output displays the message Currently rotating log files please wait If no logging is currently underway the output displays only a list of files to delete Required Privilege Level maintenance List of Sample Output request system storage cleanup dry run on page 227 request system storage clean...

Page 300: ... 8K Feb 22 13 00 var log messages 2 gz 3926B Mar 16 13 57 var log messages 0 gz 11 6K Mar 8 15 00 var log messages 5 gz 7254B Feb 5 15 00 var log messages 6 gz 12 9K Feb 22 13 00 var log messages 8 gz 3726B Mar 16 13 57 var log messages 7 gz 3962B Feb 22 12 47 var log sampled 1 gz 4146B Mar 8 12 20 var log sampled 0 gz 4708B Dec 21 11 39 var log sampled 2 gz 7068B Jan 16 18 00 var log messages 4 g...

Page 301: ...rface process remote operations routing secure neighbor discovery service deployment sflow service snmp vrrp web management gracefully immediately soft Release Information Command introduced before Junos OS Release 10 2 for J EX Series switches Description Restart a Junos OS process CAUTION Never restart a software process unless instructed to do so by a customer support engineer A restart might c...

Page 302: ...nagement process ethernet switching J EX Series switch only Optional Restart the Ethernet switching process event processing Optional Restart the event process eventd firewall Optional Restart the firewall management process which manages firewall configuration general authentication service J EX Series switch only Optional Restart the general authentication process gracefully Optional Restart the...

Page 303: ...chiving on the hard disk ppp Optional Restart the Point to Point Protocol PPP process pppoe Optional Restart the Point to Point Protocol over Ethernet PPPoE process protected system domain service Optional Restart the Protected System Domain PSD process redundancy interface process Optional Restart the ASP redundancy process remote operations Optional Restart the remote operations process which pr...

Page 304: ...ample BGP peers stay up and the routing table stays constant Omitting this option results in a graceful restart of the software process vrrp J EX Series switch only Optional Restart the Virtual Router Redundancy Protocol process web management J EX Series switch only Optional Restart the Web management process Required Privilege Level reset Related Documentation Overview of Junos OS CLI Operationa...

Page 305: ... the LCD panel display the message is limited to 16 characters fpc slot slot number J EX4200 switches only On the router display the text message on the craft interface for a specific Flexible PIC Concentrator FPC Replace slot number with a value from 0 through 31 On the switch display the text message for a specific member of a virtual chassis where fpc slot slot number corresponds to the member ...

Page 306: ...le shows how to delete the display message and verify that the message is removed user host set chassis display message message sent user host show chassis craft interface Red alarm LED off relay off Yellow alarm LED off relay off Host OK LED On Host fail LED Off FPCs 0 1 2 3 4 5 6 7 Green Red LCD screen host Up 0 17 05 47 Temperature OK 234 Dell PowerConnect J Series Ethernet Switch Complete Soft...

Page 307: ...ch ntp server Optional Specify the IP address of one or more NTP servers source address source address Optional Specify the source address that the router or switch uses to contact the remote NTP server Required Privilege Level view Related Documentation show cli on page 147 List of Sample Output set date on page 235 Output Fields When you enter this command you are provided feedback on the status...

Page 308: ...ssis display version levels for all members Required Privilege Level view List of Sample Output show chassis firmware J EX8200 Switch on page 236 Output Fields Table 33 on page 236 lists the output fields for the show chassis firmware command Output fields are listed in the approximate order in which they appear Table 33 show chassis firmware Output Fields Field Description Field Name Chassis part...

Page 309: ...erPC U Boot bootstrap loader 2 2 loader Routing Engine 1 U Boot U Boot 1 1 6 Mar 25 2009 06 13 12 2 4 0 loader FreeBSD PowerPC U Boot bootstrap loader 2 2 237 Chapter 17 Operational Mode Commands for System Setup ...

Page 310: ...slot with no fpc slot number value specified For a specific Virtual Chassis member fpc slot number equals member ID value For the line card in the specified slot on a J EX8200 switch fpc slot number equals slot number menu Optional Display the names of the menus and menu options that are currently enabled on the LCD panel menu all members J EX4200 switches only Optional Display the names of the me...

Page 311: ...Virtual Chassis members displays the member ID the current role and hostname for J EX8200 switches displays RE and the hostname The second line displays the currently selected port parameter of the Status LED and the alarms counter The Status LED port parameters are ADM Administrative SPD Speed DPX Duplex POE Power over Ethernet J EX4200 switches only LCD screen Current state of the Alarms Status ...

Page 312: ...18 Off ge 0 0 19 Off ge 0 0 20 Off ge 0 0 21 Off ge 0 0 22 Off ge 0 0 23 Off Front panel contents for slot 1 LCD screen 01 RE switch2 LED SPD ALARM 01 LEDs status Alarms LED Yellow Status LED Green Master LED Green Interface LED ADM SPD DPX POE ge 1 0 0 Off ge 1 0 1 Off ge 1 0 2 Off ge 1 0 3 Off ge 1 0 4 Off ge 1 0 5 Off ge 1 0 6 Off ge 1 0 7 Off ge 1 0 8 Off ge 1 0 9 Off ge 1 0 10 Off ge 1 0 11 O...

Page 313: ...ter LED Green Interface LED ADM SPD DPX POE ge 1 0 0 Off ge 1 0 1 Off ge 1 0 2 Off ge 1 0 3 Off ge 1 0 4 Off ge 1 0 5 Off ge 1 0 6 Off ge 1 0 7 Off ge 1 0 8 Off ge 1 0 9 Off ge 1 0 10 Off ge 1 0 11 Off ge 1 0 12 Off ge 1 0 13 Off ge 1 0 14 Off ge 1 0 15 Off ge 1 0 16 Off ge 1 0 17 Off ge 1 0 18 Off ge 1 0 19 Off ge 1 0 20 Off ge 1 0 21 Off ge 1 0 22 Off ge 1 0 23 Off show chassis lcd J EX8200 show...

Page 314: ... 0 0 26 Off ge 0 0 27 Off ge 0 0 28 Off ge 0 0 29 Off ge 0 0 30 Off ge 0 0 31 Off ge 0 0 32 Off ge 0 0 33 Off ge 0 0 34 Off ge 0 0 35 Off ge 0 0 36 Off ge 0 0 37 Off ge 0 0 38 Off ge 0 0 39 Off ge 0 0 40 Off ge 0 0 41 Off ge 0 0 42 Off ge 0 0 43 Off ge 0 0 44 Off ge 0 0 45 Off ge 0 0 46 Off ge 0 0 47 Off xe 2 0 0 Off xe 2 0 1 Off xe 2 0 2 Off xe 2 0 3 Off xe 2 0 4 Off xe 2 0 5 Off xe 2 0 6 Off xe ...

Page 315: ...ntenance menu maintenance menu halt menu maintenance menu system reboot maintenance menu rescue config maintenance menu vc uplink config maintenance menu factory default On a J EX4200 switch in a Virtual Chassis the output for the show chassis lcd menu all members command is the same as the output for the showchassislcdmenu command showchassislcdmenu J EX8200 user switch show chassis lcd menu stat...

Page 316: ...pplications defined by protocol characteristics apply groups Groups from which configuration data is inherited chassis Chassis configuration chassis network services Current running mode class of service Class of service configuration diameter Diameter base protocol layer configuration ethernet switching options J EX Series switch only Ethernet switching configuration event options Event processin...

Page 317: ...ion bit is not set for your user account the text SECRET DATA is substituted for that portion of the configuration If an identifier in the configuration contains a space the identifier is displayed in quotation marks Required Privilege Level view Related Documentation Displaying the Current Junos OS Configuration Overview of Junos OS CLI Operational Mode Commands List of Sample Output show configu...

Page 318: ...ect routes from protocol direct then accept show configuration policy options user host show configuration policy options policy options policy statement direct routes from protocol direct then accept 246 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 319: ...ame or address AdditionalInformation The show host command displays the raw data received from the DNS server Required Privilege Level view List of Sample Output show host on page 247 show host user host show host snark snark boojum net has address 192 168 1 254 user host show host 192 168 1 254 show host Name snark boojum net Address 192 168 1 254 Aliases 247 Chapter 17 Operational Mode Commands ...

Page 320: ... listed in the approximate order in which they appear Table 35 show ntp associations Output Fields Field Description Field Name Address or name of the remote NTP peer remote Reference identifier of the remote peer If the reference identifier is not known this field shows a value of 0 0 0 0 refid Stratum of the remote peer st Type of peer b broadcast l local m multicast or u unicast t When the last...

Page 321: ...te list Discarded by the clustering algorithm Included in the final selection set Selected for synchronization but the distance exceeds the maximum Selected for synchronization o Selected for synchronization but the packets per second pps signal is in use peer name show ntp associations user host show ntp associations remote refid st t when poll reach delay offset disp wolfe gw junipe tick ucla ed...

Page 322: ...ge 248 List of Sample Output show ntp status on page 250 show ntp status user host show ntp status status 0644 leap_none sync_ntp 4 events event_peer strat_chg version ntpd 4 1 0 a Fri Jun 24 06 40 56 GMT 2005 1 show ntp status processor i386 system JUNOS7 4 20050624 0 leap 00 stratum 2 precision 28 rootdelay 6 849 rootdispersion 10 615 peer 38788 refid ntp server company a net reftime c66705d9 06...

Page 323: ... part on the router or switch affected by the firmware Part Type of firmware on the router or switch Type Location of the firmware on the interface Tag Firmware version on the affected router or switch parts Current version New versions of firmware for upgrading or downgrading Available version Firmware condition on the router or switch Status Whether you can upgrade or downgrade or if no action i...

Page 324: ...es Systems with multiple Routing Engines Optional Display halt or reboot request information on both Routing Engines local J EX4200 switches only Optional Display halt or reboot request information for the local Virtual Chassis member member member id J EX4200 switches only Optional Display halt or reboot request information for the specified member of the Virtual Chassis configuration Replace mem...

Page 325: ...253 Chapter 17 Operational Mode Commands for System Setup ...

Page 326: ...he snapshot The external option specifies the snapshot on an external mass storage device such as a USB flash drive The internal option specifies the snapshot on an internal memory source such as internal flash memory slice 1 2 alternate Display the snapshot in a partition 1 Display the snapshot in partition 1 2 Display the snapshot in partition 2 alternate Display the snapshot in the alternate pa...

Page 327: ...er jkernel ex 10 0I20090726_0011_user jroute ex 10 0I20090726_0011_user jswitch ex 10 0I20090726_0011_user jweb ex 10 0I20090726_0011_user jpfe ex42x 10 0I20090726_0011_user 255 Chapter 17 Operational Mode Commands for System Setup ...

Page 328: ...play the system software running on the local Virtual Chassis member member member id J EX4200 switches only Optional Display the system software running on the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 scc Routing matrix only Optional Display the system software running on a TX Matrix router or switch card chassis Required Privilege Leve...

Page 329: ...n for jpfe Comment JUNOS Packet Forwarding Engine Support M20 M40 7 2R1 7 Information for jroute Comment JUNOS Routing Software Suite 7 2R1 7 Information for junos Comment JUNOS Base OS boot 7 2R1 7 257 Chapter 17 Operational Mode Commands for System Setup ...

Page 330: ...m storage statistics for the local Virtual Chassis member member member id J EX4200 switches only Optional Display system storage statistics for the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 Required Privilege Level view List of Sample Output show system storage on page 259 Output Fields Table 37 on page 258 describes the output fields fo...

Page 331: ... 0B 100 dev dev vn0 12M 12M 0B 100 packages mnt jbase dev vn1 39M 39M 0B 100 packages mnt jkernel 7 2R1 7 dev vn2 12M 12M 0B 100 packages mnt jpfe M40 7 2R1 7 dev vn3 2 3M 2 3M 0B 100 packages mnt jdocs 7 2R1 7 dev vn4 14M 14M 0B 100 packages mnt jroute 7 2R1 7 dev vn5 4 5M 4 5M 0B 100 packages mnt jcrypto 7 2R1 7 mfs 172 1 5G 4 0K 1 3G 0 tmp dev ad0s1e 12M 20K 11M 0 config procfs 4 0K 4 0K 0B 100...

Page 332: ...er Output Fields Field Description Field Name Display graceful Routing Engine switchover status On Indicates graceful switchover is specified for the routing options configuration command Off Indicates graceful switchover is not specified for the routing options configuration command Graceful switchover State of the configuration database Ready Configuration database has synchronized Synchronizing...

Page 333: ...er transition Peer Connected Peer in switchover transition Peer state show system switchover Backup Routing Engine user host show system switchover Graceful switchover On Configuration database Ready Kernel database Ready Peer state Steady State show system switchover Backup Routing Engine 261 Chapter 17 Operational Mode Commands for System Setup ...

Page 334: ...er of the Virtual Chassis configuration Replace member id with a value from 0 through 9 Required Privilege Level view List of Sample Output show system uptime on page 263 Output Fields Table 39 on page 262 describes the output fields for the show system uptime command Output fields are listed in the approximate order in which they appear Table 39 show system uptime Output Fields Field Description ...

Page 335: ...uptime user host show system uptime Current time 1998 10 13 19 45 47 UTC System booted 1998 10 12 20 51 41 UTC 22 54 06 ago show system uptime Protocols started 1998 10 13 19 33 45 UTC 00 12 02 ago Last configured 1998 10 13 19 33 45 UTC 00 12 02 ago by abc 12 45PM up 22 54 2 users load averages 0 07 0 02 0 01 263 Chapter 17 Operational Mode Commands for System Setup ...

Page 336: ...to hostnames Required Privilege Level view List of Sample Output show system users on page 265 Output Fields Table 40 on page 264 describes the output fields for the show system users command Output fields are listed in the approximate order in which they appear Table 40 show system users Output Fields Field Description Field Name Current time in the local time zone and how long the router or swit...

Page 337: ...m users 7 30PM up 4 days 2 26 2 users load averages 0 07 0 02 0 01 USER TTY FROM LOGIN IDLE WHAT show system users root d0 Fri05PM 4days csh csh blue p0 level5 company net 7 30PM cli 265 Chapter 17 Operational Mode Commands for System Setup ...

Page 338: ...mory usage information for the local Virtual Chassis member membermember id J EX4200switchesonly Optional Displaykerneldynamicmemory usage information for the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 AdditionalInformation NOTE Theshowsystemvirtual memory commandwiththe displayXML pipe option displays XML output for the command in the par...

Page 339: ...pe by bucket size Memory block size bytes Size Kernel modules that are using these memory blocks For a definition of each type refer to a FreeBSD book Type s Memory statistics by type Kernel module that is using dynamic memory Type Number of memory blocks used by this type The number is rounded up InUse Amount of memory in use in kilobytes KB MemUse Maximum memory ever used by this type HighUse Ma...

Page 340: ...t size Size In Use Free Requests HighWater Couldfree show system virtual memory 16 906 118 154876 1280 0 32 455 313 209956 640 0 64 4412 260 75380 320 20 128 3200 32 19361 160 81 256 1510 10 8844 80 4 512 446 2 5085 40 0 1K 18 2 5901 20 0 2K 1128 2 4445 10 1368 4K 185 1 456 5 0 8K 5 1 2653 5 0 16K 181 0 233 5 0 32K 2 0 1848 5 0 64K 20 0 22 5 0 128K 5 0 5 5 0 256K 2 0 2 5 0 512K 1 0 1 5 0 Memory us...

Page 341: ...p devbuf kld Gzip trees sem msg 8K temp devbuf syncache Gzip trees 16K indirdep temp devbuf shm msg 32K pagedep kld Gzip trees 64K VM pgdata devbuf MSDOSFS mount 128K UFS ihash inodedep NFS hash kld ISOFS mount 256K mbuf vfscache 512K SWAP Memory statistics by type Type Kern Type InUse MemUse HighUse Limit Requests Limit Limit Size s isadev 13 1K 1K127753K 13 0 0 64 atkbddev 2 1K 1K127753K 2 0 0 3...

Page 342: ...6 19K 20K127753K 3968 0 0 256 shm 1 12K 12K127753K 1 0 0 16K dev_t 286 36K 36K127753K 286 0 0 128 timecounter 10 2K 2K127753K 10 0 0 128 kld 11 117K 122K127753K 34 0 0 16 32 128 1K 4K AR driver 1 1K 3K127753K 5 0 0 64 512 2K AD driver 2 2K 3K127753K 2755 0 0 64 1K Gzip trees 0 0K 46K127753K 133848 0 0 32 64 128 256 ISOFS node 1136 142K 142K127753K 1189 0 0 128 ISOFS mount 9 132K 132K127753K 10 0 0...

Page 343: ...28 15359 0 64 5 tcpcb 576 25330 23 12 32 udpcb 192 25330 14 28 255 socket 256 25330 246 26 819 KNOTE 96 0 27 57 71 NFSNODE 352 0 0 0 0 NFSMOUNT 544 0 0 0 0 VNODE 224 0 2778 43 2778 NAMEI 1024 0 0 8 40725 VMSPACE 192 0 57 71 3906 PROC 448 0 73 17 3923 DP fakepg 64 0 0 0 0 PV ENTRY 28 499566 44530 152053 1525141 MAP ENTRY 48 0 1439 134 351075 KMAP ENTRY 48 35645 179 119 10904 MAP 108 0 7 3 7 VM OBJE...

Page 344: ...q8 4403221 127 Total 9863475 286 show system virtual memory display xml user host show system virtual memory display xml rpc reply xmlns junos http xml juniper net junos 10 2R1 junos system virtual memory information vmstat memstat malloc memstat name CAM dev queue memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 1 memstat req memstat size 64 memstat size memstat name entro...

Page 345: ...try memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 1 memstat req memstat size 64 memstat size memstat name iflogical memstat name inuse 13 inuse memuse 3 memuse high use high use memstat req 13 memstat req memstat size 64 2048 memstat size memstat name iffamily memstat name inuse 28 inuse memuse 4 memuse high use high use memstat req 28 memstat req memstat size 32 1024 20...

Page 346: ...use memstat req 40 memstat req memstat size 512 16384 32768 memstat size memstat name ipfw memstat name inuse 42 inuse memuse 23 memuse high use high use memstat req 91 memstat req memstat size 16 32 64 128 256 512 1024 16384 32768 65536 131072 memstat size memstat name ifmaddr memstat name inuse 103 inuse memuse 3 memuse high use high use memstat req 103 memstat req memstat size 16 32 memstat siz...

Page 347: ...t req 294 memstat req memstat size 1024 4096 memstat size memstat name itable32 memstat name inuse 160 inuse memuse 10 memuse high use high use memstat req 160 memstat req memstat size 64 memstat size memstat name itable64 memstat name inuse 2 inuse memuse 1 memuse high use high use memstat req 2 memstat req memstat size 128 memstat size memstat name lr memstat name inuse 1 inuse memuse 1 memuse h...

Page 348: ...at req memstat size 64 128 memstat size memstat name mtx_pool memstat name inuse 1 inuse memuse 8 memuse high use high use memstat req 1 memstat req memstat size 64 128 memstat size memstat name DEVFS3 memstat name inuse 109 inuse memuse 12 memuse high use high use memstat req 117 memstat req memstat size 256 memstat size memstat name DEVFS1 memstat name inuse 102 inuse memuse 23 memuse high use h...

Page 349: ...t size memstat name sysctloid memstat name inuse 1117 inuse memuse 34 memuse high use high use memstat req 1117 memstat req memstat size 16 32 64 memstat size memstat name sysctltmp memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 743 memstat req memstat size 16 32 64 1024 memstat size memstat name umtx memstat name inuse 144 inuse memuse 9 memuse high use high use memstat ...

Page 350: ...4 memstat size memstat name rman memstat name inuse 71 inuse memuse 5 memuse high use high use memstat req 433 memstat req memstat size 16 32 64 memstat size memstat name sbuf memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 522 memstat req memstat size 16 32 32768 131072 memstat size memstat name NULLFS hash memstat name inuse 1 inuse memuse 1 memuse high use high use mems...

Page 351: ...32768 131072 memstat size memstat name shm memstat name inuse 9 inuse memuse 20 memuse high use high use memstat req 14 memstat req memstat size 32768 memstat size memstat name ttys memstat name inuse 321 inuse memuse 61 memuse high use high use memstat req 528 memstat req memstat size 512 32768 memstat size memstat name ptys memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req...

Page 352: ...stat name vnodes memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 1 memstat req memstat size 512 memstat size memstat name mount memstat name inuse 290 inuse memuse 23 memuse high use high use memstat req 535 memstat req memstat size 16 32 64 128 256 4096 32768 memstat size memstat name vnodemarker memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 498...

Page 353: ...emstat req memstat size 16 32 64 128 256 512 2048 16384 32768 131072 memstat size memstat name p1003 1b memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 1 memstat req memstat size 16 memstat size memstat name MD disk memstat name inuse 10 inuse memuse 20 memuse high use high use memstat req 10 memstat req memstat size 65536 memstat size memstat name ata_generic memstat name...

Page 354: ...4 memstat size memstat name inodedep memstat name inuse 1 inuse memuse 128 memuse high use high use memstat req 464 memstat req memstat size 256 memstat size memstat name newblk memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 336 memstat req memstat size 64 4096 memstat size memstat name bmsafemap memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 63 ...

Page 355: ...tat size memstat name mkdir memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 136 memstat req memstat size 32 memstat size memstat name dirrem memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 168 memstat req memstat size 32 memstat size memstat name newdirblk memstat name inuse 0 inuse memuse 0 memuse high use high use memstat req 1 memstat req memsta...

Page 356: ...o memstat name inuse 1 inuse memuse 1 memuse high use high use memstat req 20 memstat req memstat size 32 memstat size memstat name kenv memstat name inuse 24 inuse memuse 5 memuse high use high use memstat req 27 memstat req memstat size 16 32 64 131072 memstat size memstat name atkbddev memstat name inuse 2 inuse memuse 1 memuse high use high use memstat req 2 memstat req memstat size 32 memstat...

Page 357: ...name inuse 2 inuse memuse 1 memuse high use high use memstat req 2 memstat req memstat size 16 memstat size memstat name CAM queue memstat name inuse 3 inuse memuse 1 memuse high use high use memstat req 3 memstat req memstat size 16 memstat size memstat name PIR memstat name inuse 4 inuse memuse 1 memuse high use high use memstat req 4 memstat req memstat size 32 memstat size memstat name KTRACE ...

Page 358: ...e name zone size 76 zone size count limit 0 count limit used 30 used free 20 free zone req 30 zone req zone name 32 Bucket zone name zone size 140 zone size count limit 0 count limit used 33 used free 23 free zone req 33 zone req zone name 64 Bucket zone name zone size 268 zone size count limit 0 count limit used 33 used free 9 free zone req 33 zone req zone name 128 Bucket zone name zone size 524...

Page 359: ... mt_zone zone name zone size 64 zone size count limit 0 count limit used 238 used free 57 free zone req 238 zone req zone name 16 zone name zone size 16 zone size count limit 0 count limit used 2114 used free 119 free zone req 80515 zone req zone name 32 zone name zone size 32 zone size count limit 0 count limit used 1335 used free 134 free zone req 10259 zone req zone name 64 zone name zone size ...

Page 360: ... limit 0 count limit used 2 used free 24 free zone req 10 zone req zone name 512 zone name zone size 512 zone size count limit 0 count limit used 49 used free 7 free zone req 911 zone req zone name 1024 zone name zone size 1024 zone size count limit 0 count limit used 213 used free 11 free zone req 1076 zone req zone name 2048 zone name zone size 2048 zone size count limit 0 count limit used 199 u...

Page 361: ...d free 0 free zone req 0 zone req zone name SLEEPQUEUE zone name zone size 32 zone size count limit 0 count limit used 145 used free 194 free zone req 145 zone req zone name VMSPACE zone name zone size 268 zone size count limit 0 count limit used 57 used free 13 free zone req 1335 zone req zone name mbuf_packet zone name zone size 256 zone size count limit 180000 count limit used 256 used free 128...

Page 362: ...q 69750 zone req zone name ata_request zone name zone size 200 zone size count limit 0 count limit used 0 used free 57 free zone req 5030 zone req zone name ata_composite zone name zone size 192 zone size count limit 0 count limit used 0 used free 0 free zone req 0 zone req zone name GENCFG zone name zone size 72 zone size count limit 1000004 count limit used 57 used free 102 free zone req 57 zone...

Page 363: ...one req zone name PIPE zone name zone size 404 zone size count limit 0 count limit used 27 used free 9 free zone req 717 zone req zone name KNOTE zone name zone size 72 zone size count limit 0 count limit used 42 used free 64 free zone req 3311 zone req zone name socket zone name zone size 412 zone size count limit 25191 count limit used 343 used free 8 free zone req 2524 zone req zone name unpcb ...

Page 364: ...e zone size 20 zone size count limit 1690 count limit used 0 used free 0 free zone req 0 zone req zone name sackhole zone name zone size 20 zone size count limit 0 count limit used 0 used free 0 free zone req 0 zone req zone name ripcb zone name zone size 232 zone size count limit 25194 count limit used 5 used free 29 free zone req 5 zone req zone name SWAPMETA zone name zone size 276 zone size co...

Page 365: ...s zeroed 74665 zero fill pages zeroed zero fill pages prezeroed 70061 zero fill pages prezeroed transit blocking page faults 85 transit blocking page faults total vm faults 191824 total vm faults pages affected by kernel thrd creat 0 pages affected by kernel thrd creat pages affected by fork 95343 pages affected by fork pages affected by vfork 3526 pages affected by vfork pages affected by rfork 0...

Page 366: ... intr rate 22 intr rate intr name irq10 fxp1 intr name intr cnt 20593 intr cnt intr rate 16 intr rate intr name irq14 ata0 intr name intr cnt 5031 intr cnt intr rate 4 intr rate intr name Total intr name intr cnt 1457873 intr cnt intr rate 1171 intr rate vmstat intr vm kernel state vm kmem map free 248524800 vm kmem map free vm kernel state system virtual memory information cli banner banner cli r...

Page 367: ...Output Fields Field Description Field Name Displays whether or not graceful Routing Engine switchover is configured The status can be Enabled or Disabled Stateful replication Displays the Routing Engine on which the command is issued Master Backup or Not applicable when the router has only one Routing Engine RE mode Protocol that are supported by nonstop active routing Protocol Nonstop active rout...

Page 368: ...Optional Display standard information about the hostname and version of the software running on all members of the Virtual Chassis configuration local J EX4200 switches only Optional Display standard information about the hostname and version of the software running on the local Virtual Chassis member member member id J EX4200 switches only Optional Display standard information about the hostname ...

Page 369: ...06_pappavu JUNOS Web Management 10 2I20100329_2206_pappavu show version J EX4200 24F master 0 user switch show version fpc0 Model DELL J EX4200 24F JUNOS Base OS boot 10 2I20100331_2208_pappavu JUNOS Base OS Software Suite 10 2I20100331_2208_pappavu JUNOS Kernel Software Suite 10 2I20100331_2208_pappavu JUNOS Crypto Software Suite 10 2I20100331_2208_pappavu JUNOS Online Documentation 10 2I20100331...

Page 370: ...298 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 371: ...er Management Power Management Overview on page 301 Initial Configuration on page 307 Verifying Power Management on page 309 Configuration Statements for Power Management on page 311 Operational Mode Commands for Power Management on page 315 299 ...

Page 372: ...300 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 373: ...ability and Resiliency Features Table 8 on page 6 Interfaces Features Table 9 on page 7 IP Address Management Features Table 10 on page 7 IPv6 Features Table 11 on page 7 Layer 2 Network Protocols Features Table 12 on page 8 Layer 3 Protocols Features Table 13 on page 9 MPLS Features Table 14 on page 10 Multicast Features Table 15 on page 10 Network Management and Monitoring Features Table 16 on p...

Page 374: ... power supplies power management reserves 3000 W in its power budget policy for redundancy It allocates the remaining 9000 W to normal operating power Specifies the rules under which components receive power These rules are designed to ensure the least disruption to switch operation under conditions of insufficient power For example power management provides power to core system components such as...

Page 375: ...power to it If power to the switch is insufficient when you take a line card offline power management allocates the freed power to a lower priority card that was offline due to lack of power and brings it online Restarting a line card however does not affect the power allocated to it Thus when power is insufficient restarting a line card does not change its operating status or the operating status...

Page 376: ... for all the line cards power management does not power down line cards that had been receiving power because they are now a lower priority Power Supply Redundancy By default power management in J EX8200 switches is configured to manage the power supplies for N 1 redundancy in which one power supply is held in reserve for backup if one of the other power supplies is removed or fails You can config...

Page 377: ...an N 1 configuration Power management automatically recalculates the redundant power and normal operating power as power supplies go online or offline For example if you have an N N configuration with three online 2000 W power supplies power management allocates 2000 W to redundant power If you bring a fourth 2000 W power supply online power management then allocates 4000 W to redundant power If a...

Page 378: ...f Line Cards CLI Procedure on page 308 Configuring Power Supply Redundancy CLI Procedure on page 307 Verifying Power Configuration and Use on page 309 306 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 379: ... management for N N redundancy and how to revert back to N 1 redundancy if your deployment needs change Before you configure power management for N N redundancy ensure that you have sufficient power supplies to meet the power requirements of this configuration Use the show chassis power budget statistics command to display your current power budget NOTE Toallowmorepowertobeavailabletolinecards pow...

Page 380: ...power all the line cards When assigning power priority to slots keep these points in mind 0 is the highest priority For a J EX8208 switch you can assign a priority of 0 through 7 to a slot For a J EX8216 switch you can assign a priority of 0 through 15 to a slot All slots are assigned the lowest priority by default If a group of slots shares the same assigned priority each slot s power priority wi...

Page 381: ...er Redundancy Configuration N N Power Reserved for the Chassis 1200 W FPC 5 EX8200 48F 330 W Priority 7 FPC 6 EX8200 8XS 450 W Priority 0 Actual Power Used 1980 W Power Available Redundant case 420 W Total Power Available 2820 W Meaning The switch is configured for N N redundancy As shown by the Power Available Redundant case field the switch has sufficient power to meet the N N power requirements...

Page 382: ...g used by the components Because the power budget allocation is based on maximum power use actual power consumption is likely to be much less Related Documentation Configuring Power Supply Redundancy CLI Procedure on page 307 Configuring the Power Priority of Line Cards CLI Procedure on page 308 310 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 383: ...CHAPTER 21 Configuration Statements for Power Management 311 ...

Page 384: ...00 switches The FPC refers to the switch itself 0 9 J EX4200 switch in a Virtual Chassis configuration The value corresponds to the switch s member ID 0 7 J EX8208 switch The slot is a line card slot 0 15 J EX8216 switch The slot is a line card slot The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To ...

Page 385: ...archy Level edit chassis fpc slot Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Assign a power priority to the specified line card slot on a J EX8200 switch Default All line card slots are initially assigned the lowest priority Options priority Assigned power priority for the slot with 0 being the highest priority Range 0 through 7 for a J E...

Page 386: ...CLI Procedure on page 307 redundancy Syntax redundancy n plus n Hierarchy Level edit chassis psu Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure N N power supply redundancy for power management on a J EX8200 switch The remaining statement is explained separately Default N 1 power supply redundancy is configured by default Required Pr...

Page 387: ...CHAPTER 22 Operational Mode Commands for Power Management 315 ...

Page 388: ...number of watts supplied by all currently operating power supplies Power supplied by all Online PSUs Configured power redundancy setting either N 1 or N N Power Redundancy Configuration Power reserved for the chassis For a J EX8208 switch 1600 W in an N 1 configuration 1200 W in an N N configuration For a J EX8216 switch 2400 W in an N 1 configuration 1800 W in an N N configuration The power reser...

Page 389: ...et including redundant power Total Power Available show chassis power budget statistics show chassis power budget statistics user switch show chassis power budget statistics PSU 0 EX8200 AC2K 2000 W PSU 1 EX8200 AC2K 2000 W PSU 2 EX8200 AC2K 2000 W Total Power supplied by all Online PSUs 6000 W Power Redundancy Configuration N N Power Reserved for the Chassis 1600 W FPC 6 EX8200 8XS 450 W Priority...

Page 390: ...318 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 391: ...nt Configuration Management Overview on page 321 Managing Junos OS Configuration on page 331 Verifying Configuration on page 349 Configuration Statements for Configuration Management on page 351 Operational Mode Commands for Configuration Management on page 359 319 ...

Page 392: ...320 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 393: ...e 50 most recently committed configuration files on the switch so that you can return to a previous configuration The configuration files are named juniper conf gz The current active configuration juniper conf 1 gz to juniper conf 49 gz Rollback configurations To make changes to the configuration file you have to work in the configuration mode in the CLI or use the configuration tools in the J Web...

Page 394: ...wo types of statements container statements which contain other statements and leaf statements which do not contain other statements All the container and leaf statements together form the configuration hierarchy configuration hierarchy The default configuration contains the initial values set for each configuration parameter when a switch is shipped default configuration Well known configuration ...

Page 395: ...vice over the network from a pre existing configuration file that you create and store on a configuration server typically a Trivial File Transfer Protocol TFTP server You can use autoinstallation to automatically configure new devices and to deploy multiple devices from a central location in the network Autoinstallation takes place automatically when you connect an Ethernet port on a new switch t...

Page 396: ...ecific device is required by the network you must configure an intermediate device directly attached to the new switch through which the new switch can send TFTP boot protocol BOOTP and Domain Name System DNS requests In this case you specify the IP address of the intermediate device as the location to receive TFTP requests for autoinstallation Typical Autoinstallation Process on a New Switch When...

Page 397: ... hostname it sends TFTP requests for the default configuration file switch conf The TFTP request procedure is the same as for the network conf file 3 After the new switch locates a configuration file on a TFTP server the autoinstallation process downloads the file installs the file on the switch and commits the configuration Related Documentation Configuring Autoinstallation of Configuration Files...

Page 398: ...transceivers ge 0 1 0 through ge 0 1 3 Although you can install only one uplink module the interfaces for both are shown below system syslog user any emergency file messages any notice authorization info file interactive commands interactive commands any commit factory settings reset chassis lcd menu reset virtual chassis configuration interfaces ge 0 0 0 unit 0 family ethernet switching ge 0 0 1 ...

Page 399: ... 0 0 8 unit 0 family ethernet switching ge 0 0 9 unit 0 family ethernet switching ge 0 0 10 unit 0 family ethernet switching ge 0 0 11 unit 0 family ethernet switching ge 0 0 12 unit 0 family ethernet switching ge 0 0 13 unit 0 family ethernet switching ge 0 0 14 unit 0 family ethernet switching ge 0 0 15 unit 0 327 Chapter 23 Configuration Management Overview ...

Page 400: ...witching ge 0 0 20 unit 0 family ethernet switching ge 0 0 21 unit 0 family ethernet switching ge 0 0 22 unit 0 family ethernet switching ge 0 0 23 unit 0 family ethernet switching ge 0 1 0 unit 0 family ethernet switching ge 0 1 1 unit 0 family ethernet switching ge 0 1 2 unit 0 family ethernet switching 328 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 401: ...fault Configuration Each J EX8200 switch is programmed with a factory default configuration that contains the values set for each configuration parameter when a switch is shipped The default configuration file sets values for system parameters such as the ARP aging timer the system log and file messages while also enabling the LLDP protocol the RSTP protocol IGMP snooping and storm control When yo...

Page 402: ...ontrol interface all Related Documentation Configuration Files Terms on page 322 Connecting and Configuring a J EX Series Switch CLI Procedure on page 161 Connecting and Configuring a J EX Series Switch J Web Procedure on page 163 Understanding Configuration Files for J EX Series Switches on page 321 J EX8208 Switch Hardware Overview on page 27 J EX8216 Switch Hardware Overview on page 30 330 Dell...

Page 403: ...is indented to indicate each statement s relative position in the hierarchy Each level is generally set off with braces with an open brace at the beginning of each hierarchy level and a closing brace at the end If the statement at a hierarchy level is empty the braces are not displayed Each leaf statement ends with a semicolon as does the last statement in the hierarchy This indented representatio...

Page 404: ...ys the top level of the configured hierarchy and the main pane displays configured hierarchy options and the Icon Legend To expand or hide the hierarchy of all the statements in the side pane click Expand all or Hide all To expand or hide an individual statement in the hierarchy click the expand or collapse icon to the left of the statement TIP Only those statements included in the committed confi...

Page 405: ...ers when you place your cursor over them Table 47 on page 333 describes these icons Table 47 J Web Edit Point Click Configuration Icons Function Icon Displays a comment about a statement C Indicates that a statement is inactive I Indicates that a statement has been added or modified but has not been committed M Indicates that the statement or identifier is required in the configuration Provides on...

Page 406: ...il you commit the changes When you commit the configuration the candidate file is checked for proper syntax activated and marked as the current operational software configuration file If multiple users are editing the configuration when you commit the candidate configuration changes made by all users take effect You can configure the commit options to either commit all configuration changes togeth...

Page 407: ...tions Preference The Commit Preference page is displayed 2 Configure the commit options by selecting your preference See Table 50 on page 335 for details on preference options Indicates your choice of committing all global configurations together or committing each configuration change immediately Preference Table 50 Commit Preference Options Function Option Sets the system to validate and force a...

Page 408: ...perform the required action when the file is loaded Table 51 on page 336 lists and describes some options for the load command Table 51 Options for the load command Description Options Combines the current active configuration and the configuration in filename or the one that you type at the terminal A merge operation is useful when you are adding a new section to an existing configuration If the ...

Page 409: ...tion interactively using the CLI and commit it at a later time Related Documentation Uploading a Configuration File J Web Procedure on page 337 Understanding Configuration Files for J EX Series Switches on page 321 Uploading a Configuration File J Web Procedure You can create a configuration file on your local system copy the file to the J EX Series switch and then load the file into the CLI After...

Page 410: ...aintain Config Management History The main pane displays History Database Information page Table 52 on page 338 summarizes the contents of the display The configuration history display allows you to View a configuration Compare two configurations Download a configuration file to your local system Roll back the configuration to any of the previous versions stored on the switch Table 52 J Web Config...

Page 411: ...ne Table 53 on page 339 summarizes the Database Information display Table 53 J Web Configuration Database Information Summary Description Field Name of user editing the configuration User Name Time of day the user logged in to the switch Start Time Elapsed time since the user issued a configuration command from the CLI Idle Time Terminal on which the user is logged in Terminal Process identifier a...

Page 412: ...story A list of current and previous 49 configurations is displayed as Configuration History in the main pane 2 In the Action column click Rollback for the version of the configuration you want to load The main pane displays the results of the rollback operation NOTE WhenyouclickRollback theswitchloadsandcommitstheselected configuration This behavior is different from the switch s behavior that oc...

Page 413: ...e on page 338 Configuration Files Terms on page 322 For more information on rollback see the Junos OS CLI User Guide at http www juniper net techpubs software junos Reverting to the Default Factory Configuration for the J EX Series Switch If for any reason the current active configuration fails you can revert to the default factory configuration You can also roll back to a previous configuration a...

Page 414: ...ot run EZSetup Figure 5 J EX Series Switch LCD Panel NOTE If you want to convert a J EX4200 switch from a member of a multimember Virtual Chassis configuration to a standalone switch first disconnect the cables connected to the Virtual Chassis ports VCPs See Disconnecting a Virtual Chassis Cable from a J EX4200 Switch The Menu button procedure deletes all modified configuration parameters includin...

Page 415: ...ocumentation Configuring a Virtual Chassis CLI Procedure on page 781 J EX4200 Default Configuration on page 325 J EX8200 Switch Default Configuration on page 329 Understanding Configuration Files for J EX Series Switches on page 321 For more information about the load factory default command see the Junos OS CLI User Guide at http www juniper net techpubs software junos Reverting to the Rescue Con...

Page 416: ...ccess You set a current committed configuration to be the rescue configuration through the J Web interface or CLI If someone inadvertently commits a configuration that denies management access to a J EX Series switch and the console port is not accessible you can overwrite the invalid configuration and replace it with the rescue configuration by using the LCD panel on the switch The rescue configu...

Page 417: ...rescue configuration Set the current running configuration as the rescue configuration Click Set rescue configuration Delete the current rescue configuration Click Delete rescue configuration Related Documentation Setting or Deleting the Rescue Configuration CLI Procedure on page 344 Reverting to the Rescue Configuration for the J EX Series Switch on page 343 Configuration Files Terms on page 322 ...

Page 418: ...s resolution configure an existing device as an intermediate device to receive TFTP and DNS requests and forward them to the TFTP server and the DNS server You must configure the LAN or serial interface on the intermediate device with the IP addresses of the hosts providing TFTP and DNS services Connect this interface to the new switch If you are using hostname conf files for autoinstallation you ...

Page 419: ...s the protocols to send a request for an IP address for the interface edit system user switch set autoinstallation interfaces ge 0 0 0 bootp Related Documentation Verifying Autoinstallation Status on a J EX Series Switch on page 349 Understanding Autoinstallation of Configuration Files on J EX Series Switches on page 323 DHCP Services for J EX Series Switches Overview on page 445 347 Chapter 24 Ma...

Page 420: ...348 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 421: ...Name ge 0 0 0 State Configuration Acquisition Acquired Address 192 168 124 75 Hostname host ge 000 Hostname source DNS Configuration filename switch ge 000 conf Configuration filename server 10 25 100 3 Address acquisition Protocol DHCP Client Acquired address None Protocol RARP Client Acquired address None Interface Name ge 0 0 1 State None Address acquisition Protocol DHCP Client Acquired addres...

Page 422: ...350 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 423: ...nformation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure copying of the currently active configuration to an archive site Options The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Using Junos OS ...

Page 424: ...han one archive site the router or switch attempts to transfer the configuration files to the first archive site in the list moving to the next only if the transfer fails The format for the destination filename is router name_juniper conf gz _YYYYMMDD_HHMMSS NOTE The time included in the destination filename is always in Coordinated Universal Time UTC regardless of whether the time on the router o...

Page 425: ...llation it requests an IP address from a Dynamic Host Configuration Protocol DHCP server Once the router or switch has an address it sends a request to a configuration server and downloads and installs a configuration Options The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the conf...

Page 426: ... on the candidate configuration file being committed If no errors are found the configuration is activated and becomes the current operational configuration on all Routing Engines Accounting of events and operations on a backup Routing Engine is not supported on accounting servers such as TACACS or RADIUS Logging of accounting events is supported only for events and operations on a master Routing ...

Page 427: ...hes Description Configure the router or switch to transfer its currently active configuration by means of FTP periodically or after each commit Options The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Using Junos OS to Configure a Router or Sw...

Page 428: ...in configuration files Examples of URLs tftp hostname path filename ftp username prompt ftp hostname net filename Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Upgrading Software Using Automatic Software Download on J EX Series Switches on page 82 autoinstallation on page 353 idle timeout ...

Page 429: ...cify the IP address procurement protocol Options bootp Send requests over serial interfaces with Frame Relay rarp Send requests over Ethernet interfaces Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Upgrading Software Using Automatic Software Download on J EX Series Switches on page 82 J S...

Page 430: ...er on commit Syntax transfer on commit Hierarchy Level edit system archival configuration Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the switch to transfer its currently active configuration to an archive site each time you commit a candidate configuration NOTE When specifying a URL in a Junos OS statement using an IPv6 host...

Page 431: ...CHAPTER 27 Operational Mode Commands for Configuration Management 359 ...

Page 432: ...clear log on page 360 Output Fields See file list for an explanation of output fields clear log The following sample commands list log file information clear the contents of a log file and then display the updated log file information clear log user host file list lcc0 re0 var log sampled detail lcc0 re0 rw r 1 root wheel 26450 Jun 23 18 47 var log sampled total 1 user host clear log lcc0 re0 samp...

Page 433: ...it on page 361 clear system commit None Pending on page 361 clear system commit User Does Not Have Required Privilege Level on page 361 Output Fields When you enter this command you are provided feedback on the status of your request clear system commit user host clear system commit Pending commit cleared clear system commit clear system commit None Pending user host clear system commit No commit ...

Page 434: ...ance List of Sample Output file archive Multiple Files on page 362 file archive Single File on page 362 file archive with Compression on page 363 Output Fields When you enter this command you are provided feedback on the status of your request file archive Multiple Files The following sample command archives all message files in the local directory var log messages as the single file messages arch...

Page 435: ... var log messages as the single file messages archive tgz in the same directory user host file archive compress source var log messages destination var log messages archive tgz usr bin tar Removing leading from absolute path names in the archive user host 363 Chapter 27 Operational Mode Commands for Configuration Management ...

Page 436: ...n the Junos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the Junos OS Configuration and Diagnostic Automation Guide file checksum sha 256 on page 366 file checksum sha1 on page 365 op on page 207 List of Sample Output file checksum md5 on page ...

Page 437: ...t Script in the Junos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the Junos OS Configuration and Diagnostic Automation Guide file checksum md5 on page 364 file checksum sha 256 on page 366 op on page 207 List of Sample Output file checksum sha...

Page 438: ...unos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the Junos OS Configuration and Diagnostic Automation Guide file checksum md5 on page 364 file checksum sha1 on page 365 op on page 207 List of Sample Output file checksum sha 256 on page 366 Out...

Page 439: ...cond file Output lines preceded by an exclamation point have changed Additions are marked with a plus sign and deletions are marked with a minus sign Unified Display is preceded by the line number from the first and the second file xx xxx x Before the line number additions to the file are marked with a plus sign and deletions to the file are marked with a minus sign The body of the output contains...

Page 440: ...h class foo foo is not defined authentication encrypted password SECRET 97 105 user bill full name Bill Smith uid 1089 class super user authentication encrypted password SECRET file compare files unified user host file compare files tmp one tmp two unified tmp one Wed Dec 3 17 12 50 2003 tmp two Wed Dec 3 09 13 14 2003 97 8 97 9 user bill full name Bill Smith class foo foo is not defined full name...

Page 441: ...ignore white space tmp one Wed Dec 3 09 13 10 2003 tmp two Wed Dec 3 09 13 14 2003 99 7 99 7 user bill full name Bill Smith uid 1089 class foo foo is not defined class super user authentication encrypted password SECRET SECRET DATA 369 Chapter 27 Operational Mode Commands for Configuration Management ...

Page 442: ...nance List of Sample Output file copy A File from the Router to a PC on page 370 file copy A Configuration File Between Routing Engines on page 370 file copy A Log File Between Routing Engines on page 370 Output Fields When you enter this command you are provided feedback on the status of your request file copy A File from the Router to a PC user host file copy var tmp rpd core 4 berry c junipero ...

Page 443: ...g them Required Privilege Level maintenance List of Sample Output file delete on page 371 file delete Routing Matrix on page 371 Output Fields When you enter this command you are provided feedback on the status of your request file delete user host file list var tmp dcd core rpd core snmpd core user host file delete var tmp snmpd core file delete user host file list var tmp dcd core rpd core file ...

Page 444: ...formation AdditionalInformation The default directory is the home directory of the user logged into the router or switch To view available directories enter a space and then a backslash after the file list command To view files within a specific directory include a backslash followed by the directory and optionally subdirectory name after the file list command Required Privilege Level maintenance ...

Page 445: ...tenance List of Sample Output file rename on page 373 Output Fields When you enter this command you are provided feedback on the status of your request file rename The following example lists the files in var tmp renames one of the files and then displays the list of files again to reveal the newly named file file rename user host file list var tmp dcd core rpd core snmpd core user host file renam...

Page 446: ...374 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 447: ... Output Fields When you enter this command you are provided feedback on the status of your request file show user host file show var log messages Apr 13 21 00 08 romney kernel so 1 1 2 loopback suspected going to standby Apr 13 21 00 40 romney kernel so 1 1 2 loopback suspected going to standby file show Apr 13 21 02 48 romney last message repeated 4 times Apr 13 21 07 04 romney last message repea...

Page 448: ...tenance Related Documentation request system configuration rescue save on page 377 request system software rollback on page 113 show system commit on page 381 List of Sample Output request system configuration rescue delete on page 376 Output Fields This command produces no output request system configuration rescue delete user host request system configuration rescue delete request system configu...

Page 449: ...d Options This command has no options Required Privilege Level maintenance Related Documentation request system software delete on page 111 request system software rollback on page 113 show system commit on page 381 List of Sample Output request system configuration rescue save on page 377 Output Fields This command produces no output request system configuration rescue save user host request syst...

Page 450: ...ded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample Output...

Page 451: ...downloaded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample...

Page 452: ...ded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample Output...

Page 453: ...n Field Name Displays the last 50 commit operations listed most recent to first The identifier rescue designates a configuration created for recovery using the request system configuration rescue save command Commit History Date and time of the commit operation Timestamp User who executed the commit operation User name Method used to execute the commit operation cli CLI interactive user performed ...

Page 454: ...ia autoinstall rescue 2002 05 10 15 32 03 PDT by root via other show system commit At a Particular Time user host show system commit commit requested by root via cli at Tue May 7 15 59 00 2002 show system commit At the Next Reboot user host show system commit commit requested by root via cli at reboot show system commit Rollback Pending user host show system commit 0 2005 01 05 15 00 37 PST by roo...

Page 455: ...nd number of files queued for archival transfer Options This command has no options Required Privilege Level maintenance List of Sample Output show system configuration archival on page 383 show system configuration archival user host show system configuration archival var transfer config total 8 show system configuration archival 383 Chapter 27 Operational Mode Commands for Configuration Manageme...

Page 456: ... on page 384 show system configuration rescue user host show system configuration rescue version 7 3 groups global show system configuration rescue system host name router1 domain name customer net domain search customer net backup router 192 168 124 254 name server 172 17 28 11 172 17 28 101 172 17 28 100 172 17 28 10 login user regress uid 928 class shell csh authentication encrypted password 1 ...

Page 457: ...ther previously committed rollback configuration to compare to rollback number The output displays the differences between the two configurations The range of values is 0 through 49 Required Privilege Level view List of Sample Output show system rollback compare on page 385 show system rollback compare user host show system rollback 3 compare 1 edit interfaces show system rollback compare ge 1 1 1...

Page 458: ... 386 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 459: ...equired Privilege Level view List of Sample Output test configuration on page 387 Output Fields When you enter this command you are provided feedback on the status of your request test configuration test configuration user host test configuration terminal Type D to end input system host name bluesky paris 23 login terminal 3 8 syntax error paris edit system paris 23 syntax error terminal 4 11 stat...

Page 460: ...388 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 461: ... Switches Overview on page 391 User Access Management Configuration on page 395 Monitoring Users on page 401 Troubleshooting User Access Management on page 405 Configuration Statements for User and Access Management on page 409 Operational Mode Commands for User and Access Management on page 433 389 ...

Page 462: ...390 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 463: ...esiliency Features Table 8 on page 6 Interfaces Features Table 9 on page 7 IP Address Management Features Table 10 on page 7 IPv6 Features Table 11 on page 7 Layer 2 Network Protocols Features Table 12 on page 8 Layer 3 Protocols Features Table 13 on page 9 MPLS Features Table 14 on page 10 Multicast Features Table 15 on page 10 Network Management and Monitoring Features Table 16 on page 11 Port S...

Page 464: ...witch has two primary software processing components Packet Forwarding Engine Processes packets applies filters routing policies and other features and forwards packets to the next hop along the route to their final destination Routing Engine Provides three main functions Creates the packet forwarding switch fabric for the switch providing route lookup filtering and switching on incoming data pack...

Page 465: ...eristics such as link encapsulation hold times and keepalive timers dcd Interface process Provides communication between the other processes and an interface to the configuration database Populates the configuration database with configuration information and retrieves the information when queried by other processes to ensure that the system operates as configured Interacts with the other processe...

Page 466: ...394 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 467: ...cess on specific interfaces and ports as needed Navigate to the Secure Access Configuration page by selecting Configure System Properties Management Access On this page you can enable HTTP and HTTPS access on interfaces for managing the J EX Series switch through the J Web interface You can also install SSL certificates and enable Junos XML management protocol over SSL with the Secure Access page ...

Page 468: ...hes Management Port IP Management Port IPv6 For IPv4 address type a 32 bit IP address in dotted decimal notation Type a 128 bit IP address for IPv6 address type Defines a default gateway through which to direct packets addressed to networks that are not explicitly listed in the bridge table constructed by the switch Default Gateway Type an IP address Specifies the IP address of the loopback interf...

Page 469: ...ing the direction arrows To enable HTTPS access on an interface add the interface to the HTTPS Interfaces list You can either select all interfaces or specific interfaces NOTE Specify the certificate to be used for HTTPS access Enables HTTPS access on interfaces Enable HTTPS Certificates tab To add a certificate 1 Have a general SSL certificate available See Generating SSL Certificates for more in...

Page 470: ... SSL certificate to be written for example my certificate 2 When prompted type the appropriate information in the identification form For example type US for the country name 3 Display the contents of the file that you created cat my certificate pem You can use the J Web Configuration page to install the SSL certificate on the switch To do this copy the file containing the certificate from the BSD...

Page 471: ...e MS CHAPv2 to provide password change support ensure that you have Configured RADIUS server authentication Configure users on the authentication server and set the first tried option in the authentication order to radius See Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 To configure MS CHAPv2 specify the following edit system radius options user switch set pas...

Page 472: ...400 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 473: ... option to add a user Enter details as described in Table 57 on page 402 Edit Select this option to edit an existing user s details Enter details as described in Table 57 on page 402 Delete Select this option to delete a user 4 Click an option on the Authentication Methods and Order tab Authentication Order Drag and drop the authentication type from the Available Methods section to the Selected Me...

Page 474: ...ns or commas in the username Specifies the name that identifies the user Username required Type the user s ID Specifies the user identification User Id Type the user s full name If the full name contains spaces enclose it in quotation marks Do not include colons or commas Specifies the user s full name Full Name Select the user s login class from the list operator read only super user superuser un...

Page 475: ...ecifies the port with which the server is associated Server Port Type the server s 32 bit IP address in dotted decimal notation Specifies the source address of the server Source Address Type the number NOTE Only 1 retry is permitted for a TACACS server Specifies the number of login retries allowed after a login failure Retry Attempts Type the interval in seconds Specifies the time interval to wait...

Page 476: ...404 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 477: ... recover the root password 1 Power off your switch by unplugging the power cord or turning off the power at the wall switch 2 Insert one end of the Ethernet cable into the serial port on the management device and connect the other end to the console port on the back of the switch See Figure 6 on page 405 Figure 6 Connecting to the Console Port on the J EX Series Switch 3 On the management device s...

Page 478: ...RN for bin sh recovery A series of messages describe consistency checks mounting of filesystems and initialization and checkout of management services Then the CLI prompt appears 9 Enter configuration mode in the CLI user switch configure 10 Set the root password For example user switch set system root authentication plain text password 11 At the following prompt enter the new root password For ex...

Page 479: ...eb Procedure on page 163 For information about configuring an encrypted root password configuring SSH keys to authenticate root logins and configuring special requirements for plain text passwords see the Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos 407 Chapter 31 Troubleshooting User Access Management ...

Page 480: ...408 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 481: ...e deny commands statement users can issue only those commands for which they have access privileges through the permissions statement Options regular expression Extended modern regular expression as defined in POSIX 1003 2 If the regular expression contains any spaces operators or wildcard characters enclose it in quotation marks Required Privilege Level admin To view this statement in the configu...

Page 482: ...ontrol To add this statement to the configuration Related Documentation Specifying Access Privileges for Junos OS Configuration Mode Commands Regular Expressions for Allowing and Denying Junos OS Configuration Mode Commands deny commands on page 415 user on page 432 announcement Syntax announcement text Hierarchy Level edit system login Release Information Statement introduced before Junos OS Rele...

Page 483: ...password using blank quotation marks You must configure a password whose number of characters range from 1 through 128 characters and enclose the password in quotation marks plain text password Plain text password The command line interface CLI prompts you for the password and then encrypts it ssh dsa public key SSH version 2 authentication Specify the SSH public key You can specify one or more pu...

Page 484: ... configured passwords Options authentication methods One or more authentication methods listed in the order in which they should be tried The method can be one or more of the following password Use the password configured for the user with the authentication statement at the edit system login user hierarchy level radius Use RADIUS authentication services tacplus Use TACACS authentication services ...

Page 485: ...et transitions The number of transitions between character sets Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Special Requirements for Junos OS Plain Text Passwords minimum changes on page 422 class Assigning a Class to an Individual User Syntax class class name Hierarchy Level edit system...

Page 486: ...atement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a login class Options class name A name you choose for the login class The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Defining Junos OS Login Classes u...

Page 487: ...sers can issue only thosecommandsforwhichtheyhaveaccessprivilegesthroughthepermissions statement Options regular expression Extended modern regular expression as defined in POSIX 1003 2 If the regular expression contains any spaces operators or wildcard characters enclose it in quotation marks Required Privilege Level admin To view this statement in the configuration admin control To add this stat...

Page 488: ...sers can issue only thosecommandsforwhichtheyhaveaccessprivilegesthroughthepermissions statement Options regular expression Extended modern regular expression as defined in POSIX 1003 2 If the regular expression contains any spaces operators or wildcard characters enclose it in quotation marks Required Privilege Level admin To view this statement in the configuration admin control To add this stat...

Page 489: ...ed Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Special Requirements for Junos OS Plain Text Passwords full name Syntax full name complete name Hierarchy Level edit system login user Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configur...

Page 490: ...fter remaining at the CLI operational mode prompt for the specified time Default If you omit this statement a user is never forced off the system after extended idle times Options minutes Maximum idle time Range 0 through 100 000 minutes Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configur...

Page 491: ...e disconnect number user username full name complete name uid uid value class class name authentication authentication encrypted password password plain text password ssh rsa public key ssh dsa public key Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure user access to the router or switch Options The re...

Page 492: ...figuration admin control To add this statement to the configuration login tip Syntax login tip Hierarchy Level edit system login class class name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable CLI tips at login Default Disabled Required Privilege Level system To view this statement in the configuration system control To add this st...

Page 493: ...stem To view this statement in the configuration system control To add this statement to the configuration Related Documentation Special Requirements for Junos OS Plain Text Passwords message Syntax message text Hierarchy Level edit system login Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a system login message This message a...

Page 494: ...ord is checked against the specified minimum If change type is set transitions then the number of character set changes in the password is checked against the specified minimum Default For Junos OS the minimum number of changes is 1 For Junos FIPS Software the minimum number of changes is 3 Options number The minimum number of character sets or character set changes required for the password Requi...

Page 495: ...tion Related Documentation Special Requirements for Junos OS Plain Text Passwords maximum length on page 421 password Login Syntax password change type set transitions character set format md5 sha1 des maximum length length minimum changes number minimum length length Hierarchy Level edit system login Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches De...

Page 496: ...ions Syntax radius options attributes nas ip address ip address password protocol mschap v2 Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure RADIUS options for the NAS IP address for outgoing RADIUS packets and password protocol used in RADIUS packets Options ip address IP address of the network access ...

Page 497: ... increases by this value for each subsequent login attempt after the value specified in the backoff threshold option Range 5 through 10 Default 5 maximum time seconds Maximum length of time that the connection remains open for the user to enter a username and password to log in If the user remains idle and does not enter a username and password within the configured maximum time the connection is ...

Page 498: ...ssword whose number of characters range from 1 through 128 characters and enclose the password in quotation marks plain text password Plain text password The CLI prompts you for the password and then encrypts it The CLI displays the encrypted version and the software places the encrypted version in its user database You can specify only one plain text password ssh dsa public key SSH version 2 auth...

Page 499: ...gging in to the router or switch as root through SSH deny password Allow users to log in to the router or switch as root through SSH when the authentication method for example RSA authentication does not require a password Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring SSH Service...

Page 500: ...to an empty string in the TACACS accounting start and stop requests to enable logging of accounting records in the correct log file on a TACACS server exclude cmd attribute Exclude the cmd attribute value completely from start and stop accounting records to enable logging of accounting records in the correct log file on a TACACS server Required Privilege Level system To view this statement in the ...

Page 501: ... EX Series switches Description Configure the TACACS server Options server address Address of the TACACS authentication server The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring TACACS Authentication 429 Chapter 32 Configuration Stat...

Page 502: ... trace files When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option and a filename Range 2 through 1000 Default 3 files flag flag Tracing opera...

Page 503: ...s statement in the configuration admin control To add this statement to the configuration Related Documentation Tracing Address Assignment Pool Processes Configuring Address Assignment Pools uid Syntax uid uid value Hierarchy Level edit system login user Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a user identifier for a logi...

Page 504: ... before Junos OS Release 10 2 for J EX Series switches Description Configure access permission for individual users Options The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring Junos OS User Accounts class on page 413 432 Dell PowerConne...

Page 505: ...CHAPTER 33 Operational Mode Commands for User and Access Management 433 ...

Page 506: ...t Message to display terminal terminal name Name of the terminal on which to display the message user user name Name of the user to whom to direct the message Required Privilege Level maintenance List of Sample Output request message message on page 434 Output Fields When you enter this command you are provided feedback on the status of your request request message message user host request messag...

Page 507: ... DHCP L2TP PPP PPPOE or VLAN count Optional Display the count of total subscribers and active subscribers for any specified option You can use the count option alone or with the address client type interface logical system mac address profile name routing instance stacked vlan id subscriber state and vlan id options interface Optional Display subscribers whose interface matches the specified inter...

Page 508: ...l on page 439 show subscribers stacked vlan id vlan id detail Combined Output on page 439 show subscribers stacked vlan id vlan id interface detail Combined Output for a Specific Interface on page 440 show subscribers client type dhcp detail on page 440 show subscribers extensive on page 440 show subscribers summary on page 440 show subscribers summary all on page 441 show subscribers terse on pag...

Page 509: ...associated with the subscriber RADIUS Accounting ID Option 82 agent circuit ID associated with the subscriber Agent Circuit ID Option 82 agent remote ID associated with the subscriber Agent Remote ID IP address used by the DHCP relay agent DHCP Relay IP Address Date and time at which the subscriber logged in Login Time ID number for a subscriber service session Session ID Number of service session...

Page 510: ...nts per LS RI and the total number of subscribers Subscribers by LS RI show subscribers show subscribers user host show subscribers Interface IP Address VLAN ID User Name LS RI ge 1 3 0 1073741824 100 default default demux0 1073741824 100 0 0 10 WHOLESALER CLIENT default default demux0 1073741825 101 0 0 3 RETAILER1 CLIENT test1 retailer1 demux0 1073741826 102 0 0 3 RETAILER2 CLIENT test1 retailer...

Page 511: ...tail Type VLAN Interface ge 1 0 0 1073741824 Interface type Dynamic Dynamic Profile Name vlan prof tpid State Active VLAN Id 100 Login Time 2009 03 11 06 48 54 PDT Type VLAN Interface ge 1 2 0 1073741825 Interface type Dynamic Dynamic Profile Name vlan prof tpid State Active VLAN Id 100 Login Time 2009 03 11 06 48 54 PDT show subscribers stacked vlan id detail user host show subscribers stacked vl...

Page 512: ...s 100 20 10 7 IP Netmask 255 255 0 0 Logical System default Routing Instance default Interface demux0 1073744383 Interface type Dynamic Dynamic Profile Name dhcp demux prof MAC Address 00 10 94 00 01 f3 State Active Radius Accounting ID jnpr 2560 Login Time 2009 08 25 14 43 56 PDT show subscribers extensive user host show subscribers extensive Type DHCP IPv6 Prefix 2001 40 0 0 0 74 IPv6 Prefix Len...

Page 513: ...1 Subscribers by LS RI default default 1 default ri1 28 default ri2 16 ls1 default 22 ls1 riA 38 ls1 riB 44 logsysX routinstY 42 TOTAL 191 show subscribers terse user host show subscribers summary terse Interface IP Address VLAN ID User Name LS RI ge 1 3 0 1073741824 100 default default demux0 1073741824 100 0 0 10 WHOLESALER CLIENT default default demux0 1073741825 101 0 0 3 RETAILER1 CLIENT test...

Page 514: ...442 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 515: ...m Services System Services Overview on page 445 System Services Configuration on page 447 Monitoring System Services on page 451 Configuration Statements for System Services on page 455 Operational Mode Commands for System Services on page 509 443 ...

Page 516: ...444 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 517: ...erver and then the DHCP server communicates this path to J EX Series switches acting as DHCP clients as part of the DHCP message exchange process The DHCP clients that have been configured for automatic software download receive these messages and when the software package name in the DHCP server message is different from that of the software package that booted the DHCP client switch download and...

Page 518: ...g a DHCP BOOTP relay agent see the Junos OS Policy Framework Configuration Guide at http www juniper net techpubs software junos You can configure a J EX Series Switch to use the gateway IP address giaddr as the source IP address of the switch for relayed DHCP packets when the switch is used as the DHCP relay agent For information on configuring this option see the source address giaddr configurat...

Page 519: ...s Configuration page To configure the DHCP server 1 Select Configure Services DHCP 2 Access a DHCP Configuration page To configure a DHCP pool for a subnet click Add in the DHCP Pools box To configure a static binding for a DHCP client click Add in the DHCP Static Binding box To globally configure settings for existing DHCP pools and static bindings click Configure Global DHCP Parameters 3 Enter i...

Page 520: ...ximum Lease Time Seconds Type a number from 60 through 2 147 483 647 seconds You can also type infinite to specify a lease that never expires Specifies the length of time a client can hold a lease for clients that do not request a specific lease length Default Lease Time Seconds Server Information Type the IP address of the server If you do not specify a server identifier the primary address of th...

Page 521: ... MAC Address required To add an IP address type it next to the Add button and click Add To remove an IP address select it in the Fixed IP Addresses box and click Delete Defines a list of IP addresses permanently assigned to the client A static binding must have at least one fixed address assigned to it but multiple addresses are also allowed Fixed IP Addresses required Type a client hostname Speci...

Page 522: ...specify both an address and name in the same statement To configure a SIP server using the address option edit system services dhcp user switch set sip server address For example to configure one address edit system services dhcp user switch set sip server 172 168 0 11 To configure a SIP server using the name option edit system services dhcp user switch set sip server name For example to configure...

Page 523: ...itor the DHCP server in the J Web interface select Monitor Services DHCP To monitor the DHCP server in the CLI enter the following CLI commands show system services dhcp binding show system services dhcp conflict show system services dhcp pool show system services dhcp statistics show system services dhcp relay statistics show system services dhcp global show system services dhcp client Meaning Ta...

Page 524: ...ss Corresponding media access control MAC address of the client MAC Address DHCP servers can assign a dynamic binding from a pool of IP addresses or a static binding to one or more specific IP addresses Type of binding assigned to the client dynamic or static Binding Type Date and time the lease expires or never for leases that do not expire Lease Expires Pools tab Subnet on which the IP address p...

Page 525: ...essage if the client state is BOUND For all other states it performs no action Renew Clears other resources received earlier from the server and reinitializes the client state to INIT for the particular interface Release Conflicts tab Date and time the client detected the conflict Detection Time Only client detected conflicts are displayed How the conflict was detected Detection Method The address...

Page 526: ...ER DHCPINFORM DHCPRELEASE and DHCPREQUEST messages sent from DHCP clients and received by the DHCP server Messages received Number of BOOTREPLY DHCPACK DHCPOFFER and DHCPNAK messages sent from the DHCP server to DHCP clients Messages sent Related Documentation Configuring DHCP Services J Web Procedure on page 447 DHCP Services for J EX Series Switches Overview on page 445 454 Dell PowerConnect J S...

Page 527: ... clients After the client receives an IP address and the boot file location from the DHCP server the client uses the boot image stored in the boot file to complete DHCP setup Options filename The location of the boot file on the boot server The filename can include a pathname Required Privilege Level system To view this statement in the configuration system control To add this statement to the con...

Page 528: ...y Configure the name of the boot server advertised to DHCP clients The client uses a boot file located on the boot server to complete DHCP setup Options address Address of a boot server You must specify an IPv4 address not a hostname Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation boot file ...

Page 529: ...Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configures a router switch or interface to act as a Dynamic Host Configuration Protocol DHCP or bootstrap protocol BOOTP relay agent DHCP relaying is disabled Options The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control...

Page 530: ...ing Digital Certificates for an ES PIC cache size Syntax cache size bytes Hierarchy Level edit security certificates Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Encryption interface on J EX Series switches Configure the cache size for digital certificates Options bytes Cache size for digital certificates Range 64 through 4 294 967 295 ...

Page 531: ...itches Configure a negative cache for digital certificates Options seconds Negative time to cache digital certificates in seconds Range 10 through 4 294 967 295 Default 20 CAUTION Configuring a large negative cache value can lead to a denial of service attack Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration 459 Chap...

Page 532: ...um certificates number path length certificate path length Hierarchy Level edit security Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Encryption interface J EX Series switches Configure the digital certificates for IPsec The remaining statements are explained separately Required Privilege Level admin To view this statement in the config...

Page 533: ...tax client identifier ascii client id hexadecimal client id Hierarchy Level edit system services dhcp static binding Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For J EX Series switches only Configure the client s unique identifier This identifier is used by the DHCP server to index its database of address bindings Either a client iden...

Page 534: ...limit Optional Maximum number of established connections Range 1 through 250 Default 75 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring clear text or SSL Service for Junos XML Management Protocol Client Applications Configuring DTCP over SSH Service for the Flow Tap Application C...

Page 535: ... to the configuration default lease time Syntax default lease time seconds Hierarchy Level edit system services dhcp edit system services dhcp pool edit system services dhcp static binding Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For J EX Series switches only Specify the length of time in seconds that a client holds the lease for an...

Page 536: ...tement introduced before Junos OS Release 10 2 for J EX Series switches Description Describe a BOOTP DHCP Domain Name System DNS or Trivial File Transfer Protocol TFTP service or an interface that is configured for the service Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring...

Page 537: ...ient id hexadecimal client id server identifier address wins server address Hierarchy Level edit system services Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For J EX Series switches only Configure a router switch or interface as a DHCP server A DHCP server can allocate network addresses and deliver configuration information to client h...

Page 538: ...rately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring DNS and TFTP Packet Forwarding domain name DHCP Syntax domain name domain name Hierarchy Level edit system services dhcp edit system services dhcp pool edit system services dhcp static binding Release Information Statem...

Page 539: ...cumentation Configuring the Domains to Search When a Router or Switch Is Included in Multiple Domains encoding Syntax encoding binary pem Hierarchy Level edit security ike policy ike peer address edit security certificates certification authority ca profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Encryption interface on J EX S...

Page 540: ...to the configuration enrollment url Syntax enrollment url url name Hierarchy Level edit security certificates certification authority ca profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Encryption interface on J EX Series switches Specify where your router or switch sends Simple Certificate Enrollment Protocol based SCEP based ...

Page 541: ...evel admin To view this statement in the configuration admin control To add this statement to the configuration ftp Syntax ftp connection limit limit rate limit limit Hierarchy Level edit system services Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Allow FTP requests from remote systems to the local router or switch Options The remainin...

Page 542: ...me broadcast description text description no listen server address logical system logical system name routing instance routing instance name server address logical system logical system name routing instance routing instance name port port number description text description interface interface name broadcast description text description no listen server address logical system logical system name ...

Page 543: ... Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable TFTP or DNS request packet forwarding or configure the router switch or interface to act as a DHCP BOOTP relay agent Use only one server address per interface or global configuration The remaining statements are explained separately Required Privilege Level interface To view this statement in the configu...

Page 544: ...HTTP service By default HTTP access is allowed through built in Fast Ethernet or Gigabit Ethernet interfaces only The remaining statement is explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring Management Access for the J EX Series Switch J Web Procedure on page 3...

Page 545: ...is allowed through built in Fast Ethernet or Gigabit Ethernet interfaces only local certificate name Name of the X 509 certificate for a Secure Sockets Layer SSL connection An SSL connection is configured at the edit security certificates local hierarchy The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To a...

Page 546: ...or a DHCP and BOOTP relay agent Options interface group Sets a logical interface or group of logical interfaces with a specific DHCP relay configuration The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Routers Switches and In...

Page 547: ...quired Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring DNS and TFTP Packet Forwarding ldap url Syntax ldap url url name Hierarchy Level edit security certificates certification authority ca profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX S...

Page 548: ...Load RSA SSH version 1 and SSH version 2 and DSA SSH version 2 public keys from a file The file is a URL containing one or more SSH keys Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring the Root Password Configuring Junos OS User Accounts 476 Dell PowerConnect J Series Ethernet Swit...

Page 549: ...te certificate name Name that uniquely identifies the certificate load key file URL or path File that contains the private key and certificate It can be one of two types of values Pathname of a file on the local disk assuming you have already used another method to copy the certificate file to the router s or switch s local disk URL to the certificate file location for instance on the computer whe...

Page 550: ...sed for Secure Web Access on page 398 Importing SSL Certificates for Junos XML Management Protocol Support maximum certificates Syntax maximum certificates number Hierarchy Level edit security certificates Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Encryption interface on J EX Series switches Configure the maximum number of peer digit...

Page 551: ...Syntax maximum lease time seconds Hierarchy Level edit system services dhcp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For J EX Series switches Specify the maximum length of time in seconds for which a client can request and hold a lease on a DHCP server An exception is that the dynamic BOOTP lease length can exceed the maximum lease ...

Page 552: ...ver address Hierarchy Level edit system edit system services dhcp edit system services dhcp pool edit system services dhcp static binding Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure one or more Domain Name System DNS name servers Options address Address of the name server To configure multiple name servers include multiple ad...

Page 553: ...efore Junos OS Release 10 2 for J EX Series switches Description Disable recognition of DNS requests or stop packets from being forwarded on a logical interface a group of logical interfaces a router or a switch Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring DNS and TFTP P...

Page 554: ...e the device id statement at the edit system services hierarchy level Options client id Identifies the outbound ssh configuration stanza on the router or switch Each outbound ssh stanza represents a single outbound SSH connection This attribute is not sent to the client device id Identifies the router or switch to the client during the initiation sequence keep alive Optional When configured specif...

Page 555: ...Pv4 address of the NSM application server You can list multiple clients by adding each client s IP address or hostname along with the following connection parameters port Outbound SSH port for the client The default is port 22 retry Number of times the router or switch attempts to establish an outbound SSH connection before giving up The default is three tries timeout Length of time that the route...

Page 556: ... establishment of a connection between the client server and the router or switch no remote trace Optional Disable remote tracing Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Outbound SSH Service System Management Configuration Statements path length Syntax path length c...

Page 557: ...Lowest and highest IP addresses in the pool that are available for dynamic address assignment If no range is specified the pool will use all available addresses within the subnet specified Broadcast addresses interface addresses and excluded addresses are not available exclude address Addresses within the range that are not used for dynamic address assignment You can exclude one or more addresses ...

Page 558: ...ace User Guide http on page 472 https on page 473 web management on page 506 port SRC Server Syntax port port number Hierarchy Level edit system services service deployment servers server address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the port number on which to contact the SRC server Options port number Optional The TCP...

Page 559: ...rchy Level edit system services finger edit system services ftp edit system services ssh edit system services telnet edit system services xnm clear text edit system services xnm ssl Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Maximum number of connection attempts on an access service Options rate limitlimit Optional Maximum number of c...

Page 560: ...a DHCP and BOOTP relay agent Options address One or more addresses of the server logical system logical system name Optional Logical system of the server routing instance routing instance names Optional Routing instance name or names that belong to the DHCP or BOOTP relay agent Required Privilege Level interface To view this statement in the configuration interface control To add this statement to...

Page 561: ...Description Specify the DNS or TFTP server for forwarding DNS or TFTP requests Only one server can be specified for each interface Options address Address of the server logical system logical system name Optional Logical system of the server routing instance routing instance names Optional Set the routing instance name or names that belong to the DNS server or TFTP server Required Privilege Level ...

Page 562: ...s can use the server identifier to send unicast request messages to specific DHCP servers to renew a current lease This address must be a manually assigned static IP address The server cannot send a request and receive an IP address from itself or another DHCP server Default If no server identifier is set the DHCP server sets the server identifier based on the primary interface address used by the...

Page 563: ...tion Related Documentation Configuring the Junos OS to Work with SRC Software service deployment Syntax service deployment servers server address port port number source address source address Hierarchy Level edit system services Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable Junos OS to work with the Session and Resource Control S...

Page 564: ... number port number source address source address telnet connection limit limit rate limit limit web management http interfaces interface names port port https interfaces interface names local certificate name port port session idle timeout minutes session limit session limit xnm clear text connection limit limit rate limit limit xnm ssl connection limit limit local certificate name rate limit lim...

Page 565: ...xt Junos XML management protocol SSL and network utilities or enable Junos OS to work with the Session and Resource Control SRC software The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring clear text or SSL Service for Junos XML Manag...

Page 566: ...b user login sessions Options idle timeout minutes Configure the number of minutes a session can be idle before it times out Range 1 through 1440 Default 1440 session limit session limit Configure the maximum number of simultaneous J Web user login sessions Range 1 through 1024 Default Unlimited Required Privilege Level system To view this statement in the configuration system control To add this ...

Page 567: ...of addresses based on an address pool or static binding Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring a DHCP SIP Server on page 450 source address SRC Software Syntax source address source address Hierarchy Level edit system services service deployment Release Information State...

Page 568: ...e of the switch The IP address of the interface that the DHCP packet exits on the switch acting as a DHCP relay agent is used as the source IP address for relayed DHCP packets by default Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation DHCP BOOTP Relay for J EX Series Switches Overview ...

Page 569: ...d to the client Typically a client has one address assigned but you can assign more host client hostname Hostname of the client requesting the DHCP server The name can include the local domain name Otherwise the name is resolved based on the domain name statement client identifier ascii client id hexadecimal client id Used by the DHCP server to index the database of address bindings The client ide...

Page 570: ...escription text description no listen server address logical system logical system name routing instance routing instance name server address logical system logical system name routing instance routing instance name Hierarchy Level edit forwarding options helpers Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable TFTP request packet fo...

Page 571: ...n a trace file for example kmd reaches its maximum size it is renamed kmd 0 then kmd 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you must also specify a maximum file size with the size option Range 2 through 1000 files Default 0 files size size Optional Maximum size of each trace file in kilobytes...

Page 572: ...ket messages timer Trace internal timer events Required Privilege Level admin To view the configuration admin control To add this statement to the configuration Related Documentation Configuring Tracing Operations for Security Services 500 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 573: ...on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option and a filename Range 2 through 1000 Default 3 files flag flag Tracing operation to perform To specify more than one tracing operation include multiple flag statements You can include the following fla...

Page 574: ...ifdb Trace interface database operations io Trace I O operations lease Trace lease operations main Trace main loop operations match regex Refine the output to include lines that contain the regular expression misc Trace miscellaneous operations packet Trace DHCP packets options Trace DHCP options pool Trace address pool operations protocol Trace protocol operations rtsock Trace routing socket oper...

Page 575: ...file is overwritten If you specify a maximum file size you also must specify a maximum number of trace files with the files option and filename Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through 1 GB Default 128 KB world readable Optional Enable unrestricted file access Required Privilege Level system To view this statement in the configuration system control To add t...

Page 576: ...ional Maximum number of trace files When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option and a filename Range 2 through 1000 Default 3 files ...

Page 577: ...ile again reaches its maximum size trace file 0 is renamed trace file 1 and trace file is renamed trace file 0 This renaming scheme continues until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum file size you also must specify a maximum number of trace files with the files option and filename Syntax xk to specify KB xm to specify MB ...

Page 578: ... J Web graphical user interface HTTPS access allows secure management of the router or switch using the J Web interface With HTTPS access communication between the router or switch Web server and your browser is encrypted The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configur...

Page 579: ...etwork and assigned an IP address the NetBIOS Name Server manages the Windows Internet Name Service WINS database that matches IP addresses such as 192 168 1 3 to Windows NetBIOS names such as Marketing List servers in order of preference Options address IPv4 address of the NetBIOS Name Server running WINS To configure multiple servers include multiple address options Required Privilege Level syst...

Page 580: ...508 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 581: ...CHAPTER 38 Operational Mode Commands for System Services 509 ...

Page 582: ... Optional Remove a specific IP address binding and return it to the address pool Required Privilege Level view and system Related Documentation show system services dhcp binding on page 517 List of Sample Output clear system services dhcp binding on page 510 Output Fields When you enter this command you are provided feedback on the status of your request clear system services dhcp binding user hos...

Page 583: ...ress Optional Remove a specific IP address from the conflict list and return it to the address pool Required Privilege Level view and system Related Documentation show system services dhcp conflict on page 519 List of Sample Output clear system services dhcp conflict on page 511 Output Fields When you enter this command you are provided feedback on the status of your request clear system services ...

Page 584: ...no options Required Privilege Level view and system Related Documentation show system services dhcp statistics on page 524 List of Sample Output clear system services dhcp statistics on page 512 Output Fields When you enter this command you are provided feedback on the status of your request clear system services dhcp statistics user host clear system services dhcp statistics clear system services...

Page 585: ...the backup IP Security IPsec tunnel Options interface es fpc pic port Switch to the backup encryption interface security associations sa name Switch to the backup tunnel Required Privilege Level view Related Documentation show ipsec redundancy List of Sample Output request ipsec switch on page 513 Output Fields When you enter this command you are provided feedback on the status of your request req...

Page 586: ...ty profile in the configuration encoding binary pem File format used for the certificate The format can be a binary file or privacy enhanced mail PEM an ASCII base64 encoded format The default format is binary key file key file File containing a local private key domain name domain name Fully qualified domain name Required Privilege Level maintenance List of Sample Output request security certific...

Page 587: ...nal Key size in bits The key size can be 512 1024 or 2048 The default value is 1024 type Optional Algorithm used to encrypt the key rsa RSA algorithm This is the default dsa Digital signature algorithm with Secure Hash Algorithm SHA Required Privilege Level maintenance List of Sample Output request security key pair on page 515 Output Fields When you enter this command you are provided feedback on...

Page 588: ...ate The format can be a binary file or privacy enhanced mail PEM an ASCII base64 encoded format The default value is binary url url Certificate authority URL Required Privilege Level maintenance List of Sample Output request security certificate unsigned on page 516 Output Fields When you enter this command you are provided feedback on the status of your request request security certificate unsign...

Page 589: ...ces dhcp binding command Output fields are listed in the approximate order in which they appear Table 62 show system services dhcp binding Output Fields Level of Output Field Description Field Name All levels List of IP addresses the DHCP server has assigned to clients Allocated address All levels Corresponding media access control MAC hardware address of the client MAC address All levels address ...

Page 590: ...ng address user host show system services dhcp binding 192 168 1 3 DHCP binding information Allocated address 192 168 1 3 Mac address 00 a0 12 00 12 ab Client identifier 61 63 65 64 2d 30 30 3a 61 30 3a 31 32 3a 30 30aced 00 a0 12 00 3a 31 33 3a 30 32 13 02 Lease information Binding Type dynamic Obtained at 2004 05 02 13 01 42 PDT Expires at 2004 05 03 13 01 42 PDT show system services dhcp bindin...

Page 591: ...put fields for the showsystemservicesdhcpconflict command Output fields are listed in the approximate order in which they appear Table 63 show system services dhcp conflict Output Fields Field Description Field Name Date and time the client detected the conflict Detection time How the conflict was detected Detection method IP address where the conflict occurs The addresses in the conflicts list re...

Page 592: ... show system services dhcp global on page 521 Output Fields Table 64 on page 520 describes the output fields for the showsystemservicesdhcpglobal command Output fields are listed in the approximate order in which they appear Table 64 show system services dhcp global Output Fields Field Description Field Name Length of lease time assigned to BOOTP clients BOOTP lease length Lease time assigned to c...

Page 593: ...e DHCP lease times Default lease time 1 hour Minimum lease time 2 hours Maximum lease time infinite DHCP options Name name server Value 6 6 6 6 6 6 6 7 Name domain name Value mydomain tld Code 19 Type flag Value off Code 40 Type string Value domain tld Code 32 Type ip address Value 3 3 3 33 521 Chapter 38 Operational Mode Commands for System Services ...

Page 594: ... which they appear Table 65 show system services dhcp pool Output Fields Level of Output Field Description Field Name None specified Subnet on which the IP address pool is defined Pool name None specified Lowest address in the IP address pool Low address None specified Highest address in the IP address pool High address None specified Addresses excluded from the address pool Excludedaddresses None...

Page 595: ...ices dhcp pool subnet address user host show system services dhcp pool 3 3 3 0 24 Pool information Subnet 3 3 3 0 24 Address range 3 3 3 2 3 3 3 254 Addresses assigned 2 253 show system services dhcp pool subnet address detail user host show system services dhcp pool 3 3 3 0 24 detail Pool information Subnet 3 3 3 0 24 Address range 3 3 3 2 3 3 3 254 Addresses assigned 2 253 Active 1 Excluded 1 DH...

Page 596: ...cs command Output fields are listed in the approximate order in which they appear Table 66 show system services dhcp statistics Output Fields Field Description Field Name Lease time assigned to clients that do not request a specific lease time Default lease time Minimum time a client can retain an IP address lease on the server Minimum lease time Maximum time a client can retain an IP address leas...

Page 597: ...tatistics user host show system services dhcp statistics DHCP lease times show system services dhcp statistics Default lease time 1 hour Minimum lease time 2 hours Maximum lease time infinite Packets dropped Total 0 Bad hardware address 0 Bad opcode 0 Invalid server address 0 No available addresses 0 No interface match 0 No routing instance match 0 No valid local address 0 Packet too short 0 Read ...

Page 598: ...red Privilege Level view and system List of Sample Output show system services service deployment on page 526 show system services service deployment user host show system services service deployment Connected to 192 4 4 4 port 10288 since 2004 05 03 11 04 34 PDT Keepalive settings Interval 15 seconds Keepalives sent 750 Notifications sent 0 Last update from peer 00 00 06 ago show system services ...

Page 599: ...sh address cli command1 cli command2 Options host Name or address of the remote system bypass routing Optional Bypass the normal routing tables and send ping requests directly to a system on an attached network If the system is not on a directly attached network an error is returned Use this option to ping a local system through an interface that has no route through it inet inet6 Optional Create ...

Page 600: ...e logging in through SSH To specify the number of times a user can attempt to enter a password to log in through SSH include the retry options statement at the edit system login hierarchy level For details see the Junos OS System Basics Configuration Guide Required Privilege Level network List of Sample Output ssh on page 528 Output Fields When you enter this command you are provided feedback on t...

Page 601: ...nal Bypass the normal routing tables and send ping requests directly to a system on an attached network If the system is not on a directly attached network an error is returned Use this option to ping a local system through an interface that has no route through it inet inet6 Optional Open an IPv4 or IPv6 session respectively interface interface name Optional Interface name for the telnet session ...

Page 602: ...password to log in through telnet include the retry options statement at the edit system login hierarchy level For details see the Junos OS System Basics Configuration Guide Required Privilege Level network List of Sample Output telnet on page 530 Output Fields When you enter this command you are provided feedback on the status of your request telnet telnet user host telnet 192 154 1 254 Trying 19...

Page 603: ...es System Monitoring System Monitoring Overview on page 533 Administering and Monitoring System Functions on page 541 Configuration Statements for System Monitoring on page 559 Operational Mode Commands for System Monitoring on page 611 531 ...

Page 604: ...532 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 605: ...riousness of the alarm The level of severity can be either major red or minor yellow alarm severity Predefined alarm triggered by a physical condition on the switch such as a power supply failure excessive component temperature or media failure chassis alarm Predefined alarm triggered by a missing rescue configuration or failure to install a license for a licensed software feature system alarm Ala...

Page 606: ...h that if left unchecked might cause an interruption in service or degradation in performance A yellow alarm condition requires monitoring or maintenance A missing rescue configuration generates a yellow system alarm To set the rescue configuration see Setting or Deleting the Rescue Configuration CLI Procedure on page 344 Related Documentation Checking Active Alarms with the J Web Interface on pag...

Page 607: ... Virtual Chassis the value in Inventory is displayed as 1 10 FPC with the number corresponding to the number of member switches For a J EX8208 switch the values in Inventory are displayed as 1 3 CB and 0 8 FPC Control board CB refers to SRE and SF modules FPC refers to line cards For a J EX8216 switch the values in Inventory are displayed as 1 2 CB and 0 16 FPC Control board CB refers to RE module...

Page 608: ...es CPU load Indicates the usage and capacity of internal flash memory and any external USB flash drive Flash Capacity Utilization Panel Table 70 Capacity Utilization Description Field Indicates the number of active ports in the switch Number of active ports Indicates the number of ports in the switch Total number of ports Indicates the number of MAC Table entries Used up MAC Table entries Indicate...

Page 609: ... is up and operational Yellow Interface is up but is nonoperational Gray Interface is down and nonoperational Hover the mouse pointer over the interface port to view more information For a Virtual Chassis configuration select the switch to view the interface status If an SFP uplink module is installed in the switch hover the mouse pointer over the port icon to display whether the module is configu...

Page 610: ...escription Field Front View In the image click any line card SRE module or SF module to view the front view of the selected component The colors listed below denote the interface status Green Interface is up and operational Yellow Interface is up but is nonoperational Gray Interface is down and nonoperational Hover the mouse pointer over the interface port to view more information You can view sta...

Page 611: ...information for the slot Temperature Hover the mouse pointer over the fan tray icon to display Name Status and Description information Fan status Hover the mouse pointer over the power supply icons to display Name Status and Description information Power supplies LCD panel configured for the LEDs on the ports Hover the mouse pointer over the icon to view the current character display LCD panel The...

Page 612: ...ration Interface status Slots on the switch are labeled from the top of the switch down RE0 RE module RE1 RE module 0 15 line cards Slot numbers The active slots contain a gray temperature icon Hover the mouse pointer over the icon to display temperature information for the slot Temperature Hover the mouse pointer over the fan tray icon to display consolidated fan information Fan status Hover the ...

Page 613: ...w events in the J Web interface select Monitor Events and Alarms View Events Apply a filter or a combination of filters to view messages You can use filters to display relevant events Table 74 on page 541 describes the different filters their functions and the associated actions To view events in the CLI enter the following command show log Table 74 Filtering System Log Messages Your Action Functi...

Page 614: ...pe the partial or complete ID for example TFTPD_AF_ERR Specifies the event ID for which you want to display the messages Allows you to type part of the ID and completes the remainder automatically An event ID also known as a system log message code uniquely identifies a system log message It begins with a prefix that indicates the generating software process or library Event ID To specify events w...

Page 615: ...generally have less serious consequences than errors in the emergency alert and critical levels Critical Pink Indicates critical conditions such as hard drive errors Alert Orange Indicates conditions that require immediate correction such as a corrupted system database Emergency Red Indicates system panic or other conditions that cause the switch to stop functioning Severity The event ID begins wi...

Page 616: ...al alarm such as one related to temperature NOTE When you connect power to a J EX4200 switch the Alarm ALM LED lights red to indicate that the network link is disconnected This behavior is normal Plugging an active Ethernet cable into the management MGMT port on the switch completes the network link and turns off the ALM LED Connecting the switch to a dedicated management console instead of a netw...

Page 617: ...n the messages system log file You can also monitor chassis alarms using the J Web interface See Checking Active Alarms with the J Web Interface on page 544 Table77onpage545listssomeofthechassisalarmsthataJ EX8200switchcangenerate Table 77 Chassis Alarms for J EX8200 Switches Additional Information Severity Remedy Alarm Condition Component The switch will eventually get too hot to operate if a fan...

Page 618: ... due to an input or output failure or due to temperature issues Power supply Red Remove and reinsert the power supply If removing and reinserting the power supply does not resolve the problem reboot the switch A power supply s internal connection to the switch is not operating properly Power supply The chassis is warm and should be cooled down The switch is still functioning normally To monitor te...

Page 619: ...witch is unobstructed The chassis warm temperature threshold has been exceeded and one or more fans are not operating properly The operating fans are running at full speed Temperature The chassis is hot and should be cooled down The switch might still function normally but is close to shutting down if it hasn t already To monitor temperature user switch show chassis environment To monitor temperat...

Page 620: ...arious matching criteria to specify the packets that you want to capture You can decode and view the captured packets in the J Web interface as they are captured The packet capture feature does not capture transient traffic Table 78 Packet Capture Field Summary Your Action Function Field From the list select an interface for example ge 0 0 0 Specifies the interface on which the packets are capture...

Page 621: ... layer packet headers are to be displayed Layer 2 Headers To read all packets that reach the interface select this check box Specifies not to place the interface in promiscuous mode so that the interface reads only packets addressed to it In promiscuous mode the interface reads every packet that reaches it Non Promiscuous To display the packet headers in hexadecimal format select this check box Sp...

Page 622: ...ng the CLI Terminal on page 135 Monitoring System Properties Purpose Use the monitoring functionality to view system properties such as the name and IP address of the switch and resource usage Action To monitor system properties in the J Web interface select Monitor System View System Information To monitor system properties in the CLI enter the following commands show system uptime show system us...

Page 623: ...last committed This field also shows the name of the user who issued the last commit command through either the J Web interface or the CLI Last Configured Time The CPU load average for 1 5 and 15 minutes Load Average Storage Media Memory usage details of internal flash Internal Flash Memory Usage details of external flash memory External Flash Memory Logged in Users Details Username of any user lo...

Page 624: ...m View Chassis Information To view chassis properties in the CLI enter the following commands show chassis environment show chassis fpc show chassis hardware Meaning Table 80 on page 552 gives information about the key output fields for chassis information NOTE For a J EX4200 standalone switch FPC refers to the switch itself In a Virtual Chassis configuration FPC refers to the member switch In a J...

Page 625: ...ent Details Select an FPC to view General Temperature Resource and Sub component details Select component Select the General tab to view the general information about the chassis components General Displays general information Version Revisionlevel Supplytheversionnumberwhenreportinghardwareproblems to customer support Part Number Serial Number Supply the serial number when contacting customer sup...

Page 626: ...cumentation Monitoring System Process Information on page 554 Monitoring System Properties on page 550 Dashboard for J EX Series Switches on page 534 Monitoring System Process Information Purpose Use the monitoring functionality to view the processes running on the switch Action To view the software processes running on the switch in the J Web interface select Monitor System View Process Details T...

Page 627: ...ary log temporary and crash files on the switching platform 1 Cleaning Up Files on page 555 2 Downloading Files on page 556 3 Deleting Files on page 556 Cleaning Up Files If you are running low on storage space use the file cleanup procedure to quickly identify files to delete The file cleanup procedure performs the following tasks Rotates log files Archives the current log files and creates fresh...

Page 628: ...rary Files Lists the temporary files in the var tmp directory on the switching platform Jailed Temporary Files Install Session etc Lists the files in the var jail tmp directory on the switching platform Crash Core Files Lists the core files in the var crash directory on the switching platform The J Web interface displays the files located in the directory 3 Select the files that you want to downlo...

Page 629: ...tform Crash Core Files Lists the core files in the var crash directory on the switching platform The J Web interface displays the files in the directory 3 Select the box next to each file you plan to delete 4 Click Delete The J Web interface displays the files you can delete and the amount of space that will be freed on the file system 5 Click one of the following buttons on the confirmation page ...

Page 630: ...558 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 631: ...CHAPTER 41 Configuration Statements for System Monitoring 559 ...

Page 632: ...the maximum number of archive files exists each time the active log file reaches the maximum size the contents of the oldest archive file are lost overwritten by the next oldest file Range 1 through 1000 Default 10 files size size Maximum amount of data that the Junos OS logging utility writes to a log file logfile before archiving it closing it compressing it and changing its name to logfile 0 gz...

Page 633: ...t password for login into the archive site Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Documentation Defining Destinations for File Archiving by Event Policies arguments Syntax arguments argument name argument value Hierarchy Level edit event options policy policy name then event script file...

Page 634: ...ession If the attributes match statement includes the equals or starts with options or if it includes a matches option that includes a clause for an event that is not specified at the edit event options policy policy name events hierarchy level you must include one or more within statements in the same policy configuration The statements are explained separately Required Privilege Level maintenanc...

Page 635: ...ribute name the command variable is replaced by the value of the attribute name of the triggering event event attribute name The dollar sign with the event name event notation represents the most recent event that matches the specified event The variable is replaced by the value of the attribute name of the most recent event that matches event attribute name The dollar sign with the asterisk notat...

Page 636: ...ging Facilities and Message Severity Levels severity Severity of the messages that belong to the facility specified by the paired facility name Messages with severities the specified level and higher are logged For a list of the severities see Junos OS System Logging Facilities and Message Severity Levels Required Privilege Level system To view this statement in the configuration system control To...

Page 637: ...pload command or script output for the specified policy Options destination name Name of a destination defined in the destinations statement at the edit event options hierarchy level The remaining statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Documentation C...

Page 638: ... this statement to the configuration Related Documentation Defining Destinations for File Archiving by Event Policies equals Syntax event1 attribute name equals event2 attribute name Hierarchy Level edit event options policy policy name attributes match Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Execute the policy only if the specifie...

Page 639: ...orld readable flag flag no remote trace generate event event name time interval seconds time of day hh mm ss policy policy name attributes match event1 attribute name equals event2 attribute name event attribute name matches regular expression event1 attribute name starts with event2 attribute name events events within seconds not events events then event script filename arguments argument name ar...

Page 640: ...onds user name username traceoptions file filename files number size size world readable no world readable flag flag Hierarchy Level edit Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure event policies The statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenan...

Page 641: ...d Documentation Using Correlated Events to Trigger an Event Policy events Correlating Events with Each Other Syntax events events Hierarchy Level edit event options policy policy name within seconds Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Create a list of events that must occur within a specified time interval for the policy to be ...

Page 642: ...trace Hierarchy Level edit event options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For Junos OS event scripts configure scripting mechanisms The statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Do...

Page 643: ...roduced before Junos OS Release 10 2 for J EX Series switches Description On receipt of an event specify operational mode commands to be issued the format of the command output and a name and destination for the output file The statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the config...

Page 644: ...tation Configuring an Event Policy to Execute Operational Mode Commands explicit priority Syntax explicit priority Hierarchy Level edit system syslog file filename edit system syslog host Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Record the priority facility and severity level in each standard format system log message directed to a ...

Page 645: ...ation Options facility Alternate facility to substitute for the default facilities For a list of the possible facilities see Junos OS System Log Alternate Facilities for Remote Logging Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Changing the Alternative Facility Name for Remote System Lo...

Page 646: ...enable an event script that is located in the var db scripts event directory Options filename The name of an Extensible Stylesheet Language Transformations XSLT or Stylesheet Language Alternative Syntax SLAX file containing an event script The statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this stateme...

Page 647: ...vels file filename File in the var log directory in which to log messages from the specified facility To log messages to more than one file include more than one file statement severity Severity of the messages that belong to the facility specified by the paired facility name Messages with severities the specified level and higher are logged For a list of the severities see Junos OS System Logging...

Page 648: ...file 0 gz file is renamed to logfile 1 gz and the new file is closed compressed and renamed logfile 0 gz By default the logging facility creates up to ten archive files in this manner Once the maximum number of archive files exists each time the active log file reaches the maximum size the contents of the oldest archive file are lost overwritten by the next oldest file Options number Maximum numbe...

Page 649: ...e an internal event based on a time interval or the time of day Options event name Name of an internally generated event The statements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Documentation Generating Internal Events to Trigger Event Policies 577 Chapter 41 Confi...

Page 650: ...le facility severity statements For a list of the facilities see Junos OS System Logging Facilities and Message Severity Levels hostname IPv4 address IPv6 address or fully qualified hostname of the remote machine to which to direct messages To direct messages to multiple remote machines include a host statement for each one other routing engine Direct messages to the other Routing Engine on a rout...

Page 651: ...the configuration maintenance control To add this statement to the configuration Related Documentation Configuring Event Policies to Ignore an Event interface Accounting or Sampling Syntax interface interface name engine id number engine type number source address address Hierarchy Level edit forwarding options accounting name output edit forwarding optionssamplingoutput Release Information Statem...

Page 652: ...og Messages Reference match Syntax match regular expression Hierarchy Level edit system syslog file filename edit system syslog host hostname other routing engine scc master edit system syslog user username Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify a text string that must or must not appear in a message for the message to be ...

Page 653: ...output filename Syntax output filename filename Hierarchy Level edit event options policy policy name then event script filename edit event options policy policy name then execute commands Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Assign a filename to which to write command or script output for the specified commands or script For op...

Page 654: ...SCII text xml Junos Extensible Markup Language XML tags Default xml at the edit event options policy policy name then execute commands hierarchy level and text at the edit event options policy policy name then event script filename hierarchy level Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related ...

Page 655: ...filename arguments argument name argument value destination destination name retry count count retry interval seconds transfer delay seconds output filename filename output format text xml user name username execute commands commands command destination destination name retry count count retry interval seconds transfer delay seconds output filename filename output format text xml user name usernam...

Page 656: ...atements are explained separately Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration raise trap Syntax raise trap Hierarchy Level edit event options policy policy name then Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a policy that raises...

Page 657: ...age 589 refresh from Syntax refresh from url Hierarchy Level edit event options event script edit event options event script file filename Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For Junos OS event scripts overwrite the local copy of all enabled event scripts or a single enabled script located in the var db scripts event directory ...

Page 658: ...s on a local or remote host Options passphrase user password User s password for the remote host remote hostname Nameoftheremotehostwithwhichtheeventscriptwillcommunicate username username User s login name for the remote host Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Documentation Using R...

Page 659: ...s OS Release 10 2 for J EX Series switches Description Configure an event policy to retry a file upload operation if the first attempt fails Default If you do not include this statement the file upload operation is attempted one time only Options number Number of retries retry interval seconds Length of time to wait between retries Required Privilege Level maintenance To view this statement in the...

Page 660: ...umber of archive files that the utility creates in this way see files Options size Maximum size of each system log file in kilobytes KB megabytes MB or gigabytes GB Syntax xk to specify the number of kilobytes xm for the number of megabytes or xg for the number of gigabytes Range 64 KB through 1 GB Default 1 MB for MX Series routers Required Privilege Level system To view this statement in the con...

Page 661: ...sh statement at the same hierarchy level the local copy is overwritten by the version stored at the specified URL Options url Master source file for an event script specified as an HTTP URL FTP URL or scp style remote file specification Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configuration Related Documentati...

Page 662: ... is included other statements that specify the format for messages written to the file are ignored the explicit priority statement at the edit system syslog file filename hierarchy level and the time format statement at the edit system syslog hierarchy level Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related...

Page 663: ...routing engine scc master facility severity explicit priority facility override facility log prefix string match regular expression source address source address time format millisecond year year millisecond user username facility severity match regular expression Hierarchy Level edit system Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description ...

Page 664: ...e configuration system control To add this statement to the configuration Related Documentation Junos OS System Log Configuration Overview Junos OS System Log Messages Reference 592 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 665: ...try interval seconds transfer delay seconds user name username Hierarchy Level edit event options policy policy name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define actions to take if an event occurs For each policy you can configure multiple actions The statements are explained separately Required Privilege Level maintenance To vie...

Page 666: ...ot to destinations configured by a host statement By default the timestamp specifies the month date hour minute and second when the message was logged for example Aug 21 12 36 30 NOTE When the structured data statement is included at the edit system syslog file filename hierarchy level this statement is ignored for the file Options millisecond Include the millisecond in the timestamp year Include ...

Page 667: ...e configuration Related Documentation Generating Internal Events to Trigger Event Policies time of day Syntax time of day hh mm ss Hierarchy Level edit event options generate event event name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a time of day at which to generate a particular event Options hh mm ss Time of day at which...

Page 668: ...rica Timbuktu Africa Tripoli Africa Tunis Africa Windhoek America Adak America Anchorage America Anguilla America Antigua America Aruba America Asuncion America Barbados America Belize America Bogota America Boise America Buenos_Aires America Caracas America Catamarca America Cayenne America Cayman America Chicago America Cordoba America Costa_Rica America Cuiaba America Curacao America Dawson Ame...

Page 669: ...man Australia Lord_Howe Australia Melbourne Australia Perth Australia Sydney Europe Amsterdam Europe Andorra Europe Athens Europe Belfast Europe Belgrade Europe Berlin Europe Bratislava Europe Brussels Europe Bucharest Europe Budapest Europe Chisinau Europe Copenhagen Europe Dublin Europe Gibraltar Europe Helsinki Europe Istanbul Europe Kaliningrad Europe Kiev Europe Lisbon Europe Ljubljana Europe...

Page 670: ...trace file reaches its maximum size it is renamed and compressed to trace file 0 gz then trace file 1 gz and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option and a filename Range 2 through 1000 Default 10 files flag Tracing operation to perform T...

Page 671: ...fy a maximum file size you also must specify a maximum number of trace files with the files option and a filename Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through 1 GB Default 128 KB world readable Enable unrestricted file access Required Privilege Level maintenance To view this statement in the configuration maintenance control To add this statement to the configur...

Page 672: ...its maximum size it is renamed and compressed to trace file 0 gz then trace file 1 gz and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option and a filename Range 2 through 1000 Default 3 files flag Tracing operation to perform To specify more than ...

Page 673: ...of trace files is reached Then the oldest trace file is overwritten If you specify a maximum file size you also must specify a maximum number of trace files with the files option and filename Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through 1 GB Default 128 KB world readable Optional Enable unrestricted file access Required Privilege Level maintenance To view this s...

Page 674: ...ain the default you can specify cscript log or op script log as the filename files number Optional Maximum number of trace files When a trace file named trace file reaches its maximum size it is renamed and compressed to trace file 0 gz then trace file 1 gz and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of file...

Page 675: ...s is reached Then the oldest trace file is overwritten If you specify a maximum file size you also must specify a maximum number of trace files with the files option and a filename Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through 1 GB Default 128 KB world readable Enable unrestricted file access Required Privilege Level maintenance To view this statement in the conf...

Page 676: ...letely generated before the upload starts If you configure a transfer delay at the edit event options destination destination name hierarchy level and at one of the edit event options policy policy name then hierarchy levels the resulting delay is the sum of the two delays Default If you do not include this statement there is no transfer delay Options seconds Duration of the delay before files are...

Page 677: ...nt Options after event count The policy is executed when the number of matching events received equals event count 1 on event count The policy is executed when the number of matching events received equals event count until event count The policy is executed each time a matching event is received and stops being executed when the number of matching events received equals event count Required Privi...

Page 678: ...tion for the uploaded file It must be defined in the destinations statement at the edit event options hierarchy level filename filename committed Name of the file to upload Specify either the word committed to upload the most recently committed configuration file or the filename of another file The remaining statements are explained separately Required Privilege Level maintenance To view this stat...

Page 679: ...elong to the facility specified by the paired facility name Messages with severities the specified level and higher are logged For a list of the severities see Junos OS System Logging Facilities and Message Severity Levels username Junos OS login name of the user whose terminal session is to receive system log messages To log messages to more than one user s terminal session include more than one ...

Page 680: ...ent in the configuration maintenance control To add this statement to the configuration Related Documentation Changing the User Privilege Level for an Event Policy Action within Syntax within seconds events events not events events trigger after on until event count Hierarchy Level edit event options policy policy name Release Information Statement introduced before Junos OS Release 10 2 for J EX ...

Page 681: ...ission to read log files or restrict the permission only to the root user and users who have the Junos OS maintenance permission Default no world readable Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Specifying Log File Size Number and Archiving Properties Junos OS System Log Messages Ref...

Page 682: ...610 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 683: ...CHAPTER 42 Operational Mode Commands for System Monitoring 611 ...

Page 684: ...clear log on page 612 Output Fields See file list for an explanation of output fields clear log The following sample commands list log file information clear the contents of a log file and then display the updated log file information clear log user host file list lcc0 re0 var log sampled detail lcc0 re0 rw r 1 root wheel 26450 Jun 23 18 47 var log sampled total 1 user host clear log lcc0 re0 samp...

Page 685: ...el maintenance List of Sample Output file archive Multiple Files on page 613 file archive Single File on page 613 file archive with Compression on page 614 Output Fields When you enter this command you are provided feedback on the status of your request file archive Multiple Files The following sample command archives all message files in the local directory var log messages as the single file mes...

Page 686: ...g messages as the single file messages archive tgz in the same directory user host file archive compress source var log messages destination var log messages archive tgz usr bin tar Removing leading from absolute path names in the archive user host 614 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 687: ...vent Script in the Junos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the JUNO Configuration and Diagnostic Automation Guide file checksum sha 256 on page 366 file checksum sha1 on page 365 op on page 207 List of Sample Output file checksum md5...

Page 688: ...t in the Junos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the Junos OS Configuration and Diagnostic Automation Guide file checksum md5 on page 364 file checksum sha 256 on page 366 op on page 207 List of Sample Output file checksum sha1 on pa...

Page 689: ...t in the Junos OS Configuration and Diagnostic Automation Guide Configuring Checksum Hashes for an Op Script in the Junos OS Configuration and Diagnostic Automation Guide Executing an Op Script from a Remote Site in the Junos OS Configuration and Diagnostic Automation Guide file checksum md5 on page 364 file checksum sha1 on page 365 op on page 207 List of Sample Output file checksum sha 256 on pa...

Page 690: ...le Output lines preceded by an exclamation point have changed Additions are marked with a plus sign and deletions are marked with a minus sign Unified Display is preceded by the line number from the first and the second file xx xxx x Before the line number additions to the file are marked with a plus sign and deletions to the file are marked with a minus sign The body of the output contains the af...

Page 691: ... Bill Smith class foo foo is not defined authentication encrypted password SECRET 97 105 user bill full name Bill Smith uid 1089 class super user authentication encrypted password SECRET file compare files unified user host file compare files tmp one tmp two unified tmp one Wed Dec 3 17 12 50 2003 tmp two Wed Dec 3 09 13 14 2003 97 8 97 9 user bill full name Bill Smith class foo foo is not defined...

Page 692: ...white space tmp one Wed Dec 3 09 13 10 2003 tmp two Wed Dec 3 09 13 14 2003 99 7 99 7 user bill full name Bill Smith uid 1089 class foo foo is not defined class super user authentication encrypted password SECRET SECRET DATA 620 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 693: ...evel maintenance List of Sample Output file copy A File from the Router to a PC on page 621 file copy A Configuration File Between Routing Engines on page 621 file copy A Log File Between Routing Engines on page 621 Output Fields When you enter this command you are provided feedback on the status of your request file copy A File from the Router to a PC user host file copy var tmp rpd core 4 berry ...

Page 694: ...o the Routing Engine from which the command is issued purge Optional Overwrite regular files before deleting them Required Privilege Level maintenance List of Sample Output file delete on page 622 Output Fields When you enter this command you are provided feedback on the status of your request file delete user host file list var tmp dcd core rpd core snmpd core user host file delete var tmp snmpd ...

Page 695: ...chassis information AdditionalInformation The default directory is the home directory of the user logged into the router or switch To view available directories enter a space and then a backslash after the file list command To view files within a specific directory include a backslash followed by the directory and optionally subdirectory name after the file list command Required Privilege Level ma...

Page 696: ... List of Sample Output file rename on page 624 Output Fields When you enter this command you are provided feedback on the status of your request file rename The following example lists the files in var tmp renames one of the files and then displays the list of files again to reveal the newly named file file rename user host file list var tmp dcd core rpd core snmpd core user host file rename var t...

Page 697: ... 625 Output Fields When you enter this command you are provided feedback on the status of your request file show user host file show var log messages Apr 13 21 00 08 romney kernel so 1 1 2 loopback suspected going to standby Apr 13 21 00 40 romney kernel so 1 1 2 loopback suspected going to standby file show Apr 13 21 02 48 romney last message repeated 4 times Apr 13 21 07 04 romney last message r...

Page 698: ...options edit interfaces and edit protocols protocol hierarchy levels Required Privilege Level trace Related Documentation monitor start on page 627 monitor stop on page 628 List of Sample Output monitor list on page 626 Output Fields Table 82 on page 626 describes the output fields for the monitor list command Output fields are listed in the approximate order in which they appear Table 82 monitor ...

Page 699: ... monitor stop on page 628 List of Sample Output monitor start on page 627 Output Fields Table 83 on page 627 describes the output fields for the monitor start command Output fields are listed in the approximate order in which they appear Table 83 monitor start Output Fields Field Description Field Name Name of the file from which entries are being displayed This line is displayed initially and whe...

Page 700: ...the edit system hierarchy level and the options statement at the edit routing options hierarchy level The trace files generated by the routing protocol process are those configured with traceoptions statements at the edit routing options edit interfaces and edit protocols protocol hierarchy levels Required Privilege Level trace Related Documentation monitor list on page 626 monitor start on page 6...

Page 701: ... Level maintenance Related Documentation request system configuration rescue save on page 377 request system software rollback on page 113 show system commit on page 381 List of Sample Output request system configuration rescue delete on page 629 Output Fields This command produces no output request system configuration rescue delete user host request system configuration rescue delete request sys...

Page 702: ...ns This command has no options Required Privilege Level maintenance Related Documentation request system software delete on page 111 request system software rollback on page 113 show system commit on page 381 List of Sample Output request system configuration rescue save on page 630 Output Fields This command produces no output request system configuration rescue save user host request system conf...

Page 703: ... be downloaded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sa...

Page 704: ...ded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sample Output...

Page 705: ... be downloaded url url path URL of the file to be downloaded Required Privilege Level maintenance Related Documentation Understanding Automatic Refreshing of Scripts on J EX Series Switches on page 323 Junos OS Junos XML Management Protocol Guide at http www juniper net techpubs software junos Junos OS NETCONF XML Management Protocol Guide at http www juniper net techpubs software junos List of Sa...

Page 706: ... Output fields are listed in the approximate order in which they appear Table 84 show chassis alarms Output Fields Field Description Field Name Date and time the alarm was first recorded Alarm time Severity class for this alarm Minor or Major Class Information about the alarm Description show chassis alarms Alarms Active user host show chassis alarms 3 alarms are currently active Alarm time Class ...

Page 707: ...ironment pem show chassis environment routing engine on page 638 List of Sample Output show chassis environment J EX8208 Switch on page 636 Output Fields Table 85 on page 635 lists the output fields for the show chassis environment command Output fields are listed in the approximate order in which they appear Table 85 show chassis environment Output Fields Field Description Field Name Item Status ...

Page 708: ...s CB 2 Intake OK 19 degrees C 66 degrees CB 2 Exhaust OK 23 degrees C 73 degrees Fans Fan 1 OK Spinning at normal speed Fan 2 OK Spinning at normal speed Fan 3 OK Spinning at normal speed Fan 4 OK Spinning at normal speed Fan 5 OK Spinning at normal speed Fan 6 OK Spinning at normal speed Fan 7 OK Spinning at normal speed Fan 8 OK Spinning at normal speed Fan 9 OK Spinning at normal speed Fan 10 O...

Page 709: ...iew Output Fields Table86onpage637liststheoutputfieldsfortheshowchassisenvironmentfpc command Output fields are listed in the approximate order in which they appear Table 86 show chassis environment fpc Output Fields Field Description Field Name Status of the FPC Unknown FPC is not detected by the router Empty No FPC is present Present FPC is detected by the chassis daemon but is either not suppor...

Page 710: ...ntrouting engine command Output fields are listed in the approximate order in which they appear Table 87 show chassis environment routing engine Output Fields Field Description Field Name Number of the Routing Engine slot 0 or 1 Routing engine slot status Status of the Routing Engine Online Master MCS is online operating as Master Online Standby MCS is online operating as Standby State Temperature...

Page 711: ...n Replace fpc slot with a value from 0 through 9 switch s member ID J EX8208 switches Replace fpc slot with a value from 0 through 7 line card J EX8216 switches Replace fpc slot with a value from 0 through 15 line card pic status Optional Display status information for all PICs or for the PIC in the specified slot see fpc slot Required Privilege Level view Related Documentation request chassis fpc...

Page 712: ...centage of CPU being used by the FPC s processor Total CPU Utilization none specified Of the total CPU being used by the FPC s processor the percentage being used for interrupts Interrupt CPU Utilization none specified Total DRAM in megabytes available to the FPC s processor Memory DRAM MB none specified Percentage of heap space dynamic memory being used by the FPC s processor If this number excee...

Page 713: ...ot In Right Slot 2 Online 0 0 0 0 0 3 Present Hardware Not Supported 4 Empty 5 Empty 6 Online 0 0 0 0 0 showchassisfpcdetail Hardware Not Supported user host show chassis fpc detail Slot 0 information State Online Total CPU DRAM CPU less FPC Start time 2006 07 07 03 21 00 UTC Uptime 27 minutes 51 seconds Slot 1 information State Present Reason Hardware Not In Right Slot Slot 2 information State On...

Page 714: ...PIC 0 1x OC 48 SONET SMIR Slot 2 Online PIC 0 1x OC 192 SONET SMSR 642 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 715: ... J EX8216 switches Refers to a line card FPC number equals the slot number for the line card Options none Display information about hardware clei models Optional Display Common Language Equipment Identifier CLEI bar code and model number for orderable field replaceable units FRUs detail Optional Include RAM and disk information in output extensive Optional Display ID EEPROM information models Opti...

Page 716: ...umber none specified clei models and extensivekeyword only Common Language Equipment Identifier code This value is displayed only for hardware components that use ID EEPROM format v2 This value is not displayed for components that use ID EEPROM format v1 CLEI code extensive ID EEPROM version used by hardware component 0x01 version 1 or 0x02 version 2 EEPROM Version All levels Brief description of ...

Page 717: ...3 EX8200 AC2K PSU 3 REV 01 740 030762 BG0709251741 EX8200 AC2K PSU 4 REV 01 740 030762 BG0709251729 EX8200 AC2K PSU 5 REV 01 740 030762 BG0709251737 EX8200 AC2K Top Fan Tray FTC 0 REV 1 760 030533 CX1209110149 EX8216 FT FTC 1 REV 1 760 030533 CX1209110149 EX8216 FT Bottom Fan Tray FTC 0 REV 1 760 030533 CX1209110121 EX8216 FT FTC 1 REV 1 760 030533 CX1209110121 EX8216 FT LCD 0 REV 04 710 025742 CE...

Page 718: ...ber equals 0 For all J EX4200 switches in a Virtual Chassis fpc slot with no fpc slot number value specified For a specific Virtual Chassis member fpc slot number equals member ID value For the line card in the specified slot on a J EX8200 switch fpc slot number equals slot number Required Privilege Level view Related Documentation Chassis Status LEDs in J EX4200 Switches Chassis Status LEDs in a ...

Page 719: ...witch indicates that this switch is not the master in the Virtual Chassis configuration On standalone J EX4200 and J EX8200 switches indicates that the Routing Engine is not operational Master LED Names of the interfaces on the switch Interface State of the currently selected port parameter of the Status LED for the interface The Status LED port parameters are NOTE J EX8200 switches do not have th...

Page 720: ...e 0 0 28 Full Duplex ge 0 0 29 Full Duplex show chassis led fpc slot 0 user switch show chassis led fpc slot 0 Front panel contents for slot 0 show chassis led fpc slot 0 LEDs status Alarms LED Red System LED Green Master LED Green Interface LED ADM SPD DPX POE ge 0 0 0 Off ge 0 0 1 Off ge 0 0 2 Off ge 0 0 3 Off ge 0 0 4 Off ge 0 0 5 Off ge 0 0 6 Off ge 0 0 7 Off ge 0 0 8 Off ge 0 0 9 Off ge 0 0 1...

Page 721: ...n the approximate order in which they appear Table 91 show chassis location Output Fields Field Description Field Name Country code information country code Postal code information postal code Building information Building Floor information Floor Global FPC number The FPC slot number when all FPC slots in the Routing Matrix are considered The range of values is 0 through 31 Global FPC Line card ch...

Page 722: ...lar PIC slot For routers replace slot number with a value from 0 through 3 For J EX4200 switches replace slot number with 0 for built in network interfaces and 1 for interfaces on uplink modules For J EX8208 and J EX8216 switches replace slot number with 0 Required Privilege Level view Related Documentation request chassis pic on page 209 List of Sample Output show chassis pic fpc slot pic slot on...

Page 723: ... display D Fiber type Type of fiber SM is single mode Xcvr vendor Transceiver vendor name Xcvr vendor part number Transceiver vendor part number BX10 10 km bidirectional optics BX40 40 km bidirectional optics SFP LX 40 km SFP optics Wavelength Wavelength of the transmitted signal Uplinks are always 1310 nm Downlinks are either 1490 nm or 1550 nm PIC Port Information MX960 Router Bidirectional Opti...

Page 724: ... 0 FPC 1 is not online show chassis pic fpc slot pic slot FPC Not Present user host show chassis pic fpc slot 4 pic slot 0 FPC slot 4 is empty show chassis pic fpc slot pic slot PIC Not Present user host show chassis pic fpc slot 5 pic slot 2 FPC 5 PIC 2 is empty 652 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 725: ...uting engine master on page 210 Output Fields Table 93 on page 653 lists the output fields for theshowchassisrouting engine command Output fields are listed in the approximate order in which they appear Table 93 show chassis routing engine Output Fields Field Description Field Name Systems with multiple Routing Engines Slot number Slot Systems with multiple Routing Engines Current state of the Rou...

Page 726: ... due to the switching off of the power button behind the Routing Engine not the power button on the chassis watchdog Reboot due to a hardware watchdog power button hard power off Reboot due to pressing of the power button misc hardware reason Reboot due to miscellaneous hardware reasons thermal shutdown Reboot due to the router reaching a critical temperature point at which it is unsafe to continu...

Page 727: ... are present and functioning normally High The fans operate at high speed if the component has exceeded this temperature or a fan has failed or is missing An alarm is not triggered until the temperature exceeds the threshold settings for a yellow alarm or a red alarm Fan speed Temperature threshold settings in degrees Celsius that trigger a yellow alarm Normal The temperature that must be exceeded...

Page 728: ... 65 90 80 FPC 4 55 60 75 65 90 80 FPC 5 55 60 75 65 90 80 FPC 6 55 60 75 65 90 80 FPC 7 55 60 75 65 90 80 FPC 8 55 60 75 65 90 80 FPC 9 55 60 75 65 90 80 FPC 10 55 60 75 65 90 80 FPC 11 55 60 75 65 90 80 656 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 729: ... 0 rw r r 1 root bin 1061095 Oct 1 12 13 rpd 1 rw r r 1 root bin 1052026 Oct 1 06 08 rpd 2 rw r r 1 root bin 1056309 Sep 30 18 21 rpd 3 rw r r 1 root bin 1056371 Sep 30 14 36 rpd 4 rw r r 1 root bin 1056301 Sep 30 10 50 rpd 5 rw r r 1 root bin 1056350 Sep 30 07 04 rpd 6 rw r r 1 root bin 1048876 Sep 30 03 21 rpd 7 rw rw r 1 root bin 19656 Oct 1 19 37 wtmp show log filename user host show log rpd O...

Page 730: ...1 19 37 still logged in darius mg2529 Thu Oct 1 19 08 19 36 00 28 darius mg2518 Thu Oct 1 18 53 18 58 00 04 root mg1575 Wed Sep 30 18 39 18 41 00 02 root ttyp2 jun site per Wed Sep 30 18 39 18 41 00 02 alex ttyp1 192 168 1 2 Wed Sep 30 01 03 01 22 00 19 658 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 731: ...iption Display Packet Forwarding Engine next hop information Options none Display all Packet Forwarding Engine next hop information interface interface name Optional Display the Packet Forwarding Engine next hop interface Required Privilege Level admin List of Sample Output show pfe next hop on page 660 659 Chapter 42 Operational Mode Commands for System Monitoring ...

Page 732: ... IPv4 0 7 Discard IPv4 0 8 MDiscard IPv4 0 9 Reject IPv4 0 13 Local IPv4 192 168 4 60 0 14 Resolve fxp0 0 IPv4 Unspecified 0 17 Local IPv4 127 0 0 1 0 18 Unicast fxp0 0 IPv4 Unspecified 192 168 4 254 0 21 Local IPv4 11 1 0 1 0 22 Unicast at 0 1 0 0 IPv4 ATM SNAP 11 1 0 2 4482 660 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 733: ...rding table command For more information see the Junos OS Routing Protocols and Policies Command Reference Options none Display all Packet Forwarding Engine forwarding table information inet6 Optional Display Packet Forwarding Engine IPv6 routes ip Optional Display Packet Forwarding Engine IPv4 routes iso Optional Display ISO version routing tables mpls Optional Display Packet Forwarding Engine Mu...

Page 734: ...ve 67 fxp0 0 192 168 71 249 192 168 71 249 Local 66 192 168 220 0 30 Resolve 303 fe 0 0 0 0 192 168 220 0 192 168 220 0 Receive 301 fe 0 0 0 0 224 0 0 1 Mcast 5 255 255 255 255 Bcast 6 show pfe route iso user host show pfe route iso CLNS Route Table 0 CLNP 0 0x0 Destination Type NH ID Interface default Reject 60 47 0005 80ff f800 0000 0108 0001 0102 5508 2159 152 Local 514 49 0001 00a0 c96b c491 7...

Page 735: ... statistics ip Output Fields Field Description Field Name ICMP statistics including the following requests Number of ICMP notifications sent to the PFE If a throttler is configured the number of notifications might not reflect all requests made See the throttled icmps field description networkunreachables When route lookups fail ICMP packets are sent to the source These packets are ICMP TypeDestin...

Page 736: ...the following multicasts ICMP packets are not sent for link layer multicast packets These are counted as invalid source addresses not a unicast address or all zeros bad source addresses ICMP packets were received from an invalid source address not a unicast address or all zeros baddestaddresses ICMP packets were sent to an invalid destination address not a unicast address or all zeros IP fragments...

Page 737: ...tes 0 strict source routes 0 record routes 889382 router alerts 0 other options IP Option Errors 0 runts 2 bad versions 0 runt header lengths 0 giant header lengths 0 null frames 0 bad option lengths 0 duplicate options 0 bad option pointers 0 source route frames dropped 188 frames queued 1126 frames dropped 665 Chapter 42 Operational Mode Commands for System Monitoring ...

Page 738: ...ield Name ICMP6 statistics including the following requests Number of ICMP notifications sent to the PFE If a throttler is configured the number of notifications might not reflect all requests made See the throttled icmps field description networkunreachables When route lookups fail ICMP packets are sent to the source These packets are ICMP Type Destination Unreachable 3 and ICMP Code Network Unre...

Page 739: ...istics including the following multicasts ICMP packets are not sent for link layer multicast packets These are counted as invalid source addresses not a unicast address or all zeros bad source addresses ICMP packets were received from an invalid source address not a unicast address or all zeros baddestaddresses ICMP packets were sent to an invalid destination address not a unicast address or all z...

Page 740: ...irects 0 mtu exceeded 0 icmp option handoffs ICMP Errors 0 unknown unreachables 0 unsupported ICMP type 0 unprocessed redirects 0 invalid ICMP type 0 invalid protocol 0 bad input interface 0 throttled icmps 0 runts ICMP Discards 0 multicasts 0 bad source addresses 0 bad dest addresses 0 IP fragments 0 ICMP errors 668 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 741: ...re Junos OS Release 10 2 for J EX Series switches Description Display Packet Forwarding Engine status information Options none Display brief information about the Packet Forwarding Engine Required Privilege Level admin 669 Chapter 42 Operational Mode Commands for System Monitoring ...

Page 742: ...ware feature is configured and no valid license is configured for the feature For more information about system alarms see the Junos OS System Basics Configuration Guide Required Privilege Level admin List of Sample Output show system alarms on page 670 show system alarms user host show system alarms 2 alarms currently active Alarm time Class Description show system alarms 2005 02 24 17 29 34 UTC ...

Page 743: ...ied member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 root only Optional Check only the root file system AdditionalInformation To redirect the output to a file issue the following command ssh router name show system audit root only output file If you save the output of the show system audit root only command to a file you can compare it to subsequent outpu...

Page 744: ...help uid 3 gid 7 mode 0444 size 411 time 939182876 0 md5digest 9b7126385734bcae753f4179ab59d8e5 compat type link mode 0777 size 11 time 915149058 0 link usr compat kernel mode 0444 size 1947607 time 950230892 0 md5digest 1a2a8aff2fec678a918ba0d6bf063980 kernel avr uid 1112 size 1947642 time 950252597 0 md5digest 82e1637682d58ec28964dfee7fccb62e kernel config mode 0644 size 0 time 915149058 0 md5di...

Page 745: ...fer statistics for on all members of the Virtual Chassis configuration local J EX4200 switches only Optional Show buffer statistics for the local Virtual Chassis member member member id J EX4200 switches only Optional Show buffer statistics for the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 AdditionalInformation A special type of memory bu...

Page 746: ...tatistics for mbuf clusters mbuf clusters in use Total amount of memory in use by the networking and interprocess communication IPC code allocated to network Number of times a memory allocation request within the IPC and networking code failed requests for memory denied Number of times a memory allocation request within the IPC and networking code was postponed requests for memory delayed Number o...

Page 747: ...ns all members J EX4200 switches only Optional Display system connection activity for all members of the Virtual Chassis configuration inet inet6 Optional Display IPv4 connections or IPv6 connections respectively local J EX4200 switches only Optional Display system connection activity for the local Virtual Chassis member member member id J EX4200 switches only Optional Display system connection ac...

Page 748: ... Displayed only when the show routing instance option is used For TCP the protocol state of the socket state show system connections user host show system connections Active Internet connections including servers Proto Recv Q Send Q Local Address Foreign Address state show system connections tcp 0 2 192 168 4 16 513 208 197 169 254 894 ESTABLISHED tcp 0 0 192 168 4 16 513 208 197 169 195 945 ESTAB...

Page 749: ... 4 16 1634208 197 169 249 2049 udp0 0192 168 4 16 1627208 197 169 254 2049 udp0 0192 168 4 16 1371208 197 169 195 2049 udp 0 0 udp0 0 9999 udp 0 0 161 udp0 0192 168 4 16 1039192 168 4 16 1023 udp0 0192 168 4 16 1038192 168 4 16 1023 udp0 0192 168 4 16 1037192 168 4 16 1023 udp0 0192 168 4 16 1036192 168 4 16 1023 udp0 0 1022 udp 0 0 1023 udp0 0 111 udp0 0 show system connections show routing insta...

Page 750: ...EN tcp4 0 0 6152 __juniper_private1__ LISTEN tcp4 0 0 6156 __juniper_private1__ LISTEN tcp4 0 0 33005 __juniper_private2__ LISTEN tcp4 0 0 31343 __juniper_private1__ LISTEN tcp4 0 0 31341 __juniper_private1__ LISTEN tcp4 0 0 32003 __juniper_private2__ LISTEN tcp4 0 0 666 __juniper_private1__ LISTEN tcp4 0 0 38 __juniper_private1__ LISTEN tcp4 0 0 3221 default LISTEN 678 Dell PowerConnect J Series ...

Page 751: ... brief and detail to display more information about the specified core dump files Options none Display a list of all existing core dump files all members J EX4200 switches only Optional Display system core files on all members of the Virtual Chassis configuration brief Optional View details of binary core file info Optional Display the stack trace of a core file core filename Optional Name of a sp...

Page 752: ...ere the file resides and the filename Path filename show system core dumps This example shows the command output if core files exist user host show system core dumps show system core dumps rw 1 root wheel 268369920 Jun 18 17 59 var crash vmcore 0 rw rw 1 root field 3371008 Jun 18 17 53 var tmp rpd core 0 rw r r 1 root wheel 27775914 Jun 18 17 59 var crash kernel 0 show system core dumps This examp...

Page 753: ...tput shown for a large file system local J EX4200 switches only Optional Display directory information for the local Virtual Chassis member member member id J EX4200 switches only Optional Display directory information for the specified member of the Virtual Chassis configuration Replace member id with a value from 0 through 9 path Optional Path or root directory to traverse Required Privilege Lev...

Page 754: ...all members of the Virtual Chassis configuration brief detail extensive summary Optional Display the specified level of detail health pid process identifer process name process name Optional Display process health information local J EX4200 switches only Optional Display standard system process information for the local Virtual Chassis member member member id J EX4200 switches only Optional Displa...

Page 755: ...ssigned to the process last PID brief extensive summary Three load averages followed by the current time load averages brief extensive summary Number of existing processes and the number of processes in each state sleeping running starting zombies and stopped processes brief extensive summary Information about physical and virtual memory allocation Mem brief extensive summary Information about phy...

Page 756: ...PU scheduling priority S The process requested first in first out FIFO page replacement s The process is a session leader V The process is temporarily suspended W The process is swapped out X The process is being traced or debugged STAT detail User identifier UID extensive summary Process owner USERNAME detail Parent process identifier PPID detail extensive summary D Short term CPU usage E and S R...

Page 757: ...bin sshd sshd1 189 S 0 03 80 sbin watchdog t180 190 I 0 00 03 usr sbin tnetd N 191 S 2 24 76 sbin ifd N 192 S 0 55 44 usr sbin xntpd N 195 S 0 53 11 usr sbin snmpd N 196 S 1 15 73 usr sbin mib2d N 198 I 0 00 75 usr sbin inetd N 2677 I 0 00 01 usr sbin mgd N 2712 Ss 0 00 24 rlogind 2735 R 0 00 00 bin ps ax 1985 p0 S 0 07 41 rpd N 2713 p0 Is 0 00 24 tcsh tcsh 2726 p0 S 0 00 07 cli show system proces...

Page 758: ...ing Mem 25M Active 3968K Inact 19M Wired 8346K Buf 202M Free Swap 528M Total 64K Used 528M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 544 root 30 0 604K 768K RUN 0 00 0 00 0 00 top 3 root 28 0 0K 12K psleep 0 00 0 00 0 00 vmdaemon 4 root 28 0 0K 12K update 0 03 0 00 0 00 update 528 aviva 18 0 660K 948K pause 0 00 0 00 0 00 tcsh 204 root 18 0 300K 544K pause 0 00 0 00 0 00 csh ...

Page 759: ...m processes summary user host show system processes summary last pid 543 load averages 0 00 0 00 0 00 18 29 47 37 processes 1 running 36 sleeping Mem 25M Active 3976K Inact 19M Wired 8346K Buf 202M Free Swap 528M Total 64K Used 528M Free PID USERNAME PRI NICE SIZE RES STATE TIME WCPU CPU COMMAND 527 root 2 0 176K 580K select 0 00 0 04 0 04 rlogind 543 root 30 0 604K 768K RUN 0 00 0 00 0 00 top 687...

Page 760: ...688 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 761: ...l Chassis Configuration Examples on page 717 Configuring Virtual Chassis on page 781 Verifying Virtual Chassis Configuration on page 803 Troubleshooting Virtual Chassis on page 815 Configuration Statements for Virtual Chassis on page 817 Operational Mode Commands for Virtual Chassis on page 835 689 ...

Page 762: ...690 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 763: ...st Failover in a Virtual Chassis Configuration on page 706 Understanding Split and Merge in a Virtual Chassis Configuration on page 712 Understanding Automatic Software Update on Virtual Chassis Member Switches on page 715 Virtual Chassis Overview The Dell PowerConnect J Series J EX4200 Ethernet Switch is the basis for the Virtual Chassis flexible scaling switch solution You can connect individual...

Page 764: ...ation beyond a single wiring closet Interconnect switches located in multiple wiring closets or in multiple data center racks by installing the optional SFP or SFP uplink modules and connecting the uplink module ports or by connecting the 1 gigabit network interfaces in a J EX4200 24F switch The small form factor pluggable SFP uplink module provides four ports for 1 gigabit transceivers The SFP up...

Page 765: ...es Overview on page 18 for further information on redundant Routing Engines and additional high availability features Adaptability as an Access Switch or Distribution Switch A Virtual Chassis configuration supports a variety of user environments because it can be composed of different models of J EX4200 switches with either 24 or 48 access ports and with these having either full 24 or 48 ports or ...

Page 766: ... interconnect the switch with another J EX4200 switch across a wider distance by installing an optional SFP or SFP uplink module in a J EX4200 switch or by using the network interfaces in a J EX4200 24F switch To do this using uplink module ports you need to install one uplink module in at least one J EX4200 switch at each end of the link You must set the uplink module ports or the J EX4200 24F ne...

Page 767: ...e over the master role if the master fails Runs the Junos OS for J EX Series switches in a backup role Synchronizes with the master in terms of protocol states forwarding tables and so forth so that it is prepared to preserve routing information and maintain network connectivity without disruption in case the master is unavailable You must have at least two member switches in a Virtual Chassis con...

Page 768: ...connected or removed from the Virtual Chassis configuration its member ID is not available for assignment as part of the standard sequential assignment by the master For example you might have a Virtual Chassis configuration composed of member 0 member 2 and member 3 because member 1 was removed When you add another member switch and power it on the master assigns it as member 4 However you can us...

Page 769: ...added to the Virtual Chassis configuration Any other members of the Virtual Chassis configuration members with lower mastership priority are considered linecard members In a preprovisioned configuration the mastership priority value is assigned by the software based on the specified role Virtual Chassis Identifier VCID All members of a Virtual Chassis configuration share one Virtual Chassis identi...

Page 770: ...ember with the lowest MAC address The variations among switch models such as whether the switch has 48 or 24 ports do not impact the master election algorithm To ensure that a specific member is elected as the master 1 Power on only the switch that you want to configure as master of the Virtual Chassis configuration 2 Configure the mastership priority of that member to have the highest possible va...

Page 771: ... CLI Procedure on page 70 Understanding Global Management of a Virtual Chassis Configuration A Virtual Chassis configuration is composed of multiple J EX4200 Ethernet Switches so it has multiple console ports and multiple out of band management Ethernet ports located on the rear panels of the switches You can connect a PC or laptop directly to a console port of any member switch to set up and conf...

Page 772: ...ator to monitor and manage the switch by remote control The Virtual Chassis configuration can be managed remotely through SSH or Telnet using a global management interface called the virtual management Ethernet VME interface VME is a logical interface representing any and all of the out of band management ports on the member switches When you connect to the Virtual Chassis configuration using the ...

Page 773: ...g the linecard member with the lowest member ID as its first choice You can configure an IP address for the VME global management interface at any time You can perform remote configuration and administration of all members of the Virtual Chassis configuration through the VME interface Related Documentation Understanding Virtual Chassis Components on page 694 Example Configuring a Virtual Chassis w...

Page 774: ...operties on page 550 Understanding the High Speed Interconnection of the Virtual Chassis Members Two high speed Virtual Chassis ports VCPs on the rear panel of the Virtual Chassis member switches enable the members to be interconnected and operate as a single powerful switch Each VCP interface is 32 Gbps bidirectional When VCP interfaces are used to form a ring topology each segment provides 64 Gb...

Page 775: ...ht Virtual Chassis LAGs can be created per member See Setting an Uplink Module Port as a Virtual Chassis Port CLI Procedure on page 792 for information about configuring uplink module ports and SFP network ports on J EX4200 24F switches as uplink VCPs To verify that the LAG has been created view the output of the command show virtual chassis vc port NOTE The interfaces that are included within a b...

Page 776: ...to the new member Because the to be added switch is not yet a member the master switch will not recognize that added switch unless the latter has an uplink VCP A link aggregation group LAG will be formed automatically when the new switch is added to the configuration if more than one such link with the same speed is detected between uplink VCPs on the new member and an existingmember See Understan...

Page 777: ... Backup in a Single Wiring Closet on page 717 request virtual chassis vc port on page 840 Understanding Virtual Chassis J EX4200 Switch Version Compatibility For J EX4200 Ethernet Switches to be interconnected as a Virtual Chassis configuration the switches must be running the same software versions The master checks the hardware version the Junos OS version and other component versions running in...

Page 778: ...red uplink module VCPs Fast failover is supported only in a ring topology that uses identical port types for example either a topology that uses all dedicated VCPs or one that uses all uplink module VCPs Fast failover is not supported in a ring topology that includes both dedicated VCPs and uplink module VCPs Fast failover is supported however in a Virtual Chassis configuration that consists of mu...

Page 779: ...Figure 9 Normal Traffic Flow in a Ring Topology Using Dedicated VCPs Figure 10 on page 708 shows traffic redirected by fast failover 707 Chapter 43 Virtual Chassis Overview Components and Configurations ...

Page 780: ... with a backup uplink module VCP If an uplink module VCP fails its backup port is used to send traffic Figure 11 on page 709 shows normal traffic flow in a ring topology using SFP uplink module VCPs NOTE In order to use SFP uplink module ports as VCPs you must configure them to be VCPs using the request virtual chassis vc port command Once configured they will be converted into VCPs For example xe...

Page 781: ...e 11 Normal Traffic Flow in a Ring Topology Using SFP Uplink Module VCPs Figure 12 on page 710 shows traffic redirected by fast failover 709 Chapter 43 Virtual Chassis Overview Components and Configurations ...

Page 782: ...led uplink module VCPs ge 0 1 0 and ge 0 1 1 are automatically configured as the backup port for the other port in the pair Similarly ports ge 0 1 2 and ge 0 1 3 are automatically configured as the backup port for the other port in the pair Fast Failover in a Virtual Chassis Configuration Using Multiple Ring Topologies Fast failover is supported in a Virtual Chassis configuration with a multiple r...

Page 783: ...icated VCP Similarly each SFP uplink module VCP is backed up by another SFP uplink module VCP Fast failover does not support a ring topology consisting of a mix of dedicated VCPs and uplink module VCPs Effects of Topology Changes on a Fast Failover Configuration Once the fast failover feature has been activated topology changes to the Virtual Chassis configuration do not affect the fast failover c...

Page 784: ...nto separate parts we recommend that you resolve the problem that caused the Virtual Chassis configuration to split as soon as possible You can also use this feature to merge two active but separate Virtual Chassis that have not previously been part of the same configuration into one Virtual Chassis configuration NOTE The split and merge feature is enabled by default on J EX4200 switches You can d...

Page 785: ...guration to split is resolved allowing the two Virtual Chassis configurations to merge You load the factory default configuration on the inactive members which causes the inactive members to function as standalone switches or become part of a different Virtual Chassis configuration NOTE When you remove a member switch from a Virtual Chassis configuration you should recycle the member ID using the ...

Page 786: ...and then triggers the master election algorithm The master election algorithm waits for the members to synchronize the topology information before running 2 The master election algorithm merges the Virtual Chassis IDs of all the members 3 Each member runs the master election algorithm to select a master and a backup from among all members with the same Virtual Chassis IDs For more information see ...

Page 787: ...tion of J EX4200 Ethernet Switches so the new member switch immediately joins the Virtual Chassis configuration and is put in the active state For a standalone J EX4200 switch to join an existing Virtual Chassis configuration it must be running the same version of Junos OS that is running on the Virtual Chassis master When the master in a Virtual Chassis configuration detects that a new switch has...

Page 788: ...716 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 789: ...istribution Switch on page 746 Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Example Configuring Fast Failover on Uplink Module VCPs to Reroute Traffic When a Virtual Chassis Member Switch or Intermember Link Fails on page 763 Example Assigning the Virtual Chassis ID to Determine Precedence During a Virtual Chassis Merge on page 767 Example Configuring...

Page 790: ...rtual Chassis configuration provides high availability through redundancy This example shows a Virtual Chassis configuration composed of two J EX4200 switches One of the switches has an uplink module with ports that can be configured to connect to a distribution switch or customer edge CE router or that can be configured as Virtual Chassis ports VCPs to interconnect with a member switch that is lo...

Page 791: ...ess ports all of which support PoE One J EX4200 24T switch SWA 1 with 24 access ports including eight ports that support PoE One uplink module with two 10 Gigabit Ethernet ports is installed in SWA 1 Table 102 on page 719 shows the default configuration settings for the two member Virtual Chassis Table 102 Components of the Basic Virtual Chassis Access Switch Topology Role and Priority Member ID H...

Page 792: ...set interfaces vme unit 0 family inet address ip address mask 6 Power on SWA 1 Verification To confirm that the Virtual Chassis configuration is operational perform these tasks Verifying That the Mastership Priority Is Assigned Appropriately on page 720 Verifying That the VCPs Are Operational on page 721 Verifying That the Mastership Priority Is Assigned Appropriately Purpose Verify that the maste...

Page 793: ...embers fpc0 Interface Type Status Speed Neighbor or mbps ID Interface PIC Port vcp 0 Dedicated Up 32000 1 vcp 1 vcp 1 Dedicated Up 32000 1 vcp 0 fpc1 Interface Type Status Speed Neighbor or mbps ID Interface PIC Port vcp 0 Dedicated Up 32000 1 vcp 0 vcp 1 Dedicated Up 32000 1 vcp 1 Meaning The show virtual chassis vc port command lists the interfaces that are enabled for the member switches of the...

Page 794: ...onfiguring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Example Expanding a Virtual Chassis Configuration in a Single Wiring Closet A Virtual Chassis configuration is a scalable switch composed of multiple interconnected J EX4200 switches Up to ten J EX4200 s...

Page 795: ...n the rear panel Do not run the EZ Setup program on the added member switch This example shows an existing Virtual Chassis configuration composed of two J EX4200 switches The Virtual Chassis configuration is being expanded to include a J EX4200 24T switch as a linecard member The topology for this example consists of One J EX4200 48T switch SWA 0 with 48 access ports 8 of which support Power over ...

Page 796: ...h Figure 15 Expanded Virtual Chassis in Single Wiring Closet Configuration To expand a Virtual Chassis configuration to include additional member switches within a single wiring closet perform these tasks NOTE We recommend that you use the commit synchronize command to save any configuration changes that you make to a multimember Virtual Chassis configuration CLI Quick Configuration To maintain th...

Page 797: ...tup on SWA 2 The identification parameters that were set up for the master apply implicitly to all members of the Virtual Chassis configuration SWA 2 functions in a linecard role since SWA 0 and SWA 1 have been configured to the highest mastership priority values Verification To verify that the new switch has been added as a linecard and that its VCPs are operational perform these tasks Verifying ...

Page 798: ...rtual Chassis configuration user SWA 0 show virtual chassis vc port all members fpc0 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc1 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc2 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up Meaning The show virtual chassis vc port all members command lists all the interfaces for...

Page 799: ...ure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Example Setting Up a Multimember Virtual Chassis Access Switch with a Default Configuration You can configure a multimember Virtual Chassis access switch in a single wiring closet without setting any parameters by simply cabling the switches together using the dedicated Virtual Chassis ports VCPs You do not need to modify th...

Page 800: ...al management IP address To set up a multimember Virtual Chassis configuration within a single wiring closet you need to run the EZ Setup program only once Connect to the master and run EZ Setup to specify its identification time zone and network properties When additional switches are connected through the Virtual Chassis ports VCPs they automatically receive the same properties that were specifi...

Page 801: ...the master before continuing to power on the other switches Step by Step Procedure To configure a multimember Virtual Chassis with default role assignments 1 Make sure the dedicated VCPs on the rear panel are properly cabled See Virtual Chassis Cabling Configuration Examples for J EX4200 Switches for additional information 2 Power on the switch that you want to function as the master SWA 0 This ex...

Page 802: ...of the Member Switches on page 730 Verifying That the VCPs Are Operational on page 731 Verifying the Member IDs and Roles of the Member Switches Purpose Verify that all the interconnected member switches are included within the Virtual Chassis configuration and that their roles are assigned appropriately Action Display the members of the Virtual Chassis configuration user SWA 0 show virtual chassi...

Page 803: ...hes are operational Action Display the Virtual Chassis interfaces user SWA 0 show virtual chassis vc port all members fpc0 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc1 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc2 Interface Type Status or PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc3 Interface Type Status or PIC Port vcp 0 Dedica...

Page 804: ...hip Priority Problem You want to explicitly designate one member as the master and another as backup Solution Change the mastership priority value of the member that you want to function as master designating the highest mastership priority value that member NOTE These configuration changes are made through the current master SWA 0 1 Configure mastership priority of member 0 to be the highest poss...

Page 805: ... the dedicated VCPs Uplink VCPs can also be used to connect Virtual Chassis members to form link aggregation groups LAGs For the latter usage see Example Configuring Link Aggregation Groups Using Uplink Virtual Chassis Ports on page 769 NOTE You can also configure the SFP networks ports on J EX4200 24F switches as VCPs to connect Virtual Chassis member switches across wiring closets and to form LA...

Page 806: ...configuring the Virtual Chassis we installed uplink modules in each of the member switches In this example uplink modules are installed in all four members so that there are redundant VCP connections across the wiring closets If you want to expand this configuration to include more members within these wiring closets you do not need to add any more uplink modules Simply use the dedicated VCPs on t...

Page 807: ...stership priority values for the master and backup members prevents the previous master from pre empting the master role from the new master when the previous master comes back online After we have configured SWA 2 and set one of its uplink module ports as an uplink VCP we will interconnect its uplink VCP with an uplink VCP on SWA 0 Finally we will power on SWA 3 Because SWA 3 is interconnected wi...

Page 808: ...ring closet A for interconnecting with the member switches in wiring closet B by setting uplink VCPs for member 0 and member 1 user SWA 0 request virtual chassis vc port set pic slot 1 port 0 user SWA 0 request virtual chassis vc port set pic slot 1 port 0 member 1 NOTE For redundancy this example configures an uplink VCP in both SWA 0 and SWA 1 This example omits the specification of the memberme...

Page 809: ...e same mastership priority value 255 SWA 0 was powered on first and thus has longer uptime This results in SWA 0 retaining mastership while SWA 2 reboots and joins the now expanded Virtual Chassis configuration as the backup with member ID 2 6 Power on SWA 3 It joins the expanded Virtual Chassis configuration as member 3 NOTE Member ID 3 is assigned to SWA 3 is 3 because SWA 3 was powered on after...

Page 810: ...e assigned appropriately Action Display the members of the Virtual Chassis configuration user SWA 0 show virtual chassis status Virtual Chassis ID 0000 e255 00e0 Mastership Neighbor List Member ID Status Serial No Model Priority Role ID Interface 0 FPC 0 Prsnt abc123 ex4200 48t 255 Master 1 vcp 0 2 vcp 1 2 vcp 255 1 0 1 FPC 1 Prsnt def456 ex4200 24t 128 Linecard 0 vcp 0 0 vcp 1 3 vcp 255 1 0 2 FPC...

Page 811: ... 32000 0 vcp 0 vcp 1 Dedicated 2 Up 32000 0 vcp 1 1 0 Auto Configured 1 Up 1000 3 vcp 255 1 0 fpc2 Interface Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000 3 vcp 0 vcp 1 Dedicated 2 Up 32000 1 0 Auto Configured 1 Up 1000 0 vcp 255 1 0 fpc3 Interface Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000 2 vcp 0 vcp...

Page 812: ... Chassis Access Switch with a Default Configuration on page 727 Setting an Uplink Module Port as a Virtual Chassis Port CLI Procedure on page 792 Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch J EX Series switches allow you to combine multiple Ethernet links into one logical interface for higher bandwidth...

Page 813: ...ion Control Protocol LACP can optionally be configured for link negotiation It doubles the speed of each uplink from 10 Gbps to 20 Gbps If one physical port is lost for any reason a cable is unplugged or a switch port fails or one member switch is unavailable the logical port transparently continues to function over the remaining physical port The topology used in this example consists of one Virt...

Page 814: ...e LAG are permanently operational unless the switch detects a link failure within the Ethernet physical layer or data link layers Figure 18 Topology for LAGs Connecting a Virtual Chassis Access Switch to a Virtual Chassis Distribution Switch Table 105 on page 743 details the topology used in this configuration example 742 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos...

Page 815: ...ibution switch copy the following commands and paste them into the switch terminal window edit set chassis aggregated devices ethernet device count 2 set interfaces ae0 aggregated ether options minimum links 2 set interfaces ae0 aggregated ether options link speed 10g set interfaces ae1 aggregated ether options minimum links 2 set interfaces ae1 aggregated ether options link speed 10g set interfac...

Page 816: ...et ge 1 1 0 ether options 802 ad ae0 7 Specify the interface ID of the uplinks to be included in LAG ae1 edit interfaces user Host A set ge 0 1 1 ether options 802 ad ae1 user Host A set ge1 1 1 ether options 802 ad ae1 8 Specify that LAG ae0 belongs to the subnet for the employee broadcast domain edit interfaces user Host A set ae0 unit 0 family inet address 192 0 2 0 25 9 Specify that LAG ae1 be...

Page 817: ...verify that switching is operational and two LAGs have been created perform these tasks Verifying That LAG ae0 Has Been Created on page 745 Verifying That LAG ae1 Has Been Created on page 746 Verifying That LAG ae0 Has Been Created Purpose Verify that LAG ae0 has been created on the switch Action show interfaces ae0 terse Interface Admin Link Proto Local Remote ae0 up up ae0 0 up up inet 10 10 10 ...

Page 818: ...iguring a Virtual Chassis with a Master and Backup in a Single Wiring Closet on page 717 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Example Connecting an Access Switch to a Distribution Switch on page 1078 Virtual Chassis Cabling Configuration Examples for J EX4200 Switches Insta...

Page 819: ...et on page 717 Configured the uplink ports on the switches as trunk ports See Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configured the LAGs See Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Overview and Topology This example assumes that you are already familiar with t...

Page 820: ...and ae1 1 Specify the aggregated Ethernet options for both bundles edit interfaces user Host A set ae0 aggregated ether options lacp active periodic fast user Host A set ae1 aggregated ether options lacp active periodic fast Results Display the results of the configuration edit interfaces user Host A show ae0 aggregated ether options lacp active periodic fast ae1 aggregated ether options lacp acti...

Page 821: ...ackets are being exchanged perform these tasks Verifying the LACP Settings on page 749 Verifying That the LACP Packets Are Being Exchanged on page 750 Verifying the LACP Settings Purpose Verify that LACP has been set up correctly Action Use the show lacp interfaces interface name command to check that LACP has been enabled as active on one end user Host A show lacp interfaces xe 0 1 0 Aggregated i...

Page 822: ...ess 02 19 e2 50 45 e0 Last flapped Never Statistics last cleared Never Input packets 0 Output packets 0 Input errors 0 Output errors 0 Logical interface ae0 0 Index 71 SNMP ifIndex 34 Flags Hardware Down Device Down SNMP Traps Encapsulation ENET2 Statistics Packets pps Bytes bps Bundle Input 0 0 0 0 Output 0 0 0 0 Protocol inet Flags None Addresses Flags Dest route down Is Preferred Is Primary Des...

Page 823: ...the monitor traffic interface lag member detail command Related Documentation Example Connecting an Access Switch to a Distribution Switch on page 1078 Virtual Chassis Cabling Configuration Examples for J EX4200 Switches Installing an Uplink Module in a J EX4200 Switch 751 Chapter 44 Virtual Chassis Configuration Examples ...

Page 824: ...as the backup You designate additional members which are not eligible for election as master has having the linecard role in the preprovisioned configuration file NOTE When you use a preprovisioned configuration you cannot modify the mastership priority or member ID of member switches through the user interfaces NOTE After you have created a preprovisioned Virtual Chassis configuration you can use...

Page 825: ...tion including all the member switches that you specify in the preprovisioned configuration file 7 Configured SWA 0 with the virtual management Ethernet VME interface for out of band management of the Virtual Chassis configuration if desired edit user SWA 0 set interfaces vme unit 0 family inet address ip address mask Overview and Topology In this example five J EX4200 switches SWA 0 through SWA 4...

Page 826: ... If we check the status of the Virtual Chassis configuration at this point by using the show virtual chassis status command it will display only member 0 through member 4 The members that have not yet been interconnected will not be listed Next power on SWA 5 without powering on the remaining switches SWA 6 through SWA 9 in wiring closet B Bring up SWA 5 as a standalone switch and set one of its u...

Page 827: ...able 106 on page 755 shows the Virtual Chassis configuration settings for a preprovisioned Virtual Chassis composed of member switches in different wiring closets Table 106 Components of a Preprovisioned Virtual Chassis Interconnected Across Multiple Wiring Closets Location Hardware UplinkModule Ports Role Member ID Serialnumber Switch Wiring closet A J EX4200 48T and uplink module ge 0 1 0 routin...

Page 828: ...or this Virtual Chassis configuration The rear view shows that the member switches within each wiring closet are interconnected to each other using the dedicated VCPs The front view shows that the uplink module ports that have been set as VCPs and interconnected across the wiring closets The uplink module ports that are not set as VCPs can be configured as trunk ports to connect to a distribution ...

Page 829: ...re the Virtual Chassis across multiple wiring closets using a preprovisioned configuration NOTE We recommend that you use the commit synchronize command to save any configuration changes that you make to a multimember Virtual Chassis configuration 757 Chapter 44 Virtual Chassis Configuration Examples ...

Page 830: ...in wiring closet A for interconnecting with the member switches in wiring closet B by setting uplink VCPs for member 0 and member 2 user SWA 0 request virtual chassis vc port set pic slot 1 port 0 user SWA 2 request virtual chassis vc port set pic slot 1 port 0 member 2 NOTE For redundancy this example sets an uplink VCP in both SWA 0 and SWA 2 This example omits the specification of the member 0 ...

Page 831: ...embers If you check the status of the Virtual Chassis configuration at this point all the members that were specified in the preprovisioned configuration file should be displayed as present Additional configuration for member switches can now be done through the master switch 10 Set one uplink module port of SWA 7 to function as a VCP user SWA 0 request virtual chassis vc port set pic slot 1 port ...

Page 832: ...s are all set as expected Action Display the members of the Virtual Chassis configuration user SWA 0 show virtual chassis status Preprovisioned Virtual Chassis Virtual Chassis ID 0000 e255 0000 Mastership Neighbor List Member ID Status Serial No Model Priority Role ID Interface 0 FPC 0 Prsnt abc123 ex4200 48t 129 Master 1 vcp 0 4 vcp 1 5 1 0 1 FPC 1 Prsnt def456 ex4200 24t 0 Linecard 2 vcp 0 0 vcp...

Page 833: ...hbor List displays the interconnections of the member VCPs Verifying That the Dedicated VCPs and Uplink VCPs Are Operational Purpose Verify that the dedicated VCPs interconnecting the member switches within each wiring closet and the uplink module VCPs interconnecting the member switches across wiring closets are operational Action Display the Virtual Chassis interfaces user SWA 0 show virtual cha...

Page 834: ...Configured Up fpc6 Interface Type Status Speed Neighbor or mbps ID Interface PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc7 Interface Type Status Speed Neighbor or mbps ID Interface PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up 1 0 Configured Up fpc8 Interface Type Status Speed Neighbor or mbps ID Interface PIC Port vcp 0 Dedicated Up vcp 1 Dedicated Up fpc9 Interface Type Status Speed Neigh...

Page 835: ...ected Across Multiple Wiring Closets on page 733 Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Example Configuring Fast Failover on Uplink Module VCPs to Reroute Traffic When a Virtual Chassis Member Switch or Intermember Link Fails The Virtual Chassis fast failover feature is a hardware assisted failover mechanism that automatica...

Page 836: ...s traffic loss in the event of a link failure or a member switch failure By default fast failover is enabled on all dedicated Virtual Chassis ports VCPs If you configure uplink module ports as VCPs you must manually configure fast failover on these ports For fast failover to be effective the Virtual Chassis members must be configured in a ring topology The ring topology can be formed by using eith...

Page 837: ...nsists of six switches Six J EX4200 24T switches four of which have an SFP uplink module installed switches 1 3 4 and 6 Configuration To configure the fast failover feature on uplink module VCPs CLI Quick Configuration To configure fast failover on all SFP uplink module VCPs copy the following command and paste it into the terminal window on switch 1 765 Chapter 44 Virtual Chassis Configuration Ex...

Page 838: ...tasks Verifying That Fast Failover Is Enabled on page 766 Verifying That Fast Failover Is Enabled Purpose Verify that fast failover has been enabled in a Virtual Chassis configuration Action Issue the show virtual chassis fast failover command 1 2 Check to see that fast failover is enabled user switch1 show virtual chassis fast failover Fast failover on dedicated VCP ports Enabled Fast failover on...

Page 839: ...wo J EX4200 24T switches Before you begin be sure you have 1 Installed the switches See Mounting a J EX4200 Switch on Two Posts in a Rack or Cabinet Mounting a J EX4200 Switch on a Desk or Other Level Surface or Mounting a J EX4200 Switch on a Wall 2 Cabled the switches to create the Virtual Chassis configuration See Connecting a Virtual Chassis Cable to a J EX4200 Switch Overview and Topology Eve...

Page 840: ...e commit synchronize command to save any configuration changes that you make to a multimember Virtual Chassis configuration Verification To verify that the Virtual Chassis ID has been assigned as you intended perform these tasks Verifying That the Virtual Chassis ID Is Assigned on page 768 Verifying That the Virtual Chassis ID Is Assigned Purpose Verify that the Virtual Chassis ID has been assigne...

Page 841: ...o uplink or network VCPs on each of those members You can connect uplink or network VCPs operating at different link speeds but they will not form a LAG NOTE The LAGs formed by VCPs are different from LAGs formed by Virtual Chassis network interfaces For more information on LAGs formed by network interfaces see Understanding Virtual Chassis Configurations and Link Aggregation on page 702 This exam...

Page 842: ...Overview and Topology In this example five J EX4200 switches will be interconnected to form LAGs for ease of monitoring and manageability Two of these switches SWA 0 and SWA 1 are located in wiring closet A and the three others SWA 2 SWA 3 and SWA 4 are located in wiring closet B SWA 0 will form one LAG with SWA 2 and another LAG with SWA 4 and SWA 1 will form a LAG with SWA 3 We will use fiber op...

Page 843: ... remaining uplink VCPs on SWA 0 with two network VCPs on SWA 4 As a result three LAGs will be automatically formed Figure 21 on page 771 shows the interconnections used to form LAGs using uplink VCPs and the network VCPs after the procedure below has been completed Figure 21 Virtual Chassis Interconnected Across Wiring Closets to Form LAGs Configuration To configure the Virtual Chassis uplink modu...

Page 844: ...ber 1 NOTE This example omits the specification of the member member id option in configuring the uplink VCPs for SWA 0 and later for SWA 2 The command applies by default to the switch where it is executed 4 Power on SWA 2 5 If SWA 2 was previously configured revert to the factory default configuration 6 Prepare SWA 2 in wiring closet B by configuring its mastership priority to be the highest poss...

Page 845: ...ration 13 Specify both uplink module interfaces in SWA 3 as uplink VCPs user SWA 3 request virtual chassis vc port set pic slot 1 port 0 user SWA 3 request virtual chassis vc port set pic slot 1 port 1 14 Power down SWA 3 15 Physically interconnect SWA 3 with SWA 2 using their dedicated VCPs 16 Physically interconnect SWA 1 and SWA 3 across wiring closets using their uplink VCPs 17 Power on SWA 3 ...

Page 846: ...m these tasks Verifying the Member IDs and Roles of the Member Switches on page 774 Verifying That the VCPs Are Operational on page 775 Verifying the Member IDs and Roles of the Member Switches Purpose Verify that all the interconnected member switches are included within the Virtual Chassis configuration and that their roles are assigned appropriately Action Display the members of the Virtual Cha...

Page 847: ...erify that the dedicated VCPs interconnecting member switches in wiring closets A and B and the uplink and network VCPs interconnecting the member switches between wiring closets are operational Action Display the Virtual Chassis interfaces user SWA 0 show virtual chassis vc port all members fpc0 Interface Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000...

Page 848: ...es of uplink and network VCPs are of the form vcp 255 pic port for example vcp 255 1 0 In that name vcp 255 indicates that the interface is a VCP 1 is the uplink PIC number and 0 is the port number The fpc number is the same as the member ID The trunk ID is a positive number ID assigned to the LAG formed by the Virtual Chassis If no LAG is formed the value is 1 NOTE Each switch assigns the trunk I...

Page 849: ...I Procedure on page 792 Reverting to the Default Factory Configuration for the J EX Series Switch on page 341 Example ConfiguringAutomaticSoftwareUpdateonVirtualChassisMemberSwitches The automatic software update feature automatically updates the Junos OS version on prospective member switches as they are added to a Virtual Chassis configuration of J EX4200 Ethernet Switches so the new member swit...

Page 850: ...e running the same version of the Junos OS for J EX Series switches The third switch is a standalone switch that is running a different software version than the Virtual Chassis member switches In this example we will enable the automatic software update feature on the Virtual Chassis configuration and then add the third switch to the configuration The master will detect the presence of the new sw...

Page 851: ...witch show virtual chassis status Virtual Chassis ID 0019 e250 47a0 Mastership Neighbor List Member ID Status Serial No Model priority Role ID Interface 0 FPC 0 Prsnt AK0207360276 ex4200 24t 255 Master 1 vcp 1 2 vcp 0 1 FPC 1 Prsnt AK0207360281 ex4200 24t 255 Backup 2 vcp 1 0 vcp 0 2 FPC 2 Prsnt AJ0207391130 ex4200 48t 128 Linecard 0 vcp 1 1 vcp 0 Meaning Because in the initial two member Virtual ...

Page 852: ...780 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 853: ...Failover in a Virtual Chassis Configuration on page 799 Disabling Split and Merge in a Virtual Chassis Configuration CLI Procedure on page 799 Assigning the Virtual Chassis ID to Determine Precedence During a Virtual Chassis Merge CLI Procedure on page 800 Configuring Automatic Software Update on Virtual Chassis Member Switches CLI Procedure on page 800 Configuring Graceful Routing Engine Switchov...

Page 854: ...Chassis using a preprovisioned configuration 1 Make a list of the serial numbers of all the switches to be connected in a Virtual Chassis configuration 2 Note the desired role routing engine or linecard of each switch If you configure the member with a routing engine role it is eligible to function as a master or backup If you configure the member with a linecard role it is not eligible to become ...

Page 855: ...ber bcd890 role linecard 9 Power on the member switches NOTE You cannot modify the mastership priority when you are using a preprovisioned configuration The mastership priority values are generated automatically and controlled by the role that is assigned to the member switch in the configuration file The two routing engines are assigned the same mastership priority value However the member that w...

Page 856: ...youspecifythesamemastership priority value for the desired master and backup members We have assigned the highest possible mastership priority to two members However the member that was powered on first has higher prioritization according to the master election algorithm See Understanding How the Master in a Virtual Chassis Configuration Is Elected on page 698 We have allowed the other members to ...

Page 857: ...eir member IDs and the mastership priority The second section displays the operational status of the Virtual Chassis configuration member details and the dedicated and configured Virtual Chassis ports VCPs 3 Enter information into the page as described in Table 107 on page 785 4 Click one Add To add a member s configuration to the Virtual Chassis configuration click Add Edit To modify an existing ...

Page 858: ...is Configuration CLI Procedure You can add one or more J EX4200 switches to an existing Virtual Chassis configuration Up to ten J EX4200 switches can be included within a Virtual Chassis configuration You can add the new switches to either type nonprovisioned or preprovisioned of Virtual Chassis configuration See Configuring a Virtual Chassis CLI Procedure on page 781 for descriptions of these typ...

Page 859: ...actory Configuration for the J EX Series Switch on page 341 2 Interconnect the unpowered new switch to at least one member of the existing Virtual Chassis configuration using the dedicated Virtual Chassis ports VCPs 3 Power on the new switch 4 Confirm that the new member switch is now included within the Virtual Chassis configuration by checking the front panel display for the member ID It should ...

Page 860: ...r interconnecting with the new switch through an uplink module port by configuring an uplink module port as a VCP on the existing member switch NOTE After you have created a preprovisioned Virtual Chassis configuration you can use the autoprovisioning feature to add member switches to that configuration To add a new member switch that is going to be interconnected with the existing Virtual Chassis...

Page 861: ...evel Discovery Protocol LLDP on the uplink module ports that will be used as VCPs LLDP is configured by default but might have been disabled To configure LLDP see Configuring LLDP CLI Procedure on page 2344 or Configuring LLDP J Web Procedure on page 2345 Ensured that the new member switch has the factory default configuration If the new member switch has been previously configured revert its conf...

Page 862: ...The member ID is automatically assigned to the new member switch s serial number in the configuration file Related Documentation Example Expanding a Virtual Chassis Configuration in a Single Wiring Closet on page 722 Example Setting Up a Multimember Virtual Chassis Access Switch with a Default Configuration on page 727 Example Configuring a Virtual Chassis Interconnected Across Multiple Wiring Clo...

Page 863: ...ist the serial numbers of the member switches that you want to function as master and backup specifying their role as routing engine edit user SWA 0 set virtual chassis member 0 serial number abc123 role routing engine user SWA 0 set virtual chassis member 2 serial number def456 role routing engine NOTE You cannot directly modify the mastership priority value when you are using a preprovisioned co...

Page 864: ...hat is lower than the value specified for members functioning in the master and backup roles Related Documentation Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Example Expanding a Virtual Chassis Configuration in a Single Wiring Closet on page 722 Verifying the Member ID Role and Neighbor Member Connections of a Virtual Chassis Member on page 807 Moni...

Page 865: ...gement interface when you are setting up the master or you can do it after completing the other configuration steps for the Virtual Chassis See Configuring the Virtual Management Ethernet Interface for Global Management of a Virtual Chassis CLI Procedure on page 797 5 Configure mastership of the Virtual Chassis using either the nonprovisioned or preprovisioned configuration See Configuring Masters...

Page 866: ...cuted user SWA 0 request virtual chassis vc port set pic slot 1 port 0 2 Set one uplink port of member 1 as a VCP interface user SWA 0 request virtual chassis vc port set pic slot 1 port 0 member 1 This example includes the member member id option because it is executed on a different member switch than the local member switch Setting an Uplink VCP on a Standalone Switch To set an uplink VCP on a ...

Page 867: ...Documentation Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Example Configuring a Virtual Chassis Interconnected Across Multiple Wiring Closets on page 733 Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Monitoring Virtual Chassis Configuration Status and Statistics on page 809 Setting a...

Page 868: ...enu until you see MAINTENANCE MENU 2 Press Menu until you see REQUEST VC PORT 3 Press Enter You will see SET VC PORT 4 Press Menu You will see DELETE VC PORT 5 Press Enter You will see DELETE FPC 0 6 Press Enter You will see DELETE PIC 0 7 Press Menu until you see DELETE PIC 1 8 Press Enter You will see DELETE PORT 0 9 Press Menu until you see DELETE PORT 2 10 Press Enter You will see CONFIGURING ...

Page 869: ...s Configuration on page 699 Configuring the Timer for the Backup Member to Start Using Its Own MAC Address as Master of Virtual Chassis CLI Procedure When a backup member takes control of a Virtual Chassis configuration because of a reset or other temporary failure the backup uses the MAC address of the old master This helps to ensure a smooth transition of mastership with no disruption to network...

Page 870: ...uring fast failover ensure that the dedicated VCPs or uplink module VCPs are connected in a ring topology To reenable the fast failover feature on all dedicated VCPs in a ring edit user switch delete virtual chassis fast failover vcp disable To configure the fast failover feature on all SFP uplink module VCPs in a ring edit user switch set virtual chassis fast failover ge Related Documentation Exa...

Page 871: ... in a Virtual Chassis Configuration CLI Procedure The split and merge feature is enabled by default on J EX4200 switches in a Virtual Chassis configuration You can disable the split and merge feature using the set virtual chassis no split detection command If you disable the split and merge feature and the Virtual Chassis configuration splits both parts of the split Virtual Chassis configuration r...

Page 872: ...sis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Understanding Split and Merge in a Virtual Chassis Configuration on page 712 Understanding Virtual Chassis Configuration on page 704 Configuring Automatic Software Update on Virtual Chassis Member Switches CLI Procedure The automatic software update feature allows you to automatically update the software versio...

Page 873: ...reserve kernel state information and the forwarding state To set up a Virtual Chassis configuration to use graceful Routing Engine switchover GRES 1 Set up a minimum of two J EX4200 switches in a Virtual Chassis configuration with mastership priority of 255 edit user switch set virtual chassis member 0 mastership priority 255 edit user switch set virtual chassis member 1 mastership priority 255 2 ...

Page 874: ...802 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 875: ...n page 813 Command Forwarding Usage with a Virtual Chassis Configuration Some CLI commands can be run either on all members or on a specific member of a Virtual Chassis configuration This functionality is referred to as command forwarding For example to collect information about your system prior to contacting Dell Support see Requesting Technical Support on page lxxi use the command request suppo...

Page 876: ... disk is partitioned the contents of altroot and altconfig are saved and restored All other data on the hard disk is at risk of being lost request system partition hard disk Reboots the specified member switch Reboots all members of the Virtual Chassis configuration Reboot the Junos OS for J EX Series switches after a software upgrade and occasionally to recover from an error condition request sys...

Page 877: ...s information for all members of the Virtual Chassis configuration Display directory usage information show system directory usage Displays information for the specified member switch Displays information for all members of the Virtual Chassis configuration Display pending system reboots or halts show system reboot Displays information for the specified member switch Displays information for all m...

Page 878: ...i show system virtual memory Table 109 on page 806 shows a list of commands that are relevant only to the master Do not use the options all members or member member id with these commands Table 109 Commands Relevant Only to the Master Purpose Commands Relevant Only to the Master Set the data and time set date Display information about the buffer pool that the Routing Engine uses for local traffic ...

Page 879: ...rs that are cabled together are considered neighbor members Action To display the role and member ID assignments using the CLI use the show virtual chassis status command user SWA 0 show virtual chassis status Virtual Chassis ID 0000 e255 00e0 Mastership Neighbor List Member ID Status Serial No Model Priority Role ID Interface 0 FPC 0 Prsnt abc123 ex4200 48t 255 Master 1 vcp 0 2 vcp 1 1 FPC 1 Prsn...

Page 880: ...e Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000 1 vcp 0 vcp 1 Dedicated 2 Up 32000 1 vcp 1 1 0 Configured 3 Up 1000 2 vcp 255 1 0 1 1 Configured 3 Up 1000 2 vcp 255 1 1 1 2 Configured 4 Up 1000 4 vcp 255 0 20 1 3 Configured 4 Up 1000 4 vcp 255 0 21 fpc1 Interface Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32...

Page 881: ...mber and 0 is the port number The fpc number is the same as the member ID The trunk ID is a positive number ID assigned to the LAG formed by the Virtual Chassis If no LAG is formed the value is 1 Related Documentation Monitoring Virtual Chassis Configuration Status and Statistics on page 809 Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on pa...

Page 882: ...re it was stopped To view a graph of the statistics for the selected Virtual Chassis port of the member click Show Graph Refresh Interval sec Displays the time interval you have set for page refresh Click Clear Statistics to clear the monitoring statistics for the selected member switch You can specify the interval at which the member details and statistics must be refreshed The bottom half of the...

Page 883: ...ve Repair and Reinstall the Same Switch on page 811 Remove a Member Switch Replace with a Different Switch and Reapply the Old Configuration on page 812 Remove a Member Switch and Make Its Member ID Available for Reassignment to a Different Switch on page 812 Remove Repair and Reinstall the Same Switch If you need to repair a member switch you can remove it from the Virtual Chassis configuration w...

Page 884: ...ory Configuration for the J EX Series Switch on page 341 3 Connect and power on the replacement member switch 4 Note the member ID displayed on the front panel 5 Issue the request virtual chassis renumber command from the Virtual Chassis master to change the member switch s current member ID to the member ID that belonged to the member switch that was removed from the Virtual Chassis configuration...

Page 885: ...p Routing Engine master 0 user switch request session member 1 backup 1 user switch Verify that the backup Routing Engine is ready for switchover on member ID 1 backup 1 user switch show system switchover Graceful switchover On Configuration database Ready Kernel database Ready Peer state Steady State Switch the current backup Routing Engine to master Routing Engine NOTE You must wait a minimum of...

Page 886: ...ember 2 FPC 2 Meaning With graceful Routing Engine switchover enabled when you initiated a switchover from the backup Routing Engine the backup Routing Engine became the master and the master Routing Engine became the backup Related Documentation Configuring Graceful Routing Engine Switchover in a Virtual Chassis CLI Procedure on page 801 814 Dell PowerConnect J Series Ethernet Switch Complete Sof...

Page 887: ...D and member configuration in its configuration database The show virtual chassis status command continues to display the member ID of the disconnected member with a status of NotPrsnt If want to permanently disconnect the member switch you can free up the member ID by using the request virtual chassis recycle command This will also clear the status of that member Load Factory Default Does Not Com...

Page 888: ... so that its member ID is 0 and to rename the switch s interfaces accordingly enter the following operational mode commands 1 To change the member ID to 0 user switch request virtual chassis renumber member id 1 new member id 0 2 To rename the interfaces to match the new member ID user switch replace pattern ge 1 with ge 0 Related Documentation Monitoring Virtual Chassis Configuration Status and S...

Page 889: ...ole no split detection preprovisioned traceoptions file filename files number size size world readable no world readable match regex flag flag Related Documentation Example Configuring a Virtual Chassis with a Master and Backup in a Single Wiring Closet on page 717 Example Configuring a Virtual Chassis Interconnected Across Multiple Wiring Closets on page 733 Example Configuring a Virtual Chassis ...

Page 890: ...s explained separately Default The automatic software update feature is disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Automatic Software Update on Virtual Chassis Member Switches on page 777 Configuring Automatic Software Update on Virtual Chassis Member Swit...

Page 891: ...thernet uplink module VCPs in the ring vcp disable Disable fast failover on all dedicated VCPs in the ring xe Enable fast failover on all 10 Gigabit Ethernet uplink module VCPs in the ring Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Fast Failover on Uplink Module VC...

Page 892: ... on J EX Series Switches CLI Procedure Installing Software on a J EX8200 Switch with Redundant Routing Engines CLI Procedure on page 71 id Syntax id id Hierarchy Level edit virtual chassis Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the alphanumeric string that identifies a Virtual Chassis configuration Options id ID of the V...

Page 893: ...dress of the old master When the MAC persistence timer expires the backup new master begins to use its own MAC address There are no minimum or maximum timer limits Default 10 minutes Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring the Timer for the Backup Member to Start Using ...

Page 894: ...so we recommend that you assign the same mastership priority value to both the master and the backup Secondary factors in the master election algorithm determine which of these two members that is the two members that are assigned the highest mastership priority value functions as the master of the Virtual Chassis configuration Default 128 Options number Mastership priority value Range 1 through 2...

Page 895: ...its default member ID is 0 Options member id Identifies a specific member switch of a Virtual Chassis configuration Range 0 through 9 The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring a Virtual Chassis Using a Preprovision...

Page 896: ... member 2 no management vlan You cannot configure the IP address for a local management Ethernet port using the CLI or the J Web interface To do this you need to use the shell ifconfig command Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up a Multimember Virtual Chassis ...

Page 897: ... view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Assigning the Virtual Chassis ID to Determine Precedence During a Virtual Chassis Merge on page 767 Disabling Split and Merge in a Virtual Chassis Configuration CLI Procedure on page 799 Assigning the Virtual Chassis ID to Determine Precedence During a Virtual Chassis ...

Page 898: ...ry on the switch use the following format for package name pathname package name If the software package is to be downloaded and installed from a remote location use one of the following formats ftp hostname pathname package name ftp username prompt ftp hostname net package name http hostname pathname package name Required Privilege Level routing To view this statement in the configuration routing...

Page 899: ...ge Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Adding a New Switch to an Existing Virtual Chassis C...

Page 900: ...es The remaining statement is explained separately Default Redundancy is enabled for the Routing Engines Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Graceful Routing Engine Switchover in a J EX4200 Virtual Chassis CLI Procedure on page 801 Installing Software on a J EX8...

Page 901: ...r of the Virtual Chassis configuration other than the master or backup functions in the linecard role and runs only a subset of the Junos OS for J EX Series switches A member functioning in the linecard role does not run the chassis control protocols A Virtual Chassis configuration must have at least three members in order to include a member that functions in the linecard role When you use a prep...

Page 902: ...ion Related Documentation Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Configuring a Virtual Chassis CLI Procedure on page 781 Configuring a Virtual Chassis J Web Procedure on page 784 Adding a New Switch to an Existing Virtual Chassis Configuration CLI Procedure on page 786 Replacing a Member Switch of a Virtual Chassis Configuration CLI Procedure on...

Page 903: ... serial number The switch s permanent serial number which is located on the back of the switch Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring a Virtual Chassis Using a Preprovisioned Configuration File on page 752 Configuring a Virtual Chassis CLI Procedure on page 781...

Page 904: ...named trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option Range 2 through 1000 Default 3 files flag flag Tracing operation to perform To specify more than one tracing operation include multiple flag statements You ...

Page 905: ... or gigabytes GB When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the files option Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 ...

Page 906: ...rmation on a J EX4200 switch The remaining statements are explained separately Default A standalone J EX4200 switch is a Virtual Chassis by default It has a default member ID of 0 a default mastership priority of 128 and a default role as master Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentat...

Page 907: ...CHAPTER 49 Operational Mode Commands for Virtual Chassis 835 ...

Page 908: ...s command is entered membermember id Optional ClearVCPtrafficstatisticsfromonlythespecifiedmember of a Virtual Chassis configuration Required Privilege Level clear Related Documentation show virtual chassis vc port statistics on page 854 show virtual chassis vc port on page 851 Monitoring Virtual Chassis Configuration Status and Statistics on page 809 Understanding Virtual Chassis Components on pa...

Page 909: ...sion with the specified member of a Virtual Chassis configuration Options member id Select the specific member of the Virtual Chassis configuration with which you want to establish a session Required Privilege Level maintenance Related Documentation member on page 823 Understanding Virtual Chassis Components on page 694 837 Chapter 49 Operational Mode Commands for Virtual Chassis ...

Page 910: ...nd from the Virtual Chassis master only Options member id member id Specify the member id that you want to make available for reassignment to a different member switch Required Privilege Level system control Related Documentation request virtual chassis renumber on page 839 Replacing a Member Switch of a Virtual Chassis Configuration CLI Procedure on page 811 List of Sample Output request virtual ...

Page 911: ...number new member id new member id Specify an unassigned member ID from 0 through 9 Required Privilege Level system control Related Documentation request virtual chassis recycle on page 838 Replacing a Member Switch of a Virtual Chassis Configuration CLI Procedure on page 811 List of Sample Output request virtual chassis renumber member id 5 new member id 4 on page 839 request virtual chassis renu...

Page 912: ...Privilege Level system control Related Documentation request virtual chassis vc port on page 841 dedicated port show virtual chassis vc port on page 851 show virtual chassis vc port statistics on page 854 clear virtual chassis vc port statistics on page 836 Understanding Virtual Chassis Components on page 694 List of Sample Output request virtual chassis vc port set pic slot 1 port 0 on page 840 r...

Page 913: ...e factory default configuration Required Privilege Level system control Related Documentation request virtual chassis vc port on page 840 show virtual chassis vc port on page 851 show virtual chassis vc port statistics on page 854 clear virtual chassis vc port statistics on page 836 Understanding Virtual Chassis Components on page 694 List of Sample Output request virtual chassis vc port set inter...

Page 914: ...es on page 550 For more information about show system uptime see the Junos OS System Basics Services and Command Reference at http www juniper net techpubs software junos List of Sample Output show system uptime member 0 on page 843 Output Fields Table 110 on page 842 lists the output fields for the showsystemuptime command Output fields are listed in the approximate order in which they appear Tab...

Page 915: ... host show system uptime member 0 fpc0 show system uptime member 0 Current time 2008 02 06 05 24 20 UTC System booted 2008 01 31 08 26 54 UTC 5d 20 57 ago Protocols started 2008 01 31 08 27 56 UTC 5d 20 56 ago Last configured 2008 02 05 03 26 43 UTC 1d 01 57 ago by root 5 24AM up 5 days 20 57 1 user load averages 0 14 0 06 0 01 843 Chapter 49 Operational Mode Commands for Virtual Chassis ...

Page 916: ...hassis Configuration Status and Statistics on page 809 Understanding Virtual Chassis Configuration on page 704 List of Sample Output show virtual chassis active topology on page 844 Output Fields Table 111 on page 844 lists the output fields for the show virtual chassis active topology command Output fields are listed in the approximate order in which they appear Table 111 show virtual chassis act...

Page 917: ...5 8 vcp 0 1 vcp 1 6 8 vcp 0 7 8 vcp 0 8 8 vcp 0 845 Chapter 49 Operational Mode Commands for Virtual Chassis ...

Page 918: ...on page 846 Output Fields Table 112 on page 846 lists the output fields for the show virtual chassis fast failover command Output fields are listed in the approximate order in which they appear Table 112 show virtual chassis fast failover Output Fields Field Description Field Name Indicates fast failover status on dedicated VCPs Fast failover on dedicated VCP ports Indicates fast failover status o...

Page 919: ...t applies to the entire Virtual Chassis configuration Virtual Chassis ID Assigned member ID and FPC slot from 0 through 9 Member ID For a nonprovisioned configuration Prsnt for a member that is currently connected to the Virtual Chassis configuration NotPrsnt for a member ID that has been assigned but is not currently connected For a preprovisioned configuration Prsnt for a member that is specifie...

Page 920: ...1130 ex4200 48t 247 Linecard 1 vcp 0 3 vcp 1 3 FPC 3 Prsnt AK0207360280 ex4200 24t 246 Linecard 2 vcp 0 4 vcp 1 4 FPC 4 Prsnt AJ0207391113 ex4200 48t 245 Linecard 3 vcp 0 5 vcp 1 5 FPC 5 Prsnt BP0207452204 ex4200 48t 244 Linecard 4 vcp 0 6 vcp 1 6 FPC 6 Prsnt BP0207452222 ex4200 48t 243 Linecard 5 vcp 0 7 vcp 1 7 FPC 7 Prsnt BR0207432028 ex4200 24f 242 Linecard 6 vcp 0 8 vcp 1 8 FPC 8 Prsnt BR0207...

Page 921: ...ow virtual chassis vc path Output Fields Field Description Field Name The number of hops between the source and destination interfaces Hop The Virtual Chassis ID of the member switch that contains the Packet Forwarding Engine for each intermediate hop Member The number of the Packet Forwarding Engine in each Virtual Chassis member through which a packet passes Each Packet Forwarding Engine is the ...

Page 922: ...2 1 3 vcp 0 3 1 4 ge 1 0 1 850 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 923: ...show virtual chassis vc port statistics on page 854 Monitoring Virtual Chassis Configuration Status and Statistics on page 809 Understanding Virtual Chassis Configuration on page 704 List of Sample Output show virtual chassis vc port on page 852 show virtual chassis vc port all members on page 852 Output Fields Table 115 on page 851 lists the output fields for the show virtual chassis vc port comm...

Page 924: ...runk membership is then allocated or deallocated Trunk ID Interface status down or up Status Speed of the interface in megabits per second Speed mbps The Virtual Chassis member ID and interface of a VCP on a member switch that is connected to the interface or PIC Port field in the same row as this interface NeighborID Interface show virtual chassis vc port user switch show virtual chassis vc port ...

Page 925: ...ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000 3 vcp 1 vcp 1 Dedicated 2 Up 32000 3 vcp 0 1 0 Auto Configured 3 Up 1000 0 vcp 255 1 0 1 1 Auto Configured 3 Up 1000 0 vcp 255 1 1 fpc3 Interface Type Trunk Status Speed Neighbor or ID mbps ID Interface PIC Port vcp 0 Dedicated 1 Up 32000 2 vcp 0 vcp 1 Dedicated 2 Up 32000 2 vcp 1 1 0 Auto Configured 1 Up 1000 1 vcp 255 1 0 853 Chapter 49 Op...

Page 926: ...cs Specify either vcp 0 or vcp 1 or an internal port in the VCP subsystem for example internal 0 24 local Optional Display VCP traffic statistics for only the switch on which this command is entered membermember id Optional DisplayVCPtrafficstatisticsforonlythespecifiedmember of a Virtual Chassis configuration Required Privilege Level view Related Documentation clear virtual chassis vc port statis...

Page 927: ...l number of packets received and transmitted on the VCP interface Total packets detail extensive Number of unicast packets received and transmitted on the VCP interface Unicast packets detail extensive Number of broadcast packets received and transmitted on the VCP interface Broadcast packets detail extensive Number of multicast packets received and transmitted on the VCP interface Multicast packe...

Page 928: ... detail extensive Number of packets received on the VCP interface including invalid packets that were 64 octets in length excluding framing bits but including FCS octets 64 octets frames detail extensive Number of packets received on the VCP interface including invalid packets that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets 65 127octetsframes...

Page 929: ...ternal 0 25 0 0 0 0 internal 1 26 0 0 0 0 internal 1 27 0 0 0 0 vcp 0 0 0 0 0 vcp 1 0 0 0 0 internal 0 26 0 0 0 0 internal 0 27 0 0 0 0 internal 1 24 0 0 0 0 internal 1 25 0 0 0 0 master 0 show virtual chassis vc port statistics extensive user SWA 0 show virtual chassis vc port statistics extensive fpc0 RX TX Port internal 0 24 Total octets 0 0 Total packets 0 0 Unicast packets 0 0 Broadcast packe...

Page 930: ...0 0 Total packets 0 0 Unicast packets 0 0 Broadcast packets 0 0 Multicast packets 0 0 MAC control frames 0 0 CRC alignment errors 0 Oversize packets 0 Undersize packets 0 Jabber packets 0 Fragments received 0 Ifout errors 0 Packet drop events 0 64 octets frames 0 65 127 octets frames 0 128 255 octets frames 0 256 511 octets frames 0 512 1023 octets frames 0 1024 1518 octets frames 0 Rate packets p...

Page 931: ...0 0 0 0 internal 1 27 0 0 0 0 vcp 0 0 0 0 0 vcp 1 0 0 0 0 internal 0 26 0 0 0 0 internal 0 27 0 0 0 0 internal 1 24 0 0 0 0 internal 1 25 0 0 0 0 master 0 859 Chapter 49 Operational Mode Commands for Virtual Chassis ...

Page 932: ...860 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 933: ...age 863 Examples Interfaces Configuration on page 881 Configuring Interfaces on page 909 Verifying Interfaces on page 931 Troubleshooting Interfaces on page 939 Configuration Statements for Interfaces on page 943 Operational Mode Commands for Interfaces on page 989 861 ...

Page 934: ...862 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 935: ...ese interfaces For additional information see the Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos For information on interface naming conventions on J EX Series Switches see Understanding Interface Naming Conventions on J EX Series Switches on page 865 This topic describes Network Interfaces on page 863 Special Interfaces on page 864 Network Interfac...

Page 936: ...ver it is an interface in the sense that it provides access to the switch On J EX4200 switches that are configured as a Virtual Chassis you can access the master and configure all members of the Virtual Chassis through any member s console port For more information on the console port in a Virtual Chassis see Understanding Global Management of a Virtual Chassis Configuration on page 699 Console po...

Page 937: ... on page 702 Virtual Chassis port VCP interfaces J EX4200 switches have a VME interface This is a logical interface that is used for Virtual Chassis configurations and allows you to manage all the members of the Virtual Chassis through the master For more information on the VME interface see Understanding Global Management of a Virtual Chassis Configuration on page 699 VirtualmanagementEthernet VM...

Page 938: ...tches built in network ports are numbered from left to right On models that have two rows of ports the ports on the top row start with 0 followed by the remaining even numbered ports and the ports on the bottom row start with 1 followed by the remaining odd numbered ports Uplink ports in J EX4200 switches are labeled from left to right starting with 0 On J EX8200 switches the network ports are num...

Page 939: ...oint to point trunk link or a LAG The LAG balances traffic across the member links within an aggregated Ethernet bundle and effectively increases the uplink bandwidth Another advantage of link aggregation is increased availability because the LAG is composed of multiple member links If one member link fails the LAG continues to carry traffic over the remaining links Link Aggregation Control Protoc...

Page 940: ...e located in different member switches of a Virtual Chassis A LAG creates a single logical point to point connection A typical deployment for a LAG would be to aggregate trunk links between an access switch and a distribution switch or customer edge CE router Link Aggregation Control Protocol LACP When LACP is configured it detects misconfigurations on the local end or the remote end of the link A...

Page 941: ...ss Switch and a Virtual Chassis Distribution Switch on page 740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos Understanding Interface Ranges on J EX Series Switches You can use the interf...

Page 942: ...ng vlan vlan name interface protocols isis interface protocols link management peer lmp control channel interface protocols link management te link name interface protocols lldp interface protocols lldp med interface protocols mpls interface protocols mstp interface protocols mstp msti id interface protocols mstp msti id vlan vlan id interface protocols oam ethernet link fault management interface...

Page 943: ...3 subinterfaces on a J EX Series switch you enable VLAN tagging partition the physical interface into logical partitions and bind the VLAN ID to the logical interface You can partition one physical interface into up to 4094 different subinterfaces one for each VLAN We recommend that you use the VLAN ID as the subinterface number when you configure the subinterface The Junos OS reserves VLAN IDs 0 ...

Page 944: ...ries Switches Overview Unicast RPF functions as an ingress filter that reduces the forwarding of IP packets that might be spoofing an address By default unicast RPF is disabled on the switch interfaces The type of unicast RPF provided on the switches that is strict mode unicast RPF is especially useful on untrusted interfaces An untrusted interface is an interface where untrusted users or processe...

Page 945: ...equest packets without performing unicast RPF checks Default Route Handling If the best return path to the source is the default route 0 0 0 0 and the default route points to reject the switch discards all unicast RPF packets If the default route points to a valid network interface the switch performs a normal unicast RPF check on the packets When to Enable Unicast RPF Enable unicast RPF when you ...

Page 946: ...erfaces results in packets from legitimate sources being filtered TIP Enabling unicast RPF as close as possible to the traffic source stops spoofed traffic before it can proliferate or reach interfaces that do not have unicast RPF enabled When Not to Enable Unicast RPF Typically you will not enable unicast RPF if Switch interfaces are multihomed Switch interfaces are trusted interfaces BGP is carr...

Page 947: ...tomatically enabled on all switch interfaces including link aggregation groups LAGs and routed VLAN interfaces RVIs When you disable unicast RPF on the interface or interfaces on which you enabled unicast RPF it is automatically disabled on all switch interfaces NOTE You must explicitly disable unicast RPF on every interface on which it was explicitly enabled or unicast RPF remains enabled on all ...

Page 948: ...th the broadcast packets without broadcasting to the entire network IP directed broadcast packets cannot originate from the target subnet When you send an IP directed broadcast packet as it travels to the target subnet the network forwards it in the same way as it forwards a unicast packet When the packet reaches a switch that is directly connected to the target subnet the switch checks to see whe...

Page 949: ...to deceive a network into identifying the attacker as a legitimate source and send IP directed broadcasts containing Internet Control Message Protocol ICMP echo ping packets When the hosts on the network with IP directed broadcast enabled receive the ICMP echo packets they all send replies to the victim that has the spoofed source IP address This creates a flood of ping replies in a DoS attack tha...

Page 950: ...stemming from protocol reconvergence and even dropped packets Graceful protocol restart allows a restarting switch and its neighbors to continue forwarding packets without disrupting network performance Because neighboring switches assist in the restart these neighbors are called helper switches the restarting switch can quickly resume full operation without recalculating algorithms from scratch O...

Page 951: ... the backup with minimal interruption to network communications When you configure GRES the backup Routing Engine automatically synchronizes with the master Routing Engine to preserve kernel state information and forwarding state Any updates to the master Routing Engine are replicated to the backup Routing Engine as soon as they occur If the kernel on the master Routing Engine stops operating the ...

Page 952: ...fic across all available links If one of the links should fail the system automatically load balances traffic across all remaining links You can select up to eight Ethernet interfaces and include them within a LAG In a J EX4200 Virtual Chassis configuration the interfaces that form a LAG can be on different members of the Virtual Chassis See Understanding Virtual Chassis Configurations and Link Ag...

Page 953: ...ess Switch and a Virtual Chassis Distribution Switch J EX Series switches allow you to combine multiple Ethernet links into one logical interface for higher bandwidth and redundancy The ports that are combined in this manner are referred to as a link aggregation group LAG or bundle The number of Ethernet links you can combine into a LAG depends on your J EX Series switch model See Understanding Ag...

Page 954: ...able the logical port transparently continues to function over the remaining physical port The topology used in this example consists of one Virtual Chassis access switch and one Virtual Chassis distribution switch The access switch is composed of two J EX4200 48T switches SWA 0 and SWA 1 interconnected to each other with their Virtual Chassis ports VCPs as member switches of Host A The distributi...

Page 955: ...or Connecting Virtual Chassis Access Switches to a Virtual Chassis Distribution Switch Trunk Port Member ID Uplink Module Base Hardware Hostname and VCID Switch xe 0 1 0 to SWD 0 xe 0 1 1 to SWD 1 0 One uplink module J EX4200 48T switch Host A Access switch VCID 1 SWA 0 xe 2 1 0 to SWD 0 xe 2 1 1 to SWD 1 1 One uplink module J EX4200 48P switch Host A Access switch VCID 1 SWA 1 883 Chapter 51 Exam...

Page 956: ...d 10g set interfaces ae1 aggregated ether options minimum links 2 set interfaces ae1 aggregated ether options link speed 10g set interfaces ae0 unit 0 family inet address 192 0 2 0 25 set interfaces ae1 unit 1 family inet address 192 0 2 128 25 set interfaces xe 0 1 0 ether options 802 ad ae0 set interfaces xe 2 1 0 ether options 802 ad ae0 set interfaces xe 0 1 1 ether options 802 ad ae1 set inte...

Page 957: ...d ae1 user Host A set xe 2 1 1 ether options 802 ad ae1 8 Specify that LAG ae0 belongs to the subnet for the employee broadcast domain edit interfaces user Host A set ae0 unit 0 family inet address 192 0 2 0 25 9 Specify that LAG ae1 belongs to the subnet for the guest broadcast domain edit interfaces user Host A set ae1 unit 1 family inet address 192 0 2 128 25 Results Display the results of the ...

Page 958: ...ted on page 886 Verifying That LAG ae0 Has Been Created Purpose Verify that LAG ae0 has been created on the switch Action show interfaces ae0 terse Interface Admin Link Proto Local Remote ae0 up up ae0 0 up up inet 10 10 10 2 24 Meaning The output confirms that the ae0 link is up and shows the family and IP address assigned to this link Verifying That LAG ae1 Has Been Created Purpose Verify that L...

Page 959: ...Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Example Connecting an Access Switch to a Distribution Switch on page 1078 Virtual Chassis Cabling Configuration Examples for J EX4200 Switches Installing an Uplink Module in a J EX4200 Switch Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual C...

Page 960: ...onfiguring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configured the LAGs See Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Overview and Topology This example assumes that you are already familiar with the Example Configuring Aggregated Ethernet High Speed Uplinks between Virtual C...

Page 961: ...r Host A LAGs ae0 and ae1 1 Specify the aggregated Ethernet options for both bundles edit interfaces user Host A set ae0 aggregated ether options lacp active periodic fast user Host A set ae1 aggregated ether options lacp active periodic fast Results Display the results of the configuration edit interfaces user Host A show ae0 aggregated ether options lacp active periodic fast ae1 aggregated ether...

Page 962: ...g exchanged perform these tasks Verifying the LACP Settings on page 890 Verifying That the LACP Packets Are Being Exchanged on page 891 Verifying the LACP Settings Purpose Verify that LACP has been set up correctly Action Use the show lacp interfaces interface name command to check that LACP has been enabled as active on one end user Host A show lacp interfaces xe 0 1 0 Aggregated interface ae0 LA...

Page 963: ...5 e0 Hardware address 02 19 e2 50 45 e0 Last flapped Never Statistics last cleared Never Input packets 0 Output packets 0 Input errors 0 Output errors 0 Logical interface ae0 0 Index 71 SNMP ifIndex 34 Flags Hardware Down Device Down SNMP Traps Encapsulation ENET2 Statistics Packets pps Bytes bps Bundle Input 0 0 0 0 Output 0 0 0 0 Protocol inet Flags None Addresses Flags Dest route down Is Prefer...

Page 964: ...ffic interface lag member detail command Related Documentation Example Connecting an Access Switch to a Distribution Switch on page 1078 Virtual Chassis Cabling Configuration Examples for J EX4200 Switches Installing an Uplink Module in a J EX4200 Switch 892 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 965: ...and in space constrained data centers It has twenty four 1 Gigabit Ethernet fiber SFP ports and an uplink module with two 10 Gigabit Ethernet ports For the access switch any Layer 2 switch that supports 802 1Q VLAN tags Before you connect the switches make sure you have Connected the two switches Configured the necessary VLANs See Configuring VLANs for J EX Series Switches CLI Procedure on page 11...

Page 966: ...ch ge 0 0 0 Port interfaces Configuring the Access Switch Subinterfaces CLI Quick Configuration To quickly create and configure subinterfaces on the access switch copy the following commands and paste them into the switch terminal window edit set interfaces ge 0 1 0 vlan tagging set interfaces ge 0 1 0 unit 0 vlan id 101 family inet address 1 1 1 1 24 set interfaces ge 0 1 0 unit 1 vlan id 102 fam...

Page 967: ...mily inet address 3 1 1 1 24 8 Bind vlan4 s VLAN ID to the logical interface edit interfaces ge 0 1 0 user access switch set unit 3 vlan id 104 9 Set vlan4 s subinterface IP address edit interfaces ge 0 1 0 user access switch set unit 3 family inet address 4 1 1 1 24 10 Bind vlan5 s VLAN ID to the logical interface edit interfaces ge 0 1 0 user access switch set unit 4 vlan id 105 11 Set vlan5 s s...

Page 968: ...0 unit 3 vlan id 104 family inet address 4 1 1 2 24 set interfaces ge 0 0 0 unit 4 vlan id 105 family inet address 5 1 1 2 24 Step by Step Procedure To configure subinterfaces on the distribution switch 1 On the trunk interface of the distribution switch enable VLAN tagging edit interfaces ge 0 0 0 user distribution switch set vlan tagging 2 Bind vlan1 s VLAN ID to the logical interface edit inter...

Page 969: ...edit interfaces ge 0 0 0 user distribution switch set unit 3 family inet address 4 1 1 2 24 10 Bind vlan5 s VLAN ID to the logical interface edit interfaces ge 0 0 0 user distribution switch set unit 4 vlan id 105 11 Set vlan5 s subinterface IP address edit interfaces ge 0 0 0 user distribution switch set unit 4 family inet address 5 1 1 2 24 Results user distribution switch show configuration int...

Page 970: ...e 0 1 0 3 up up inet 4 1 1 1 24 ge 0 1 0 4 up up inet 5 1 1 1 24 ge 0 1 0 32767 up up 2 Use the show interfaces command on the distribution switch user distribution switch show interfaces ge 0 0 0 terse Interface Admin Link Proto Local Remote ge 0 0 0 up up ge 0 0 0 0 up up inet 1 1 1 2 24 ge 0 0 0 1 up up inet 2 1 1 2 24 ge 0 0 0 2 up up inet 3 1 1 2 24 ge 0 0 0 3 up up inet 4 1 1 2 24 ge 0 0 0 4...

Page 971: ...1 1 2 icmp_seq 3 ttl 64 time 0 167 ms 2 1 1 2 ping statistics 4 packets transmitted 4 packets received 0 packet loss round trip min avg max stddev 0 113 0 171 0 241 0 046 ms 3 From the access switch ping the address of the vlan3 subinterface on the distribution switch user access switch ping 3 1 1 2 count 4 PING 3 1 1 2 3 1 1 2 56 data bytes 64 bytes from 3 1 1 2 icmp_seq 0 ttl 64 time 0 341 ms 64...

Page 972: ...binterface CLI Procedure on page 930 Example Configuring Unicast RPF on a J EX Series Switch Unicast reverse path forwarding RPF helps protect the switch against denial of service DoS and distributed denial of service DDoS attacks by verifying the unicast source address of each packet that arrives on an ingress interface where unicast RPF is enabled This example shows how to help defend the switch...

Page 973: ...tches the switch applies unicast RPF globally to all interfaces on the switch See Understanding Unicast RPF for J EX Series Switches on page 872 for more information on limitations regarding the configuration of unicast RPF on J EX4200 switches In this example an enterprise network s system administrator wants to protect Switch A against potential DoS and DDoS attacks from the Internet The adminis...

Page 974: ...al interface ge 1 0 10 Enabled Physical link is Down Interface index 139 SNMP ifIndex 58 Generation 140 Link level type Ethernet MTU 1514 Speed Auto MAC REWRITE Error None Loopback Disabled Source filtering Disabled Flow control Enabled Auto negotiation Enabled Remote fault Online Device flags Present Running Interface flags Hardware Down SNMP Traps Internal 0x0 Link flags None CoS queues 8 suppor...

Page 975: ... MAC control frames 0 0 MAC pause frames 0 0 Oversized frames 0 Jabber frames 0 Fragment frames 0 VLAN tagged frames 0 Code violations 0 Filter statistics Input packet count 0 Input packet rejects 0 Input DA rejects 0 Input SA rejects 0 Output packet count 0 Output packet pad count 0 Output packet error count 0 CAM destination filters 0 CAM source filters 0 Autonegotiation information Negotiation ...

Page 976: ...hod of sending broadcast packets to hosts on a specified subnet without broadcasting those packets to hosts on the entire network This example shows how to enable a subnet to receive IP directed broadcast packets so you can perform backups and other network management tasks remotely Requirements on page 904 Overview and Topology on page 905 Configuration on page 905 Requirements This example uses ...

Page 977: ...anage the clients in subnet 10 1 2 1 24 When the switch receives a packet with the broadcast IP address of the target subnet as its destination address it forwards the packet to the subnet s Layer 3 interface and broadcasts it to all the hosts within the subnet Figure 25 Topology for IP Directed Broadcast Table 122 on page 905 shows the settings of the components in this example Table 122 Componen...

Page 978: ...tching vlan members v1 2 Add logical interface ge 0 0 1 0 to VLAN v1 edit interfaces user switch set ge 0 0 1 0 family ethernet switching vlan members v1 3 Configure the IP address for the egress VLAN v1 edit interfaces user switch set vlan 1 family inet address 10 1 2 1 24 4 Add logical interface ge 0 0 3 0 to VLAN v0 edit interfaces user switch set ge 0 0 3 0 family ethernet switching vlan membe...

Page 979: ...mbers v0 vlan unit 0 family inet targeted broadcast address 10 1 1 1 24 unit 1 family inet targeted broadcast address 10 1 2 1 24 vlans default v0 l3 interface vlan 0 v1 l3 interface vlan 1 Related Documentation Configuring IP Directed Broadcast CLI Procedure on page 929 907 Chapter 51 Examples Interfaces Configuration ...

Page 980: ...908 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 981: ... CLI Procedure on page 930 Configuring Gigabit Ethernet Interfaces J Web Procedure An Ethernet interface must be configured for optimal performance in a high traffic network To configure properties on a Gigabit Ethernet interface or a 10 Gigabit Ethernet interface on a J EX Series switch 1 Select Interfaces Ports The page lists Gigabit Ethernet and 10 Gigabit Ethernet interfaces and their link sta...

Page 982: ...the interface belongs to If there are interfaces in the VLAN that have static IP addresses those interfaces might lose connectivity because those static IP addresses might not be present in the DHCP pool Therefore when you are selecting a port role ensure that the corresponding port security settings for the VLAN are applicable to the interface For basic information on port security features such ...

Page 983: ...iguration to be associated with the interface 2 Click Details to view CLI commands for this role 3 Click OK Applies the desktop role The interface family is set to ethernet switching port mode is set to access RSTP is enabled with the edge and point to point options and port security parameters MAC limit 1 dynamic ARP inspection and DHCP snooping enabled are set Desktop 1 Select an existing VLAN c...

Page 984: ...mask or address prefix 4 Click OK Applies the routed uplink role The interface family is set to inet and recommended CoS parameters are set for schedulers and classifiers See Table 124 on page 914 for more CoS information Routed Uplink 1 For this port role you can select a VLAN member and associate a native VLAN with the interface 2 Click Details to view CLI commands for this role 3 Click OK Appli...

Page 985: ...size for the interface MTU bytes Select one of the following values 10 Mbps 100 Mbps 1000 Mbps or Auto Negotiation Specifies the speed for the mode Speed Select one automatic half or full Specifies the link mode Duplex Enter a brief description for the link Describes the link NOTE If the interface is part of a link aggregation group LAG only the option Description is enabled Description Select the...

Page 986: ... to 0 Forwarding Classes The schedulers and their settings are Strict priority Transmission rate is set to 10 percent and buffer size to 5 percent Expedited scheduler Transmission rate is set to 30 percent buffer size to 30 percent and priority to low Assured scheduler Transmission rate is set to 25 percent buffer size to 25 percent and priority to low Best effort scheduler Transmission rate is se...

Page 987: ... interfaceapply macro juniper port profile Default Set the port role to Default set interfaces interface unit 0 family ethernet switching port mode access Set port family to ethernet switching Set port mode to access delete protocols rstp interface interface disable Enable RSTP if redundant trunk groups are not configured set protocols rstp interface interface disable Disable RSTP if redundant tru...

Page 988: ... port profile map set class of service interfaces interface unit 0 classifiers ieee 802 1 juniper_ieee_classifier set class of service interfaces interfaceunit 0 classifiers dscp juniper dscp classifier Set class of service parameters SCHEDULER_MAP juniper port profile map IEEE_CLASSIFIER juniper ieee classifier DSCP_CLASSIFIER juniper dscp classifier Refer to Table 126 on page 918 for details Set...

Page 989: ...ode to trunk set interfaces interface unit 0 family ethernet switching native vlan id vlan name Set Native VLAN name set interfaces interface unit 0 family ethernet switching vlan members vlan members Set the port as part of all valid VLANs valid refers to all VLANs except native VLAN and voice VLANs set ethernet switching options secure access port dhcp trusted Set port security parameter set pro...

Page 990: ...edulers expedited scheduler priority low expedited scheduler The CLI commands are set class of service schedulers assured scheduler transmit rate percent 25 set class of service schedulers strict priority scheduler buffer size percent 25 set class of service schedulers strict priority scheduler priority low assured scheduler The CLI commands are set class of service schedulers best effort schedule...

Page 991: ...ces such as PCs printers IP telephones and IP cameras If you are connecting a desktop phone or wireless access point or a security camera to a Power over Ethernet PoE port you can configure some parameters for the PoE interface The PoE interfaces are enabled by default For detailed information on PoE settings see Configuring PoE CLI Procedure on page 3021 If you are connecting a device to other sw...

Page 992: ...et interface edit user switch set interfaces xe fpc 1 port ether options NOTE An uplink port in a J EX4200 switch always has a PIC value of 1 For a J EX4200 standalone switch fpc refers to the switch itself and is always 0 In a Virtual Chassis configuration fpc refers to the member ID In a J EX8200 switch fpc refers to the line card number The ether options statement allows you to modify the confi...

Page 993: ...it operating mode By default the SFP uplink module operates in the 10 gigabit mode and supports only SFP transceivers If you have not changed the module from the default setting and you want to use SFP transceivers you do not need to configure the operating mode To set the operating mode of an SFP uplink module change the operating mode to the appropriate mode for the transceiver type you want to ...

Page 994: ...e labeled up NOTE By default only one link must be up for the bundle to be labeled up edit interfaces user switch set ae0 aggregated ether options minimum links 2 3 Specify the link speed for the aggregated Ethernet bundle edit interfaces user switch set ae0 aggregated ether options link speed 10g 4 Specify the members to be included within the aggregated Ethernet bundle edit interfaces user switc...

Page 995: ...t are not available for aggregation To configure an aggregated Ethernet interface also referred to as a LAG 1 Select Configure Interfaces Link Aggregation The list of aggregated interfaces is displayed NOTE After you make changes to the configuration in this page you must commit the changes immediately for them to take effect To commit all changes to the active configuration select Commit Options ...

Page 996: ...ctive Indicates that the interface initiates transmission of LACP packets Passive Indicates that the interface responds only to LACP packets LACP Mode Enter a description Specifies a description for the LAG Description To add interfaces to the LAG select the interfaces and click Add Click OK To remove an interface from the LAG select the interface and click Remove NOTE Only interfaces that are con...

Page 997: ...K Specifies an IPv4 address for the selected LAG IPv4 Address 1 Select the check box IPv6 address 2 Type an IP address for example 2001 ab8 85a3 8a2e 370 7334 3 Enter the subnet mask or address prefix 4 Click OK Specifies an IPv6 address for the selected LAG IPv6 Address Related Documentation Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Example Configuring Aggregated Ethern...

Page 998: ...to a LAG if the remote end of the LAG link is a security device unless the security device supports LACP Security devices often do not support LACP because they require a deterministic configuration To configure LACP 1 Enable one side of the aggregated Ethernet link as active edit interfaces user switch set aex aggregated ether options lacp active 2 Specify the interval at which the interfaces sen...

Page 999: ...nsure that all switch interfaces are symmetrically routed before you enable unicast RPF on an interface When you enable unicast RPF on any interface it is enabled globally on all switch interfaces Do not enable unicast RPF on asymmetrically routed interfaces An asymmetrically routed interface uses different paths to send and receive packets between the source and the destination To enable unicast ...

Page 1000: ...l of service DoS and distributed denial of service DDoS attacks on untrusted interfaces Unicast RPF filters traffic with source addresses that do not use the incoming interface as the best return path back to the source If the network configuration changes so that an interface that has unicast RPF enabled becomes a trusted interface or becomes asymmetrically routed the interface that receives a pa...

Page 1001: ...ork treats IP directed broadcast packets as unicast packets and forwards them accordingly Before you begin to configure IP directed broadcast Ensure that the subnet on which you want broadcast packets using IP direct broadcast is not directly connected to the Internet Configure a routed VLAN interface RVI for the subnet that will be enabled for IP direct broadcast See Configuring Routed VLAN Inter...

Page 1002: ...en subnets To configure Layer 3 subinterfaces you enable VLAN tagging and partition one or more physical ports into multiple logical interfaces each corresponding to a VLAN ID Before you begin make sure you set up your VLANs See Configuring VLANs for J EX Series Switches CLI Procedure on page 1136 or Configuring VLANs for J EX Series Switches J Web Procedure on page 1133 To configure Layer 3 subin...

Page 1003: ... addition the Interface monitoring page displays input and output packet counters and error counters in the form of charts Alternatively you can enter the show commands in the CLI to view interface status and traffic statistics Action To view general interface information in the J Web interface such as available interfaces select Monitor Interfaces Click any interface to view details about its sta...

Page 1004: ...isplay the number of broadcast unicast and multicast packet counters For details about output from the CLI commands see show interfaces ge Gigabit Ethernet or show interfaces xe 10 Gigabit Ethernet Related Documentation Configuring Gigabit Ethernet Interfaces J Web Procedure on page 909 Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Verifying the Status of a LAG Interface Purpos...

Page 1005: ...0 1 0 Aggregated interface ae0 LACP state Role Exp Def Dist Col Syn Aggr Timeout Activity xe 0 1 0 Actor No Yes No No No Yes Fast Active xe 0 1 0 Partner No Yes No No No Yes Fast Passive LACP protocol Receive State Transmit State Mux State xe 0 1 0 Defaulted Fast periodic Detached Meaning This example shows that LACP has been configured with one side as active and the other as passive When LACP is...

Page 1006: ...et LACP CLI Procedure on page 926 Verifying the Status of a LAG Interface on page 932 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Verifying That Layer 3 Subinterfaces Are Working Purpose After configuring Layer 3 subinterfaces verify they are set up properly and transmitting data ...

Page 1007: ...how interfaces ge 1 0 10 extensive Physical interface ge 1 0 10 Enabled Physical link is Down Interface index 139 SNMP ifIndex 58 Generation 140 Link level type Ethernet MTU 1514 Speed Auto MAC REWRITE Error None Loopback Disabled Source filtering Disabled Flow control Enabled Auto negotiation Enabled Remote fault Online Device flags Present Running Interface flags Hardware Down SNMP Traps Interna...

Page 1008: ...0 Input SA rejects 0 Output packet count 0 Output packet pad count 0 Output packet error count 0 CAM destination filters 0 CAM source filters 0 Autonegotiation information Negotiation status Incomplete Packet Forwarding Engine configuration Destination slot 1 Logical interface ge 1 0 10 0 Index 69 SNMP ifIndex 59 Generation 135 Flags Device Down SNMP Traps 0x0 Encapsulation ENET2 Traffic statistic...

Page 1009: ...tus is shown as enabled only on interfaces for which you have explicitly configured unicast RPF Thus the uRPF flag is not displayed on interfaces for which you have not explicitly configured unicast RPF even though unicast RPF is implicitly enabled on all interfaces on J EX4200 switches Related Documentation show interfaces xe on page 1019 Example Configuring Unicast RPF on a J EX Series Switch on...

Page 1010: ...938 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1011: ...terface on the port in which an SFP or SFP transceiver is installed in an SFP uplink module installed in a J EX4200 switch is down When you check the status with the CLI command show interfaces ge or with the J Web user interface the disabled port is not listed Cause By default the SFP uplink module operates in the 10 gigabit mode and supports only SFP transceivers The operating mode for the modul...

Page 1012: ...d Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Troubleshooting Interface Configuration and Cable Faults Troubleshooting interface configuration and connectivity on the J EX Series ...

Page 1013: ...e Discarded on page 941 Legitimate Packets Are Discarded Problem The switch filters valid packets from legitimate sources which results in the switch s discarding packets that should be forwarded Solution The interface or interfaces on which legitimate packets are discarded are asymmetrically routed interfaces An asymmetrically routed interface uses different paths to send and receive packets betw...

Page 1014: ...42 Virtual Chassis port VCP connection does not work Problem The Virtual Chassis port VCP connection configured in a J EX4200 switch does not work A port of the uplink module is set as a VCP Cause The uplink module installed in the switch was replaced Solution Set a port in the uplink module as a VCP See Setting an Uplink Module Port as a Virtual Chassis Port CLI Procedure on page 792 Related Docu...

Page 1015: ...et device count number auto image upgrade fpc slot pic pic number sfpplus pic mode mode power budget priority priority lcd menu fpc slot number menu item menu name menu option psu redundancy n plus n redundancy graceful switchover Related Documentation Understanding Aggregated Ethernet Interfaces and LACP on page 867 Understanding Power Management on J EX Series Switches on page 302 edit interface...

Page 1016: ... id vlan id number vlan tagging fe fpc pic port description text disable mtu bytes no gratuitous arp request speed speed traceoptions traps no traps unit logical unit number description text disable family family name proxy arp restricted unrestricted traps no traps vlan id vlan id number vlan tagging ge fpc pic port description text disable ether options 802 3ad aex lacp force up auto negotiation...

Page 1017: ...ation flow control no flow control link mode mode speed auto negotiation speed hold time up milliseconds down milliseconds member interface name member range starting interface name to ending interface name mtu bytes unit logical unit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vlan id number lo0 description text disable hold time...

Page 1018: ...st traceoptions traps no traps unit logical unit number description text disable family family name proxy arp restricted unrestricted traps no traps vme description text disable hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name traps no traps vlan id vlan id number vlan ta...

Page 1019: ...ated Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Configuring a Layer 3 Subinterface CLI Procedure on page 930 Configuring Routed VLAN Interfaces CLI Procedure on page 1137 Configuring the Virtual Management Ethernet Interface for Global Management of a Virtual Chassis CLI Procedure on page 797 ...

Page 1020: ...mple Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Configuring Aggreg...

Page 1021: ... To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Understanding Aggregated Ethernet Interfaces and L...

Page 1022: ... statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis D...

Page 1023: ...re link mode and speed options Default Autonegotiation is automatically enabled No explicit action is taken after the autonegotiation is complete or if the negotiation fails Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 91...

Page 1024: ... Hierarchy Level edit Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure chassis specific properties The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Aggregate...

Page 1025: ...clude is displayed in the output of the show interfaces commands and is also exposed in the ifAlias Management Information Base MIB object It has no effect on the operation of the interface or the switch Default No textual description is configured Options text Text to describe the interface If the text includes spaces enclose the entire text in straight quotation marks Required Privilege Level in...

Page 1026: ...nge 1 through 64 for J EX4200 switches 1 through 255 for J EX8200 switches Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Configurin...

Page 1027: ...s are explained separately Default Enabled Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Gigabit Ethernet Interfaces J Web Procedure on page 909 Understanding Aggregated Ethernet Interfaces and LACP on page...

Page 1028: ...h The remaining statement is explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Junos OS System Basics Configuration Guide at http www juniper net techpubs software junos index html 956 Dell PowerCon...

Page 1029: ...ily inet family inet address address primary vrrp group group id advertise interval milliseconds preempt no preempt hold time seconds priority number virtual address addresses virtual link local address ip address filter input filter name filter output filter name primary rpf check targeted broadcast family inet6 family inet6 address address primary vrrp inet6 group group id inet6 advertise interv...

Page 1030: ... interfaces on J EX Series switches as well as statements that are used to configure protocol families only on switch interfaces For information about additional standard Junos OS statements that you can configure on interfaces see the Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos Default Access interfaces on J EX4200 switches are set to family eth...

Page 1031: ...he range Not all interface types support all family substatements Check your switch CLI for supported substatements for a particular protocol family configuration Table 130 Protocol Families and Supported Interface Types Supported Interface Types Description Family xe vme vlan me0 lo0 ge ae Circuit cross connect protocol family ccc Ethernet switching protocol family ethernet switching IPv4 protoco...

Page 1032: ... unmodified on the port or Layer 3 interface and all outgoing traffic is sent unmodified from the port or Layer 3 interface Options filter name Name of a firewall filter defined in the filter statement input Apply a firewall filter to traffic entering the port or Layer 3 interface output Apply a firewall filter to traffic exiting the Layer 3 interface Required Privilege Level interface To view thi...

Page 1033: ...figuring Gigabit Ethernet Interfaces J Web Procedure on page 909 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos force up Syntax force up Hierarchy Level edit interfaces interface name ether options 802 3ad lacp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the state of the interface as...

Page 1034: ...et interfaces Options interface range name Name of the interface range NOTE Youcanuseregularexpressionsandwildcardstospecifytheinterfaces in the member range configuration Do not use wildcards for interface types The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configurati...

Page 1035: ...on text disable hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name proxy arp restricted unrestricted traps no traps vlan id vlan id number vlan tagging interfaces ge ge fpc pic port description text disable ether options 802 3ad aex lacp force up auto negotiation no auto ne...

Page 1036: ...d aex lacp force up auto negotiation no auto negotiation flow control no flow control link mode mode speed auto negotiation speed hold time up milliseconds down milliseconds member interface name member range starting interface name to ending interface name mtu bytes unit logical unit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vl...

Page 1037: ...atuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name traps no traps vlan id vlan id number vlan tagging interfaces vlan vlan description text disable hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name proxy ar...

Page 1038: ... auto negotiation no auto negotiation flow control no flow control link mode mode speed auto negotiation speed hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vlan id number vlan tagging Hierarchy Level edit Re...

Page 1039: ...ment for syntax of the protocol families supported for switch interfaces Not all interface types support all family substatements Check your switch CLI for supported substatements for a particular protocol family configuration Table 131 Interface Types and Their Supported Protocol Families Supported Protocol Families Description Interface Typ mpls iso inet6 inet e t h e r n e t s w i t c h i n g c...

Page 1040: ...s Description Configure the Link Aggregation Control Protocol LACP Default LACP is not enabled Options mode LACP mode active Initiate transmission of LACP packets passive Respond to LACP packets The remaining statement is explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documenta...

Page 1041: ...e Configuring Aggregated Ethernet High Speed Uplinks Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Configuring Aggregate...

Page 1042: ...o negotiation is specified in ether options you can select only full duplex or half duplex If auto negotiation is specified in ether options you can select any mode Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configu...

Page 1043: ...abbreviation k 1000 m 1 000 000 or g 1 000 000 000 Aggregated Ethernet links on J EX Series switches can have one of the following speed values 1g Links are 1 Gbps 10g Links are 10 Gbps Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Aggregated Ethernet High Speed U...

Page 1044: ... the interface Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Understanding Interface Ranges on J EX Series Switches on page 869 J EX Series Switches Interfaces Overview on page 863 Junos OS Network Interfaces Configura...

Page 1045: ...ttheconfiguration otherwise theconfigurationcommit fails Also all cannot be the name of a VLAN on the switch names Name of one or more VLANs vlan ids Numeric identifier of one or more VLANs For a series of tagged VLANs specify a range for example 10 20 or 10 20 23 27 30 Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the con...

Page 1046: ...w on page 863 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos minimum links Syntax minimum links number Hierarchy Level edit interfaces aex aggregated ether options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For an aggregated Ethernet interface set the minimum number of links that must b...

Page 1047: ...e member physical interfaces of the RVI and not on the RVI itself the vlan interface However for jumbo control packets for example to ping the RVI with a packet size of 6000 bytes or more you must explicitly configure the jumbo MTU size on the interface named vlan the RVI CAUTION Setting or deleting the jumbo MTU size on the RVI the vlan interface while the switch is transmitting packets might res...

Page 1048: ...rivilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show vlans on page 1263 show ethernet switching interfaces on page 997 Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Gigabit Ethernet Interfaces J Web Procedure on page 909 Understanding Bridging and VLANs on J EX Series...

Page 1049: ...packets every 30 seconds Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Configuring Aggregated Ethernet LACP CLI Procedure...

Page 1050: ...t to the configuration Related Documentation Setting the Mode on an SFP Uplink Module CLI Procedure on page 921 pic mode Syntax pic mode mode Hierarchy Level edit chassis fpc slot pic pic number sfpplus Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the operating mode for the specified port on the SFP uplink module on a J EX4200...

Page 1051: ...es and IP cameras trunk Have the interface operate in trunk mode In this mode the interface can be in multiple VLANs and can multiplex traffic between different VLANs Trunk interfaces typically connect to other switches and to routers on the LAN Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Docume...

Page 1052: ...switches enable an RPF check on unicast traffic including ECMP packets on the selected ingress interface Default Unicast RPF is disabled on all interfaces Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Unicast RPF on a J EX Series Switch on page 900 Configuring Uni...

Page 1053: ...e 10 gigabit mode and supports SFP transceivers NOTE The SFP uplink module provides two ports for 10 gigabit small form factor pluggable SFP transceivers when configured to operate in 10 gigabit mode or four ports for 1 gigabit small form factor pluggable SFP transceivers when configured to operate in 1 gigabit mode Required Privilege Level interface To view this statement in the configuration int...

Page 1054: ...fy the interface speed If the auto negotiation statement at the edit interfaces interface name ether options hierarchy level is disabled you must specify a specific value This value sets the speed that is used on the link If the auto negotiation statement is enabled you might want to configure a specific speed value to advertise the desired speed to the remote end 10m 10 Mbps 100m 100 Mbps 1g 1 Gb...

Page 1055: ...fied subnet Default IP directed broadcast is disabled Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring IP Directed Broadcast on a J EX Series Switch on page 904 Configuring IP Directed Broadcast CLI Procedure on page 929 Understanding IP Directed Broadcast for J EX S...

Page 1056: ... logical unit number Number of the logical unit Range 0 through 16 384 The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Aggregated Ethernet Interfaces CLI Proc...

Page 1057: ...lege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation show ethernet switching interfaces on page 997 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Configuring Routed VLAN Interfaces CLI Procedure on page 1137 Understanding Bridging and VLANs on J EX Series Switches ...

Page 1058: ...ed Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation vlan tagging on page 987 Example Configuring Layer 3 Subinterfaces for a Distribution Switch and an Access Switch on page 893 Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Gigabit Ethernet Interfaces J Web Proced...

Page 1059: ...abled by default Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation vlan id on page 986 Example Configuring Layer 3 Subinterfaces for a Distribution Switch and an Access Switch on page 893 Configuring a Layer 3 Subinterface CLI Procedure on page 930 Junos OS Network Interfaces Configurati...

Page 1060: ...988 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1061: ...CHAPTER 56 Operational Mode Commands for Interfaces 989 ...

Page 1062: ...ighbor cache information host hostname Optional Clear the information for the specified IPv6 neighbors Required Privilege Level view Related Documentation show ipv6 neighbors on page 1031 List of Sample Output clear ipv6 neighbors on page 990 Output Fields When you enter this command you are provided feedback on the status of your request clear ipv6 neighbors user host clear ipv6 neighbors clear i...

Page 1063: ...ommand Reference To control the output of the monitor interface interface name command while it is running use the keys listed in Table 132 on page 991 The keys are not case sensitive Table 132 Output Control Keys for the monitor interface interface name Command Action Key Clears returns to zero the delta counters since monitor interface was started This does not clear the accumulative counter To ...

Page 1064: ...erface traffic detail on page 996 Output Fields Table 134 on page 992 describes the output fields for the monitor interface command Output fields are listed in the approximate order in which they appear Table 134 monitor interface Output Fields Level of Output Field Description Field Name All levels Hostname of the router router1 All levels How long the monitor interface command has been running o...

Page 1065: ... Seconds 19 Time 15 46 29 monitor interface Physical Interface so 0 0 0 Enabled Link is Up Encapsulation PPP Keepalives Speed OC48 Traffic statistics Current Delta Input packets 6045 0 pps 11 Input bytes 6290065 0 bps 13882 Output packets 10376 0 pps 10 Output bytes 10365540 0 bps 9418 Encapsulation statistics Input keepalives 1901 2 Output keepalives 1901 2 NCP state Opened LCP state Opened Error...

Page 1066: ...put framing errors 0 Policed discards 0 L3 incompletes 0 L2 channel errors 0 L2 mismatch timeouts 0 Carrier transitions 5 Output errors 0 Output drops 0 Aged packets 0 Active alarms None Active defects None Input MAC Filter statistics Unicast packets 0 Broadcast packets 0 Multicast packets 0 Oversized frames 0 Packet reject count 0 DA rejects 0 SA rejects 0 Output MAC Filter Statistics Unicast pac...

Page 1067: ...cal 192 168 8 21 Next n Quit q or ESC Freeze f Thaw t Clear c Interface i monitor interface traffic user host monitor interface traffic host name Seconds 15 Time 12 31 09 Interface Link Input packets pps Output packets pps so 1 0 0 Down 0 0 0 0 so 1 1 0 Down 0 0 0 0 so 1 1 1 Down 0 0 0 0 so 1 1 2 Down 0 0 0 0 so 1 1 3 Down 0 0 0 0 t3 1 2 0 Down 0 0 0 0 t3 1 2 1 Down 0 0 0 0 t3 1 2 2 Down 0 0 0 0 t...

Page 1068: ... name Seconds 15 Time 12 31 09 Interface Link Input packets pps Output packets pps Description t1 0 1 1 0 Up 19769 0 0 0 To OSAKA 1 Bytes b Clear c Delta d Packets p Quit q or ESC Rate r Up U Down D 996 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1069: ... Output show ethernet switching interfaces on page 998 show ethernet switching interfaces ge 0 0 15 brief on page 999 show ethernet switching interfaces ge 0 0 2 detail Blocked by RTG rtggroup on page 999 show ethernet switching interfaces ge 0 0 15 detail Blocked by STP on page 999 show ethernet switching interfaces ge 0 0 17 detail Disabled by bpdu control on page 999 show ethernet switching int...

Page 1070: ...s temporarily disabled due to a storm control error The disabled interface is automatically restored to service when the disable timeout expires Blocking detail The VLAN index internal to the Junos OS Index detail The C VLAN to S VLAN mapping information dot1q tunneled The interface maps all traffic to the S VLAN all in one bundling native The interface maps untagged and priority tagged packets to...

Page 1071: ...0 15 0 Index 70 State up Port mode Trunk interfaces ge 0 0 15 VLAN membership detail Blocked by STP vlan100 802 1Q Tag 100 tagged msti id 0 blocked by STP vlan200 802 1Q Tag 200 tagged msti id 0 blocked by STP Number of MACs learned on IFL 0 show ethernet switching user switch show ethernet switching interfaces ge 0 0 17 detail Interface ge 0 0 17 0 Index 71 State down Port mode Trunk interfaces g...

Page 1072: ...sceiver in a J EX Series Switch Removing a Transceiver from a J EX Series Switch Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos List of Sample Output show interfaces diagnostics optics ge 0 1 0 SFP Transceiver on page 1002 show interfaces diagnostics optics xe 0 1 0 SFP Transceiver on page 1003 Output Fields Table 136 on page 1000 lists the output f...

Page 1073: ...re high alarm Displays whether the module temperature low alarm is On or Off Module temperature low alarm Displays whether the module temperature high warning is On or Off Module temperature high warning Displays whether the module temperature low warning is On or Off Module temperature low warning Displays whether the module voltage high alarm is On or Off Module voltage high alarm Displays wheth...

Page 1074: ...d threshold for the module temperature low warning Module temperature low warning threshold Displays the vendor specified threshold for the module voltage high alarm Module voltage high alarm threshold Displays the vendor specified threshold for the module voltage low alarm Module voltage low alarm threshold Displays the vendor specified threshold for the module voltage high warning Module voltage...

Page 1075: ...ure low alarm threshold 29 degrees C 20 degrees F Module temperature high warning threshold 103 degrees C 217 degrees F Module temperature low warning threshold 13 degrees C 9 degrees F Module voltage high alarm threshold 3 900 V Module voltage low alarm threshold 2 700 V Module voltage high warning threshold 3 700 V Module voltage low warning threshold 2 900 V Laser rx power high alarm threshold ...

Page 1076: ... dBm Laser output power low warning threshold 0 1860 mW 7 30 dBm Module temperature high alarm threshold 75 degrees C 167 degrees F Module temperature low alarm threshold 5 degrees C 23 degrees F Module temperature high warning threshold 70 degrees C 158 degrees F Module temperature low warning threshold 0 degrees C 32 degrees F Module voltage high alarm threshold 3 630 V Module voltage low alarm ...

Page 1077: ...splay static interface statistics Required Privilege Level view Related Documentation Monitoring Interface Status and Traffic on page 931 Troubleshooting Network Interfaces on J EX4200 Switches on page 939 Troubleshooting an Aggregated Ethernet Interface on page 940 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos List of Sample Output show interfaces...

Page 1078: ...abled or Disabled Source filtering All levels Flow control status Enabled or Disabled Flow control All levels Autonegotiation status Enabled or Disabled Auto negotiation All levels Remote fault status Online Autonegotiation is manually configured as online Offline Autonegotiation is manually configured as offline Remote fault All levels Information about the physical device Device flags All levels...

Page 1079: ...s once for every packet that is dropped by the ASIC s RED mechanism Framing errors Number of packets received with an invalid frame checksum FCS Runts Number of frames received that are smaller than the runt threshold Policed discards Number of frames that the incoming packet match code discarded because they were not recognized or not of interest Usually this field reports protocols that the Juno...

Page 1080: ...alfunctioning hardware FIFO errors Number of FIFO errors in the send direction as reported by the ASIC on the PIC If this value is ever nonzero the PIC is probably malfunctioning HS link CRC errors Number of errors on the high speed links between the ASICs responsible for handling the switch interfaces MTUerrors NumberofpacketswhosesizeexceededtheMTUoftheinterface Resource errors Sum of transmit d...

Page 1081: ...ntrol frames with pause operational code Oversized frames Number of frames that exceed 1518 octets Jabberframes Number of frames that were longer than 1518 octets excluding framing bits but including FCS octets and had either an FCS error or an alignment error This definition of jabber is different from the definition in IEEE 802 3 section 8 2 1 5 10BASE5 and section 10 3 1 4 10BASE2 These documen...

Page 1082: ... negotiation error Offline indicates that the link partner is going offline Link partner speed Speed of the link partner Local resolution Information from the link partner Flow control Types of flow control supported by the remote Ethernet device For Gigabit Ethernet interfaces types are Symmetric link partner supportsPAUSE onreceiveandtransmit Asymmetric linkpartnersupports PAUSE on transmit and ...

Page 1083: ...ne Route table in which the logical interface address is located For example 0 refers to the routing table inet 0 Route Table detail extensive Names of any input filters applied to this interface Input Filters detail extensive Names of any output filters applied to this interface Output Filters detail extensive Information about protocol family flags If unicast reverse path forwarding RPF is expli...

Page 1084: ... 0 Index 65 SNMP ifIndex 22 Flags SNMP Traps Encapsulation ENET2 Input packets 0 Output packets 0 Protocol eth switch Flags None show interfaces ge 0 0 0 brief user switch show interfaces ge 0 0 0 brief Physical interface ge 0 0 0 Enabled Physical link is Down Description voice priority and tcp and icmp traffic rate limiting filter at i ngress port Link level type Ethernet MTU 1514 Speed Unspecifi...

Page 1085: ...aps Encapsulation ENET2 Bandwidth 0 Traffic statistics Input bytes 0 Output bytes 0 Input packets 0 Output packets 0 Local statistics Input bytes 0 Output bytes 0 Input packets 0 Output packets 0 Transit statistics Input bytes 0 0 bps Output bytes 0 0 bps Input packets 0 0 pps Output packets 0 0 pps Protocol eth switch Generation 146 Route table 0 Flags Is Primary Input Filters f1 Output Filters f...

Page 1086: ...0 Egress queues 8 supported 4 in use Queue counters Queued packets Transmitted packets Dropped packets 0 best effort 0 0 0 1 assured forw 0 0 0 5 expedited fo 0 0 0 7 network cont 0 24307 0 Active alarms None Active defects None MAC statistics Receive Transmit Total octets 0 2989761 Total packets 0 24307 Unicast packets 0 0 Broadcast packets 0 0 Multicast packets 0 24307 CRC Align errors 0 0 FIFO ...

Page 1087: ...sit statistics Input bytes 0 Output bytes 0 Input packets 0 Output packets 0 Local statistics Input bytes 0 Output bytes 4107883 Input packets 0 Output packets 24307 Transit statistics Input bytes 0 0 bps Output bytes 0 0 bps Input packets 0 0 pps Output packets 0 0 pps IPv6 transit statistics Input bytes 0 Output bytes 0 Input packets 0 Output packets 0 Protocol eth switch Generation 159 Route ta...

Page 1088: ... statistics are not available for all interfaces interface name interface name Optional Show queue statistics for the specified interface Required Privilege Level view Related Documentation Monitoring Interface Status and Traffic on page 931 Monitoring Interfaces That Have CoS Components on page 2937 Defining CoS Schedulers CLI Procedure on page 2920 Configuring CoS Traffic Classification for Ingr...

Page 1089: ...r of forwarding classes supported and in use for the interface Forwarding classes Ingress Queues Information not shown for all interfaces Number of input queues supported and in use on the specified interface Ingress queues Transmission statistics for the queue Packets Number of packets transmitted by this queue Bytes Number of bytes transmitted by this queue Tail dropped packets Number of packets...

Page 1090: ...card the number of Packet Forwarding Engine chassis queues supported and in use for the port group to which the interface belongs The queue statistics reflect the traffic flowing on all the interfaces in the port group Packet Forwarding Engine Chassis Queues show interfaces queue ge 0 0 0 user switch show interfaces queue ge 0 0 0 Physical interface ge 0 0 0 Enabled Physical link is Down Interface...

Page 1091: ...for the specified SNMP index of the interface statistics Optional Display static interface statistics Required Privilege Level view Related Documentation Monitoring Interface Status and Traffic on page 931 Troubleshooting Network Interfaces on J EX4200 Switches on page 939 Troubleshooting an Aggregated Ethernet Interface on page 940 Junos OS Network Interfaces Configuration Guide at http www junip...

Page 1092: ...e Duplex All levels blah blah BPDU Error All levels Loopback status Enabled or Disabled If loopback is enabled type of loopback Local or Remote Loopback All levels Source filtering status Enabled or Disabled Source filtering All levels Flow control status Enabled or Disabled Flow control All levels Information about the physical device Device flags All levels Information about the interface Interf...

Page 1093: ...ous Errors Sum of the incoming frame aborts and FCS errors Drops Number of packets dropped by the input queue of the I O Manager ASIC If the interface is saturated this number increments once for every packet that is dropped by the ASIC s RED mechanism Framing errors Number of packets received with an invalid frame checksum FCS Runts Number of frames received that are smaller than the runt thresho...

Page 1094: ...rement If it does it is most likely a software bug or possibly malfunctioning hardware FIFO errors Number of FIFO errors in the send direction as reported by the ASIC on the PIC If this value is ever nonzero the PIC is probably malfunctioning HS link CRC errors Number of errors on the high speed links between the ASICs responsible for handling the switch interfaces MTUerrors Numberofpacketswhosesi...

Page 1095: ...ts and Multicastpackets Number of unicast broadcast and multicast packets CRC Align errors Total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive and had either a bad FCS with an integral number of octets FCS Error or a bad FCS with a nonintegral number of octets Alignment Error FIFO error Number of FIFO errors tha...

Page 1096: ...pports PAUSE on both receive and transmit or PAUSE only on receive Remote fault Remote fault information from the link partner Failure indicates a receive link error OK indicates that the link partner is receiving Negotiation error indicates a negotiation error Offline indicates that the link partner is going offline Local resolution Information from the link partner Flow control Types of flow con...

Page 1097: ...h if bandwidth is available CoS Information Logical Interface All levels Name of the logical interface Logical interface detail extensive none Index number of the logical interface which reflects its initialization sequence Index detail extensive none SNMP interface index number for the logical interface SNMP ifIndex detail extensive Unique number for use by Dell technical support only Generation ...

Page 1098: ... extensive none Information about the address flags Flags detail extensive none IP address of the remote side of the connection Destination detail extensive none IP address of the logical interface Local detail extensive none Broadcast address of the logical interlace Broadcast detail extensive Unique number for use by Dell Support only see Requesting Technical Support on page lxxi Generation show...

Page 1099: ...is Up Link level type Ethernet MTU 1514 Speed 1000mbps Loopback Disabled Source filtering Disabled Flow control Enabled Device flags Present Running Interface flags SNMP Traps Internal 0x0 Link flags None Logical interface xe 0 1 0 0 Flags SNMP Traps Encapsulation ENET2 eth switch show interfaces xe 4 1 0 detail user switch show interfaces xe 4 1 0 detail Physical interface xe 4 1 0 Enabled Physic...

Page 1100: ...ers f2 show interfaces xe 4 1 0 extensive user switch show interfaces xe 4 1 0 extensive Physical interface xe 4 1 0 Enabled Physical link is Up Interface index 387 SNMP ifIndex 369 Generation 390 Link level type Ethernet MTU 1514 Speed 10Gbps Duplex Full Duplex BPDU Error None MAC REWRITE Error None Loopback Disabled Source filtering Disabled Flow control Enabled Device flags Present Running Inte...

Page 1101: ... 5015472 0 Total packets 3304 0 Unicast packets 3304 0 Broadcast packets 0 0 Multicast packets 0 0 CRC Align errors 0 0 FIFO errors 0 0 MAC control frames 0 0 MAC pause frames 0 0 Oversized frames 0 Jabber frames 0 Fragment frames 0 Code violations 0 Packet Forwarding Engine configuration Destination slot 4 Direction Output CoS transmit queue Bandwidth Buffer Priority Limit bps usec 0 best effort ...

Page 1102: ... 0 0 bps Input packets 0 0 pps Output packets 0 0 pps Protocol eth switch Generation 174 Route table 0 Flags None Input Filters f1 Output Filters f2 1030 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1103: ...ipv6 neighbors Output Fields Field Description Field Name Name of the IPv6 interface IPv6 Address Link layer address Linklayer Address State of the link up down incomplete reachable stale or unreachable State Number of seconds until the entry expires Exp Whether the neighbor is a routing device yes or no Rtr Whether this entry was created using the Secure Neighbor Discovery SEND protocol yes or no...

Page 1104: ...fe80 14fb 5dcf 54bd ff76 00 90 69 a0 a8 bc stale 1113 yes yes ge 3 2 0 0 1032 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1105: ...740 Example Configuring Aggregated Ethernet High Speed Uplinks with LACP Between a Virtual Chassis Access Switch and a Virtual Chassis Distribution Switch on page 746 Configuring Aggregated Ethernet Interfaces CLI Procedure on page 922 Configuring Aggregated Ethernet LACP CLI Procedure on page 926 Understanding Aggregated Ethernet Interfaces and LACP on page 867 Junos OS Network Interfaces Configu...

Page 1106: ...mes Yes indicates collection of incoming frames on the link is currently enabled and is not expected to be disabled Otherwise the value is No Syn Synchronization If the value is Yes the link is considered synchronized It has been allocated to the correct link aggregation group the group has been associated with a compatible aggregator and the identity of the link aggregation group is consistent wi...

Page 1107: ...nabled at a slow transmission rate Mux State State of the multiplexer state machine for the aggregation port The state is one of the following values Attached Multiplexer state machine initiates the process of attaching the port to the selected aggregator Collecting Yes indicates that the receive function of this link is enabled with respect to its participation in an aggregation Received frames a...

Page 1108: ...No Yes No No No Yes Fast Active ge 1 0 2 Partner No Yes No No No Yes Fast Passive LACP protocol Receive State Transmit State Mux State ge 1 0 1FUP CURRENT Fast periodic Collecting distributing ge 1 0 2 CURRENT Fast periodic Collecting distributing ge 1 0 1 active CURRENT Fast periodic Collecting distributing ge 1 0 2 standby CURRENT Fast periodic WAITING LACP Statistics LACP Rx LACP Tx Unknown Rx ...

Page 1109: ...terface Options interface name Interface name fe fpc pic port or ge fpc pic port Required Privilege Level view List of Sample Output test interface restart auto negotiation on page 1037 Output Fields Use the show interfaces extensive command to see the state for auto negotiation test interface restart auto negotiation test interface restart auto negotiation user host test interface restart auto ne...

Page 1110: ...1038 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1111: ...guration on page 1063 Configuring Bridging and VLANs on page 1133 Verifying Bridging and VLAN Configuration on page 1155 Troubleshooting Bridging and VLAN Configuration on page 1165 Configuration Statements for Bridging and VLANs on page 1167 Operational Mode Commands for Bridging and VLANs on page 1225 1039 ...

Page 1112: ...1040 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1113: ...e 1060 Understanding Bridging and VLANs on J EX Series Switches Network switches use Layer 2 bridging protocols to discover the topology of their LAN and to forward traffic toward destinations on the LAN This topic explains the following concepts regarding bridging and VLANs on J EX Series Switches Ethernet LANs Transparent Bridging and VLANs on page 1041 How Bridging Works on page 1042 Types of S...

Page 1114: ...sed speed of Ethernet interfaces on LANs has resulted in exponential increases in traffic on the network The IEEE 802 1D 2004 standard addresses some of the problems caused by the increase in LAN and complexity This standard defines transparent bridging generally called simply bridging Bridging divides a single physical LAN a single broadcast domain into two or more virtual LANs or VLANs Each VLAN...

Page 1115: ...tch If the Ethernet switching table does not contain an entry for the desired destination address the switch uses flooding which is the third bridging mechanism Flooding is how the switch learns about destinations not in its Ethernet switching table If this table has no entry for a particular destination MAC address the switch floods the traffic out all interfaces except the interface on which it ...

Page 1116: ...gs For a simple network that has only a single VLAN all traffic has the same 802 1Q tag When an Ethernet LAN is divided into VLANs each VLAN is identified by a unique 802 1Q tag The tag is applied to all frames so that the network nodes receiving the frames know which VLAN the frames belong to Trunk ports which multiplex traffic among a number of VLANs use the tag to determine to origin of frames ...

Page 1117: ... Traffic To pass traffic within a VLAN the switch uses Layer 2 forwarding protocols including IEEE 802 1Q Spanning Tree Protocol STP and GARP VLAN Registration Protocol GVRP To pass traffic between two VLANs the switch uses standard Layer 3 routing protocols such as static routing OSPF and RIP On J EX Series switches the same interfaces that support Layer 2 bridging protocols also support Layer 3 ...

Page 1118: ...lan to perform these routing functions using it to route data to other Layer 3 interfaces The RVI functions as a logical router eliminating the need for having both a switch and a router The RVI the vlan interface must be configured as part of a broadcast domain or virtual private LAN service VPLS routing instance for Layer 3 traffic to be routed out of it The RVI supports IPv4 IPv6 MPLS and IS IS...

Page 1119: ...known unicast traffic and for limiting the communication between known hosts NOTE Configuring a voice over IP VoIP VLAN on PVLAN interfaces is not supported In a private VLAN one VLAN is designated the primary VLAN and other VLANs are nested inside that VLAN as secondary VLANs Primary A VLAN used to forward frames downstream to isolated and community VLANs Isolated A secondary VLAN that receives p...

Page 1120: ...n use virtual routing instances to isolate customer traffic on your network and to bind customer specific instances to customer owned interfaces Virtual routing and forwarding VRF is often used in conjunction with Layer 3 subinterfaces allowing traffic on a single physical interface to be differentiated and associated with multiple virtual routers Each logical Layer 3 subinterface can belong to on...

Page 1121: ...link Layer 2 control traffic is still permitted For example an LLDP session can be run between two J EX Series Switches on the secondary link STP is enabled by default on J EX Series switches to create a loop free topology When trunk links are placed in a redundant group they cannot be part of an STP topology The Junos OS for J EX Series switches does not allow an interface to be in a redundant tr...

Page 1122: ...ve Figure 27 on page 1050 illustrates how the redundant trunk link topology works when the primary link goes down Figure 27 Redundant Trunk Group Link 2 Active 1050 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1123: ... a customer VLAN C VLAN to a service provider s VLAN a customer specific 802 1Q tag is added to the packet This additional tag is used to segregate traffic into service provider defined service VLANs S VLANs The original customer 802 1Q tag of the packet remains and is transmitted transparently passing through the service provider s network As the packet leaves the S VLAN in the downstream directi...

Page 1124: ... MAC address learning at both the interface level and the VLAN level Disabling MAC address learning on an interface disables learning for all the VLANs of which that interface is a member When you disable MAC address learning on a VLAN MAC addresses that have already been learned are flushed If you disable MAC address learning on an interface or a VLAN you cannot include MAC move limiting or 802 1...

Page 1125: ...u want to assign an S VLAN to a specific C VLAN on an interface The mapping a specific interface configuration only applies to the configured interface not to all access interfaces as in the cases of the all in one bundling and many to one bundling approaches The mapping a specific interface approach is configured using the mapping option to indicate a specific S VLAN for a given C VLAN The mappin...

Page 1126: ...ion protocol of the Multiple Registration Protocol MRP and is defined in the IEEE 802 1ak standard MRP and MVRP were designed by IEEE to perform the same functions as Generic Attribute Registration Protocol GARP and GARP VLAN Registration Protocol GVRP while overcoming some GARP and GVRP limitations in particular limitations involving bandwidth usage and convergence time in large networks with lar...

Page 1127: ...re MVRP on J EX Series switch interfaces to participate in MVRP for the switching network MVRP can only be enabled on trunk interfaces and dynamic VLAN configuration through MVRP is enabled by default when MVRP is enabled MVRP Registration Modes The MVRP registration mode defines whether an interface does or does not participate in MVRP The following MVRP registration modes are configurable forbid...

Page 1128: ...l be de registered Participants that want to participate in MVRP will need to re register New VLAN information is new and possibly not previously registered Related Documentation Understanding Bridging and VLANs on J EX Series Switches on page 1041 Example Configuring Automatic VLAN Administration Using MVRP on J EX Series Switches on page 1115 Configuring Multiple VLAN Registration Protocol MVRP ...

Page 1129: ... RSTP and Multiple Spanning Tree Protocol MSTP VLAN Spanning Tree Protocol VSTP VLAN Trunking Protocol VTP NOTE CDP and VTP cannot be configured on J EX Series switches L2PT does however tunnel CDP and VTP PDUs How L2PT Works L2PT works by encapsulating Layer 2 PDUs tunneling them across a service provider network and decapsulating them for delivery to their destination switches L2PT encapsulates ...

Page 1130: ... vlans vlan name dot1q tunneling hierarchy level meaning Q in Q tunneling is and must be enabled If L2PT is not enabled Layer 2 PDUs are handled in the same way they were handled before L2PT was enabled NOTE If the switch receives untagged or priority tagged Layer 2 control PDUs to be tunnelled then you must configure the switch to map untagged and priority tagged packets to an L2PT enabled VLAN F...

Page 1131: ...s mapping in a cache that it consults when forwarding packets to network devices If the ARP cache does not contain an entry for the destination device the host the DHCP client broadcasts an ARP request for that device s address and stores the response in the cache Proxy ARP Overview When proxy ARP is enabled if the switch receives an ARP request for which it has a route to the target destination I...

Page 1132: ...ion for the network management system For general information on the MAC Notification MIB see the Junos OS Network Management Configuration Guide at http www juniper net techpubs software junos index html The MAC notification interval defines how often these SNMP notifications are sent to the network management system The MAC notification interval works by tracking all of the MAC address additions...

Page 1133: ...Related Documentation Configuring MAC Notification CLI Procedure on page 1151 Configuring SNMP J Web Procedure on page 3309 1061 Chapter 57 Bridging and VLANs Overview ...

Page 1134: ...1062 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1135: ...on page 1112 Example Configuring Automatic VLAN Administration Using MVRP on J EX Series Switches on page 1115 Example Configuring Layer 2 Protocol Tunneling on J EX Series Switches on page 1126 Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch J EX Series switches use bridging and virtual LANs VLANs to connect network devices in a LAN desktop computers IP telephones printers f...

Page 1136: ... and all interfaces belong to a VLAN called default which is automatically configured When you plug access devices such as desktop computers Avaya IP telephones file servers printers and wireless access points into the switch they are joined immediately into the default VLAN and the LAN is up and running The topology used in this example consists of one J EX4200 24T switch which has a total of 24 ...

Page 1137: ...rform any other configuration on the switch to set up bridging and VLANs To use the switch simply plug the Avaya IP phones into the PoE enabled ports ge 0 0 1 through ge 0 0 7 and plug in the PCs file servers and printers to the non PoE ports ge 0 0 8 through ge 0 0 12 and ge 0 0 17 through ge 0 0 20 Step by Step Procedure To configure bridging and VLANs 1 Make sure the switch is powered on 2 Conn...

Page 1138: ...0 family ethernet switching ge 0 0 1 unit 0 family ethernet switching ge 0 0 2 unit 0 family ethernet switching ge 0 0 3 unit 0 family ethernet switching ge 0 0 4 unit 0 family ethernet switching ge 0 0 5 unit 0 family ethernet switching ge 0 0 6 unit 0 family ethernet switching ge 0 0 7 unit 0 family ethernet switching 1066 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Ju...

Page 1139: ...itching ge 0 0 12 unit 0 family ethernet switching ge 0 0 13 unit 0 family ethernet switching ge 0 0 14 unit 0 family ethernet switching ge 0 0 15 unit 0 family ethernet switching ge 0 0 16 unit 0 family ethernet switching ge 0 0 17 unit 0 family ethernet switching ge 0 0 18 unit 0 family ethernet switching 1067 Chapter 58 Examples Bridging and VLAN Configuration ...

Page 1140: ...0 0 23 unit 0 family ethernet switching ge 0 1 0 unit 0 family ethernet switching xe 0 1 0 unit 0 family ethernet switching ge 0 1 1 unit 0 family ethernet switching xe 0 1 1 unit 0 family ethernet switching ge 0 1 2 unit 0 family ethernet switching ge 0 1 3 unit 0 family ethernet switching 1068 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1141: ... 16 0 ge 0 0 17 0 ge 0 0 18 0 ge 0 0 19 0 ge 0 0 20 0 ge 0 0 21 0 ge 0 0 22 0 ge 0 0 23 0 ge 0 1 0 0 ge 0 1 1 0 ge 0 1 2 0 ge 0 1 3 0 mgmt me0 0 Meaning The show vlans command lists the VLANs configured on the switch This output shows that the VLAN default has been created Verifying That Interfaces Are Associated with the Proper VLANs Purpose Verify that Ethernet switching is enabled on switch int...

Page 1142: ...terfaces in the VLAN members column The output in this example shows all the connected interfaces ge 0 0 0 through ge 0 0 12 and ge 0 0 17 through ge 0 0 20 and that they are all part of VLAN default Notice that the interfaces listed are the logical interfaces not the physical interfaces For example the output shows ge 0 0 0 0 instead of ge 0 0 0 This is because the Junos OS creates VLANs on logic...

Page 1143: ... broadcast domain and allows you to group related users and network resources without being limited by physical cabling or by the location of a network device in the building or on the LAN This example shows a simple configuration to illustrate the basic steps for creating two VLANs on a single switch One VLAN called sales is for the sales and marketing group and a second called support is for the...

Page 1144: ...ure Layer 2 switching for the two VLANs sales and support and to quickly configure Layer 3 routing of traffic between the two VLANs copy the following commands and paste them into the switch terminal window edit set interfaces ge 0 0 0 unit 0 description Sales wireless access point port set interfaces ge 0 0 0 unit 0 family ethernet switching vlan members sales set interfaces ge 0 0 3 unit 0 descr...

Page 1145: ...ales 4 Configure the interface for the file server in the sales VLAN edit interfaces ge 0 0 20 unit 0 user switch set description Sales file server port user switch set family ethernet switching vlan members sales 5 Configure the interface for the wireless access point in the support VLAN edit interfaces ge 0 0 1 unit 0 user switch set description Support wireless access point port user switch set...

Page 1146: ...ce user switch set support l3 interface vlan 1 Display the results of the configuration user switch show configuration interfaces ge 0 0 0 unit 0 description Sales wireless access point port family ethernet switching vlan members sales ge 0 0 3 unit 0 description Sales phone port family ethernet switching vlan members sales ge 0 0 22 unit 0 description Sales printer port family ethernet switching ...

Page 1147: ...pport file server port family ethernet switching vlan members support vlans unit 0 family inet address 192 0 2 0 25 unit 1 family inet address 192 0 2 128 25 vlans sales vlan id 100 interface ge 0 0 0 0 interface ge 0 0 3 0 interface ge 0 0 20 0 interface ge 0 0 22 0 l3 interface vlan 0 support vlan id 200 interface ge 0 0 1 0 interface ge 0 0 6 0 interface ge 0 0 44 0 interface ge 0 0 46 0 l3 int...

Page 1148: ... Name Tag Interfaces default ge 0 0 1 0 ge 0 0 2 0 ge 0 0 4 0 ge 0 0 5 0 ge 0 0 6 0 ge 0 0 7 0 ge 0 0 8 0 ge 0 0 9 0 ge 0 0 10 0 ge 0 0 11 0 ge 0 0 12 0 ge 0 0 13 0 ge 0 0 14 0 ge 0 0 15 0 ge 0 0 16 0 ge 0 0 17 0 ge 0 0 18 0 ge 0 0 19 0 ge 0 0 21 0 ge 0 0 23 0 ge 0 0 25 0 ge 0 0 27 0 ge 0 0 28 0 ge 0 0 29 0 ge 0 0 30 0 ge 0 0 31 0 ge 0 0 32 0 ge 0 0 33 0 ge 0 0 34 0 ge 0 0 35 0 ge 0 0 36 0 ge 0 0 ...

Page 1149: ...hing table user switch show ethernet switching table Ethernet switching table 8 entries 5 learned VLAN MAC address Type Age Interfaces default Flood All members default 00 00 05 00 00 01 Learn ge 0 0 10 0 default 00 00 5e 00 01 09 Learn ge 0 0 13 0 default 00 19 e2 50 63 e0 Learn ge 0 0 23 0 sales Flood All members sales 00 00 5e 00 07 09 Learn ge 0 0 0 0 support Flood All members support 00 00 5e...

Page 1150: ... over Ethernet PoE and an uplink module with four 1 Gigabit Ethernet ports Before you connect an access switch to a distribution switch be sure you have Installed the two switches See Installing and Connecting a J EX4200 Switch Performed the initial software configuration on both switches See Connecting and Configuring a J EX Series Switch J Web Procedure on page 163 Overview and Topology In a lar...

Page 1151: ...itch hardware J EX4200 24F 24 1 Gigabit Ethernet fiber SPF ports ge 0 0 0 through ge 0 0 23 one uplink module Distribution switch hardware sales tag 100 support tag 200 VLAN names and tag IDs sales 192 0 2 0 25 addresses 192 0 2 1 through 192 0 2 126 support 192 0 2 128 25 addresses 192 0 2 129 through 192 0 2 254 VLAN subnets On the access switch ge 0 1 0 On the distribution switch ge 0 0 0 Trunk...

Page 1152: ...tching vlan members support set interfaces ge 0 0 6 unit 0 description Support phone port set interfaces ge 0 0 6 unit 0 family ethernet switching vlan members support set interfaces ge 0 0 44 unit 0 description Support printer port set interfaces ge 0 0 44 unit 0 family ethernet switching vlan members support set interfaces ge 0 0 46 unit 0 description Support file server port set interfaces ge 0...

Page 1153: ...ch set vlan description Support VLAN user access switch set vlan id 200 user access switch set l3 interface vlan 1 6 Create the subnet for the sales broadcast domain edit interfaces user access switch set vlan unit 0 family inet address 192 0 2 1 25 7 Create the subnet for the support broadcast domain edit interfaces user access switch set vlan unit 1 family inet address 192 0 2 129 25 8 Configure...

Page 1154: ...s and VLAN tag IDs for the sales and support VLANs edit vlans user access switch set sales vlan description Sales VLAN user access switch set sales vlan id 100 user access switch set support vlan description Support VLAN user access switch set support vlan id 200 11 To route traffic between the sales and support VLANs and associate a Layer 3 interface with each VLAN edit vlans user access switch s...

Page 1155: ...n members support ge 0 0 44 unit 0 description Support printer port family ethernet switching vlan members sales ge 0 0 46 unit 0 description Support file server port family ethernet switching vlan members support ge 0 1 0 unit 0 description Uplink module port connection to distribution switch family ethernet switching port mode trunk vlan members sales support native vlan id 1 vlan unit 0 family ...

Page 1156: ...ces ge 0 0 0 ethernet switching native vlan id 1 set interfaces vlan unit 0 family inet address 192 0 2 2 25 set interfaces vlan unit 1 family inet address 192 0 2 130 25 set vlans sales vlan description Sales VLAN set vlans sales vlan id 100 set vlans sales l3 interface vlan 0 set vlans support vlan description Support VLAN set vlans support vlan id 200 set vlans support l3 interface vlan 1 Step ...

Page 1157: ... l3 interface vlan 1 6 Create the subnet for the sales broadcast domain edit interfaces user distribution switch set vlan unit 0 family inet address 192 0 2 2 25 7 Create the subnet for the support broadcast domain edit interfaces user distribution switch set vlan unit 1 family inet address 192 0 2 130 25 Results Display the results of the configuration user distribution switch show interfaces ge ...

Page 1158: ...witch show vlans Name Tag Interfaces default ge 0 0 1 0 ge 0 0 2 0 ge 0 0 4 0 ge 0 0 5 0 ge 0 0 6 0 ge 0 0 7 0 ge 0 0 8 0 ge 0 0 9 0 ge 0 0 10 0 ge 0 0 11 0 ge 0 0 12 0 ge 0 0 13 0 ge 0 0 14 0 ge 0 0 15 0 ge 0 0 16 0 ge 0 0 17 0 ge 0 0 18 0 ge 0 0 19 0 ge 0 0 21 0 ge 0 0 23 0 ge 0 0 25 0 ge 0 0 27 0 ge 0 0 28 0 ge 0 0 29 0 ge 0 0 30 0 ge 0 0 31 0 ge 0 0 32 0 ge 0 0 33 0 ge 0 0 34 0 ge 0 0 35 0 ge ...

Page 1159: ...Interface ge 0 0 0 0 is the trunk interface connected to the access switch Related Documentation Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Understanding Bridging and VLANs on J EX Series Switches on pa...

Page 1160: ...even though some switches are not actively participating in a VLAN Then enable GVRP on the trunk interface of each switch GVRP ensures that the VLAN membership information on the trunk interface is updated as the switch s access interfaces become active or inactive in the configured VLANs You do not need to take an extra step of explicitly binding a VLAN to the trunk interface When GVRP is enabled...

Page 1161: ...nfigured to support the three VLANs finance lab sales However the Distribution Switch does not have any access interfaces that are connecting devices as members of these VLANs The Distribution Switch has two trunk interfaces xe 0 1 1 Connects Distribution Switch to Access Switch A xe 0 1 0 Connects Distribution Switch to Access Switch B Figure29onpage1089showsGVRPconfiguredontwoaccessswitchesandon...

Page 1162: ...unk interface Thus the Distribution Switch does not forward traffic to inactive VLANs Configuring VLANs and GVRP on Access Switch A To configure three VLANs on the switch bind access interfaces for PC1 PC2 and PC3 to the VLANs finance lab sales and enable GVRP on the trunk interface of Access Switch A perform these tasks CLI Quick Configuration To quickly configure Access Switch A to support the t...

Page 1163: ... of Switch A 1 Configure the finance VLAN edit user Access Switch A set vlans finance vlan id 100 2 Configure the lab VLAN edit user Access Switch A set vlans lab vlan id 200 3 Configure the sales VLAN edit user Access Switch A set vlans sales vlan id 300 4 Configure an Ethernet interface as a member of the finance VLAN edit does user Access Switch A set interfaces ge 0 0 1 unit 0 family ethernet ...

Page 1164: ...2 unit 0 family ethernet switching vlan members lab ge 0 0 3 unit 0 family ethernet switching vlan members sales xe 0 1 1 unit 0 family ethernet switching port mode trunk ge 0 1 2 unit 0 family ethernet switching ge 0 1 3 unit 0 family ethernet switching protocols igmp snooping vlan all 1092 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1165: ...n To quickly configure Access Switch B to support the three VLANs bind interfaces for the two PCs to the appropriate VLANs and enable GVRP on the trunk interface copy the following commands and paste them into the switch terminal window of Switch B edit set vlans finance vlan id 100 set vlans lab vlan id 200 set vlans sales vlan id 300 set interfaces ge 0 0 0 unit 0 family ethernet switching vlan ...

Page 1166: ...it 0 family ethernet switching vlan members lab 6 Configure a trunk interface user Access Switch B set interfaces xe 0 1 0 unit 0 family ethernet switching port mode trunk 7 Enable GVRP on the trunk interface edit user Access Switch B set protocols gvrp xe 0 1 0 0 NOTE As we recommend default GVRP timers are used in this example The default values associated with each GVRP timer are 200 ms for the...

Page 1167: ...ernet switching ge 0 0 3 unit 0 family ethernet switching ge 0 1 0 unit 0 family ethernet switching xe 0 1 0 unit 0 family ethernet switching port mode trunk ge 0 1 1 unit 0 family ethernet switching xe 0 1 1 unit 0 family ethernet switching ge 0 1 2 unit 0 family ethernet switching ge 0 1 3 1095 Chapter 58 Examples Bridging and VLAN Configuration ...

Page 1168: ...n the Distribution Switch and to enable GVRP on the trunk interface of the Distribution Switch copy the following commands and paste them into the switch terminal window of the Distribution Switch edit set vlans finance vlan id 100 set vlans lab vlan id 200 set vlans sales vlan id 300 set interfaces xe 0 1 1 unit 0 family ethernet switching port mode trunk set interfaces xe 0 1 0 unit 0 family eth...

Page 1169: ...s xe 0 1 1 unit 0 familyethernet switching port mode trunk 5 Configure the trunk interface to Access Switch B edit user Distribution Switch set interfaces xe 0 1 0 unit 0 family ethernet switching port mode trunk 6 Enable GVRP on the trunk interface for xe 0 1 1 edit user Distribution Switch set protocols gvrp interface xe 0 1 1 0 7 Enable GVRP on the trunk interface for xe 0 1 0 edit user Distrib...

Page 1170: ...hing port mode trunk ge 0 1 2 unit 0 family ethernet switching ge 0 1 3 unit 0 family ethernet switching protocols igmp snooping vlan all lldp interface all lldp med interface all gvrp interface xe 0 1 0 0 interface xe 0 1 1 0 rstp ethernet switching options storm control interface all level 50 1098 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1171: ... Distribution Switch on page 1101 Verifying That GVRP Is Enabled on Access Switch A Purpose Verify that GVRP is enabled on the switch Action Show the GVRP configuration using the show gvrp command user Access Switch A show gvrp Global GVRP configuration GVRP status Enabled GVRP Timers ms Join 200 Leave 600 LeaveAll 10000 Interface Name Protocol Status xe 0 1 1 0 Enabled Meaning The results show th...

Page 1172: ...l Status xe 0 1 0 0 Enabled Meaning The results show that GVRP is enabled on the trunk interface of Switch B and that the default timers are used Verifying That GVRP Is Updating VLAN Membership on Switch B Purpose To verify that GVRP is updating VLAN membership display the Ethernet switching interfaces and associated VLANs that are active on switch B Action List Ethernet switching interfaces on th...

Page 1173: ...ive on Access Switch A Any traffic for those VLANs will be passed on from the Distribution Switch to Access Switch A through interface xe 0 1 1 0 Interface xe 0 1 0 0 connects the Distribution Switch to Access Switch B and is updated to show that it is a member of the two VLANs that are active on Access Switch B Thus the Distribution Switch sends traffic for finance and lab to both Access Switch A...

Page 1174: ...e 0 1 1 as the active link Whether a primary link is specified as the active link or whether it is calculated by the software traffic is handled in the same manner Traffic passes through the active link but is blocked on the secondary link If the active link goes down or is disabled administratively the secondary link becomes active and begins forwarding traffic However there is a difference betwe...

Page 1175: ... switch Switch 2 1 J EX4200 distribution switch Switch 3 1 J EX4200 access switch Switch hardware On Switch 3 access switch ge 0 0 9 0 and ge 0 0 10 0 Trunk port interfaces group1 Redundant trunk group This configuration example creates a redundant trunk group called group1 on Switch 3 The trunk ports ge 0 0 9 0 and ge 0 0 10 0 are the two links in group1 The trunk port ge 0 0 9 0 will be configur...

Page 1176: ...up group name group1 interface ge 0 0 10 0 Results Display the results of the configuration user switch show ethernet switching options redundant trunk group group name group1 interface ge 0 0 9 0 primary interface ge 0 0 10 0 Verification Verify that the redundant trunk group group1 has been created and is operating properly Verifying That the Redundant Group Has Been Created on page 1104 Verifyi...

Page 1177: ...ou can configure Q in Q tunneling on J EX Series switches This example describes how to set up Q in Q Requirements on page 1105 Overview and Topology on page 1105 Configuration on page 1106 Verification on page 1107 Requirements This example requires one J EX Series switch Before you begin setting up Q in Q tunneling make sure you have created and configured the necessary customer VLANs See Config...

Page 1178: ...s user switch set qinqvlan vlan id 4001 2 Enable Q in Q tuennling and specify the customer VLAN ranges edit vlans user switch set qinqvlan dot1q tunneling customer vlans 1 100 user switch set qinqvlan dot1q tunneling customer vlans 201 300 3 Set the port mode and VLAN information for the interfaces edit interfaces user switch set ge 0 0 11 unit 0 family ethernet switching port mode trunk user swit...

Page 1179: ...cates that Q in Q tunneling is enabled and that the VLAN is tagged and shows the associated customer VLANs Related Documentation Configuring Q in Q Tunneling CLI Procedure on page 1144 Example Configuring a Private VLAN on a J EX Series Switch For security reasons it is often useful to restrict the flow of broadcast and unknown unicast traffic and to even limit the communication between known host...

Page 1180: ...y hr comm ge 0 0 11 0 User 2 HR Community hr comm ge 0 0 12 0 User 3 Finance Community finance comm ge 0 0 13 0 User 4 Finance Community finance comm ge 0 0 14 0 Mail server Isolated isolated ge 0 0 15 0 Backup server Isolated isolated ge 0 0 16 0 Primary VLAN pvlan trunk interface ge 1 0 0 0 Configuration CLI Quick Configuration To quickly create and configure a private VLAN copy the following co...

Page 1181: ...er switch set ge 1 0 0 unit 0 family ethernet switching port mode trunk user switch set ge 1 0 0 unit 0 family ethernet switching vlan members pvlan user switch set ge 0 0 11 unit 0 family ethernet switching port mode access user switch set ge 0 0 12 unit 0 family ethernet switching port mode access user switch set ge 0 0 13 unit 0 family ethernet switching port mode access user switch set ge 0 0 ...

Page 1182: ...h set pvlan interface ge 0 0 15 0 user switch set pvlan interface ge 0 0 16 0 Results Check the results of the configuration user switch show configuration vlans finance comm interface ge 0 0 13 0 ge 0 0 14 0 primary vlan pvlan hr comm interface ge 0 0 11 0 ge 0 0 12 0 primary vlan pvlan pvlan vlan id 1000 interface ge 0 0 15 0 ge 0 0 16 0 ge 0 0 0 0 ge 1 0 0 0 no local switching Verification To c...

Page 1183: ...nabled Origin Static Private VLAN Mode Community Primary VLAN pvlan Protocol Port Mode Number of interfaces Tagged 2 Active 0 Untagged 2 Active 0 ge 0 0 0 0 tagged trunk ge 0 0 11 0 untagged access ge 0 0 12 0 untagged access ge 1 0 0 0 tagged trunk user switch show vlans finance comm extensive VLAN finance comm Created at Tue Sep 16 17 59 47 2008 Internal index 21 Admin State Enabled Origin Stati...

Page 1184: ...ribes how to create virtual routing instances Requirements on page 1112 Overview and Topology on page 1112 Configuration on page 1113 Verification on page 1114 Requirements This example uses the following hardware and software components One J EX Series switch Before you create the virtual routing instances make sure you have Configured the necessary VLANs See Configuring VLANs for J EX Series Swi...

Page 1185: ...witch set interfaces ge 0 0 3 vlan tagging 2 Create two subinterfaces on the interface one for each routing instance edit user switch setinterfacesge 0 0 3unit0vlan id1030familyinetaddress103 1 1 1 24 user switch set interfaces ge 0 0 3 unit 1 vlan id 1031 family inet address 103 1 1 1 24 3 Create two virtual routers edit user switch set routing instances r1 instance type virtual router user switc...

Page 1186: ...s Were Created on page 1114 Verifying That the Routing Instances Were Created Purpose Verify that the virtual routing instances were properly created on the switch Action Use the show route instance command user switch show route instance Instance Type Primary RIB Active holddown hidden master forwarding inet 0 3 0 0 r1 virtual router r1 inet 0 1 0 0 r2 virtual router r2 inet 0 1 0 0 Meaning Each ...

Page 1187: ...s Switch A on page 1118 Configuring VLANs and MVRP on Access Switch B on page 1120 Configuring VLANS and MVRP on Distribution Switch C on page 1122 Verification on page 1123 Requirements This example uses the following hardware and software components Two J EX Series access switches One J EX Series distribution switch Overview and Topology MVRP is used to manage dynamic VLAN registration in a LAN ...

Page 1188: ...s been configured to support all three VLANS and all three VLANS are active bound to interfaces that are connected to personal computers ge 0 0 1 Connects PC1 as a member of finance VLAN ID 100 ge 0 0 2 Connects PC2 as a member of lab VLAN ID 200 ge 0 0 3 Connects PC3 as a member of sales VLAN ID 300 Access Switch B has also been configured to support three VLANS However currently only two VLANs a...

Page 1189: ...n page 1117 explains the components of the example topology Table 149 Components of the Network Topology Settings Property Access Switch A Access Switch B Distribution Switch C Switch hardware finance tag 100 lab tag 200 sales tag 300 VLAN names and tag IDs 1117 Chapter 58 Examples Bridging and VLAN Configuration ...

Page 1190: ...erform these tasks CLI Quick Configuration To quickly configure access Switch A for MVRP copy the following commands and paste them into the switch terminal window of Switch A edit set vlans finance vlan id 100 set vlans lab vlan id 200 set vlans sales vlan id 300 set interfaces ge 0 0 1 unit 0 family ethernet switching vlan members finance set interfaces ge 0 0 2 unit 0 family ethernet switching ...

Page 1191: ...of the lab VLAN edit user Access Switch A set interfaces ge 0 0 2 unit 0 family ethernet switching vlan members lab 6 Configure an Ethernet interface as a member of the sales VLAN edit user Access Switch A set interfaces ge 0 0 3 unit 0 family ethernet switching vlan members sales 7 Configure a trunk interface edit user Access Switch A set interfaces xe 0 1 1 unit 0 family ethernet switching port ...

Page 1192: ...switch bind access interfaces for PC4 and PC5 to the VLANs and enable MVRP on the trunk interface of access Switch B perform these tasks CLI Quick Configuration To quickly configure Access Switch B for MVRP copy the following commands and paste them into the switch terminal window of Switch B edit set vlans finance vlan id 100 set vlans lab vlan id 200 set vlans sales vlan id 300 set interfaces ge...

Page 1193: ...Ethernet interface as a member of the lab VLAN edit user Access Switch B set interfaces ge 0 0 1 unit 0 family ethernet switching vlan members lab 6 Configure a trunk interface user Access Switch B set interfaces xe 0 1 0 unit 0 family ethernet switching port mode trunk 7 Enable MVRP on the trunk interface edit user Access Switch B set protocols mvrp xe 0 1 0 0 NOTE As we recommend as a best pract...

Page 1194: ...Quick Configuration To quickly configure distribution Switch C for MVRP copy the following commands and paste them into the switch terminal window of distribution Switch C edit set interfaces xe 0 1 1 unit 0 family ethernet switching port mode trunk set interfaces xe 0 1 0 unit 0 family ethernet switching port mode trunk set protocols mvrp interface xe 0 1 1 0 set protocols mvrp interface xe 0 1 0...

Page 1195: ...nterface for xe 0 1 0 edit user Distribution Switch C set protocols mvrp interface xe 0 1 0 0 Results Check the results of the configuration edit user Distribution Switch D show interfaces xe 0 1 0 unit 0 family ethernet switching port mode trunk xe 0 1 1 unit 0 family ethernet switching port mode trunk protocols mvrp interface xe 0 1 0 0 interface xe 0 1 1 0 Verification To confirm that the confi...

Page 1196: ...t timers are used Verifying That MVRP Is Updating VLAN Membership on Access Switch A Purpose Verify that MVRP is updating VLAN membership by displaying the Ethernet switching interfaces and associated VLANs that are active on Switch A Action List Ethernet switching interfaces on the switch user Access Switch A show ethernet switching interfaces Interface State VLAN members Blocking ge 0 0 1 0 up f...

Page 1197: ...itch B show ethernet switching interfaces Interface State VLAN members Blocking ge 0 0 0 0 up finance unblocked ge 0 0 1 0 up lab unblocked xe 0 1 1 0 up finance unblocked lab unblocked sales unblocked Meaning MVRP has automatically added finance lab and sales as VLAN members on the trunk interface because they are being advertised by access Switch A Verifying That MVRP Is Enabled on Distribution ...

Page 1198: ...ose VLANs will be passed on from distribution Switch C to Switch A through interface xe 0 1 1 0 Interface xe 0 1 0 0 connects distribution Switch C to Switch B and is updated to show that it is a member of the two VLANs that are active on Switch B Thus distribution Switch C sends traffic for finance and lab to both Switch A and Switch B But distribution Switch C sends traffic for sales only to Swi...

Page 1199: ...ite designated as the provider edge PE device Overview and Topology L2PT allows you to send Layer 2 PDUs across a service provider network and deliver them to J EX Series switches that are not part of the local broadcast domain Figure32onpage1128showsacustomernetworkthatincludestwositesthatareconnected across a service provider network Site 1 contains three switches connected in a Layer 2 network ...

Page 1200: ... for all supported Layer 2 protocols Tunneled Layer 2 PDUs do not normally arrive at high rate If the tunneled Layer 2 PDUs do arrive at high rate there might be a problem in the network Typically you would want to shut down the interface that is receiving a high rate of tunneled Layer 2 PDUs so that problem can be isolated However if you do not want to completely shut down the interface you can c...

Page 1201: ...hold to show how this is done If L2PT encapsulated packets are received on an access interface the switch reacts as it does when there is a loop between the service provider network and the customer network and shuts down disables the access interface Once an interface is disabled you must explicitly reenable it using the clear ethernet switching layer2 protocol tunneling error command or else the...

Page 1202: ...r switchA show vlans extensive customer 1 VLAN customer 1 Created at Thu Jun 25 05 07 38 2009 802 1Q Tag 100 Internal index 4 Admin State Enabled Origin Static Dot1q Tunneling status Enabled Layer2 Protocol Tunneling status Enabled Protocol Port Mode Mac aging time 300 seconds Number of interfaces Tagged 0 Active 0 Untagged 3 Active 0 ge 0 0 7 0 untagged access ge 0 0 8 0 untagged access ge 0 0 9 ...

Page 1203: ...elingvlancustomer 1 command shows that L2PT is tunneling the STP protocol on VLAN customer 1 the drop threshold is set to 50 and the shutdown threshold is set to 100 The show ethernet switching layer2 protocol tunneling interface command shows the type of operation being performed on each interface the state of each interface and if the state is Shutdown the reason why the interface is shut down R...

Page 1204: ...1132 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1205: ...44 Configuring GVRP J Web Procedure on page 1144 Configuring Redundant Trunk Groups J Web Procedure on page 1146 Configuring Multiple VLAN Registration Protocol MVRP CLI Procedure on page 1147 Configuring Layer 2 Protocol Tunneling on J EX Series Switches CLI Procedure on page 1150 Configuring MAC Notification CLI Procedure on page 1151 Configuring Proxy ARP CLI Procedure on page 1153 Configuring ...

Page 1206: ... one VLAN ID Type a unique identification number from 1 through 4094 If no value is specified it defaults to 0 VLAN Range Type a number range to create VLANs with IDs corresponding to the range For example the range 2 3 will create two VLANs with the IDs 2 and 3 Specifies the identifier or range for the VLAN VLAN Id Range Enter a brief description for the VLAN Describes the VLAN Description Type t...

Page 1207: ... and MAC address in the window that is displayed Specifies IPv4 address options for the VLAN IPv4 address Select IPv6 address to enable the IPv6 address options To configure IPv6 1 Enter the IP address for example 2001 ab8 85a3 8a2e 370 7334 2 Specify the subnet mask Specifies IPv6 address options for the VLAN IPv6 address Voip tab Click one Add Select the ports from the available list Remove Sele...

Page 1208: ...VLAN tag ID or VLAN ID range for the VLAN edit vlans user switch set vlan name vlan id vlan id number or edit vlans user switch set vlan name vlan range vlan id low vlan id high 5 To specify the maximum time that an entry can remain in the forwarding table before it ages out optional edit vlans user switch set vlan name mac table aging time time 6 To specify a VLAN firewall filter to be applied to...

Page 1209: ...rol packets for example to ping the RVI with a packet size of 6000 bytes or more you must explicitly configure the jumbo MTU size on the interface named vlan the RVI CAUTION Setting or deleting the jumbo MTU size on the RVI the vlan interface while the switch is transmitting packets might result in dropped packets To configure the routed VLAN interface RVI 1 Create a Layer 2 VLAN by assigning it a...

Page 1210: ...cess Switch to a Distribution Switch on page 1078 Example Configuring IP Directed Broadcast on a J EX Series Switch on page 904 Understanding Bridging and VLANs on J EX Series Switches on page 1041 Configuring MAC Table Aging CLI Procedure The aging process ensures that the J EX Series switch tracks only active nodes on the network and that it is able to flush out network nodes that are no longer ...

Page 1211: ...e is in multiple VLANs and can multiplex traffic between different VLANs Trunk interfaces typically connect to other switches and to routers on the LAN Configure the port mode as trunk edit interfaces ge 0 0 3 unit 0 family ethernet switching user switch set port mode trunk 2 Configure the native VLAN ID edit interfaces ge 0 0 3 unit 0 family ethernet switching user switch set native vlan id 3 Rel...

Page 1212: ...ames so that the network nodes receiving the frames know which VLAN the frames belong to Trunk ports which multiplex traffic among a number of VLANs use the tag to determine the origin of frames and where to forward them For example you could configure the VLAN employee and specify a tag range of 10 12 This creates the following VLANs and tags VLAN employee 10 tag 10 VLAN employee 11 tag 11 VLAN e...

Page 1213: ...Associating a series of tagged VLANS to an interface by name or by VLAN range have the same result VLANs __employee_120__ through __employee_130__ are created NOTE When a series of VLANs are created using the vlan range command the VLAN names are prefixed and suffixed with a double underscore Related Documentation Verifying That a Series of Tagged VLANs Has Been Created on page 1155 Example Settin...

Page 1214: ...tance name interface interface name logical unit number 3 Create the logical interfaces that are bound to the routing instance To create a logical interface with an IPv4 address edit interfaces user switch setinterface nameunitlogical unit numberfamilyinetaddressip address To create a logical interface with an IPv6 address edit interfaces user switch set interface name unit logical unit number fam...

Page 1215: ... VLAN to have no local switching NOTE The primary VLAN must be a tagged VLAN edit vlans user switch set primary vlan name no local switching 2 For each community VLAN configure access interfaces NOTE The secondary VLANs must be untagged VLANs edit vlans user switch set community vlan name interface interface name 3 For each community VLAN set the primary VLAN edit vlans user switch set community v...

Page 1216: ...ue 4 Disable MAC address learning on the S VLAN optional edit vlans user switch set s vlan name no mac learning Related Documentation Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 Verifying That Q in Q Tunneling Is Working on page 1158 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Configuring GVRP J Web Procedure As a network expands and the number ...

Page 1217: ...d click OK 3 To modify GVRP timers click Global Settings For modifying GVRP Timer settings for the interface enter information as described in Table 151 on page 1145 4 Click OK to apply changes to the configuration or click Cancel to cancel without saving changes To disable an interface select the interface and click Disable Port Table 151 GVRP Timer Settings Your Action Function Field Type a numb...

Page 1218: ... Switching RTG The RTG Configuration page displays a list of existing RTGs If you select a specific RTG the details of the selected RTG are displayed in the Details of group section NOTE After you make changes to the configuration in this page you must commit the changes for them to take effect To commit all changes to the active configuration select Commit Options Commit See Using the Commit Opti...

Page 1219: ...egistration Protocol MVRP CLI Procedure MultipleVLANRegistrationProtocol MVRP isusedtomanagedynamicVLANregistration in a LAN You can use MVRP on J EX Series switches MVRP is disabled by default on J EX Series switches To enable MVRP or set MVRP options follow these instructions Enabling MVRP on page 1147 Disabling MVRP on page 1147 Disabling Dynamic VLANs on page 1148 Configuring Timer Values on p...

Page 1220: ...unt of time the switch waits to accept a registration request the leave timer controls the period of time that the switch waits in the Leave state before changing to the unregistered state and the leaveall timer controls the frequency with which the LeaveAll messages are communicated The default MVRP timer values are 200 ms for the join timer 1000 ms for the leave timer and 10000 ms for the leavea...

Page 1221: ...de does not participate in MVRP even if MVRP is enabled on the switch To set all interfaces to forbidden registration mode edit protocols mvrp user switch set interface all registration forbidden To set one interface to forbidden registration mode edit protocols mvrp user switch set interface xe 0 0 1 0 registration forbidden To set all interfaces to normal registration mode edit protocols mvrp us...

Page 1222: ... although the number of packets tunneled per second might be limited by other factors You can specify a drop threshold value without specifying a shutdown threshold value and you can specify a shutdown threshold value without specifying a drop threshold value If you specify both threshold values then the drop threshold value must be less than or equal to the shutdown threshold value If the drop th...

Page 1223: ...ry to commit the configuration changes the commit will fail edit user switch set vlans customer 1 dot1q tunneling layer2 protocol tunneling stp shutdown threshold 100 NOTE Once an interface is disabled you must explicitly reenable it using the clear ethernet switching layer2 protocol tunneling error command Otherwise the interface remains disabled Related Documentation Example Configuring Layer 2 ...

Page 1224: ...itching options user switch set mac notification notification interval 60 Disabling MAC Notification MAC notification is disabled by default Perform this procedure only if MAC notification was previously enabled on your switch To disable MAC notification on the switch edit ethernet switching options user switch delete mac notification Setting the MAC Notification Interval The default MAC notificat...

Page 1225: ...ricted mode In restricted mode the switch is not a proxy if the source and target IP addresses are on the same subnet If you use unrestricted mode disable gratuitous ARP requests on the interface to avoid the situation of the switch s response to a gratuitous ARP request appearing to the host to be an indication of an IP conflict To configure proxy ARP on a routed VLAN interface RVI edit interface...

Page 1226: ...1154 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1227: ...ing Properly on page 1163 Verifying That Proxy ARP Is Working Correctly on page 1164 Verifying That a Series of Tagged VLANs Has Been Created Purpose Verify that a series of tagged VLANs is created on the switch Action Display the VLANs in the ascending order of their VLAN ID user switch show vlans sort by tag Name Tag Interfaces __employee_120__ 120 ge 0 0 22 0 __employee_121__ 121 ge 0 0 22 0 __...

Page 1228: ...8 ge 0 0 22 0 __employee_129__ 129 ge 0 0 22 0 __employee_130__ 130 ge 0 0 22 0 Display the VLANs by specifying the VLAN range name here the VLAN range name is employee user switch show vlans employee Name Tag Interfaces __employee_120__ 120 ge 0 0 22 0 __employee_121__ 121 ge 0 0 22 0 __employee_122__ 122 ge 0 0 22 0 __employee_123__ 123 ge 0 0 22 0 __employee_124__ 124 ge 0 0 22 0 __employee_125...

Page 1229: ... show route instance command to list all of the routing instances and their properties 1 user switch show route instance Instance Type Primary RIB Active holddown hidden master forwarding inet 0 3 0 0 __juniper_private1__ forwarding __juniper_private1__ inet 0 1 0 3 __juniper_private2__ forwarding instance1 forwarding r1 virtual router r1 inet 0 1 0 0 r2 virtual router r2 inet 0 1 0 0 2 Usetheshow...

Page 1230: ...mary and secondary VLAN configurations 1 user switch show configuration vlans svlan vlan id 300 dot1q tunneling customer vlans 101 200 2 Use the show vlans command to view VLAN information and link status user switch show vlans s vlan name extensive VLAN svlan Created at Thu Oct 23 16 53 20 2008 802 1Q Tag 300 Internal index 2 Admin State Enabled Origin Static Dot1q Tunneling Status Enabled Custom...

Page 1231: ... show vlans command to view VLAN information and link status user switch show vlans pvlan extensive VLAN pvlan Created at time 802 1Q Tag vlan id Internal index index number Admin State Enabled Origin Static Private VLAN Mode Primary Protocol Port Mode Number of interfaces Tagged 2 Active 0 Untagged 6 Active 0 trunk1 tagged trunk interface a untagged access interface b untagged access interface c ...

Page 1232: ...the J EX Series switch maintains in its Ethernet switching table These are details about the nodes on the LAN such as VLAN name VLAN ID member interfaces MAC addresses and so on Action To display Ethernet switching details in the J Web interface select Monitor Switching Ethernet Switching To view Ethernet switching details in the CLI enter the following commands show ethernet switching table show ...

Page 1233: ...erfaces Interfaces MAC Learning Log The VLAN name VLAN Name The learned MAC address associated with the VLAN ID MAC Address Timestamp for the time at which when the MAC address was added or deleted from the MAC learning log Time Operating state of the interface Values are Up and Down State Related Documentation Configuring MAC Table Aging CLI Procedure on page 1138 Understanding Bridging and VLANs...

Page 1234: ...n Configuring GVRP J Web Procedure on page 1144 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Verifying That MVRP Is Working Correctly Purpose After configuring your J EX Series switch to participate in MVRP verify that the configuration is properly set and that MVRP messages are being sent and received on your switch Action Confirm that MVRP is enabled on your switch 1 u...

Page 1235: ...istration Using MVRP on J EX Series Switches on page 1115 Configuring Multiple VLAN Registration Protocol MVRP CLI Procedure on page 1147 Verifying That MAC Notification Is Working Properly Purpose Verify that MAC notification is enabled or disabled and that the MAC notification interval is set to the specified value Action Verify that MAC notification is enabled while also verifying the MAC notif...

Page 1236: ... 0 with a broadcast source address 0 with source address duplicate to mine 29555 which were not for me 0 packets discarded waiting for resolution 4 packets sent after waiting for resolution 27 ARP requests sent 47 ARP replies sent 0 requests for memory denied 0 requests dropped on entry 0 requests dropped during retry 0 requests dropped due to interface deletion 0 requests on unnumbered interfaces...

Page 1237: ...IP address from one device to another The switch updates its ARP cache table after receipt of such gratuitous ARP messages and then it also updates its Ethernet switching table However sometimes silent devices such as SYSLOG servers or SNMP Trap receivers that receive UDP traffic but do not return acknowledgement ACK messages to the traffic source do not send gratuitous ARP packets when a device m...

Page 1238: ... values After the entries expire the switch sends a new ARP message to the IP address of the device The device responds to the ARP thereby refreshing the entries in the switch s ARP cache table and Ethernet switching table Related Documentation arp on page 171 mac table aging time on page 1209 1166 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1239: ...180 edit vlans Configuration Statement Hierarchy on page 1180 edit ethernet switching options Configuration Statement Hierarchy ethernet switching options analyzer name loss priority priority ratio number input ingress interface all interface name vlan vlan id vlan name egress interface all interface name output interface interface name vlan vlan id vlan name bpdu block disable timeout timeout int...

Page 1240: ...action action no allowed mac log static ip ip address vlan vlan name mac mac address vlan all vlan name arp inspection no arp inspection dhcp option82 circuit id prefix hostname use interface description use vlan id remote id prefix hostname mac none use interface description use string string vendor id string examine dhcp no examine dhcp ip source guard no ip source guard mac move limit limit act...

Page 1241: ...8 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwarding on J EX Series Switches on page 2512 Understanding MAC Notification on J EX Series S...

Page 1242: ...restricted unrestricted traps no traps vlan id vlan id number vlan tagging ge fpc pic port description text disable ether options 802 3ad aex lacp force up auto negotiation no auto negotiation flow control no flow control link mode mode speed auto negotiation speed hold time up milliseconds down milliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number d...

Page 1243: ...nit logical unit number description text disable family family name proxy arp restricted unrestricted rpm traps no traps vlan id vlan id number lo0 description text disable hold time up milliseconds down milliseconds traceoptions traps no traps unit logical unit number description text disable family family name traps no traps me0 description text disable hold time up milliseconds down millisecond...

Page 1244: ...lliseconds mtu bytes no gratuitous arp request traceoptions traps no traps unit logical unit number description text disable family family name traps no traps vlan id vlan id number vlan tagging xe fpc pic port description text disable ether options 802 3ad aex lacp 802 3ad force up auto negotiation no auto negotiation flow control no flow control link mode mode speed auto negotiation speed hold t...

Page 1245: ... J EX Series Switches Interfaces Overview on page 863 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos edit protocols Configuration Statement Hierarchy protocols connections remote interface switch connection name interface interface name unit number transmit lsp label switched path receive lsp label switched path dot1x authenticator authentication pr...

Page 1246: ...e size world readable no world readable match regex flag flag detail disable receive send vlan vlan id vlan number data forwarding source groups group prefix receiver source vlans vlan list install disable interface interface name immediate leave interface interface name group limit limit multicast router interface static group ip address proxy query interval seconds query last member interval sec...

Page 1247: ...ode code ca type number ca value value mpls interface all interface name label switched path lsp name to remote provider edge switch path destination address hostname strict loose mstp disable bpdu block on edge bridge priority priority configuration name name forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no r...

Page 1248: ...aceoptions file filename files number size size no stamp world readable no world readable flag flag oam ethernet connectivity fault management action profile profile name default actions interface down linktrace age 30m 10m 1m 30s 10s path database size path database size maintenance domain domain name level number mip half function none default explicit name format character string none dns mac 2...

Page 1249: ...erface name link discovery active passive pdu interval interval event thresholds threshold value remote loopback event thresholds frame errorcount frame period count frame period summary count symbol period count negotiation options allow remote loopback no allow link events rstp disable bpdu block on edge bridge priority priority forward delay seconds hello time seconds interface all interface na...

Page 1250: ...e number polling interval seconds sample rate number source ip stp disable bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag vstp bpdu block ...

Page 1251: ... Series Switches on page 2258 IGMP Snooping on J EX Series Switches Overview on page 2047 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch...

Page 1252: ...face vlan logical interface number mac limit number mac table aging time seconds no local switching no mac learning primary vlan vlan name vlan id number vlan range vlan id low vlan id high Related Documentation Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Example Configure A...

Page 1253: ...he number of ARP entries to update is high increasing the time between updates can improve system performance Range 5 to 240 minutes Default 20 minutes Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation For more information about ARP updates see the Junos OS System Basics Configuration Guide at...

Page 1254: ...ecomes the designated bridge for a LAN segment Default 32 768 Options priority Bridge priority It can be set only in increments of 4096 Range 0 through 61 440 Default 32 768 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface ...

Page 1255: ... access interfaces and assigns the configured S VLAN to the packet range Range of numeric identifiers for VLANs Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation dot1q tunneling on page 1185 ether type on page 1188 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 Conf...

Page 1256: ...ion Related Documentation show vlans on page 1263 Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Understanding Bridging and VLANs on J EX Series Switches on page 1041 disable Syntax disable Hierarchy Level edit protocols gvrp edit protocols gvrp interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switche...

Page 1257: ...e 1147 dot1q tunneling Ethernet Switching Syntax dot1q tunneling ether type 0x8100 0x88a8 0x9100 Hierarchy Level edit ethernet switching options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches The remaining statement is explained separately Description Set a global value for the Ethertype for Q in Q tunneling Required Privilege Level routing To view t...

Page 1258: ... a tagged VLAN The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation dot1q tunneling on page 1185 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 Example Configuring Layer 2 Protocol Tunneling on J EX Series Switches on p...

Page 1259: ...to commit the configuration the commit will fail You can specify a drop threshold value without specifying a shutdown threshold value Default No drop threshold is specified Options number Maximum number of Layer 2 PDUs of the specified protocol that can be received per second on the interfaces in a specified VLAN before the switch begins dropping the Layer 2 PDUs Range 1 through 1000 Required Priv...

Page 1260: ...pe value appears in the Ethernet type field of the packet It specifies the protocol being transported in the Ethernet frame Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation dot1q tunneling on page 1186 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 Configuring Q in...

Page 1261: ...t1q tunneling ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary interface interface name secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write in...

Page 1262: ...rce guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip interface all interface name ac...

Page 1263: ...245 Port Security for J EX Series Switches Overview on page 2545 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Se...

Page 1264: ... statement input Apply a firewall filter to VLAN ingress traffic output Apply a firewall filter to VLAN egress traffic Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring ...

Page 1265: ...undant trunk group The group name must start with a letter and can consist of letters numbers dashes and underscores The remaining options are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Redundant Trunk Links for Faster Recovery on page 1101 Und...

Page 1266: ...he trunk interface is updated as the switch s access interfaces become active or inactive in the configured VLANs The statements are explained separately Default GVRP is disabled by default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show gvrp on page 1253 Example Setting Up Bridging w...

Page 1267: ...n page 1142 interface Syntax interface all interface name enable disable Hierarchy Level edit protocols gvrp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure GARP VLAN Registration Protocol GVRP for one or more interfaces Default By default GVRP is disabled Options all All interfaces interface name The list of interfaces to be con...

Page 1268: ... By default MVRP is disabled Options all All interfaces on the switch interface name Names of interface to be configured for MVRP The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Automatic VLAN Administration Using MVRP o...

Page 1269: ...d ge 0 1 1 the software assigns ge 0 1 1 as the active link Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Redundant Trunk Links for Faster Recovery on page 1101 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 interface Syntax interface interfa...

Page 1270: ...6 Understanding Bridging and VLANs on J EX Series Switches on page 1041 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 interfaces Syntax interfaces interface name no mac learning Hierarchy Level edit ethernet switching options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure settings for interfaces that have b...

Page 1271: ...nds interfaces must wait before sending VLAN advertisements Default 20 milliseconds Options milliseconds Number of milliseconds Default 20 milliseconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show gvrp on page 1253 Example Configure Automatic VLAN Administration Using GVRP on page ...

Page 1272: ...rs to inappropriate values might cause an imbalance in the operation of MVRP Default 200 milliseconds Options milliseconds Number of milliseconds that the interface must wait before sending MVRP PDUs Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation leave timer on page 1204 leaveall timer on...

Page 1273: ...of the logical interface defined with a setinterfaces vlan unit command For the logical interface number use the same number you configure in the unit statement Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show ethernet switching interfaces on page 997 show vlans on page 1263 Example Se...

Page 1274: ...ration Administration and Maintenance OAM link fault management LFM NOTE IfyouenableL2PTforuntaggedOAMLFMpackets donotconfigure LFM on the corresponding access interface cdp Cisco Discovery Protocol e lmi Ethernet local management interface gvrp GARP VLAN Registration Protocol lacp Link Aggregation Control Protocol NOTE If you enable L2PT for untagged LACP packets do not configure LACP on the corr...

Page 1275: ...roduced before Junos OS Release 10 2 for J EX Series switches Description For GARP VLAN Registration Protocol GVRP configure the number of milliseconds an interface waits after receiving a leave message before the interface leaves the VLAN specified in the message If the interface receives a join message before the timer expires the software keeps the interface in the VLAN Default 60 centiseconds ...

Page 1276: ...imers to inappropriate values might cause an imbalance in the operation of MVRP Default 1000 milliseconds Options milliseconds Number of milliseconds that the switch retains a VLAN in the Leave state before the VLAN is unregistered At a minimum set the leave timer interval at twice the join timer interval Required Privilege Level routing To view this statement in the configuration routing control ...

Page 1277: ...ssage instructs the port to change the GVRP state for all its VLANs to a leaving state and remove them unless a Join message is received before the leave timer expires Default 1000 centiseconds Options milliseconds Number of milliseconds Range 5 times leave timer value Default 1000 centiseconds Required Privilege Level routing To view this statement in the configuration routing control To add this...

Page 1278: ... to inappropriate values might cause an imbalance in the operation of MVRP Default 10000 milliseconds Options milliseconds Number of milliseconds between the sending of Leave All messages Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation join timer on page 1200 leave timer on page 1204 Examp...

Page 1279: ...Is the first MAC address inserted into the forwarding database is the MAC address of the RVI For aggregated Ethernet bundles using LACP the first MAC address inserted into the forwarding database in theforwardingtableisthesourceaddressoftheprotocolpacket Theswitch will therefore not learn MAC addresses other than the automatic addresses when the mac limit is set to 1 and this will cause problems w...

Page 1280: ...tting a notification interval MAC notification is enabled with the default MAC notification interval of 30 seconds The remaining statement is explained separately Default MAC notification is disabled by default Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring MAC Notification CLI ...

Page 1281: ...in in the Ethernet switching table for 300 seconds Options seconds Time that entries remain in the Ethernet switching table before being removed Range 60 through 1 000 000 seconds Default 300 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show ethernet switching statistics aging o...

Page 1282: ... a match condition in the firewall filter stanza for firewall filters to map traffic from an interface for a VLAN Options native Maps untagged and priority tagged packets to an S VLAN policy Maps the interface to a firewall filter policy to an S VLAN push Retains the incoming tag and add an additional VLAN tag instead of replacing the original tag swap Swaps the incoming VLAN tag with the VLAN ID ...

Page 1283: ...onfiguration otherwise theconfigurationcommit fails Also all cannot be the name of a VLAN on the switch names Name of one or more VLANs vlan ids Numeric identifier of one or more VLANs For a series of tagged VLANs specify a range for example 10 20 or 10 20 23 27 30 Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configur...

Page 1284: ...unk interface to ensure that the VLAN membership information on the trunk interface is updated as the switch s access interfaces become active or inactive in the configured VLANs The remaining statements are explained separately Default MVRP is disabled by default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration...

Page 1285: ...Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show vlans on page 1263 show ethernet switching interfaces on page 997 Configuring Gigabit Ethernet Interfaces CLI Procedure on page 919 Configuring Gigabit Ethernet Interfaces J Web Procedure on page 909 Understanding Bridging and VLANs on J...

Page 1286: ...VLANs as a result of MVRP protocol exchange messages is enabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Multiple VLAN Registration Protocol MVRP CLI Procedure on page 1147 no local switching Syntax no local switching Hierarchy Level edit vlans vlan name Release Informat...

Page 1287: ...hes on page 1051 no mac learning Syntax no mac learning Hierarchy Level edit ethernet switching options interfaces interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable MAC address learning for the specified interface Disabling MAC address learning on an interface disables learning for all the VLANs of which that interface...

Page 1288: ...fications to the network management server For instance if the MAC notification interval is set to 10 all of the MAC address addition and removal SNMP notifications will be sent to the network management system every 10 seconds Options seconds The MAC notification interval in seconds Range 1 through 60 Default 30 Required Privilege Level system To view this statement in the configuration system co...

Page 1289: ...d IP cameras trunk Have the interface operate in trunk mode In this mode the interface can be in multiple VLANs and can multiplex traffic between different VLANs Trunk interfaces typically connect to other switches and to routers on the LAN Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentati...

Page 1290: ...tch on page 1107 Creating a Private VLAN CLI Procedure on page 1143 redundant trunk group Syntax redundant trunk group group name name interface interface name primary interface interface name Hierarchy Level edit ethernet switching options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a primary link and secondary link on trunk...

Page 1291: ...umentation Configuring Multiple VLAN Registration Protocol MVRP CLI Procedure on page 1147 routing instances Syntax routing instances routing instance name instance type virtual router interface interface name Hierarchy Level edit Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a virtual routing entity Options routing instance na...

Page 1292: ...ld value If the shutdown threshold value is less than the drop threshold value the drop threshold value has no effect You can specify a shutdown threshold value without specifying a drop threshold value Default No shutdown threshold is specified Options number Maximum number of Layer 2 PDUs of the specified protocol that can be received per second on the interfaces in a specified VLAN before the i...

Page 1293: ...EX Series Switches on page 1041 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos vlan id Syntax vlan id number Hierarchy Level edit vlans vlan name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure an 802 1Q tag to apply to all traffic that originates on the VLAN Default If you use the...

Page 1294: ...LAN ID number for the group of VLANs Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring VLANs for J EX Series Switches CLI Procedure on page 1136 Configuring VLANs for J EX Series Switches J Web Procedure on page 1133 Configuring Routed VLAN Interfaces CLI Procedure on page 1137 U...

Page 1295: ...tion Configure VLAN properties on J EX Series switches The following configuration guidelines apply Only private VLAN PVLAN firewall filters can be used when the VLAN is enabled for Q in Q tunneling An S VLAN tag is added to the packet if the VLAN is dot1q tunneled and the packet is arriving from an access interface You cannot use a firewall filter to assign a routed VLAN interface RVI to a VLAN V...

Page 1296: ...J EX Series Switches J Web Procedure on page 1133 Configuring Q in Q Tunneling CLI Procedure on page 1144 Creating a Series of Tagged VLANs CLI Procedure on page 1140 Configuring Routed VLAN Interfaces CLI Procedure on page 1137 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Bridging and VLANs on J EX Series Switches on page 1041 1224 Dell PowerConnect J Series E...

Page 1297: ...CHAPTER 63 Operational Mode Commands for Bridging and VLANs 1225 ...

Page 1298: ...s on the specified interface Required Privilege Level view Related Documentation Example Configuring Layer 2 Protocol Tunneling on J EX Series Switches on page 1126 Configuring Layer 2 Protocol Tunneling on J EX Series Switches CLI Procedure on page 1150 List of Sample Output clear ethernet switching layer2 protocol tunneling error on page 1226 clearethernet switchinglayer2 protocol tunnelingerror...

Page 1299: ... Series Switches on page 1126 Configuring Layer 2 Protocol Tunneling on J EX Series Switches CLI Procedure on page 1150 List of Sample Output clear ethernet switching layer2 protocol tunneling statistics on page 1227 clearethernet switchinglayer2 protocol tunnelingerrorinterfacege 0 1 1 0onpage1227 clear ethernet switching layer2 protocol tunneling error vlan v2 on page 1227 clear ethernet switchi...

Page 1300: ...dress Optional Clear the specified learned MAC address from the Ethernet switching table management vlan Optional Clear all MAC addresses learned for the management VLAN from the Ethernet switching table Note that you do not specify a VLAN name because only one management VLAN exists vlan vlan name Optional Clear all MAC addresses learned for the specified VLAN from the Ethernet switching table Re...

Page 1301: ...tocol GVRP statistics Required Privilege Level clear Related Documentation show spanning tree statistics on page 1416 Example Configure Automatic VLAN Administration Using GVRP on page 1087 List of Sample Output clear gvrp statistics on page 1229 clear gvrp statistics user switch clear gvrp statistics clear gvrp statistics 1229 Chapter 63 Operational Mode Commands for Bridging and VLANs ...

Page 1302: ...ion show mvrp statistics on page 1260 Example Configuring Automatic VLAN Administration Using MVRP on J EX Series Switches on page 1115 List of Sample Output clear mvrp statistics on page 1230 clear mvrp statistics interface ge 0 0 1 0 on page 1230 Output Fields When you enter this command you are provided feedback on the status of your request clear mvrp statistics user switch clear mvrp statisti...

Page 1303: ...entation show ethernet switching mac learning log on page 1241 show ethernet switching table on page 1249 Configuring Autorecovery From the Disabled State on Secure or Storm Control Interfaces CLI Procedure on page 2516 List of Sample Output show ethernet switching interfaces on page 1232 show ethernet switching interfaces ge 0 0 15 brief on page 1233 show ethernet switching interfaces ge 0 0 2 de...

Page 1304: ...isabled due to a MAC limiting error The disabled interface is automatically restored to service when the disable timeout expires MAC move limit exceeded The interface is temporarily disabled due to a MAC move limiting error The disabled interface is automatically restored to service when the disable timeout expires Storm control in effect The interface is temporarily disabled due to a storm contro...

Page 1305: ...LAN membership detail Blocked by RTG rtggroup vlan300 802 1Q Tag 300 untagged msti id 0 blocked by RTG rtggroup Number of MACs learned on IFL 0 show ethernet switching user switch show ethernet switching interfaces ge 0 0 15 detail Interface ge 0 0 15 0 Index 70 State up Port mode Trunk interfaces ge 0 0 15 VLAN membership detail Blocked by STP vlan100 802 1Q Tag 100 tagged msti id 0 blocked by ST...

Page 1306: ...put fields for the show ethernet switching layer2 protocol tunneling interface command Output fields are listed in the approximate order in which they appear Table 156 show ethernet switching layer2 protocol tunneling interface Output Fields Field Description Field Name Name of an interface on the switch Interface Type of operation being performed on the interface Values are Encapsulation and Deca...

Page 1307: ...how ethernet switching layer2 protocol tunneling interface ge 0 0 0 0 Layer2 Protocol Tunneling information layer2 protocol tunneling interface ge 0 0 0 0 Interface Operation State Description ge 0 0 0 0 Encapsulation Shutdown Shutdown threshold exceeded 1235 Chapter 63 Operational Mode Commands for Bridging and VLANs ...

Page 1308: ...tics on page 1227 show ethernet switching layer2 protocol tunneling interface on page 1234 show ethernet switching layer2 protocol tunneling vlan on page 1239 show vlans on page 1263 Example Configuring Layer 2 Protocol Tunneling on J EX Series Switches on page 1126 Configuring Layer 2 Protocol Tunneling on J EX Series Switches CLI Procedure on page 1150 List of Sample Output show ethernet switchi...

Page 1309: ...2 ge 0 0 0 0 gvrp Encapsulation 0 0 0 v2 ge 0 0 0 0 lldp Encapsulation 0 0 0 show ethernet switching user switch showethernet switchinglayer2 protocol tunnelingstatisticsinterfacege 0 0 0 0 Layer2 Protocol Tunneling Statistics layer2 protocol tunneling VLAN Interface Protocol Operation Packets Drops Shutdowns statistics interface ge 0 0 0 0 v1 ge 0 0 0 0 mvrp Encapsulation 0 0 0 v2 ge 0 0 0 0 cdp ...

Page 1310: ...v2 ge 0 0 1 0 mvrp Decapsulation 0 0 0 v2 ge 0 0 1 0 stp Decapsulation 0 0 0 v2 ge 0 0 1 0 vtp Decapsulation 0 0 0 1238 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1311: ...ocol tunneling vlan on page 1239 show ethernet switching layer2 protocol tunneling vlan v2 on page 1240 Output Fields Table 158 on page 1239 lists the output fields for the show ethernet switching layer2 protocol tunneling vlan command Output fields are listed in the approximate order in which they appear Table 158 show ethernet switching layer2 protocol tunneling vlan Output Fields Field Descript...

Page 1312: ...v2 gvrp 0 0 show ethernet switching user switch show ethernet switching layer2 protocol tunneling vlan v2 Layer2 Protocol Tunneling VLAN information layer2 protocol tunneling vlan v2 VLAN Protocol Drop Shutdown Threshold Threshold v2 cdp 0 0 v2 cdp 0 0 v2 gvrp 0 0 1240 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1313: ...thernet switching mac learning log command Output fields are listed in the approximate order in which they appear Table 159 show ethernet switching mac learning log Output Fields Field Description Field Name Timestamp when the MAC address was added or deleted from the log Date and Time VLAN name A value defined by the user for all user configured VLANs vlan_name Learned MAC address MAC MAC address...

Page 1314: ... 00 00 00 00 00 00 was added Mon Feb 25 08 07 05 2008 vlan_name HR_vlan mac 00 00 00 00 00 00 was added Mon Feb 25 08 07 05 2008 vlan_name employee2 mac 00 00 00 00 00 00 was added Mon Feb 25 08 07 05 2008 vlan_name employee1 mac 00 00 00 00 00 00 was added Mon Feb 25 08 07 05 2008 vlan_name employee2 mac 00 00 05 00 00 05 was learned Mon Feb 25 08 07 05 2008 vlan_name employee1 mac 00 30 48 90 54...

Page 1315: ...tput Fields Field Description Field Name Displays the MAC notification status Enabled MAC notification is enabled Disabled MAC notification is disabled Notification Status Displays the MAC notification interval in seconds Notification Interval show ethernet switching show ethernet switching user switch show ethernet switching mac notification Notification Status Enabled Notification Interval 30 ma...

Page 1316: ...vels Total number of aging messages received from the hardware Total age messages received All levels Aging message indicating that the entry should be removed immediately Immediate aging All levels Aging message indicating that the MAC address has been detected by hardware and that the aging timer should be stopped MAC address seen All levels Aging message indicating that the MAC address has not ...

Page 1317: ...Error age messages 0 Invalid VLAN 0 No such entry 0 Static entry 0 1245 Chapter 63 Operational Mode Commands for Bridging and VLANs ...

Page 1318: ...J EX Series Switches on page 1070 Example Configure Automatic VLAN Administration Using GVRP on page 1087 List of Sample Output show ethernet switching statistics mac learning on page 1247 show ethernet switching statistics mac learning detail on page 1247 show ethernet switching statistics mac learning interface ge 0 0 1 on page 1248 Output Fields Table 162 on page 1246 lists the output fields fo...

Page 1319: ...hop The MAC address is learned on an interface that does not have a unicast next hop MAC learning disabled The MAC address is learned on an interface on which MAC learning has been disabled Others The message contains some other error Learning message with error show ethernet switching statisticsmac learning user switch show ethernet switching statistics mac learning Learning stats 0 learn msg rcv...

Page 1320: ...lid VLAN index 0 Interface not learning 0 No nexthop 0 MAC learning disabled 0 Others 0 show ethernet switching user switch show ethernet switching statistics mac learning interface ge 0 0 1 Interface Local pkts Transit pkts Error ge 0 0 1 0 0 1 1 statisticsmac learning interface ge 0 0 1 1248 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1321: ...ired Privilege Level view Related Documentation Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 List of Sample Output show ethernet sw...

Page 1322: ... table 57 entries 17 learned VLAN MAC address Type Age Interfaces F2 Flood All members show ethernet switching table F2 00 00 05 00 00 03 Learn 0 ge 0 0 44 0 F2 00 19 e2 50 7d e0 Static Router Linux Flood All members Linux 00 19 e2 50 7d e0 Static Router Linux 00 30 48 90 54 89 Learn 0 ge 0 0 47 0 T1 Flood All members T1 00 00 05 00 00 01 Learn 0 ge 0 0 46 0 T1 00 00 5e 00 01 00 Static Router T1 0...

Page 1323: ...1 00 19 e2 50 ac 00 Learn 0 ge 0 0 15 0 T2 Flood All members T2 00 00 5e 00 01 01 Static Router T2 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T2 00 19 e2 50 7d e0 Static Router T3 Flood All members T3 00 00 5e 00 01 02 Static Router T3 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T3 00 19 e2 50 7d e0 Static Router T4 Flood All members T4 00 00 5e 00 01 03 Static Router T4 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0...

Page 1324: ...ge 0 0 10 0 ge 0 0 0 0 Type Flood Nexthop index 567 VLAN v1 Tag 10 MAC 00 21 59 c6 93 22 Interface Router Type Static Nexthop index 0 VLAN v1 Tag 10 MAC 00 21 59 c9 9a 4e Interface ge 0 0 14 0 Type Learn Age 0 Learned 18 40 50 Nexthop index 564 show ethernet switching user switch show ethernet switching table interface ge 0 0 1 Ethernet switching table 1 unicast entries VLAN MAC address Type Age I...

Page 1325: ...eld Description Field Name Displays global GVRP information GVRP status Displays whether GVRP is enabledor disabled Join The maximum number of milliseconds the interfaces must wait before sending VLAN advertisements Leave The number of milliseconds an interface must wait after receiving a Leave message to remove the interface from the VLAN specified in the message Leaveall The interval at which Le...

Page 1326: ...Interface based configuration Interface GVRP status ge 0 0 0 0 Enabled 1254 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1327: ... Empty messages received on the switch Join Empty received Number of GIP Join In messages received on the switch Join In received Number of GIP Empty messages received on the switch Empty received Number of GIP Leave In messages received on the switch Leave In received Number of GIP Leave Empty messages received on the switch LeaveEmptyreceived Number of GIP Leave All messages received on the swit...

Page 1328: ...n received 12 Empty received 0 Leave In received 0 Leave Empty received 0 Leave All received 0 Join Empty transmitted 0 Join In transmitted 48 Empty transmitted 4 Leave In transmitted 0 Leave Empty transmitted 0 Leave All transmitted 4 1256 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1329: ...namic VLAN creation is Dnabled or Disabled Global MVRP configuration Displays MVRP timer information Interface The interface on which MVRP is configured Join The maximum number of milliseconds the interfaces must wait before sending VLAN advertisements Leave The number of milliseconds an interface must wait after receiving a Leave message to remove the interface from the VLAN specified in the mess...

Page 1330: ...Leave LeaveAll all 200 600 10000 xe 0 1 1 0 200 600 10000 Interface based configuration Interface Status Registration Dynamic VLAN Creation all Disabled Normal Enabled xe 0 1 1 0 Enabled Normal Enabled 1258 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1331: ...f Sample Output show mvrp dynamic vlan memberships on page 1259 Output Fields Table 167 on page 1259 lists the output fields for the showmvrpdynamic vlan memberships command Output fields are listed in the approximate order in which they appear Table 167 show mvrp dynamic vlan memberships Output Fields Field Description Field Name The name of the dynamically created VLAN VLAN Name The interface or...

Page 1332: ...interface xe 0 1 1 0 on page 1261 Output Fields Table168onpage1260liststheoutputfieldsfortheshowmvrpstatistics command Output fields are listed in the approximate order in which they appear Table 168 show mvrp statistics Output Fields Field Description Field Name Number of MRPDU messages received on the switch MRPDU received Number of invalid MRPDU messages received on the switch Invalid PDU recei...

Page 1333: ...n transmitted Number of MRP Leave Empty messages sent from the switch Leave transmitted Number of MRP LeaveAll messages sent from the switch LeaveAll transmitted show mvrp statistics interface xe 0 1 1 0 user switch show mvrp statistics interface xe 0 1 1 0 MVRP statistics MRPDU received 3342 show mvrp statistics interface xe 0 1 1 0 Invalid PDU received 0 New received 2 Join Empty received 1116 J...

Page 1334: ...e order in which they appear Table 169 show redundant trunk group Output Fields Field Description Field Name Name of the redundant trunk port group Group Name Name of an interface belonging to the trunk port group P denotes a primary interface A denotes an active interface Lack of A denotes a blocking interface Interface Operating state of the interface UP or DOWN State Date and time at which the ...

Page 1335: ...successfully authenticated in multiple supplicant mode with dynamic VLAN movement use the showvlans vlan name extensive operational mode command where vlan name is the dynamic VLAN Options none Display information for all VLANs VLAN information is displayed by VLAN name in ascending order brief detail extensive Optional Display the specified level of output dot1q tunneling Optional Display VLANs w...

Page 1336: ...s sort by name on page 1270 show vlans employee vlan range name on page 1270 show vlans summary on page 1271 Output Fields Table 170 on page 1264 lists the output fields for the show vlans command Output fields are listed in the approximate order in which they appear Table 170 show vlans Output Fields Level of Output Field Description Field Name none brief Name of a VLAN Name All levels The 802 1Q...

Page 1337: ...mer VLAN C VLAN ranges associated with this service VLAN S VLAN Customer VLAN Ranges extensive The private VLAN mode for this VLAN Values are Primary Isolated and Community Private VLAN Mode extensive The primary VLAN tag for this secondary VLAN Primary VLAN extensive VLAN index internal to the Junos OS Interrnal Index extensive The manner in which the VLAN was created Values are static and learn ...

Page 1338: ...ry VLANs Number of primary forwarding private VLANs Community VLANs Number of secondary transporting and forwarding private VLANs Isolated VLANs Number of secondary receiving and forwarding private VLANs Dot1q VLANs summary All levels Q in Q VLAN counts Total Total number of Q in Q VLANs on the switch Private VLAN Counts of primary community and isolated Q in Q private VLANs PVLANs Dot1q Tunneled ...

Page 1339: ... ge 0 0 34 0 ge 0 0 33 0 ge 0 0 32 0 ge 0 0 31 0 ge 0 0 30 0 ge 0 0 29 0 ge 0 0 28 0 ge 0 0 27 0 ge 0 0 26 0 ge 0 0 25 0 ge 0 0 19 0 ge 0 0 18 0 ge 0 0 17 0 ge 0 0 16 0 ge 0 0 15 0 ge 0 0 14 0 ge 0 0 13 0 ge 0 0 11 0 ge 0 0 9 0 ge 0 0 8 0 ge 0 0 3 0 ge 0 0 2 0 ge 0 0 1 0 Tagged interfaces None VLAN v0001 Tag 802 1Q Tag 1 Admin state Enabled Description None Primary IP None Number of interfaces 4 A...

Page 1340: ...00 04 untagged 00 00 00 00 00 05 untagged 00 00 00 00 00 06 untagged 00 00 00 00 00 07 untagged show vlans extensive Port based user switch show vlans extensive VLAN default created at Mon Feb 4 12 13 47 2008 Tag None Internal index 0 Admin state Enabled Origin static Description None Dot1q Tunneling Status Enabled Customer VLAN ranges 1 4100 Private VLAN Mode Primary Protocol Port based Layer 3 i...

Page 1341: ...v0002 created at Mon Feb 4 12 13 47 2008 Tag 2 Internal index 2 Admin state Enabled Origin static Description None Protocol Port based Layer 3 interface None IP addresses None STP None RTG None Number of interfaces Tagged 0 Active 0 Untagged 0 Active 0 None VLAN v0003 created at Mon Feb 4 12 13 47 2008 Tag 3 Internal index 3 Admin state Enabled Origin static Description None Protocol Port based La...

Page 1342: ...0 22 0 __employee_121__ 121 ge 0 0 22 0 __employee_122__ 122 ge 0 0 22 0 __employee_123__ 123 ge 0 0 22 0 __employee_124__ 124 ge 0 0 22 0 __employee_125__ 125 ge 0 0 22 0 __employee_126__ 126 ge 0 0 22 0 __employee_127__ 127 ge 0 0 22 0 __employee_128__ 128 ge 0 0 22 0 __employee_129__ 129 ge 0 0 22 0 __employee_130__ 130 ge 0 0 22 0 show vlans employee vlan range name user switch show vlans empl...

Page 1343: ..._130__ 130 ge 0 0 22 0 show vlans summary user switch show vlans summary VLANs summary Total 8 Configured VLANs 5 Internal VLANs 1 Temporary VLANs 0 Dot1q VLANs summary Total 8 Tagged VLANs 2 Untagged VLANs 6 Private VLAN Primary VLANs 2 Community VLANs 2 Isolated VLANs 3 Dot1q Tunneled VLANs summary Total 0 Private VLAN Primary VLANs 0 Community VLANs 0 Isolated VLANs 0 Dynamic VLANs Total 2 Dot1...

Page 1344: ...1272 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1345: ... of Spanning Tree Protocols Configuration on page 1283 Configuring Spanning Tree Protocols on page 1335 Verifying Spanning Tree Protocols on page 1343 Configuration Statements for Spanning Tree Protocols on page 1347 Operational Mode Commands for Spanning Tree Protocols on page 1389 1273 ...

Page 1346: ...1274 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1347: ...ovides faster convergence times than STP However some legacy networks require the slower convergence times of basic STP If your network includes 802 1D 1998 bridges you can remove RSTP and explicitly configure STP See Configuring STP CLI Procedure on page 1336 When you explicitly configure STP the J EX Series switches use the IEEE 802 1D 2004 specification force version 0 This configuration runs a...

Page 1348: ...ol RSTP to provide better reconvergence time than that provided by the base Spanning Tree Protocol STP RSTP identifies certain links as point to point When a point to point link fails the alternate link can transition to the forwarding state Although STP provides basic loop prevention functionality it does not provide fast network convergence when there are topology changes STP s process to determ...

Page 1349: ... incorporated into the IEEE 802 1D 2004 specification VSTP and RSTP can be configured concurrently You can selectively configure up to 253 VLANs using VSTP the remaining VLANs will be configured using RSTP VSTP and RSTP are the only spanning tree protocols that can be configured concurrently on the switch Related Documentation Understanding STP for J EX Series Switches on page 1275 Understanding M...

Page 1350: ...raffic However a user bridge application running on a PC can also generate BPDUs If these BPDUs are picked up by STP applications running on the switch they can trigger STP miscalculations and those miscalculations can lead to network outages Enable BPDU protection on switch interfaces connected to user devices or on interfaces on which no BPDUs are expected such as edge ports If BPDUs are receive...

Page 1351: ...etwork in spanning tree topologies is supported through the exchange of a special type of frame called bridge protocol data unit BPDU Peer STP applications running on the switch interfaces use BPDUs to communicate Ultimately the exchange of BPDUs determines which interfaces block traffic preventing loops and which interfaces become root ports and forward traffic However a blocking interface can tr...

Page 1352: ...Us determines which interfaces block traffic and which interfaces become root ports and forward traffic However a root port elected through this process has the possibility of being wrongly elected A user bridge application running on a PC can generate BPDUs too and interfere with root port election Root protection allows network administrators to manually enforce the root bridge placement in the ...

Page 1353: ...Switches to run one or more Spanning Tree Protocol STP or Rapid Spanning Tree Protocol RSTP instances for each VLAN on which VSTP is enabled For networks with multiple VLANs VSTP improves intelligent tree spanning by defining best paths within the VLANs instead of within the entire network You can configure VSTP for a maximum of 253 VLANs If you need to run a spanning tree protocol on more than 25...

Page 1354: ...1282 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1355: ...cement in Spanning Trees on J EX Series Switches on page 1329 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches J EX Series switches use Rapid Spanning Tree Protocol RSTP to provide a loop free topology RSTP identifies certain links as point to point When a point to point link fails the alternate link can transition to the forwarding state RST...

Page 1356: ...tches See Installing and Connecting a J EX4200 Switch Overview and Topology In this example four J EX Series switches are connected in the topology displayed in Figure 33 on page 1284 to create a loop free topology Figure 33 Network Topology for RSTP The interfaces shown in Table 171 on page 1285 will be configured for RSTP NOTE You can configure RSTP on logical or physical interfaces This example...

Page 1357: ...mera vlan tag 40 VLAN names and tag IDs This configuration example creates a loop free topology between four J EX Series switches using RSTP An RSTP topology contains ports that have specific roles The root port is responsible for forwarding data to the root bridge The alternate port is a standby port for the root port When a root port goes down the alternate port becomes the active root port The ...

Page 1358: ...tp interface ge 0 0 9 0 cost 1000 set protocols rstp interface ge 0 0 9 0 mode point to point set protocols rstp interface ge 0 0 11 0 cost 1000 set protocols rstp interface ge 0 0 11 0 mode point to point Step by Step Procedure To configure interfaces and RSTP on Switch 1 1 Configure the VLANs voice vlan employee vlan guest vlan and camera vlan edit vlans user switch1 set voice vlan description V...

Page 1359: ...rface ge 0 0 11 0 cost 1000 user switch1 rstp interface ge 0 0 11 0 mode point to point Results Check the results of the configuration user switch1 show configuration interfaces ge 0 0 13 unit 0 family ethernet switching port mode trunk vlan members 10 20 30 40 ge 0 0 9 unit 0 family ethernet switching port mode trunk vlan members 10 20 30 40 ge 0 0 11 unit 0 family ethernet switching port mode tr...

Page 1360: ...n description Guest VLAN set vlans guest vlan vlan id 30 set vlans camera vlan description Camera VLAN set vlans camera vlan vlan id 40 set interfaces ge 0 0 14 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 18 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 14 unit 0 family ethernet switching port mode trunk set interfaces ge 0 0 18...

Page 1361: ...user switch2 set ge 0 0 18 unit 0 family ethernet switching vlan members 10 20 30 40 3 Configure the port mode for the interfaces edit interfaces user switch2 set ge 0 0 14 unit 0 family ethernet switching port mode trunk user switch2 set ge 0 0 18 unit 0 family ethernet switching port mode trunk 4 Configure RSTP on the switch edit protocols user switch2 rstp bridge priority 32k user switch2 rstp ...

Page 1362: ...ee vlan vlan id 20 set vlans guest vlan description Guest VLAN set vlans guest vlan vlan id 30 set vlans camera vlan description Camera VLAN set vlans camera vlan vlan id 40 set interfaces ge 0 0 26 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 28 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 24 unit 0 family ethernet switching vl...

Page 1363: ...ly ethernet switching vlan members 10 20 30 40 user switch3 set ge 0 0 28 unit 0 family ethernet switching vlan members 10 20 30 40 user switch3 set ge 0 0 24 unit 0 family ethernet switching vlan members 10 20 30 40 3 Configure the port mode for the interfaces edit interfaces user switch3 set ge 0 0 26 unit 0 family ethernet switching port mode trunk user switch3 set ge 0 0 28 unit 0 family ether...

Page 1364: ... protocols rstp bridge priority 8k interface ge 0 0 26 0 cost 1000 mode point to point interface ge 0 0 28 0 cost 1000 mode point to point interface ge 0 0 24 0 cost 1000 mode point to point bridge priority 8k vlans voice vlan vlan id 10 employee vlan vlan id 20 guest vlan vlan id 30 1292 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1365: ... set protocols rstp interface ge 0 0 23 0 mode point to point set protocols rstp interface ge 0 0 19 0 cost 1000 set protocols rstp interface ge 0 0 19 0 mode point to point Step by Step Procedure To configure interfaces and RSTP on Switch 4 1 Configure the VLANs voice vlan employee vlan guest vlan and camera vlan edit vlans user switch4 set voice vlan description Voice VLAN user switch4 set voice...

Page 1366: ...h4 rstp interface ge 0 0 19 0 mode point to point Results Check the results of the configuration user switch4 show configuration interfaces ge 0 0 23 unit 0 family ethernet switching port mode trunk vlan members 10 20 30 40 ge 0 0 19 unit 0 family ethernet switching port mode trunk vlan members 10 20 30 40 protocols rstp bridge priority 16k interface ge 0 0 23 0 cost 1000 mode point to point inter...

Page 1367: ... port ID bridge ID Cost ge 0 0 13 0 128 527 128 525 16384 0019e25040e0 1000 BLK ALT ge 0 0 9 0 128 529 128 513 32768 0019e2503d20 1000 BLK ALT ge 0 0 11 0 128 531 128 513 8192 0019e25051e0 1000 FWD ROOT Meaning Refer to the topology in Figure 33 on page 1284 The operational mode command show spanning tree interface shows that ge 0 0 13 0 is in a forwarding state The other interfaces on Switch 1 ar...

Page 1368: ...y in Figure 33 on page 1284 The operational mode command show spanning tree interface shows that no interface is the root interface Verifying RSTP Configuration on Switch 4 Purpose Verify the RSTP configuration on Switch 4 Action Use the operational mode commands user switch4 show spanning tree interface Spanning tree interface parameters for instance 0 Interface Port ID Designated Designated Port...

Page 1369: ...1303 Configuring MSTP on Switch 3 on page 1305 Configuring MSTP on Switch 4 on page 1308 Verification on page 1311 Requirements This example uses the following hardware and software components Four J EX Series switches Before you configure the switches for MSTP be sure you have Installed the four switches See Connecting and Configuring a J EX Series Switch J Web Procedure on page 163 Performed the...

Page 1370: ...pology for Configuring MSTP on J EX Series Switches Settings Property The following ports on Switch 1 are connected in this way ge 0 0 9 is connected to Switch 2 ge 0 0 13 is connected to Switch 4 ge 0 0 11 is connected to Switch 3 Switch 1 The following ports on Switch 2 are connected in this way ge 0 0 14 is connected to Switch 1 ge 0 0 18 is connected to Switch 3 Switch 2 1298 Dell PowerConnect...

Page 1371: ... a standby port for the root port When a root port goes down the alternate port becomes the active root port The designated port forwards data to the downstream network segment or device The backup port is a backup port for the designated port When a designated port goes down the backup port becomes the active designated port and starts forwarding data In this example one MSTP region region1 conta...

Page 1372: ... set protocols mstp interface ge 0 0 9 0 cost 1000 set protocols mstp interface ge 0 0 9 0 mode point to point set protocols mstp interface ge 0 0 11 0 cost 1000 set protocols mstp interface ge 0 0 11 0 mode point to point set protocols mstp msti 1 bridge priority 16k set protocols mstp msti 1 vlan 10 20 set protocols mstp msti 1 interface ge 0 0 11 0 cost 4000 set protocols mstp msti 2 bridge pri...

Page 1373: ... user switch1 mstp interface ge 0 0 9 0 mode point to point user switch1 mstp interface ge 0 0 11 0 cost 4000 user switch1 mstp interface ge 0 0 11 0 mode point to point user switch1 mstp msti 1 bridge priority 16k user switch1 mstp msti 1 vlan 10 20 user switch1 mstp msti 1 interface ge 0 0 11 0 cost 4000 user switch1 mstp msti 2 bridge priority 8k user switch1 mstp msti 2 vlan 30 40 Results Chec...

Page 1374: ...ace ge 0 0 9 0 cost 1000 mode point to point interface ge 0 0 11 0 cost 4000 mode point to point msti 1 bridge priority 16k vlan 10 20 interface ge 0 0 11 0 cost 4000 msti 2 bridge priority 8k vlan 30 40 vlans voice vlan vlan id 10 employee vlan vlan id 20 guest vlan vlan id 30 camera vlan vlan id 40 1302 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1375: ...et protocols mstp interface ge 0 0 18 0 mode point to point set protocols mstp msti 1 bridge priority 32k set protocols mstp msti 1 vlan 10 20 set protocols mstp msti 2 bridge priority 4k set protocols mstp msti 2 vlan 30 40 Step by Step Procedure To configure interfaces and MSTP on Switch 2 1 Configure the VLANs voice vlan employee vlan guest vlan and camera vlan edit vlans user switch2 set voice...

Page 1376: ... 32k user switch2 mstp msti 1 vlan 10 20 user switch2 mstp msti 2 bridge priority 4k user switch2 mstp msti 2 vlan 30 40 Results Check the results of the configuration user switch2 show configuration interfaces ge 0 0 14 unit 0 family ethernet switching port mode trunk vlan members 10 members 20 members 30 members 40 ge 0 0 18 unit 0 family ethernet switching port mode trunk vlan members 10 member...

Page 1377: ...nterfaces ge 0 0 26 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 28 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 24 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 26 unit 0 family ethernet switching port mode trunk set interfaces ge 0 0 28 unit 0 family ethernet switching port mode trunk set inte...

Page 1378: ... ethernet switching vlan members 10 20 30 40 3 Configure the port mode for the interfaces edit interfaces user switch3 set ge 0 0 26 unit 0 family ethernet switching port mode trunk user switch3 set ge 0 0 28 unit 0 family ethernet switching port mode trunk user switch3 set ge 0 0 24 unit 0 family ethernet switching port mode trunk 4 Configure MSTP on the switch including the two MSTIs edit protoc...

Page 1379: ...0 ge 0 0 24 unit 0 family ethernet switching port mode trunk vlan members 10 members 20 members 30 members 40 protocols mstp configuration name region1 bridge priority 8k interface ge 0 0 26 0 cost 1000 mode point to point interface ge 0 0 28 0 cost 1000 mode point to point interface ge 0 0 24 0 cost 1000 mode point to point msti 1 1307 Chapter 65 Examples of Spanning Tree Protocols Configuration ...

Page 1380: ...camera vlan vlan id 40 set interfaces ge 0 0 23 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 19 unit 0 family ethernet switching vlan members 10 20 30 40 set interfaces ge 0 0 23 unit 0 family ethernet switching port mode trunk set interfaces ge 0 0 19 unit 0 family ethernet switching port mode trunk set protocols mstp configuration name region1 set protocols mst...

Page 1381: ...e for the interfaces edit interfaces user switch4 set ge 0 0 23 unit 0 family ethernet switching port mode trunk user switch4 set ge 0 0 19 unit 0 family ethernet switching port mode trunk 4 Configure MSTP on the switch including the two MSTIs edit protocols user switch4 mstp configuration name region1 user switch4 mstp bridge priority 16k user switch4 mstp interface all cost 1000 user switch4 mst...

Page 1382: ... 16k interface ge 0 0 23 0 cost 1000 mode point to point interface ge 0 0 19 0 cost 1000 mode point to point msti 1 bridge priority 16k vlan 10 20 msti 2 bridge priority 32k vlan 30 40 vlans voice vlan vlan id 10 employee vlan vlan id 20 guest vlan vlan id 30 camera vlan vlan id 40 1310 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1383: ...stance 1 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0 0 13 0 128 527 128 525 16385 0019e25040e0 1000 FWD ROOT ge 0 0 9 0 128 529 128 513 32769 0019e2503d20 1000 BLK ALT ge 0 0 11 0 128 531 128 513 4097 0019e25051e0 4000 BLK ALT Spanning tree interface parameters for instance 2 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0...

Page 1384: ...g tree interface displays spanning tree domain information such as the designated port and the port roles The operational mode command show spanning tree bridge displays the spanning tree domain information at either the bridge level or interface level If the optional interface name is omitted all interfaces in the spanning tree domain are displayed Verifying MSTP Configuration on Switch 2 Purpose...

Page 1385: ...t 19 Message age 0 Number of topology changes 1 Time since last topology change 782 seconds Local parameters Bridge ID 32768 00 19 e2 50 3d 20 Extended system ID 0 Internal instance ID 0 STP bridge parameters for MSTI 1 MSTI regional root 4097 00 19 e2 50 51 e0 Root cost 1000 Root port ge 0 0 18 0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Hop count 19 Local parameters Br...

Page 1386: ...9e25051e0 1000 FWD DESG ge 0 0 28 0 128 515 128 515 4097 0019e25051e0 1000 FWD DESG ge 0 0 24 0 128 517 128 517 4097 0019e25051e0 1000 FWD DESG Spanning tree interface parameters for instance 2 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0 0 26 0 128 513 128 531 8194 0019e25044e0 1000 BLK ALT ge 0 0 28 0 128 515 128 519 4098 0019e2503d20 1000 FWD ROOT ge 0 0 2...

Page 1387: ...ed Verifying MSTP Configuration on Switch 4 Purpose Verify the MSTP configuration on Switch 4 Action Use the operational mode commands user switch4 show spanning tree interface Spanning tree interface parameters for instance 0 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0 0 23 0 128 523 128 517 8192 0019e25051e0 1000 FWD ROOT ge 0 0 19 0 128 525 128 525 16384 ...

Page 1388: ...D 1 STP bridge parameters for MSTI 2 MSTI regional root 4098 00 19 e2 50 3d 20 Root cost 2000 Root port ge 0 0 19 0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Hop count 18 Local parameters Bridge ID 32770 00 19 e2 50 40 e0 Extended system ID 0 Internal instance ID 2 Meaning The operational mode command show spanning tree interface displays spanning tree domain information...

Page 1389: ...ies switches Overview and Topology A loop free network is supported through the exchange of a special type of frame called bridge protocol data unit BPDU Receipt of BPDUs on certain interfaces in an STP RSTP or MSTP topology however can lead to network outages by triggering an STP misconfiguration To prevent such outages enable BPDU protection on those interfaces that should not receive BPDUs Enab...

Page 1390: ...Layer This configuration example is using an RSTP topology You also can configure BPDU protection for STP or MSTP topologies at the edit protocols mstp stp hierarchy level Configuration To configure BPDU protection on two access interfaces CLI Quick Configuration To quickly configure BPDU protection on Switch 2 copy the following commands and paste them into the switch terminal window edit set pro...

Page 1391: ...e being received from the PCs connected to interface ge 0 0 5 and interface ge 0 0 6 confirm the interface state Action Use the operational mode command user switch show spanning tree interface Spanning tree interface parameters for instance 0 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0 0 0 0 128 513 128 513 32768 0019e2503f00 20000 BLK DIS ge 0 0 1 0 128 51...

Page 1392: ...faces have transitioned to a BPDU inconsistent state The BPDU inconsistent state makes the interfaces block and prevents them from forwarding traffic Disabling the BPDU protection configuration on an interface does not unblock the interface If the disable timeout statement has been included in the BPDU configuration the interface automatically returns to service after the timer expires Otherwise u...

Page 1393: ...and software components One J EX Series switch in an RSTP topology One J EX Series switch that is not in a spanning tree topology Before you configure the interface for BPDU protection be sure you have RSTP operating on Switch 1 Disabled RSTP on Switch 2 NOTE By default RSTP is enabled on all J EX Series switches Overview and Topology A loop free network is supported through the exchange of a spec...

Page 1394: ... interfaces will transition to a blocking state if BPDUs are received Figure 36 BPDU Protection Topology Table 174 on page 1322 shows the components that will be configured for BPDU protection Table174 ComponentsoftheTopologyforConfiguringBPDUProtectiononJ EXSeriesSwitches Settings Property Switch 1 is connected to Switch 2 through a trunk interface Switch 1 is configured for RSTP Switch 1 Distrib...

Page 1395: ... options user switch set bpdu block interface ge 0 0 5 user switch set bpdu block interface ge 0 0 6 Results Check the results of the configuration user switch show ethernet switching options bpdu block interface ge 0 0 5 0 interface ge 0 0 6 0 Verification To confirm that the configuration is working properly perform these tasks Displaying the Interface State Before BPDU Protection Is Triggered o...

Page 1396: ...a BPDU inconsistent state The BPDU inconsistent state makes the interfaces shut down and prevents them from forwarding traffic Disabling the BPDU protection configuration on an interface does not unblock the interface If the disable timeout statement has been included in the BPDU configuration the interface automatically returns to service after the timer expires Otherwise use the operational mode...

Page 1397: ...ple uses the following hardware and software components Three J EX Series switches in an RSTP topology Before you configure the interface for loop protection be sure you have RSTP operating on the switches NOTE By default RSTP is enabled on all J EX Series switches Overview and Topology A loop free network in spanning tree topologies is supported through the exchange of a special type of frame cal...

Page 1398: ... are being sent from the root bridge on Switch 1 to both of these interfaces This example shows how to configure loop protection on interface ge 0 0 6 to prevent it from transitioning from a blocking state to a forwarding state and creating a loop in the spanning tree topology Figure 37 Network Topology for Loop Protection Table 175 on page 1326 shows the components that will be configured for loo...

Page 1399: ...onfigure loop protection 1 Configure interface ge 0 0 6 on Switch 3 edit protocols rstp user switch set interface ge 0 0 6 bpdu timeout action block Results Check the results of the configuration user switch show configuration protocols rstp interface ge 0 0 6 0 bpdu timeout action block Verification To confirm that the configuration is working properly perform these tasks Displaying the Interface...

Page 1400: ... 0 0 1 0 128 514 128 514 32768 0019e2503f00 20000 BLK DIS ge 0 0 2 0 128 515 128 515 32768 0019e2503f00 20000 BLK DIS ge 0 0 3 0 128 516 128 516 32768 0019e2503f00 20000 FWD DESG ge 0 0 4 0 128 517 128 517 32768 0019e2503f00 20000 FWD DESG ge 0 0 5 0 128 518 128 518 32768 0019e2503f00 20000 FWD DESG ge 0 0 6 0 128 519 128 519 32768 0019e2503f00 20000 BLK DIS Loop Incon output truncated Meaning The...

Page 1401: ...u configure the interface for root protection be sure you have RSTP operating on the switches NOTE By default RSTP is enabled on all J EX Series switches Overview and Topology Peer STP applications running on switch interfaces exchange a special type of frame called a bridge protocol data unit BPDU Switches communicate interface information using BPDUs to create a loop free topology that ultimatel...

Page 1402: ...ies switches are displayed in Figure 38 on page 1330 In this example they are configured for RSTP and create a loop free topology Interface ge 0 0 7 on Switch 1 is a designated port on an administrative boundary It connects to Switch 4 Switch 3 is the root bridge Interface ge 0 0 6 on Switch 1 is the root port This example shows how to configure root protection on interface ge 0 0 7 to prevent it ...

Page 1403: ...ternate port is a standby port for the root port When a root port goes down the alternate port becomes the active root port The designated port forwards data to the downstream network segment or device This configuration example uses an RSTP topology However you also can configure root protection for STP or MSTP topologies at the edit protocols mstp stp hierarchy level Configuration To configure r...

Page 1404: ...runcated Meaning The output from the operational mode command show spanning tree interface shows that ge 0 0 7 0 is a designated port in a forwarding state Verifying That Root Protection Is Working on the Interface Purpose A configuration change takes place on Switch 4 A smaller bridge priority on the Switch 4 causes it to send superior BPDUs to interface ge 0 0 7 Receipt of superior BPDUs on inte...

Page 1405: ...n Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Example Configuring Loop Protection to Prevent Interfaces from Transitioning from Blocking to Forwarding in a Spanning Tree on J EX Series Switches on page 1325 Example Configuring BPDU Protection on STP Interfaces to Prevent STP Miscalculations on J EX Series Switches on page 13...

Page 1406: ...1334 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1407: ...n that triggered the BPDUs being sent to an interface is fixed in the topology the interface can be unblocked and returned to service To unblock an interface and return it to service using the CLI Automatically unblock an interface by configuring a timer that expires here the interface is ge 0 0 6 edit ethernet switching options user switch set bpdu block disable timeout 30 interface ge 0 0 6 Manu...

Page 1408: ...er switch commit Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Understanding STP for J EX Series Switches on page 1275 Configuring Spanning Tree Protocols J Web Procedure J EX Series switches provide Layer 2 loop prevention through Spanning Tree Protocol STP Rapid Spanning Tree Protocol RSTP Multiple Spanning Tree Protocol MSTP and VLAN Span...

Page 1409: ...figuration Table 177 Spanning Tree Protocol Configuration Parameters Your Action Function Field General None Specifies the spanning tree protocol type STP MSTP or RSTP Protocol Name To enable this option select the check box Disables spanning tree protocol on the interface Disable To enable this option select the check box Specifies BPDU protection on all edge interfaces on the switch BPDU Protect...

Page 1410: ...ce Name Type a value Specifies the link cost to determine which bridge is the designated bridge and which interface is the designated interface Cost Select a value from the list Specifies the interface priority to determine which interface is elected as the root port Priority To enable the option select the check box Disables the spanning tree protocol on the interface Disable Port To enable the o...

Page 1411: ...D and click Edit To delete an MSTI from the configuration select the MSTI ID and slick Remove Specifies a name an MSTI ID for the MST instance MSTI Name Select a value from the list Specifies the bridge priority The bridge priority determines which bridge is elected as the root bridge If two bridges have the same path cost to the root bridge the bridge priority determines which bridge becomes the ...

Page 1412: ...otection on STP Interfaces to Prevent STP Miscalculations on J EX Series Switches on page 1317 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Configuring VLAN Spanning Tree Protocol CLI Procedure VLAN Spanning Tree Protocol VSTP allows ...

Page 1413: ... the switch has more than 253 VLANs If the set vstp vlan all statement is used to enable VSTP on a switch with more than 253 VLANs the configuration cannot be committed To enable VSTP on a VLAN using a single VLAN ID edit protocols user switch set vstp vlan vlan id To enable VSTP on a VLAN using a single VLAN name edit protocols user switch set vstp vlan vlan name Related Documentation Understandi...

Page 1414: ...1342 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1415: ... tree bridge Meaning Table 178 on page 1343 summarizes the spanning tree protocol parameters Table 178 Summary of Spanning Tree Protocols Output Fields Values Field Bridge Parameters An internally generated identifier Context ID Spanning tree protocol type enabled Enabled Protocol Bridge ID of the elected spanning tree root bridge The bridge ID consists of a configurable bridge priority and the MA...

Page 1416: ... the designated bridge to which the interface is attached Designated Bridge ID Configured cost for the interface Port Cost STP port state Forwarding FWD Blocking BLK Listening Learning Disabled Port State MSTP or RSTP port role Designated DESG backup BKUP alternate ALT or root Role Spanning Tree Statistics of Interface Interface for which statistics is being displayed Interface Total number of BPD...

Page 1417: ...egions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 1345 Chapter 67 Verifying Spanning Tree Protocols ...

Page 1418: ...1346 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1419: ...authenticator authentication profile name profile name interface all interface names disable guest vlan vlan id vlan name mac radius restrict maximum requests number no reauthentication quiet period seconds reauthentication interval seconds retries number server fail deny permit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single singl...

Page 1420: ...sable interface interface name immediate leave interface interface name group limit limit multicast router interface static group ip address proxy query interval seconds query last member interval seconds query response interval seconds robust count number lldp disable advertisement interval seconds hold multiplier number interface all interface name disable traceoptions file filename files number...

Page 1421: ...loose mstp disable bpdu block on edge bridge priority priority configuration name name forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revis...

Page 1422: ...anagement action profile profile name default actions interface down linktrace age 30m 10m 1m 30s 10s path database size path database size maintenance domain domain name level number mip half function none default explicit name format character string none dns mac 2oct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep...

Page 1423: ... frame period count frame period summary count symbol period count negotiation options allow remote loopback no allow link events rstp disable bpdu block on edge bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename file...

Page 1424: ...able bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout acti...

Page 1425: ...rstanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch on pag...

Page 1426: ...uting To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series...

Page 1427: ...on routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Example Configuring Loop...

Page 1428: ...ent to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 clear ethernet switching bpdu error on page 1390 Example Configuring BPDU Protection on non STP Interfaces to Prevent STP Miscalculations on J EX Series Switches on page 1321 Unblocking an Interface That Receives BPDUs in Error CLI Procedure on page 1335 Example Configuri...

Page 1429: ... the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 clear ethernet switching bpdu error on page 1390 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Example Configurin...

Page 1430: ...s statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page...

Page 1431: ...bridge becomes the designated bridge for a LAN segment Default 32 768 Options priority Bridge priority It can be set only in increments of 4096 Range 0 through 61 440 Default 32 768 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree in...

Page 1432: ...w this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on...

Page 1433: ...link cost to control which bridge is the designated bridge and which interface is the designated interface Default The link cost is determined by the link speed Options cost Link cost associated with the port Range 1 through 200 000 000 Default Link cost is determined by the link speed Required Privilege Level routing To view this statement in the configuration routing control To add this statemen...

Page 1434: ... switch or on a specific interface Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Conver...

Page 1435: ...0 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Netwo...

Page 1436: ...faces immediately transition to a forwarding state Default Edge interfaces are not enabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series...

Page 1437: ...ocol instead of the default protocol RSTP Options stp Spanning Tree Protocol Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Understanding VSTP for J EX Series Switches on page 1281 1365 Chapter 68 Configurati...

Page 1438: ... remains in the listening and learning states Range 4 through 30 seconds Default 15 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Serie...

Page 1439: ...nfiguration BPDUs Range 1 through 10 seconds Default 2 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Examp...

Page 1440: ... add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Example Configuring BPDU Protection on non ST...

Page 1441: ...face name Name of a Gigabit Ethernet interface The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX ...

Page 1442: ... seconds Default 20 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Example Configuring Faster Convergence a...

Page 1443: ...of hops the BPDU can be forwarded Range 1 through 255 hops Default 20 hops Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on pag...

Page 1444: ...point to point For a half duplex link the default link mode is shared Options mode Link mode point to point Link is point to point shared Link is shared media Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Ex...

Page 1445: ...s Default MSTI is disabled Options msti id MSTI identifier Range 1 through 4094 The Common Instance Spanning Tree CIST is always MSTI 0 The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tre...

Page 1446: ...ld readable flag flag revision level revision level Hierarchy Level edit protocols Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure Multiple Spanning Tree Protocol MSTP MSTP is defined in the IEEE 802 1Q 2003 specification and is used to create a loop free topology in networks with multiple spanning tree regions The statements are...

Page 1447: ...s to a root prevented STP state inconsistency state and the interface is blocked This blocking prevents a bridge that should not be the root bridge from being elected the root bridge When the bridge stops receiving superior STP BPDUs on the root protected interface interface traffic is no longer blocked Required Privilege Level routing To view this statement in the configuration routing control To...

Page 1448: ...Default The default value is 128 Options priority Interface priority The interface priority must be set in increments of 16 Range 0 through 240 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuri...

Page 1449: ...sion level Revision number of the MSTP region configuration Range 0 through 65535 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches...

Page 1450: ...rter convergence times than those provided by basic Spanning Tree Protocol STP VSTP and RSTP can be configured concurrently You can selectively configure up to 253 VLANs using VSTP the remaining VLANs will be configured using RSTP VSTP and RSTP are the only spanning tree protocols that can be configured concurrently on the switch See Configuring VSTP CLI Procedure for more information on configuri...

Page 1451: ...ted Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Example Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Understanding RSTP for J EX Series Switches on page 1276 1379 Chapter 68 Configuration Statements for Spanning Tree Protocols ...

Page 1452: ...ation runs a version of RSTP that is compatible with the classic basic STP defined in the IEEE 802 1D 1998 specification The remaining statements are explained separately Default STP is disabled by default RSTP is enabled on all Ethernet switching ports Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Do...

Page 1453: ...place STP tracing output in the file var log stp log files number Optional Maximum number of trace files When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you must also specify a maximum file size with...

Page 1454: ...tional Prevent aney user from reading the log file replace Optional Replace an existing trace file if there is one Default If you do not include this option tracing output is appended to an existing trace file size size Optional Maximum size of each trace file in kilobytes KB or megabytes MB When a trace file named trace file reaches this size it is renamed trace file 0 When the trace file again r...

Page 1455: ...Configuring Faster Convergence and Improving Network Stability with RSTP on J EX Series Switches on page 1283 Understanding MSTP for J EX Series Switches on page 1277 Understanding RSTP for J EX Series Switches on page 1276 Understanding STP for J EX Series Switches on page 1275 Understanding VSTP for J EX Series Switches on page 1281 1383 Chapter 68 Configuration Statements for Spanning Tree Prot...

Page 1456: ...Spanning Tree Instance MSTI TIP To display a list of all configured VLANs on the system including VLANs that are configured but not committed type after vlan or vlans in your configuration mode command line Note that only one VLAN is displayed for a VLAN range Default Not enabled Options vlan id Numeric VLAN identifier vlan name Name of the VLAN The remaining statements are explained separately Re...

Page 1457: ... Understanding MSTP for J EX Series Switches on page 1277 1385 Chapter 68 Configuration Statements for Spanning Tree Protocols ...

Page 1458: ...n Configure VSTP VLAN parameters TIP To display a list of all configured VLANs on the system including VLANs that are configured but not committed type after vlan or vlans in your configuration mode command line Note that only one VLAN is displayed for a VLAN range Options all All VLANs vlan id Numeric VLAN identifier vlan name Name of the VLAN The remaining statements are explained separately Req...

Page 1459: ... 2 networks on a per VLAN basis You cannot commit a configuration that uses VSTP on more than 253 VLANs If there are more than 253 VLANs on your switch you must use the vlan statement to specify which VLANs or VLAN groups should use VSTP and the total number of VLANs using VSTP cannot exceed 253 You also cannot use the vlan all option to configure VSTP when your switch has more than 253 VLANs Run ...

Page 1460: ...outing control To add this statement to the configuration Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Configuring VLAN Spanning Tree Protocol CLI Procedure on page 1340 Understanding VSTP for J EX Series Switches on page 1281 1388 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1461: ...CHAPTER 69 Operational Mode Commands for Spanning Tree Protocols 1389 ...

Page 1462: ... interface Required Privilege Level clear Related Documentation show spanning tree statistics on page 1416 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 List of Sample Output clear ethernet switching bpdu error interface ge 0 0 1 0 on page 1390 clear ethernet switching clear ethernet switching user switch clear ethernet switching bpdu error interface ge 0...

Page 1463: ... Options none Reset STP counters for all interfaces for all routing instances interface interface name Optional Clear STP statistics for the specified interface only logical system logical system name Optional Clear STP statistics on a particular logical system Required Privilege Level clear Related Documentation show spanning tree statistics on page 1414 List of Sample Output clear stp statistics...

Page 1464: ...or which statistics should be reset logical unit number Optional The logical unit number of the interface Required Privilege Level clear Related Documentation show spanning tree bridge on page 1398 show spanning tree interface on page 1407 Understanding STP for J EX Series Switches on page 1275 List of Sample Output clear spanning tree statistics on page 1392 Output Fields This command produces no...

Page 1465: ...an id Optional Display STP bridge information for the specified VLAN Required Privilege Level view List of Sample Output show spanning tree bridge routing instance on page 1394 show spanning tree bridge msti on page 1395 show spanning tree bridge vlan id MSTP on page 1395 show spanning tree bridge VSTP on page 1396 show spanning tree bridge vlan id VSTP on page 1397 Output Fields Table 179 on page...

Page 1466: ...ed in the MSTP region Hop count Number of elapsed seconds since the most recent BPDU was received Message age Total number of STP topology changes detected since the routing device last booted Number of topology changes Number of elapsed seconds since the most recent topology change Time since last topology change Locally configured bridge ID The bridge ID consists of a configurable bridge priorit...

Page 1467: ...seconds Hop count 18 Number of topology changes 1 Time since last topology change 1191 seconds Local parameters Bridge ID 32770 00 90 69 0b 7f d1 Extended system ID 1 show spanning tree bridge msti user host show spanning tree bridge msti 1 routing instance vs1 detail STP bridge parameters Routing instance name vs1 Enabled protocol MSTP STP bridge parameters for MSTI 1 MSTI regional root 32769 00 ...

Page 1468: ...me 2 seconds Maximum age 20 seconds Forward delay 15 seconds Message age 0 Number of topology changes 58 Time since last topology change 14127 seconds Local parameters Bridge ID 28672 00 90 69 0b 3f d0 Extended system ID 0 STP bridge parameters for bridge VLAN 10 Root ID 28672 00 90 69 0b 3f d0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Message age 0 Number of topology ch...

Page 1469: ...AL Enabled protocol RSTP STP bridge parameters for VLAN 10 Root ID 28672 00 90 69 0b 3f d0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Message age 0 Number of topology changes 58 Time since last topology change 14127 seconds Local parameters Bridge ID 28672 00 90 69 0b 3f d0 Extended system ID 0 1397 Chapter 69 Operational Mode Commands for Spanning Tree Protocols ...

Page 1470: ...ier from 1 through 4094 Required Privilege Level view Related Documentation show spanning tree interface on page 1407 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Understanding STP for J EX Series Switches on page 1275 Understanding RSTP for J EX Series Switches on page 1276 Understanding MSTP for J EX Series Switches on page 1277 Understanding VSTP ...

Page 1471: ... listening and learning states before transitioning to the forwarding state Forward delay Configured maximum number of hops a BPDU can be forwarded in the MSTP region Hop count Number of seconds elapsed since the most recent BPDU was received Message age Total number of STP topology changes detected since the switch last booted Number of topology changes Number of seconds elapsed since the most re...

Page 1472: ...ator ge 0 0 1 0 Topology change last recvd from 00 11 f2 56 df 4c Local parameters Bridge ID 32768 00 11 f2 57 1c 00 Extended system ID 0 Internal instance ID 0 STP bridge parameters for MSTI 10 MSTI regional root 32778 00 11 f2 56 df 40 Root cost 20000 Root port ge 0 0 1 0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Hop count 19 Number of topology changes 1 Time since las...

Page 1473: ...xt ID 0 Enabled protocol RSTP Root ID 32768 00 19 e2 50 95 a0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Message age 0 Number of topology changes 0 Local parameters Bridge ID 32768 00 19 e2 50 95 a0 Extended system ID 0 Internal instance ID 0 Hello time 2 seconds Maximum age 20 seconds Forward delay 15 seconds Path cost method 32 bit 1401 Chapter 69 Operational Mode Comma...

Page 1474: ...ion for the specified VLAN Required Privilege Level view List of Sample Output show spanning tree interface on page 1403 show spanning tree interface detail on page 1404 show spanning tree interface msti on page 1405 show spanning tree interface vlan id 101 on page 1406 show spanning tree interface VSTP on page 1406 show spanning tree interface vlan id VSTP on page 1406 Output Fields Table181onpag...

Page 1475: ...D Cost ae1 128 1 128 1 32768 0090690b47d1 1000 FWD DESG ge 2 1 2 128 2 128 2 32768 0090690b47d1 20000 FWD DESG ge 2 1 5 128 3 128 3 32768 0090690b47d1 29999 FWD DESG ge 2 2 1 128 4 128 26 32768 0013c39ec880 20000 FWD ROOT xe 9 2 0 128 5 128 5 32768 0090690b47d1 2000 FWD DESG xe 9 3 0 128 6 128 6 32768 0090690b47d1 2000 FWD DESG Spanning tree interface parameters for instance 1 Interface Port ID De...

Page 1476: ...t NONEDGE Boundary port No Interface name ge 2 1 5 Port identifier 128 3 Designated port ID 128 3 Port cost 29999 Port state Forwarding Designated bridge ID 32768 00 90 69 0b 47 d1 Port role Designated Link type Pt Pt NONEDGE Boundary port No Interface name ge 2 2 1 Port identifier 128 4 Designated port ID 128 26 Port cost 20000 Port state Forwarding Designated bridge ID 32768 00 13 c3 9e c8 80 Po...

Page 1477: ...29999 Port state Forwarding Designated bridge ID 32768 00 90 69 0b 47 d1 Port role Designated Link type Pt Pt NONEDGE Boundary port No Interface name ge 2 2 1 Port identifier 128 4 Designated port ID 128 26 Port cost 20000 Port state Forwarding Designated bridge ID 32768 00 13 c3 9e c8 80 Port role Root Link type Pt Pt NONEDGE Boundary port No show spanning tree interface msti user host show spann...

Page 1478: ...ance 0 Interface Port ID Designated Designated Cost State Role port ID bridge ID ge 1 0 1 128 1 128 1 28672 0090690b3fe0 20000 FWD DESG ge 1 0 2 128 2 128 2 28672 0090690b3fe0 20000 FWD DESG Spanning tree interface parameters for VLAN 10 Interface Port ID Designated Designated Cost State Role port ID bridge ID ge 1 0 1 128 1 128 1 28672 0090690b3fe0 20000 FWD DESG ge 1 0 2 128 2 128 2 28672 009069...

Page 1479: ...om 1 through 4094 for an MSTI vlan id vlan id Optional For MSTP interfaces display interface information for the specified VLAN Specify a value from 0 through 4094 Required Privilege Level view Related Documentation show spanning tree bridge on page 1398 Example Configuring Network Regions for VLANs with MSTP on J EX Series Switches on page 1297 Understanding STP for J EX Series Switches on page 1...

Page 1480: ...e user switch show spanning tree interface Spanning tree interface parameters for instance 0 show spanning tree interface Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 0 0 0 0 128 513 128 513 8192 0019e2500340 1000 FWD DESG ge 0 0 2 0 128 515 128 515 8192 0019e2500340 1000 BLK DIS ge 0 0 4 0 128 517 128 517 8192 0019e2500340 1000 FWD DESG ge 0 0 23 0 128 536 128...

Page 1481: ... 0 Port identifier 128 625 Designated port ID 128 625 Port cost 20000 Port state Blocking Designated bridge ID 32768 00 19 e2 50 95 a0 Port role Disabled Link type Pt Pt EDGE Boundary port NA Interface name ge 1 0 1 0 Port identifier 128 626 Designated port ID 128 626 Port cost 20000 Port state Blocking Designated bridge ID 32768 00 19 e2 50 95 a0 Port role Disabled Link type Pt Pt NONEDGE Boundar...

Page 1482: ...ort NA output truncated show spanning tree interface ge 1 0 0 user switch show spanning tree interface ge 1 0 0 Interface Port ID Designated Designated Port State Role port ID bridge ID Cost ge 1 0 0 0 128 625 128 625 32768 0019e25095a0 20000 BLK DIS 1410 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1483: ...1 lists the output fields for the show spanning tree mstp configuration command Output fields are listed in the approximate order in which they appear Table 183 show spanning tree mstp configuration Output Fields Field Description Field Name Internally generated identifier Context id MSTP region name carried in the MSTP BPDUs Region name Revision number of the MSTP configuration Revision Numerical...

Page 1484: ...MSTI Member VLANs 0 0 99 101 199 201 4094 1 100 2 200 1412 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1485: ... they appear Table 184 show spanning tree mstp configuration Output Fields Field Description Field Name Internally generated identifier Context identifier MSTP region name carried in the MSTP BPDUs Region name Revision number of the MSTP configuration Revision Numerical value derived from the VLAN to instance mapping table Configuration digest MSTI instance identifier MSTI Identifiers for VLANs as...

Page 1486: ...e Output show spanning tree statistics routing instance on page 1415 show spanning tree statistics interface on page 1415 Output Fields Table185onpage1414liststheoutputfieldsfortheshowspanning treestatistics command Output fields are listed in the approximate order in which they appear Table 185 show spanning tree statistics Output Fields Field Description Field Name Type of message being counted ...

Page 1487: ...panning tree statistics routing instance BPDUs received 537 BPDUs sent in last 5 secs 5 BPDUs received in last 5 secs 27 show spanning tree statistics interface user host show spanning tree statistics interface ge 11 1 4 routing instance vs1 detail Interface BPDUs sent BPDUs received Next BPDU transmission ge 11 1 4 7 190 0 1415 Chapter 69 Operational Mode Commands for Spanning Tree Protocols ...

Page 1488: ...age 1297 Understanding STP for J EX Series Switches on page 1275 Understanding RSTP for J EX Series Switches on page 1276 Understanding MSTP for J EX Series Switches on page 1277 Understanding VSTP for J EX Series Switches on page 1281 List of Sample Output show spanning tree statistics interface on page 1417 Output Fields Table186onpage1416liststheoutputfieldsfortheshowspanning treestatisticscomm...

Page 1489: ...ow spanning tree statistics interface user switch show spanning tree statistics interface ge 0 0 4 Interface BPDUs sent BPDUs received Next BPDU transmission ge 0 0 4 7 190 0 1417 Chapter 69 Operational Mode Commands for Spanning Tree Protocols ...

Page 1490: ...1418 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1491: ...ls Overview on page 1421 Configuring Layer 3 Protocols on page 1431 Verifying Layer 3 Protocols Configuration on page 1455 Configuration Statements for Layer 3 Protocols on page 1465 Operational Commands for Layer 3 Protocols on page 1747 1419 ...

Page 1492: ...1420 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1493: ...ing Protocols Configuration Guide at http www juniper net techpubs software junos Fully supported BGP See the Junos OS Routing Protocols Configuration Guide at http www juniper net techpubs software junos Fully supported BFD See the Junos OS Routing Protocols Configuration Guide at http www juniper net techpubs software junos Fully supported ICMP See the Junos OS Multicast Configuration Guide at h...

Page 1494: ...t techpubs software junos Fully supported SNMP See Understanding VRRP on J EX Series Switches on page 1425 See also the Junos OS High Availability Guide at http www juniper net techpubs software junos Fully supported with exception of IPv6 support of VRRP on routed VLAN interfaces RVIs VRRP Related Documentation Layer 3 Protocols Not Supported on J EX Series Switches on page 14 J EX Series Switch ...

Page 1495: ...P Layer 3 VPNs Multiprotocol BGP MP BGP for VPN IPv4 family Pseudowire emulation PWE3 Routing policy statements related to Layer 3 VPNs and MPLS Virtual Private LAN Service VPLS nat and subordinate statements Policy statements related to NAT Network Address Translation NAT demand circuit statement label switched path and subordinate statements neighbor statement within an OSPF area peer interface ...

Page 1496: ...ge 3 Understanding Distributed Periodic Packet Management on J EX Series Switches Periodic packet management PPM is responsible for processing a variety of time sensitive periodic tasks for particular processes so that other processes on the J EX Series Switch can more optimally direct their resources PPM is responsible for the periodic transmission of packets on behalf of its various client proce...

Page 1497: ...any time one of the VRRP routing platforms is the master active and the others are backups If the master routing platform fails one of the backup routing platforms becomes the new master providing a virtual default routing platform and enabling traffic on the LAN to be routed without relying on a single routing platform Using VRRP a backup J EX Series switch can take over a failed default switch w...

Page 1498: ... and C are running VRRP and together they make up a virtual routing platform The IP address of this virtual routing platform is 10 10 0 1 the same address as the physical interface of Switch A Figure 39 Basic VRRP on J EX Series Switches Figure 40 on page 1427 illustrates a basic VRRP topology using Virtual Chassis configurations Switch A Switch B and Switch C are each composed of multiple interco...

Page 1499: ...ddress If the master routing platform fails the switch configured with the higher priority becomes the master virtual routing platform and provides uninterrupted service for the LAN hosts When Switch A recovers it becomes the master virtual routing platform again Related Documentation For more information on VRRP or VRRP for IPv6 see the Junos OS High Availability Configuration Guide at http www j...

Page 1500: ...9 IPsec Modes on page 1430 Authentication Algorithms Authentication is the process of verifying the identity of the sender Authentication algorithms use a shared key to verify the authenticity of the IPsec devices The Junos operating system Junos OS uses the following authentication algorithms Message Digest 5 MD5 uses a one way hash function to convert a message of arbitrary length to a fixed len...

Page 1501: ...ocks and the third key to reencrypt the blocks IPsec Protocols IPsec protocols determine the type of authentication and encryption applied to packets that are secured by the switch Junos OS supports the following IPsec protocols AH Defined in RFC 2402 AH provides connectionless integrity and data origin authentication for IPv4 It also provides protection against replays AH authenticates as much of...

Page 1502: ...essions is destined for a switch the system acts as a host Transport mode is allowed in this case because the system does not act as a security gateway and does not send or receive transit traffic NOTE Tunnel mode is not supported for OSPF v3 control packet authentication Transport mode provides an SA between two hosts In transport mode the protocols provide protection primarily for upper layer pr...

Page 1503: ...CLI Procedure on page 1452 Using IPsec to Secure OSPFv3 Networks CLI Procedure on page 1453 Configuring BGP Sessions J Web Procedure You can use the J Web interface to create BGP peering sessions on a routing device NOTE To configure BGP sessions you must have a license for BGP installed on the J EX Series switch To configure a BGP peering session 1 Select Configure Routing BGP NOTE After you make...

Page 1504: ...lue assigned to the AS is 0 0 0 3 Sets the unique numeric identifier of the AS in which the routing device is configured ASN Type or select and edit the value Specifies the degree of preference for an external route The route with the highest local preference value is preferred Preference Type or select and edit the IPv6 or IPv4 address to be used as the identifier Specifies the cluster identifier...

Page 1505: ... send active open messages to the peer 8 Select the option to compare the AS path of an incoming advertised route with the AS number of the BGP peer under the group and replace all occurrences of the peer AS number in the AS path with its own AS number before advertising the route to the peer 9 Specify an import policy and export policy 10 Click OK Configures the system s peers statically Static N...

Page 1506: ... Remove Private ASN Enter the time period for a graceful restart and the maximum time that stale routes must be kept To configure Multihop select Nexthop Change to allow unconnected third party next hops Enter a TTL value Select the authentication algorithm If you select None specify an authentication key password You can configure the following Keep routes Specifies whether routes learned from a ...

Page 1507: ... of the file to receive the output of the tracing operation File Name Type or select and edit the value Specifies the maximum number of trace files Number of Files Type or select and edit the value Specifies the maximum size for each trace file File Size Select True to allow any user to read the file Select False to disallow all users being able to read the file Specifies whether the trace file ca...

Page 1508: ...for the area Type an integer or select and edit the value If you enter an integer the value is converted to a 32 bit equivalent For example if you enter 3 the value assigned to the area is 0 0 0 3 Uniquely identifies the area within its AS Area Id To add a range 1 Click Add 2 Type the area range 3 Specify the subnet mask 4 To override the metric for the IP address range type a specific metric valu...

Page 1509: ...t of an OSPF interface 3 Specify the traffic engineering metric 4 Specify how often the routing device sends hello packets from the interface 5 Specify how long the routing device waits to receive a link state acknowledgment packet before retransmitting link state advertisements to an interface s neighbors 6 To enable OSPF on the interface select the check box 7 To inform other protocols about nei...

Page 1510: ...terfaces 2 Specified the estimated time to reacquire a full OSPF neighbor from each area 3 To disable No Strict LSA Checking select the check box 4 To disable graceful restart helper capability select the check box Helper mode is enabled by default 5 Click OK Configures graceful restart for OSPF Graceful Restart To configure SPF 1 Specify the time interval between the detection of a topology chang...

Page 1511: ...tions tab Type or select and edit the name Specifies the name of the file to receive the output of the tracing operation File Name Type or select and edit the name Specifies the maximum number of trace files Number of Files Type or select and edit the name Specifies the maximum size for each trace file File Size Select True to allow any user to read the file Select False to disallow all users bein...

Page 1512: ... Action Function Field General tab Type or select and edit the name Specifies a name for the routing instance Routing instance name Type or select and edit the value Specifies the preference of external routes learned by RIP as compared to those learned from other routing protocols Preference Type or select and edit the value Specifies the metric value to add to routes transmitted to the neighbor ...

Page 1513: ...igure RIP receive options Receive Type a value Specifies the route timeout interval for RIP Route timeout sec Type or select and edit the value Specifies the update time interval to periodically send out routes learned by RIP to neighbors Update interval sec Type or select and edit the value Specifies the time period the expired route is retained in the routing table before being removed Hold time...

Page 1514: ...type Enter the authentication key for MD5 Specifies the type of authentication for RIP route queries received on an interface Options are None MD5 Simple Authentication Type Policies tab Click Add to add an import policy Click Move up or Move down to move the selected policy up or down the list of policies Click Remove to remove an import policy Applies one or more policies to routes being importe...

Page 1515: ...g able to read the file Specifies whether the trace file can be read by any user or not World Readable Select a value from the list Specifies the tracing operation to perform Flags Related Documentation Monitoring RIP Routing Information on page 1460 Layer 3 Protocols Supported on J EX Series Switches on page 13 1443 Chapter 71 Configuring Layer 3 Protocols ...

Page 1516: ...e basic static route options using the CLI To configure the switch s default gateway edit user switch set routing options static route 0 0 0 0 0 next hop 10 0 1 1 To configure a static route and specify the next address to be used when routing traffic to the static route edit user switch set routing options static route 20 0 0 0 24 next hop 10 0 0 2 1 To always keep the static route in the forward...

Page 1517: ...outing page as described in Table 195 on page 1445 Edit To modify an existing route Enter information into the routing page as described in Table 195 on page 1445 Delete To delete an existing route Table 195 Static Routing Configuration Summary Your Action Function Field Default Route To specify an IPv4 address 1 Select IPv4 2 Type an IP address for example 10 10 10 10 3 Enter the subnet mask or a...

Page 1518: ... packets Routing policy allows you to control which routes the routing protocols store in and retrieve from the routing table on the routing device To configure routing policies for a J EX Series switch using the J Web interface 1 Select Configure Routing Policies NOTE After you make changes to the configuration in this page you must commit the changes for them to take effect To commit all changes...

Page 1519: ...fix list click Edit Edit the settings and click OK To delete a prefix list select it and click Delete Specifies a list of IPv4 address prefixes for use in a routing policy statement Prefix List To add a BGP community 1 Click Add 2 Enter a name for the community 3 To add a community click Add 4 Enter the community ID and click OK 5 Click OK To edit a BGP community click Edit Edit the settings and c...

Page 1520: ...r with protocols that are not interface specific such as internal BGP IBGP Interface Click Add Select the prefix list from the list and click OK To remove a prefix list select it and click Remove Specifies a named list of IP addresses You can specify an exact match with incoming routes Prefix List Click Add and select the protocol from the list To remove a protocol select it and click Remove Speci...

Page 1521: ... routing device interfaces Do not use this qualifier with protocols that are not interface specific such as internal BGP IBGP Interface Click Add and select the protocol from the list To delete a protocol select it and click Remove Specifies the name of the protocol from which the route was learned or to which the route is being advertised Protocol Action tab Select a value from the list Specifies...

Page 1522: ...rding table must be installed and have the forwarding table perform per packet load balancing This policy action allows you to optimize VPLS traffic flows across multiple paths Load Balance Per Packet Select the action and type a value Specifies the tag value The tag action sets the 32 bit tag field in OSPF external link state advertisement LSA packets Tag Select the action and type a value Change...

Page 1523: ...d model If distributed PPM is disabled the PPM process runs on the Routing Engine only Distributed PPM can be disabled for all protocols that use PPM or for a single protocol that uses PPM BEST PRACTICE We recommend that generally you disable distributed PPM only if Dell Support advises you to do so see Requesting Technical Support on page lxxi You should disable distributed PPM only if you have a...

Page 1524: ... Ethernet 10 Gigabit Ethernet and logical interfaces To configure VRRP for IPv6 1 Configure VRRP group support on interfaces edit interfaces interface name unit logical unit number family inet6 address address user switch set vrrp inet6 group group id priority number virtual inet6 address address virtual link local address ipv6 address You must explicitly define a virtual link local address for ea...

Page 1525: ...n method and relies on IP Security IPsec to provide this functionality You can use IPsec to secure OSPFv3 interfaces on J EX Series switches This topic includes Configuring Security Associations on page 1453 Securing OPSFv3 Networks on page 1454 Configuring Security Associations When you configure a security association SA include your choices for authentication encryption direction mode protocol ...

Page 1526: ...hm key type Securing OPSFv3 Networks You can secure the OSPFv3 network by applying the SA to the OSPFv3 configuration To secure the OSPFv3 network edit protocols ospf3 area area number interface interface name user switch set ipsec sa sa name Related Documentation Understanding IPsec Authentication for OSPF Packets on J EX Series Switches on page 1428 Configuring an OSPF Network J Web Procedure on...

Page 1527: ...g information in the J Web interface select Monitor Routing BGP Information To view BGP routing information in the CLI enter the following commands show bgp summary show bgp neighbor Meaning Table 198 on page 1455 summarizes key output fields in the BGP routing display in the J Web interface Table 198 Summary of Key BGP Routing Output Fields Additional Information Values Field BGP Peer Summary Num...

Page 1528: ...pressed History Prefixes Number of routes currently inactive because of damping or other reasons These routes do not appear in the forwarding table and are not exported by routing protocols Dumped Prefixes Number of pending routes Pending Prefixes Status of the graceful restart process for this routing table BGP restart is complete BGP restart in progress VPN restart in progress or VPN restart is ...

Page 1529: ...acknowledgedreceipt of an open message from the peer and is waiting to receive a keepalive or notification message OpenSent BGP has sent an open message and is waiting to receive an open message from the peer Peer State Elapsed time since the peering session was last reset Elapsed Time Description of the BGP session Description Related Documentation Configuring BGP Sessions J Web Procedure on page...

Page 1530: ... Stub Type In this mode the interface is present on the network but does not transmit or receive packets Passive Mode The authentication scheme for the backbone or area Authentication Type The IP address of the interface Interface Address The subnet mask or address prefix Address Mask The maximum transmission unit size MTU The path cost used to calculate the root path cost from any given LAN segme...

Page 1531: ...te indicating a failed OSPF adjacency and the Full state indicating a functional adjacency are maintained for more than a few seconds The other states are transitional states that a neighbor is in only briefly while an OSPF adjacency is being established State of the neighbor Attempt Down Exchange ExStart Full Init Loading or 2way State ID of the neighbor ID Priority of the neighbor to become the ...

Page 1532: ... CLI commands show rip statistics show rip neighbor Meaning Table 200 on page 1460 summarizes key output fields in the RIP routing display in the J Web interface Table 200 Summary of Key RIP Routing Output Fields Additional Information Values Field RIP Statistics The RIP protocol name Protocol Name The port on which RIP is enabled Port number The interval during which routes are neither advertised...

Page 1533: ...the RIP neighbor In Metric Related Documentation Configuring a RIP Network J Web Procedure on page 1439 Layer 3 Protocols Supported on J EX Series Switches on page 13 Monitoring Routing Information Purpose Use the monitoring functionality to view the inet 0 routing table on the routing device Action To view the routing tables in the J Web interface select Monitor Routing Route Information Apply a ...

Page 1534: ...route Select the view details of inactive routes Specifies the inactive routes Inactive routes Select the view details of the exact route Specifies the exact route Exact route Select the view details of hidden routes Specifies the hidden routes Hidden routes To apply the filter and display messages click Search Applies the specified filter and displays the matching messages Search Table 202 Summar...

Page 1535: ...jected If a next hop is listed as Local the destination is an address on the host either the loopback address or Ethernet management port 0 address for example Network layer address of the directly reachable neighboring system if applicable and the interface used to reach it Next Hop How long the route has been active Age There are many possible flags Flags for this route State AS path through whi...

Page 1536: ...1464 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1537: ...t protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify that a ...

Page 1538: ...ults route edit routing options rib routing table name aggregate generate static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure whether static aggregate or generated routes are removed from the routing and forwarding tables when they become inactive Routes that have been configured to remain continually installed ...

Page 1539: ...ls bgp group group name neighbor neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Have BGP advertise the best external route into an IBGP mesh group a route reflector cluster or an AS confederation even if the best route is an internal route Options conditonal Optional Advertise the best external path only if the route sele...

Page 1540: ...s bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J E...

Page 1541: ...me neighbor address edit protocols bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced bef...

Page 1542: ...iption Configure aggregate routes Options aggregate options Additional information about aggregate routes that is included with the route when it is installed in the routing table Specify zero or more of the following options in aggregate options Each option is explained separately active passive as path as path origin egp igp incomplete atomic aggregate aggregator as number in address brief full ...

Page 1543: ...system name protocols bgp family inet labeled unicast edit logical systems logical system name protocols bgp family inet vpn labeled unicast edit protocols bgp family inet labeled unicast edit protocols bgp family inet vpn labeled unicast edit protocols bgp family inet6 labeled unicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable...

Page 1544: ...fied networks or hosts To configure multiple BGP peers configure one or more networks and hosts within a single allow statement or include multiple allow statements Options all Allow all addresses which is equivalent to 0 0 0 0 0 or 0 network mask length IPv6 or IPv4 network number of a single address or a range of allowable addresses for BGP peers followed by the number of significant bits in the...

Page 1545: ...or name edit routing instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable strict sender address checks Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Docum...

Page 1546: ...tatements to configure the routing device as an area border router An area border router does not automatically summarize routes between areas use the area range statement to configure route summarization By definition an area border router must be connected to the backbone area either through a physical link or through a virtual link To create a virtual link include the virtual link statement To ...

Page 1547: ...lease 10 2 for J EX Series switches Description Area border routers only For an area summarize a range of IP addresses when sending summary link advertisements within an area To summarize multiple ranges include multiple area range statements For a not so stubby area NSSA summarize a range of IP addresses when sending NSSA link state advertisements The specified prefixes are used to aggregate exte...

Page 1548: ...occurrences of the peer AS number in the AS path with its own AS number before advertising the route to the peer NOTE The as override statement is specific to a particular BGP group This statement does not affect peers from the same remote AS configured in different groups Enabling the AS override feature allows routes originating from an AS to be accepted by a router residing in the same AS Witho...

Page 1549: ...for the AS number provides BGP support for 2 byte AS numbers and 4 byte AS numbers Options aggregator Optional Attach the BGP aggregator path attribute to the aggregate route You must specify the last AS number that formed the aggregate route encoded as two octets for as number followed by the IP address of the BGP system that formed the aggregate route for in address as path Optional AS path to i...

Page 1550: ... edit routing instances routing instance name routing options multicast edit routing options multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable the routing device to accept any source multicast join messages G for group addresses that are within the default or configured range of source specific multicast groups Required Priv...

Page 1551: ... protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series s...

Page 1552: ...tances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure an MD5 authentication key password Neighboring routing devices use the ...

Page 1553: ... the same password If you are using the Junos OS IS IS software with another implementation of IS IS the other implementation must be configured to use the same password for the domain the area and all interfaces adjacent to the Dell PowerConnect J Series routing device Default If you do not include this statement and the authentication type statement IS IS authentication is disabled Options key A...

Page 1554: ...e protocols rip edit routing instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Require authentication for RIP route queries received on an interface Options password Authentication password If the password does not match the packet is rejected The password ...

Page 1555: ...tocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply and enable an ...

Page 1556: ...key chain key chain name Keychain name This name is configured at the edit protocols bgp or the edit protocols ldp hierarchy level to associate unique authentication key chain attributes with each protocol as specified using the following options description text string A text string of the authentication key chain Put the text string in quotes text description key key Each key within a keychain i...

Page 1557: ...ng the authentication key statement Default If you do not include this statement and the authentication key statement IS IS authentication is disabled Options authentication Authentication scheme md5 Use HMAC authentication in combination with MD5 HMAC MD5 authentication is defined in RFC 2104 HMAC Keyed Hashing for Message Authentication simple Use a simple password for authentication The passwor...

Page 1558: ...ult If you do not include this statement and the authentication key statement RIP authentication is disabled Options type Authentication type md5 Use the MD5 algorithm to create an encoded checksum of the packet The encoded checksum is included in the transmitted packet The receiving routing device uses the authentication key to verify the packet discarding it if the digest does not match This alg...

Page 1559: ...rmat of two integer values joined by a period 16 bit high order value in decimal 16 bit low order value in decimal For example the 4 byte AS number of 65 546 in plain number format is represented as 1 10 in the AS dot notation format Options autonomous system AS number Use a number assigned to you by the Network Information Center NIC Range 1 through 4 294 967 295 2 32 1 in plain number format Ran...

Page 1560: ...ntax backup pe group group name backups addresses local address address Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast edit logical systems logical system name routing options multicast edit routing instances routing instance name routing options multicast edit routing options multicast Release Information Statement introd...

Page 1561: ...cast backup pe group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the address of backup PEs for ingress PE redundancy when point to multipoint label switched paths LSPs are used for multicast distribution Options addresses Addresses of other PEs in the backup group Required Privilege Level routing To view this state...

Page 1562: ...efore Junos OS Release 10 2 for J EX Series switches Description Configure the bandwidth property for multicast flow maps Options adaptive Specify that the bandwidth is measured for the flows that are matched by the flow map bps Bandwidth in bits per second for the flow map Range 0 through any amount of bandwidth Default 2 Mbps Required Privilege Level routing To view this statement in the configu...

Page 1563: ...outing instance name protocols ospf ospf3 area area id interface interface name edit routing instances routing instance name protocols ospf area area id interface interface name topology topology name edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name Release Information Statement introduced before Jun...

Page 1564: ... configuration routing control To add this statement to the configuration Related Documentation metric on page 1611 Dynamically Adjusting OSPF Interface Metrics Based on Bandwidth 1492 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1565: ...esrouting instance nameprotocols bgp group group name neighbor address edit protocols bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor a...

Page 1566: ...he minimum intervals at which the local routing device transmits hello packets and then expects to receive a reply from a neighbor with which it has established a BFD session Range 1 through 255 000 minimum receive interval milliseconds Configure only the minimum interval at which the local routing device expects to receive a reply from a neighbor with which it has established a BFD session Range ...

Page 1567: ...onfigure the BFD version to detect Range 1 or automatic autodetect the BFD version Default automatic The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring BFD for BGP Configuring BFD Authentication for BGP 1495 Chapter 73 Configuratio...

Page 1568: ...lgorithm used to authenticate the specified BFD session simple password keyed md5 keyed sha 1 meticulous keyed md5 meticulous keyed sha 1 authentication key chain key chain name Associate a security key with the specified BFD session using the name of the security keychain The name you specify must match one of the keychains configured in the authentication key chains key chain statement at the ed...

Page 1569: ...session transmit interval adapts to a value greater than the threshold a single trap and a single system log message are sent The interval threshold must be greater than the minimum transmit interval Range 0 through 4 294 967 295 2 32 1 transmit interval minimum interval milliseconds Configure only the minimum interval at which the routing device sends hello packets to a neighbor with which it has...

Page 1570: ...ols ospf ospf3 area area id interface interface name edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id interface interface name edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface in...

Page 1571: ...er number Configure the number of hello packets not received by a neighbor that causes the originating interface to be declared down Range 1 through 255 Default 3 no adaptation Specify that BFD sessions should not adapt to changing network conditions We recommend that you not disable BFD adaptation unless it is preferable not to have BFD adaptation enabled in your network transmit interval thresho...

Page 1572: ...Related Documentation Configuring BFD for OSPF Configuring BFD Authentication for OSPF 1500 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1573: ...re bidirectional failure detection timers and authentication Options authentication algorithm algorithm name Configure the algorithm used to authenticate the specified BFD session simple password keyed md5 keyed sha 1 meticulous keyed md5 or meticulous keyed sha 1 authentication key chain key chain name Associate a security key with the specified BFD session using the name of the security keychain...

Page 1574: ... not to have BFD adaptation enabled in your network transmit interval threshold milliseconds Configure a threshold When the BFD session transmit interval adapts to a value greater than the threshold a single trap and a single system log message are sent The interval threshold must be greater than the minimum transmit interval Range 0 through 4 294 967 295 2 32 1 transmit interval minimum interval ...

Page 1575: ...name address edit logical systems logical system name routing options rib routing table name static route destination prefix edit logical systems logical system name routing options rib routing table name static route destination prefix qualified next hop interface name address edit logical systems logical system name routing options static route destination prefix edit logical systems logical sys...

Page 1576: ...dress Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure bidirectional failure detection timers and authentication criteria for static routes 1504 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1577: ...nds Configure an interval specifying how long a BFD session must remain up before a state change notification is sent Range 0 through 255 000 Default 0 local addressip address Enable a multihop BFD session and configure the source address for the BFD session minimum interval milliseconds Configure the minimum intervals at which the local routing device transmits a hello packet and then expects to ...

Page 1578: ...detect the BFD protocol version The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Bidirectional Forwarding Detection Configuring BFD Authentication for Static Routes bgp Syntax bgp Hierarchy Level edit logical systems logical syst...

Page 1579: ...oute filter edit protocols bgp group group name neighbor address outbound route filter edit routing instances routing instance name protocols bgp outbound route filter edit routing instances routing instance name protocols bgp group group name outbound route filter edit routing instances routing instance name protocols bgp group group name neighbor address outbound route filter edit routing instan...

Page 1580: ...t which to stop collecting BMP data if the limit is exceeded Default 10 MB Range 1 048 576 through 52 428 800 station address ip address name Specify the IP address or a valid URL for the monitoring where BMP data should be sent station port port number Specify the port number of the monitoring station to use when sending BMP data statistics timeout seconds Optional Specify how often to send BMP d...

Page 1581: ...defaults route edit routing options rib routing table name aggregate generate defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure all AS numbers from all contributing paths to be included in the aggregate or generated route s path brief Include only the longest common leading sequences from the contributing AS paths If...

Page 1582: ...ssing statement in the edit routing options ppm hierarchy BEST PRACTICE We recommend that generally you disable distributed PPM only if Dell Support advises you to do so see Requesting Technical Support on page lxxi You should disable distributed PPM only if you have a compelling reason to disable it Default Distributed PPM processing is enabled for all packets that use PPM Required Privilege Leve...

Page 1583: ...ase 10 2 for J EX Series switches Description Check whether the reserved fields in a RIP packet are zero check zero Discard version 1 packets that have nonzero values in the reserved fields and version 2 packets that have nonzero values in the fields that must be zero This default behavior implements the RIP version 1 and version 2 specifications no check zero Receive RIP version 1 packets with no...

Page 1584: ...terface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable checksum for packets on this interface The checksum cannot be enabled with MD5 hello authentication on the same interface Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Relat...

Page 1585: ... protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the clus...

Page 1586: ...nerated route Options community ids One or more community identifiers The community ids format varies according to the type of attribute that you use The BGP community attribute format is as number community value as number AS number of the community member It can be a value from 1 through 65 535 community value Identifier of the community member It can be a number from 0 through 65 535 For more i...

Page 1587: ... Syntax confederation confederation autonomous system members autonomous systems Hierarchy Level edit logical systems logical system name routing options edit routing options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the routing device s confederation AS number Options autonomous system AS numbers of the confederation members...

Page 1588: ...fore Junos OS Release 10 2 for J EX Series switches Description Configure the interval between complete sequence number CSN packets on a LAN interface Options disable Do not send CSN packets on this interface seconds Number of seconds between the sending of CSN packets Range 1 through 65 535 seconds Default 10 seconds Required Privilege Level routing To view this statement in the configuration rou...

Page 1589: ...otocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series swit...

Page 1590: ...nterface interface name edit protocols ospf ospf3 area area id virtual link edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id virtual link edit routing instanc...

Page 1591: ...multicast area area id nssa edit routing instances routing instance name protocols ospf ospf3 area area id nssa edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description On area border routers only for an NSSA inject a defa...

Page 1592: ... ospf ospf3 area area id stub edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa default lsa edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id stub edit routing instances routing instance name protocols ospf ospf3 area area id nssa default lsa edit routing instances routing instance name protocols ospf ospf3 area area id stub ed...

Page 1593: ... name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Text d...

Page 1594: ...s routing instance name protocols bgp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable BGP on the system Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Enabling BGP 1522 Dell PowerConnect J Series Ethernet Switch Complete S...

Page 1595: ...name edit routing instances routing instance name protocols isis interface interface name level level number edit routing instances routing instance name protocols isis traffic engineering Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable IS IS on the routing device on an interface or on a level At the edit protocols isis traffic eng...

Page 1596: ...a area id interface interface name edit protocols ospf ospf3 edit protocols ospf ospf3 area area id interface interface name edit protocols ospf ospf3 virtual link edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols osp...

Page 1597: ...tance name routing options graceful restart edit routing options graceful restart Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable graceful restart Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Graceful Restart...

Page 1598: ...ng options aggregate generate defaults route edit routing options rib routing table name aggregate generate defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Do not forward packets addressed to this destination Instead drop the packets do not send ICMP unreachable messages to the packets originators and install a reject route ...

Page 1599: ...ved from an interface address belonging to the routing instance Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring OSPF Domain IDs for VPNs domain vpn tag Syntax domain vpn tag number Hierarchy Level editlogical systemslogical system namerouting instancesrouting instance nameproto...

Page 1600: ...ddress family inet labeled unicast edit logical systems logical system name routing instances instance name protocols bgp group group name neighbor address family inet6 labeled unicast edit logical systems logical system name routing instances instance name protocols ldp edit protocols mpls edit protocols bgp family inet labeled unicast edit protocols bgp family inet6 labeled unicast edit protocol...

Page 1601: ...slogical system namerouting instancesrouting instance nameprotocols bgp group group name neighbor address edit protocols bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protoc...

Page 1602: ... EX Series switches Description Apply one or more policies to routes being exported from the routing table into IS IS Options policy names Name of one or more policies Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Applying Policies to Routes Exported to IS IS Junos OS Policy Framework Co...

Page 1603: ...st ipv6 multicast edit routing instances routing instance name protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply one or more policies to routes being exported from the routing table into OSPF Options policy...

Page 1604: ...cific RIP Properties Junos OS Policy Framework Configuration Guide export Syntax export policy names Hierarchy Level edit logical systems logical system name protocols ripng group group name editlogical systemslogical system namerouting instancesrouting instance nameprotocols ripng group group name edit protocols ripng group group name edit routing instances routing instance name protocols ripng g...

Page 1605: ...ng Per Packet Load Balancing Junos OS Policy Framework Configuration Guide export rib Syntax export rib routing table name Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options rib group group name edit logical systems logical system name routing options passive group name edit routing instances routing instance name routing options rib gr...

Page 1606: ...e Junos OS Release 10 2 for J EX Series switches Description Configure the preference of external routes Options preference Preference value Range 0 through 4 294 967 295 2 32 1 Default 15 for Level 1 internal routes 18 for Level 2 internal routes 160 for Level 1 external routes 165 for Level 2 external routes Required Privilege Level routing To view this statement in the configuration routing con...

Page 1607: ...t ipv4 multicast ipv6 multicast edit routing instances routing instance name protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the route preference for OSPF external routes Options preference Preference value...

Page 1608: ...entage idle timeout forever minutes aggregate label community community name explicit null connected only prefix limit maximum number teardown percentage idle timeout forever minutes resolve vpn rib inet 3 rib group group name route target accepted prefix limit maximum number teardown percentage idle timeout forever minutes advertise default external paths number prefix limit maximum number teardo...

Page 1609: ...stem namerouting instancesrouting instance nameprotocols bgp group group name neighbor address edit protocols bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp gro...

Page 1610: ...rted only with inet and inet6 loops number Optional Specify the maximum number of times that the AS number can appear in the AS path received from a BGP peer for the specified address family For number include a value from 1 through 10 NOTE When you configure the loops statement for a specific BGP address family that value is used to evaluate the AS path for routes received by a BGP peer for the s...

Page 1611: ...be LAN interfaces router IDs or point to point links The sequence is insignificant Options cost value Cost assigned to the group Range 1 through 65 535 Default 1 from address Address of the router or address of the LAN NBMA interface For example an Ethernet network with four hosts in the same fate sharing group would require you to list all four of the separate from addresses in the group group gr...

Page 1612: ...nditions Match packets to these conditions route name Name of the flow route standard Specify to use version 7 or later of the flow specification algorithm term order legacy standard Specify the version of the flow specification algorithm legacy Use version 6 of the flow specification algorithm standard Use version 7 of the flow specification algorithm then Actions to take on matching packets Requ...

Page 1613: ...ation routing control To add this statement to the configuration Related Documentation Creating a Multicast Flow Map forwarding cache Flow Maps Syntax forwarding cache timeout minutes never Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast flow map flow map name edit logical systems logical system name routing options multica...

Page 1614: ...ew this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring General Multicast Forwarding Cache Properties forwarding table Syntax forwarding table export policy names indirect next hop no indirect next hop unicast reverse path active paths feasible paths Hierarchy Level edit logical systems logical system name routing options ...

Page 1615: ...routing table Specify zero or more of the following options in generate options Each option is explained separately active passive as path as path origin egp igp incomplete atomic aggregate aggregator as number in address community community ids discard brief full metric metric2 metric3 metric4 value type type preference preference2 color color2 preference type type tag string defaults Specify glo...

Page 1616: ...e neighbor address edit protocols bgp edit protocols bgp group group name edit protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure graceful restart for BGP Options disable Disable graceful restart for BGP restart time seconds Time period when the restart is expected to be complete Range...

Page 1617: ...e Disable graceful restart helper disable Disable graceful restart helper capability Helper mode is enabled by default restart duration seconds Configure the time period for the restart to last in seconds Range 30 through 300 seconds Default 30 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Doc...

Page 1618: ...pability Helper mode is enabled by default notify duration seconds Estimated time to send out purged grace LSAs over all the interfaces Range 1 through 3600 seconds Default 30 seconds restart duration seconds Estimated time to reacquire a full OSPF neighbor from each area Range 1 through 3600 seconds Default 180 seconds Required Privilege Level routing To view this statement in the configuration r...

Page 1619: ... RIP Options disable Disables graceful restart for RIP seconds Estimated time for the restart to finish in seconds Range 1 through 600 seconds Default 60 seconds The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Graceful Restart C...

Page 1620: ...re Junos OS Release 10 2 for J EX Series switches Description Configure graceful restart for RIPng Options disable Disables graceful restart for RIPng seconds Estimated time period for the restart to finish Range 1 through 600 seconds Default 60 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Do...

Page 1621: ...ns edit routing options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure graceful restart The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Graceful Restart Junos...

Page 1622: ...r minutes rib group group name flow no validate policy name labeled unicast accepted prefix limit maximum number teardown percentage idle timeout forever minutes explicit null connected only prefix limit maximum number teardown percentage idle timeout forever minutes resolve vpn rib inet 3 rib group group name route target accepted prefix limit maximum number teardown percentage idle timeout forev...

Page 1623: ...esrouting instance nameprotocols bgp edit protocols bgp edit routing instances routing instance name protocols bgp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a BGP peer group BGP peer groups share a common type peer autonomous system AS number and cluster ID if present To configure multiple BGP groups include multiple group sta...

Page 1624: ...iew this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring BGP Groups and Peers 1552 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1625: ...date interval seconds neighbor neighbor name authentication key password authentication type type bfd liveness detection authentication algorithm algorithm name key chain key chain name loose check detection time threshold milliseconds minimum interval milliseconds minimum receive interval milliseconds transmit interval threshold milliseconds minimum interval milliseconds multiplier number version...

Page 1626: ...hes Description Configure a set of RIP neighbors that share an export policy and metric The export policy and metric govern what routes to advertise to neighbors in a given group Options group name Name of a group up to 16 characters long The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statem...

Page 1627: ... instance name protocols ripng Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a set of RIPng neighbors that share an export policy and metric The export policy and metric govern what routes to advertise to neighbors in a given group Options group name Name of a group up to 16 characters long The remaining statements are explaine...

Page 1628: ...ty of packets sent from an interface For the key to work you also must include the hello authentication type statement Default By default hello authentication is not configured on an interface However if IS IS authentication is configured the hello packets are authenticated using the IS IS authentication type and password Options password Authentication password The password can be up to 255 chara...

Page 1629: ...you enable authentication on hello packets you must specify a password by including the hello authentication key statement Default By default hello authentication is not configured on an interface However if IS IS authentication is configured the hello packets are authenticated using the IS IS authentication type and password Options md5 Specifies Message Digest 5 as the packet verification type s...

Page 1630: ...elease Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Frequency with which the routing device sends hello packets out of an interface in seconds Options seconds Frequency of transmission for hello packets Range 1 through 20 000 seconds Default 3 seconds for designated intersystem DIS routers 9 seconds for non DIS routers Required Privilege Level ...

Page 1631: ...rea area id interface interface name edit protocols ospf ospf3 area area id virtual link edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id virtual link edit ro...

Page 1632: ...ore Junos OS Release 10 2 for J EX Series switches Description Configure padding on hello packets to accommodate asymmetrical maximum transfer units MTUs from different hosts Options adaptive Configure padding until state of neighbor adjacency is up loose Configure padding until state of adjacency is initialized strict Configure padding for all adjacency states Required Privilege Level routing To ...

Page 1633: ...o the configuration Related Documentation Configuring RIP Timers holddown Syntax holddown seconds Hierarchy Level edit logical systems logical system name protocols ripng editlogical systemslogical system namerouting instancesrouting instance nameprotocols ripng edit protocols ripng edit routing instances routing instance name protocols ripng Release Information Statement introduced before Junos O...

Page 1634: ...s Description Configure the time in seconds after which a backup router with the highest priority preempts the master router Options seconds Hold time period Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring VRRP for IPv6 CLI Procedure on page 1452 1562 Dell PowerConnect J Se...

Page 1635: ...stances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the hold time value to use when negotiating a connection with the peer The hold time value is advertised in open packets and indicates to the peer the length of time that it should consider the sender valid ...

Page 1636: ... considers this router to be operative up after receiving a hello packet If the neighbor does not receiver another hello packet within the specified time it marks this routing device as inoperative down The hold time itself is advertised in the hello packets Options seconds Hold time value in seconds Range 3 through 65 535 seconds or 1 to send out hello packets every 333 milliseconds Default 9 sec...

Page 1637: ...s feature is particularly useful if you are using dynamic routing policies because the dynamic database is not synchronized with the backup Routing Engine when NSR is enabled Options forever Do not reestablish a BGP peering session after an NSR switchover until the clear bgp neighbor command is issued seconds Do not reestablish a BGP peering session after an NSR switchover until after the specifie...

Page 1638: ...ent in the configuration routing control To add this statement to the configuration Related Documentation Configuring IS IS ignore lsp metrics Syntax ignore lsp metrics Hierarchy Level edit logical systems logical system name protocols ospf traffic engineering shortcuts editlogical systemslogical system namerouting instancesrouting instance nameprotocols ospf traffic engineering shortcuts edit pro...

Page 1639: ...otocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply one or more r...

Page 1640: ...icast ipv6 multicast edit routing instances routing instance name protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Filter OSPF routes from being added to the routing table Options policy names Name of one or mor...

Page 1641: ...outing instance name protocols rip edit routing instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply one or more policies to routes being imported by the local router from its neighbors Options policy names Name of one or more policies Required Privilege...

Page 1642: ...nstances routing instance name protocols ripng edit routing instances routing instance name protocols ripng group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply one or more policies to routes being imported into the local routing device from the neighbors Options policy names Name of one or more pol...

Page 1643: ...ierarchy Level edit logical systems logical system name routing instances routing instance name routing options rib group group name edit logical systems logical system name routing options passive group name edit routing instances routing instance name routing options rib group group name edit routing options rib groups group name Release Information Statement introduced before Junos OS Release 1...

Page 1644: ...s routes it imports them into the primary and any secondary routing tables If the primary route is deleted the secondary route also is deleted For IPv4 import routing tables the primary routing table must be inet 0 or routing instance name inet 0 For IPv6 import routing tables the primary routing table must be inet6 0 You can configure an IPv4 import routing table that includes both IPv4 and IPv6 ...

Page 1645: ...dates indirect next hop Syntax indirect next hop no indirect next hop Hierarchy Level edit logical systems logical system name routing options forwarding table edit routing options forwarding table Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable indirectly connected next hops for route convergence NOTE When virtual private LAN servi...

Page 1646: ...igure the interval between Virtual Router Redundancy Protocol VRRP IPv6 advertisement packets Options milliseconds Interval in milliseconds between advertisement packets Range 100 to 40 000 ms Default 1 second Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring VRRP for IPv6 CL...

Page 1647: ...uting table name static defaults route edit routing options static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure whether the Junos OS installs all static routes into the forwarding table Even if you configure a route so it is not installed in the forwarding table the route is still eligible to be exported from th...

Page 1648: ...ng Instances Junos OS Policy Framework Configuration Guide instance import Syntax instance import policy names Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options edit logical systems logical system name routing options edit routing instances routing instance name routing options edit routing options Release Information Statement introdu...

Page 1649: ...ing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 muticast ipv6 multicast area area id Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply an export policy for OSPFv3 to specify which interarea prefix link state advertisements LSAs are flooded into an area Options policy name Name of a policy configured at the e...

Page 1650: ...ame protocols ospf3 area area id edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply an import policy for OSPFv3 to specify which routes learned from an area are used to generate interarea prefixes into other areas O...

Page 1651: ...ldp synchronization disable hold time seconds lsp interval milliseconds mesh group value blocked no adjacency holddown no ipv4 multicast no ipv6 multicast no ipv6 unicast no unicast topology passive point to point level level number disable hello authentication type authentication hello authentication key key hello interval seconds hold time seconds ipv4 multicast metric number ipv6 multicast metr...

Page 1652: ...disable statement and not actually having IS IS run on an interface by including the passive statement are mutually exclusive states Options all Have the Junos OS create IS IS interfaces automatically interface name Name of an interface Specify the full interface name including the physical and logical address components For details about specifying interfaces see the Junos OS Network Interfaces C...

Page 1653: ... number retransmit interval seconds te metric metric topology ipv4 multicast name metric metric transit delay seconds transmit interval seconds Hierarchy Level edit logical systems logical system name protocols ospf ospf3 area area id edit logical systems logical system name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id editlogical systemslogical system namerouting ...

Page 1654: ...roduces an invalid configuration To configure all interfaces you can specify all Specifying a particular interface and all produces an invalid configuration For details about specifying interfaces see interface naming in the Junos OS Network Interfaces Configuration Guide NOTE For nonbroadcast interfaces specify the IP address of the nonbroadcast interface as interface name The remaining statement...

Page 1655: ...ng options multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define the maximum bandwidth for an interface on which you want to apply bandwidth management Options interface name Names of the physical or logical interface For details about specifying interfaces see the Junos OS Network Interfaces Configuration Guide The remaining st...

Page 1656: ...introduced before Junos OS Release 10 2 for J EX Series switches Description Enable multicast traffic on an interface NOTE You cannot enable multicast traffic on an interface using the enable statement and configure PIM on the same interface simultaneously Options interface name Name of the interface on which to enable multicast traffic Specify the interface name to enable multicast traffic on the...

Page 1657: ...hes Description Associate a routing table group with the routing device s interfaces and specify routing table groups into which interface routes are imported Options inet Specify the IPv4 address family inet6 Specify the IPv6 address family lan Export LAN routes point to point Export point to point routes The remaining statement is explained separately Required Privilege Level routing To view thi...

Page 1658: ...interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the type of interface By default the software chooses the correct interface type based on the type of physical interface Therefore you should never have to set the interface type The exception to this is for NBMA interfaces which default to an interface type of point to...

Page 1659: ...ic Syntax ipv4 multicast metric metric Hierarchy Level edit logical systems logical system name protocols isis interface interface namelevel level number editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name level level number edit protocols isis interface interface name level level number edit routing instances routing instance name pr...

Page 1660: ...icast metric metric Hierarchy Level edit logical systems logical system name protocols isis interface interface name level level number editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name level level number edit protocols isis interface interface name level level number edit routing instances routing instance name protocols isis inter...

Page 1661: ...Syntax ipv6 unicast metric metric Hierarchy Level edit logical systems logical system name protocols isis interface interface name level level number editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name level level number edit protocols isis interface interface name level level number edit routing instances routing instance name protoc...

Page 1662: ...s Description Enable IS IS routing on the routing device or for a routing instance The isis statement is the one statement you must include in the configuration to run IS IS on the routing device or in a routing instance Default IS IS is disabled on the routing device Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configura...

Page 1663: ...outing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify whether routes learned from a BGP peer are retained in the routing table even if they contain an AS number that was exported from the local ...

Page 1664: ...ystems logical system name routing instances routing instance name protocols bgp group group name neighbor address family inet inet6 edit protocols bgp family inet inet6 edit protocols bgp group group name family inet inet6 edit protocols bgp group group name neighbor address family inet inet6 edit routing instances routing instance name protocols bgp family inet inet6 edit routing instances routi...

Page 1665: ... edit protocols isis edit routing instances routing instance name protocols isis Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the global level properties Options level number IS IS level number Values 1 or 2 The remaining statements are explained separately Required Privilege Level routing To view this statement in the configu...

Page 1666: ...ement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable link protection on the specified IS IS interface The Junos OS creates a backup loop free alternate path to the primary next hop for all destination routes that traverse the protected interface Required Privilege Level routing To view this statement in the configuration routing control To add this statement to...

Page 1667: ...t routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the address of the local end of a BGP session This address is used to accept incoming connections to the peer and to establish connections to the remote peer When none of the operational interfac...

Page 1668: ...multicast backup pe group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the address of the local PE for ingress PE redundancy when point to multipoint LSPs are used for multicast distribution Options address Address of local PEs in the backup group Required Privilege Level routing To view this statement in the config...

Page 1669: ... provides BGP support for 4 byte AS numbers as defined in RFC 4893 BGP Support for Four octet AS Number Space You can also configure a 4 byte AS number using the AS dot notation format of two integer values joined by a period 16 bit high order value in decimal 16 bit low order value in decimal For example the 4 byte AS number of 65546 in plain number format is represented as 1 10 in the AS dot not...

Page 1670: ...up group name neighbor ipv6 link local address editlogical systemslogical system namerouting instancesrouting instance nameprotocols bgp group group name neighbor ipv6 link local address edit protocols bgp group group name neighbor ipv6 link local address edit routing instances routing instance name protocols bgp group group name neighbor ipv6 link local address Release Information Statement intro...

Page 1671: ...ify the value of the LOCAL_PREF path attribute which is a metric used by IBGP sessions to indicate the degree of preference for an external route The route with the highest local preference value is preferred The LOCAL_PREF path attribute always is advertised to internal BGP peers and to neighboring confederations It is never advertised to external BGP peers Default If you omit this statement the ...

Page 1672: ...bor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Log a message whenever a BGP peer makes a state trans...

Page 1673: ...it logical systems logical system name protocols isis interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name edit protocols isis interface interface name edit routing instances routing instance name protocols isis interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J...

Page 1674: ...trol To add this statement to the configuration Related Documentation Configuring Link State PDU Lifetime for IS IS lsp metric into summary Syntax lsp metric into summary Hierarchy Level edit logical systems logical system name protocols ospf ospf3 traffic engineering shortcuts editlogical systemslogical system namerouting instancesrouting instance nameprotocols ospf ospf3 traffic engineering shor...

Page 1675: ...tion prefix prefix length destination prefix is the network portion of the IP address and prefix length is the destination prefix length default Default route to use when routing packets do not match a network or host in the routing table This is equivalent to specifying the IP address 0 0 0 0 0 match type Criteria that the destination must match exact Exactly match the route s mask length longer ...

Page 1676: ...width Syntax maximum bandwidth bps Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast interface interface name edit logical systems logical system name routing options multicast interface interface name edit routing instances routing instance name routing options multicast interface interface name edit routing options multicas...

Page 1677: ...triggers only a warning and additional routes are not rejected path limit Maximum number of routes If this limit is reached a warning is triggered and additional routes are rejected Range 1 through 4 294 967 295 2 32 1 Default No default threshold value Optional Percentage of the maximum number of routes that starts triggering warning You can configure a percentage of the path limit value that sta...

Page 1678: ...y a warning and additional routes are not rejected prefix limit Maximum number of route prefixes If this limit is reached a warning is triggered and any additional routes are rejected Range 1 through 4 294 967 295 Default No default threshold value Optional Percentage of the maximum number of prefixes that starts triggering warning You can configure a percentage of the prefix limit value that star...

Page 1679: ...r delays MED updates for the interval configured unless the MED is lower than the previously advertised attribute or another attribute associated with the route has changed or if the BGP peer is responding to a refresh route request Options minutes Interval to delay MED updates Default 10 minutes Range 10 through 600 Required Privilege Level routing To view this statement in the configuration rout...

Page 1680: ... Release 10 2 for J EX Series switches Description Configure an interface to be part of a mesh group which is a set of fully connected nodes Options blocked Configure the interface so that it does not flood link state PDU packets value Number that identifies the mesh group Range 1 through 4 294 967 295 2 32 1 32 bits are allocated to identify a mesh group Required Privilege Level routing To view t...

Page 1681: ...uting instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the number of route entries to be included in every RIP update message To ensure interoperability with other vendors equipment use the standard of 25 route entries per message Options number Nu...

Page 1682: ...ber Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the metric value for the level Options metric Metric value Range 1 through 63 or 1 through 16 777 215 if you have configured wide metrics Default 10 for all interfaces except lo0 0 for the lo0 interface Required Privilege Level routing To view this statement in the configuration r...

Page 1683: ...rface interface name edit routing instances routing instance name protocols ospf ospf3 area area id interface interface name editrouting instancesrouting instance nameprotocolsospfareaarea idsham link remote edit routing instances routing instance name protocols ospf area area id interface interface name topology ipv4 multicast name edit routing instances routing instance name protocols ospf3 real...

Page 1684: ...ue for an aggregate generated or static route You can specify up to four metric values starting with metric for the first metric value and continuing with metric2 metric3 and metric4 Options metric Metric value Range 0 through 4 294 967 295 2 32 1 type type Optional Type of route Range 1 through 16 Required Privilege Level routing To view this statement in the configuration routing control To add ...

Page 1685: ... routing instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the metric to add to incoming routes when advertising into RIP routes that were learned from other protocols Use this statement to configure the routing device to prefer RIP routes learned t...

Page 1686: ... instances routing instance name protocols ripng group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the metric to add to incoming routes when advertising into RIPng routes that were learned from other protocols Use this statement to configure the routing device to prefer RIPng routes learned thr...

Page 1687: ...ttribute is used to discriminate among multiple exit points to a neighboring AS If all other factors are equal the exit point with the lowest metric is preferred You can specify a constant metric value by including the metric option For configurations in which a BGP peer sends third party next hops that require the local system to perform next hop resolution IBGP configurations configurations with...

Page 1688: ...a newly calculated metric is greater than the minimum metric value the metric value remains unchanged If a newly calculated metric is lower the metric value is lowered to that value offset Optional Increases or decreases the metric by this value Range 2 31 through 2 31 1 Default None Required Privilege Level routing To view this statement in the configuration routing control To add this statement ...

Page 1689: ...ighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the metric value to add to routes transmitted to the neighbor Use this statement to control how other routing devices prefer RIP routes sent from this neighbor Options metric Metric value Range 1 through 16 Default 1 Required Privilege Level routing To view this s...

Page 1690: ...ighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the metric value to add to routes transmitted to the neighbor Use this statement to control how other routing devices prefer RIPng routes sent from this neighbor Options metric Metric value Range 1 through 16 Default 1 Required Privilege Level routing To view this statemen...

Page 1691: ...pf3 area area id nssa default lsa edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa default lsa edit routing instances routing instance name protocols ospf ospf3 area area id nssa default lsa edit routing instances routing instances protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa default lsa Release Information Statement intr...

Page 1692: ...rotocols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series swi...

Page 1693: ...for J EX Series switches Description Configure generic multicast properties NOTE You cannot apply a scoping policy to a specific routing instance All scoping policies are applied to all routing instances However you can apply the scope statement to a specific routing instance The remaining statements are explained separately Required Privilege Level routing To view this statement in the configurat...

Page 1694: ... Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure an EBGP multihop session External confederation peering is a special case that allows unconnected third party next hops You do not need to configure multihop sessions explicitly in this particular case multihop behavior is implied If you have confederation external BGP peer to loopback addresses you s...

Page 1695: ...p group name neighbor address edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Allow load sharing among multiple EBGP paths and multiple IBGP paths Options multiple as Disab...

Page 1696: ... accepted prefix limit maximum number teardown percentage idle timeout forever minutes prefix limit maximum number teardown percentage idle timeout forever minutes rib group group name flow no validate policy name labeled unicast accepted prefix limit maximum number teardown percentage idle timeout forever minutes aggregate label community community name explicit null connected only prefix limit m...

Page 1697: ...out metric minimum igp offset igp offset mtu discovery multihop ttl value multipath multiple as no aggregator id no client reflect out delay seconds passive peer as autonomous system preference preference tcp mss segment size traceoptions file filename files number size size world readable no world readable flag flag flag modifier disable vpn apply export Hierarchy Level edit logical systems logic...

Page 1698: ...ment is one of the statements you can include in the configuration to define a minimal BGP configuration on the routing device You can include an allow all statement in place of a neighbor statement Options address IPv6 or IPv4 address of a single peer The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To a...

Page 1699: ...ms logical system name protocols rip group group name editlogical systemslogical system namerouting instancesrouting instance nameprotocols rip group group name edit protocols rip group group name edit routing instances routing instance name protocols rip group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure neighbor s...

Page 1700: ... name protocols ripng group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure neighbor specific RIPng parameters thereby overriding the defaults set for the routing device Options neighbor name Name of an interface over which a routing device communicates to its neighbors The remaining statements are explained separately...

Page 1701: ...tance name protocols isis Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable the hold down timer for IS IS adjacencies Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Quicker Advertisement of IS IS Adjacency State ...

Page 1702: ...protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the router ID in the BGP aggregator path attribute to zero This is one of the path attributes included in ...

Page 1703: ...ntroduced before Junos OS Release 10 2 for J EX Series switches Description Generate authenticated packets and check the authentication on received packets but do not reject packets that cannot be authenticated Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation csnp interval on page 1516 hell...

Page 1704: ...group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable intracluster route redi...

Page 1705: ...ation no eligible backup Syntax no eligible backup Hierarchy Level edit logical systems logical system name protocols isis interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name edit protocols isis interface interface name edit routing instances routing instance name protocols isis interface interface name Releas...

Page 1706: ...tion type on page 1557 Configuring IS IS Authentication no ipv4 multicast Syntax no ipv4 multicast Hierarchy Level edit logical systems logical system name protocols isis interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name edit protocols isis interface interface name edit routing instances routing instance nam...

Page 1707: ... Syntax no ipv6 multicast Hierarchy Level edit logical systems logical system name protocols isis interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name edit protocols isis interface interface name edit routing instances routing instance name protocols isis interface interface name Release Information Statement i...

Page 1708: ...v6 unicast Hierarchy Level edit logical systems logical system name protocols isis interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis interface interface name edit protocols isis interface interface name edit routing instances routing instance name protocols isis interface interface name Release Information Statement introduced befor...

Page 1709: ...s NSSAs for an autonomous system boundary router ASBR or an area border router ABR Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Disabling Export of LSAs into NSSAs Attached to ASBR ABRs no psnp authentication Syntax no psnp authentication Hierarchy Level edit logical systems logical sys...

Page 1710: ...rface interface name edit routing instances routing instance name routing options multicast interface interface name reverse oif mapping edit routing options multicast interface interface name edit routing options multicast interface interface name reverse oif mapping Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable hierarchical ban...

Page 1711: ...ame protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable compatibility with RFC 1583 OSPF Version 2 If the same external destination is advertised by AS boundary routers that belong to different OSPF areas d...

Page 1712: ...IS IS Multicast Topologies no validate Syntax no validate policy name Hierarchy Level edit protocols bgp group group name family inet inet flow edit protocols bgp group group name neighbor address family inet inet flow edit routing instances routing instance name protocols bgp group group name family inet inet flow edit routing instances routing instance name protocols bgp group group name neighbo...

Page 1713: ...2 for J EX Series switches Description Enable node link protection on the specified IS IS interface The Junos OS creates an alternate loop free path to the primary next hop for all destination routes that traverse a protected interface This alternate path avoids the primary next hop routing device altogether and establishes a path through a different routing device Required Privilege Level routing...

Page 1714: ...ipv4 unicast ipv4 multicast ipv6 multicast edit routing instances routing instance name protocols ospf ospf3 area area id edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a not so stubby area NSSA An NSSA allows external r...

Page 1715: ...the message It can be one or more of the following levels in order of decreasing urgency alert Conditions that should be corrected immediately such as a corrupted system database critical Critical conditions such as hard drive errors debug Software debugging messages emergency Panic or other conditions that cause the system to become unusable error Standard error conditions info Informational mess...

Page 1716: ...e configuration Related Documentation Minimum OSPF Configuration ospf3 Syntax ospf3 Hierarchy Level edit logical systems logical system name protocols edit logical systems logical system name routing instances routing instance name protocols edit protocols edit routing instances routing instance name protocols Release Information Statement introduced before Junos OS Release 10 2 for J EX Series sw...

Page 1717: ...routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify how long a route must be present in the Junos OS routing table before it is expo...

Page 1718: ...ting instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a BGP peer to accept outbound route filters from a remote peer Options accept Specify that outbound route filters from a BGP peer be accepte...

Page 1719: ...hat traffic to immediately attached interfaces continues to transit the routing device You can also advertise maximum link metrics in network layer reachability information NLRI instead of setting the overload bit NOTE If the time elapsed after the IS IS instance is enabled is less than the specified timeout overload mode is set Options advertise high metrics Advertise maximum link metrics in NLRI...

Page 1720: ...g instance name protocols ospf topology default ipv4 multicast name edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the local routing device so that it appears to be overloaded You might do this when you want the routing ...

Page 1721: ...ols bgp group group name edit protocols bgp group group name neighbor address edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches...

Page 1722: ... interface name level level number Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Advertise the direct interface addresses on an interface or into a level on the interface without actually running IS IS on that interface or level This statement effectively prevents IS IS from running on the interface To enable IS IS on an interface includ...

Page 1723: ...ormation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Advertise the direct interface addresses on an interface without actually running OSPF on that interface A passive interface is one for which the address information is advertised as an internal route in OSPF but on which the protocol does not run To configure an interface in OSPF passive traffic engine...

Page 1724: ... name neighbor address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the neighbor peer AS number The autonomous system AS numeric range in plain number format provides BGP support for 4 byte AS numbers as defined in RFC 4893 BGP Support for Four octet AS Number Space You can also configure a 4 byte AS number using the AS dot nota...

Page 1725: ...endent Multicast PIM domain and a core facing PIM domain to translate PIM join or prune messages into corresponding Internet Group Management Protocol IGMP report or leave messages The routing device then transmits the report or leave messages by proxying them to one or two upstream interfaces that you configure on the RP routing device Including the pim to igmp proxy statement enables you to use ...

Page 1726: ...e MLD to forward IPv6 multicast traffic across the PIM sparse mode domains The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring PIM to MLD Message Translation point to point Syntax point to point Hierarchy Level edit logical systems lo...

Page 1727: ...on Associate a routing policy when configuring an aggregate or generated route s destination prefix in the routes part of the aggregate or generate statement This provides the equivalent of an import routing policy filter for the destination prefix That is each potential contributor to an aggregate route along with any aggregate options is passed through the policy filter The policy then can accep...

Page 1728: ...policy SSM Maps Syntax policy policy names Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast ssm map ssm map name edit logical systems logical system name routing options multicast ssm map ssm map name edit routing instances routing instance name routing options multicast ssm map ssm map name edit routing options multicast ss...

Page 1729: ...ackets that use PPM and run all PPM processing on the Routing Engine by entering the no delegate processing configuration statement in the edit routing options ppm statement hierarchy Default Distributed PPM processing is enabled for all packets that use PPM Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Relat...

Page 1730: ... to access ports on J EX4200 switches or line cards on J EX8200 switches After you disable PPM PPM processing continues to run on the Routing Engine Default enabled Options no delegate processing Disable PPM to the Packet Forwarding Engine access ports or line cards Distributed PPM is enabled by default Required Privilege Level routing To view this statement in the configuration routing control To...

Page 1731: ...nfigure whether a backup router can preempt a master router preempt Allow the master router to be preempted no preempt Prohibit the preemption of the master router The remaining statement is explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring VRRP for IPv6 ...

Page 1732: ...address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the preference for routes learned from BGP At the BGP global level the preference statement sets the preference for routes learned from BGP You can override this preference in a BGP group or peer preference statement At the group or peer level the preference statement sets the...

Page 1733: ...unos OS Release 10 2 for J EX Series switches Description Configure the preference of internal routes Options preference Preference value Range 0 through 4 294 967 295 2 32 1 Default 15 for Level 1 internal routes 18 for Level 2 internal routes 160 for Level 1 external routes 165 for Level 2 external routes Required Privilege Level routing To view this statement in the configuration routing contro...

Page 1734: ... multicast edit routing instances routing instance name protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the route preference for OSPF internal routes Options preference Preference value Range 0 through 4 29...

Page 1735: ...Related Documentation Configuring Group Specific RIP Properties preference Syntax preference preference Hierarchy Level edit logical systems logical system name protocols ripng group group name editlogical systemslogical system namerouting instancesrouting instance nameprotocols ripng group group name edit protocols ripng group group name edit routing instances routing instance name protocols ripn...

Page 1736: ...gate generate static defaults route edit routing options rib routing table name aggregate generate static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Preference value for a static aggregated or generated route You also can specify a secondary preference value preference2 as well as colors which are even finer grained pre...

Page 1737: ...elated Documentation multicast on page 1621 Configuring Multicast Scoping prefix export limit Syntax prefix export limit number Hierarchy Level edit logical systems logical system name protocols isis level level number editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis level level number edit protocols isis level level number edit routing instances routing i...

Page 1738: ... default ipv4 multicast name edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast edit routing instances routing instance name protocols ospf ospf3 edit routing instances routing instance name protocols ospf topology default ipv4 multicast name edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statemen...

Page 1739: ...et inet6 any flow labeled unicast multicast unicast edit routing instances routing instance name protocols bgp family inet inet6 any flow labeled unicast multicast unicast edit routing instances routing instance name protocols bgp group group name family inet inet6 any flow labeled unicast multicast unicast edit routing instances routing instance name protocols bgp group group name neighbor addres...

Page 1740: ...ces interface name unit logical unit number family inet6 address address vrrp inet6 group group id Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a switch s priority for becoming the master default routing platform The routing platform with the highest priority within the group becomes the master Options number Routing platform ...

Page 1741: ...tion Statement introduced before Junos OS Release 10 2 for J EX Series switches Description The interface s priority for becoming the designated router The interface with the highest priority value becomes that level s designated router The priority value is meaningful only on a multiaccess network It has no meaning on a point to point interface Options number Priority value Range 0 through 127 De...

Page 1742: ...area id interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the routing device s priority for becoming the designated routing devices The routing device that has the highest priority value on the logical IP network or subnet becomes the network s designated router You must configure at least one routing device ...

Page 1743: ...EX Series switches Description Configure an independent metric or preference on a static route Options address IPv4 IPv6 or ISO network address of the next hop interface name Name of the interface on which to configure an independent metric or preference for a static route To configure an unnumbered Ethernet interface as the next hop interface for a static route specify qualified next hop interfac...

Page 1744: ...ing instance name routing options static defaults route edit routing options rib routing table name static defaults route edit routing options static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure whether static routes are eligible to be readvertised by routing protocols readvertise Readvertise static routes no re...

Page 1745: ...on Configure OSPFv3 to advertise address families other than unicast IPv6 The Junos OS maps each address family you configure to a separate realm with its own set of neighbors and link state database Options ipv4 unicast Configure a realm for IPv4 unicast routes ipv4 multicast Configure a realm for IPv4 multicast routes ipv6 multicast Configure a realm for IPv6 multicast routes Required Privilege ...

Page 1746: ...p edit routing instances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure RIP receive options Options receive options One of the following both Accept both RIP version 1 and version 2 packets none Do not receive RIP packets version 1 Accept only RIP versio...

Page 1747: ...neighbor neighbor name edit routing instances routing instance name protocols ripng edit routing instances routing instance name protocols ripng group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable or disable receiving of update messages Options none Optional Disable receiving update messages Defau...

Page 1748: ...figuration Related Documentation Defining Flow Properties reference bandwidth Syntax reference bandwidth reference bandwidth Hierarchy Level edit logical systems logical system name protocols isis editlogical systemslogical system namerouting instancesrouting instance nameprotocols isis edit protocols isis edit routing instances routing instance name protocols isis Release Information Statement in...

Page 1749: ... multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the reference bandwidth used in calculating the default interface cost The cost is calculated using the following formula cost ref bandwidth bandwidth Options ref bandwidth Reference bandwidth in bits per second Default 100 Mbps 100 000 000 bits Range 9600 through 1 000 000 000...

Page 1750: ... address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description When advertising AS paths to remote systems have the local system strip private AS numbers from the AS path The numbers are stripped from the AS path starting at the left end of the AS path the end where AS paths have been most recently added The routing device stops searching for pr...

Page 1751: ...ute Resolution resolution ribs Syntax resolution ribs routing table names Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options resolution rib edit logical systems logical system name routing options resolution rib edit routing instances routing instance name routing options resolution rib edit routing options resolution rib Release Inform...

Page 1752: ...efaults route edit routing instances routing instance name routing options static defaults route edit routing options rib routing table name static defaults route edit routing options static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure statically configured routes to be resolved to a next hop that is not directl...

Page 1753: ...graceful restart Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the restart timer for graceful restart Options restart duration seconds Configure the time period for the restart to last Range 120 through 900 seconds Default 90 seconds Required Privilege Level routing To view this statement in the configuration routing control To...

Page 1754: ...ting options static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure statically configured routes to be deleted from or retained in the forwarding table when the routing protocol process shuts down normally retain Have a static route remain in the forwarding table when the routing protocol process shuts down normall...

Page 1755: ...rea area id virtual link edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id interface interface name edit routing instances routing instance name protocols ospf ospf3 area area id virtual link edit routing instances routing instance name protocols ospf3 realm ipv4...

Page 1756: ...options multicast interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable the routing device to identify a subscriber VLAN or interface based on an IGMP or MLD request it receives over the multicast VLAN The remaining statement is explained separately Required Privilege Level routing To view this statement in the co...

Page 1757: ...ns edit logical systems logical system name routing options edit routing instances routing instance name routing options edit routing options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Create a routing table Explicitly creating a routing table with the routing table name statement is optional if you are not adding any static martian a...

Page 1758: ... control To add this statement to the configuration Related Documentation passive Creating Routing Tables rib Route Resolution Syntax rib routing table name import policy names resolution ribs routing table names Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options resolution edit logical systems logical system name routing options resolu...

Page 1759: ...cast multicast edit protocols bgp group group name neighbor address family inet any labeled unicast unicast multicast edit routing instances routing instance name protocols bgp family inet any labeled unicast unicast multicast edit routing instances routing instance name protocols bgp group group name family inet any labeled unicast unicast multicast edit routing instances routing instance name pr...

Page 1760: ...You can install IPv4 routes or IPv6 routes Support for IPv6 routing table groups in IS IS enables IPv6 routes that are learned from IS IS routing instances to be installed into other routing tables defined in an IS IS routing table group Options group name Name of the routing table group inet Install IPv4 IS IS routes inet6 Install IPv6 IS IS routes Required Privilege Level routing To view this st...

Page 1761: ...e name protocols ospf ospf3 edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Install routes learned from OSPF routing instances into routing tables in the OSPF routing table group Options group name Name of the routing table group R...

Page 1762: ...ement introduced before Junos OS Release 10 2 for J EX Series switches Description Install RIP routes into multiple routing tables by configuring a routing table group Options group name Name of the routing table group Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Routing Tab...

Page 1763: ...ptions static Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure which routing table groups interface routes are imported into Options group name Name of the routing table group The name must start with a letter and can include letters numbers and hyphens It generally does not make sense to specify more than a single routing table g...

Page 1764: ...one or more routing tables that the Junos OS uses when importing routes specified in the import rib statement and optionally can contain one routing table group that the Junos OS uses when exporting routes to the routing protocols specified in the export rib statement Options group name Name of the routing table group The name must start with a letter and can include letters numbers and hyphens Th...

Page 1765: ...he configuration Related Documentation Minimum RIP Configuration ripng Syntax ripng Hierarchy Level edit logical systems logical system name protocols edit logical systems logical system name routing instances routing instance name protocols edit protocols edit routing instances routing instance name protocols Release Information Statement introduced before Junos OS Release 10 2 for J EX Series sw...

Page 1766: ...ddress Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Route Distinguishers for VRF and Layer 2 VPN Instances route record Syntax route record Hierarchy Level edit logical systems logical system name routing options edit routing options Release Information Statement introduced ...

Page 1767: ...g instances routing instance name protocols rip edit routing instances routing instance name protocols rip group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the route timeout interval for RIP Options seconds Estimated time to wait before making updates to the routing table Range 30 through 360 seconds Default 180 s...

Page 1768: ...ype community Syntax route type community iana vendor Hierarchy Level editlogical systemslogical system namerouting instancesrouting instance nameprotocols ospf ospf3 edit routing instances routing instance name protocols ospf ospf3 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify an extended community value to encode the OSPF route...

Page 1769: ...t interface encountered by the Junos OS Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Router Identifiers for BGP and OSPF routing options Syntax routing options Hierarchy Level edit edit logical systems logical system name edit logical systems logical system name routing inst...

Page 1770: ...e configuration Related Documentation Configuring RPF Policies scope Syntax scope scope name interface interface names prefix destination prefix Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast edit logical systems logical system name routing options multicast edit routing instances routing instance name routing options mult...

Page 1771: ...st or edit logical systems logical system name routing instances routing instance name routing options multicast hierarchy level Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply policies for scoping The policy must be correctly configured at the edit policy options policy statement hierarchy level Options policy names Name of one or m...

Page 1772: ...ances routing instance name protocols rip group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure RIP send options Options send options One of the following broadcast Broadcast RIP version 2 packets RIP version 1 compatible multicast Multicast RIP version 2 packets This is the default none Do not s...

Page 1773: ...hbor neighbor name edit routing instances routing instance name protocols ripng edit routing instances routing instance name protocols ripng group group name neighbor neighbor name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable or disable sending of update messages Options none Optional Disable sending of update messages Default En...

Page 1774: ...configuration routing control To add this statement to the configuration Related Documentation Enabling OSPF Traffic Engineering Support source Syntax source addresses Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast ssm map ssm map name edit logical systems logical system name routing options multicast ssm map ssm map name ...

Page 1775: ...re Junos OS Release 10 2 for J EX Series switches Description Enable source routing Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Enabling Source Routing 1703 Chapter 73 Configuration Statements for Layer 3 Protocols ...

Page 1776: ...PF algorithm runs the maximum number of times Options delay milliseconds Time interval between the detection of a topology change and when the SPF algorithm runs Range 50 through 1000 milliseconds Default 200 milliseconds holddown milliseconds Time interval to hold down or wait before a subsequent SPF algorithm runs after the SPF algorithm has run the configured maximum number of times in successi...

Page 1777: ...y default ipv4 multicast name edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure options for running the shortest path first SPF algorithm You can configure a delay for when to run the SPF algorithm after a network topology ...

Page 1778: ...multicast edit routing instances routing instance name routing options multicast edit routing options multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure additional source specific multicast SSM groups Options ip addresses List of one or more additional SSM group addresses separated by a space Required Privilege Level routi...

Page 1779: ...tions multicast edit routing options multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure SSM mapping Options ssm map name Name of the SSM map The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configurati...

Page 1780: ...e static options Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options edit logical systems logical system name routing options edit logical systems logical system name routing options rib routing table name edit routing instances routing instance name routing options edit routing options edit routing options rib routing table name Release...

Page 1781: ... the packets do not send ICMP unreachable messages to the packets originators and install a reject route for this destination into the routing table iso net Reach the next hop routing device by specifying an ISO NSAP next table routing table name Name of the next routing table to the destination receive Install a receive route for this destination into the routing table reject Do not forward packe...

Page 1782: ...uting instance name protocols ospf ospf3 area area id edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify that this area not be flooded with AS external link state advertisements LSA s You must include the stub statement when c...

Page 1783: ...es Description Length of time before the multicast VLAN updates QoS data for example available bandwidth for subscriber interfaces after it receives an IGMP leave message Options seconds Length of time before the multicast VLAN updates QoS data for example available bandwidth for subscriber interfaces after it receives an IGMP leave message Specifying a value of 0 results in an immediate update th...

Page 1784: ...ocols ospf ospf3 area area id nssa edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure whether or not area border routers advertise summary routes into an not so stubby area NSSA summaries Flood summary link...

Page 1785: ...oute edit routing instances routing instance name routing options rib routing table name aggregate generate static defaults route edit routing options aggregate generate static defaults route edit routing options rib routing table name aggregate generate static defaults route Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate an OSP...

Page 1786: ... protocols bgp edit protocol bgp group group name edit protocols bgp group group name neighbor neighbor name edit routing instances routing instance name protocols bgp edit routing instances routing instance name protocols bgp group group name edit routing instances routing instance name protocols bgp group group name neighbor neighbor name Release Information Statement introduced before Junos OS ...

Page 1787: ...he suppression and reuse thresholds for multicast forwarding cache limits Options reuse value Value at which to begin creating new multicast forwarding cache entries This value is optional If configured this number should be less than the suppress value Range 1 through 200 000 suppress value Value at which to begin suppressing new multicast forwarding cache entries This value is mandatory This num...

Page 1788: ...t in the configuration routing control To add this statement to the configuration timeout Multicast Syntax timeout minutes Hierarchy Level edit logical systems logical system name routing instances routing instance name routing options multicast forwarding cache edit logical systems logical system name routing options multicast forwarding cache edit routing instances routing instance name routing ...

Page 1789: ...ng instance name protocols isis Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure alternate IS IS topologies The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring IS I...

Page 1790: ...cing options To specify more than one tracing operation include multiple flag statements Default The default BGP protocol level tracing options are inherited from the routing protocols traceoptions statement included at the edit routing options hierarchy level The default group level trace options are inherited from the BGP protocol level traceoptions statement The default peer level trace options...

Page 1791: ...ly this flag received keepalive messages do not generate a trace message Use the keepalive flag to generate a trace message for keepalive messages Global Tracing Flags all All tracing operations general A combination of the normal and route trace operations normal All normal operations Default If you do not specify this option only unusual or abnormal operations are traced policy Policy operations...

Page 1792: ...ecify a maximum file size you also must specify a maximum number of trace files with the files option Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through the maximum file size supported on your system Default 128 KB world readable Optional Allow any user to read the log file Required Privilege Level routing and trace To view this statement in the configuration routing ...

Page 1793: ...isable a single operation when you have defined a broad group of tracing operations such as all file name Name of the file to receive the output of the tracing operation Enclose the name within quotation marks All files are placed in the directory var log We recommend that you place IS IS tracing output in the file isis log files number Optional Maximum number of trace files When a trace file name...

Page 1794: ...led trace information receive Packets being received send Packets being transmitted no world readable Optional Prevent any user from reading the log file size size Optional Maximum size of each trace file in kilobytes KB megabytes MB or gigabytes GB When a trace file named trace file reaches this size it is renamed trace file 0 When the trace file again reaches its maximum size trace file 0 is ren...

Page 1795: ...ace To view this statement in the configuration routing control and trace control To add this statement to the configuration Related Documentation Tracing IS IS Protocol Traffic 1723 Chapter 73 Configuration Statements for Layer 3 Protocols ...

Page 1796: ... multiple flag statements Default The default OSPF protocol level tracing options are those inherited from the routing protocols traceoptions statement included at the edit routing options hierarchy level Options disable Optional Disable the tracing operation You can use this option to disable a single operation when you have defined a broad group of tracing operations such as all file filename Na...

Page 1797: ...pological database lsa update Link state updates packets which are used in synchronizing the OSPF topological database nsr synchronization Nonstop routing synchronization events on demand Trace demand circuit extensions packet dump Content of selected packet types packets All OSPF packets spf Shortest path first SPF calculations Global Tracing Flags all All tracing operations general A combination...

Page 1798: ...s until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum file size you also must specify a maximum number of trace files with the files option Syntax xk to specify KB xm to specify MB or xg to specify GB Range 10 KB through the maximum file size supported on your system Default 128 KB world readable Optional Allow any user to read the ...

Page 1799: ... as all file filename Name of the file to receive the output of the tracing operation Enclose the name in quotation marks We recommend that you place RIP tracing output in the file var log rip log files number Optional Maximum number of trace files When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace fi...

Page 1800: ...ation for packets being transmitted no world readable Optional Prevent any user from reading the log file size size Optional Maximum size of each trace file in kilobytes KB or megabytes MB When a trace file named trace file reaches this size it is renamed trace file 0 When the trace file again reaches its maximum size trace file 0 is renamed trace file 1 and trace file is renamed trace file 0 This...

Page 1801: ...Related Documentation Tracing RIP Protocol Traffic 1729 Chapter 73 Configuration Statements for Layer 3 Protocols ...

Page 1802: ... receive the output of the tracing operation Enclose the name in quotation marks We recommend that you place RIPng tracing output in the file var log ripng log files number Optional Maximum number of trace files When a trace file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace ...

Page 1803: ...tted no world readable Optional Do not allow any user to read the log file size size Optional Maximum size of each trace file in kilobytes KB megabytes MB or gigabytes GB When a trace file named trace file reaches this size it is renamed trace file 0 When the trace file again reaches its maximum size trace file 0 is renamed trace file 1 and trace file is renamed trace file 0 This renaming scheme c...

Page 1804: ...Related Documentation Tracing RIPng Protocol Traffic 1732 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1805: ...operation when you have defined a broad group of tracing operations such as all file filename Name of the file to receive the output of the tracing operation Enclose the name within quotation marks All files are placed in the directory var log We recommend that you place global routing protocol tracing output in the file routing log files number Optional Maximum number of trace files When a trace ...

Page 1806: ...d trace file 0 When the trace file again reaches its maximum size trace file 0 is renamed trace file 1 and trace file is renamed trace file 0 This renaming scheme continues until the maximum number of trace files is reached Then the oldest trace file is overwritten Note that if you specify a maximum file size you also must specify a maximum number of trace files with the files option Syntax xk to ...

Page 1807: ... not need to include this statement if RSVP is able to signal unnumbered interfaces as defined in RFC 3477 credibility protocol preference Optional OSPFv2 only Specify to use the configured preference value for OSPF routes to calculate the traffic engineering database credibility value used to select IGP routes Use this statement to override the default behavior of having the traffic engineering d...

Page 1808: ...rea id interface interface name edit protocols ospf ospf3 area area id virtual link edit protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id interface interface name edit routing instances routing instance name protocols ospf area area id interface interface name edit routing instances routing instance name protocols ospf area area id virtual link edit routing instances r...

Page 1809: ...rotocols bgp group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the type of BGP peer group Options type Type of group external External group internal Internal group Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documenta...

Page 1810: ...e protocols ospf ospf3 area area id nssa default lsa edit routing instances routing instance name protocols ospf3 realm ipv4 unicast ipv4 multicast ipv6 multicast area area id nssa default lsa Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Flood Type 7 default link state advertisements LSAs if the no summaries statement is configured By d...

Page 1811: ...to the configuration Related Documentation Configuring RIP Timers update interval Syntax update interval seconds Hierarchy Level edit logical systems logical system name protocols ripng editlogical systemslogical system namerouting instancesrouting instance nameprotocols ripng edit protocols ripng edit routing instances routing instance name protocols ripng Release Information Statement introduced...

Page 1812: ...ing device translates PIM join or prune messages into corresponding IGMP report or leave messages if you include the pim to igmp proxy statement or into corresponding MLD report or leave messages if you include the pim to mld proxy statement The routing device then proxies the IGMP or MLD report or leave messages to one or both upstream interfaces to forward IPv4 multicast traffic for IGMP or IPv6...

Page 1813: ...he address of an aggregated Ethernet interface a LAG or a routed VLAN interface RVI cannot be assigned as the virtual router address in a VRRP IPv6 group Options addresses Addresses of one or more virtual routers Do not include a prefix length If the address is the same as the interface s physical address the interface becomes the master virtual router for the group Required Privilege Level interf...

Page 1814: ...uting devices on the backbone must be contiguous If this is not possible and there is a break in OSPF connectivity use virtual links to create connectivity to the OSPF backbone When configuring virtual links you must configure links on the two routing devices that form the end points of the link and both these two routing devices must be area border routers You cannot configure links through stub ...

Page 1815: ...r Redundancy Protocol VRRP IPv6 group You must explicitly define a virtual link local address for each VRRP IPv6 group The virtual link local address must be in the same subnet as the physical interface address Options ipv6 address Virtual link local IPv6 address for VRRP for an IPv6 group Required Privilege Level interface To view this statement in the configuration interface control To add this ...

Page 1816: ...e interface you must include the virtual MAC address in the list of source MAC addresses that you specify in the source address filter statement MAC addresses ranging from 00 00 5e 00 01 00 through 00 00 5e 00 01 ff are reserved for VRRP as defined in RFC 3768 The VRRP group number must be the decimal equivalent of the last hexadecimal byte of the virtual MAC address Range 0 through 255 The remain...

Page 1817: ...tance name protocols isis level level number Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure IS IS to generate metric values greater than 63 on a per IS IS level basis Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation te me...

Page 1818: ...1746 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1819: ...CHAPTER 74 Operational Commands for Layer 3 Protocols 1747 ...

Page 1820: ...ntra area prefix link local lsa id lsa id netsummary network nssa opaque area purge router Release Information Command introduced before Junos OS Release 10 2 for J EX Series switches Description With the master Routing Engine delete entries in the Open Shortest Path First OSPF link state advertisement LSA database With the backup Routing Engine delete the OSPF LSA database and sync the new databa...

Page 1821: ...cal system name Optional Perform this operation on all logical systems or on a particular logical system link local Optional Delete link local LSAs lsa id lsa id Optional Discard the LSA entries with the specified LSA identifier netsummary Optional Discard summary network LSAs network Optional Discard network LSAs nssa Optional Discard not so stubby area NSSA LSAs opaque area Optional Discard opaq...

Page 1822: ...abase on page 1750 Output Fields When you enter this command you are provided feedback on the status of your request clear ospf database user host clear ospf database clear ospf database 1750 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1823: ...atistics Options none Clear OSPF input and output statistics logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear List of Sample Output clear ospf io statistics on page 1751 Output Fields When you enter this command you are provided feedback on the status of your request clear ospf io statisti...

Page 1824: ... routing instance only interface interface name Optional Tear down neighbor connections for the specified interface only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system neighbor Optional Clear the state of the specified neighbor only realm ipv4 multicast ipv4 unicast ipv6 multicast Optional OSPFv3 only Clear the state ...

Page 1825: ...cify an address family for OSPFv3 other than IPv6 unicast which is the default Required Privilege Level clear Related Documentation show ospf ospf3 statistics on page 1796 List of Sample Output clear ospf statistics on page 1753 Output Fields See show ospf ospf3 statistics for an explanation of output fields clear ospf statistics The following sample output displays OSPF statistics before and afte...

Page 1826: ...ed Hello 3 1 3 1 DbD 0 0 0 0 LSReq 0 0 0 0 LSUpdate 0 0 0 0 LSAck 0 0 0 0 LSAs retransmitted 0 last 5 seconds 0 Flood queue depth 0 Total rexmit entries 0 db summaries 0 lsreq entries 0 Receive errors None 1754 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1827: ...ical system name Optional Perform this operation on all logical systems or on a particular logical system prefix Optional Clear route flap damping information for only the specified destination prefix Required Privilege Level clear Related Documentation show policy damping on page 1886 show route damping on page 1922 List of Sample Output clear bgp damping on page 1755 Output Fields When you enter...

Page 1828: ...one or more BGP neighbors without changing their state Options none Change the state of all BGP neighbors to IDLE as as number Optional Apply this command only to neighbors in the specified autonomous system AS instanceinstance name Optional Applythiscommandonlytoneighborsforthespecified routing instance logical system all logical system name Optional Perform this operation on all logical systems ...

Page 1829: ...812 List of Sample Output clear bgp neighbor on page 1757 Output Fields When you enter this command you are provided feedback on the status of your request clear bgp neighbor user host clear bgp neighbor clear bgp neighbor 1757 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1830: ...Information In some cases a prefix limit is associated with a routing table for a VPN instance When this limit is exceeded for example because of a network misconfiguration some routes might not be inserted in the table Such routes need to be added to the table after the network issue is resolved Use the clear bgp table command to request that BGP refresh routes in a VPN instance table Required Pr...

Page 1831: ... all IPv6 neighbor cache information host hostname Optional Clear the information for the specified IPv6 neighbors Required Privilege Level view Related Documentation show ipv6 neighbors on page 1031 List of Sample Output clear ipv6 neighbors on page 1759 Output Fields When you enter this command you are provided feedback on the status of your request clear ipv6 neighbors user host clear ipv6 neig...

Page 1832: ...l system all logical system name Optional Perform this operation on all logical systems or on a particular logical system neighbor Optional Clear adjacencies for the specified neighbor only Required Privilege Level clear Related Documentation show isis adjacency on page 1830 List of Sample Output clear isis adjacency on page 1760 Output Fields See show isis adjacency for an explanation of output f...

Page 1833: ...y IS IS adjacency database Interface System L State Hold secs SNPA so 1 0 0 0 karakul 3 Initializing 26 so 1 1 3 0 1921 6800 5080 3 Up 24 so 5 0 0 0 1921 6800 5080 3 Up 21 1761 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1834: ...ries from the IS IS link state database for all routing instances entries Optional Name of the database entry instance instance name Optional Clear all entries for the specified routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system purge Optional Discard all entries in the IS IS link state database Required ...

Page 1835: ...ranier 00 00 0x2e 0xfc31 1007 1921 6800 5066 00 00 0x11 0x7313 566 1921 6800 5067 00 00 0x14 0xd9d4 939 6 LSPs user host clear isis database user host show isis database IS IS level 1 link state database LSP ID Sequence Checksum Lifetime secs IS IS level 2 link state database LSP ID Sequence Checksum Lifetime secs 1763 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1836: ...onal Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show isis database on page 1843 List of Sample Output clear isis overload on page 1764 Output Fields See show isis database for an explanation of output fields clear isis overload The following sample output displays IS IS database information before and after t...

Page 1837: ...ttributes pro3 c 00 00 0xa 0x429e 1183 L1 L2 1 LSPs IS IS level 2 link state database LSP ID Sequence Checksum Lifetime Attributes pro3 c 00 00 0xc 0x9c39 1183 L1 L2 pro2 a 00 00 0x91e 0x2589 783 L1 L2 pro2 a 02 00 0x1 0xcbc 783 L1 L2 3 LSPs 1765 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1838: ...em Required Privilege Level view Related Documentation show isis statistics on page 1866 List of Sample Output clear isis statistics on page 1766 Output Fields See show isis statistics for an explanation of output fields clear isis statistics The following sample output displays IS IS statistics before and after the clear isis statistics command is entered clear isis statistics user host show isis...

Page 1839: ...cessed Drops Sent Rexmit LSP 0 0 0 0 0 IIH 3 3 0 3 0 CSNP 2 2 0 4 0 PSNP 0 0 0 0 0 Unknown 0 0 0 0 0 Totals 5 5 0 7 0 Total packets received 5 Sent 7 SNP queue length 0 Drops 0 LSP queue length 0 Drops 0 SPF runs 0 Fragments rebuilt 0 LSP regenerations 0 Purges initiated 0 1767 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1840: ...bit and rebuild LSAs for all routing instances instance instance name Optional Clear the overload bit and rebuild LSAs for the specified routing instance only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear List of Sample Output clear ospf overload on page 1768 Output Fields When you ente...

Page 1841: ...l statistics logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show rip general statistics on page 1888 List of Sample Output clear rip general statistics on page 1769 Output Fields When you enter this command you are provided feedback on the status of your request cle...

Page 1842: ...lear RIP statistics for all instances or for the specified routing instance only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system neighbor Optional Clear RIP statistics for the specified neighbor only Required Privilege Level clear Related Documentation show rip statistics on page 1891 List of Sample Output clear rip st...

Page 1843: ...g general statistics logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show ripng general statistics on page 1894 List of Sample Output clear ripng general statistics on page 1771 Output Fields When you enter this command you are provided feedback on the status of your...

Page 1844: ...et RIPng counters for the specified instance name Optional Reset RIPng counters for the specified neighbor logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show ripng statistics on page 1897 List of Sample Output clear ripng statistics on page 1772 Output Fields When ...

Page 1845: ...nterface name Optional Display information for the specified interface instance instance name Optional Display all OSPF interfaces under the named routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system realm ipv4 multicast ipv4 unicast ipv6 multicast Optional OSPFv3 only Display information about the interfac...

Page 1846: ... extensive OSPFv3 OSPF version 3 interface index OSPF3 Intf Index detail extensive Interface s maximum transmission unit MTU MTU detail extensive Interface s cost metric Cost detail extensive Address of the designated router DR addr detail extensive Address of the backup designated router BDR addr detail extensive Number of adjacent neighbors Adj count detail extensive Indicates that this interfac...

Page 1847: ...ticate received OSPF protocol packets the key becomes effective immediately after the configuration is committed If the start time option is not configured the key is effective immediately for send and receive and is displayed as Start time 1970 Jan 01 00 00 00 PST Start time detail extensive Configured value for the Retransmit timer ReXmit detail extensive Type of area Stub Not Stub or Stub NSSA ...

Page 1848: ...45 2 Mask 255 255 255 255 MTU 65535 Cost 0 DR addr 10 255 245 2 Adj count 0 Priority 128 Hello 10 Dead 40 ReXmit 5 Not Stub Auth type None Topology default ID 0 Cost 0 so 0 0 0 0 PtToPt 0 0 0 0 0 0 0 0 0 0 0 0 1 Type P2P Address 0 0 0 0 Mask 0 0 0 0 MTU 4470 Cost 1 Adj count 1 Hello 10 Dead 40 ReXmit 5 Not Stub Auth type None Topology default ID 0 Cost 1 so 0 0 0 0 PtToPt 0 0 0 0 0 0 0 0 0 0 0 0 0...

Page 1849: ... 0 0 Mask 0 0 0 0 MTU 4470 Cost 1 Adj count 1 Secondary Hello 10 Dead 40 ReXmit 5 Not Stub Auth type None Topology default ID 0 Cost 1 show ospf interface area area id user host show ospf interface area 1 1 1 1 Interface State Area DR ID BDR ID Nbrs so 0 0 0 0 PtToPt 1 1 1 1 0 0 0 0 0 0 0 0 1 so 1 0 0 0 PtToPt 1 1 1 1 0 0 0 0 0 0 0 0 1 show ospf interface extensive When Flooding Reduction Is Enabl...

Page 1850: ... on page 1778 Output Fields Table 204 on page 1778 lists the output fields for the show ospf io statistics command Output fields are listed in the approximate order in which they appear Table 204 show ospf ospf3 io statistics Output Fields Field Description Field Name Number of OSPF packets read since the last time the routing protocol was started Packets read Total number of packets divided by th...

Page 1851: ... specified topology realm ipv4 multicast ipv4 unicast ipv6 multicast OSPFv3 only Optional Display entries for the specified OSPFv3 realm or address family Use the realm option to specify an address family for OSPFv3 other than IPv6 unicast which is the default Required Privilege Level view List of Sample Output show ospf log on page 1780 show ospf log topology voice on page 1780 Output Fields Tabl...

Page 1852: ...nstance of each event type When Type Elapsed 00 06 11 SPF 0 000116 00 06 11 Stub 0 000114 00 06 11 Interarea 0 000126 00 06 11 External 0 000067 00 06 11 NSSA 0 000037 00 06 11 Cleanup 0 000186 Maximum length of each event type When Type Elapsed 00 13 43 SPF 0 000140 00 13 33 Stub 0 000116 00 13 43 Interarea 0 000128 00 13 33 External 0 000075 00 13 38 NSSA 0 000039 00 13 53 Cleanup 0 000657 Last ...

Page 1853: ...00 06 11 Cleanup 0 000186 00 06 11 Total 0 000818 1781 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1854: ...SPF neighbors for the specified area instance all instance name Optional Display all OSPF interfaces for all routing instances or under the named routing instance interface interface name Optional Display information about OSPF neighbors for the specified logical interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical syste...

Page 1855: ... by sending database description packets to the neighbor Each packet has a sequence number and is explicitly acknowledged ExStart First step in creating an adjacency between the two neighboring routing devices The goal of this step is to determine which routing device is the master and to determine the initial sequence number Full Neighboring routing devices are fully adjacent These adjacencies ap...

Page 1856: ...xtensive OSPFv3 only Displays the OSPFv3 interface index OSPF3 Intf Index detail extensive Option bits received in the hello packets from the neighbor opt detail extensive Address of the designated router DR or DR ID detail extensive Address of the backup designated router BDR or BDR ID detail extensive Length of time since the neighbor came up Up detail extensive Length of time since the adjacenc...

Page 1857: ...x42 DR 10 5 1 2 BDR 10 5 1 1 Up 06 09 42 adjacent 05 17 50 Link state retransmission list Type LSA ID Adv rtr Seq Summary 10 8 56 0 172 25 27 82 0x8000004d Router 10 5 1 94 10 5 1 94 0x8000005c Network 10 5 24 2 10 5 1 94 0x80000036 Summary 10 8 57 0 172 25 27 82 0x80000024 Extern 1 10 90 0 10 8 1 2 0x80000041 Extern 1 4 109 0 10 6 1 2 0x80000041 Router 10 5 1 190 10 5 1 190 0x8000005f Network 10 ...

Page 1858: ...st show ospf neighbor area 1 1 1 1 Address Interface State ID Pri Dead 192 168 37 47 so 0 0 0 0 Full 10 255 245 4 128 33 Area 1 1 1 1 192 168 37 55 so 1 0 0 0 Full 10 255 245 5 128 37 Area 1 1 1 1 show ospf neighbor interface interface name user host show ospf neighbor interface so 0 0 0 0 Address Interface State ID Pri Dead 192 168 37 47 so 0 0 0 0 Full 10 255 245 4 128 37 Area 0 0 0 0 192 168 37...

Page 1859: ...peration on all logical systems or on a particular logical system realm ipv4 multicast ipv4 unicast ipv6 multicast Optional OSPFv3 only Display information about the specified OSPFv3 realm or address family Use the realm option to specify an address family for OSPFv3 other than IPv6 unicast which is the default Required Privilege Level view List of Sample Output show ospf overview on page 1789 sho...

Page 1860: ...f maximum LSA count Warning threshold All levels Number of LSAs whose router ID is not equal to the local router ID Current Warning threshold and Allowed Non self generated LSAs All levels How long the database has been in the ignore state Ignore time All levels How long the database must stay out of the ignore or isolated state before it returns to normal operations Reset time All levels Number o...

Page 1861: ...ndary routers 0 Neighbors Up in full state 0 Topology default ID 0 Prefix export count 0 Full SPF runs 1 SPF delay 0 200000 sec SPF holddown 5 sec SPF rapid runs 3 show ospf overview with Database Protection user host show ospf overview Instance master Router ID 10 255 112 218 Route table index 0 LSA refresh time 50 minutes Traffic engineering Restart Enabled Restart duration 180 sec Restart grace...

Page 1862: ... AS boundary routers 0 Neighbors Up in full state 1 Topology default ID 0 Prefix export count 0 Full SPF runs 7 SPF delay 0 200000 sec SPF holddown 5 sec SPF rapid runs 3 Backup SPF Not Needed show ospf overview extensive user host show ospf overview extensive Instance master Router ID 1 1 1 103 Route table index 0 Full SPF runs 13 SPF delay 0 200000 sec LSA refresh time 50 minutes Restart Disable...

Page 1863: ...stances and all topologies brief detail extensive Optional Display the specified level of output abr Optional Display routes to area border routers asbr Optional Display routes to autonomous system border routers extern Optional Display external routes inter Optional Display interarea routes intra Optional Display intra area routes instance instance name Optional Display entries for the specified ...

Page 1864: ...tion of the route Prefix All levels How the route was learned Inter Interarea route Ext1 External type 1 route Ext2 External type 2 route Intra Intra area route Path type All levels The type of routing device from which the route was learned AS BR Route to AS border router Area BR Route to area border router Area AS BR Route to router that is both an Area BR and AS BR Network Network router Router...

Page 1865: ...when Route Type is Area BR AS BR Area AS BR or Router not for interarea router routes or network routes Three bits in this field are defined as follows 0x4 V Routing device is at the end of a virtual active link 0x2 E Routing device is an autonomous system boundary router 0x1 B Routing device is an area border router optional capability detail The priority assigned to the prefix high medium low NO...

Page 1866: ...priority high 10 255 245 2 32 Intra Network IP 0 lo0 0 area 0 0 0 0 origin 10 255 245 2 priority medium 10 255 245 3 32 Intra Network IP 1 fxp2 3 192 168 36 34 area 0 0 0 0 origin 10 255 245 3 priority low Intra Transit IP 1 NH interface fe 0 0 2 0 192 168 222 84 126 Intra Network IP 1 NH interface fe 0 0 2 0 abcd 71 12 128 Intra Network IP 0 NH interface lo0 0 abcd 71 13 128 Intra Network LSP 1 N...

Page 1867: ...e Type Type Interface addr label 10 255 8 2 Intra Router IP 1 so 0 2 0 0 10 255 8 3 Intra Router IP 2 so 0 2 0 0 10 255 8 1 32 Intra Network IP 0 lo0 0 10 255 8 2 32 Intra Network IP 1 so 0 2 0 0 10 255 8 3 32 Intra Network IP 2 so 0 2 0 0 192 168 8 0 29 Intra Network IP 2 so 0 2 0 0 192 168 8 44 30 Intra Network IP 2 so 0 2 0 0 192 168 8 46 32 Intra Network IP 1 so 0 2 0 0 192 168 8 48 30 Intra N...

Page 1868: ...lm or address family Use the realm option to specify an address family for OSPFv3 other than IPv6 unicast which is the default Required Privilege Level view Related Documentation clear ospf ospf3 statistics on page 1753 List of Sample Output show ospf statistics on page 1797 Output Fields Table209onpage1796liststheoutputfieldsfortheshow ospf ospf3 statisticscommand Output fields are listed in the ...

Page 1869: ... Sent Received show ospf statistics Hello 505739 990495 4 5 DbD 20 26 0 0 LSReq 6 5 0 0 LSUpdate 27060 15319 0 0 LSAck 10923 52470 0 0 LSAs retransmitted 16 last 5 seconds 0 Receive errors 862 no interface found 115923 no virtual link found 1797 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1870: ...ical system Required Privilege Level view List of Sample Output show as path on page 1799 show as path detail on page 1800 Output Fields Table 210 on page 1798 lists the output fields for the showas path command Output fields are listed in the approximate order in which they appear Table 210 show as path Output Fields Level of Output Field Description Field Name brief none Total number of AS paths...

Page 1871: ...1239 4657 9226 I 14203 2914 1239 7132 16394 I 14203 2914 1299 8308 34826 I 14203 2914 3320 5603 28682 I 14203 2914 3491 1680 33802 I 14203 2914 3549 7908 27658 I 14203 2914 3549 20804 30730 I 14203 2914 7018 2687 9226 I 14203 2914 174 9318 9318 23564 I 14203 2914 701 3786 3786 23564 I 14203 2914 701 4761 4795 9228 I 14203 2914 1239 7132 5673 18444 I 14203 2914 3491 20485 24588 24588 I 14203 2914 5...

Page 1872: ...n 1 neighbor as 14203 length 5 segments 1 references 3 AS path 14203 2914 1239 4657 9226 I domain 1 neighbor as 14203 length 5 segments 1 references 7 AS path 14203 2914 1239 7132 16394 I domain 1 neighbor as 14203 length 5 segments 1 references 2 AS path 14203 2914 1299 8308 34826 I domain 1 neighbor as 14203 length 5 segments 1 references 2 AS path 14203 2914 3320 5603 28682 I domain 1 neighbor ...

Page 1873: ...325 14348 I domain 1 neighbor as 14203 length 6 segments 1 references 2 AS path 14203 2914 701 4637 9230 9230 9230 I domain 1 neighbor as 14203 length 7 segments 1 references 3 AS path 14203 2914 6395 14 14 14 14 I domain 1 neighbor as 14203 length 7 segments 1 references 10 1801 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1874: ...command Output fields are listed in the approximate order in which they appear Table 211 show as path domain Output Fields Field Description Field Name Number of independent AS domains The AS paths of an independent AS domain are not shared with the AS paths and AS path attributes of other domains including the master routing instance domain Domain Primary AS number Primary Path reference count Re...

Page 1875: ...as path domain user host show as path domain Domain 1 Primary 10458 References 3 Paths 30383 show as path domain Flags Master Local AS 10458 Loops 1 1803 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1876: ...n page 1804 Output Fields Table 212 on page 1804 lists the output fields for the show as path summary command Output fields are listed in the approximate order in which they appear Table 212 show as path summary Output Fields Field Description Field Name AS path number AS Path Bucket value This value represents a traffic classification on the interface Buckets Maximum limit for the number of AS nu...

Page 1877: ...tistics are sent BMP station address port Status of the BMP session UP or DOWN BMP session state Memory used by the active BMP session Memory consumed by BMP Amount of time in seconds between transmissions of BMP data to the monitoring station Statistics timeout Threshold in bytes at which the routing device stops collecting BMP data if it is exceeded Memory limit Amount of time in seconds after w...

Page 1878: ...r the main instance or any valid configured instance name or its prefix logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system rtf Optional Display BGP group route targeting information Required Privilege Level view List of Sample Output show bgp group on page 1809 show bgp group on page 1810 show bgp group brief on page 1810...

Page 1879: ...s contents depend upon whether a session is established and whether an established session was established in the main routing device or in a routing instance If a peer is not established the field shows the state of the peer session Active Connect or Idle If a BGP session is established in the main routing device the field shows the number of active received accepted and damped routes that are re...

Page 1880: ... both active and inactive that are in the routing table Active external prefixes Number of prefixes received from the EBGP peers that are active in the routing table Externals suppressed Number of routes received from EBGP peers currently inactive because of damping or other reasons Received internal prefixes Total number of prefixes from the IBGP peers both active and inactive that are in the rou...

Page 1881: ...arget included in the advertised route Receive mask detail Number of route entries received Entries detail Route target that is to be passed by route target filtering If a route advertised from the provider edge PE routing device matches an entry in the route target filter the route is passed to the peer Target detail Mask which specifies that the peer receive routes with the given route target Ma...

Page 1882: ... bgp group detail Group Type Internal AS 21 Local AS 21 Name from_vpn04_to_other Index 0 Flags Holdtime 0 Total peers 3 Established 3 10 255 14 178 179 10 255 71 24 179 10 255 14 182 179 Route Queue Timer unset Route Queue empty Table inet 0 Active prefixes 2 Received prefixes 7 Suppressed due to damping 0 Advertised prefixes 5 Group Type External Local AS 21 Name from_vpn04_to_vpn06 Index 1 Flags...

Page 1883: ...64 00000008 10458 8 64 00000008 10458 10 64 00000002 show bgp group summary user host show bgp group summary Group Type Peers Established Active Received Damped from_vpn04_to_other Internal 3 3 inet 0 2 7 0 from_vpn04_to_vpn06 External 1 1 inet 0 5 10 0 Groups 2 Peers 4 External 1 Internal 3 Down peers 0 Flaps 2 inet 0 7 17 0 External 5 10 0 Internal 2 7 0 show bgp group summary user host show bgp...

Page 1884: ...neighbor address Optional Display outbound route filtering information for all BGP peers or only for the BGP peer at the specified IP address The default is to display brief output Use the detail option to display detailed output AdditionalInformation For information about the local address nlri hold time and preference statements see the Junos OS Routing Protocols Configuration Guide Required Pri...

Page 1885: ... a single forwarding label CleanUp The peer session is being shut down Delete This peer has been deleted Idled This peer has been permanently idled ImportEval At the last commit this peer was identified as needing to reevaluate all received routes Initializing The peer session is initializing SendRtn Messages are being sent to the peer Sync This peer is synchronized with the rest of the peer group...

Page 1886: ...eived a BGP open message from the peer RecvUpdate The local routing device received a BGP update message from the peer Start The peering session started Stop The peering session stopped TransportError A TCP error occurred Last event Last error that occurred in the BGP session Cease An error occurred such as a version mismatch that caused the session to close Finite State Machine Error In setting u...

Page 1887: ...thentication key change Type of authentication algorithm enabled hmac or md5 Authentication algorithm Names of configured address families for the VPN Address families configured Address of the local routing device Local Address Hold time configured with the hold time statement The hold time is three times the interval at which keepalive messages are sent Holdtime Flags related to labeled unicast ...

Page 1888: ...ty for BGP 4 Peer supports Refresh capability Configured time allowed for restart on the neighbor Restart time configured on peer When graceful restart is negotiated the maximum time allowed to hold routes from neighbors after the BGP session has gone down Stale routes from peer are kept for Restart time requested by this neighbor during capability negotiation Restart time requested by this peer W...

Page 1889: ...ges that BGP has received from the receive socket buffer showing the total number of messages number of update messages number of times a policy is changed and refreshed and the buffer size in octets The buffer size is 16 KB Input messages Messages that BGP has written to the transmit socket buffer showing the total number of messages number of update messages number of times a policy is changed a...

Page 1890: ...vent RecvKeepAlive Last Error None Options Multihop Preference LocalAddress HoldTime AddressFamily PeerAS Rib group Refresh Address families configured iso vpn unicast Local Address 10 245 245 3 Holdtime 90 Preference 170 Number of flaps 0 Peer ID 10 245 245 1 Local ID 10 245 245 3 Active Holdtime 90 Keepalive Interval 30 Peer index 0 NLRI advertised by peer iso vpn unicast NLRI for this session i...

Page 1891: ... unicast l2vpn Local Address 10 255 14 176 Holdtime 90 Preference 170 Number of flaps 0 Peer ID 10 255 14 182 Local ID 10 255 14 176 Active Holdtime 90 Keepalive Interval 30 NLRI for restart configured on peer inet vpn unicast l2vpn NLRI advertised by peer inet vpn unicast l2vpn NLRI for this session inet vpn unicast l2vpn Peer supports Refresh capability 2 Restart time configured on the peer 120 ...

Page 1892: ...ogress Send state in sync Active prefixes 2 Received prefixes 2 Suppressed due to damping 0 Table STATIC inet 0 Bit 80000 RIB State BGP restart is complete RIB State VPN restart in progress Send state in sync Active prefixes 1 Received prefixes 1 Suppressed due to damping 0 Table L2VPN l2vpn 0 Bit 90000 RIB State BGP restart is complete RIB State VPN restart in progress Send state in sync Active p...

Page 1893: ...pn unicast NLRI of received end of rib markers inet vpn unicast NLRI of all end of rib markers sent inet vpn unicast Table bgp l3vpn 0 Bit 10000 RIB State BGP restart is complete RIB State VPN restart is complete Send state in sync Active prefixes 2 Received prefixes 2 Suppressed due to damping 0 Table vpn green inet 0 Bit 20001 RIB State BGP restart is complete RIB State VPN restart is complete S...

Page 1894: ...Updates 6 Refreshes 0 Octets 403 Output messages Total 7 Updates 3 Refreshes 0 Octets 365 Output Queue 0 0 Output Queue 1 0 Trace options detail packets Trace file var log bgpgr size 131072 files 10 show bgp neighbor neighbor address user host show bgp neighbor 192 168 4 222 Peer 192 168 4 222 4902 AS 65501 Local 192 168 4 221 179 AS 65500 Type External State Established Flags Sync Last State Open...

Page 1895: ...ets 147 Output Queue 0 0 Output Queue 1 0 Trace options all Trace file var log bgp size 10485760 files 10 show bgp neighbor orf neighbor address detail user host show bgp neighbor orf 192 168 165 56 detail Peer 192 168 165 56 179 Type External Group ext1 inet unicast Filter updates recv 1 Immediate 1 Filter prefix based receive Received filter entries seq 1 prefix 2 2 2 2 32 minlen 32 maxlen 32 ma...

Page 1896: ...iew List of Sample Output show bgp summary When a Peer Is Not Established on page 1826 show bgp summary When a Peer Is Established on page 1826 show bgp summary CLNS on page 1826 show bgp summary Layer 2 VPN on page 1826 show bgp summary Layer 3 VPN on page 1827 Output Fields Table 216 on page 1824 describes the output fields for the show bgp summary command Output fields are listed in the approxi...

Page 1897: ...er is not established the field shows the state of the peer session Active Connect or Idle If a BGP session is established in the main routing device the field shows the number of active received accepted and damped routes that are received from a neighbor and appear in the inet 0 main and inet 2 multicast routing tables For example 8 10 10 2 and 2 4 4 0 indicate the following 8 active routes 10 r...

Page 1898: ...02 54528 54532 0 1 2w4d22h 0 0 0 0 0 0 10 0 0 4 65002 51597 51584 0 0 2w3d22h 2 2 0 0 0 0 show bgp summary CLNS user host show bgp summary Groups 1 Peers 1 Down peers 0 Peer AS InPkt OutPkt OutQ Flaps Last Up Dwn State Active Received Damped 10 245 245 1 200 1735 1737 0 0 14 26 12 Establ bgp isovpn 0 3 3 0 aaaa iso 0 3 3 0 show bgp summary Layer 2 VPN user host show bgp summary Groups 1 Peers 5 Do...

Page 1899: ...Paths Suppressed History Damp State Pending bgp l3vpn 0 2 2 0 0 0 0 Peer AS InPkt OutPkt OutQ Flaps Last Up Dwn State Active Received Damped 10 39 1 5 2 21 22 0 0 6 26 Establ VPN AB inet 0 1 1 0 10 255 71 15 1 19 21 0 0 6 17 Establ bgp l3vpn 0 2 2 0 VPN A inet 0 1 1 0 VPN AB inet 0 2 2 0 VPN B inet 0 1 1 0 1827 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1900: ... Output Fields Field Description Field Name Name of the IPv6 interface IPv6 Address Link layer address Linklayer Address State of the link up down incomplete reachable stale or unreachable State Number of seconds until the entry expires Exp Whether the neighbor is a routing device yes or no Rtr Whether this entry was created using the Secure Neighbor Discovery SEND protocol yes or no Secure Name o...

Page 1901: ...fe80 14fb 5dcf 54bd ff76 00 90 69 a0 a8 bc stale 1113 yes yes ge 3 2 0 0 1829 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1902: ...ystem all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view Related Documentation clear isis adjacency on page 1760 List of Sample Output show isis adjacency on page 1832 show isis adjacency brief on page 1832 show isis adjacency detail on page 1832 show isis adjacency extensive on page 1833 Output Fields Tabl...

Page 1903: ...om Down to Up Up Down transitions detail Time of the last Up Down transition Last transition detail Bit mask of levels on this interface L1 Level 1 router L2 Level 2 router L1 L2 both Level 1 and Level 2 router Circuit type detail extensive Protocols supported by this neighbor Speaks detail extensive MAC address of the interface MAC address detail extensive Supported topologies Topologies detail e...

Page 1904: ...terface Down IS IS interface is unavailable Interface Level Disabled IS IS level is disabled Level Changed IS IS level has changed on the adjacency Level Mismatch Levels on adjacency are not compatible MPLS LSP Down Label switched path LSP is unavailable MT Topology Changed IS IS topology has changed MT Topology Mismatch IS IS topology is mismatched Remote System ID Changed Adjacency peer system I...

Page 1905: ...t 2 3 0 0 Level 3 State Up Expires in 22 secs Priority 0 Up Down transitions 1 Last transition 00 01 16 ago Circuit type 3 Speaks IP IPv6 Topologies Unicast Restart capable Yes IP addresses 11 1 1 2 Transition log When State Event Down reason Wed Nov 8 21 24 25 Up Seenself 1833 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1906: ...d routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show isis authentication on page 1835 Output Fields Table 219 on page 1834 describes the output fields for the show isis authentication command Output fields are listed in the approximate order in whic...

Page 1907: ...ation type L2 LSP Authentication show isis authentication user host show isis authentication Interface Level IIH Auth CSN Auth PSN Auth at 2 3 0 0 1 Simple Simple Simple show isis authentication 2 MD5 MD5 MD5 L1 LSP Authentication Simple L2 LSP Authentication MD5 1835 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1908: ...ar logical system Required Privilege Level view Related Documentation show isis backup label switched path on page 1838 List of Sample Output show isis backup coverage on page 1837 Output Fields Table 220 on page 1836 lists the output fields for the showisisbackupcoverage command Output fields are listed in the approximate order in which they appear Table 220 show isis backup coverage Output Field...

Page 1909: ...ce CLNS routes that are protected through backup coverage CLNS show isis backup coverage user host show isis backup coverage Backup Coverage Topology Level Node IPv4 IPv6 CLNS show isis backup coverage IPV4 Unicast 2 28 57 22 22 0 00 0 00 IPV6 Unicast 2 0 00 0 00 0 00 0 00 1837 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1910: ...1838 lists the output fields for the showisisbackuplabel switched path command Output fields are listed in the approximate order in which they appear Table 221 show isis backup label switched path Output Fields Field Description Field Name List of MPLS LSPs designated as backup paths for IS IS routes Backup MPLS LSPs IP address of the egress routing device for the LSP Egress State of the LSP Up Th...

Page 1911: ... Configured metric Metric show isis backup label switched path user host show isis backup label switched path Backup MPLS LSPs f to g Egress 192 168 1 4 Status up Last change 06 12 03 TE metric 9 Metric 0 show isis backup label switched path 1839 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1912: ... SPF calculations for the backup paths for the specified IS IS level logical system logical system name Optional Display SPF calculations for the backup paths for all logical systems or on a particular logical system no coverage Optional Display SPF calculations only for destinations that do not have backup coverage topology ipv4 multicast ipv6 multicast ipv6 unicast unicast Optional Display SPF c...

Page 1913: ...ackup spf results IS IS level 1 SPF results 0 nodes show isis backup spf results IS IS level 2 SPF results kobuk 00 Address 0x8d85600 Primary next hop ge 0 2 0 0 camaro SNPA 0 90 69 f 62 fa Primary next hop so 0 1 2 0 crater Primary next hop ge 0 2 0 0 camaro SNPA 0 90 69 f 62 fa Primary next hop so 0 1 2 0 crater Root crater Metric 10 Not eligible Reason Primary next hop multipath Root camaro Met...

Page 1914: ...p ge 0 2 0 0 camaro SNPA 0 90 69 f 62 fa Primary next hop ge 0 2 0 0 camaro SNPA 0 90 69 f 62 fa Root camaro Metric 0 Not eligible Reason Primary next hop link fate sharing Root crater Metric 20 track item camaro 00 00 track item banff 00 00 Not eligible Reason Path loops Root olympic Metric 20 track item camaro 00 00 track item banff 00 00 Not eligible Reason Path loops crater 00 Address 0x8d8500...

Page 1915: ...nce level 1 2 Optional Display entries for the specified IS IS level logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view Related Documentation clear isis database on page 1762 List of Sample Output show isis database on page 1845 show isis database brief on page 1845 show isis database detail ...

Page 1916: ...tabase L1 L2 Overload or Attached L1 only Attributes none brief Total number of LSPs in the specified link state database LSPs detail extensive Prefix advertised by this link state PDU IP prefix detail extensive IS IS neighbor of the advertising system IS neighbor detail extensive J Series routers only An ES IS neighbor of the advertising system ES neighbor detail extensive IPv4 prefix advertised ...

Page 1917: ...prefix Extended IP prefix of the routing device IS neighbor Directly attached neighbor s name and metric IS extended neighbor Directly attached neighbor s name metric and IP address TLVs show isis database user host show isis database IS IS level 1 link state database LSP ID Sequence Checksum Lifetime Attributes show isis database kobuk 00 00 0x3 0x3167 1057 L1 L2 camaro 00 00 0x5 0x770e 1091 L1 L...

Page 1918: ...Internal Up IP prefix 34 1 1 0 24 Metric 10 Internal Up IP prefix 43 1 1 0 24 Metric 10 Internal Up V6 prefix abcd 10 255 71 242 128 Metric 0 Internal Up glacier 02 00 Sequence 0x1 Checksum 0xd141 Lifetime 1080 secs IS neighbor camaro 00 Metric 0 IS neighbor glacier 00 Metric 0 badlands 00 00 Sequence 0x3 Checksum 0x87a2 Lifetime 1084 secs IS neighbor ranier 00 Metric 10 IP prefix 10 255 71 244 32...

Page 1919: ...ier 02 Metric 10 IP prefix 10 255 70 103 32 Metric 10 Internal Up IP prefix 10 255 71 52 32 Metric 10 Internal Up IP prefix 10 255 71 241 32 Metric 20 Internal Up IP prefix 10 255 71 242 32 Metric 0 Internal Up IP prefix 10 255 71 244 32 Metric 30 Internal Up IP prefix 11 1 1 0 24 Metric 30 Internal Up IP prefix 23 1 1 0 24 Metric 20 Internal Up IP prefix 34 1 1 0 24 Metric 10 Internal Up IP prefi...

Page 1920: ... IP address 192 168 36 25 Neighbor s IP address 192 168 36 26 IS neighbor isis1 00 Metric default 10 IP address 192 168 36 18 Neighbor s IP address 192 168 36 17 IP prefix 10 255 245 202 32 Internal Metric default 0 IP prefix 192 168 36 0 29 Internal Metric default 10 IP prefix 192 168 36 24 30 Internal Metric default 10 IP prefix 192 168 36 16 30 Internal Metric default 10 IP prefix 10 255 245 20...

Page 1921: ...08 0001 13 Speaks CLNP Speaks IP Hostname toothache IP address 192 168 37 69 IP extended prefix 192 168 37 64 29 metric 10 up IP prefix 192 168 37 64 29 Internal Metric default 10 Up IS neighbor pro1 a 02 Internal Metric default 10 IS extended neighbor pro1 a 02 Metric default 10 ES neighbor TLV Internal Metric default 0 ES toothache ES neighbor TLV Internal Metric default 10 ES 1921 6800 4002 No ...

Page 1922: ...on page 1850 describes the output fields for the show isis hostname command Output fields are listed in the approximate order in which they appear Table 224 show isis hostname Output Fields Field Description Field Name System identifier mapped to the hostname System Id Hostname mapped to the system identifier Hostname Type of mapping between system identifier and hostname Dynamic Hostname mapping ...

Page 1923: ...l system Required Privilege Level view List of Sample Output show isis interface on page 1853 show isis interface brief on page 1853 show isis interface detail on page 1853 show isis interface extensive on page 1853 show isis interface extensive with LDP on page 1854 Output Fields Table 225 on page 1851 describes the output fields for the show isis interface command Output fields are listed in the...

Page 1924: ... Level 2 designated intermediate system Level 2 DR none brief Interface s metric for Level 1 and Level 2 If there is no information the metric is 0 L1 L2 Metric detail extensive This routing device has signaled not to advertise this interface to its neighbors in their label switched paths LSPs Adjacency advertisement Advertise detail extensive This neighbor has signaled not to advertise this inter...

Page 1925: ...ync state reason extensive Configured value of the hold timer config holdtime extensive If the state is not in sync and the hold time is not infinity then this field displays the number of seconds remaining remaining show isis interface user host show isis interface IS IS interface database Interface L CirID Level 1 DR Level 2 DR L1 L2 Metric show isis interface at 2 3 0 0 3 0x1 Point to Point Poi...

Page 1926: ...s 0 Priority 64 Metric 0 Passive Level 2 Adjacencies 0 Priority 64 Metric 0 Passive show isis interface extensive with LDP user host show isis interface extensive IS IS interface database so 1 1 2 0 Index 114 State 0x6 Circuit id 0x1 Circuit type 2 LSP interval 100 ms CSNP interval 20 s Loose Hello padding Adjacency advertisement Advertise LDP sync state in sync for 00 01 28 reason LDP up during c...

Page 1927: ...page 1855 lists the output fields for the show isis overview command Output fields are listed in the approximate order in which they appear Table 226 show isis overview Output Fields Field Description Field Name The IS IS routing intance instance Router ID of the routing device Router ID Adjacency holddown capability enabled or disabled Adjacency holddown Maximum number of IS IS areas advertised b...

Page 1928: ...P Protocol version 4 capability is enabled IPv4 is enabled IP Protocol version 6 capability is enabled IPv6 is enabled OSI CLNP Protocol capability is enabled J Series routers only CLNS is enabled Preference value of internal routes Internal route preference Preference value of external routes External route preference Wide area metrics capability is enabled Wide area metrics are enabled Narrow me...

Page 1929: ...abled Restart duration 210 sec Helper mode Enabled Level 1 Internal route preference 15 External route preference 160 Wide metrics are enabled Narrow metrics are enabled Level 2 Internal route preference 18 External route preference 165 Wide metrics are enabled 1857 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1930: ...ress for the route inet inet6 Optional Display inet IPv4 or inet6 IPv6 routes respectively instance instance name Optional Display routes for the specified routing instance only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system topology ipv4 multicast ipv6 multicast ipv6 unicast unicast Optional Display routes for the sp...

Page 1931: ...rnal Type Interface to the next hop Interface System identifier of the next hop displayed as a name if possible Via ISO routing table entries ISO Routes MAC address snpa show isis route logical system user host show isis route logical system ls1 IS IS routing table Current version L1 8 L2 11 Prefix L Version Metric Type Interface Via show isis route logical system 10 9 7 0 30 2 11 20 int gr 0 2 0 ...

Page 1932: ... 0 12 0 34 0 56 47 0005 80ff f800 0000 0108 0001 104 1 10 0 int 47 0005 80ff f800 0000 0108 0001 1921 6800 4001 152 1 10 10 int fe 0 0 1 0 isis 0 0 12 0 34 0 56 47 0005 80ff f800 0000 0108 0001 1921 6800 4002 152 1 10 20 int fe 0 0 1 0 isis 0 0 12 0 34 0 56 47 0005 80ff f800 0000 0108 0002 104 1 10 0 int 47 0005 80ff f800 0000 0108 0002 1921 6800 4001 152 1 10 10 int fe 0 0 1 0 isis 0 0 12 0 34 0 ...

Page 1933: ...Optional Display SPF calculations for the specified routing instance level 1 2 Optional Display SPF calculations for the specified IS IS level logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system topology ipv4 multicast ipv6 multicast ipv6 unicast unicast Optional Display SPF calculations for the specified topology only Req...

Page 1934: ...ace Via SNPA show isis spf brief scat 00 10 ge 1 1 0 0 scat 0 90 69 a6 48 9d fix 02 10 fix 00 0 3 nodes IS IS level 2 SPF results Node Metric Interface Via SNPA skag 00 20 gr 0 2 0 0 h skag 02 20 gr 0 2 0 0 h h 00 10 gr 0 2 0 0 h fix 00 0 4 nodes IPV6 Unicast IS IS level 1 SPF results Node Metric Interface Via SNPA scat 00 10 ge 1 1 0 0 scat 0 90 69 a6 48 9d ge 1 1 0 0 scat 0 90 69 a6 48 9d fix 02...

Page 1935: ... skag 00 00 Fri Oct 31 12 54 37 0 000195 1 Periodic SPF Fri Oct 31 12 55 50 0 000178 1 Updated LSP fix 00 00 Fri Oct 31 12 55 55 0 000174 1 Updated LSP h 00 00 Fri Oct 31 12 55 58 0 000176 1 Updated LSP skag 00 00 Fri Oct 31 13 08 14 0 000198 1 Periodic SPF IPV6 Unicast IS IS level 1 SPF log Start time Elapsed secs Count Reason Fri Oct 31 12 41 18 0 000028 1 Reconfig Fri Oct 31 12 41 18 0 000043 3...

Page 1936: ... 20 gr 0 2 0 0 h h 00 10 gr 0 2 0 0 h 20 10 9 6 0 30 20 10 9 7 0 30 60 10 9 201 1 32 fix 00 0 10 10 9 1 0 30 10 10 9 5 0 30 10 10 9 6 0 30 4 nodes IPV6 Unicast IS IS level 1 SPF results Node Metric Interface Via SNPA scat 00 10 ge 1 1 0 0 scat 0 90 69 a6 48 9d ge 1 1 0 0 scat 0 90 69 a6 48 9d 20 8009 1 a09 1400 126 fix 02 10 fix 00 0 10 8009 1 a09 1400 126 10 8009 2 a09 1e00 126 20 8009 3 a09 3200...

Page 1937: ... SPF results Node Metric Interface Via SNPA skag 00 10 fe 0 0 1 0 toothache 0 12 0 34 0 56 fe 0 0 1 0 toothache 0 12 0 34 0 56 20 192 168 37 64 29 10 1921 6800 4001 20 1921 6800 4002 pro1 a 02 10 pro1 a 00 0 0 10 255 245 1 32 10 192 168 37 64 29 0 1921 6800 4211 3 nodes IS IS level 2 SPF results Node Metric Interface Via SNPA skag 00 10 fe 0 0 1 0 toothache 0 12 0 34 0 56 fe 0 0 1 0 toothache 0 12...

Page 1938: ...in a complete list of all link state PDUs in the IS IS database CSNPs are sent periodically on all links and the receiving systems use the information in the CSNP to update and synchronize their link state PDU databases The designated router multicasts CSNPs on broadcast links in place of sending explicit acknowledgments for each link state PDU IIH IS IS hello packets are broadcast to discover the...

Page 1939: ...ng rapidly it indicates that the network is unstable SPF runs Number of link state link state PDU fragments that the local system has computed Fragments rebuilt Number of link state PDUs that have been regenerated A link state PDU is regenerated when it is nearing the end of its lifetime and it has not changed LSP regenerations Number of purges that the system initiated A purge is initiated if the...

Page 1940: ...id lsa id network nssa router Release Information Command introduced before Junos OS Release 10 2 for J EX Series switches Description Display the entries in the Open Shortest Path First version 3 OSPFv3 link state database which contains data about link state advertisement LSA packets Options none Display standard information about all entries in the OSPFv3 link state database brief detail extens...

Page 1941: ... multicast Optional Display information about the specified OSPFv3 realm or address family Use the realm option to specify an address family other than IPv6 unicast which is the default router Optional Display information about router LSAs Required Privilege Level view Related Documentation clear ospf ospf3 database on page 1748 List of Sample Output show ospf3 database brief on page 1874 show osp...

Page 1942: ...tensive Length of the advertisement in bytes Len Router Router Link State Advertisements detail extensive Flags describing the routing device that generated the LSP bits detail extensive Option bits carried in the router LSA Options For Each Router Link detail extensive Type of interface The value of all other output fields describing a routing device interface depends on the interface s type Poin...

Page 1943: ...ix Prefix detail extensive Option bit associated with the prefix Prefix options detail extensive Cost of this route Expressed in the same units as the interface costs in the router LSAs When the interarea prefix LSA is describing a route to a range of addresses the cost is set to the maximum cost to any reachable component of the address range Metric extensive How long until the LSA is regenerated...

Page 1944: ...stalled nn nn nn ago extensive How long until the route expires in the format hours minutes seconds expires in nn nn nn extensive Time elapsed since the LSA was last transmitted or flooded to an adjacency or an interface respectively in the format hours minutes seconds sent nn nn nn ago Link Link State Advertisements detail extensive IPv6 link local address on the link for which this link LSA orig...

Page 1945: ... The rest of the link LSA contains a list of IPv6 prefixes to be associated with the link Prefix count detail extensive IPv6 address prefix Prefix detail extensive Option bit associated with the prefix Prefix options detail extensive Cost of this prefix Expressed in the same units as the interface costs in the router LSAs Metric extensive How long until the LSA is regenerated in the format hours m...

Page 1946: ...e Cksum Len Router 0 0 0 1 10 255 4 93 0x80000003 916 0xea40 40 Router 0 0 0 1 10 255 4 97 0x80000006 851 0xc95b 40 Network 0 0 0 2 10 255 4 97 0x80000002 916 0x4598 32 InterArPfx 0 0 0 1 10 255 4 93 0x80000002 117 0xa980 44 InterArPfx 0 0 0 2 10 255 4 93 0x80000002 62 0xd47e 44 NSSA 0 0 0 1 10 255 4 97 0x80000002 362 0x45ee 44 IntraArPfx 0 0 0 1 10 255 4 97 0x80000006 851 0x2f77 52 OSPF3 AS SCOPE...

Page 1947: ...ptions 0x2 Metric 0 Prefix feee 10 10 1 0 126 Prefix options 0x0 Metric 10 Aging timer 00 42 51 Installed 00 17 05 ago expires in 00 42 52 sent 02 37 54 ago IntraArPfx 0 0 0 1 10 255 4 93 0x80000002 575 0x788f 72 Ref lsa type Router Ref lsa id 0 0 0 0 Ref router id 10 255 4 93 Prefix count 2 Prefix feee 10 255 4 93 128 Prefix options 0x2 Metric 0 Prefix feee 10 10 1 0 126 Prefix options 0x0 Metric...

Page 1948: ...000006 994 0x2f77 52 Ref lsa type Router Ref lsa id 0 0 0 0 Ref router id 10 255 4 97 Prefix count 1 Prefix feee 10 255 4 97 128 Prefix options 0x2 Metric 0 Aging timer 00 43 25 Installed 00 16 31 ago expires in 00 43 26 sent 02 37 54 ago IntraArPfx 0 0 0 3 10 255 4 97 0x80000002 1059 0x4446 52 Ref lsa type Network Ref lsa id 0 0 0 2 Ref router id 10 255 4 97 Prefix count 1 Prefix feee 10 10 2 0 1...

Page 1949: ... 0x13 priority 128 Prefix count 1 Prefix feee 10 10 1 0 126 Prefix options 0x0 Aging timer 00 51 34 Installed 00 08 23 ago expires in 00 51 34 sent 02 37 54 ago Link 0 0 0 3 10 255 4 93 0x80000002 505 0x6b7a 64 fe80 280 42ff fe10 f177 Options 0x13 priority 128 Prefix count 1 Prefix feee 10 10 1 0 126 Prefix options 0x0 Gen timer 00 37 28 Aging timer 00 51 35 Installed 00 08 25 ago expires in 00 51...

Page 1950: ... 2 for J EX Series switches Description Display the entries in the Open Shortest Path First version 2 OSPFv2 link state database which contains data about link state advertisement LSA packets Options none Display standard information about entries in the OSPFv2 link state database for all routing instances brief detail extensive summary Optional Display the specified level of output advertising ro...

Page 1951: ... page 1881 show ospf database detail on page 1881 show ospf database extensive on page 1882 show ospf database summary on page 1884 Output Fields Table 231 on page 1879 describes the output fields for the show ospf database command Output fields are listed in the approximate order in which they appear Table 231 show ospf database Output Fields Level of Output Field Description Field Name All level...

Page 1952: ...mmary link state advertisement information mask Network mask TOS Type of service ToS value metric Metric for the ToS Summary extensive How long until the LSA is regenerated Gen timer extensive How long until the LSA expires Aging time extensive How long ago the route was installed Installed hh mm ss ago extensive How long until the route expires expires in hh mm ss extensive Indicates that this is...

Page 1953: ...utput see show ospf database on page 1880 show ospf database detail user host show ospf database detail OSPF link state database Area 0 0 0 1 Type ID Adv Rtr Seq Age Opt Cksum Len Router 10 255 70 103 10 255 70 103 0x80000002 261 0x20 0x4112 48 bits 0x0 link count 2 id 10 255 71 242 data 12 1 1 1 Type PointToPoint 1 TOS count 0 TOS 0 metric 1 id 12 1 1 0 data 255 255 255 0 Type Stub 3 TOS count 0 ...

Page 1954: ...5 255 0 TOS 0x0 metric 1 Summary 23 1 1 0 10 255 71 242 0x80000002 218 0x20 0x6d72 28 mask 255 255 255 0 TOS 0x0 metric 1 NSSA 33 1 1 1 10 255 71 242 0x80000001 268 0x28 0xeb3b 36 mask 255 255 255 255 Type 2 TOS 0x0 metric 0 fwd addr 24 1 1 1 tag 0 0 0 0 show ospf database extensive user host show ospf database extensive OSPF link state database Area 0 0 0 1 Type ID Adv Rtr Seq Age Opt Cksum Len R...

Page 1955: ...04 02 ago Change count 2 Router 10 255 71 242 10 255 71 242 0x80000003 244 0x20 0xe191 36 bits 0x3 link count 1 id 23 1 1 1 data 23 1 1 1 Type Transit 2 TOS count 0 TOS 0 metric 1 Gen timer 00 45 56 Aging timer 00 55 56 Installed 00 04 04 ago expires in 00 55 56 sent 00 04 02 ago Last changed 00 04 04 ago Change count 2 Ours Network 23 1 1 1 10 255 71 242 0x80000002 244 0x20 0x9c76 32 mask 255 255...

Page 1956: ...ttached router 10 255 71 238 Gen timer 00 45 52 Aging timer 00 55 52 Installed 00 04 08 ago expires in 00 55 52 sent 00 04 06 ago Last changed 00 04 08 ago Change count 1 Ours Summary 12 1 1 0 10 255 71 242 0x80000001 288 0x20 0xfeec 28 mask 255 255 255 0 TOS 0x0 metric 1 Gen timer 00 45 12 Aging timer 00 55 12 Installed 00 04 48 ago expires in 00 55 12 sent 00 04 13 ago Last changed 00 04 48 ago ...

Page 1957: ... NSSA LSAs Area 0 0 0 3 2 Router LSAs 1 Network LSAs 2 Summary LSAs 1 NSSA LSAs Externals Interface fe 2 2 1 0 Interface ge 0 3 2 0 Interface so 0 1 2 0 Interface so 0 1 2 0 1885 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1958: ... is withdrawn or readvertised or when one of its path attributes changes Required Privilege Level view Related Documentation Configuring BGP Flap Damping Parameters in the Junos OS Policy Framework Configuration Guide clear bgp damping on page 1755 show route damping on page 1922 List of Sample Output show policy damping on page 1887 Output Fields Table 232 on page 1886 describes the output fields...

Page 1959: ...ding table and no longer exports this route to any of the routing protocols Suppress cutoff merit Maximum hold down time in minutes The value represents the maximum time that a route can be suppressed no matter how unstable it has been before this period of stability Maximum suppress time Merit ceiling Maximum merit that a flapping route can collect Maximum decay Maximum decay half life in minutes...

Page 1960: ... page 1769 List of Sample Output show rip general statistics on page 1888 Output Fields Table 233 on page 1888 lists the output fields for the showripgeneral statistics command Output fields are listed in the approximate order in which they appear Table 233 show rip general statistics Output Fields Field Description Field Name Number of invalid messages received bad msgs Number of packets received...

Page 1961: ... particular logical system name Optional Display detailed information about only the specified RIP neighbor Required Privilege Level view List of Sample Output show rip neighbor on page 1890 Output Fields Table 234 on page 1889 lists the output fields for the showripneighbor command Output fields are listed in the approximate order in which they appear Table 234 show rip neighbor Output Fields Fie...

Page 1962: ...s Mode Mode Met ge 2 3 0 0 Up 192 168 9 105 192 168 9 107 bcast both 1 at 5 1 1 42 Dn null null mcast v2 only 3 at 5 1 0 42 Dn null null mcast both 3 at 5 1 0 0 Up 20 0 0 1 224 0 0 9 mcast both 3 so 0 0 0 0 Up 192 168 9 97 224 0 0 9 mcast both 3 1890 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1963: ...tems or on a particular logical system Required Privilege Level view Related Documentation clear rip statistics on page 1770 List of Sample Output show rip statistics on page 1892 Output Fields Table 235 on page 1891 lists the output fields for the show rip statistics command Output fields are listed in the approximate order in which they appear Table 235 show rip statistics Output Fields Field De...

Page 1964: ...hat were ignored Authentication Failures Number of received update messages that failed authentication RIP Requests Received Number of RIP request messages received RIP Requests Ignored Number of RIP request messages ignored Counter Total number of packets for the selected counter Total Number of packets for the selected counter in the most recent 5 minute period Last 5 min Number of packets for t...

Page 1965: ...RIP Requests Received 0 0 0 RIP Requests Ignored 0 0 0 1893 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1966: ... statistics on page 1771 List of Sample Output show ripng general statistics on page 1894 Output Fields Table236onpage1894liststheoutputfieldsfortheshowripnggeneral statisticscommand Output fields are listed in the approximate order in which they appear Table 236 show ripng general statistics Output Fields Field Description Field Name Number of invalid messages received bad msgs Number of packets ...

Page 1967: ...tput show ripng neighbor on page 1895 Output Fields Table237onpage1895liststheoutputfieldsfortheshowripngneighbor command Output fields are listed in the approximate order in which they appear Table 237 show ripng neighbor Output Fields Field Description Field Name Name of RIPng neighbor Neighbor State of the connection Up or Dn Down State Source address Source Address Destination address Destinat...

Page 1968: ... fe 0 0 2 0 Up fe80 290 69ff fe68 b002 ff02 9 yes yes 1 1896 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 1969: ...or Required Privilege Level view Related Documentation clear ripng statistics on page 1772 List of Sample Output show ripng statistics on page 1898 Output Fields Table238onpage1897liststheoutputfieldsfortheshowripngstatistics command Output fields are listed in the approximate order in which they appear Table 238 show ripng statistics Output Fields Field Description Field Name Information about RI...

Page 1970: ...ages ignored RIPng Requests Received Number of RIPng request messages received RIPng Requests Ignored Number of RIPng request messages ignored Counter Total number of packets for the selected counter Total Number of packets for the selected counter in the most recent 5 minute period Last 5 min Number of packets for the selected counter in the most recent 1 minute period Last minute show ripng stat...

Page 1971: ...cal system private Optional Display information only about all private or internal routing tables Required Privilege Level view List of Sample Output show route on page 1902 show route destination prefix on page 1902 Output Fields Table 239 on page 1899 describes the output fields for the show route command Output fields are listed in the approximate order in which they appear Table 239 show route...

Page 1972: ...e into the forwarding table A hyphen indicates the last active route An asterisk indicates that the route is both the active and the last active route An asterisk before a to line indicates the best subpath to the route In every routing metric except for the BGP LocalPref attribute a lesser value is preferred In order to use common comparison routines Junos OS stores the 1 s complement of the Loca...

Page 1973: ...re than one interface available to the next hop the interface that is actually used is followed by the word Selected This field can also contain the following information Weight Value used to distinguish primary secondary and fast reroute backup routes Weight information is available when Multiprotocol Label Switching MPLS label switched path LSP link protection node link protection or fast rerout...

Page 1974: ... routes 3 active 0 holddown 0 hidden Active Route Last Active Both 100 101 0 0 16 Direct 0 1w5d 20 30 28 via fe 0 0 3 0 100 101 2 3 32 Local 0 1w5d 20 30 28 Local via fe 0 0 3 0 224 0 0 5 32 OSPF 10 1w5d 20 30 29 metric 1 MultiRecv red inet 0 11 destinations 11 routes 11 active 0 holddown 0 hidden Active Route Last Active Both 10 10 10 10 32 Direct 0 01 08 46 via lo0 1 10 255 245 212 32 BGP 170 00...

Page 1975: ...d Privilege Level view List of Sample Output show route active path on page 1903 show route active path brief on page 1904 show route active path detail on page 1904 show route active path extensive on page 1905 show route active path terse on page 1906 Output Fields For information about output fields see the output field tables for the show route command the show route detail the show route exte...

Page 1976: ... type Router Next hop index 397 Next hop reference count 4 Next hop 100 1 2 1 via so 2 1 3 0 selected State Active Int Local AS 200 Age 21 31 Metric 10 Task IS IS Announcement bits 4 0 KRT 2 IS IS 5 Resolve tree 2 6 Resolve tree 3 AS path I 100 1 2 0 24 1 entry 1 announced Direct Preference 0 Next hop type Interface Next hop reference count 3 Next hop via so 2 1 3 0 selected State Active Int Local...

Page 1977: ... 255 70 19 32 1 entry 1 announced TSI IS IS level 1 LSP fragment 0 IS IS level 2 LSP fragment 0 Direct Preference 0 Next hop type Interface Next hop reference count 3 Next hop via lo0 0 selected State Active Int Local AS 200 Age 21 39 47 Task IF Announcement bits 3 2 IS IS 5 Resolve tree 2 6 Resolve tree 3 AS path I 10 255 71 50 32 1 entry 1 announced TSI KRT in kernel 10 255 71 50 32 100 1 2 1 IS...

Page 1978: ... reference count 3 Next hop via fxp0 0 selected State Active Int Local AS 200 Age 21 39 47 Task IF Announcement bits 2 5 Resolve tree 2 6 Resolve tree 3 AS path I 192 168 70 19 32 1 entry 1 announced Local Preference 0 Next hop type Local Next hop reference count 11 Interface fxp0 0 State Active NoReadvrt Int Local AS 200 Age 21 39 47 Task IF Announcement bits 2 5 Resolve tree 2 6 Resolve tree 3 A...

Page 1979: ... 192 168 64 0 21 D 0 fxp0 0 192 168 70 19 32 L 0 Local 1907 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1980: ...bles The output field table of the show route command does not display entries for private or hidden routing tables show route all The following example displays a snippet of output from the show route command and then displays the same snippet of output from the show route all command show route all user host show route mpls 0 7 destinations 7 routes 5 active 0 holddown 2 hidden Restart Complete ...

Page 1981: ... 13 54 49 via vt 3 2 0 32769 Pop 800018 VPLS 7 1d 13 54 59 via vt 3 2 0 32772 Pop vt 3 2 0 32769 VPLS 7 1d 13 54 49 Unusable vt 3 2 0 32772 VPLS 7 1d 13 54 59 Unusable 1909 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1982: ...n that is enclosed in parentheses You also can include the operators described in the table of AS path regular expression operators in the Junos OS Policy Framework Configuration Guide The following list summarizes these operators m n At least m and at most n repetitions of the AS path term m Exactly m repetitions of the AS path term m m or more repetitions of the AS path term Zero or more repetit...

Page 1983: ... 15 37 metric 37 tag 1 to 111 222 18 225 via fpa0 0 111 222 18 233 BGP 170 00 08 48 localpref 100 from 111 222 2 24 AS Path 65477 65488 65535 IGP to 111 222 18 225 via fpa0 0 111 222 18 233 show route aspath regex user host show route aspath regex 234 3561 inet 0 46351 destinations 46351 routes 46349 active 0 holddown 2 hidden Matching Any Path withTwoASNumbers Active Route Last Active Both 9 20 0...

Page 1984: ...ple Output show route best on page 1912 show route best detail on page 1914 show route best extensive on page 1914 show route best terse on page 1915 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route best user host show route best 10 255 7...

Page 1985: ... Direct 0 2d 01 43 34 via fxp1 0 1913 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1986: ... path green r1 r3 Label operation Push 100016 State Active Int Local AS 69 Age 1d 13 20 59 Metric 2 Task RSVP Announcement bits 1 1 Resolve tree 2 AS path I private1__inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden 10 0 0 0 8 2 entries 0 announced Direct Preference 0 Next hop type Interface Next hop reference count 1 Next hop via fxp2 0 selected State Active Int Age 2d 1 44 20 Task IF ...

Page 1987: ...31 1 6 so 0 3 0 0 inet 3 2 destinations 2 routes 2 active 0 holddown 0 hidden Restart Complete Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 10 255 70 103 32 R 7 2 so 0 3 0 0 private1__ inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 10 0 0 0 8 D 0 fxp2 0 D 0 fxp1...

Page 1988: ... on page 1916 Output Fields For information about output fields see the Output Field table of the show route command show route brief user host show route brief inet 0 10 destinations 10 routes 9 active 0 holddown 1 hidden Active Route Last Active Both show route brief 0 0 0 0 0 Static 5 1w5d 20 30 29 Discard 10 255 245 51 32 Direct 0 2w4d 13 11 14 via lo0 0 172 16 0 0 12 Static 5 2w4d 13 11 14 to...

Page 1989: ...hidden Active Route Last Active Both 100 101 0 0 16 Direct 0 1w5d 20 30 28 via fe 0 0 3 0 100 101 2 3 32 Local 0 1w5d 20 30 28 Local via fe 0 0 3 0 224 0 0 5 32 OSPF 10 1w5d 20 30 29 metric 1 MultiRecv 1917 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1990: ...pecifying the community option displays all routes matching the community found within the routing table The community option does not limit the output to only the routes being advertised to the neighbor after any egress routing policy Required Privilege Level view Related Documentation show route detail on page 1927 List of Sample Output show route community on page 1918 Output Fields For informa...

Page 1991: ...AS Path 666 234 2548 1673 1675 1747 IGP to 192 156 169 1 via 192 156 169 14 so 0 0 0 1919 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 1992: ...oute detail command the show route extensive command or the show route terse command show route community name user host show route community name red com inet 0 17 destinations 17 routes 16 active 0 holddown 1 hidden show route community name inet 3 1 destinations 1 routes 1 active 0 holddown 0 hidden instance1 inet 0 2 destinations 2 routes 2 active 0 holddown 0 hidden red inet 0 11 destinations...

Page 1993: ... localpref 100 from 10 255 245 204 AS path I to 100 1 2 2 via ge 1 1 0 0 label switched path to_fix 10 255 245 204 10 100 1 4 0 24 BGP 170 00 36 02 localpref 100 from 10 255 245 204 AS path I to 100 1 2 2 via ge 1 1 0 0 label switched path to_fix inet6 0 2 destinations 2 routes 2 active 0 holddown 0 hidden instance1 inet6 0 1 destinations 1 routes 1 active 0 holddown 0 hidden 1921 Chapter 74 Opera...

Page 1994: ...system name Optional Perform this operation on all logical systems or on a particular logical system suppressed Display entries that have been suppressed and are no longer being installed into the forwarding table or exported by routing protocols Required Privilege Level view Related Documentation clear bgp damping on page 1755 show policy damping on page 1886 List of Sample Output show route damp...

Page 1995: ...reference2 field For example if the LocalPref value for Route 1 is 100 the Preference2 value is 101 If the LocalPref value for Route 2 is 155 the Preference2 value is 156 Route 2 is preferred because it has a higher LocalPref value and a lower Preference2 value protocol preference detail extensive Number of references made to the next hop Next hop reference count detail extensive IP address of the...

Page 1996: ...AS sets which are groups of AS numbers in which the order does not matter A set commonly results from route aggregation The numbers in each AS set are displayed in ascending order Parentheses enclose a confederation Parentheses and brackets enclose a confederation set AS path brief none Next hop to the destination An angle bracket indicates that the route is the selected route to brief none Interf...

Page 1997: ... hidden show route damping decayed detail 10 0 111 0 24 7 entries 1 announced BGP Preference 170 101 Next hop reference count 151973 Source 172 23 2 129 Next hop via so 1 2 0 0 Next hop via so 5 1 0 0 selected Next hop via so 6 0 0 0 Protocol next hop 172 23 2 129 Indirect next hop 89a1a00 264185 State Active Ext Local AS 65000 Peer AS 65490 Age 3 28 Metric2 0 Task BGP_65490 172 23 2 129 179 Annou...

Page 1998: ... 60 85 via so 3 1 0 0 selected State Hidden Ext Inactive reason Unusable path Local AS 65000 Peer AS 65220 Age 2d 22 48 10 Task BGP_65220 192 168 60 85 179 AS path 65220 65501 65502 I Communities 65501 390 65501 2000 65501 3000 65504 3561 Localpref 100 Router ID 192 168 80 25 Merit last update now 1000 932 damping parameters set normal Last update 00 01 05 First update 00 01 05 Flaps 1 1926 Dell P...

Page 1999: ...cular logical system Required Privilege Level view List of Sample Output show route detail on page 1935 Output Fields Table 241 on page 1927 describes the output fields for the show route detail command Output fields are listed in the approximate order in which they appear Table 241 show route detail Output Fields Field Description Field Name Name of the routing table for example inet 0 routing ta...

Page 2000: ...If there is no S information the route is a normal MPLS route which has a stack depth of 1 the label popping operation is not performed label stacking Protocol from which the route was learned and the preference value for the route A plus sign indicates the active route which is the route installed from the routing table into the forwarding table A hyphen indicates the last active route An asteris...

Page 2001: ...th load balancing via Name of the label switched path LSP used to reach the next hop Label switched path lsp path name MPLS label and operation occurring at this routing device The operation can be pop where a label is removed from the top of the stack push where another label is added to the label stack or swap where a label is replaced by another label Label operation Local only Local interface ...

Page 2002: ...are groups of AS numbers in which the order does not matter A set commonly results from route aggregation The numbers in each AS set are displayed in ascending order Parentheses enclose a confederation Parentheses and brackets enclose a confederation set AS path MPLS label assigned to the Layer 2 circuit virtual connection VC Label Maximum transmission unit MTU of the Layer 2 circuit MTU VLAN iden...

Page 2003: ...ast bcast Deny next hop deny Next hop is waiting to be resolved into a unicast or multicast type hold Indexed next hop indexed idxd Indirect next hop indirect indr Local address on an interface local locl Regular multicast next hop routed multicast mcrt Wire multicast next hop limited to the LAN multicast mcst Multicast discard multicast discard mdsc Multicast group member multicast group mgrp Rec...

Page 2004: ...en deleted Delete Exterior route Ex BGP route received from an external BGP neighbor Ext Forces all protocols to be notified of a change to any route active or inactive for a prefix When not set protocols are informed of a prefix only when the active route changes FlashAll Route not used because of routing policy Hidden Route needs forwarding RPF check IfCheck Path through next hop with lower IGP ...

Page 2005: ...mber of next hops is available Number of gateways Path with lower origin code is available Origin Route pending because of a hold down configured on another route Pending Route scheduled for release Release Route from a higher numbered routing table is available RIB preference 64 bit prefix added to IP subnets to make them unique Route Distinguisher Route with a lower metric or MED is available Ro...

Page 2006: ...e field indicates that the route carries a type 2 metric options Used with VPNs Identifies where the route came from origin 1 byte encoded as 1 or 2 for intra area routes depending on whether the route came from a type 1 or a type 2 LSA 3 for summary routes 5 for external routes area number must be 0 7 for NSSA routes or 129 for sham link endpoint addresses ospf route type Displays the area number...

Page 2007: ...Interface Next hop reference count 2 Next hop via so 0 3 0 0 selected State Active Int Local AS 69 Age 1 30 17 Task IF Announcement bits 1 3 Resolve tree 2 AS path I OSPF Preference 10 Next hop reference count 1 Next hop via so 0 3 0 0 selected State Int Inactive reason Route Preference Local AS 69 Age 1 30 17 Metric 1 Area 0 0 0 0 Task OSPF AS path I 10 31 1 1 32 1 entry 1 announced Local Prefere...

Page 2008: ...Int Local AS 69 Age 1 31 43 Task IGMP Announcement bits 2 0 KRT 3 Resolve tree 2 AS path I inet 3 2 destinations 2 routes 2 active 0 holddown 0 hidden 10 255 70 103 32 1 entry 1 announced State FlashAll RSVP Preference 7 Next hop reference count 6 Next hop 10 31 1 6 via ge 3 1 0 0 weight 0x1 selected Label switched path green r1 r3 Label operation Push 100096 State Active Int Local AS 69 Age 1 25 ...

Page 2009: ...nt Local AS 69 Age 1 31 45 Metric 1 Task MPLS Announcement bits 1 0 KRT AS path I 800010 1 entry 1 announced VPLS Preference 7 Next hop reference count 2 Next hop via vt 3 2 0 32769 selected Label operation Pop State Active Int Age 1 29 30 Task Common L2 VC Announcement bits 1 0 KRT AS path I vt 3 2 0 32769 1 entry 1 announced VPLS Preference 7 Next hop reference count 2 Next hop 10 31 1 6 via ge ...

Page 2010: ...rence count 18 State Active NoReadvrt Int Local AS 69 Age 1 31 45 Task PIM Recv6 Announcement bits 1 0 KRT AS path I ff02 d 128 1 entry 1 announced PIM Preference 0 Next hop reference count 18 State Active NoReadvrt Int Local AS 69 Age 1 31 45 Task PIM Recv6 Announcement bits 1 0 KRT AS path I ff02 16 128 1 entry 1 announced MLD Preference 0 Next hop reference count 18 State Active NoReadvrt Int L...

Page 2011: ...nnounced L2VPN Preference 170 1 Next hop reference count 5 Protocol next hop 10 255 71 52 Indirect next hop 0 State Active Int Ext Age 1 31 40 Metric2 1 Task green l2vpn Announcement bits 1 1 BGP 0 0 0 0 179 AS path I Communities Layer2 info encaps VPLS control flags Site Down mtu 0 Label base 800016 range 8 status vector 0x9F 10 255 71 52 1 5 1 96 1 entry 1 announced L2VPN Preference 170 101 Next...

Page 2012: ... next hop 10 245 255 63 Indirect next hop 86af000 296 State Active Int Local AS 99 Age 10 21 Task l2 circuit Announcement bits 1 0 LDP AS path I VC Label 100000 MTU 1500 VLAN ID 512 1940 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2013: ...ow route exact on page 1941 show route exact detail on page 1941 show route exact extensive on page 1943 show route exact terse on page 1943 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route exact user host show route exact 207 17 136 0 24...

Page 2014: ...Announcement bits 2 0 KRT 3 Resolve tree 2 AS path I 1942 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2015: ...9 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Local AS 69 Age 1 25 18 Task RT Announcement bits 2 0 KRT 3 Resolve tree 2 AS path I show route exact terse user host show route exact 207 17 136 0 24 terse inet 0 22 destinations 23 routes 21 active 0 holddown 1 hidden Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 207 17 136 0 24 S ...

Page 2016: ...routing table name Optional Display information about a particular routing table for example inet 0 for which policy based export is currently enabled For information about the different types of routing tables see the Junos OS Routing Protocols Configuration Guide Required Privilege Level view List of Sample Output show route export on page 1945 show route export detail on page 1945 show route ex...

Page 2017: ... 2 Options detail instance keyword only Policy that routeexport uses to construct the import export matrix Not displayed if the instance type is vrf Import policy detail instance keyword only Name of the routing instance Instance detail instance keyword only Type of routing instance forwarding non forwarding or vrf Type show route export user host show route export Table Export Routes inet 0 N 0 s...

Page 2018: ...utput show route extensive on page 1951 show route extensive Access Route on page 1957 show route extensive Route Reflector on page 1957 Output Fields Table 246 on page 1946 describes the output fields for the showrouteextensive command Output fields are listed in the approximate order in which they appear Table 246 show route extensive Output Fields Field Description Field Name Name of the routin...

Page 2019: ...ck depth of two or more exits this router with one fewer label the label popping operation is performed If there is no S information the route is a normal MPLS route which has a stack depth of 1 the label popping operation is not performed label stacking Protocol from which the route was learned and the preference value for the route A plus sign indicates the active route which is the route instal...

Page 2020: ...hen a routing device is performing unequal cost load balancing This information is available when you enable Border Gateway Protocol BGP multipath load balancing via Name of the label switched path LSP used to reach the next hop Label switched path lsp path name MPLS label and operation occurring at this routing device The operation can be pop where a label is removed from the top of the stack pus...

Page 2021: ... higher number of next hops is available Origin Path with a lower origin code is available OSPF version Path does not support the indicated OSPF version RIB preference Route from a higher numbered routing table is available Route destinguisher 64 bit prefix added to IP subnets to make them unique Route metric or MED comparison Route with a lower metric or MED is available Route preference Route wi...

Page 2022: ...irtual connection VC Label Maximum transmission unit MTU of the Layer 2 circuit MTU VLAN identifier of the Layer 2 circuit VLAN ID For route reflected output only Cluster ID sent by the route reflector Cluster list For route reflected output only Address of router that originally sent the route to the route reflector Originator ID Forwarding Equivalent Class FEC bound to this route Applicable only...

Page 2023: ...t hops The forwarding next hop is the network layer address of the directly reachable neighboring system if applicable and the interface used to reach it Forwarding nexthops show route extensive user host show route extensive inet 0 22 destinations 23 routes 21 active 0 holddown 1 hidden 10 10 0 0 16 1 entry 1 announced show route extensive TSI KRT in kernel 10 10 0 0 16 192 168 71 254 Static Pref...

Page 2024: ... 30 10 31 1 6 OSPF Preference 10 Next hop reference count 9 Next hop via so 0 3 0 0 Next hop 10 31 1 6 via ge 3 1 0 0 selected State Active Int Local AS 69 Age 1 32 19 Metric 2 Area 0 0 0 0 Task OSPF Announcement bits 2 0 KRT 3 Resolve tree 2 AS path I 224 0 0 2 32 1 entry 1 announced TSI KRT in kernel 224 0 0 2 32 PIM Preference 0 Next hop reference count 18 State Active NoReadvrt Int Local AS 69...

Page 2025: ... count 6 Next hop via so 0 3 0 0 weight 0x1 selected Label switched path green r1 r2 State Active Int Local AS 69 Age 1 28 12 Metric 1 Task RSVP Announcement bits 2 1 Resolve tree 1 2 Resolve tree 2 AS path I private1__ inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden 47 0005 80ff f800 0000 0108 0001 0102 5507 1052 152 1 entry 0...

Page 2026: ...ush 800012 Indirect next hop 87272e4 1048574 State Active Int Age 1 31 53 Metric2 2 Task Common L2 VC Announcement bits 2 0 KRT 1 Common L2 VC AS path I Communities target 11111 1 Layer2 info encaps VPLS control flags mtu 0 Indirect next hops 1 Protocol next hop 10 255 70 103 Metric 2 Push 800012 Indirect next hop 87272e4 1048574 Indirect path forwarding next hops 1 Next hop 10 31 1 6 via ge 3 1 0...

Page 2027: ...n kernel ff02 d 128 PIM Preference 0 Next hop reference count 18 State Active NoReadvrt Int Local AS 69 Age 1 34 08 Task PIM Recv6 Announcement bits 1 0 KRT AS path I ff02 16 128 1 entry 1 announced TSI KRT in kernel ff02 16 128 MLD Preference 0 Next hop reference count 18 State Active NoReadvrt Int Local AS 69 Age 1 34 06 Task MLD Announcement bits 1 0 KRT AS path I private inet6 0 1 destinations...

Page 2028: ... val 8699540 L2VPN Preference 170 1 Next hop reference count 5 Protocol next hop 10 255 71 52 Indirect next hop 0 State Active Int Ext Age 1 34 03 Metric2 1 Task green l2vpn Announcement bits 1 1 BGP 0 0 0 0 179 AS path I Communities Layer2 info encaps VPLS control flags Site Down mtu 0 Label base 800016 range 8 status vector 0x9F 10 255 71 52 1 5 1 96 1 entry 1 announced TSI Page 0 idx 0 Type 1 v...

Page 2029: ...xt hop 13 160 0 2 via fe 0 0 0 0 selected State Active Int Age 12 Task RPD Unix Domain Server var run rpd_serv local Announcement bits 2 0 KRT 1 OSPFv2 AS path I show route extensive Route Reflector user host show route extensive 1 0 0 0 8 1 entry 1 announced TSI KRT in kernel 1 0 0 0 8 indirect 40 BGP Preference 170 101 Source 192 168 4 214 Protocol next hop 207 17 136 192 Indirect next hop 84ac9...

Page 2030: ...logical systems or on a particular logical system table table name Optional Name of the flow route table Required Privilege Level view List of Sample Output show route flow validation on page 1959 Output Fields Table 247 on page 1958 lists the output fields for the show route flow validation command Output fields are listed in the approximate order in which they appear Table 247 show route flow va...

Page 2031: ... Destination that is the best match for the route flow Unicast best match All levels Information about the route flow Flags show route flow validation user host show route flow validation inet 0 10 0 5 0 24Active unicast route show route flow validation Dependent flow destinations 1 Origin 192 168 224 218 Neighbor AS 65001 Flow destination 3 entries 1 match origin Unicast best match 10 0 5 0 24 Fl...

Page 2032: ...ow route inactive path on page 1960 show route inactive path detail on page 1961 show route inactive path extensive on page 1962 show route inactive path terse on page 1962 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route inactive path us...

Page 2033: ...t hop reference count 1 Next hop via so 0 3 0 0 selected State Int Inactive reason Route Preference Local AS 1 Age 3 58 24 Metric 1 Area 0 0 0 0 Task OSPF AS path I private1__ inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden 10 0 0 0 8 2 entries 0 announced Direct Preference 0 Next hop type Interface Next hop reference count 1 Next hop via fxp1 0 selected State NotBest Int Inactive reas...

Page 2034: ...own 0 hidden Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 10 0 0 0 8 D 0 fxp1 0 red inet 0 6 destinations 8 routes 4 active 0 holddown 3 hidden Restart Complete Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 10 12 80 0 30 B 170 100 10 12 80 1 100 I iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden Restart Comple...

Page 2035: ...ctive prefix on page 1963 show route inactive prefix detail on page 1963 show route inactive prefix extensive on page 1964 show route inactive prefix terse on page 1964 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route inactive prefix user...

Page 2036: ...or sample output see show route inactive prefix detail on page 1963 show route inactive prefix terse user host show route inactive prefix terse inet 0 18 destinations 18 routes 17 active 0 holddown 1 hidden Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 127 0 0 1 32 D 0 lo0 0 1964 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2037: ...stems or on a particular logical system operational Optional Display operational routing instances Required Privilege Level view List of Sample Output show route instance on page 1966 show route instance detail Graceful Restart Complete on page 1967 show route instance detail Graceful Restart Incomplete on page 1968 show route instance detail VPLS Routing Instance on page 1970 show route instance ...

Page 2038: ... forwarding instance import target community name Vrf import target detail VPN routing and forwarding instance export target community name Vrf export target detail Fast reroute priority setting for a VPLS routing instance high medium or low The default is low Fast reroute priority detail Restart state Pending protocol name List of protocols that have not yet completed graceful restart for this ro...

Page 2039: ...timeout 300 Interfaces t3 0 0 0 103 Route distinguisher 10 255 14 176 103 Vrf import BGP INET import Vrf export BGP INET export Tables BGP INET inet 0 4 routes 4 active 0 holddown 0 hidden Restart Complete BGP L Router ID 10 69 104 1 Type vrf State Active Restart State Complete Path selection timeout 300 Interfaces t3 0 0 0 104 Route distinguisher 10 255 14 176 104 Vrf import BGP L import Vrf expo...

Page 2040: ...P export Tables RIP inet 0 6 routes 6 active 0 holddown 0 hidden Restart Complete STATIC Router ID 10 69 100 1 Type vrf State Active Restart State Complete Path selection timeout 300 Interfaces t3 0 0 0 100 Route distinguisher 10 255 14 176 100 Vrf import STATIC import Vrf export STATIC export Tables STATIC inet 0 4 routes 4 active 0 holddown 0 hidden Restart Complete show route instance detail Gr...

Page 2041: ...BGP L export Tables BGP L inet 0 6 routes 5 active 0 holddown 0 hidden Restart Pending VPN BGP L mpls 0 2 routes 2 active 0 holddown 0 hidden Restart Pending VPN L2VPN Router ID 0 0 0 0 Type l2vpn State Active Restart State Pending Path selection timeout 300 Interfaces t3 0 0 0 512 Route distinguisher 10 255 14 176 512 Vrf import L2VPN import Vrf export L2VPN export Tables L2VPN l2vpn 0 2 routes 2...

Page 2042: ...0 4 routes 4 active 0 holddown 0 hidden Restart Pending VPN show route instance detail VPLS Routing Instance user host show route instance detail test vpls test vpls Router ID 0 0 0 0 Type vpls State Active Interfaces lsi 1048833 lsi 1048832 fe 0 1 0 513 Route distinguisher 10 255 37 65 1 Vrf import __vrf import test vpls internal__ Vrf export __vrf export test vpls internal__ Vrf import target ta...

Page 2043: ... L2VPN l2vpn L2VPN inet 0 0 0 0 L2VPN iso 0 0 0 0 L2VPN inet6 0 0 0 0 L2VPN l2vpn 0 2 0 0 LDP vrf LDP inet 0 4 0 0 LDP iso 0 0 0 0 LDP mpls 0 0 0 0 LDP inet6 0 0 0 0 LDP l2circuit 0 0 0 0 OSPF vrf OSPF inet 0 7 0 0 OSPF iso 0 0 0 0 OSPF inet6 0 0 0 0 RIP vrf RIP inet 0 6 0 0 RIP iso 0 0 0 0 RIP inet6 0 0 0 0 STATIC vrf STATIC inet 0 4 0 0 STATIC iso 0 0 0 0 STATIC inet6 0 0 0 0 1971 Chapter 74 Ope...

Page 2044: ...name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show route label on page 1972 show route label detail on page 1973 show route label extensive on page 1973 show route label terse on page 1973 Output Fields For information about output fields see the output field table for the show route command the sho...

Page 2045: ...179 Announcement bits 1 0 KRT AS path 100 I Ref Cnt 2 show route label extensive The output for the show route label extensive command is identical to that of the show routelabeldetail command For sample output see show route label detail on page 1973 show route label terse user host show route label 100016 terse mpls 0 4 destinations 4 routes 4 active 0 holddown 0 hidden Restart Complete Active R...

Page 2046: ...the show route extensive command or the show route terse command show route label switched path user host show route label switched path sf to ny inet 0 29 destinations 29 routes 29 active 0 holddown 0 hidden Active Route Last Active Both show route label switched path 1 1 1 1 32 MPLS 7 00 00 06 metric 0 to 111 222 1 9 via s0 0 0 0 label switched path sf to ny 3 3 3 3 32 MPLS 7 00 00 06 metric 0 t...

Page 2047: ...mpls 0 2 destinations 2 routes 2 active 0 holddown 0 hidden Active Route Last Active Both 1975 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2048: ...vilege Level view List of Sample Output show route martians on page 1976 Output Fields Table249onpage1976liststheoutputfieldsfortheshowroutemartians command Output fields are listed in the approximate order in which they appear Table 249 show route martians Output Fields Field Description Field Name Name of the route table in which the route martians reside table name Route destination destination...

Page 2049: ... 127 0 0 0 8 orlonger disallowed 128 0 0 0 16 orlonger disallowed 191 255 0 0 16 orlonger disallowed 192 0 0 0 24 orlonger disallowed 223 255 255 0 24 orlonger disallowed 240 0 0 0 4 orlonger disallowed 1977 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2050: ...xt hop extensive on page 1980 show route next hop terse on page 1982 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route next hop user host show route next hop 192 168 71 254 inet 0 18 destinations 18 routes 17 active 0 holddown 1 hidden sho...

Page 2051: ...54 via fxp0 0 selected State Active NoReadvrt Int Ext Local AS 1 Age 6 27 41 Task RT Announcement bits 3 0 KRT 3 Resolve tree 1 5 Resolve tree 2 AS path I 10 209 0 0 16 1 entry 1 announced Static Preference 5 Next hop reference count 36 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Local AS 1 Age 6 27 41 Task RT Announcement bits 3 0 KRT 3 Resolve tree 1 5 Resolve tree...

Page 2052: ...al AS 1 Age 6 27 41 Task RT Announcement bits 3 0 KRT 3 Resolve tree 1 5 Resolve tree 2 AS path I private1__ inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden red inet 0 4 destinations 5 routes 4 active 0 holddown 0 hidden Restart Complete iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden Restart Complete mpls 0 4 destinations 4 routes 4 active 0 holddown 0 hidden Restart Comple...

Page 2053: ...ate Active NoReadvrt Int Ext Local AS 69 Age 2 02 28 Task RT Announcement bits 1 0 KRT AS path I 192 168 0 0 16 1 entry 1 announced TSI KRT in kernel 192 168 0 0 16 192 168 71 254 Static Preference 5 Next hop reference count 22 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Local AS 69 Age 2 02 28 Task RT Announcement bits 1 0 KRT AS path I 192 168 102 0 23 1 entry 1 an...

Page 2054: ...6 0 1 destinations 1 routes 1 active 0 holddown 0 hidden green l2vpn 0 2 destinations 2 routes 2 active 0 holddown 0 hidden red l2vpn 0 1 destinations 1 routes 1 active 0 holddown 0 hidden show route next hop terse user host show route next hop 192 168 71 254 terse inet 0 25 destinations 26 routes 24 active 0 holddown 1 hidden Restart Complete Active Route Last Active Both A Destination P Prf Metr...

Page 2055: ...holddown 0 hidden Restart Complete inet6 0 2 destinations 2 routes 2 active 0 holddown 0 hidden Restart Complete private1__ inet6 0 1 destinations 1 routes 1 active 0 holddown 0 hidden 1983 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2056: ...e 1985 show route no community extensive on page 1985 show route no community terse on page 1986 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route no community user host show route no community inet 0 28 destinations 30 routes 27 active 0 ...

Page 2057: ...8 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Age 38 08 Task RT Announcement bits 1 0 KRT AS path I show route no community extensive user host show route no community extensive inet 0 18 destinations 18 routes 17 active 0 holddown 1 hidden 10 10 0 0 16 1 entry 1 announced TSI KRT in kernel 10 10 0 0 16 192 168 71 254 Static Preference 5 Next hop reference count 22 Next hop 192 168 7...

Page 2058: ...92 168 71 254 10 209 0 0 16 S 5 192 168 71 254 10 255 71 52 32 D 0 lo0 0 10 255 71 63 32 O 10 1 35 1 1 2 10 255 71 64 32 O 10 2 35 1 1 2 10 255 71 240 32 O 10 2 so 0 1 2 0 so 0 3 2 0 10 255 71 241 32 O 10 1 so 0 1 2 0 10 255 71 242 32 O 10 1 so 0 3 2 0 12 1 1 0 24 O 10 2 so 0 3 2 0 14 1 1 0 24 O 10 3 35 1 1 2 so 0 1 2 0 so 0 3 2 0 16 1 1 0 24 O 10 2 so 0 1 2 0 1986 Dell PowerConnect J Series Ether...

Page 2059: ... Asynchronous Transfer Mode virtual private network bgp Border Gateway Protocol ccc Circuit cross connect direct Directly connected route dvmrp Distance Vector Multicast Routing Protocol esis End System to Intermediate System flow Locally defined flow specification route isis Intermediate System to Intermediate System ldp Label Distribution Protocol l2circuit Layer 2 circuit l2vpn Layer 2 virtual ...

Page 2060: ...0 show route protocol direct on page 1990 show route protocol l2circuit detail on page 1990 show route protocol l2vpn extensive on page 1991 show route protocol ldp on page 1992 show route protocol ldp extensive on page 1992 show route protocol ospf Layer 3 VPN on page 1993 show route protocol ospf detail on page 1994 show route protocol rip on page 1994 show route protocol rip detail on page 1994...

Page 2061: ... 0 24 exact detail inet 0 227318 destinations 227319 routes 227305 active 0 holddown 13 hidden 66 117 63 0 24 1 entry 1 announced BGP Preference 170 101 Next hop type Indirect Next hop reference count 681816 Source 207 17 136 192 Next hop type Router Next hop index 324 Next hop 192 168 167 254 via fxp0 0 selected Protocol next hop 207 17 136 29 Indirect next hop 8c7b09c 342 State Active Int Ext Lo...

Page 2062: ... 0 14 36 24 via lo0 0 111 222 5 0 24 Direct 0 14 36 24 via fxp0 0 111 222 8 16 28 Direct 0 14 36 24 via at 5 3 0 0 111 222 8 100 30 Direct 0 14 36 24 via at 5 3 0 129 111 222 8 104 30 Direct 0 14 36 24 via at 5 3 0 128 111 222 8 161 32 Direct 0 14 36 24 via t3 5 2 0 0 111 222 8 163 32 Direct 0 14 36 24 via t3 5 2 1 0 iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden Active Route Last Acti...

Page 2063: ... 10 21 Task l2 circuit Announcement bits 1 0 LDP AS path I VC Label 100000 MTU 1500 VLAN ID 512 show route protocol l2vpn extensive user host show route protocol l2vpn extensive inet 0 14 destinations 15 routes 13 active 0 holddown 1 hidden inet 3 1 destinations 1 routes 1 active 0 holddown 0 hidden iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden mpls 0 7 destinations 7 routes 7 active ...

Page 2064: ...wn 0 hidden Active Route Last Active Both 100064 LDP 9 1d 23 03 35 metric 1 via t1 4 0 0 0 Pop 100064 S 0 LDP 9 1d 23 03 35 metric 1 via t1 4 0 0 0 Pop 100080 LDP 9 1d 23 03 35 metric 1 via t1 4 0 0 0 Swap 100000 show route protocol ldp extensive user host show route protocol ldp extensive 192 168 16 1 32 1 entry 1 announced State FlashAll LDP Preference 9 Next hop reference count 3 Next hop via t...

Page 2065: ...ask LDP Announcement bits 1 0 KRT AS path I 100080 1 entry 1 announced TSI KRT in kernel 100080 36 t1 4 0 0 0 LDP Preference 9 Next hop reference count 2 Next hop via t1 4 0 0 0 selected Label operation Swap 100000 State Active Int Local AS 65500 Age 1d 23 03 58 Metric 1 Task LDP Announcement bits 1 0 KRT AS path I Prefixes bound to route 192 168 16 1 32 show route protocol ospf Layer 3 VPN user h...

Page 2066: ...st Active Both 10 255 14 177 32 RIP 100 20 24 34 metric 2 to 10 39 1 22 via t3 0 2 2 0 224 0 0 9 32 RIP 100 00 03 59 metric 1 showrouteprotocolrip detail user host show route protocol rip detail inet 0 26 destinations 27 routes 25 active 0 holddown 1 hidden Active Route Last Active Both VPN AB inet 0 5 destinations 5 routes 5 active 0 holddown 0 hidden Active Route Last Active Both 10 255 14 177 3...

Page 2067: ...128 RIPng 100 02 13 33 metric 2 to fe80 2a0 a5ff fe3d 56 via t3 0 2 0 0 1111 5 128 RIPng 100 02 13 33 metric 2 to fe80 2a0 a5ff fe3d 56 via t3 0 2 0 0 1111 6 128 RIPng 100 02 13 33 metric 2 to fe80 2a0 a5ff fe3d 56 via t3 0 2 0 0 1995 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2068: ...stem Required Privilege Level view List of Sample Output show route range on page 1996 show route range destination prefix on page 1997 show route range detail on page 1997 show route range extensive on page 1998 show route range terse on page 1999 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route e...

Page 2069: ...en 10 10 0 0 16 1 entry 1 announced Static Preference 5 Next hop reference count 22 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Age 30 05 Task RT Announcement bits 1 0 KRT AS path I 10 209 0 0 16 1 entry 1 announced Static Preference 5 Next hop reference count 22 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Age 30 05 Task RT Announcement...

Page 2070: ... Static Preference 5 Next hop reference count 22 Next hop 192 168 71 254 via fxp0 0 selected State Active NoReadvrt Int Ext Age 30 17 Task RT Announcement bits 1 0 KRT AS path I 10 255 71 14 32 1 entry 0 announced Direct Preference 0 Next hop type Interface Next hop reference count 1 Next hop via lo0 0 selected State Active Int Age 30 17 Task IF AS path I 172 16 0 0 12 1 entry 1 announced TSI KRT ...

Page 2071: ...e Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 10 0 0 0 8 D 0 fxp2 0 D 0 fxp1 0 10 0 0 4 32 L 0 Local iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden Active Route Last Active Both A Destination P Prf Metric 1 Metric 2 Next hop AS path 47 0005 80ff f800 0000 0108 0001 0102 5507 1014 152 D 0 lo0 0 inet6 0 2 destinations 2 routes 2 active 0 holddown 0 hidden Acti...

Page 2072: ... which they were received but does not show the effects of import policy on the routing attributes Required Privilege Level view List of Sample Output show route receive protocol bgp on page 2002 show route receive protocol bgp extensive on page 2002 show route receive protocol bgp extensive on page 2003 show route receive protocol bgp detail Layer 2 VPN on page 2004 show route receive protocol bg...

Page 2073: ...on destination prefix entry announced detail extensive 64 bit prefix added to IP subnets to make them unique Route Distinguisher detail extensive First label in a block of labels and label block size A remote PE routing device uses this first label when sending traffic toward the advertising PE routing device Label Base range detail extensive Virtual private network VPN label Packets are sent betw...

Page 2074: ... output only Cluster ID sent by the route reflector Cluster list detail extensive For route reflected output only Address of routing device that originally sent the route to the route reflector Originator ID detail extensive Community path attribute for the route See the Output Field table in the show route detail command for all possible values for this field Communities detail extensive Number l...

Page 2075: ...n Prefix Next hop MED Lclpref AS path inet 3 10 destinations 10 routes 10 active 0 holddown 0 hidden Prefix Next hop MED Lclpref AS path iso 0 1 destinations 1 routes 1 active 0 holddown 0 hidden Prefix Next hop MED Lclpref AS path mpls 0 48 destinations 48 routes 48 active 0 holddown 0 hidden show route receive protocol bgp extensive user host showroutereceive protocolbgp207 17 136 192tableinet 0...

Page 2076: ...00 Layer2 info encaps FRAME RELAY control flags 0 mtu 0 show route receive protocol bgp user host show route receive protocol bgp 10 255 14 171 extensive inet 0 68 destinations 68 routes 67 active 0 holddown 1 hidden Prefix Nexthop MED Lclpref AS path extensive Layer 2 VPN inet 3 4 destinations 4 routes 4 active 0 holddown 0 hidden Prefix Nexthop MED Lclpref AS path iso 0 1 destinations 1 routes 1...

Page 2077: ...0 255 14 179 32 10 255 14 171 2 100 I 10 255 14 171 200 10 255 14 175 32 10 255 14 171 100 2 I show route receive protocol bgp detail Layer 3 VPN user host show route receive protocol bgp 10 255 14 174 detail inet 0 16 destinations 17 routes 15 active 0 holddown 1 hidden inet 3 2 destinations 2 routes 2 active 0 holddown 0 hidden vpna inet 0 5 destinations 5 routes 5 active 0 holddown 0 hidden 10 ...

Page 2078: ...5 245 45 165 3 0 0 16 1 entry 1 announced Nexthop 111 222 5 254 Localpref 100 AS path I Originator Cluster list 10 2 3 1 Originator ID 10 255 245 68 165 4 0 0 16 1 entry 1 announced Nexthop 111 222 5 254 Localpref 100 AS path I Originator Cluster list 10 2 3 1 Originator ID 10 255 245 45 195 1 2 0 24 1 entry 1 announced Nexthop 111 222 5 254 Localpref 100 AS path I Originator Cluster list 10 2 3 1...

Page 2079: ...ry Optional Display the specified level of output index index Optional Show the index of the resolution tree logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system prefix network destination prefix Optional Display database entries for the specified address table routing table name Optional Display information about a particu...

Page 2080: ...ing table inet 0 or inet 3 provided the best path for a particular prefix Originating RIB Metric associated with the forwarding next hop Metric Number of nodes in the path Node path count Number of forwarding next hops The forwarding next hop is the network layer address of the directly reachable neighboring system if applicable and the interface used to reach it Forwarding next hops show route re...

Page 2081: ...net 3 Tree Index 2 Nodes 2 Reference Count 1 Contributing routing tables inet 3 Tree Index 3 Nodes 43 Reference Count 1 Contributing routing tables inet 0 inet 3 show route resolution unresolved user host show route resolution unresolved Tree Index 1 vt 3 2 0 32769 0 16 Protocol Nexthop 10 255 71 238 Push 800000 Indirect nexthop 0 vt 3 2 0 32772 0 16 Protocol Nexthop 10 255 70 103 Push 800008 Indi...

Page 2082: ... for the provided address and optional prefix range prefix range Optional Display information for the provided address range summary Optional Display route snooping summary statisitics table table name Optional Display information for the named table Required Privilege Level view List of Sample Output show route snooping detail on page 2010 Output Fields For information about output fields see the...

Page 2083: ...IPv4 Next hop reference count 113 State Active Int Age 2 13 Task MC Announcement bits 1 0 KRT AS path I 225 0 0 3 11 11 11 100 3 9 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 15 Task MC Announcement bits 1 0 KRT AS path I 225 0 0 4 11 11 11 100 3 9 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop t...

Page 2084: ...e Int Age 2 13 Task MC Announcement bits 1 0 KRT AS path I 225 0 0 10 11 11 11 100 3 9 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 15 Task MC Announcement bits 1 0 KRT AS path I 226 0 0 1 11 11 11 100 3 10 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count...

Page 2085: ... Task MC Announcement bits 1 0 KRT AS path I 227 0 0 1 11 11 11 100 3 11 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 10 Task MC Announcement bits 1 0 KRT AS path I 227 0 0 2 11 11 11 100 3 11 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Act...

Page 2086: ... 11 11 11 100 3 11 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 10 Task MC Announcement bits 1 0 KRT AS path I 227 0 0 10 11 11 11 100 3 11 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 15 Task MC Announcement bits 1 0 KRT AS...

Page 2087: ... 3 12 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 8 Task MC Announcement bits 1 0 KRT AS path I 228 0 0 10 11 11 11 100 3 12 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 12 Task MC Announcement bits 1 0 KRT AS path I 229 0 0 ...

Page 2088: ...eference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 15 Task MC Announcement bits 1 0 KRT AS path I 229 0 0 8 11 11 11 100 3 13 0 0 80 1 entry 1 announced Multicast Preference 180 Next hop type Multicast IPv4 Next hop reference count 113 State Active Int Age 2 15 Task MC Announcement bits 1 0 KRT AS path I 229 0 0 9 11 11 11 100 3 13 0 0 80 1 entry 1 announ...

Page 2089: ...State Active Int Age 2 13 Task MC Announcement bits 1 0 KRT AS path I 2017 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2090: ...Sample Output show route source gateway on page 2018 show route source gateway detail on page 2019 show route source gateway extensive on page 2021 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse command show route source gateway user host show route sourc...

Page 2091: ...I via so 0 3 0 0 label switched path green r1 r3 show route source gateway detail user host show route source gateway 10 255 70 103 detail inet 0 24 destinations 25 routes 23 active 0 holddown 1 hidden Restart Complete inet 3 2 destinations 2 routes 2 active 0 holddown 0 hidden Restart Complete private1__ inet 0 2 destinations 3 routes 2 active 0 holddown 0 hidden iso 0 1 destinations 1 routes 1 a...

Page 2092: ... control flags Site Down mtu 0 Label base 800016 range 8 Localpref 0 Router ID 10 255 70 103 Primary Routing Table bgp l2vpn 0 bgp l2vpn 0 4 destinations 4 routes 4 active 0 holddown 0 hidden Restart Complete 10 255 70 103 1 3 1 96 1 entry 0 announced BGP Preference 170 101 Route Distinguisher 10 255 70 103 1 Next hop reference count 7 Source 10 255 70 103 Protocol next hop 10 255 70 103 Indirect ...

Page 2093: ...art Complete inet6 0 5 destinations 5 routes 5 active 0 holddown 0 hidden Restart Complete green l2vpn 0 4 destinations 4 routes 4 active 0 holddown 0 hidden Restart Complete 10 255 70 103 1 3 1 96 1 entry 1 announced BGP Preference 170 101 Route Distinguisher 10 255 70 103 1 Next hop reference count 7 Source 10 255 70 103 Protocol next hop 10 255 70 103 Indirect next hop 2 no forward State Second...

Page 2094: ...ric2 1 Task BGP_69 10 255 70 103 179 AS path I Communities target 11111 1 Layer2 info encaps VPLS control flags mtu 0 Label base 800008 range 8 Localpref 100 Router ID 10 255 70 103 Secondary Tables green l2vpn 0 Indirect next hops 1 Protocol next hop 10 255 70 103 Metric 2 Indirect next hop 2 no forward Indirect path forwarding next hops 1 Next hop via so 0 3 0 0 weight 0x1 10 255 70 103 32 Origi...

Page 2095: ... 1 Protocol next hop 10 255 70 103 Metric 2 Indirect next hop 2 no forward Indirect path forwarding next hops 1 Next hop via so 0 3 0 0 weight 0x1 10 255 70 103 32 Originating RIB inet 3 Metric 2 Node path count 1 Forwarding nexthops 1 Nexthop via so 0 3 0 0 2023 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2096: ...iststheoutputfieldsfortheshowroutesummarycommand Output fields are listed in the approximate order in which they appear Table 252 show route summary Output Fields Field Description Field Name Name of the routing table for example inet 0 routing table name Number of destinations for which there are routes in the routing table destinations Number of routes in the routing table active Number of route...

Page 2097: ...Complete Direct 1 routes 1 active mpls 0 7 destinations 7 routes 5 active 0 holddown 2 hidden Restart Complete MPLS 3 routes 3 active VPLS 4 routes 2 active inet6 0 5 destinations 5 routes 5 active 0 holddown 0 hidden Restart Complete Direct 2 routes 2 active PIM 2 routes 2 active MLD 1 routes 1 active green l2vpn 0 4 destinations 4 routes 4 active 0 holddown 0 hidden Restart Complete BGP 2 routes...

Page 2098: ...figuration Guide Required Privilege Level view Related Documentation show route summary on page 2024 List of Sample Output show route table bgp l2 vpn on page 2027 show route table bgp l3vpn 0 on page 2027 show route table bgp l3vpn 0 detail on page 2027 show route table inet 0 on page 2028 show route table inet6 0 on page 2029 show route table inet6 3 on page 2029 show route table l2circuit 0 on ...

Page 2099: ... bgp l3vpn 0 8 destinations 8 routes 8 active 0 holddown 0 hidden 10 255 245 12 1 4 0 0 0 8 1 entry 1 announced BGP Preference 170 101 Route Distinguisher 10 255 245 12 1 Source 10 255 245 12 Next hop 192 168 208 66 via fe 0 0 0 0 selected Label operation Push 182449 Protocol next hop 10 255 245 12 Push 182449 Indirect next hop 863a630 297 State Active Int Ext Local AS 35 Peer AS 35 Age 12 19 Metr...

Page 2100: ...2 34 VPN Label 182465 Localpref 100 Router ID 10 255 245 12 10 255 245 12 1 4 17 251 0 24 1 entry 1 announced BGP Preference 170 101 Route Distinguisher 10 255 245 12 1 Source 10 255 245 12 Next hop 192 168 208 66 via fe 0 0 0 0 selected Label operation Push 182465 Protocol next hop 10 255 245 12 Push 182465 Indirect next hop 86bd210 330 State Active Int Ext Local AS 35 Peer AS 35 Age 12 19 Metric...

Page 2101: ... via fe 0 1 0 0 show route table inet6 3 user router show route table inet6 3 inet6 3 2 destinations 2 routes 2 active 0 holddown 0 hidden Active Route Last Active Both 10 255 245 195 128 LDP 9 00 00 22 metric 1 via so 1 0 0 0 10 255 245 196 128 LDP 9 00 00 08 metric 1 via so 1 0 0 0 Push 100008 show route table l2circuit 0 user host show route table l2circuit 0 l2circuit 0 4 destinations 4 routes...

Page 2102: ...host show route table mpls 0 mpls 0 11 destinations 11 routes 11 active 0 holddown 0 hidden Active Route Last Active Both 0 MPLS 0 00 45 09 metric 1 Receive 1 MPLS 0 00 45 09 metric 1 Receive 2 MPLS 0 00 45 09 metric 1 Receive 100000 L2VPN 7 00 43 04 via so 0 1 0 1 Pop 100001 L2VPN 7 00 43 03 via so 0 1 0 2 Pop Offset 4 100002 LDP 9 00 43 22 metric 1 via so 0 1 2 0 Pop via so 0 1 3 0 Pop 100002 S ...

Page 2103: ...AS path I to 10 0 16 2 via fe 0 0 1 0 label switched path am 192 168 24 1 1 3 1 96 BGP 170 00 02 53 localpref 100 from 192 168 24 1 AS path I to 10 0 16 2 via fe 0 0 1 0 label switched path am show route table vpn a mdt 0 user host show route table vpn a mdt 0 vpn a mdt 0 3 destinations 3 routes 3 active 0 holddown 0 hidden Active Route Last Active Both 1 1 0 10 255 14 216 232 1 1 1 144 MVPN 70 01...

Page 2104: ...nations 6 routes 6 active 0 holddown 0 hidden Active Route Last Active Both 1 10 255 2 202 65535 10 255 2 202 432 BGP 170 00 02 37 localpref 100 from 10 255 2 202 AS path I via so 0 1 3 0 1 10 255 2 203 65535 10 255 2 203 432 BGP 170 00 02 37 localpref 100 from 10 255 2 203 AS path I via so 0 1 0 0 1 10 255 2 204 65535 10 255 2 204 432 MVPN 70 00 57 23 metric2 1 Indirect 5 10 255 2 202 65535 128 1...

Page 2105: ... Output Fields Field Description Field Name Name of the routing table for example inet 0 routing table name Number of destinations for which there are routes in the routing table number destinations Number of routes in the routing table and total number of routes in the following states active routes that are active holddown routes that are in the pending state before being declared inactive hidde...

Page 2106: ...e LocalPref value for Route 2 is 155 the Preference2 value is 156 Route 2 is preferred because if has a higher LocalPref value and a lower Preference2 value Prf First metric value in the route For routes learned from BGP this is the MED metric Metric 1 Second metric value in the route For routes learned from BGP this is the IGP metric Metric 2 Next hop to the destination An angle bracket indicates...

Page 2107: ... Next hop AS path 0 0 0 0 0 S 5 111 222 5 254 1 0 0 1 32 D 0 at 5 3 0 0 1 0 0 2 32 L 0 Local 12 12 12 21 32 L 0 Reject 13 13 13 13 32 D 0 t3 5 2 1 0 13 13 13 14 32 L 0 Local 13 13 13 21 32 L 0 Local 13 13 13 22 32 D 0 t3 5 2 0 0 127 0 0 1 32 D 0 lo0 0 111 222 5 0 24 D 0 fxp0 0 111 222 5 81 32 L 0 Local 224 0 0 5 32 O 10 1 MultiRecv 2035 Chapter 74 Operational Commands for Layer 3 Protocols ...

Page 2108: ... show vrrp brief on page 2041 show vrrp detail IPv6 on page 2041 show vrrp detail Route Track on page 2041 show vrrp extensive on page 2041 show vrrp interface on page 2043 show vrrp summary on page 2044 show vrrp track detail on page 2044 show vrrp track summary on page 2044 Output Fields Table 254 on page 2036 lists the output fields for the show vrrp command Output fields are listed in the appr...

Page 2109: ...ived Number of packets received whose VRRP PDU type is not 1 InvalidVRRPauthenticationtypereceived Number of packets received whose VRRP authentication is not none simple or md5 Invalid VRRP IP count received Number of packets received whose VRRP IP count exceeds 8 Invalid VRRP checksum received Number of packets received whose VRRP checksum does not match the calculated value Interface VRRP PDU e...

Page 2110: ...en being the backup and being the master router State detail extensive Configured VRRP priority for the interface Priority detail extensive Configured VRRP advertisement interval Advertisement interval detail extensive Configured VRRP authentication type none simple or md5 Authenticationtype detail extensive Whether preemption is allowed on the interface yes or no Preempt detail extensive Whether ...

Page 2111: ...econd of the tracked interface Int speed Speed detail extensive Operational priority cost incurred due to the state and speed of this tracked interface This cost is applied to the configured priority to obtain the current priority Incurred priority cost detail extensive Speed below which the corresponding priority cost is incurred In other words when the speed of the interface drops below the thre...

Page 2112: ...mber of VRRP PDUs whose virtual IP addresses differ from the list of virtual IP addresses configured on the VRRP instance Group VRRP PDU error statistics extensive State transition statistics for the VRRP group Idle to master transitions Number of times that the VRRP instance transitioned from the idle state to the master state Idle to backup transitions Number of times that the VRRP instance tran...

Page 2113: ... 1 120 Index 69 SNMP ifIndex 47 VRRP Traps enabled Interface state up Group 1 State master Priority 200 Advertisement interval 1 Authentication type none Preempt yes Accept data mode no VIP count 2 VIP ge80 13 1 1 99 gec0 13 1 1 99 Advertisement timer 0 327s Master router ge80 13 1 1 1 Virtual router uptime 00 03 47 Master router uptime 00 03 41 Virtual MAC 00 00 5e 00 02 01 Tracking disabled show...

Page 2114: ...up VRRP PDU statistics Advertisement sent 188 Advertisement received 0 Group VRRP PDU error statistics Bad authentication type received 0 Bad password received 0 Bad MD5 digest received 0 Bad advertisement timer received 0 Bad VIP count received 0 Bad VIPADDR received 0 Group state transition statistics Idle to master transitions 0 Idle to backup transitions 1 Backup to master transitions 1 Master...

Page 2115: ... 0 No group match received 0 Interface VRRP PDU error statistics Invalid IPAH next type received 0 Invalid VRRP TTL value received 0 Invalid VRRP version received 0 Invalid VRRP PDU type received 0 Invalid VRRP authentication type received 0 Invalid VRRP IP count received 0 Invalid VRRP checksum received 0 Physical interface ge 0 0 0 Unit 121 Vlan id 212 Address gec0 12 1 1 1 120 Index 67 SNMP ifI...

Page 2116: ...interface ae1 211 State up Speed 400m Incurred priority cost 0 Threshold Priority cost Active 400m 10 300m 60 200m 110 100m 160 down 190 Tracking VRRP interface ae0 210 Group 1 VR State master Current priority 200 Configured priority 200 Priority hold time disabled Remaining time 50 351 show vrrp track summary user host show vrrp track summary Track if State Speed VRRP if Group VR State Current pr...

Page 2117: ...GMP Snooping and Multicast Configuration on page 2055 Configuring IGMP Snooping and Multicast on page 2063 Verifying IGMP Snooping and Multicast on page 2069 Configuration Statements for IGMP Snooping and Multicast on page 2073 Operational Mode Commands for IGMP Snooping and Multicast on page 2143 2045 ...

Page 2118: ...2046 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2119: ...rfaces J EX Series Switches support IGMPv1 IGMPv2 and IGMPv3 For details on IGMPv1 IGMPv2 and IGMPv3 see the following standards For IGMPv1 see RFC 1112 Host extensions for IP multicasting at http www faqs org rfcs rfc1112 html For IGMPv2 see RFC 2236 Internet Group Management Protocol Version 2 at http www faqs org rfcs rfc2236 html For IGMPv3 see RFC 3376 Internet Group Management Protocol Versi...

Page 2120: ... used to regulate multicast traffic on the VLAN When the switch receives multicast packets it uses the cache table to selectively forward the packets only to the ports that are members of the destination multicast group Figure 41 on page 2048 shows an example of IGMP traffic flow with IGMP snooping enabled Figure 41 IGMP Traffic Flow with IGMP Snooping Enabled How IGMP Snooping Works with Routed V...

Page 2121: ... that are interested in receiving the multicast stream The switch ultimately assigns a next hop after it does a route lookup The next hop includes all direct Layer 3 interfaces and RVIs The Packet Forwarding Engine then forwards multicast traffic to the bridge multicast ID that includes all Layer 3 interfaces and RVIs that are multicast receivers for a given multicast group Figure 42 on page 2050 ...

Page 2122: ...cast ID9 Table 255 Bridge Multicast IDs and Next Hops Tag Information Next Hop Type of Next Hop ID Number tag off ge 0 0 0 0 RHN_UNICAST ID1 tag on ge 2 0 0 0 RHN_UNICAST ID2 ID1 ID2 RHN_FLOOD ID3 tag off ge 0 0 1 0 RHN_UNICAST ID4 ID4 ID2 RHN_FLOOD ID5 subnh ID3 vlan 0 RHN_UNICAST ID6 subnh ID5 VLAN 1 RHN_UNICAST ID7 ge 0 0 2 0 RHN_UNICAST ID8 ID6 ID7 ID8 RHN_FLOOD ID9 2050 Dell PowerConnect J Se...

Page 2123: ...ooping to filter multicast streams based on the source address of the multicast stream Junos OS for J EX Series switches supports IGMPv3 packets that are in INCLUDE or EXCLUDE mode When a host sends an IGMPv3 INCLUDE report through a switch interface to indicate that it wants to receive a multicast stream from a source address the switch adds the source address to the source list In INCLUDE mode t...

Page 2124: ... that is enabled for MVR selectively forward IPTV multicast traffic from interfaces on the MVLAN source interfaces to hosts that are connected to interfaces that are not part of the MVLAN These interfaces are known as MVR receiver ports The MVR receiver ports can receive traffic from a port on the MVLAN but cannot send traffic onto the MVLAN and they remain in their own VLANs for bandwidth and sec...

Page 2125: ...p s IPTV multicast traffic on that port even though that port is not in the MVLAN Likewise if a host on a multicast receiver port leaves an MVR group on the multicast receiver VLAN the appropriate bridging entry is deleted and the MVLAN stops forwarding that group s IPTV multicast traffic on that port In addition you can configure the switch to statically install the bridging entries on the multic...

Page 2126: ...2054 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2127: ...orwarding decisions and forward traffic to the intended destination interfaces Configure IGMP snooping on one or more VLANs to allow the switch to examine IGMP packets and make forwarding decisions based on packet content By default IGMP snooping is enabled on J EX Series switches This example describes how to configure IGMP snooping Requirements on page 2055 Overview and Topology on page 2056 Con...

Page 2128: ...mployee vlan 225 100 100 100 Multicast IP address for employee vlan In this example the switch is initially configured as follows IGMP snooping is disabled on the VLAN Configuration To configure basic IGMP snooping on a switch CLI Quick Configuration To quickly configure IGMP snooping copy the following commands and paste them into the switch terminal window edit protocols set igmp snooping vlan e...

Page 2129: ...ard a multicast router the interface to receive multicast traffic edit protocols user switch set igmp snooping vlan employee vlan interface ge 0 0 2 multicast router interface 6 Change the number of timeout intervals the switch waits before timing out a multicast group to 4 edit protocols user switch set igmp snooping vlan employee vlan robust count 4 Results Check the results of the configuration...

Page 2130: ...face in one of the VLANs Overview and Topology In a standard Layer 2 network a multicast stream received on one VLAN is never distributed to interfaces outside that VLAN If hosts in multiple VLANs request the same multicast stream a separate copy of that multicast stream is distributed to the requesting VLANs MVR introduces the concept of a multicast source VLAN MVLAN which is created by MVR and b...

Page 2131: ...ed to a multicast router which in turn forwards the IPTV multicast traffic in the MVLAN to the Layer 2 network Figure 43 on page 2060 shows the MVR topology in transparent mode Interfaces P1 and P2 on Switch C belong to service VLAN s0 and MVLAN mv0 Interface P4 of Switch C also belongs to service VLAN s0 In the upstream direction of the network only non IPTV traffic is being carried in individual...

Page 2132: ...ection of the network only non IPTV traffic is being carried on customer VLAN c0 Any IPTV traffic requested by hosts on VLAN c0 is replicated untagged to port P4 based on streams received in MVLAN mv0 IPTV traffic flows from port P4 out to an IPTV enabled device in Host 1 Other traffic such as data and voice traffic also flows from port P4 to other network devices in Host 1 2060 Dell PowerConnect ...

Page 2133: ...ds and paste them into the switch terminal window To quickly configure MVR in transparent mode the default mode do not copy and paste the final command line in the following block of lines edit protocols igmp snooping set vlan mv0 data forwarding source groups 225 10 0 0 16 set vlan v2 data forwarding receiver source vlans mv0 set vlan v2 data forwarding receiver install set vlan mv0 proxy source ...

Page 2134: ...switch set vlan v2 data forwarding receiver install 4 Optional Configure MVR in proxy mode edit protocols igmp snooping user switch set vlan mv0 proxy source address 10 1 1 1 Results Check the results of the configuration edit protocols igmp snooping user switch show vlan mv0 proxy source address 10 1 1 1 data forwarding source groups 225 10 0 0 16 vlan v2 data forwarding receiver source vlans mv0...

Page 2135: ...ic to the intended destination interfaces You can configure IGMP snooping on one or more VLANs to allow the switch to examine IGMP packets and make forwarding decisions based on packet content By default IGMP snooping is enabled on J EX Series switches NOTE You cannot configure IGMP snooping on a secondary VLAN To enable IGMP snooping and configure individual options as needed for your network by ...

Page 2136: ...bership on page 2181 show igmp snooping route on page 2183 show igmp snooping statistics on page 2185 show igmp snooping vlans on page 2187 IGMP Snooping on J EX Series Switches Overview on page 2047 Configuring IGMP Snooping J Web Procedure IGMP snooping regulates multicast traffic in a switched network With IGMP snooping enabled the J EX Series switch monitors the IGMP transmissions between a ho...

Page 2137: ...K to apply changes to the configuration or click Cancel to cancel without saving changes To disable IGMP snooping on a VLAN select the VLAN from the list and click Disable Table 257 IGMP Snooping Configuration Fields Your Action Function Field Select a VLAN from the list to add it to the snooping configuration Specifies the VLAN on which to enable IGMP snooping VLAN Name To enable the option selec...

Page 2138: ...face settings for the IGMP snooping configuration Remove Deletes an interface configured for IGMP snooping Statically configures an interface as a switching interface toward a multicast router the interface to receive multicast traffic Interfaces List Related Documentation Example Configuring IGMP Snooping on J EX Series Switches on page 2055 Configuring IGMP Snooping CLI Procedure on page 2063 Ch...

Page 2139: ...p membership timeout value you reset the query interval and query response interval values at the edit protocols igmp hierarchy level Notice that you are not resetting the values at the edit protocols igmp snooping hierarchy level When you reset these values the IGMP snooping configuration inherits the new values and recalculates the group membership timeout value accordingly For more information ...

Page 2140: ...he MVLANs must have proxy mode enabled or all must have proxy mode disabled You can enable proxy mode only on VLANs that are configured as MVR source VLANs and that are not configured for Q in Q tunneling After you configure a VLAN as an MVLAN that VLAN is no longer available for other uses To configure MVR 1 Configure the VLAN named mv0 to be an MVLAN edit protocols user switch setigmp snoopingvl...

Page 2141: ...IGMP snooping details in the CLI enter the following commands show igmp snooping vlans show igmp snooping statistics show igmp snooping route Meaning Table 258 on page 2069 summarizes the IGMP snooping details displayed Table 258 Summary of IGMP Snooping Output Fields Values Field IGMP Snooping Monitor The VLAN for which IGMP snooping is enabled VLAN Indicates the interfaces configured as switchin...

Page 2142: ...sponse interval 50 accounting interface vlan 43 version 2 Display the IGMP snooping membership information which contains the group query timeout value that was derived from the IGMP configuration user switch show show igmp snooping membership detail VLAN v43 Tag 43 Index 4 Group 225 0 0 1 Receiver count 1 Flags v2 hosts ge 0 0 15 0 Uptime 00 00 05 timeout 350 Meaning When you enable IGMP snooping...

Page 2143: ...because they are different from the default values The output from the showigmp snoopingmembershipdetail command shows the revised group query timeout value 350 which was derived from the new IGMP configuration settings Related Documentation Changing the IGMP Snooping Group Query Membership Timeout Value CLI Procedure on page 2067 2071 Chapter 78 Verifying IGMP Snooping and Multicast ...

Page 2144: ...2072 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2145: ...x authenticator authentication profile name profile name interface all interface names disable guest vlan vlan id vlan name mac radius restrict maximum requests number no reauthentication quiet period seconds reauthentication interval seconds retries number server fail deny permit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single sin...

Page 2146: ...sable interface interface name immediate leave interface interface name group limit limit multicast router interface static group ip address proxy query interval seconds query last member interval seconds query response interval seconds robust count number lldp disable advertisement interval seconds hold multiplier number interface all interface name disable traceoptions file filename files number...

Page 2147: ...ose mstp disable bpdu block on edge bridge priority priority configuration name name forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revisio...

Page 2148: ...anagement action profile profile name default actions interface down linktrace age 30m 10m 1m 30s 10s path database size path database size maintenance domain domain name level number mip half function none default explicit name format character string none dns mac 2oct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep...

Page 2149: ...rame period count frame period summary count symbol period count negotiation options allow remote loopback no allow link events rstp disable bpdu block on edge bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files ...

Page 2150: ...able bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout acti...

Page 2151: ...tanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch on page ...

Page 2152: ... add this statement to the configuration Related Documentation Recording IGMP Join and Leave Events accounting Protocol Syntax accounting Hierarchy Level edit logical systems logical system name protocols igmp edit protocols igmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable the collection of IGMP join and leave event statistics o...

Page 2153: ...RP set forward msdp sa Optional Forward MSDP SAs to this address Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration address Local RPs Syntax address address Hierarchy Level edit logical systems logical system name protocols pim rp local family inet inet6 editlogical systemslogical system namerouting instancesrouti...

Page 2154: ...es routing instance name protocols pim rp local family inet inet6 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure properties for anycast RP using PIM The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configura...

Page 2155: ... the rendezvous point tree RPT and shortest path tree SPT PIM assert messages help routing devices determine which routing device forwards the traffic and prunes the RPT for this group By default routing devices enter an assert cycle every 180 seconds You can configure this assert timeout to be between 5 and 210 seconds Options seconds Time for routing device to wait before another assert message ...

Page 2156: ...ement and discovery Options announce Configures the routing device to listen only for mapping packets and also to advertise itself if it is an RP discovery Configures the routing device to listen only for mapping packets mapping Configures the routing device to announce listens for and generates mapping packets and announces that the routing device is eligible to be an RP The remaining statement i...

Page 2157: ...ion Related Documentation Configuring PIM Bootstrap Properties bootstrap export Syntax bootstrap export policy names Hierarchy Level edit logical systems logical system name protocols pim rp editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp edit protocols pim rp edit routing instances routing instance name protocols pim rp Release Information Statement in...

Page 2158: ...ty number Hierarchy Level edit logical systems logical system name protocols pim rp editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp edit protocols pim rp edit routing instances routing instance name protocols pim rp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure whether this routing d...

Page 2159: ...N or a multicast receiver VLAN must have exactly one source statement or exactly one receiver statement A data forwarding VLAN can operate only in IGMPv2 mode The remaining statements are explained separately Default Disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation edit protocols C...

Page 2160: ...tion Configuring PIM Sparse Dense Mode Properties disable Syntax disable interface interface name Hierarchy Level edit protocols igmp snooping vlan vlan id vlan name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable IGMP snooping on all interfaces in a VLAN or on a specific VLAN interface Default If you do not specify an interface al...

Page 2161: ...ls pim family inet inet6 edit routing instances routing instance name protocols pim interface interface name edit routing instances routing instance name protocols pim rp local family inet inet6 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Explicitly disable PIM at the protocol interface or family hierarchy levels Required Privilege Lev...

Page 2162: ...Election on Point to Point Links dr register policy Syntax dr register policy policy names Hierarchy Level edit logical systems logical system name protocols pim rp editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp edit protocols pim rp edit routing instances routing instance name protocols pim rp Release Information Statement introduced before Junos OS R...

Page 2163: ...r IPv6 export Bootstrap Syntax export policy names Hierarchy Level edit logical systems logical system name protocols pim rp bootstrap family inet inet6 editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp bootstrap family inet inet6 edit protocols pim rp bootstrap family inet inet6 edit routing instances routing instance name protocols pim rp bootstrap fami...

Page 2164: ...nformation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure which IP protocol type bootstrap properties to apply Options inet Apply IP version 4 IPv4 local RP properties inet6 Apply IPv6 local RP properties The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To...

Page 2165: ...stances routing instance name protocols pim rp local Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure which IP protocol type local RP properties to apply Options inet Apply IP version 4 IPv4 local RP properties inet6 Apply IPv6 local RP properties The remaining statements are explained separately Required Privilege Level routing T...

Page 2166: ...ration Related Documentation Configuring PIM Sparse Mode Graceful Restart group Syntax group ip address Hierarchy Level edit protocols igmp snooping vlan vlan id vlan name interface interface name static Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a static multicast group using a valid IP multicast address Default None Option...

Page 2167: ...s OS Release 10 2 for J EX Series switches Description Specify the IGMP multicast group address and optionally the source address for the multicast group being statically configured on an interface NOTE You must specify a unique address for each group The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To ad...

Page 2168: ...interface Default No group limits are configured Options limit Number that represents the maximum number of multicast groups allowed on the specified interface Range 0 through 65535 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring IGMP Snooping on J EX Series Switches on...

Page 2169: ... routing instance name protocols pim rp static address address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the address ranges of the multicast groups for which this routing device can be an RP Default The routing device is eligible to be the RP for all IPv4 or IPv6 groups 224 0 0 0 4 or FF70 12 to FFF0 12 Options destination ...

Page 2170: ...g Multicast VLAN Registration CLI Procedure on page 2068 hello interval Syntax hello interval seconds Hierarchy Level edit logical systems logical system name protocols pim interface interface name editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim interface interface name edit protocols pim interface interface name edit routing instances routing instance nam...

Page 2171: ...s switches Description Specify the time period for which a neighbor is to consider the sending routing device this routing device to be operative up Options seconds Hold time Range 0 through 255 Default 0 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Local PIM RPs 209...

Page 2172: ...e interval seconds robust count number Hierarchy Level edit protocols Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable and configure IGMP snooping on J EX Series switches The remaining statements are explained separately Default IGMP snooping is enabled by default Required Privilege Level routing To view this statement in the configu...

Page 2173: ...st is connected to the switch through the same interface and one of the hosts sends a leave message the switch removes all hosts on the interface from the multicast group The switch loses contact with the hosts in the multicast group that did not send a leave message until they send join requests in response to the next general multicast listener query from the router Default The immediate leave f...

Page 2174: ...device suppresses the sending of group and source queries but relies on the Junos OS supported host tracking mechanism to determine whether or not it removes a particular source group membership from the interface NOTE When issuing this command on IGMPv2 interfaces ensure that the IGMP interface has only one IGMP host connected If more than one IGMPv2 host is connected to a LAN through the same in...

Page 2175: ...n Related Documentation Configuring PIM Bootstrap Properties export Bootstrap on page 2091 import PIM Syntax import policy names Hierarchy Level edit logical systems logical system name protocols pim editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim edit protocols pim edit routing instances routing instance name protocols pim Release Information Statement in...

Page 2176: ...ng To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring the PIM SPT Threshold Policy install Syntax install Hierarchy Level edit protocols igmp snooping vlan vlan id vlan number data forwarding receiver Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Instal...

Page 2177: ... namerouting instancesrouting instance nameprotocols pim edit protocols pim edit routing instances routing instance name protocols pim Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable PIM on an interface and configure interface specific properties Options interface name Name of the interface Specify the full interface name including ...

Page 2178: ...ing on an interface and configure interface specific properties The remaining statements are explained separately Default None Options interface name Name of the interface Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show igmp snooping vlans on page 2187 Example Configuring IGMP Snoopin...

Page 2179: ...s OS Release 10 2 for J EX Series switches Description Enable IGMP on an interface and configure interface specific properties Options interface name Name of the interface Specify the full interface name including the physical and logical address components To configure all interfaces you can specify all For details about specifying interfaces see the Junos OS Network Interfaces Configuration Guid...

Page 2180: ...tement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable load balancing of PIM join messages across interfaces and routing devices Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring PIM Join Load Balancing clear pim join distribution in the Protoc...

Page 2181: ...slogical system namerouting instancesrouting instance nameprotocols pim rp edit protocols pim rp edit routing instances routing instance name protocols pim rp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches The remaining statements are explained separately Description Configure the routing device s RP properties Required Privilege Level routing To vie...

Page 2182: ...nycast pim Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the routing device s local address for anycast rendezvous point RP If this statement is omitted the router ID is used as this address Options address Anycast RP IPv4 or IPv6 address depending on family configuration Required Privilege Level routing To view this statement ...

Page 2183: ...tion Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring PIM Auto RP maximum rps Syntax maximum rps limit Hierarchy Level edit logical systems logical system name protocols pim rp embedded rp editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim ...

Page 2184: ...To add this statement to the configuration Related Documentation Configuring PIM Dense Mode Properties Configuring PIM Sparse Dense Mode Properties Junos OS Multicast Protocols Configuration Guide multicast router interface Syntax multicast router interface Hierarchy Level edit protocols igmp snooping vlan vlan id vlan name interface interface name Release Information Statement introduced before J...

Page 2185: ... Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Apply a PIM interface level policy to filter neighbor IP addresses Options policy name Name of the policy that filters neighbor IP addresses For details about configuring policy statements see the Junos OS Policy Framework Configuration Guide Required Privilege Level routing To view this statement in the config...

Page 2186: ...seconds minimum interval milliseconds minimum receive interval milliseconds multiplier number version 0 1 automatic family inet inet6 disable hello interval seconds mode dense sparse sparse dense neighbor policy policy names override interval milliseconds priority number propagation delay milliseconds reset tracking bit version version join load balance join prune timeout nonstop routing override ...

Page 2187: ... rps limit local family inet inet6 address address anycast pim rp set address address forward msdp sa disable local address address group ranges destination ip prefix prefix length hold time seconds priority number rp register policy policy names spt threshold infinity policy names static address address version version group ranges destination ip prefix prefix length traceoptions file filename fi...

Page 2188: ... name protocols pim rp bootstrap inet inet6 editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp bootstrap inet inet6 edit protocols pim rp bootstrap inet inet6 edit routing instances routing instance name protocols pim rp bootstrap inet inet6 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure...

Page 2189: ...or J EX Series switches Description Configure the routing device s likelihood to be elected as the designated router Options number Routing device s priority for becoming the designated router A higher value corresponds to a higher priority Range 1 through a 32 bit number Default 1 The routing device has the least likelihood of becoming the designated router Required Privilege Level routing To vie...

Page 2190: ...r becoming an RP A lower value corresponds to a higher priority Range 0 through 255 Default 1 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Local PIM RPs promiscuous mode Syntax promiscuous mode Hierarchy Level edit logical systems logical system name protocols igmp interface...

Page 2191: ...le ConfiguringMulticastVLANRegistrationonJ EXSeriesSwitchesonpage2058 Configuring Multicast VLAN Registration CLI Procedure on page 2068 query interval Syntax query interval seconds Hierarchy Level edit logical systems logical system name protocols igmp edit protocols igmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify how often t...

Page 2192: ...y interval on page 2119 query response interval on page 2120 query response interval Syntax query response interval seconds Hierarchy Level edit logical systems logical system name protocols igmp edit protocols igmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify how long the querier router waits to receive a response to a host que...

Page 2193: ...n page 2068 restart duration Syntax restart duration seconds Hierarchy Level edit logical systems logical system name protocols pim graceful restart editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim graceful restart edit protocols pim graceful restart edit routing instances routing instance name protocols pim graceful restart Release Information Statement in...

Page 2194: ...tation Configuring a PIM RPF Routing Table robust count Syntax robust count number Hierarchy Level edit protocols igmp snooping vlan vlan id vlan name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the number of intervals the switch waits before removing a multicast group from the multicast forwarding table The length of each in...

Page 2195: ...oss on a subnet This factor is used to calculate the group member interval other querier present interval and last member query count Options number Robustness variable Range 2 through 10 Default 2 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Modifying the IGMP Robustness Variable 2123 ...

Page 2196: ...ination ip prefix prefix length maximum rps limit local family inet inet6 disable address address anycast pim rp set address address forward msdp sa local address address group ranges destination ip prefix prefix length hold time seconds priority number rp register policy policy names static address address version version group ranges destination ip prefix prefix length Hierarchy Level edit logic...

Page 2197: ...lticast Protocols Configuration Guide rp register policy Syntax rp register policy policy names Hierarchy Level edit logical systems logical system name protocols pim rp editlogical systemslogical system namerouting instancesrouting instance nameprotocols pim rp edit protocols pim rp edit routing instances routing instance name protocols pim rp Release Information Statement introduced before Junos...

Page 2198: ...tement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring PIM Anycast with MSDP source Syntax source groups group prefix Hierarchy Level edit protocols igmp snooping vlan vlan number data forwarding Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a VLAN to be ...

Page 2199: ...ion Enabling IGMP Static Group Membership source vlans Syntax source vlans vlan list Hierarchy Level edit protocols igmp snooping vlan vlan id vlan number data forwarding receiver Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify a list of multicast VLANs MVLANs from which this multicast receiver VLAN receives multicast traffic Eithe...

Page 2200: ...the SPT transition value to infinity to prevent this transition for any source group address pair The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring the PIM SPT Threshold Policy ssm map Syntax ssm map ssm map name Hierarchy Level e...

Page 2201: ...he default static RP address is 224 0 0 0 4 To configure other addresses include one or more address statements You can configure a static RP in a logical system only if the logical system is not directly connected to a source For each static RP address you can optionally specify the PIM version and the groups for which this address can be the RP The default PIM version is version 1 The remaining ...

Page 2202: ...itches CLI Procedure on page 2063 static Syntax static group multicast group address exclude group count number group increment increment source ip address source count number source increment increment Hierarchy Level edit logical systems logical system name protocols igmp interface interface name edit protocols igmp interface interface name Release Information Statement introduced before Junos O...

Page 2203: ... single operation when you have defined a broad group of tracing operations such as all file filename Name of the file to receive the output of the tracing operation Enclose the name within quotation marks All files are placed in the directory var log We recommend that you place tracing output in the pim log file files number Optional Maximum number of trace files When a trace file named trace fil...

Page 2204: ...d policy Policy operations and actions route Routing table changes state State transitions task Interface transactions and processing timer Timer usage flag modifier Optional Modifier for the tracing flag You can specify one or more of these modifiers detail Detailed trace information receive Packets being received send Packets being transmitted no stamp Optional Do not place timestamp information...

Page 2205: ... the oldest trace file is overwritten If you specify a maximum file size you must also include the files statement to specify the maximum number of trace files Syntax xk to specify KB xm to specify MB or xg to specify GB Range 0 KB through the maximum file size supported on your system Default 1 MB world readable Optional Allow any user to read the log file Required Privilege Level routing and tra...

Page 2206: ...iles is reached xk to specify KB xm to specify MB or xg to specify gigabytes at which point the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option Range 2 through 1000 Default 3 files flag flag Tracing operation to perform To specify more than one tracing operation include multiple flag statements You can include...

Page 2207: ...race file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the files option Syntax xk to specify KB xm to specify MB or xg to specify gigabytes Range 10 KB through 1 gigabytes Default 128 KB world readable Optional Enable unrestricted file access Required Privilege Level routing To view this statement in the configuration routing control To add...

Page 2208: ...defined a broad group of tracing operations such as all file filename Name of the file to receive the output of the tracing operation Enclose the name within quotation marks All files are placed in the directory var log We recommend that you place tracing output in the file igmp log files number Optional Maximum number of trace files When a trace file named trace file reaches its maximum size it i...

Page 2209: ...ot place timestamp information at the beginning of each line in the trace file Default If you omit this option timestamp information is placed at the beginning of each line of the tracing output no world readable Optional Do not allow users to read the log file replace Optional Replace an existing trace file if there is one Default If you do not include this option tracing output is appended to an...

Page 2210: ... Documentation Tracing IGMP Protocol Traffic version Syntax version version Hierarchy Level edit logical systems logical system name protocols igmp interface interface name edit protocols igmp interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the version of IGMP Options version IGMP version number Range 1 2 o...

Page 2211: ...ce name edit protocols pim rp static address address edit routing instances routing instance name protocols pim interface interface name edit routing instances routing instance name protocols pim rp static address address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the version of PIM Options version PIM version number Range 1 o...

Page 2212: ...itches Description Configure IGMP snooping parameters for a VLAN The remaining statements are explained separately TIP To display a list of all configured VLANs on the system including VLANs that are configured but not committed type after vlan or vlans in your configuration mode command line Note that only one VLAN is displayed for a VLAN range For IGMP snooping secondary private VLANs are not li...

Page 2213: ...ation routing control To add this statement to the configuration Related Documentation Configuring IGMP Snooping CLI Procedure on page 2063 IGMP Snooping on J EX Series Switches Overview on page 2047 2141 Chapter 79 Configuration Statements for IGMP Snooping and Multicast ...

Page 2214: ...2142 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2215: ...CHAPTER 80 Operational Mode Commands for IGMP Snooping and Multicast 2143 ...

Page 2216: ... this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show igmp group on page 2171 show igmp interface on page 2175 List of Sample Output clear igmp membership on page 2144 clear igmp membership interface on page 2145 clear igmp membership group on page 2145 Output Fields See show igmp group for an explanation of output fields...

Page 2217: ... 0 6 null 0 local 224 0 0 5 null 0 local 224 2 127 254 null 0 local 239 255 255 255 null 0 local 224 0 0 2 null 0 local 224 0 0 13 null 0 user host clear igmp membership interface so 0 0 0 Clearing Group Membership Info for so 0 0 0 user host show igmp group Interface Group Last Reported Timeout local 224 0 0 6 null 0 local 224 0 0 5 null 0 local 224 2 127 254 null 0 local 239 255 255 255 null 0 l...

Page 2218: ... group 239 225 16 Clearing Group Membership Range 239 225 0 0 16 on so 0 0 0 Clearing Group Membership Range 239 225 0 0 16 on so 1 0 0 Clearing Group Membership Range 239 225 0 0 16 on so 2 0 0 2146 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2219: ...31 so 0 0 0 224 2 127 254 10 1 128 1 233 so 0 0 0 224 2 127 253 10 1 128 1 236 local 224 0 0 6 null 0 local 224 0 0 5 null 0 local 224 2 127 254 null 0 local 239 255 255 255 null 0 local 224 0 0 2 null 0 local 224 0 0 13 null 0 2147 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2220: ...Sample Output clear igmp statistics on page 2148 Output Fields See show igmp statistics for an explanation of output fields clear igmp statistics The following sample output displays IGMP statistics information before and after the clear igmp statistics command is entered clear igmp statistics user host show igmp statistics IGMP packet statistics for all interfaces IGMP Message type Received Sent ...

Page 2221: ...IM V1 0 0 0 Cisco Trace 0 0 0 V2 Membership Report 0 0 0 Group Leave 0 0 0 Mtrace Response 0 0 0 Mtrace Request 0 0 0 Domain Wide Report 0 0 0 V3 Membership Report 0 0 0 Other Unknown types 0 IGMP v3 unsupported type 0 IGMP v3 source required for SSM 0 IGMP v3 mode not applicable for SSM 0 IGMP Global Statistics Bad Length 0 Bad Checksum 0 Bad Receive If 0 Rx non local 0 2149 Chapter 80 Operationa...

Page 2222: ...vlan vlan id Numeric tag identifier of the VLAN vlan vlan name Name of the VLAN Required Privilege Level view Related Documentation show igmp snooping membership on page 2181 List of Sample Output clear igmp snooping membership on page 2150 clear igmp snooping membership user switch clear igmp snooping membership vlan employee vlan clear igmp snooping membership 2150 Dell PowerConnect J Series Eth...

Page 2223: ...on Clear IGMP snooping statistics Required Privilege Level view Related Documentation show igmp snooping statistics on page 2185 List of Sample Output clear igmp snooping statistics on page 2151 clear igmp snooping statistics user switch clear igmp snooping statistics clear igmp snooping statistics 2151 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2224: ...e interface interface name Optional Examines the corresponding outbound interface in the relevant entries and acts as follows If the interface is congested and it was admitted previously it is removed If the interface was rejected previously the clear multicast bandwidth admission command enables the interface to be admitted as long as enough bandwidth exists on the interface If you do not specify...

Page 2225: ...u are provided feedback on the status of your request clear multicast bandwidth admission user host clear multicast bandwidth admission clear multicast bandwidth admission 2153 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2226: ...s inet6 Optional Clear multicast scope statistics for IPv6 family addresses interface interface name Optional Clear multicast scope statistics on a specific interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show multicast scope on page 2207 List of Sample Out...

Page 2227: ...system name Optional Perform this operation on all logical systems or on a particular logical system regular expression Optional Clear only multicast sessions that contain the specified regular expression Required Privilege Level clear Related Documentation show multicast sessions on page 2209 List of Sample Output clear multicast sessions on page 2155 Output Fields When you enter this command you...

Page 2228: ...ptional Clear multicast statistics for IPv6 family addresses instance instance name Optional Clear multicast statistics for the specified instance interface interface name Optional Clear multicast statistics on a specific interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related D...

Page 2229: ...ates for IPv4 or IPv6 family addresses respectively instance instance name Optional Clear the join and prune states for a specific PIM enabled routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system AdditionalInformation The clear pim join command cannot be used to clear the PIM join and prune state on a backu...

Page 2230: ...Clear register message counters for a specific PIM enabled routing instance interface interface name Optional Clear PIM register message counters for a specific interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system AdditionalInformation The clear pim register command cannot be used to clear the PIM register state o...

Page 2231: ...specific interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system AdditionalInformation The clear pim statistics command cannot be used to clear the PIM statistics on a backup Routing Engine when nonstop active routing is enabled Required Privilege Level clear Related Documentation show pim statistics on page 2235 Lis...

Page 2232: ...ad Receive If 0 Rx Intf disabled 2007 Rx V1 Require V2 0 Rx Register not RP 0 RP Filtered Source 0 Unknown Reg Stop 0 Rx Join Prune no state 1040 Rx Graft Graft Ack no state 0 user host clear pim statistics user host show pim statistics PIM statistics on all interfaces PIM Message type Received Sent Rx errors Hello 0 0 0 Register 0 0 0 Register Stop 0 0 0 Join Prune 0 0 0 Bootstrap 0 0 0 Assert 0 ...

Page 2233: ...ce on page 2162 Output Fields Table 259 on page 2161 describes the output fields for the mtrace command Output fields are listed in the approximate order in which they appear Table 259 mtrace Output Fields Field Description Field Name IP address of the receiver Mtrace from IP address of the source to IP address of the multicast group if any via group Indicates the full reverse path query has begun...

Page 2234: ...h mtrace source 0 routerA lab mycompany net 192 1 1 2 1 routerB lab mycompany net 192 1 2 2 PIM thresh 1 2 routerC lab mycompany net 192 1 3 2 PIM thresh 1 3 hostA lab mycompany net 192 1 4 2 Round trip time 2 ms total ttl of 2 required 2162 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2235: ...fy a number between 0 and 255 group group Optional Group address for which to trace the path The default group address is 0 0 0 0 interval interval Optional Number of seconds to wait before gathering statistics again The default value is 10 seconds loop Optional Loop indefinitely displaying rate and loss statistics max hops max hops Optional Maximum hops to trace toward source The range of values ...

Page 2236: ...cription Field Name IP address of the receiver Mtrace from IP address of the source to IP address of the multicast group if any via group Indicates the full reverse path query has begun Querying full reverse path Number of hops from the source to the named router or switch number of hops Name of the router or switch for this hop router name Address of the router or switch for this hop address Prot...

Page 2237: ...any net 192 1 2 2 PIM thresh 1 2 routerC lab mycompany net 192 1 3 2 PIM thresh 1 3 hostA lab mycompany net 192 1 4 2 Round trip time 2 ms total ttl of 2 required Waiting to accumulate statistics Results after 10 seconds Source Response Dest Overall Packet Statistics For Traffic From 192 1 4 2 192 1 1 2 Packet 192 1 4 2 To 225 1 1 1 v __ rtt 2 ms Rate Lost Sent Pct Rate 192 1 2 1 192 1 3 2 routerC...

Page 2238: ...ds for the mtrace monitor command Output fields are listed in the approximate order in which they appear Table 261 mtrace monitor Output Fields Field Description Field Name Date and time of the query Mtrace query at Address of the host issuing the query by Response destination resp to Query ID number qid IP address of the query source and default group destination packet from to IP address of the ...

Page 2239: ...07ba packet from 192 1 3 2 to 224 0 0 2 from 192 1 3 2 to 192 1 3 38 via group 224 1 1 1 mxhop 60 Mtrace query at Oct 22 13 36 20 by 192 1 3 2 resp to same qid 2fea1d packet from 192 1 3 2 to 224 0 0 2 from 192 1 3 2 to 192 1 3 38 via group 224 1 1 1 mxhop 60 Mtrace query at Oct 22 13 36 30 by 192 1 3 2 resp to same qid 7c88ad packet from 192 1 3 2 to 224 0 0 2 from 192 1 3 2 to 192 1 3 38 via gro...

Page 2240: ...nsive router or switch You can specify a number between 0 and 255 group group Optional Group address for which to trace the path The default group address is 0 0 0 0 interface interface name Optional Source address for sending the trace query interval interval Optional Number of seconds to wait before gathering statistics again The default value is 10 loop Optional Loop indefinitely displaying rat...

Page 2241: ...ut Fields Field Description Field Name IP address of the receiver Mtrace from IP address of the source to IP address of the multicast group if any via group Indicates the full reverse path query has begun Querying full reverse path Number of hops from the source to the named router or switch number of hops Name of the router or switch for this hop router name Address of the router or switch for th...

Page 2242: ... 3 routerC lab mycompany net 192 1 3 2 PIM thresh 1 Round trip time 2 ms total ttl of 3 required 2170 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2243: ...m Required Privilege Level view Related Documentation clear igmp membership on page 2144 List of Sample Output show igmp group Include Mode on page 2172 show igmp group Exclude Mode on page 2173 show igmp group brief on page 2173 show igmp group detail on page 2173 Output Fields Table 263 on page 2171 describes the output fields for the show igmp group command Output fields are listed in the appro...

Page 2244: ...levels Type of group membership Dynamic Host reported the membership Static Membership is configured Type show igmp group Include Mode user host show igmp group Interface t1 0 1 0 0 Group 232 1 1 1 show igmp group Include Mode Group mode Include Source 10 0 0 2 Last reported by 10 9 5 2 Timeout 24 Type Dynamic Group 232 1 1 1 Group mode Include Source 10 0 0 3 Last reported by 10 9 5 2 Timeout 24 ...

Page 2245: ...ut 12 Last reported by 10 9 5 2 Group timeout 0 Type Dynamic Group 232 1 1 1 Group mode Include Source 10 0 0 3 Source timeout 12 Last reported by 10 9 5 2 Group timeout 0 Type Dynamic Group 232 1 1 1 Group mode Include Source 10 0 0 4 Source timeout 12 Last reported by 10 9 5 2 Group timeout 0 Type Dynamic Group 232 1 1 2 Group mode Include Source 10 0 0 4 Source timeout 12 Last reported by 10 9 ...

Page 2246: ...Last reported by Local Group timeout 0 Type Dynamic 2174 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2247: ...logical system Required Privilege Level view Related Documentation clear igmp membership on page 2144 List of Sample Output show igmp interface on page 2177 show igmp interface brief on page 2177 show igmp interface detail on page 2177 Output Fields Table 264 on page 2175 describes the output fields for the showigmpinterface command Output fields are listed in the approximate order in which they a...

Page 2248: ...tes that the router can run IGMP on the interface and send or receive control traffic such as IGMP reports queries and leaves The passive statement enables you to selectively activate up to two out of a possible three available query or control traffic options When enabled the following options appear after the on state declaration send general query The interface sends general queries send group ...

Page 2249: ...ut None Version 2 Groups 2 Interface so 1 0 1 0 Querier 10 111 20 1 State Up Timeout None Version 2 Groups 4 Immediate Leave On Promiscuous Mode Off Configured Parameters IGMP Query Interval 125 0 IGMP Query Response Interval 10 0 IGMP Last Member Query Interval 1 0 IGMP Robustness Count 2 Derived Parameters IGMP Membership Timeout 260 0 IGMP Other Querier Present Timeout 255 0 show igmp interface...

Page 2250: ...terface only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view Related Documentation clear igmp statistics on page 2148 List of Sample Output show igmp statistics on page 2179 show igmp statistics interface on page 2180 Output Fields Table 265 on page 2178 describes the output fields for the...

Page 2251: ...de not applicable for SSM Number of IGMP version 3 messages received that did not contain a mode applicable for source specific multicast SSM IGMP Message type Number of messages received Received Number of messages sent Sent Number of received packets that contained errors Rx errors Summary of IGMP statistics for all interfaces Bad Length Number of messages received with length errors so severe t...

Page 2252: ... Global Statistics Bad Length 0 Bad Checksum 0 Bad Receive If 0 Rx non local 1227 Timed out 0 Rejected Report 0 Total Interfaces 2 show igmp statistics interface user host show igmp statistics interface fe 1 0 1 0 IGMP interface packet statistics for fe 1 0 1 0 IGMP Message type Received Sent Rx errors Membership Query 0 230 0 V1 Membership Report 0 0 0 2180 Dell PowerConnect J Series Ethernet Swi...

Page 2253: ...page 2183 show igmp snooping statistics on page 2185 show igmp snooping vlans on page 2187 Monitoring IGMP Snooping on page 2069 Configuring IGMP Snooping CLI Procedure on page 2063 Configuring IGMP Snooping J Web Procedure on page 2064 List of Sample Output show igmp snooping membership on page 2182 show igmp snooping membership detail on page 2182 Output Fields Table 266 on page 2181 lists the o...

Page 2254: ... the multicast group Receivercount Number of interfaces that have membership in a multicast group Flags IGMP version of the host sending a join message Include source Source addresses from which multicast streams are allowed based on IGMPv3 reports Shown only for IGMPv3 joins Group show igmp snooping membership user switch show igmp snooping membership VLAN vlan24 224 1 1 1 show igmp snooping memb...

Page 2255: ...the routing next hop and the Layer 2 next hop vlan vlan id vlan name Optional Display route information for the specified VLAN Required Privilege Level view Related Documentation show igmp snooping statistics on page 2185 show igmp snooping vlans on page 2187 List of Sample Output show igmp snooping route on page 2184 show igmp snooping route inet detail IPv6 Multicast Route on page 2184 show igmp...

Page 2256: ...p Next hop v12 224 1 1 3 534 Interfaces ge 0 0 13 0 ge 0 0 0 0 show igmp snooping route inet detail IPv6 Multicast Route user switch show igmp snooping route inet detail Routing table 0 Group ff0e 1 ff05 1a3d 2001 ee0 81ff ee05 1a2e Routing next hop 587 vlan 42 Interface vlan 42 VLAN v42 Layer 2 next hop 506 show igmp snooping route vlan v1 user switch show igmp snooping route vlan v1 Table 0 VLAN...

Page 2257: ...ds Field Description Field Name IGMP packet has illegal or bad length Bad length IGMP or IP checksum is incorrect Bad checksum Packet was received through an invalid interface Invalid interface Unknown IGMP type Receive unknown Number of timeouts for all multicast groups Timed out Type of IGMP message Query Report Leave or Other IGMP Type Number of IGMP packets received Received Number of IGMP pac...

Page 2258: ...Leaves 0 0 0 Other 0 0 0 2186 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2259: ...vlans vlan v10 on page 2188 show igmp snooping vlans vlan v10 detail on page 2188 Output Fields Table 269 on page 2187 lists the output fields for the showigmp snoopingvlans command Output fields are listed in the approximate order in which they appear Table 269 show igmp snooping vlans Output Fields Level of Output Field Description Field Name All levels Name of the VLAN VLAN All levels Number of...

Page 2260: ...ooping vlans VLAN Interfaces Groups MRouters Receivers default 0 0 0 0 show igmp snooping vlans v1 11 50 0 0 v10 1 0 0 0 v11 1 0 0 0 v180 3 0 1 0 v181 3 0 0 0 v182 3 0 0 0 show igmp snooping vlans vlan v10 user switch show igmp snooping vlans vlan v10 user switch show igmp snooping vlans vlan v10 VLAN Interfaces Groups MRouters Receivers v10 1 0 0 0 show igmp snooping vlans vlan v10 detail user sw...

Page 2261: ...2190 show multicast flow map detail on page 2190 Output Fields Table 270 on page 2189 describes the output fields for the show multicast flow map command Output fields are listed in the approximate order in which they appear Table 270 show multicast flow map Output Fields Levels of Output Field Description Field Name All levels Name of the flow map Name All levels Name of the policy associated wit...

Page 2262: ...000000 no show multicast flow map detail user host show multicast flow map detail Instance master Flow map map1 show multicast flow map detail Policy policy1 Cache Timeout 600 seconds Bandwidth 2000000 Adaptive Bandwidth yes Redundant Sources 11 11 11 11 Redundant Sources 11 11 11 12 Redundant Sources 11 11 11 13 2190 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2263: ...ld Description Field Name Name of the multicast interface Interface Maximum bandwidth setting in bits per second for this interface Maximum bandwidth bps Amount of bandwidth in bits per second remaining on the interface Remainingbandwidth bps Amount of bandwidth in bits per second used by any flows that are mapped to the interface NOTE Adding the mapped bandwidth deduction value to the local bandw...

Page 2264: ...terface remains active after the last mapping ends NOTE This field does not appear in the output when the no QoS adjustment feature is disabled Leave timer State on of the no QoS adjustment feature when this feature is enabled NOTE This field does not appear in the output when the no QoS adjustment feature is disabled No QoS adjustment show multicast interface user host show multicast interface In...

Page 2265: ...272 show multicast mrinfo Output Fields Field Description Field Name Query address hostname DNS name or IP address of the source address and multicast protocol version or the software version of another vendor source address Queried router interface address and directly attached neighbor interface address respectively ip address 1 ip address 2 Name or IP address of neighbor name or ip address Neig...

Page 2266: ...rsion 12 0 192 168 195 166 0 0 0 0 local 1 0 pim querier leaf show multicast mrinfo 10 38 20 1 0 0 0 0 local 1 0 pim querier leaf 10 47 1 1 10 47 1 2 10 47 1 2 1 5 pim 0 0 0 0 0 0 0 0 local 1 0 pim down 2194 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2267: ...es respectively logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show multicast next hops on page 2196 show multicast next hops brief on page 2196 show multicast next hops detail on page 2196 Output Fields Table 273 on page 2195 describes the output fields for the show...

Page 2268: ...t for the show multicast next hops brief command is identical to that for the show multicast next hops command For sample output see show multicast next hops on page 2196 show multicast next hops detail The output for the show multicast next hops detail command is identical to that for the show multicast next hops command For sample output see show multicast next hops on page 2196 2196 Dell PowerC...

Page 2269: ...Level view List of Sample Output show multicast pim to igmp proxy on page 2197 Output Fields Table274onpage2197describestheoutputfieldsfortheshowmulticastpim to igmp proxy command Output fields are listed in the order in which they appear Table 274 show multicast pim to igmp proxy Output Fields Field Description Field Name State of PIM to IGMP message translation also known as PIM to IGMP proxy on...

Page 2270: ... List of Sample Output show multicast pim to mld proxy on page 2198 Output Fields Table 275 on page 2198 describes the output fields for the showmulticastpim to mld proxy command Output fields are listed in the order in which they appear Table 275 show multicast pim to mld proxy Output Fields Field Description Field Name State of PIM to MLD message translation also known as PIM to MLD proxy on the...

Page 2271: ...uting instances brief detail extensive Optional Display the specified level of output active all inactive Optional Display all active entries all entries or all inactive entries respectively in the multicast forwarding table group group Optional Display the cache entries for a particular group inet inet6 Optional Display multicast forwarding table entries for IPv4 or IPv6 family addresses respecti...

Page 2272: ...extensive Rate at which packets are being forwarded for this source and group entry in Kbps and pps and number of packets that have been forwarded to this prefix If one or more of the kilobits per second packet forwarding statistic queries fails or times out the statistics field displays Forwarding statistics are not available Statistics detail extensive Next hop identifier of the prefix The ident...

Page 2273: ...ast route detail user host show multicast route detail Family INET Group 228 0 0 0 Source 10 255 14 144 32 Upstream interface local Downstream interface list so 1 0 0 0 Session description Unknown Statistics 8 kBps 100 pps 45272 packets Next hop ID 262142 Upstream protocol PIM Group 239 1 1 1 Source 10 255 14 144 32 Upstream interface local Downstream interface list so 1 0 0 0 Session description ...

Page 2274: ...t so 1 0 0 0 Session description Administratively Scoped Statistics 0 kBps 0 pps 13404 packets Next hop ID 262142 Upstream protocol PIM Route state Active Forwarding state Forwarding Cache lifetime timeout 348 seconds Wrong incoming interface notifications 0 Group 239 1 1 1 Source 10 255 70 15 32 Upstream interface so 1 0 0 0 Downstream interface list mt 1 1 0 49152 Session description Administrat...

Page 2275: ...ulation information for IPv4 or IPv6 family addresses respectively instance instance name Optional Display information about multicast RPF calculations for a specific multicast instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system prefix Optional Display the RPF calculation information for the specified prefix summa...

Page 2276: ...terface Interface Upstream RPF neighbor Neighbor show multicast rpf user host show multicast rpf Multicast RPF table inet 0 12 entries show multicast rpf 0 0 0 0 0 Protocol Static 10 255 14 132 32 Protocol Direct Interface lo0 0 10 255 245 91 32 Protocol IS IS Interface so 1 1 1 0 Neighbor 192 168 195 21 127 0 0 1 32 Inactive172 16 0 0 12 Protocol Static Interface fxp0 0 Neighbor 192 168 14 254 19...

Page 2277: ... 2e8c 192 168 195 20 126 Protocol Direct Interface so 1 1 1 0 192 168 195 22 128 Protocol Local 192 168 195 36 126 Protocol IS IS Interface so 1 1 1 0 Neighbor fe80 2a0 a5ff fe28 2e8c 192 168 195 76 126 Protocol Direct Interface fe 2 2 0 0 192 168 195 77 128 Protocol Local fe80 64 Protocol Direct Interface so 1 1 1 0 fe80 290 69ff fe0c 993a 128 Protocol Local fe80 2a0 a5ff fe12 84f 128 Protocol Di...

Page 2278: ...6 0 13 entries ff02 2 128 Protocol PIM ff02 d 128 Protocol PIM show multicast rpf summary user host show multicast rpf summary Multicast RPF table inet 0 16 entries Multicast RPF table inet6 0 12 entries 2206 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2279: ...ly scoped information for a specific multicast instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show multicast scope on page 2208 show multicast scope inet on page 2208 show multicast scope inet6 on page 2208 Output Fields Table 278 on page 2207 describes the ...

Page 2280: ... 0 1 0 show multicast scope inet user host show multicast scope inet Resolve Scope name Group Prefix Interface Rejects 232 net 232 232 0 0 16 fe 0 0 0 1 0 local 239 255 0 0 16 fe 0 0 0 1 0 show multicast scope inet6 user host show multicast scope inet6 Resolve Scope name Group Prefix Interface Rejects local ff05 16 fe 0 0 0 1 0 larry ff05 1234 128 fe 0 0 0 1 0 2208 Dell PowerConnect J Series Ether...

Page 2281: ...tem all logical system name Optional Perform this operation on all logical systems or on a particular logical system regular expression Optional Display information about announced sessions that match a UNIX style regular expression Required Privilege Level view List of Sample Output show multicast sessions on page 2210 show multicast sessions regular expression detail on page 2210 Output Fields T...

Page 2282: ... University Please contact the UO if you have problems with this feed Email Your Name Here multicast lists private edu Phone Your Name Here 888 555 1212 Bandwidth AS 1000 Start time permanent Stop time none Attribute type broadcast Attribute tool IP TV Content Manager 3 4 14 Attribute live capture 1 Attribute x iptv capture mp1s Media video 54302 RTP AVP 32 31 96 97 Connection Data 224 2 231 45 tt...

Page 2283: ...sses respectively instance instance name Optional Display information about the most active DVMRP or PIM groups for a specific multicast instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show multicast usage on page 2212 show multicast usage brief on page 2212 ...

Page 2284: ...32 2 66254 5561304 10 255 70 15 32 1 43 3374 show multicast usage brief The output for the show multicast usage brief command is identical to that for the show multicast usage command For sample output see show multicast usage on page 2212 show multicast usage instance user host show multicast usage instance VPN A Group Sources Packets Bytes 224 2 127 254 1 5538 509496 224 0 1 39 1 13 624 224 0 1 ...

Page 2285: ...7512 Group 228 0 0 0 Packets 53159 Bytes 4465356 Group 239 1 1 1 Packets 13407 Bytes 1122156 10 255 70 15 32 1 43 3374 Group 239 1 1 1 Packets 43 Bytes 3374 2213 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2286: ...ystem Required Privilege Level view List of Sample Output show pim bootstrap on page 2215 show pim bootstrap instance on page 2215 Output Fields Table 281 on page 2214 describes the output fields for the show pim bootstrap command Output fields are listed in the approximate order in which they appear Table 281 show pim bootstrap Output Fields Field Description Field Name Name of the routing instan...

Page 2287: ...10 255 71 46 0 InEligible 0 feco 1 1 1 1 0 aff 785c 34 feco 1 1 1 1 0 aff 7c12 0 InEligible 0 show pim bootstrap instance user host show pim bootstrap instance VPN A Instance PIM VPN A BSR Pri Local address Pri State Timeout None 0 192 168 196 105 0 InEligible 0 2215 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2288: ...nformation about interfaces for a specific PIM enabled routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show pim interfaces on page 2217 show pim interfaces inet on page 2218 show pim interfaces inet6 on page 2218 Output Fields Table 282 on page 2216 d...

Page 2289: ... A group specified as sparse is mapped to an RP and data packets are forwarded using PIM Sparse Mode PIM SM rules Mode Version number of the address family on the interface 4 IPv4 or 6 IPv6 IP PIM version running on the interface 1 or 2 V State of PIM on the interface DR Designated router NotDR Not the designated router P2P Point to point State Number of neighbors that have been seen on the interf...

Page 2290: ...R 1 1 3 20 20 20 2 lo0 0 Up Sparse 4 2 DR 0 0 0 10 255 72 54 pe 1 2 0 32769 Up Sparse 4 2 P2P 0 0 0 t1 0 1 0 0 Up Sparse 4 2 P2P 1 0 0 show pim interfaces inet6 user host show pim interfaces inet6 Instance PIM master Name Stat Mode IP V State NbrCnt JoinCnt sg JointCnt g DR address lo0 0 Up Sparse 6 2 DR 0 0 0 fe80 2a0 a5ff fe5e 209 2218 Dell PowerConnect J Series Ethernet Switch Complete Software...

Page 2291: ...or IPv6 family addresses respectively instance instance name Optional Display information about groups for the specified PIM enabled routing instance only logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system range Optional Address range of the group specified as prefix prefix length Required Privilege Level view Related Doc...

Page 2292: ...urce specific state S G or toward the rendezvous point RP address for the non source specific state G Upstream interface Information about the upstream neighbor Direct Local Unknown or a specific IP address Upstream neighbor Information about the upstream interface Join to RP Sending a join to the rendezvous point Join to Source Sending a join to the source LocalRP Sending neither joins nor prunes...

Page 2293: ...ted If there is a directly connected host Timeout is Infinity Timeout show pim join user host show pim join Instance PIM master Family INET R Rendezvous Point Tree S Sparse W Wildcard show pim join Group 239 1 1 1 Source RP 10 255 14 144 Flags sparse rptree wildcard Upstream interface Local Group 239 1 1 1 Source 10 255 14 144 Flags sparse spt Upstream interface Local Group 239 1 1 1 Source 10 255...

Page 2294: ...n extensive user host show pim join extensive Instance PIM master Family INET R Rendezvous Point Tree S Sparse W Wildcard Group 239 1 1 1 Source RP 10 255 14 144 Flags sparse rptree wildcard Upstream interface Local Upstream neighbor Local Upstream state Local RP Downstream neighbors Interface so 1 0 0 0 10 111 10 2 State Join Flags SRW Timeout 174 Interface mt 1 1 0 32768 10 10 47 100 State Join ...

Page 2295: ... A extensive Instance PIM VPN A Family INET R Rendezvous Point Tree S Sparse W Wildcard Group 235 1 1 2 Source RP 10 10 47 100 Flags sparse rptree wildcard Upstream interface Local Upstream neighbor Local Upstream state Local RP Downstream neighbors Interface mt 1 1 0 32768 10 10 47 101 State Join Flags SRW Timeout 156 Group 235 1 1 2 Source 192 168 195 74 Flags sparse spt Upstream interface at 0 ...

Page 2296: ...ghbors for the specified PIM enabled routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show pim neighbors on page 2226 show pim neighbors brief on page 2226 show pim neighbors instance on page 2226 show pim neighbors detail on page 2226 show pim neighbo...

Page 2297: ...l Forwarding Detection BFD protocol on the interface Enabled Operational state is up or Disabled BFD detail Time for which the neighbor is available in seconds The range of values is 0 through 65 535 Hello Option Holdtime detail Default holdtime and the time remaining if the holdtime option is not in the received hello message Hello Default Holdtime detail Designated router election priority The r...

Page 2298: ...s 192 168 195 37 IPv4 PIM v2 Mode Sparse Hello Option Holdtime 65535 seconds Hello Option DR Priority 1 Hello Option LAN Prune Delay delay 500 ms override 2000 ms Join Suppression supported Rx Join Group Source Timeout 225 1 1 1 192 168 195 78 0 225 1 1 1 0 Interface lo0 0 Address 10 255 245 91 IPv4 PIM v2 Mode Sparse Hello Option Holdtime 65535 seconds Hello Option DR Priority 1 Hello Option LAN ...

Page 2299: ...000 ms Interface fe 1 0 1 0 Address 192 168 12 1 IPv4 PIM v2 BFD Disabled Hello Default Holdtime 105 seconds 80 remaining Hello Option DR Priority 1 Hello Option Generation ID 1971554705 Hello Option LAN Prune Delay delay 500 ms override 2000 ms 2227 Chapter 80 Operational Mode Commands for IGMP Snooping and Multicast ...

Page 2300: ... is the RP for that group inet inet6 Optional Display information for IPv4 or IPv6 family addresses respectively instance instance name Optional Display information about RPs for a specific PIM enabled routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output s...

Page 2301: ...sing this RP Groups brief none Addresses of groups that this RP can span Group prefixes detail extensive Address and method by which the RP was learned Learned via detail extensive How long the RP has been active in the format hh mm ss Time Active detail extensive Index value of the order in which the Junos OS finds and initializes the interface Device Index detail extensive Logical unit number of...

Page 2302: ...t RP is configured the addresses of the RPs in the set Anycast PIM rpset extensive If anycast RP is configured the local address used by the RP Anycast PIM local address used extensive If anycast RP is configured the current register state for each group Group Multicast group address Source Multicast source address for which the PIM register is sent or received depending on whether this routing de...

Page 2303: ...imeout 225 1 1 1 192 168 195 78 10 255 14 132 10 255 245 91 Receive 0 showpimrpsextensive PIM Anycast RP in Use user host show pim rps extensive Instance PIM master Family INET RP 10 10 10 2 Learned via static configuration Time Active 00 54 52 Holdtime 0 Device Index 130 Subunit 32769 Interface pimd 32769 Group Ranges 224 0 0 0 4 Active groups using RP 224 10 10 10 total 1 groups active Anycast P...

Page 2304: ... Anycast PIM local address used cd 1 Anycast PIM Register State Group Source Origin 224 1 1 1 10 10 95 2 DIRECT 224 1 1 2 10 10 95 2 DIRECT 224 20 20 1 10 10 71 1 DR 2232 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2305: ...ly addresses respectively instance instance name Optional Display information about the RPF state for a specific PIM enabled routing instance logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system source prefix Optional Display the state for source RPF states in the given range Required Privilege Level view List of Sample Out...

Page 2306: ...ream interface so 1 0 0 0 Upstream neighbor 10 111 10 2 Instance PIM master Family INET6 show pim source brief The output for the show pim source brief command is identical to that for the show pim source command For sample output see show pim source on page 2234 showpimsourcedetail user host show pim source detail Instance PIM master Family INET Source 10 255 14 144 Prefix 10 255 14 144 32 Upstre...

Page 2307: ...isplay statistics about the specified interface logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view Related Documentation clear pim statistics on page 2159 List of Sample Output show pim statistics on page 2240 Output Fields Table 287 on page 2235 describes the output fields for the show pim s...

Page 2308: ...e RP PIM version 1 query packets V1 Query PIM version 1 register packets V1 Register PIM version 1 register stop packets V1 Register Stop PIM version 1 join and prune packets V1 Join Prune PIM version 1 RP reachability packets V1 RP Reachability PIM version 1 assert packets V1 Assert PIM version 1 graft packets V1 Graft PIM version 1 graft acknowledgement packets V1 Graft Ack Auto RP announce pack...

Page 2309: ...eceived on an interface that does not have PIM configured Bad Receive If Number of PIM control packets received that contain data for TCP Bad register packets Rx Bad Data Number of PIM control packets received on an interface that has PIM disabled Rx Intf disabled Number of PIM version 1 control packets received on an interface configured for PIM version 2 Rx V1 Require V2 Number of PIM version 2 ...

Page 2310: ...of BSR messages received in which the PIM message type is Candidate RP Advertisement not Bootstrap Rx CRP not BSR Number of BSR messages received in which the PIM message type is Bootstrap Rx BSR when BSR Number of BSR messages received on an interface that is not the RPF interface Rx BSR not RPF if Number of PIM hello packets received with options that Junos OS does not support Rx unknown hello o...

Page 2311: ... times the limit configure with the maximum rps statement is exceeded The maximum rps statement limits the number of embedded RPs created in a specific routing instance The range is from 1 through 500 The default is 100 Embedded RP limit exceed Number of packets in which the embedded RP for IPv6 is added The following receive events trigger extraction of an IPv6 embedded RP address on the router M...

Page 2312: ...32 0 V2 Register 0 362 0 V2 Register Stop 483 0 0 V2 Join Prune 18 518 0 V2 Bootstrap 0 0 0 V2 Assert 0 0 0 V2 Graft 0 0 0 V2 Graft Ack 0 0 0 V2 Candidate RP 0 0 0 V1 Query 0 0 0 V1 Register 0 0 0 V1 Register Stop 0 0 0 V1 Join Prune 0 0 0 V1 RP Reachability 0 0 0 V1 Assert 0 0 0 V1 Graft 0 0 0 V1 Graft Ack 0 0 0 AutoRP Announce 0 0 0 AutoRP Mapping 0 0 0 AutoRP Unknown type 0 Anycast Register 0 0...

Page 2313: ...e 0 Rx Register no decap if 0 Null Register Timeout 0 RP Filtered Source 0 Rx Unknown Reg Stop 0 Rx Join Prune no state 0 Rx Join Prune on upstream if 0 Rx Join Prune messages dropped 0 Rx sparse join for dense group 0 Rx Graft Graft Ack no state 0 Rx Graft on upstream if 0 Rx CRP not BSR 0 Rx BSR when BSR 0 Rx BSR not RPF if 0 Rx unknown hello opt 0 Rx data no state 0 Rx RP no state 0 2241 Chapte...

Page 2314: ... mismatch 0 RPF neighbor unknown 0 Rx Joins Prunes filtered 0 Embedded RP invalid addr 0 Embedded RP limit exceed 0 Embedded RP added 0 Embedded RP removed 0 Rx Register msgs filtering drop 0 Tx Register msgs filtering drop 0 2242 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2315: ...on page 2245 Examples Access Control Configuration on page 2267 Configuring Access Control on page 2329 Verifying 802 1X and MAC RADIUS Authentication on page 2355 Configuration Statements for Access Control on page 2359 Operational Commands for 802 1X on page 2465 2243 ...

Page 2316: ...2244 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2317: ...y Features for J EX Series Switches Overview The Junos operating system Junos OS is a network operating system that has been hardened through the separation of control forwarding and services planes with each function running in protected memory The control plane CPU is protected by rate limiting routing policy and firewall filters to ensure switch uptime even under severe attack In addition the s...

Page 2318: ...on DAI Prevents ARP spoofing attacks ARP requests and replies are compared against entries in the DHCP snooping database and filtering decisions are made based on the results of those comparisons MAC limiting Protects against flooding of the Ethernet switching table MAC move limiting Detects MAC movement and MAC spoofing on access ports Trusted DHCP server With a DHCP server on a trusted port prot...

Page 2319: ...itch from unauthorized locations Firewall filters can detect such attempts and create audit log entries when they occur The filters can also restrict access by limiting traffic to source and destination MAC addresses specific protocols or in combination with policers to specified data rates to prevent denial of service DoS attacks Policers Provide rate limiting capability to control the amount of ...

Page 2320: ...2 1X MAC RADIUS and captive portal on the same interface and in any combination except that you cannot configure MAC RADIUS and captive portal on an interface without also configuring 802 1X If you configure multiple authentication methods on a single interface the switch falls back to another method if the first method is unsuccessful For a description of the process flow when multiple authentica...

Page 2321: ...Figure 45 Example Authentication Topology 2249 Chapter 81 802 1X and MAC RADIUS Authentication Overview ...

Page 2322: ...t requests to join the network The device can be responsive or nonresponsive A responsive device is 802 1X enabled and provides authentication credentials specifically a username and password for EAP MD5 or a username and client certificates for EAP TLS EAP TTLS and EAP PEAP A nonresponsive device is not 802 1X enabled but can be authenticated through a MAC based authentication method Authenticato...

Page 2323: ...tal allows you to authenticate users on J EX Series switches by redirecting Web browser requests to a login page that requires users to input a username and password before they are allowed access to the network Captive portal controls network access by requiring users to provide information that is authenticated against a RADIUS server database using EAP MD5 You can also use captive portal to dis...

Page 2324: ...e the end device through the RADIUS server For each MAC address you can also configure the VLAN to which the end device is moved or the interfaces on which the host connects Fallback of Authentication Methods You can configure one or more authentication methods on a single interface and thus enable fallback to the next method if the first or second method fails If an interface is configured in mul...

Page 2325: ...entication CLI Procedure on page 2335 Configuring Captive Portal Authentication CLI Procedure on page 2350 Configuring Static MAC Bypass of Authentication CLI Procedure on page 2334 Authentication Process Flow for J EX Series Switches on page 2255 802 1X for J EX Series Switches Overview IEEE 802 1X provides network edge security protecting Ethernet LANs from unauthorized user access How 802 1X Au...

Page 2326: ...ts data port that device is authenticated and then VoIP traffic can flow to and from the phone providing that the interface is configured in single mode and not in single secure mode NOTE Configuring a VoIP VLAN on private VLAN PVLAN interfaces is not supported RADIUS accounting Sends accounting information to the RADIUS accounting server Accounting information is sent to the server whenever a sub...

Page 2327: ...witches on page 2263 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding 802 1X and RADIUS Accounting on J EX Series Switches on page 2260 Understanding Guest VLANs for 802 1X on J EX Series Switches on page 2259 Understanding 802 1X and VSAs on J EX Series Switches on page 2266 Understanding Server Fail Fallback and Authentication on J EX Series Switches ...

Page 2328: ...r statement is configured on the interface If an authenticator is not configured the switch checks for captive portal configuration skip to Step 6 If an authenticator is configured a The switch checks whether the mac radius restrict statement is configured on the interface If mac radius restrict is configured the switch does not attempt 802 1X authentication skip to Step 5 If it is configured go o...

Page 2329: ... configured on the interface a The switch sends a MAC RADIUS authentication request to the authentication server The switch sends only one such request If the authentication server does not respond the switch checks whether there is a server fail VLAN configured on the switch If there is a server fail VLAN the switch performs the configured server fail fallback operation If there is no server fail...

Page 2330: ...eries Switches use authentication to implement access control in an enterprise network If 802 1X MAC RADIUS or captive portal authentication are configured on the interface end devices are evaluated at the initial connection by an authentication RADIUS server If the end device is configured on the authentication server the device is granted access to the LAN and the J EX Series switch opens the in...

Page 2331: ...namically after 802 1X authentication is successful Successful authentication requires that the VLAN ID or VLAN name exist on the switch and match the VLAN ID or VLAN name sent by the RADIUS server during authentication If the VLAN does not exist the supplicant is unauthenticated If a guest VLAN is established the unauthenticated supplicant is automatically moved to the guest VLAN Related Document...

Page 2332: ... or type of services accessed To configure RADIUS accounting specify one or more RADIUS accounting servers to receive the statistical data from the switch and select the type of accounting data to be collected The RADIUS accounting server you specify can be the same server used for RADIUS authentication or it can be a separate RADIUS server You can specify a list of RADIUS accounting servers In th...

Page 2333: ...ly identify a variety of devices resulting in a LAN that interoperates smoothly and efficiently LLDP capable devices transmit information in type length and value TLV messages to neighbor devices Device information can include specifics such as chassis and port identification and system name and system capabilities The TLVs leverage this information from parameters that have already been configure...

Page 2334: ...otiation status and support and MAU type The information is not configurable but based on the physical interface structure Link Aggregation A TLV that advertises if the port is aggregated and its aggregated port ID Maximum Frame Size A TLV that advertises the Maximum Transmission Unit MTU of the interface sending LLDP frames Port Vlan A TLV that advertises the VLAN name configured on the interface...

Page 2335: ...2 1X and VoIP on J EX Series Switches When you use Voice over IP VoIP you can connect IP telephones to the switch and configure IEEE 802 1X authentication for 802 1X compatible IP telephones The 802 1X authentication provides network edge security protecting Ethernet LANs from unauthorized user access VoIP is a protocol used for the transmission of voice through packet switched networks VoIP trans...

Page 2336: ...nt mode In single supplicant mode the 802 1X process authenticates only the first supplicant All other supplicants who connect later to the interface are allowed full access without any further authentication They effectively piggyback on the first supplicant s authentication For an example of a VoIP single supplicant topology see Figure 48 on page 2265 2264 Dell PowerConnect J Series Ethernet Swi...

Page 2337: ...ding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Example Configuring VoIP on a J EX Series Switch Without Including 802 1X Authentication on page 2309 Example Configuring VoIP on a J EX Series Switch Without Including LLDP MED Support on page 2315 2265 Chapter 81 802 1X and MAC RADIUS Authen...

Page 2338: ...or ID set to the Juniper Networks ID number 2636 As well as configuring port filtering attributes through VSAs you can apply a port firewall filter that has already been configured on the switch directly to the RADIUS server Like port filtering attributes the filter is applied during the 802 1X authentication process and its actions are applied at the switch port Adding a port firewall filter to a...

Page 2339: ...utes on a J EX Series Switch on page 2296 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Example Configuring VoIP on a J EX Series Switch Without Including 802 1X Authentication on page 2309 Example Configuring VoIP on a J EX Series Switch Without Including LLDP MED Support on page 2315 Example Applying Firewall Filters to Multiple Supplicants on Interfaces E...

Page 2340: ...and contains credential information for hosts supplicants that have permission to connect to the network Before you connect the server to the switch be sure you have Performed basic bridging and VLAN configuration on the switch See Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Configured users on the RADIUS authentication server Overview and Topology The J EX S...

Page 2341: ...Figure 49 Topology for Configuration 2269 Chapter 82 Examples Access Control Configuration ...

Page 2342: ...Configuration CLI Quick Configuration To quickly connect the RADIUS server to the switch copy the following commands and paste them into the switch terminal window edit set access radius server 10 0 0 100 secret juniper set access profile profile1 authentication order radius set access profile profile1 radius authentication server 10 0 0 100 10 2 14 200 Step by Step Procedure To connect the RADIUS...

Page 2343: ...er at 10 0 0 100 to test whether it is reachable across the IP network ICMP echo responses are being returned from the server verifying that the switch and the server are connected Related Documentation Example Setting Up 802 1X for Single Supplicant or Multiple Supplicant Configurations on a J EX Series Switch on page 2290 Example Setting Up 802 1X in Conference Rooms to Provide Internet Access t...

Page 2344: ...and the RADIUS server See Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Disable firewall filters on the interface Firewall filters interfere with server fail fallback operation Configured users on the authentication server Overview and Topology A RADIUS server timeout occurs if no authentication RADIUS servers are reachable when a supplicant logs in and attempt...

Page 2345: ...e 0 0 1 Supplicant Backend database with an address of 10 0 0 100 connected to the switch at port ge 0 0 10 One RADIUS server In this example configure interface ge 0 0 1 to move a supplicant attempting access to the LAN during a RADIUS timeout to another VLAN A RADIUS timeout prevents the normal exchange of EAP messages that carry information from the RADIUS server to the switch and permit the au...

Page 2346: ...window edit protocols dot1x authenticator set interface ge 0 0 1 server fail vlan name vlan sf Step by Step Procedure To configure an interface to divert supplicants to a specific VLAN when a RADIUS timeout occurs here the VLAN is vlan sf 1 Define the VLAN to which supplicants are diverted edit protocols dot1x authenticator user switch set interface server fail vlan name vlan sf Results Display th...

Page 2347: ... 0 user switch show dot1x interface brief 802 1X Information Interface Role State MAC address User ge 0 0 1 0 Authenticator Authenticated 00 00 00 00 00 01 abc ge 0 0 10 0 Authenticator Initialize ge 0 0 14 0 Authenticator Connecting ge 0 0 15 0 Authenticator Initialize ge 0 0 20 0 Authenticator Initialize A RADIUS server timeout occurs Display the Ethernet switching table to show that the supplic...

Page 2348: ...rocedure on page 2337 Configuring 802 1X RADIUS Accounting CLI Procedure on page 2339 Filtering 802 1X Supplicants Using RADIUS Server Attributes on page 2340 Understanding Server Fail Fallback and Authentication on J EX Series Switches on page 2258 Example Setting Up 802 1X in Conference Rooms to Provide Internet Access to Corporate Visitors on a J EX Series Switch 802 1X on J EX Series switches ...

Page 2349: ...e switch See Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Overview and Topology As part of IEEE 802 1X Port Based Network Access Control PNAC you can provide limited network access to supplicants who do not belong to a VLAN authentication group by configuring authentication to a guest VLAN Typically guest VLAN access is used to provide Internet access to visit...

Page 2350: ...Figure 51 Topology for Guest VLAN Example 2278 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2351: ...n To create a guest VLAN and configure 802 1X authentication perform these tasks CLI Quick Configuration To quickly configure a guest VLAN with 802 1X authentication copy the following commands and paste them into the switch terminal window edit set vlans guest vlan vlan id 300 set protocols dot1x authenticator interface all guest vlan guest vlan Step by Step Procedure To configure a guest VLAN th...

Page 2352: ...r switch show dot1x interface ge 0 0 1 0 detail ge 0 0 1 0 Role Authenticator Administrative state Auto Supplicant mode Single Number of retries 3 Quiet period 60 seconds Transmit period 30 seconds Mac Radius Enabled Mac Radius Restrict Disabled Reauthentication Enabled Configured Reauthentication interval 3600 seconds Supplicant timeout 30 seconds Server timeout 30 seconds Maximum EAPOL requests ...

Page 2353: ...s without authentication you can configure a static MAC bypass list on the J EX Series switch The static MAC bypass list also known as the exclusion list specifies MAC addresses that are allowed on the switch without a request to an authentication server You can use static MAC bypass of authentication to allow connection for devices that are not 802 1X enabled such as printers If a host s MAC addr...

Page 2354: ...Overview and Topology To permit printers access to the LAN add them to the static MAC bypass list The MAC addresses on this list are permitted access without authentication from the RADIUS server Figure 52 on page 2283 shows the two printers connected to the J EX4200 2282 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2355: ...e 52 Topology for Static MAC Authentication Configuration The interfaces shown in Table 291 on page 2284 will be configured for static MAC authentication 2283 Chapter 82 Examples Access Control Configuration ...

Page 2356: ...e them into the switch terminal window edit set protocols dot1x authenticator authenticaton profile name profile1 set protocols dot1x authenticator static 00 04 0f fd ac fe 00 04 ae cd 23 5f set protocols dot1x interface all supplicant multiple Step by Step Procedure Configure static MAC authentication Configure the authentication profile name access profile name to use for authentication 1 edit p...

Page 2357: ...static mac address MAC address VLAN Assignment Interface 00 04 0f fd ac fe default ge 0 0 19 0 00 04 ae cd 23 5f default ge 0 0 20 0 Meaning The output field MAC address shows the MAC addresses of the two printers The output field Interface shows that the MAC address 00 04 0f fd ac fe can connect to the LAN through interface ge 0 0 19 0 and that the MAC address 00 04 ae cd 23 5f can connect to the...

Page 2358: ... you have Configured basic access between the J EX Series switch and the RADIUS server See Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Performed basic bridging and VLAN configuration on the switch See Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Performed basic 802 1X configuration See Configuring 802 1X Interface Setting...

Page 2359: ...essages Figure 53 on page 2287 shows the two printers connected to the switch Figure 53 Topology for MAC RADIUS Authentication Configuration Table 292 on page 2287 shows the components in the example for MAC RADIUS authentication Table 292 Components of the MAC RADIUS Authentication Configuration Topology Settings Property J EX4200 ports ge 0 0 0 through ge 0 0 23 Switch hardware default VLAN name...

Page 2360: ...opy the following commands and paste them into the switch terminal window edit set protocols dot1x authenticator interface ge 0 0 19 mac radius set protocols dot1x authenticator interface ge 0 0 20 mac radius restrict NOTE You must also configure the two MAC addresses as usernames and passwords on the RADIUS server as is done in Step 2 of the step by step procedure Step by Step Procedure Configure...

Page 2361: ...802 1X configured interfaces ge 0 0 19 and ge 0 0 20 user switch show dot1x interface ge 0 0 19 0 detail ge 0 0 19 0 Role Authenticator Administrative state Auto Supplicant mode Single Number of retries 3 Quiet period 60 seconds Transmit period 30 seconds Mac Radius Enabled Mac Radius Restrict Disabled Reauthentication Enabled Configured Reauthentication interval 3600 seconds Supplicant timeout 30...

Page 2362: ...he MAC address of the first printer configured for MAC RADIUS authentication The Authenticationmethod field displays the authentication method as MAC Radius On interface ge 0 0 20 the MAC address is 00 04 ae cd 23 5f which is the MAC address of the second printer configured for MAC RADIUS authentication The Authentication method field displays the authentication method as MAC Radius Related Docume...

Page 2363: ...er that supports 802 1X The authentication server acts as the backend database and contains credential information for hosts supplicants that have permission to connect to the network Before you configure the ports for 802 1X authentication be sure you have Installed your J EX Series switch Performed the initial switch configuration See Connecting and Configuring a J EX Series Switch J Web Procedu...

Page 2364: ...Figure 54 Topology for Configuring Supplicant Modes 2292 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2365: ...ode authenticates only one supplicant to connect to an authenticator port No other supplicant can connect to the authenticator port until the first supplicant logs out Multiple supplicant mode authenticates multiple supplicants individually on one authenticator port If you configure a maximum number of devices that can be connected to a port through port security the lesser of the configured value...

Page 2366: ...erform these tasks Verifying the 802 1X Configuration on page 2294 Verifying the 802 1X Configuration Purpose Verify the 802 1X configuration on interfaces ge 0 0 8 ge 0 0 9 and ge 0 0 5 Action Verify the 802 1X configuration with the operational mode command showdot1xinterface user switch show dot1x interface ge 0 0 8 0 detail ge 0 0 8 0 Role Authenticator Administrative state Auto Supplicant mod...

Page 2367: ...thentication interval 3600 seconds Supplicant timeout 30 seconds Server timeout 30 seconds Maximum EAPOL requests 2 Guest VLAN member not configured Number of connected supplicants 0 Meaning The Supplicant mode output field displays the configured administrative mode for each interface Interface ge 0 0 8 0 displays Single supplicant mode Interface ge 0 0 9 0 displays SingleSecure supplicant mode I...

Page 2368: ...ay the counters to verify the configuration Requirements on page 2296 Overview and Topology on page 2297 Configuring the Port Firewall Filter and Counters on page 2299 Applying the Port Firewall Filter to the Supplicant User Profiles on the RADIUS Server on page 2300 Verification on page 2301 Requirements This example uses the following hardware and software components One J EX Series switch actin...

Page 2369: ...witch forwards a supplicant s credentials to the RADIUS server The RADIUS server matches the credentials forwarded by the switch against preconfigured information about the supplicant located in the supplicant s user profile on the RADIUS server If a match is made the RADIUS server instructs the switch to open an interface to the supplicant Traffic then flows from and to the supplicant on the LAN ...

Page 2370: ...s Property J EX4200 access switch 24 Gigabit Ethernet ports 8 PoE ports Switch hardware Backend database with an address of 10 0 0 100 connected to the switch at port ge 0 0 10 One RADIUS server Supplicant 1 has MAC address 00 50 8b 6f 60 3a Supplicant 2 has MAC address 00 50 8b 6f 60 3b 802 1X supplicants connected to the switch on interface ge 0 0 2 2298 Dell PowerConnect J Series Ethernet Switc...

Page 2371: ...e at http www juniper net techpubs software junos Configuring the Port Firewall Filter and Counters Configure a port firewall filter and counters CLI Quick Configuration To quickly configure a port firewall filter with terms for Supplicant 1 and Supplicant 2 and create parallel counters for each supplicant copy the following commands and paste them into the switch terminal window edit set firewall...

Page 2372: ...bandwidth limit 1m burst size limit 1k then discard Applying the Port Firewall Filter to the Supplicant User Profiles on the RADIUS Server Verify that the RADIUS server attribute needed to apply a filter on the RADIUS server is on the server and apply the port firewall filter to each supplicant s user profile on the RADIUS server Step by Step Procedure To verify that the RADIUS server attribute Fi...

Page 2373: ...s supplicant1 Auth Type EAP User Password supplicant1 Tunnel Type VLAN Tunnel Medium Type IEEE 802 Tunnel Private Group Id 1005 Filter Id filter1 supplicant2 Auth Type EAP User Password supplicant2 Tunnel Type VLAN Tunnel Medium Type IEEE 802 Tunnel Private Group Id 1005 Filter Id filter1 Verification Verify that the filter has been applied to the supplicants Verifying That the Filter Has Been App...

Page 2374: ...dpoint Discovery LLDP MED protocol forwards VoIP parameters from the switch to the phone You also configure 802 1X authentication to allow the telephone access to the LAN Authentication is done through a backend RADIUS server This example describes how to configure VoIP on a J EX Series switch to support an Avaya IP phone as well as the LLDP MED protocol and 802 1X authentication Requirements on p...

Page 2375: ...d allow the switch to forward the VLAN name and VLAN ID for the voice VLAN to the IP telephone The IP telephone then uses the voice VLAN that is it references the voice VLAN s ID to send a DHCP discover request and exchange information with the DHCP server voice gateway Overview and Topology Instead of using a regular telephone you connect an IP telephone directly to the switch An IP phone has all...

Page 2376: ...r voice traffic to provide the highest quality of service Table295onpage2304describesthecomponentsusedinthisVoIPconfigurationexample Table 295 Components of the VoIP Configuration Topology Settings Property J EX4200 switch Switch hardware 2304 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2377: ... power adapter Configuration To configure VoIP LLDP MED and 802 1X authentication CLI Quick Configuration To quickly configure VoIP LLDP MED and 802 1X copy the following commands and paste them into the switch terminal window edit set vlans data vlan vlan id 77 set vlans voice vlan vlan id 99 set vlans data vlan interface ge 0 0 2 0 set interfaces ge 0 0 2 unit 0 family ethernet switching vlan me...

Page 2378: ...e LLDP MED protocol support edit protocols user switch set lldp med interface ge 0 0 2 0 6 To authenticate an IP phone and a PC connected to the IP phone on the interface configure 802 1X authentication support and specify multiple supplicant mode NOTE If you do not want to authenticate any device skip the 802 1X configuration on this interface edit protocols user switch set dot1x authenticator in...

Page 2379: ...e on page 2309 Verifying LLDP MED Configuration Purpose Verify that LLDP MED is enabled on the interface Action user switch show lldp detail LLDP Enabled Advertisement interval 30 Second s Transmit delay 2 Second s Hold timer 2 Second s Config Trap Interval 300 Second s Connection Hold timer 60 Second s LLDP MED Enabled MED fast start count 3 Packet s Interface LLDP LLDP MED Neighbor count all Ena...

Page 2380: ...e 0 0 2 0 Role Authenticator Administrative state Auto Supplicant mode Multiple Number of retries 3 Quiet period 60 seconds Transmit period 30 seconds Mac Radius Disabled Mac Radius Restrict Disabled Reauthentication Enabled Configured Reauthentication interval 3600 seconds Supplicant timeout 30 seconds Server timeout 30 seconds Maximum EAPOL requests 2 Guest VLAN member not configured Number of c...

Page 2381: ...RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Example Setting Up 802 1X for Single Supplicant or Multiple Supplicant Configurations on a J EX Series Switch on page 2290 Defining CoS Forwarding Classes CLI Procedure on page 2918 Defining CoS Forwarding Classes J Web Procedure on page 2918 Configuring LLDP MED CLI Procedure on page 2346 Example Configuring VoIP on a J EX Series Switc...

Page 2382: ...ED information to get the VLAN ID for the voice VLAN You must configure the voip statement on the interface to designate the interface as a VoIP interface and allow the switch to forward the VLAN name and VLAN ID for the voice VLAN to the IP telephone The IP telephone then uses the voice VLAN that is it references the voice VLAN s ID to send a DHCP discover request and exchange information with th...

Page 2383: ...e interface edit vlans user switch set data vlan interface ge 0 0 2 0 3 Configure the interface as an access interface configure support for Ethernet switching and add the data vlan VLAN edit interfaces user switch set ge 0 0 2 unit 0 family ethernet switching vlan members data vlan user switch set ge 0 0 2 unit 0 family ethernet switching port mode access 4 Configure VoIP on the interface and spe...

Page 2384: ...embers data vlan protocols lldp med interface ge 0 0 2 0 dot1x authenticator authentication profile name auth profile static 00 04 f2 11 aa a7 interface ge 0 0 2 0 supplicant multiple vlans data vlan vlan id 77 interface ge 0 0 2 0 voice vlan vlan id 99 ethernet switching options voip interface ge 0 0 2 0 vlan voice vlan forwarding class assured forwarding 2312 Dell PowerConnect J Series Ethernet ...

Page 2385: ...e VLAN id VLAN name ge 0 0 0 0 0 default ge 0 0 1 0 0 employee vlan ge 0 0 2 0 0 data vlan ge 0 0 2 0 99 voice vlan ge 0 0 3 0 0 employee vlan ge 0 0 8 0 0 employee vlan ge 0 0 10 0 0 default ge 0 0 11 0 20 employee vlan ge 0 0 23 0 0 default LLDP basic TLVs supported Chassis identifier Port identifier Port description System name System description System capabilities Management address LLDP 802 ...

Page 2386: ...ds Meaning The field Role shows that the ge 0 0 2 0 interface is in the authenticator state The Supplicant field shows that the interface is configured in multiple supplicant mode permitting multiple supplicants to be authenticated on this interface The MAC addresses of the supplicants currently connected are displayed at the bottom of the output Verifying the VLAN Association with the Interface P...

Page 2387: ... phones support LLDP MED however This example describes how to configure VoIP on a J EX Series switch without LLDP MED and without 802 1X Requirements on page 2315 Overview on page 2316 Configuration on page 2316 Verification on page 2317 Requirements This example uses the following hardware and software components One J EX4200 switch acting as an authenticator port access entity PAE The interface...

Page 2388: ...abling DHCP option 176 Configuration To configure VoIP without LLDP MED or 802 1X authentication CLI Quick Configuration To quickly configure VoIP copy the following commands and paste them into the switch terminal window edit set vlans data vlan vlan id 77 set vlans voice vlan vlan id 99 set vlans data vlan interface ge 0 0 2 0 set ethernet switching options voip interface ge 0 0 2 0 vlan voice v...

Page 2389: ...isplay the results of the configuration edit user switch show configuration interfaces ge 0 0 2 unit 0 family ethernet switching port mode trunk vlan members voice vlan native vlan id data vlan vlans data vlan vlan id 77 interface ge 0 0 2 0 voice vlan vlan id 99 ethernet switching options voip interface ge 0 0 2 0 vlan voice vlan forwarding class assured forwarding Verification To confirm that th...

Page 2390: ... 802 1X Authentication on page 2309 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Example Applying Firewall Filters to Multiple Supplicants on Interfaces Enabled for 802 1X or MAC RADIUS Authentication On J EX Series switches firewall filters that you apply to interfaces enabled for 802 1X or MAC R...

Page 2391: ... the 802 1X configuration on an interface is set to multiple supplicant mode the system dynamically combines interface firewall filter with the user policies sent to the switch from the RADIUS server during authentication and creates separate terms for each user Because there are separate terms for each user authenticated on the interface you can as shown in this example use counters to view the a...

Page 2392: ...host is authenticated the modifications are not reflected in the dynamic filter unless the user is reauthenticated In this example you configure a firewall filter to count the requests made by each endpoint authenticated on interface ge 0 0 2 to the file server which is located on subnet 192 0 2 16 28 Figure 58 on page 2321 shows the network topology for this example 2320 Dell PowerConnect J Serie...

Page 2393: ...r interface ge 0 0 2 supplicant multiple set firewall family ethernet switching filter filter1 term term1 from destination address 192 0 2 16 28 set firewall family ethernet switching filter filter1 term term1 then count counter1 Step by Step Procedure To configure firewall filters on an interface enabled for multiple supplicants Configure interface ge 0 0 2 for multiple supplicant mode authentica...

Page 2394: ...ounter1 term term2 from destination address 192 0 2 16 28 then policer p1 policer p1 if exceeding bandwidth limit 1m burst size limit 1k then discard protocols dot1x authenticator interface ge 0 0 2 supplicant multiple Verification To confirm that the configuration is working properly perform these tasks Verifying Firewall Filters on Interfaces with Multiple Supplicants on page 2322 Verifying Fire...

Page 2395: ...elated Documentation Example Applying a Firewall Filter to 802 1X Authenticated Supplicants Using RADIUS Server Attributes on a J EX Series Switch on page 2296 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Filtering 802 1X Supplicants Using RADIUS Server Attributes on page 2340 Example Setting Up Captive Portal Authentication on a J EX S...

Page 2396: ...e portal authentication The topology for this example consists of one J EX Series switch connected to a RADIUS authentication server One interface on the switch is configured for captive portal In this example the interface is configured in single supplicant mode Configuration To configure captive portal on your switch CLI Quick Configuration To quickly configure captive portal on the switch after...

Page 2397: ...to the interface If the MAC address has already been learned on the interface you must clear it using the clear captive portal interface interface name before adding it to the whitelist Otherwise the new entry for the MAC address will not be added to the ethernet switching table and the authentication bypass will not be allowed 4 Optional To redirect clients to a specified page rather than the pag...

Page 2398: ...ive portal is configured on interface ge 0 0 10 Action Use the operational mode command show captive portal interface interface name detail user switch show captive portal interface ge 0 0 10 0 detail ge 0 0 10 0 Supplicant mode Single Number of retries 3 Quiet period 60 seconds Configured CP session timeout 3600 seconds Server timeout 15 seconds Meaning The output confirms that captive portal is ...

Page 2399: ...ion of where the problem lies For example if the client cannot get an IP address you might check the switch interface to determine whether the DHCP counter is incrementing if the counter increments the DHCP packet was received by the switch user switch show captive portal firewall ge 0 0 10 0 ge 0 0 10 0 Filter name dot1x_ge 0 0 10 Counters Name Bytes Packets dot1x_ge 0 0 10_CP_arp 7616 119 dot1x_...

Page 2400: ...2328 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2401: ...cedure on page 2335 Configuring Server Fail Fallback CLI Procedure on page 2337 Configuring 802 1X RADIUS Accounting CLI Procedure on page 2339 Filtering 802 1X Supplicants Using RADIUS Server Attributes on page 2340 Configuring LLDP CLI Procedure on page 2344 Configuring LLDP J Web Procedure on page 2345 Configuring LLDP MED CLI Procedure on page 2346 VSA Match Conditions and Actions for J EX Ser...

Page 2402: ...DIUS servers might refer to an older default 2 Optional Specify the IP address by which the switch is identified by the RADIUS server If you do not specify this the RADIUS server uses the address of the interface sending the RADIUS request We recommend that you specify this IP address because if the request gets diverted on an alternate route to the RADIUS server the interface relaying the request...

Page 2403: ... can bypass authentication and be automatically connected to the LAN See Configuring Static MAC Bypass of Authentication CLI Procedure on page 2334 Before you begin specify the RADIUS server or servers to be used as the authentication server See Specifying RADIUS Server Connections on a J EX Series Switch CLI Procedure on page 2330 To configure 802 1X on an interface 1 Configure the supplicant mod...

Page 2404: ...802 1X screen displays a list of interfaces whether 802 1X security has been enabled and the assigned port role When you select an interface the Detailsof802 1xconfigurationonport section displays 802 1X details for that interface NOTE After you make changes to the configuration in this page you must commit the changes for them to take effect To commit all changes to the active configuration selec...

Page 2405: ...ich the server is associated Server Port Number Type the IP address in dotted decimal notation Specifies the source address of the switch using which the switch can communicate with the server Source Address Type the number Specifies the number of login retries allowed after a login failure Retry Attempts Type the interval in seconds Specifies the time interval to wait before the connection to the...

Page 2406: ...e value in seconds for Port waiting time after an authentication failure EAPOL retransmitting interval Max EAPOL requests Maximum number of retries Port timeout value for the response from the supplicant Port timeout value for the response from the RADIUS server Specifies timeout values for each action Timeouts Related Documentation Configuring 802 1X Interface Settings CLI Procedure on page 2331 ...

Page 2407: ... enabled devices to access the LAN by configuring their MAC address for static MAC bypass of authentication You can configure MAC RADIUS authentication on an interface that also allows 802 1X authentication or you can configure either authentication method alone If both MAC RADIUS and 802 1X authentication are enabled on the interface the switch first sends the host three EAPOL requests to the hos...

Page 2408: ...olsdot1xauthenticatorinterfacege 0 0 20mac radiusrestrict On a RADIUS authentication server create user profiles for each nonresponsive host using the MAC address without colons of the nonresponsive host as the username and password here the MAC addresses are 00 04 0f fd ac fe and 00 04 ae cd 23 5f root freeradius edit etc raddb vi users 00040ffdacfe Auth type Local User Password 00040ffdacfe 0004...

Page 2409: ...ns the interface to the end device When you set up 802 1X or MAC RADIUS authentication on the switch you specify a primary authentication server and one or more backup authentication servers If the primary authentication server cannot be reached by the switch and the secondary authentication servers are also unreachable a RADIUS server timeout occurs Because the authentication server grants or den...

Page 2410: ...eady connected end devices as reauthenticated if there is a RADIUS timeout during reauthentication new users will be denied access edit protocols dot1x authenticator user switch set interface ge 0 0 1 server fail use cache Configure an interface that receives an EAPOL access reject message from the authentication server to move end devices attempting LAN access on the interface to a specified VLAN...

Page 2411: ...user switch set profile profile1 accounting 4 Configure the RADIUS servers to use while sending accounting messages and updates edit access user switch set profile profile1 accounting order radius none 5 Configure the statistics to be collected on the switch and forwarded to the accounting server edit access user switch set profile profile1 accounting order accounting stop on access deny user swit...

Page 2412: ...plicants Using RADIUS Server Attributes There are two ways to configure the RADIUS server with port firewall filters Include a match statement and corresponding action in the Juniper Firewall Filter attribute The Juniper Firewall Filter attribute is a vendor specific attribute VSA in the Juniper dictionary on the RADIUS server Use this attribute to configure simple filter conditions for authentica...

Page 2413: ...ow medium high See VSA Match Conditions and Actions for J EX Series Switches on page 2348 for definitions of match statement options To configure match conditions on the RADIUS server 1 Verify that the Juniper dictionary is loaded on your RADIUS server and includes the filtering attribute Juniper Switching Filter attribute ID 48 root freeradius cat usr local share freeradius dictionary juniper dic...

Page 2414: ... For each relevant user add the Juniper Switching Filter attribute Juniper Switching Filter match destination mac 00 04 0f fd ac fe ip protocol 2 forwarding class high action loss priority high NOTE For the forwarding class option to be applied the forwarding class must be configured on the switch If it is not configured on the switch this option is ignored You must specify both the forwarding cla...

Page 2415: ...re merged 1 Create the firewall filter on the local switch In this example the filter is called filter1 2 Open the users file on the RADIUS server root freeradius cd usr local pool raddb vi users 3 For each relevant user add the filter here the filter ID is filter1 Filter Id filter1 NOTE Multiple filters are not supported on a single interface However you can support multiple filters for multiple ...

Page 2416: ...DP on all interfaces or on a specific interface edit protocols lldp user switch set interface all Configuring for Fast Start You can specify the number of LLDP MED advertisements sent from the switch in the first second after it has detected an LLDP capable device The default is 3 to set it to another value edit protocols lldp user switch set fast start 8 Adjusting LLDP Advertisement Settings You ...

Page 2417: ...onds edit protocols lldp user switch set ptopo configuration maximum hold time 2147483647 Specifying a Management Address for the LLDP Management TLV You can configure an IP management address to be used in the LLDP Management type length and value TLV To configure the management address edit protocols lldp user switch set management address 192 168 0 0 Related Documentation Configuring LLDP J Web...

Page 2418: ...it generates and transmits to LLDP neighbors Hold multiplier Type the Fast start count Specifies the number of LLDP advertisements sent in the first second after the device connects The default is 3 Increasing this number results in the port initially advertising LLDP MED at a faster rate for a limited time Fast start count Table 300 Edit Port Settings Your Action Function Field Select one Enabled...

Page 2419: ...n by geography edit protocols lldp med user switch set interface ge 0 0 2 0 location civic based country code US user switch set interface ge 0 0 2 0 location civic based ca type 1 ca value El Dorado County user switch set interface ge 0 0 2 0 location civic based ca type 2 ca value CA user switch setinterfacege 0 0 2 0locationcivic basedca type3ca valueSomerset user switch set interface ge 0 0 2 ...

Page 2420: ...is accepted by default The action is the action that the switch takes if a packet matches the match conditions for the specific term Allowed actions are accept a packet or discard a packet The following guidelines apply when you specify match conditions and actions for VSAs Both match and action statements are mandatory Any or all options separated by commas may be included in each match and actio...

Page 2421: ... 68 bootps 67 cvspserver 2401 cmd 514 dhcp 67 domain 53 eklogin 2105 ekshell 2106 exec 512 finger 79 ftp 21 ftp data 20 http 80 https 443 ident 113 imap 143 kerberos sec 88 klogin 543 kpasswd 761 krb prop 754 krbupdate 760 kshell 544 ldap 389 login 513 mobileip agent 434 mobilip mn 435 msdp 639 netbios dgm 138 netbios ns 137 netbios ssn 139 nfsd 2049 nntp 119 ntalk 518 ntp 123 pop3 110 pptp 1723 p...

Page 2422: ...and VLAN configuration on the switch See Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Generated an SSL certificate and installed it on the switch See Generating SSL Certificates to Be Used for Secure Web Access on page 398 Configured basic access between the J EX Series switch and the RADIUS server See Example Connecting a RADIUS Server for 802 1X to a J EX Se...

Page 2423: ...ntry for the MAC address will not be added to the ethernet switching table and the authentication bypass will not be allowed Related Documentation Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 Understanding Captive Portal Authentication Designing a Captive Portal Authentication Login Page on a J EX Series Switch You can set up captive portal authentication o...

Page 2424: ...tal login page footer footer bgcolor hex color Footer background color For example you can include copyright information and links to additional information such as help instructions legal notices or a privacy policy footer message text string Footer message The HTML hexadecimal code for the background color of the header bar across the top of the form area of the captive portal login page form he...

Page 2425: ...eader message text string Header message URL to which the users are directed upon successful authentication The default is to redirect users to the page they had originally requested post authentication url url Post authentication URL To design the captive portal login page 1 Optional Upload your logo image file to the switch user switch file copy ftp username prompt ftp hostname net var tmp my lo...

Page 2426: ...2354 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2427: ...er the following commands show dot1x interface detail display xml show dot1x interface detail interface display xml show dot1x auth failed users Meaning The details displayed include A list of authenticated users The total number of users connected A list of users who have failed authentication You can also specify an interface for which the details must be displayed Related Documentation Configur...

Page 2428: ... authenticated and is now connected to the LAN is known as user5 on the RADIUS server and has the MAC address 00 30 48 8C 66 BD The supplicant was authenticated by means of the 802 1X authentication method called Radius authentication When the Radius authentication method is used the supplicant is configured on the RADIUS server the RADIUS server communicates this to the switch and the switch open...

Page 2429: ...denied LAN access Server fail VLAN A supplicant is configured to be moved to a specified VLAN if the RADIUS server is unavailable to reauthenticate the supplicant The VLAN must already exist on the switch Related Documentation Configuring 802 1X Interface Settings CLI Procedure on page 2331 Configuring 802 1X Authentication J Web Procedure on page 2332 Configuring MAC RADIUS Authentication CLI Pro...

Page 2430: ...2358 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2431: ...ccounting stop on access deny accounting stop on failure authentication order authentication method radius accounting server server address authentication server server address Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Configuring 802 1X RADIUS Accounting CLI Procedure on page 2339 edit ethernet switching options Configuration Statemen...

Page 2432: ...trunk group group name name interface interface name primary secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write interval seconds interface all interface name allowed mac mac address list dhcp trusted no dhcp trusted mac limit limit action action no allowed mac log static ip ip address vlan vlan name mac mac address vlan all vlan name arp inspection no ar...

Page 2433: ...red forwarding best effort expedited forwarding network control Related Documentation Understanding Port Mirroring on J EX Series Switches on page 3245 Port Security for J EX Series Switches Overview on page 2545 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Contr...

Page 2434: ...ail deny permit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single single secure supplicant timeout seconds transmit period seconds static mac address interface interface name vlan assignment vlan id vlan name gvrp enable disable interface all interface name disable join timer millseconds leave timer milliseconds leaveall timer millis...

Page 2435: ... number interface all interface name disable lldp configuration notification interval seconds management address ip management address ptopo configuration maximum hold time seconds ptopo configuration trap interval seconds traceoptions file filename files number size size world readable no world readable match regex flag flag detail disable receive send lldp med disable fast start number interface...

Page 2436: ...t cost edge mode mode no root port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revision level revision level traceoptions file filename files number size size no stamp world readable no world readable flag flag mvrp disable interface all interface name disable join timer milliseconds...

Page 2437: ...f function none default explicit name format character string none dns mac 2oct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery direction down interface interface name remote mep mep id action profile profile name link fault management action profile profile name action syslog link down event link a...

Page 2438: ...dge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag sflow agent id collector ip address udp port port number disable interfaces interface name dis...

Page 2439: ...port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout action alarm block cost cost disable edge mode mode no root port priority ...

Page 2440: ... EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch on page 3427 Understanding RSTP for J EX Series S...

Page 2441: ...se 10 2 for J EX Series switches Description Configure authentication authorization and accounting AAA services The statements are explained separately Default Not enabled Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on p...

Page 2442: ...cation for specified subscribers radius Use RADIUS authentication for specified subscribers The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Configuring 802 1X RA...

Page 2443: ...or J EX Series switches Description Configure RADIUS accounting parameters and enable RADIUS accounting for an access profile The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring Authentication and Accounting Parameters for Subscriber Ac...

Page 2444: ...atement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure audit of TACACS or RADIUS authentication events configuration changes and interactive commands Options The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentatio...

Page 2445: ...elease Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the Remote Authentication Dial In User Service RADIUS server for authentication To configure multiple RADIUS servers include multiple server addresses The servers are tried in order and in a round robin fashion until a valid response is received from one of the servers or until all t...

Page 2446: ...and Accounting Parameters for Subscriber Access accounting stop on access deny Syntax accounting stop on access deny Hierarchy Level edit access profile profile name accounting Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configures the authentication order for authentication authorization and accounting AAA services to send an Acct Sto...

Page 2447: ...le name accounting Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure authentication order for authentication authorization and accounting AAA services to send an Acct Stop message if a supplicant fails AAA authorization but the RADIUS server grants access For example a supplicant might fail AAA authentication due to an internal err...

Page 2448: ...tion Configuring Authentication and Accounting Parameters for Subscriber Access address Syntax address address or prefix Hierarchy Level edit access address pool pool name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the IP address or prefix value for clients Options address or prefix An address or prefix value Required Privil...

Page 2449: ...mentation Configuring the Address Pool for L2TP Network Server IP Address Allocation address range Syntax address range low lower limit high upper limit Hierarchy Level edit access address pool pool name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the address range Options high upper limit Upper limit of an address range low ...

Page 2450: ...s are sent Default Disabled Options seconds Optional The number of seconds Range 5 through 32 768 seconds Default 30 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Configuring LLDP CLI Procedure on page 2344 Understanding 802 1X and LLDP and LLDP MED on J EX...

Page 2451: ...p input gigawords accounting stop interface description access request accounting start accounting stop nas identifier access request accounting on accounting off accounting start accounting stop nas port access request accounting start accounting stop nas port id access request accounting start accounting stop nas port type access request accounting start accounting stop output gigapackets accoun...

Page 2452: ... enabled Options ldap Lightweight Directory Access Protocol none No authentication for specified subscribers radius Remote Authentication Dial In User Service authentication Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on...

Page 2453: ...gured at the edit access profile profile name client client name hierarchy level radius Verify the client using RADIUS authentication services NOTE For subscriber access management you must always specify the radiusmethod Subscriberaccessmanagementdoesnotsupportthepassword keyword the default and authentication fails when no method is specified Required Privilege Level admin To view this statement...

Page 2454: ...s the RADIUS server IP address and other information used for authentication Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Example ConfiguringMACRADIUSAuthenticationonaJ EXSeriesSwitchonpage2286 Example Se...

Page 2455: ...ion Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 show network access aaa statistics authentication on page 2506 Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 authentication whitelist Syntax authentication whitelist mac address interface interface name vlan assignment vlan id vlan name Hierarchy Level e...

Page 2456: ...e Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure an authenticator for 802 1X authentication The statements are explained separately Default No static MAC address or VLAN is configured Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentat...

Page 2457: ...tps Hierarchy Level edit services Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure captive portal to authenticate clients connected to the switch for access to the network The remaining statements are explained separately Default Captive portal is disabled Required Privilege Level routing To view this statement in the configuratio...

Page 2458: ... provided below The ca value statement is explained separately Default Disabled Options value Civic address elements that represent the civic or postal address Values are 0 A code that specifies the language used to describe the location 16 The leading street direction such as N 17 A trailing street suffix such as SW 18 A street suffix or type such as Ave or Platz 19 A house number such as 6450 20...

Page 2459: ...t address and city that is indexed by the ca type code This information is advertised from the switch to the MED and is used during emergency calls to identify the location of the MED Default Disabled Options value Specify a value that correlates to the ca type See ca type for a list of codes and suggested values Required Privilege Level routing To view this statement in the configuration routing ...

Page 2460: ... be advertised from the switch to the MED This information is used during emergency calls to identify the location of the MED The statements are explained separately Default Disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Example Setting Up VoIP with 802 1X ...

Page 2461: ...is used during emergency calls to identify the location of the MED The country code is required when configuring LLDP MED based on location Default Disabled Options code Two letter ISO 3166 country code in capital ASCII letters for example US or DE Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documen...

Page 2462: ...e portal login page for example 2E8B57 sea green Values symbol followed by six characters footer message Text message displayed in the footer bar across the bottom of the captive portal login page Range 1 2047 characters form header bgcolor The hexadecimal color code for the background color of the header bar across the top of the form area of the captive portal login page Values symbol followed b...

Page 2463: ...aptive portal login page Range 1 2047 characters Default User Authentication post authentication url URL to which the users are directed upon successful authentication for example www mycafe com Range 1 255 characters Default The page originally requested by the user Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configurat...

Page 2464: ...ormation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the authentication server Options The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring RADIUS System Accounting Configuring TACAC...

Page 2465: ...ration Related Documentation show dot1x on page 2477 Example Setting Up 802 1X for Single Supplicant or Multiple Supplicant Configurations on a J EX Series Switch on page 2290 Example Setting Up 802 1X in Conference Rooms to Provide Internet Access to Corporate Visitors on a J EX Series Switch on page 2276 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Exampl...

Page 2466: ... and LLDP MED on J EX Series Switches on page 2261 disable Syntax disable Hierarchy Level edit protocols lldp med edit protocols lldp med interface Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable the LLDP MED configuration on the switch or on one or more interfaces Default If you do not configure LLDP MED it is disabled on the swit...

Page 2467: ...tatement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure 802 1X authentication for Port Based Network Access Control 802 1X authentication is supported on interfaces that are members of private VLANs PVLANs The remaining statements are explained separately Default 802 1X is disabled Required Privilege Level routing To view this statement in the configuration ...

Page 2468: ...ol Media Endpoint Discovery LLDP MED configure the Emergency Line Identification Number ELIN as location information Location information is advertised from the switch to the MED device and is used during emergency calls to identify the location of the MED device Default Disabled Options number Configure a 10 digit number area code and telephone number Required Privilege Level routing To view this...

Page 2469: ...thenticate clients The router or switch passes a port type of ethernet in RADIUS attribute 61 NAS Port Type by default This statement specifies a port type of virtual Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring RADIUS Server Options for Subscriber Access Configuring RADIUS Serv...

Page 2470: ...ng ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary interface interface name secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write interval seco...

Page 2471: ... dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip interface all inter...

Page 2472: ...and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwarding on J EX Series Switches on page 2512 Understanding MAC Notification on J EX Series Switches on page 1060 events Syntax events events Hierarchy Level edit system accounting Release Information Statement introduced before Junos OS Release 10 2 for...

Page 2473: ...g stop nas port access request accounting start accounting stop nas port id access request accounting start accounting stop nas port type access request accounting start accounting stop output gigapackets accounting stop output gigawords accounting stop Hierarchy Level edit access profile profile name radius attributes Release Information Statement introduced before Junos OS Release 10 2 for J EX ...

Page 2474: ... port id RADIUS attribute 87 NAS Port Id nas port type RADIUS attribute 61 NAS Port Type output filter Juniper VSA 26 11 Egress Policy Name output gigapackets Juniper VSA 25 43 Acct Output Gigapackets output gigawords RADIUS attribute 53 Acct Output Gigawords RADIUS message type access request RADIUS Access Accept messages accounting off RADIUS Accounting Off messages accounting on RADIUS Accounti...

Page 2475: ...first second after it has detected an LLDP MED device such as an IP telephone Options count Number of advertisements Range 1 through 10 Default 3 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Configuring LLDP MED CLI Procedure on page 2346 Understanding 802 1X and ...

Page 2476: ...For the best effort forwarding class loss priority is typically not carried in a class of service CoS value and random early detection RED drop profiles are more aggressive expedited forwading Provides a low loss low latency low jitter assured bandwidth end to end service network control Provides a typically high priority because it supports protocol control Required Privilege Level routing To vie...

Page 2477: ...ed must already exist on the switch Default None Options vlan id VLAN tag identifier of the guest VLAN vlan name Name of the guest VLAN Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up 802 1X in Conference Rooms to Provide Internet Access to Corporate Visitors on a J EX S...

Page 2478: ...iscarded The default value is 4 or 120 seconds Default Disabled Options number A number used as a multiplier Range 2 through 10 Default 4 or 120 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Configuring LLDP CLI Procedure on page 2344 Understanding 802 1X a...

Page 2479: ...iew this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring RADIUS Server Parameters for Subscriber Access immediate update Syntax immediate update Hierarchy Level edit access profile profile name accounting Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the ...

Page 2480: ...ntication interface names List of names of interfaces to configure for 802 1X authentication The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show dot1x on page 2477 Example Setting Up 802 1X for Single Supplicant or Multiple Supplicant Conf...

Page 2481: ...ADIUS attribute 87 NAS Port Id By default the router or switch includes both the subinterface and the adapter in the interface description Options adapter Include only the adapter in the interface description sub interface Include only the subinterface in the interface description Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the ...

Page 2482: ... interfaces Options all All interfaces to be configured for captive portal authentication interface names List of names of interfaces to be configured for captive portal authentication The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example...

Page 2483: ... Default None Options all All interfaces on the switch interface name Name of a specific interface The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring LLDP CLI Procedure on page 2344 Understanding 802 1X and LLDP and LLDP MED on J EX ...

Page 2484: ...t enabled Options all All interfaces on the switch interface name Name of a specific interface The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch o...

Page 2485: ... List of interfaces Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show dot1x static mac address on page 2484 Example Configuring Static MAC Bypass of Authentication on a J EX Series Switch on page 2281 Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 ...

Page 2486: ...ccess ports Enable VoIP on all interfaces on a specific interface or on all access ports Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Example Configuring VoIP on a J EX Series Switch Without Including ...

Page 2487: ...ore Junos OS Release 10 2 for J EX Series switches Description Configure Link Layer Discovery Protocol LLDP The switch uses LLDP to advertise its identity and capabilities on a LAN as well as receive information about other network devices LLDP is defined in the IEEE standard 802 1AB 2005 The statements are explained separately Default LLDP is enabled Required Privilege Level routing To view this ...

Page 2488: ...e changes If the interval value is 0 trap notifications of database changes are disabled Default SNMP trap notifications of LLDP database changes are disabled Options seconds Interval between trap notifications about LLDP database changes Range 0 through 3600 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Rela...

Page 2489: ...device discovery of VoIP telephones and to create location databases for these telephone locations for emergency services LLDP MED is defined in the standard ANSI TIA 1057 by the Telecommunications Industry Association TIA The statements are explained separately Default Disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to th...

Page 2490: ...on information is advertised from the switch to the MED This information is used during emergency calls to identify the location of the MED The statements are explained separately Default Disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Example Setting Up VoI...

Page 2491: ...e to a supplicant the switch resets the interface on which the supplicant is authenticated If the interface is configured for multiple supplicant mode the switch resets all the supplicants on the specified interface This option takes effect only when the restrict option is also set restrict Optional Restricts authentication to MAC RADIUS only When mac radius restrict is configured the switch drops...

Page 2492: ... and LLDP MED on J EX Series Switches on page 2261 J EX Series Switches Interfaces Overview on page 863 maximum requests Syntax maximum requests number Hierarchy Level edit protocols dot1x authenticator interface all interface names Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description For 802 1X authentication configure the maximum number of ti...

Page 2493: ...is attribute is used for authentication and accounting requests Options identifier value String to use for authentication and accounting requests Range 1 to 64 characters Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Configuring RADIUS Server Options for Subscriber Access Configuring RADIUS ...

Page 2494: ...e NAS Port attribute Options adapter width width Number of bits in the adapter field port width width Number of bits in the port field slot width width Number of bits in the slot field stacked vlan width width Number of bits in the SVLAN ID field vlan width width Number of bits in the VLAN ID field Required Privilege Level admin To view this statement in the configuration admin control To add this...

Page 2495: ...on disables reauthentication Default Not disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring 802 1X Interface Settings CLI Procedure on page 2331 Configuring 802 1X Authentication J Web Procedure on page 2332 Understanding Authentication onJ EX Series Switches on page 2248...

Page 2496: ...ort stacked format Hierarchy Level edit access profile profile name radius Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the options used by RADIUS authentication and accounting servers The statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this st...

Page 2497: ...onnecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Configuring 802 1X RADIUS Accounting CLI Procedure on page 2339 order Syntax order accounting method Hierarchy Level edit access profile profile name accounting Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Set the order in which the Junos OS tries different accoun...

Page 2498: ...tch Interaction with RADIUS Servers Configuring Authentication and Accounting Parameters for Subscriber Access port RADIUS Server Syntax port port number Hierarchy Level edit system radius server address edit system accounting destination radius server address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the port number on whi...

Page 2499: ...witches Description Configure the port number on which to contact the TACACS server Options number Port number on which to contact the TACACS server Default 49 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring TACACS System Accounting 2427 Chapter 85 Configuration Statements for Ac...

Page 2500: ...zation and accounting AAA configuration that aids in handling AAA requests including the authentication method and order AAA server addresses and AAA accounting Default Not enabled Options profile name Profile name of up to 32 characters The remaining statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement t...

Page 2501: ...mentation show lldp on page 2489 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 ptopo configuration trap interval Syntax ptopo configuration trap interval seconds Hierarchy Level edit protocols lldp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify how often SNMP trap notifications are sent regarding ...

Page 2502: ...ss aaa statistics authentication on page 2506 Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 quiet period Captive Portal Syntax quiet period seconds Hierarchy Level edit services captive portal interface all interface names Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure time in seconds after a...

Page 2503: ...a round robin fashion until a valid response is received from one of the servers or until all the configured retry limits are reached The statements are explained separately Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on...

Page 2504: ...nting stop input gigapackets accounting stop input gigawords accounting stop interface description access request accounting start accounting stop nas identifier access request accounting on accounting off accounting start accounting stop nas port access request accounting start accounting stop nas port id access request accounting start accounting stop nas port type access request accounting star...

Page 2505: ...criber Access RADIUS Server Options for Subscriber Access radius Syntax radius server server address accounting port port number secret password source address address retry number timeout seconds Hierarchy Level edit system accounting destination Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the RADIUS accounting server Option...

Page 2506: ...e servers are tried in order and in a round robin fashion until a valid response is received from one of the servers or until all the configured retry limits are reached Options server address Address of the RADIUS authentication server The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement ...

Page 2507: ...periodic reauthentication of the supplicant interval seconds Sets the periodic reauthentication time interval The range is 1 through 65 535 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring 802 1X Interface Settings CLI Procedure on page 2331 Configuring 802 1X Authentica...

Page 2508: ...onfiguring 802 1X Authentication J Web Procedure on page 2332 Understanding Authentication on J EX Series Switches on page 2248 retries Captive Portal Syntax retries number of tries Hierarchy Level edit services captive portal interface all interface names Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the number of times the us...

Page 2509: ...ions attempts Number of times that the router is allowed to attempt to contact a RADIUS server Range 1 through 10 Default 3 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring Authentication and Accounting Parameters for Subscriber Access Configuring Router or Switch Interaction with...

Page 2510: ...revert interval interval Hierarchy Level edit access profile profile name radius options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the amount of time the router or switch waits after a server has become unreachable The router or switch rechecks the connection to the server when the specified interval expires If the server i...

Page 2511: ...me radius server server address edit access radius disconnect client address edit access radius server server address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the password to use with the RADIUS server The secret password used by the local router or switch must match that used by the server Options password Password to use...

Page 2512: ...ing RADIUS Authentication Configuring TACACS Authentication Configuring TACACS System Accounting Configuring RADIUS System Accounting secure authentication Syntax secure authentication http https Hierarchy Level edit services captive portal Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable HTTP or HTTPS access on the captive portal in...

Page 2513: ...ment to the configuration Related Documentation Configuring RADIUS System Accounting server TACACS Accounting Syntax server server address port port number secret password single connection timeout seconds Hierarchy Level edit system accounting destination tacplus Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure TACACS logging The...

Page 2514: ...Move supplicant on the interface to the VLAN specified by this numeric identifier This action is allowed only if it is the first supplicant connecting to the interface If an authenticated supplicant is already connected then the supplicant is not moved to the VLAN and is not authenticated vlan name Move supplicant on the interface to the VLAN specified by this name This action is allowed only if i...

Page 2515: ...e or VLAN ID sent by a RADIUS server as part of the EAPOL Access Reject message is ignored When you specify the VLAN ID or VLAN name the VLAN must already be configured on the switch Default None Options vlan id Numeric identifier of the VLAN to which the supplicant is moved vlan name Name of the VLAN to which the supplicant is moved Required Privilege Level routing To view this statement in the c...

Page 2516: ...rver before timing out and invoking the server fail action Default 30 seconds Options seconds Number of seconds Range 1 through 60 seconds Default 30 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show dot1x on page 2477 clear dot1x on page 2468 Example Connecting a RADIUS Server ...

Page 2517: ... Up Captive Portal Authentication on a J EX Series Switch on page 2323 Configuring Captive Portal Authentication CLI Procedure on page 2350 session expiry Syntax session expiry seconds Hierarchy Level edit services captive portal interface all interface names Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the maximum duration in...

Page 2518: ...server address edit access profile profile name radius server server address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure a source address for each configured RADIUS server Each RADIUS request sent to a RADIUS server uses the specified source address Options source address A valid IPv4 address configured on one of the router o...

Page 2519: ...in system log messages that are directed to a remote machine Options source address A valid IP address configured on one of the router or switch interfaces For system logging the address is recorded as the message source in messages sent to the remote machines specified in all host hostname statements at the edit system syslog hierarchy level but not for messages directed to the other Routing Engi...

Page 2520: ...ntication is done for the supplicant You can optionally configure the VLAN that the supplicant is moved to or the interfaces on which the MAC address can gain access from Options mac address The MAC address of the device for which 802 1X authentication should be bypassed and the device permitted access to the port The remaining statements are explained separately Required Privilege Level routing T...

Page 2521: ...or the sessions being managed by AAA Options time Collect uptime statistics only volume time Collect both volume and uptime statistics This option is not available for Mobile IP Required Privilege Level admin To view this statement in the configuration admin control To add this statement to the configuration Related Documentation Mobile IP Home Agent Elements and Behavior Configuring Authenticatio...

Page 2522: ...tor port The host must be directly connected to the switch multiple Authenticates multiple clients individually on one authenticator port You can configure the number of clients per port If you also configure a maximum number of devices that can be connected to a port through port security settings the lower of the configured values is used to determine the maximum number of clients allowed per po...

Page 2523: ... the supplicant before resending the request Default 30 seconds Options seconds Number of seconds Range 1 through 60 seconds Default 30 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation supplicant on page 2450 Example Setting Up 802 1X for Single Supplicant or Multiple Supplicant Con...

Page 2524: ... Configure the Terminal Access Controller Access Control System Plus TACACS Options server address Address of the TACACS authentication server The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring TACACS System Accounting 2452 Dell Powe...

Page 2525: ...EX Series switches Description Configure the amount of time that the local router or switch waits to receive a response from a RADIUS or TACACS server Options seconds Amount of time to wait Range 1 through 90 seconds Default 3 seconds Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuri...

Page 2526: ...US server Options seconds Amount of time to wait Range 1 through 90 seconds Default 3 seconds Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Configuring Router or Switch Interaction with RADIUS Servers Configuring Authentication and Accounting Parameters for Subscriber Access Example Config...

Page 2527: ...y gigabytes number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the sizeoption Range 2 through 1000 Default 3 files flag flag Tracing operation to perform To specify more than one tracing operation include multiple flag statements You can include the following flags all All tracing operat...

Page 2528: ... size with the files option Syntax xk to specify KB xm to specify MB or xg to specify gigabyte Range 10 KB through 1gigabyte Default 128 KB world readable Optional Enable unrestricted file access Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show lldp on page 2489 Configuring 802 1X Inte...

Page 2529: ...mber of files you also must specify a maximum file size with the size option Range 2 through 1000 Default 3 files flag flag Tracing operation to perform To specify more than one tracing operation include multiple flag statements You can include the following flags all All tracing operations config Trace configuration operations packet Trace packet events rtsock Trace routing socket operations matc...

Page 2530: ...mation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the delay between 2 successive LLDP advertisements Default Disabled Options seconds Number of seconds between two successive LLDP advertisements Range 1 through 8192 seconds Default 2 Required Privilege Level routing To view this statement in the configuration routing control To add this stateme...

Page 2531: ...uration Related Documentation Configuring 802 1X Interface Settings CLI Procedure on page 2331 802 1X for J EX Series Switches Overview on page 2253 update interval Syntax update interval minutes Hierarchy Level edit access profile profile name accounting Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the amount of time that the...

Page 2532: ...page 2281 Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 Understanding Static MAC Bypass of Authentication on J EX Series Switches Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 Configuring Captive Portal Authentication CLI Procedure on page 2350 vlan nas port stacked format Syntax vlan nas port stacked format Hierarchy ...

Page 2533: ...g identifier Range 0 through 4095 Tags 0 and 4095 are reserved by the Junos OS and you should not configure them untagged Allow untagged VLAN traffic Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Exampl...

Page 2534: ...atements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Example Configuring VoIP on a J EX Series Switch Without Including 802 1X Authentication on page 2309 Example Configuring ...

Page 2535: ...cation of the MED Options 0 and 1 should not be used unless it is known that the DHCP client is in close physical proximity to the server or network element Default 1 Options number Location 0 Location of the DHCP server 1 Location of a network element believed to be closest to the client 2 Location of the client Required Privilege Level routing To view this statement in the configuration routing ...

Page 2536: ...2464 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2537: ...CHAPTER 86 Operational Commands for 802 1X 2465 ...

Page 2538: ...entication failed users on page 2471 show captive portal interface on page 2474 show captive portal firewall on page 2472 Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 Configuring Captive Portal Authentication CLI Procedure on page 2350 List of Sample Output clear captive portal interface on page 2467 clear captive portal interface on page 2467 clear captive...

Page 2539: ...granted to it before the RADIUS server timeout occurred State The MAC address of the connected client on the interface MAC address Users connected to the captive portal interface User clear captive portal interface user switch clear captive portal interface ge 0 0 3 0 clear captive portal interface clear captive portal interface user switch clear captive portal interface Captive Portal Information...

Page 2540: ... Reauthentication due and Reauthentication interval will be about the same Options all Optional Clears all ports or specific ports or specific MAC addresses interface interface names Optional Resets the authentication state of all supplicants connected to the specified ports when the port is an authenticator or for itself when the port is a supplicant mac address mac addresses Resets the authentic...

Page 2541: ...nformation from one or more selected interfaces Required Privilege Level view Related Documentation show lldp on page 2489 Configuring LLDP CLI Procedure on page 2344 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 List of Sample Output clear lldp neighbors on page 2469 clear lldp neighbors interface ge 0 1 1 0 on page 2469 clear lldp neighbors user switch clear lld...

Page 2542: ...rfaces Required Privilege Level view Related Documentation Configuring LLDP CLI Procedure on page 2344 Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 List of Sample Output clear lldp statistics on page 2470 clear lldp statistics interface ge 0 1 1 0 on page 2470 clear lldp statistics user switch clear lldp statistics clear lldp statistics clear lldp statistics inte...

Page 2543: ...hentication failed users on page 2471 Output Fields Table 305 on page 2471 lists the output fields for the show captive portal authentication failed users command Output fields are listed in the approximate order in which they appear Table 305 show captive portal authentication failed users Output Fields Level of Output Field Description Field Name all The MAC address configured to bypass captive ...

Page 2544: ... Captive Portal Authentication on a J EX Series Switch on page 2323 Configuring Captive Portal Authentication CLI Procedure on page 2350 List of Sample Output show captive portal firewall brief on page 2472 show captive portal firewall ge 0 0 10 0 on page 2472 show captive portal firewall on page 2473 Output Fields Output fields for the show captive portal firewall command include any action modif...

Page 2545: ...x_ge 0 0 0_CP_https 0 0 dot1x_ge 0 0 0_CP_t_dns 0 0 dot1x_ge 0 0 0_CP_u_dns 0 0 Filter name dot1x_ge 0 0 1 Counters Name Bytes Packets dot1x_ge 0 0 1_CP_arp 0 0 dot1x_ge 0 0 1_CP_dhcp 0 0 dot1x_ge 0 0 1_CP_http 0 0 dot1x_ge 0 0 1_CP_https 0 0 dot1x_ge 0 0 1_CP_t_dns 0 0 dot1x_ge 0 0 1_CP_u_dns 0 0 Filter name dot1x_ge 0 0 10 Counters Name Bytes Packets dot1x_ge 0 0 10_CP_arp 7616 119 dot1x_ge 0 0 ...

Page 2546: ...ce Required Privilege Level view Related Documentation show captive portal authentication failed users on page 2471 show captive portal firewall on page 2472 captive portal on page 2385 clear captive portal on page 2466 Example Setting Up Captive Portal Authentication on a J EX Series Switch on page 2323 Configuring Captive Portal Authentication CLI Procedure on page 2350 List of Sample Output sho...

Page 2547: ...pplicant mode detail Number of times the user can attempt to submit authentication information Number of retries detail Time in seconds after a user exceeds the maximum number of retries before they can attempt to authenticate Quiet period detail Time in seconds that a client can be idle before the session expires Configured CP session timeout detail Time in seconds that an interface will wait for...

Page 2548: ...conds Server timeout 15 seconds Number of connected supplicants 0 ge 0 0 10 0 Supplicant mode Multiple Number of retries 10 Quiet period 60 seconds Configured CP session timeout 3600 seconds Server timeout 15 seconds Number of connected supplicants 1 Supplicant No User 00 30 48 8c 66 bd Operational state Connecting Dynamic CP Session Timeout 0 seconds CP Session Expiration due in 0 seconds 2476 De...

Page 2549: ...ble to a J EX Series Switch on page 2271 Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Example ConfiguringMACRADIUSAuthenticationonaJ EXSeriesSwitchonpage2286 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Configuring 802 1X RADIUS Accounting CLI Procedure on page 2339 Filtering 802 1X Supplicants Using RADIUS Server Attri...

Page 2550: ...ed on an interface whose VLAN membership has been set to dynamic Administrative state detail The mode for the supplicant single Authenticates only the first supplicant All other supplicants who connect later to the port are allowed full access without any further authentication They effectively piggyback on the first supplicant s authentication single secure Allows only one supplicant to connect t...

Page 2551: ...cation server before timing out The default value is 30 seconds The range is 1 through 60 seconds Server timeout detail The maximum number of retransmission times of an EAPOL request packet to the supplicant before the authentication session times out The default value is 2 The range is 1 through 10 Maximum EAPOL requests detail The number of non 802 1X clients granted access to the LAN by means o...

Page 2552: ... RADIUS servers time out during reauthentication previouslyauthenticatedsupplicantsarereauthenticated butnewsupplicants are denied LAN access Server fail VLAN A supplicant is configured to be moved to a specified VLAN if the RADIUS server is unavailable to reauthenticate the supplicant The VLAN must already exist on the switch Authentication method detail The VLAN to which the supplicant is connec...

Page 2553: ...30 seconds Server timeout 30 seconds Maximum EAPOL requests 1 Guest VLAN member not configured Number of connected supplicants 1 Supplicant abc 00 30 48 8C 66 BD Operational state Authenticated Authentication method Radius Authenticated VLAN v200 Reauthentication due in 17 seconds 2481 Chapter 86 Operational Commands for 802 1X ...

Page 2554: ...308onpage2482liststheoutputfieldsfortheshowdot1xauthentication failed users command Output fields are listed in the approximate order in which they appear Table 308 show dot1x authentication failed users Output Fields Level of Output Field Description Field Name all The MAC address configured to bypass 802 1X authentication Interface all The MAC address configured statically on the interface MAC a...

Page 2555: ... specified interface Required Privilege Level view Related Documentation clear dot1x on page 2468 Example Applying Firewall Filters to Multiple Supplicants on 802 1X Enabled Interfaces on page 2318 List of Sample Output show dot1x firewall on page 2483 show dot1x firewall on page 2483 Output Fields Output fields include any action modifier that is specified in firewall filters show dot1x firewall ...

Page 2556: ...on page 2484 Output Fields Table 309 on page 2484 lists the output fields for the show dot1x static mac address command Output fields are listed in the approximate order in which they appear Table 309 show dot1x static mac address Output Fields Level of Output Field Description Field Name all The MAC address of the device that is configured to bypass 802 1X authentication MAC address all The name ...

Page 2557: ...00 00 00 12 24 12 support ge 0 0 1 0 00 00 00 72 30 58 support ge 0 0 1 0 2485 Chapter 86 Operational Commands for 802 1X ...

Page 2558: ...thernet switching interfaces on page 2487 show ethernet switching interfaces ge 0 0 15 brief on page 2488 show ethernet switching interfaces ge 0 0 2 detail Blocked by RTG rtggroup on page 2488 show ethernet switching interfaces ge 0 0 15 detail Blocked by STP on page 2488 show ethernet switching interfaces ge 0 0 17 detail Disabled by bpdu control on page 2488 showethernet switchinginterfacesdeta...

Page 2559: ...ct The interface is temporarily disabled due to a storm control error The disabled interface is automatically restored to service when the disable timeout expires Blocking detail The VLAN index internal to the Junos OS Index detail The C VLAN to S VLAN mapping information dot1q tunneled The interface maps all traffic to the S VLAN all in one bundling native The interface maps untagged and priority...

Page 2560: ...0 State up Port mode Trunk interfaces ge 0 0 15 VLAN membership detail Blocked by STP vlan100 802 1Q Tag 100 tagged msti id 0 blocked by STP vlan200 802 1Q Tag 200 tagged msti id 0 blocked by STP Number of MACs learned on IFL 0 show ethernet switching user switch show ethernet switching interfaces ge 0 0 17 detail Interface ge 0 0 17 0 Index 71 State down Port mode Trunk interfaces ge 0 0 17 VLAN ...

Page 2561: ...ble 311 on page 2489 lists the output fields for the showlldp command Output fields are listed in the approximate order in which they appear Table 311 show lldp Output Fields Level of Output Field Description Field Name All levels LLDP operating state The state can be enabled or disabled NOTE If a VLAN that has been configured for untagged packets on an interface also has Layer 2 protocol tunnelin...

Page 2562: ...r of advertisements sent from a switch to a device such as a VoIP telephone when the device is first detected by the switch These increased advertisements are temporary After a device and a switch exchange information and can communicate advertisements are reduced to one per second This value is set by the fast start configuration statement LLDP MED fast start count All levels Name of the interfac...

Page 2563: ...tises if the interface is aggregated and its aggregated interface ID Maximum frame size TLV that advertises the maximum transmission unit MTU of the interface sending LLDP frames Port VLAN tag TLV that advertises the VLAN tag configured on the interface Port VLAN name TLV that advertises the VLAN name configured on the interface Supported LLDP 802 TLVs detail LLDP MED TLVs supported on the switch ...

Page 2564: ...3 Packets Interface Parent Interface LLDP LLDP MED Neighbor count all Enabled 8 me0 0 Disabled 0 Interface Parent Interface Vlan id Vlan name xe 3 0 0 0 ae31 0 100 v100 xe 3 0 0 0 ae31 0 101 v101 xe 3 0 0 0 ae31 0 4000 v4000 xe 3 0 1 0 ae31 0 100 v100 xe 3 0 1 0 ae31 0 101 v101 xe 3 0 1 0 ae31 0 4000 v4000 xe 3 0 2 0 ae31 0 100 v100 xe 3 0 2 0 ae31 0 101 v101 xe 3 0 2 0 ae31 0 4000 v4000 LLDP basi...

Page 2565: ...D MAC address associated with the switch System name User configured name of the switch System descr System description containing information about the switch model and the current software image running on the switch This information is taken from the software and is not configurable LLDP Local Information details Capabilities such as bridge or router that are supported or enabled on the system ...

Page 2566: ...Pv4 Port ID 34 Port ID Subtype local 7 Port Subtype ifIndex 1 Interface name Parent Interface Interface ID Interface description Status Tunneling me0 0 34 Down Disabled xe 3 0 0 0 ae31 0 769 xe 3 0 0 0 Up Disabled xe 3 0 1 0 ae31 0 770 xe 3 0 1 0 Up Disabled xe 3 0 2 0 ae31 0 771 xe 3 0 2 0 Up Disabled xe 3 0 3 0 ae31 0 772 xe 3 0 3 0 Up Disabled xe 3 0 4 0 ae31 0 577 xe 3 0 4 0 Up Disabled xe 3 0...

Page 2567: ...age 2498 Output Fields Table313onpage2495liststheoutputfieldsfortheshowlldpneighbors command Output fields are listed in the approximate order in which they appear Table 313 show lldp neighbors Output Fields Field Description Field Name List of local interfaces for which neighbor information is available Local Interface List of aggregated Ethernet interfaces if any to which the local interfaces be...

Page 2568: ... Type of chassis identifier supplied such as MAC address appears when the interface option is used Chassis type Chassis identifier of the chassis type listed appears when the interface option is used Chassis ID Type of port identifier supplied such as locally assigned appears when the interface option is used Port type Port identifier of the port type listed appears when the interface option is us...

Page 2569: ...ewyork31 xe 3 0 6 0 ae31 0 b0 c6 9a 63 80 40 xe 0 0 2 0 newyork31 xe 3 0 7 0 ae31 0 b0 c6 9a 63 80 40 xe 0 0 3 0 newyork31 xe 3 0 0 0 ae31 0 b0 c6 9a 63 80 40 xe 0 1 0 0 newyork31 xe 3 0 1 0 ae31 0 b0 c6 9a 63 80 40 xe 0 1 1 0 newyork31 xe 3 0 2 0 ae31 0 b0 c6 9a 63 80 40 xe 0 1 2 0 newyork31 xe 3 0 3 0 ae31 0 b0 c6 9a 63 80 40 xe 0 1 3 0 newyork31 show lldp neighbors interface xe 3 0 4 0 user swi...

Page 2570: ...13031 Organization Info OUI 0 18 15 Subtype 3 Index 7 Info 0FA0057634303030 show lldp neighbors interface for a VoIP user switch show lldp neighbors interface ge 0 0 0 0 LLDP Neighbor Information Avaya Telephone with LLDP MED Support Local Information Index 20 Time to live 120 Time mark Thu Apr 15 22 26 22 2010 Age 16 secs Local Interface ge 0 0 0 0 Parent Interface Local Port ID 517 Ageout Count ...

Page 2571: ...Avaya MED Model name 4610 Organization Info OUI 0 18 15 Subtype 1 Index 1 Info 036CA00010 Organization Info OUI 0 18 15 Subtype 1 Index 2 Info 002303 Organization Info OUI 0 18 15 Subtype 2 Index 3 Info 014001AE Organization Info OUI 0 18 15 Subtype 5 Index 4 Info 3436313044303141 Organization Info OUI 0 18 15 Subtype 6 Index 5 Info 62313064303162325F392E62696E Organization Info OUI 0 18 15 Subtyp...

Page 2572: ...tion Info OUI 0 18 15 Subtype 3 Index 11 Info 00000000 Organization Info OUI 0 18 15 Subtype 4 Index 12 Info 000000000000000000000000 Organization Info OUI 0 18 15 Subtype 5 Index 13 Info 00000000 Organization Info OUI 0 18 15 Subtype 6 Index 14 Info 00000000 Organization Info OUI 0 18 15 Subtype 7 Index 15 Info 01 2500 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos O...

Page 2573: ...escribestheoutputfieldsfortheshowlldpremote global statistics command Output fields are listed in the approximate order in which they appear Table 314 show lldp remote global statistics Output Fields Field Description Field Name Information about remote database table counters LLDP Remote Database Table Counters Time elapsed between LLDP agent startup and the last change to the remote database tab...

Page 2574: ...tics user host show lldp remote global statistics LLDP Remote Database Table Counters show lldp remote global statistics LastchangeTime Inserts Deletes Drops Ageouts 00 00 76 76 sec 192 0 0 0 2502 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2575: ...lldpstatistics command Output fields are listed in the approximate order in which they appear Table 315 show lldp statistics Output Fields Field Description Field Name Name of the interface Interface Name of the aggregated Ethernet interface if any to which the interface belongs NOTE Because LLDP packets are transmitted and received on member interfaces only statistics are available only for the m...

Page 2576: ...96 0 0 xe 3 0 7 0 ae31 0 1597 0 0 xe 5 0 6 0 0 0 0 xe 5 0 7 0 0 0 0 Discarded TLVs Transmitted Untransmitted 0 3044 1 0 3044 1 0 3044 1 0 3044 1 0 3075 1 0 3075 1 0 3075 1 0 3075 1 0 17312 0 0 17312 0 show lldp statistics interface xe 3 0 0 0 user switch show lldp statistics interface xe 3 0 0 0 Interface Parent Interface Received Unknown TLVs With Errors xe 3 0 0 0 ae31 0 1566 0 0 Discarded TLVs ...

Page 2577: ...r in which they appear Table 316 show network access aaa statistics accounting Output Fields Field Description Field Name The number of accounting request packets sent from a switch to a RADIUS accounting server Requests received The number of accounting response failure packets sent from the RADIUS accounting server to the switch AccountingResponse failures The number of accounting response succe...

Page 2578: ...aa statistics authentication command Output fields are listed in the approximate order in which they appear Table 317 show network access aaa statistics authentication Output Fields Field Description Field Name The number of authentication requests received by the switch Requests received The number of authentication accepts received by the RADIUS server Accepts The number authentication rejects s...

Page 2579: ... requests command Output fields are listed in the approximate order in which they appear Table 318 show network access aaa statistics dynamic requests Output Fields Field Description Field Name The number of dynamic requests received by the RADIUS server Requests received The number of dynamic requests successfully processed by the RADIUS server Processed successfully The number of errors that occ...

Page 2580: ...2508 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2581: ...1 Example Rate Limiting Configuration on page 2513 Configuring Rate Limiting on page 2515 Verifying Rate Limiting Configuration on page 2517 Configuration Statements for Rate Limiting on page 2519 Operational Mode Commands for Rate Limiting on page 2535 2509 ...

Page 2582: ...2510 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2583: ... action shutdown statement or the port error disable statement when the storm control level is exceeded The factory default configuration enables storm control on all switch interfaces with the storm control level set to 80 percent of the combined broadcast and unknown unicast streams You can change the storm control level for an interface by specifying a bandwidth value for the combined broadcast...

Page 2584: ... with unknown destination MAC addresses By default the switch floods these unicast packets that are traveling in a VLAN to all interfaces that are members of the VLAN Forwarding this type of traffic to interfaces on the switch can trigger a security issue The LAN is suddenly flooded with packets creating unnecessary traffic that leads to poor network performance or even a complete loss of network ...

Page 2585: ...EX Series switch Requirements on page 2513 Overview and Topology on page 2513 Configuration on page 2514 Requirements This example uses the following hardware and software components One J EX Series switch Overview and Topology A storm is generated when messages are broadcast on a network and each message prompts a receiving node to respond by broadcasting its own messages on the network This in t...

Page 2586: ...ms If broadcast traffic and unknown unicast traffic exceeds this level the switch drops packets for the controlled traffic types to prevent a network outage Configuration CLI Quick Configuration To quickly configure storm control based on the traffic rate in kilobits per second of the combined broadcast and unknown unicast streams copy the following command and paste it into the switch terminal wi...

Page 2587: ...e Ethernet switching table You can configure each VLAN to divert unknown unicast traffic to different trunk interfaces or use one trunk interface for multiple VLANs To configure unknown unicast forwarding options using the CLI NOTE Before you can configure unknown unicast forwarding within a VLAN you must first configure that VLAN 1 Configure unknown unicast forwarding for a specific VLAN here the...

Page 2588: ... limiting MAC move limiting or storm control errors NOTE Youmustspecifythedisabletimeoutvaluefortheinterfacestorecover automatically There is no default disable timeout If you do not specify a timeout value you need to use the clear ethernet switching port error command to clear the errors and restore the interfaces or the specified interface to service To configure autorecovery from the disabled ...

Page 2589: ...ns unknown unicast forwarding vlan v1 interface ge 0 0 7 0 Display the Ethernet switching table user switch show ethernet switching table vlan v1 Ethernet switching table 3 unicast entries VLAN MAC address Type Age Interfaces v1 Flood All members v1 00 01 09 00 00 00 Learn 24 ge 0 0 7 0 v1 00 11 09 00 01 00 Learn 37 ge 0 0 3 0 Meaning The sample output from the show configuration ethernet switchin...

Page 2590: ...nblocked ge 0 0 16 0 down default unblocked ge 0 0 17 0 down default unblocked ge 0 0 18 0 down default unblocked ge 0 0 19 0 up T111 unblocked ge 0 1 0 0 down default unblocked ge 0 1 1 0 down default unblocked ge 0 1 2 0 down default unblocked ge 0 1 3 0 down default unblocked Meaning The sample output from the show ethernet switching interfaces command shows that three of the down interfaces sp...

Page 2591: ...priority ratio number input ingress interface all interface name vlan vlan id vlan name egress interface all interface name output interface interface name vlan vlan id vlan name bpdu block disable timeout timeout interface all interface name dot1q tunneling ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time...

Page 2592: ... no arp inspection dhcp option82 circuit id prefix hostname use interface description use vlan id remote id prefix hostname mac none use interface description use string string vendor id string examine dhcp no examine dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unic...

Page 2593: ...5 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwar...

Page 2594: ... condition You must issue the clear ethernet switching port error command to clear the port error and restore the interfaces to service Default The action shutdown option is not enabled When the storm control level is exceeded the switch drops unknown unicast and broadcast messages on the specified interfaces Required Privilege Level routing To view this statement in the configuration routing cont...

Page 2595: ...s a storm control level of 15000 Kbps Thus the storm control level on ae1 allows a traffic rate of up to 30000 Kbps of combined broadcast and unknown unicast traffic Default If you omit the bandwidth statement when you configure storm control on an interface the storm control level defaults to 80 percent of the combined broadcast and unknown unicast streams Options bandwidth Traffic rate in kilobi...

Page 2596: ...led state remains in effect The disabled interface is automatically restored to service when the specified timeout is reached Range 10 through 3600 seconds Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Configuring Port Security CLI Procedure on page 2626 Configuring Autorecovery From the...

Page 2597: ...dot1q tunneling ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary interface interface name secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write ...

Page 2598: ...rce guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip interface all interface name ac...

Page 2599: ...e 3245 Port Security for J EX Series Switches Overview on page 2545 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX...

Page 2600: ...bined broadcast and unknown unicast streams Options all All interfaces The storm control settings configured with the all option affect only those interfaces that have not been individually configured for storm control interface name Name of an interface The storm control settings configured with the interface name option override any settings configured with the all option The remaining statement...

Page 2601: ...Forwarding on J EX Series Switches on page 2512 no broadcast Syntax no broadcast Hierarchy Level edit ethernet switching options storm control interface all interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable storm control for broadcast traffic for the specified interface or for all interaces Default Storm control is ena...

Page 2602: ...ace or for all interfaces Default Storm control is enabled for both unknown unicast traffic and broadcast traffic Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Storm Control to Prevent Network Outages on J EX Series Switches on page 2513 Understanding Storm Control on...

Page 2603: ... enable port error disable the switch disables rather than shuts down the interface when the MAC address limit is reached If you have enabled mac move limit with the shutdown option and you enable port error disable the switch disables rather than shuts down the interface when the maximum number of moves to a new interface is reached If you have enabled storm control with the action shutdown optio...

Page 2604: ...nfigure storm control on the switch The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Storm Control to Prevent Network Outages on J EX Series Switches on page 2513 Understanding Storm Control on J EX Series Switches on pag...

Page 2605: ...arding within a VLAN you must first configure that VLAN The remaining statements are explained separately Default Unknown unicast packets are flooded to all interfaces that belong to the same VLAN Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show vlans on page 1263 show ethernet switchi...

Page 2606: ...stem including VLANs that are configured but not committed type after vlan or vlans in your configuration mode command line Note that only one VLAN is displayed for a VLAN range Options all All VLANs vlan name Name of a VLAN Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation show vlans on pag...

Page 2607: ...CHAPTER 92 Operational Mode Commands for Rate Limiting 2535 ...

Page 2608: ...thernet switching interfaces on page 2537 show ethernet switching interfaces ge 0 0 15 brief on page 2538 show ethernet switching interfaces ge 0 0 2 detail Blocked by RTG rtggroup on page 2538 show ethernet switching interfaces ge 0 0 15 detail Blocked by STP on page 2538 show ethernet switching interfaces ge 0 0 17 detail Disabled by bpdu control on page 2538 showethernet switchinginterfacesdeta...

Page 2609: ... interface is temporarily disabled due to a storm control error The disabled interface is automatically restored to service when the disable timeout expires Blocking detail The VLAN index internal to the Junos OS Index detail The C VLAN to S VLAN mapping information dot1q tunneled The interface maps all traffic to the S VLAN all in one bundling native The interface maps untagged and priority tagge...

Page 2610: ...0 State up Port mode Trunk interfaces ge 0 0 15 VLAN membership detail Blocked by STP vlan100 802 1Q Tag 100 tagged msti id 0 blocked by STP vlan200 802 1Q Tag 200 tagged msti id 0 blocked by STP Number of MACs learned on IFL 0 show ethernet switching user switch show ethernet switching interfaces ge 0 0 17 detail Interface ge 0 0 17 0 Index 71 State down Port mode Trunk interfaces ge 0 0 17 VLAN ...

Page 2611: ...quired Privilege Level view Related Documentation Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 List of Sample Output show ethernet ...

Page 2612: ...ching table Ethernet switching table 57 entries 17 learned VLAN MAC address Type Age Interfaces F2 Flood All members F2 00 00 05 00 00 03 Learn 0 ge 0 0 44 0 F2 00 19 e2 50 7d e0 Static Router Linux Flood All members Linux 00 19 e2 50 7d e0 Static Router Linux 00 30 48 90 54 89 Learn 0 ge 0 0 47 0 T1 Flood All members T1 00 00 05 00 00 01 Learn 0 ge 0 0 46 0 T1 00 00 5e 00 01 00 Static Router T1 0...

Page 2613: ...111 00 19 e2 50 ac 00 Learn 0 ge 0 0 15 0 T2 Flood All members T2 00 00 5e 00 01 01 Static Router T2 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T2 00 19 e2 50 7d e0 Static Router T3 Flood All members T3 00 00 5e 00 01 02 Static Router T3 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T3 00 19 e2 50 7d e0 Static Router T4 Flood All members T4 00 00 5e 00 01 03 Static Router T4 00 19 e2 50 63 e0 Learn 0 ge 0 0 46...

Page 2614: ...ge 0 0 10 0 ge 0 0 0 0 Type Flood Nexthop index 567 VLAN v1 Tag 10 MAC 00 21 59 c6 93 22 Interface Router Type Static Nexthop index 0 VLAN v1 Tag 10 MAC 00 21 59 c9 9a 4e Interface ge 0 0 14 0 Type Learn Age 0 Learned 18 40 50 Nexthop index 564 show ethernet switching user switch show ethernet switching table interface ge 0 0 1 Ethernet switching table 1 unicast entries VLAN MAC address Type Age I...

Page 2615: ... Security Configuration on page 2569 Configuring Port Security on page 2625 Verifying Port Security on page 2653 Troubleshooting Port Security on page 2665 Configuration Statements for Port Security on page 2667 Operational Mode Commands for Port Security on page 2705 2543 ...

Page 2616: ...2544 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2617: ...yer 2 denial of service DoS on network devices Port security features help protect the access ports on your switch against the losses of information and productivity that can result from such attacks The Junos OS on J EX Series Switches provides features to help secure ports on the switch The ports can be categorized as either trusted or untrusted You apply policies appropriate to those categories...

Page 2618: ...he packet is discarded DHCP option 82 Also known as the DHCP relay agent information option Helps protect the J EX Series switch against attacks such as spoofing of IP addresses and MAC addresses and DHCP IP address starvation Option 82 provides information about the network location of a DHCP client and the DHCP server uses this information to implement IP addresses or other parameters for the cl...

Page 2619: ...figuring MAC Limiting Including Dynamic and Allowed MAC Addresses to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 2576 Mitigation of Rogue DHCP Server Attacks If an attacker sets up a rogue DHCP server to impersonate a legitimate DHCP server on the LAN the rogue server can start issuing leases to the network s DHCP clients The information provided to the clients by thi...

Page 2620: ...ch s untrusted access interfaces that has a MAC address identical to that of a client on another untrusted port The intruder acquires the DHCP lease which results in changes to the entries in the DHCP snooping table Subsequently what would have been valid ARP requests from the legitimate client are blocked To protect against this type of alteration of the DHCP snooping database configure MAC addre...

Page 2621: ...s to the network DHCP Snooping Basics on page 2549 DHCP Snooping Process on page 2550 DHCP Server Access on page 2551 DHCP Snooping Table on page 2554 Static IP Address Additions to the DHCP Snooping Database on page 2554 Snooping DHCP Packets That Have Invalid IP Addresses on page 2554 DHCP Snooping Basics Dynamic Host Configuration Protocol DHCP allocates IP addresses dynamically leasing address...

Page 2622: ... must reacquire bindings However you can configure the bindings to persist by setting the dhcp snooping file statement to store the database file either locally or remotely You can configure the switch to snoop DHCP server responses only from particular VLANs Doing this prevents spoofing of DHCP server messages You configure DHCP snooping for each VLAN not for each interface port By default DHCP s...

Page 2623: ...e All on the Same VLAN When the switch DHCP clients and DHCP server are all members of the same VLAN the DHCP server can be connected to the switch in one of two ways The server is directly connected to the same switch as the one connected to the DHCP clients the hosts or network devices that are requesting IP addresses from the server You must configure the port that connects the server to the sw...

Page 2624: ...0 0 11 is a trusted trunk port Figure 61 DHCP Server Connected Directly to Switch Figure 62 DHCP Server Connected Directly to Switch 2 with Switch 2 Connected to Switch 1 Through a Trusted Trunk Port 2552 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2625: ...s or the DHCP server is connected to the switch through a Layer 3 interface on the switch these interfaces are configured as routed VLAN interfaces or RVIs These trunk interfaces are trusted by default These two scenarios illustrate the switch acting as a relay agent The DHCP server and clients are in different VLANs The switch is connected to a router that is in turn connected to the DHCP server ...

Page 2626: ...c IP Address Additions to the DHCP Snooping Database You can add specific static IP addresses to the database as well as have the addresses dynamically assigned through DHCP snooping To add static IP addresses you supply the IP address the MAC address of the device the interface on which the device is connected and the VLAN with which the interface is associated No lease time is assigned to the en...

Page 2627: ... page 2631 Troubleshooting Port Security on page 2665 Understanding DAI for Port Security on J EX Series Switches Dynamic ARP inspection DAI protects J EX Series Switches against ARP spoofing DAI inspects ARP packets on the LAN and uses the information in the DHCP snooping database on the switch to validate ARP packets and to protect against ARP cache poisoning ARP requests and replies are compare...

Page 2628: ...s indicate that two devices have the same MAC address They are also broadcast when a network interface card NIC in a device is changed and the device is rebooted so that other devices on the LAN update their ARP caches In malicious situations an attacker can poison the ARP cache of a network device by sending an ARP response to the device that directs all packets destined for a certain IP address ...

Page 2629: ...33 Enabling Dynamic ARP Inspection J Web Procedure on page 2634 Understanding MAC Limiting and MAC Move Limiting for Port Security on J EX Series Switches MAC limiting protects against flooding of the Ethernet switching table also known as the MAC forwarding table or Layer 2 forwarding table You enable this feature on interfaces ports MAC move limiting detects MAC movement and MAC spoofing on acce...

Page 2630: ...MAC Limiting and MAC Move Limiting You can choose to have one of the following actions performed when the limit of MAC addresses or the limit of MAC moves is exceeded drop Drop the packet and generate an alarm an SNMP trap or a system log entry This is the default log Do not drop the packet but generate an alarm an SNMP trap or a system log entry none Take no action shutdown Disable the interface ...

Page 2631: ...ure on page 2637 Configuring Autorecovery From the Disabled State on Secure or Storm Control Interfaces CLI Procedure on page 2516 no allowed mac log on page 2686 Understanding Trusted DHCP Servers for Port Security on J EX Series Switches Any interface on the switch that connects to a DHCP server can be configured as a trusted port Configuring a DHCP server on a trusted port protects against rogu...

Page 2632: ... switch then when a network device a DHCP client that is connected to the switch on an untrusted interface sends a DHCP request the switch inserts information about the client s network location into the packet header of that request The switch then sends the request to the DHCP server The DHCP server reads the option 82 information in the packet header and uses it to implement the IP address or a...

Page 2633: ...interface name for example ge 0 0 10 Use the prefix option to add an optional prefix to the circuit ID If you enable the prefix option the hostname for the switch is used as the prefix for example switch1 ge 0 0 10 vlan1 where switch1 is the hostname You can also specify that the interface description be used rather than the interface name and or that the VLAN ID be used rather than the VLAN name ...

Page 2634: ... The switch functions as a relay agent when the DHCP clients or the DHCP server is connected to the switch through a Layer 3 interface On the switch these interfaces are configured as routed VLAN interfaces or RVIs Figure 66 on page 2563 illustrates a scenario for the switch as relay agent in this instance the switch relays requests through a router to the server 2562 Dell PowerConnect J Series Et...

Page 2635: ...itch with No Relay Agent Between Clients and DHCP Server CLI Procedure on page 2649 Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and DHCP Server CLI Procedure on page 2646 Understanding IP Source Guard for Port Security on J EX Series Switches Ethernet LAN switches are vulnerable to attacks that involve spoofing forging of source IP addresses or source MAC addresses Y...

Page 2636: ...onnected to either trunk interfaces or trusted access interfaces that is interfaces configured as dhcp trusted so that a DHCP server can be connected to that interface to provide dynamic IP addresses IP source guard obtains information about IP address MAC address VLAN bindings from the DHCP snooping database It causes the switch to validate incoming IP packets against the entries in that database...

Page 2637: ...tual Chassis configurations multiple J EX4200 switches that are managed through a single management interface Link aggregation groups LAGs 802 1X user authentication in single supplicant mode NOTE The 802 1X user authentication is applied in one of three modes single supplicant single secure supplicant or multiple supplicant Single supplicant mode works with IP source guard but single secure and m...

Page 2638: ...t it consults when forwarding packets to network devices If the ARP cache does not contain an entry for the destination device the host the DHCP client broadcasts an ARP request for that device s address and stores the response in the cache Proxy ARP Overview When proxy ARP is enabled if the switch receives an ARP request for which it has a route to the target destination IP address the switch res...

Page 2639: ...roxy ARP on J EX Series Switches We recommend these best practices for configuring proxy ARP on the switches Set proxy ARP to restricted mode Use restricted mode when configuring proxy ARP on RVIs If you set proxy ARP to unrestricted disable gratuitous ARP requests on each interface enabled for proxy ARP Related Documentation Example Configuring Proxy ARP on a J EX Series Switch on page 2621 Confi...

Page 2640: ...2568 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2641: ...er Through a Second Switch on page 2593 Example Configuring IP Source Guard with Other J EX Series Switch Features to Mitigate Address Spoofing Attacks on Untrusted Access Interfaces on page 2600 Example Configuring IP Source Guard on a Data VLAN That Shares an Interface with a Voice VLAN on page 2608 Example Setting Up DHCP Option 82 with a J EX Series Switch as Relay Agent Between Clients and a ...

Page 2642: ... for J EX Series Switches on page 1070 Overview and Topology Ethernet LANs are vulnerable to address spoofing and DoS attacks on network devices To protect the devices from such attacks you can configure DHCP snooping to validate DHCP server messages DAI to protect against MAC spoofing and MAC cache limiting to constrain the number of MAC addresses the switch adds to its MAC address cache You can ...

Page 2643: ...e 0 0 8 Interfaces in employee vlan ge 0 0 8 Interface for DHCP server In this example the switch is initially configured with the default port security setup In the default configuration on the switch Secure port access is activated on the switch DHCP snooping and DAI are disabled on all VLANs All access ports are untrusted and all trunk ports are trusted for DHCP snooping which is the default se...

Page 2644: ... examine dhcp 2 Specify the interface port from which DHCP responses are allowed edit ethernet switching options secure access port user switch set interface ge 0 0 8 dhcp trusted 3 Enable dynamic ARP inspection DAI on the VLAN edit ethernet switching options secure access port user switch set vlan employee vlan arp inspection 4 Configure the MAC limit of 4 and use the default action drop Packets ...

Page 2645: ...Verifying That DHCP Snooping Is Working Correctly on the Switch on page 2573 Verifying That DAI Is Working Correctly on the Switch on page 2574 Verifying That MAC Limiting and MAC Move Limiting Are Working Correctly on the Switch on page 2574 VerifyingThatAllowedMACAddressesAreWorkingCorrectlyontheSwitchonpage2575 Verifying That DHCP Snooping Is Working Correctly on the Switch Purpose Verify that ...

Page 2646: ... switch Action Send some ARP requests from network devices connected to the switch Display the DAI information user switch show arp inspection statistics ARP inspection statistics Interface Packets received ARP inspection pass ARP inspection failed ge 0 0 1 0 7 5 2 ge 0 0 2 0 10 10 0 ge 0 0 3 0 12 12 0 Meaning The sample output shows the number of ARP packets received and inspected per interface w...

Page 2647: ...81 Learn 0 ge 0 0 2 0 employee vlan Flood ge 0 0 2 0 employee vlan Flood ge 0 0 2 0 Meaning The first sample output shows that with a MAC limit of 4 for each interface the fifth MAC address on ge 0 0 2 was not learned because it exceeded the MAC limit The second sample output shows that MAC addresses for three of the hosts on ge 0 0 2 were not learned because the hosts had been moved back more tha...

Page 2648: ...nd Allowed MAC Addresses to Protect the Switch from Ethernet Switching Table Overflow Attacks In an Ethernet switching table overflow attack an intruder sends so many requests from new MAC addresses that the Ethernet switching table fills up and then overflows forcing the switch to broadcast all messages This example describes how to configure MAC limiting and allowed MAC addresses two port securi...

Page 2649: ...is described in the topic Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 That procedure is not repeated here Figure 68 on page 2577 illustrates the topology for this example Figure 68 Network Topology for Basic Port Security The components of the topology for this example are shown in Table 322 on page 2577 Table 322 Components of the Port Security Topology S...

Page 2650: ...ss port set interface ge 0 0 1 mac limit 4 action drop set interface ge 0 0 2 allowed mac 00 05 85 3A 82 80 set interface ge 0 0 2 allowed mac 00 05 85 3A 82 81 set interface ge 0 0 2 allowed mac 00 05 85 3A 82 83 set interface ge 0 0 2 allowed mac 00 05 85 3A 82 85 Step by Step Procedure Configure MAC limiting and some allowed MAC addresses Configure a MAC limit of 4 on ge 0 0 1 and specify that ...

Page 2651: ...d 0 ge 0 0 1 0 employee vlan 00 05 85 3A 82 80 Learn 0 ge 0 0 2 0 employee vlan 00 05 85 3A 82 81 Learn 0 ge 0 0 2 0 employee vlan 00 05 85 3A 82 83 Learn 0 ge 0 0 2 0 employee vlan 00 05 85 3A 82 85 Learn 0 ge 0 0 2 0 employee vlan Flood ge 0 0 2 0 Meaning The sample output shows that with a MAC limit of 4 for the interface the DHCP request for a fifth MAC address on ge 0 0 1 was dropped because ...

Page 2652: ...ue DHCP server attacks be sure you have Connected the DHCP server to the switch Enabled DHCP snooping on the VLAN Configured the VLAN employee vlan on the switch See Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Overview and Topology Ethernet LANs are vulnerable to address spoofing and DoS attacks on network devices This example describes how to protect the ...

Page 2653: ...2 16 28 192 0 2 17 through 192 0 2 30 192 0 2 31 is the subnet s broadcast address VLAN subnets ge 0 0 1 ge 0 0 2 ge 0 0 3 ge 0 0 8 Interfaces in employee vlan ge 0 0 8 Interface for DHCP server In this example the switch has already been configured as follows Secure port access is activated on the switch DHCP snooping is enabled on the VLAN employee vlan The interface port where the rogue DHCP se...

Page 2654: ...rusted Verification To confirm that the configuration is working properly Verifying That the DHCP Server Interface Is Untrusted on page 2582 Verifying That the DHCP Server Interface Is Untrusted Purpose Verify that the DHCP server is untrusted Action Send some DHCP requests from network devices here they are DHCP clients connected to the switch Display the DHCP snooping information when the port o...

Page 2655: ...ovide IP addresses to network devices on the switch Before you configure MAC limiting a port security feature to mitigate DHCP starvation attacks be sure you have Connected the DHCP server to the switch Configured the VLAN employee vlan on the switch See Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Overview and Topology Ethernet LANs are vulnerable to addre...

Page 2656: ...le the switch has already been configured as follows Secure port access is activated on the switch No MAC limit is set on any of the interfaces DHCP snooping is disabled on the VLAN employee vlan All access interfaces are untrusted which is the default setting Configuration To configure the MAC limiting port security feature to protect the switch against DHCP starvation attacks CLI Quick Configura...

Page 2657: ...ac limit 3 action drop interface ge 0 0 2 0 mac limit 3 action drop Verification To confirm that the configuration is working properly Verifying That MAC Limiting Is Working Correctly on the Switch on page 2585 Verifying That MAC Limiting Is Working Correctly on the Switch Purpose Verify that MAC limiting is working on the switch Action Send some DHCP requests from network devices here they are DH...

Page 2658: ...nstead of being sent to the intended destination The attacker can send faked or spoofed ARP messages on the LAN NOTE On J EX Series switches when dynamic ARP inspection DAI is enabled the switch logs the number of invalid ARP packets that it receives on each interface along with the sender s IP and MAC addresses You can use these log messages to discover ARP spoofing on the network This example de...

Page 2659: ...4200 24T switch that is connected to a DHCP server The setup for this example includes the VLAN employee vlan on the switch The procedure for creating that VLAN is described in the topic Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page1070 Thatprocedureisnotrepeatedhere Figure71onpage2587illustratesthetopology for this example Figure 71 Network Topology for Basic Po...

Page 2660: ...te them into the switch terminal window edit ethernet switching options secure access port set interface ge 0 0 8 dhcp trusted set vlan employee vlan examine dhcp set vlan employee vlan arp inspection Step by Step Procedure Configure DHCP snooping and dynamic ARP inspection DAI on the VLAN Set the ge 0 0 8 interface as trusted 1 edit ethernet switching options secure access port user switch set in...

Page 2661: ...ployee vlan ge 0 0 1 0 00 05 85 3A 82 79 192 0 2 18 653 dynamic employee vlan ge 0 0 1 0 00 05 85 3A 82 80 192 0 2 19 720 dynamic employee vlan ge 0 0 2 0 00 05 85 3A 82 81 192 0 2 20 932 dynamic employee vlan ge 0 0 2 0 00 05 85 3A 82 83 192 0 2 21 1230 dynamic employee vlan ge 0 0 2 0 00 05 85 27 32 88 192 0 2 22 3200 dynamic employee vlan ge 0 0 3 0 Meaning When the interface on which the DHCP ...

Page 2662: ...oduces a DHCP client on an untrusted access interface with a MAC address identical to that of a client on another untrusted interface The intruder then acquires the DHCP lease of that other client thus changing the entries in the DHCP snooping table Subsequently what would have been valid ARP requests from the legitimate client are blocked This example describes how to configure allowed MAC addres...

Page 2663: ...topic Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 That procedure is not repeated here Figure 72 on page 2591 illustrates the topology for this example Figure 72 Network Topology for Basic Port Security The components of the topology for this example are shown in Table 326 on page 2591 Table 326 Components of the Port Security Topology Settings Properties O...

Page 2664: ... 85 3A 82 88 Step by Step Procedure To configure some allowed MAC addresses on an interface Configure the five allowed MAC addresses on an interface edit ethernet switching options secure access port user switch set interface ge 0 0 2 allowed mac 00 05 85 3A 82 80 user switch set interface ge 0 0 2 allowed mac 00 05 85 3A 82 81 user switch set interface ge 0 0 2 allowed mac 00 05 85 3A 82 83 user ...

Page 2665: ...e on page 2637 Example Configuring DHCP Snooping DAI and MAC Limiting on a J EX Series Switch with Access to a DHCP Server Through a Second Switch You can configure DHCP snooping dynamic ARP inspection DAI and MAC limiting on the access interfaces of J EX Series switches to protect the switch and the Ethernet LAN against address spoofing and Layer 2 denial of service DoS attacks To obtain those ba...

Page 2666: ...evices from such attacks you can configure DHCP snooping to validate DHCP server messages DAI to protect against ARP spoofing MAC limiting to constrain the number of MAC addresses the switch adds to its MAC address cache This example shows how to configure these port security features on a J EX4200 switch which is Switch 1 in this example Switch 1 is connected to a switch that is not configured wi...

Page 2667: ... EX Series switch Switch 2 Switch hardware employee vlan tag 20 VLAN name and ID 192 0 2 16 28 192 0 2 17 through 192 0 2 30 192 0 2 31 is subnet s broadcast address VLAN subnets ge 0 0 11 Trunk interface on both switches ge 0 0 1 ge 0 0 2 and ge 0 0 3 Access interfaces on Switch 1 ge 0 0 1 Access interface on Switch 2 ge 0 0 1 on Switch 2 Interface for DHCP server Switch 1 is initially configured...

Page 2668: ...ployee vlan arp inspection set ethernet switching options secure access port vlan employee vlan examine dhcp set interfaces ge 0 0 1 unit 0 family ethernet switching vlan members 20 set interfaces ge 0 0 2 unit 0 family ethernet switching vlan members 20 set interfaces ge 0 0 3 unit 0 family ethernet switching vlan members 20 set interfaces ge 0 0 11 unit 0 family ethernet switching port mode trun...

Page 2669: ... switching options secure access port user switch1 set interface ge 0 0 1 mac limit 5 Results Display the results of the configuration edit user switch1 show ethernet switching options secure access port interface ge 0 0 1 0 mac limit 5 action drop vlan employee vlan arp inspection examine dhcp interfaces ge 0 0 1 unit 0 family ethernet switching vlan members 20 ge 0 0 2 unit 0 family ethernet swi...

Page 2670: ...et vlans employee vlan vlan id 20 Step by Step Procedure To configure the VLAN and interfaces on Switch 2 Configure an interface on Switch 2 as a trunk interface 1 edit interfaces user switch2 set ge 0 0 11 unit 0 ethernet switching port mode trunk 2 Associate the VLAN with interfaces ge 0 0 1 and ge 0 0 11 edit interfaces user switch2 set ge 0 0 1 unit 0 family ethernet switching vlan members 20 ...

Page 2671: ... is trusted The server has provided the IP addresses and leases user switch1 show dhcp snooping binding DHCP Snooping Information MAC Address IP Address Lease Type VLAN Interface 00 05 85 3A 82 77 192 0 2 17 600 dynamic employee vlan ge 0 0 1 0 00 05 85 3A 82 79 192 0 2 18 653 dynamic employee vlan ge 0 0 1 0 00 05 85 3A 82 80 192 0 2 19 720 dynamic employee vlan ge 0 0 1 0 00 05 85 3A 82 81 192 0...

Page 2672: ...faces employee vlan 00 05 85 3A 82 77 Learn 0 ge 0 0 1 0 employee vlan 00 05 85 3A 82 79 Learn 0 ge 0 0 1 0 employee vlan 00 05 85 3A 82 80 Learn 0 ge 0 0 1 0 employee vlan 00 05 85 3A 82 81 Learn 0 ge 0 0 1 0 employee vlan 00 05 85 3A 82 83 Learn 0 ge 0 0 1 0 employee vlan Flood ge 0 0 1 0 Meaning The sample output shows that five MAC addresses have been learned for interface ge 0 0 1 which corre...

Page 2673: ...arios be sure you have Connected the DHCP server to the switch Connected the RADIUS server and configured user authentication on the RADIUS server See Example Connecting a RADIUS Server for 802 1X to a J EX Series Switch on page 2267 Configured the VLANs on the switch See Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 for detailed information about configurin...

Page 2674: ...he second example configuration the switch is configured for 802 1X user authentication If the client fails authentication the switch redirects the client to a guest VLAN that allows this client to access a set of restricted network features You configure IP source guard on the guest VLAN to mitigate effects of source IP spoofing NOTE Control planeratelimitingisachievedbyrestrictingCPUcontrol plan...

Page 2675: ...it interfaces user switch set ge 0 0 0 unit 0 family ethernet switching vlan members data user switch set ge 0 0 1 unit 0 family ethernet switching vlan members data 3 Configure 802 1X user authentication and LLDP MED on the two interfaces that you associated with the data VLAN edit protocols user switch set lldp med interface ge 0 0 0 0 user switch set dot1x authenticator authentication profile n...

Page 2676: ...0 0 supplicant single ge 0 0 1 0 supplicant single ge 0 0 14 0 supplicant single Configuring IP Source Guard on a Guest VLAN CLI Quick Configuration To quickly configure IP source guard on a guest VLAN copy the following commands and paste them into the switch terminal window edit set ethernet switching options secure access port interface ge 0 0 24 dhcp trusted set interfaces ge 0 0 24 unit 0 fam...

Page 2677: ...ions user switch set secure access port interface ge 0 0 24 dhcp trusted user switch set ge 0 0 24 unit 0 family ethernet switching vlan members employee 2 Configure two interfaces for the access port mode edit interfaces user switch set ge 0 0 0 unit 0 family ethernet switching port mode access user switch set ge 0 0 1 unit 0 family ethernet switching port mode access 3 Configure DHCP snooping an...

Page 2678: ...cant timeout 2 edit vlans employee vlan id 100 edit interfaces ge 0 0 0 unit 0 family ethernet switching port mode access ge 0 0 1 unit 0 family ethernet switching port mode access ge 0 0 24 unit 0 family ethernet switching vlan members employee edit ethernet switching options secure access port interface ge 0 0 0 0 static ip 11 1 1 1 vlan employee mac 00 11 11 11 11 11 2606 Dell PowerConnect J Se...

Page 2679: ... Supplicant mode output field displays the configured administrative mode for each interface Verifying the VLAN Association with the Interface Purpose Verity interface states and VLAN memberships Action Use the show ethernet switching interfaces command to view the Ethernet switching table entries Meaning The field VLAN members shows the associations between VLANs and interfaces The State field sh...

Page 2680: ...Documentation Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Setting Up VoIP with 802 1X and LLDP MED on a J EX Series Switch on page 2302 Example Configuring IP Source Guard on a Data VLAN That Shares an Interface with a Voice VLAN on page 2608 Configuring IP Source Guard CLI Procedure on page 2643 Example C...

Page 2681: ...d to an untrusted access interface on the switch If IP source guard determines that the packet header contains an invalid source IP address or source MAC address it ensures that the switch does not forward the packet that is the packet is discarded When you configure IP source guard you enable on it on one or more VLANs IP source guard applies its checking rules to untrusted access interfaces on t...

Page 2682: ... unit 0 family ethernet switching vlan members data set vlans voice vlan id 100 set protocols lldp med interface ge 0 0 14 0 set protocols dot1x authenticator authentication profile name profile52 set protocols dot1x authenticator interface ge 0 0 14 0 supplicant single Step by Step Procedure To configure IP source guard on the data VLAN 1 Configure the VoIP interface edit ethernet switching optio...

Page 2683: ... edit vlans user switch set voice vlan id 100 Results Check the results of the configuration edit ethernet switching options user switch show voip interface ge 0 0 14 0 vlan voice secure access port interface ge 0 0 14 0 static ip 11 1 1 1 vlan data mac 00 11 11 11 11 11 interface ge 0 0 24 0 dhcp trusted vlan data examine dhcp ip source guard edit interfaces ge 0 0 24 unit 0 family ethernet switc...

Page 2684: ...IP Source Guard Are Working on the Data VLAN on page 2613 Verifying That 802 1X User Authentication Is Working on the Interface Purpose Verify the 802 1X configuration on interface ge 0 0 14 Action Verify the 802 1X configuration with the operational mode command showdot1xinterface user switch show dot1x interface ge 0 0 14 0 detail ge 0 0 14 0 Role Authenticator Administrative state Auto Supplica...

Page 2685: ... 0 0 13 0 down vlan100 unblocked ge 0 0 14 0 up voice unblocked data unblocked ge 0 0 17 0 down employee unblocked ge 0 0 23 0 down default unblocked ge 0 0 24 0 down data unblocked employee unblocked vlan100 unblocked voice unblocked Meaning The field VLAN members shows that the ge 0 0 14 0 interface supports both the data VLAN and the voice VLAN The State field shows that the interface is up Ver...

Page 2686: ...utput see the preceding sample output for show dhcp snooping binding shows for each MAC address the assigned IP address and lease time that is the time in seconds remaining before the lease expires Static IP addresses have no assigned lease time Statically configured entries never expire The IP source guard database table contains the VLANs enabled for IP source guard the untrusted access interfac...

Page 2687: ...n 82 on the switch be sure you have Connected and configured the DHCP server NOTE Your DHCP server must be configured to accept DHCP option 82 If it is not configured for DHCP option 82 it does not use the DHCP option 82 information in the requests sent to it when it formulates its reply messages Configured the employee VLAN on the switch and associated the interfaces on which the clients connect ...

Page 2688: ... 82 CLI Quick Configuration To quickly configure DHCP option 82 copy the following commands and paste them into the switch terminal window set forwarding options helpers bootp dhcp option82 set forwarding options helpers bootp dhcp option82 circuit id prefix hostname set forwarding options helpers bootp dhcp option82 circuit id use vlan id set forwarding options helpers bootp dhcp option82 remote ...

Page 2689: ...hcp option82 circuit id prefix hostname use vlan id remote id prefix mac use string employee switch1 vendor id Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with No Relay Agent Between Clients and DHCP Server on page 2617 Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and DHCP Server CLI Procedure on page 2646 RFC 3046 DHCP Relay Agent ...

Page 2690: ...CP option 82 is enabled on the switch then when a network device a DHCP client that is connected to the switch on an untrusted interface sends a DHCP request the switch inserts information about the client s network location into the packet header of that request The switch then sends the request to the DHCP server The DHCP server reads the option 82 information in the packet header and uses it to...

Page 2691: ... following commands and paste them into the switch terminal window set ethernet switching options secure access port vlan employee dhcp option82 set ethernet switching options secure access port vlan employee dhcp option82 circuit id prefix hostname set ethernet switching options secure access port vlan employee dhcp option82 circuit id use vlan id set ethernet switching options secure access port...

Page 2692: ...figure a prefix for the remote ID suboption here the prefix is the MAC address of the switch edit ethernet switching options secure access port user switch set vlan employee dhcp option82 remote id prefix mac 6 Specify that the remote ID suboption value contains a character string here the string is employee switch1 edit ethernet switching options secure access port user switch setvlanemployeedhcp...

Page 2693: ...ardware and software components One J EX Series switch Overview and Topology This example shows the configuration of proxy ARP on an interface of a J EX Series switch using restricted mode In restricted mode the switch does not proxy for hosts on the same subnet The topology for this example consists of one J EX Series switch When a host wants to communicate with a host that is not already in its ...

Page 2694: ... appearing to the host to be an indication of an IP conflict edit interfaces user switch set ge 0 0 3 no gratuitous arp request Results Display the results of the configuration user switch show configuration interfaces ge 0 0 3 unit 0 proxy arp restricted family ethernet switching Verification To verify that the switch is sending proxy ARP messages perform these tasks Verifying That the Switch Is ...

Page 2695: ...sent 47 ARP replies sent 0 requests for memory denied 0 requests dropped on entry 0 requests dropped during retry 0 requests dropped due to interface deletion 0 requests on unnumbered interfaces 0 new requests on unnumbered interfaces 0 replies for from unnumbered interfaces 0 requests on unnumbered interface with non subnetted donor 0 replies from unnumbered interface with non subnetted donor Mea...

Page 2696: ...2624 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2697: ...637 Configuring MAC Move Limiting CLI Procedure on page 2639 Configuring MAC Move Limiting J Web Procedure on page 2641 Setting the none Action on an Interface to Override a MAC Limit Applied to All Interfaces CLI Procedure on page 2642 Configuring IP Source Guard CLI Procedure on page 2643 Configuring Static IP Addresses for DHCP Bindings on Access Ports CLI Procedure on page 2645 Setting Up DHCP...

Page 2698: ...port user switch set vlan employee vlan arp inspection On all VLANs edit ethernet switching options secure access port user switch set vlan all arp inspection 3 Limit the number of dynamic MAC addresses and specify the action to take if the limit is exceeded for example set a MAC limit of 5 with an action of drop On a single interface here the interface is ge 0 0 1 edit ethernet switching options ...

Page 2699: ...witch set interface ge 0 0 8 dhcp trusted Related Documentation Configuring Port Security J Web Procedure on page 2627 Configuring Autorecovery From the Disabled State on Secure or Storm Control Interfaces CLI Procedure on page 2516 Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Configuring DHCP Snooping DAI ...

Page 2700: ... connected to the switch Builds and maintains a database of valid IP addresses MAC address bindings By default access ports are untrusted and trunk ports are trusted Enable DHCP Snooping on VLAN Select to enable ARP inspection on a specified VLAN or all VLANs Configure any port on which you do not want ARP inspection to occur as a trusted DHCP server port Uses information in the DHCP snooping data...

Page 2701: ...orecovery from the disabled state and specifying a disable timeout value See Configuring Autorecovery From the Disabled State on Secure or Storm Control Interfaces CLI Procedure on page 2516 None No action to be taken Specifies the action to be taken if the MAC limit is exceeded This option is not valid for trunk ports MAC Limit Action To add a MAC address 1 Click Add 2 Enter the MAC address 3 Cli...

Page 2702: ...ngs However you can configure the bindings to persist by setting the dhcp snooping file statement to store the database file either locally or remotely TIP For private VLANs PVLANs enable DHCP snooping on the primary VLAN If you enable DHCP snooping only on a community VLAN DHCP messages coming from PVLAN trunk ports are not snooped Related Documentation Enabling DHCP Snooping J Web Procedure on p...

Page 2703: ...red NOTE You can enable or disable port security on the switch at any time by clicking the Activate or Deactivate button on the Port Security Configuration page If security status is shown as Disabled when you try to edit settings for any VLANs or interfaces ports the message asking if you want to enable port security appears Related Documentation Enabling DHCP Snooping CLI Procedure on page 2630 ...

Page 2704: ... Server Attacks on page 2579 Verifying That a Trusted DHCP Server Is Working Correctly on page 2655 Monitoring Port Security on page 2653 Understanding Trusted DHCP Servers for Port Security on J EX Series Switches on page 2559 Enabling a Trusted DHCP Server J Web Procedure You can configure any interface on the J EX Series switch that connects to a DHCP server as a trusted interface port Configur...

Page 2705: ...LI Procedure Dynamic ARP inspection DAI protects J EX Series switches against ARP spoofing DAI inspects ARP packets on the LAN and uses the information in the DHCP snooping database on the switch to validate ARP packets and to protect against ARP cache poisoning You configure DAI for each VLAN not for each interface port By default DAI is disabled for all VLANs To enable dynamic ARP inspection DAI...

Page 2706: ...rity click Yes 4 Select the Enable ARP Inspection on VLAN check box and then click OK 5 Click OK after the command has been successfully delivered NOTE You can enable or disable port security on the switch at any time by clicking the Activate or Deactivate button on the Port Security Configuration page If security status is shown as Disabled when you try to edit settings for any VLANs or interface...

Page 2707: ...imum number of dynamic MAC addresses that can be learned on a single Layer 2 access interface or on all Layer 2 access interfaces You can choose to have one of the following actions performed when the limit of MAC addresses is exceeded drop Drop the packet and generate an alarm an SNMP trap or a system log entry This is the default log Do not drop the packet but generate an alarm an SNMP trap or a...

Page 2708: ... interface ge 0 0 2 allowed mac 00 05 85 3A 82 80 user switch set interface ge 0 0 2 allowed mac 00 05 85 3A 82 81 user switch set interface ge 0 0 2 allowed mac 00 05 85 3A 82 83 On all interfaces edit ethernet switching options secure access port user switch set interface all allowed mac 00 05 85 3A 82 80 user switch set interface all allowed mac 00 05 85 3A 82 81 user switch set interface all a...

Page 2709: ...using the J Web interface 1 Select Configure Security Port Security 2 Select one or more interfaces from the Interface List 3 Click the Edit button If a message appears asking whether you want to enable port security click Yes 4 To set a dynamic MAC limit 1 Type a limit value in the MAC Limit box 2 Select an action from the MAC Limit Action box optional The switch takes this action when the MAC li...

Page 2710: ... MAC Limiting CLI Procedure on page 2635 Example Configuring Allowed MAC Addresses to Protect the Switch from DHCP Snooping Database Alteration Attacks on page 2590 Example Configuring MAC Limiting Including Dynamic and Allowed MAC Addresses to Protect the Switch from Ethernet Switching Table Overflow Attacks on page 2576 Example Configuring MAC Limiting to Protect the Switch from DHCP Starvation ...

Page 2711: ...n once You configure MAC move limiting per VLAN not per interface port In the default configuration the number of MAC moves permitted is unlimited You can choose to have one of the following actions performed when the MAC move limit is exceeded drop Drop the packet and generate an alarm an SNMP trap or a system log entry This is the default log Do not drop the packet but generate an alarm an SNMP ...

Page 2712: ...imit of 5 edit ethernet switching options secure access port user switch set vlan all mac move limit 5 The action is not specified so the switch performs the default action drop if it tracks that an individual MAC address within any of the VLANs has moved more than 5 times within one second Related Documentation Configuring MAC Move Limiting J Web Procedure on page 2641 Example Configuring Port Se...

Page 2713: ...nterface 1 Select Configure Security Port Security 2 Select one or more VLANs from the VLAN List 3 Click the Edit button If a message appears asking whether you want to enable port security click Yes 4 To set a MAC move limit 1 Type a limit value in the MAC Movement box 2 Select an action from the MAC Movement Action box optional The switch takes this action when an individual MAC address exceeds ...

Page 2714: ...ed to All Interfaces CLI Procedure If you set a MAC limit in your port security settings to apply to all interfaces on the J EX Series switch you can override that setting for a particular interface by specifying action none To use the none action to override a MAC limit setting 1 Set the MAC limit for example a limit of 5 with action drop edit ethernet switching options secure access port user sw...

Page 2715: ...is the packet is discarded You enable the IP source guard feature on VLANs You can enable it on a specific VLAN on all VLANs or on a VLAN range NOTE IP source guard applies only to access interfaces and only to untrusted interfaces If you enable IP source guard on a VLAN that includes trunk interfaces or an interface set to dhcp trusted the CLI shows an error when you try to commit the configurati...

Page 2716: ...ee edit ethernet switching options secure access port user switch set vlan employee ip source guard NOTE You can use the no ip source guard statement to disable IP source guard for a specific VLAN after you have enabled the feature for all VLANs To view results of the configuration steps before committing the configuration type the show command at the user prompt To commit these changes to the act...

Page 2717: ... 10 12 data vlan and 00 05 85 3A 82 80 with values for your configuration edit ethernet switching options secure access port user switch set interface ge 0 0 2 static ip 10 0 10 12 vlan data vlan mac 00 05 85 3A 82 80 To view results of the configuration steps before committing the configuration type the show command at the user prompt To commit these changes to the active configuration type the c...

Page 2718: ...ts and DHCP server are all on the same VLAN The switch forwards the clients requests to the server and forwards the server s replies to the clients This configuration is described in Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients and DHCP Server CLI Procedure on page 2649 Before you configure DHCP option 82 on the switch perform these tasks Connect and configure the DH...

Page 2719: ...forwarding options helpers bootp user switch set dhcp option82 circuit id use interface description 4 To specify that the circuit ID suboption value contains the VLAN ID rather than the VLAN name the default edit forwarding options helpers bootp user switch set dhcp option82 circuit id use vlan id 5 To specify that the remote ID suboption is included in the DHCP option 82 information edit forwardi...

Page 2720: ...rding options helpers bootp user switch set dhcp option82 vendor id mystring To view results of the configuration steps before committing the configuration type the show command at the user prompt To commit these changes to the active configuration type the commit command at the user prompt Related Documentation Example Setting Up DHCP Option 82 with a J EX Series Switch as Relay Agent Between Cli...

Page 2721: ...witch functions as a relay agent when the DHCP clients or the DHCP server is connected to the switch through a Layer 3 interface On the switch these interfaces are configured as routed VLAN interfaces or RVIs The switch relays the clients requests to the server and then forwards the server s replies to the clients This configuration is described in Setting Up DHCP Option 82 with the Switch as a Re...

Page 2722: ...cify that the circuit ID suboption value contains the VLAN ID rather than the VLAN name the default edit ethernet switching options secure access port user switch set vlan employee dhcp option82 circuit id use vlan id 5 To specify that the remote ID suboption is included in the DHCP option 82 information edit ethernet switching options secure access port user switch set vlan employee dhcp option82...

Page 2723: ... Agent Between Clients and DHCP Server on page 2617 Understanding DHCP Option 82 for Port Security on J EX Series Switches on page 2560 RFC 3046 DHCP Relay Agent Information Option at http tools ietf org html rfc3046 Configuring Proxy ARP CLI Procedure You can configure proxy Address Resolution Protocol ARP on your J EX Series switch to enable the switch to respond to ARP queries for network addre...

Page 2724: ...iting MAC move limiting or storm control errors NOTE Youmustspecifythedisabletimeoutvaluefortheinterfacestorecover automatically There is no default disable timeout If you do not specify a timeout value you need to use the clear ethernet switching port error command to clear the errors and restore the interfaces or the specified interface to service To configure autorecovery from the disabled stat...

Page 2725: ...ionality to view these port security details DHCP snooping database for a VLAN or all VLANs ARP inspection details for all interfaces Action To monitor port security in the J Web interface select Monitor Security Port Security To monitor and manipulate the DHCP snooping database and ARP inspection statistics in the CLI enter the following commands show dhcp snooping binding clear dhcp snooping bin...

Page 2726: ...itch on page 2569 Verifying That DHCP Snooping Is Working Correctly Purpose Verify that DHCP snooping is working on the switch and that the DHCP snooping database is correctly populated with both dynamic and static bindings Action Send some DHCP requests from network devices here they are DHCP clients connected to the switch Display the DHCP snooping information when the interface on which the DHC...

Page 2727: ...ng That a Trusted DHCP Server Is Working Correctly Purpose Verify that a DHCP trusted server is working on the switch See what happens when the DHCP server is trusted and then untrusted Action Send some DHCP requests from network devices here they are DHCP clients connected to the switch Display the DHCP snooping information when the interface on which the DHCP server connects to the switch is tru...

Page 2728: ... arp inspection statistics ARP inspection statistics Interface Packets received ARP inspection pass ARP inspection failed ge 0 0 1 0 7 5 2 ge 0 0 2 0 10 10 0 ge 0 0 3 0 12 12 0 Meaning The sample output shows the number of ARP packets received and inspected per interface with a listing of how many packets passed and how many failed the inspection on each interface The switch compares the ARP reque...

Page 2729: ...ing for Dynamic MAC Addresses Is Working Correctly Purpose Verify that MAC limiting for dynamic MAC addresses is working on the switch Action Display the MAC addresses that have been learned The following sample output shows the results when two packets were sent from hosts on ge 0 0 1 and five packets requests were sent from hosts on ge 0 0 2 with both interfaces set to a MAC limit of 4 with the ...

Page 2730: ...rned and thus added to the MAC cache Because the fifth address was not learned an asterisk rather than an address appears in the MAC address column in the last line of the sample output Verifying Results of Various Action Settings When the MAC Limit Is Exceeded Purpose Verify the results provided by the various action settings for MAC limits drop log none and shutdown when the limits are exceeded ...

Page 2731: ...n 0 ge 0 0 2 0 shutdown action For MAC limiting configured with a shutdown action and with MAC limit set to 3 user switch show ethernet switching table Ethernet switching table 4 entries 3 learned VLAN MAC address Type Age Interfaces employee vlan Flood ge 0 0 2 0 employee vlan 00 05 85 3A 82 82 Learn 0 ge 0 0 2 0 employee vlan 00 05 85 3A 82 84 Learn 0 ge 0 0 2 0 employee vlan 00 05 85 3A 82 87 L...

Page 2732: ...able timeout value The switch automatically restores the disabled interface to service when the disable timeout expires The port error disable configuration does not apply to pre existing error conditions It impacts only error conditions that are detected after port error disable has been enabled and committed To clear a pre existing error condition and restore the interface to service use the cle...

Page 2733: ...ing on the switch Action Display the MAC addresses in the Ethernet switching table when MAC move limiting has been configured for a VLAN The following sample shows the results after two of the hosts on ge 0 0 2 sent packets after the MAC addresses for those hosts had moved to other interfaces more than five times in 1 second The VLAN employee vlan was set to a MAC move limit of 5 with the action d...

Page 2734: ...ing The IP source guard database table contains the VLANs enabled for IP source guard the untrusted access interfaces on those VLANs the VLAN 802 1Q tag IDs if there are any and the IP addresses and MAC addresses that are bound to one another If a switch interface is associated with multiple VLANs and some of those VLANs are enabled for IP source guard and others are not the VLANs that are not ena...

Page 2735: ... non subnetted donor Meaning The statistics show that two proxy ARP requests were received and the proxy requests not proxied field indicates that all the unproxied ARP requests received have been proxied by the switch Related Documentation Configuring Proxy ARP CLI Procedure on page 1153 Verifying That the Port Error Disable Setting Is Working Correctly Purpose Verify that the port error disable ...

Page 2736: ...exceeded The interface is temporarily disabled due to a mac limit error The disabled interface is automatically restored to service when the disable timeout expires MAC move limit exceeded The interface is temporarily disabled due to a mac move limit error The disabled interface is automatically restored to service when the disable timeout expires Storm control in efffect The interface is temporar...

Page 2737: ...Solution Set the MAC limit or MAC move limit action to log 1 edit ethernet switching options secure access port user switch set interface ge 0 0 2 mac limit 5 action log 2 Allow some MAC address requests to come in 3 View the entries in the Ethernet switching table user switch show ethernet switching table Multiple DHCP Server Packets Have Been Received on Untrusted Interfaces Problem You see log ...

Page 2738: ...on page 2569 Verifying That a Trusted DHCP Server Is Working Correctly on page 2655 Verifying That MAC Limiting Is Working Correctly on page 2657 Enabling a Trusted DHCP Server CLI Procedure on page 2632 Configuring MAC Limiting CLI Procedure on page 2635 2666 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2739: ...y ethernet switching options analyzer name loss priority priority ratio number input ingress interface all interface name vlan vlan id vlan name egress interface all interface name output interface interface name vlan vlan id vlan name bpdu block disable timeout timeout interface all interface name dot1q tunneling ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notifi...

Page 2740: ...p address vlan vlan name mac mac address vlan all vlan name arp inspection no arp inspection dhcp option82 circuit id prefix hostname use interface description use vlan id remote id prefix hostname mac none use interface description use string string vendor id string examine dhcp no examine dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown int...

Page 2741: ...tanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwarding on J EX Series Switches on page 2512 Understanding MAC Notification on J EX Series Switches ...

Page 2742: ...5 Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and DHCP Server CLI Procedure on page 2646 Understanding DHCP Option 82 for Port Security on J EX Series Switches on page 2560 DHCP BOOTP Relay for J EX Series Switches Overview on page 446 For more information about the edit forwarding options hierarchy and all its options see the Junos OS Policy Framework Configuration ...

Page 2743: ...ake precedence over dynamic MAC values that have been applied with the mac limit statement Options mac address list One or more MAC addresses configured as allowed MAC addresses for a specified interface or all interfaces Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation mac limit on page 26...

Page 2744: ...d Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Configuring DHCP Snooping DAI and MAC Limiting on a J EX Series Switch with Access to a DHCP Server Thr...

Page 2745: ...ements are explained separately Default If DCHP option 82 is enabled on the switch the circuit ID is supplied by default in the format interface name vlan name or on a Layer 3 interface just interface name Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on...

Page 2746: ... changes to the option 82 information in the packet header The switch receives the reply and then removes the DHCP option 82 information before forwarding the reply to the client The remaining statements are explained separately Default Insertion of DHCP option 82 information is not enabled Required Privilege Level routing To view this statement in the configuration routing control To add this sta...

Page 2747: ...P snooping database file to maintain persistence of IP MAC bindings The remaining statements are explained separately Default The IP MAC bindings in the DHCP snooping database file are not persistent If the switch is rebooted the bindings are lost Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentat...

Page 2748: ...usted for access ports Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Configuring a DHCP Server Interface as Untrusted to Protect the Switch from Rogue ...

Page 2749: ...ing the next occurrence of a port error You can bring up the currently disabled interfaces by running the clear ethernet switching port error command Default The disable timeout is not enabled Options timeout Time in seconds that the disabled state remains in effect The disabled interface is automatically restored to service when the specified timeout value is reached Range 10 through 3600 seconds...

Page 2750: ...ng ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary interface interface name secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write interval seco...

Page 2751: ...e dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip interface all inte...

Page 2752: ...ecurity for J EX Series Switches Overview on page 2545 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switc...

Page 2753: ...nable DHCP snooping on the primary VLAN If you enable DHCP snooping only on a community VLAN DHCP messages coming from PVLAN trunk ports are not snooped Default Disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Security with DHCP Snooping DAI MAC Limiting an...

Page 2754: ...figuration Related Documentation Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Configuring Allowed MAC Addresses to Protect the Switch from DHCP Snooping Database Alteration Attacks on page 2590 Example Configuring MAC Limiting Including Dynamic and Allowed MAC Addresses to Protect the Switch from Ethernet S...

Page 2755: ...That Shares an Interface with a Voice VLAN on page 2608 Example Configuring IP Source Guard with Other J EX Series Switch Features to Mitigate Address Spoofing Attacks on Untrusted Access Interfaces on page 2600 Configuring IP Source Guard CLI Procedure on page 2643 mac Syntax mac mac address Hierarchy Level edit ethernet switching options secure access port interface all interface name static ip ...

Page 2756: ... disabled interface recovers automatically upon expiration of the specified disable timeout If you have not configured the switch for autorecovery from port error disabled conditions you can bring up the disabled interfaces by running the clear ethernet switching port error command Required Privilege Level routing To view this statement in the configuration routing control To add this statement to...

Page 2757: ...y none No action shutdown Disable the VLAN and generate an alarm If you have configured the switch with the port error disable statement the disabled interfaces recover automatically upon expiration of the specified disable timeout If you have not configured the switch for autorecovery from port error disabled conditions you can bring up the disabled interfaces by running the clear ethernet switch...

Page 2758: ...particular allowed MAC addresses Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation allowed mac on page 2671 Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Example Configuring Allowed MAC Addresses to Protect th...

Page 2759: ...on both Layer 2 Ethernet switching interfaces and routed VLAN interfaces RVIs Default Gratuitous ARP responses are enabled on all Ethernet switching interfaces and RVIs Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Unrestricted Proxy ARP on a J EX Series Switch on...

Page 2760: ...error disable the switch disables rather than shuts down the interface when the MAC address limit is reached If you have enabled mac move limit with the shutdown option and you enable port error disable the switch disables rather than shuts down the interface when the maximum number of moves to a new interface is reached If you have enabled storm control with the action shutdown option and you ena...

Page 2761: ... the switch Options hostname Name of the host system the switch that is forwarding or relaying the DHCP request from the DHCP client to the DHCP server Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with No Relay Agent Between Clie...

Page 2762: ... mac MAC address of the host system the switch that is forwarding or relaying the DHCP request from the DHCP client to the DHCP server none No prefix is applied to the remote ID Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with N...

Page 2763: ...to the target IP address restricted Optional TheswitchrespondstoARPrequestsinwhichthephysicalnetworks of the source and target are different and does not respond if the source and target IP addresses are in the same subnet The switch must also have a route to the target IP address unrestricted Optional The switch responds to any ARP request for a local or remote address if the switch has a route t...

Page 2764: ...nserted in the DHCP request packet header If the remote id option is specified but is not qualified by a keyword the MAC address of the host device the switch is used as the remote ID Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch ...

Page 2765: ...ring examine dhcp no examine dhcp ip source guard no ip source guard mac move limit limit action action Hierarchy Level edit ethernet switching options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure port security features including MAC limiting and whether interfaces can receive DHCP responses and apply dynamic ARP inspection DH...

Page 2766: ...Series Switches on page 2549 static ip Syntax static ip ip address vlan vlan name mac mac address Hierarchy Level edit ethernet switching options secure access port interface all interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Static fixed IP address and static MAC address with an associated VLAN added to the DHCP snooping d...

Page 2767: ...nes the amount of time that the switch waits for a remote system to respond when the DHCP snooping database is stored on a remote FTP site Default None Options seconds Value in seconds Range 10 through 3600 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Understanding DHCP Snooping for Port ...

Page 2768: ...file named trace file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached xk to specify KB xm to specify MB or xg to specify gigabytes at which point the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the size option Range 2 through 1000 Default 3...

Page 2769: ...ce file reaches its maximum size it is renamed trace file 0 then trace file 1 and so on until the maximum number of trace files is reached Then the oldest trace file is overwritten If you specify a maximum number of files you also must specify a maximum file size with the files option Syntax xk to specify KB xm to specify MB or xg to specify gigabytes Range 10 KB through 1 gigabyte Default 128 KB ...

Page 2770: ...in the circuit ID or remote ID value in the DHCP option 82 information Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with No Relay Agent Between Clients and DHCP Server on page 2617 Example Setting Up DHCP Option 82 with a J EX Se...

Page 2771: ...ge Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with No Relay Agent Between Clients and DHCP Server on page 2617 Example Setting Up DHCP Option 82 with a J EX Series Switch as Relay Agent Between Clients and a DHCP Server on page 2615 Setting Up DH...

Page 2772: ...itch with No Relay Agent Between Clients and DHCP Server on page 2617 Example Setting Up DHCP Option 82 with a J EX Series Switch as Relay Agent Between Clients and a DHCP Server on page 2615 Setting Up DHCP Option 82 on the Switch with No Relay Agent Between Clients and DHCP Server CLI Procedure on page 2649 Setting Up DHCP Option 82 with the Switch as a Relay Agent Between Clients and DHCP Serve...

Page 2773: ... 255 characters Default If you specify vendor id with no string value the default vendor ID Juniper is configured Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Setting Up DHCP Option 82 on a J EX Series Switch with No Relay Agent Between Clients and DHCP Server on page 2617 Examp...

Page 2774: ...ystem including VLANs that are configured but not committed type after vlan or vlans in your configuration mode command line Note that only one VLAN is displayed for a VLAN range Options all Apply DHCP snooping DAI IP source guard DHCP option 82 and MAC move limiting to all VLANs vlan name Apply DHCP snooping DAI IP source guard DHCP option 82 and MAC move limiting to the specified VLAN Required P...

Page 2775: ... Level edit ethernet switching options secure access port interface all interface name static ip ip address Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate the static IP address with the specified VLAN associated with the specified interface Options vlan name Name of a specific VLAN associated with the specified interface Require...

Page 2776: ...tes the database entries from memory into the specified DHCP snooping database file Default None Options seconds Value in seconds Range 60 through 86400 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Understanding DHCP Snooping for Port Security on J EX Series Switches on page 2549 2704 Del...

Page 2777: ...CHAPTER 99 Operational Mode Commands for Port Security 2705 ...

Page 2778: ...rivilege Level clear Related Documentation show arp inspection statistics on page 2709 Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Verifying That DAI Is Working Correctly on page 2656 List of Sample Output clear arp inspection statistics on page 2706 Output Fields This command produces no output clear arp inspecti...

Page 2779: ...me Optional Clear DHCP snooping information for the specified VLAN or all VLANs Required Privilege Level clear Related Documentation show dhcp snooping binding on page 2710 Example Configuring Port Security with DHCP Snooping DAI MAC Limiting and MAC Move Limiting on a J EX Series Switch on page 2569 Verifying That DHCP Snooping Is Working Correctly on page 2654 List of Sample Output clear dhcp sn...

Page 2780: ...e show dhcp snooping statistics for an explanation of the output fields clear dhcp snooping statistics The following sample output displays the DHCP snooping statistics before and after the clear dhcp snooping statistics command is issued clear dhcp snooping statistics user switch show dhcp snooping statistics Successful Transfers 0 Failed Transfers 21 Successful Reads 0 Failed Reads 0 Successful ...

Page 2781: ...and Output fields are listed in the approximate order in which they appear Table 330 show arp inspection statistics Output Fields Level of Output Field Description Field Name All levels Interface on which ARP inspection has been applied Interface All levels Total number of packets total that underwent ARP inspection Packets received All levels Total number of packets that passed ARP inspection ARP...

Page 2782: ...hich they appear Table 331 show dhcp snooping binding Output Fields Level of Output Field Description Field Name All levels MAC address of the network device bound to the IP address MAC Address All levels IP address of the network device bound to the MAC address IP Address All levels Lease granted to the IP address Lease All levels How the MAC address was acquired Type All levels VLAN name of the ...

Page 2783: ...put Fields Field Description Field Name Number of entries successfully transferred from memory to the DHCP snooping database Successful Transfers Number of entries successfully read from memory to the DHCP snooping database Successful Reads Number of entries successfully written from memory to the DHCP snooping database Successful Writes Number of entries that failed being transferred from memory ...

Page 2784: ...lege Level view Related Documentation Example Setting Up Basic Bridging and a VLAN for a J EX Series Switch on page 1063 Example Setting Up Bridging with Multiple VLANs for J EX Series Switches on page 1070 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Example Setting Up Q in Q Tunneling on J EX Series Switches on page 1105 List of Sample Output show ethernet switching ta...

Page 2785: ...et switching table 57 entries 17 learned VLAN MAC address Type Age Interfaces F2 Flood All members show ethernet switching table F2 00 00 05 00 00 03 Learn 0 ge 0 0 44 0 F2 00 19 e2 50 7d e0 Static Router Linux Flood All members Linux 00 19 e2 50 7d e0 Static Router Linux 00 30 48 90 54 89 Learn 0 ge 0 0 47 0 T1 Flood All members T1 00 00 05 00 00 01 Learn 0 ge 0 0 46 0 T1 00 00 5e 00 01 00 Static...

Page 2786: ... 50 ac 00 Learn 0 ge 0 0 15 0 T2 Flood All members T2 00 00 5e 00 01 01 Static Router T2 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T2 00 19 e2 50 7d e0 Static Router T3 Flood All members T3 00 00 5e 00 01 02 Static Router T3 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 T3 00 19 e2 50 7d e0 Static Router T4 Flood All members T4 00 00 5e 00 01 03 Static Router T4 00 19 e2 50 63 e0 Learn 0 ge 0 0 46 0 output tr...

Page 2787: ... ge 0 0 8 0 ge 0 0 10 0 ge 0 0 0 0 Type Flood Nexthop index 567 VLAN v1 Tag 10 MAC 00 21 59 c6 93 22 Interface Router Type Static Nexthop index 0 VLAN v1 Tag 10 MAC 00 21 59 c9 9a 4e Interface ge 0 0 14 0 Type Learn Age 0 Learned 18 40 50 Nexthop index 564 show ethernet switching user switch show ethernet switching table interface ge 0 0 1 Ethernet switching table 1 unicast entries VLAN MAC addres...

Page 2788: ... Description Field Name VLAN on which IP source guard is enabled VLAN Access interface associated with the VLAN in column 1 Interface VLAN ID for the VLAN in column 1 Possible values are 0 indicating the VLAN is not tagged 1 4093 Tag Source IP address for a device connected to the interface in column 2 A value of star or asterisk indicates that IP source guard is not enabled on this VLAN but the i...

Page 2789: ...ge 0 0 13 0 100 voice 2717 Chapter 99 Operational Mode Commands for Port Security ...

Page 2790: ... for non IP protocol 0 datagrams with unsupported op code 0 datagrams with bad protocol address length 0 datagrams with bad hardware address length 0 datagrams with multicast source address 0 datagrams with multicast source address 0 datagrams with my own hardware address 0 datagrams for an address not on the interface 0 datagrams with a broadcast source address 294 datagrams with source address d...

Page 2791: ...of Firewall Filters Configuration on page 2755 Configuring Firewall Filters on page 2779 Verifying Firewall Filter Configuration on page 2799 Troubleshooting Firewall Filters on page 2803 Configuration Statements for Firewall Filters on page 2805 Operational Mode Commands for Firewall Filters on page 2835 2719 ...

Page 2792: ...2720 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2793: ...eries Switch from a source address to a destination address You configure firewall filters to determine whether to permit deny or forward traffic before it enters or exits a port VLAN or Layer 3 routed interface to which the firewall filter is applied An ingress firewall filter is a filter that is applied to packets that are entering a network An egress firewall filter is a filter that is applied ...

Page 2794: ...rfaces or VLANs When you include the match condition ether type ipv6 in a term you must ensure that other match conditions specified in the term are valid for IPv6 traffic If the port firewall filter or VLAN firewall filter term contains the match condition ether type ipv6 with no other IPv6 match condition specified all IPv6 traffic is matched NOTE A term without the match condition ether type ip...

Page 2795: ...ion packets can be counted to collect statistical information If no action is specified for a term the default action is to accept the packet Firewall Filter Processing The order of the terms within a firewall filter configuration is important Packets are tested against each term in the order in which the terms are listed in the firewall filter configuration When a firewall filter contains multipl...

Page 2796: ...you should try to be conservative in the number of terms rules that you include in each firewall filter because a large number of terms requires longer processing time during a commit and also can make firewall filter testing and troubleshooting more difficult Similarly applying firewall filters across many switch and router interfaces can make testing and troubleshooting the rules of those filter...

Page 2797: ... as ICMP message types and TCP and UDP port numbers nearest to the source devices However typically apply a firewall filter that filters only on a source IP address nearest to the destination devices When applied too close to the source device a firewall filter that filters only on a source IP address could potentially prevent that source device from accessing other services that are available on ...

Page 2798: ...switch s forwarding table A table lookup determines which exit port on the switch to use to forward the packet For both bridged unicast packets and routed unicast packets firewall filters are evaluated and applied hierarchically First a packet is checked against the port firewall filter if present If the packet is permitted it is then checked against the VLAN firewall filter if present If the pack...

Page 2799: ...Switches support firewall filters that allow you to control flows of data packets and local packets Data packets are chunks of data that transit the switch as they are forwarded from a source to a destination Local packets are chunks of data that are destined for or sent by the switch Local packets usually contain routing protocol data data for IP services such as Telnet or SSH and data for admini...

Page 2800: ...kets that are received on the switch s interfaces and are destined for the Routing Engine 2 Ingress firewall filter applied to control incoming packets on the switch s interfaces 3 Egress firewall filter applied to control packets that are transiting the switch s interfaces Related Documentation Understanding Firewall Filter Processing Points for Bridged and Routed Packets on J EX Series Switches ...

Page 2801: ...at you can specify in a term Table 338 on page 2744 shows the action modifiers that you can specify in a term Table 335 Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on J EX Series Switches Supported Platforms and Bind Points Description Match Condition Egress Ingress J EX4200 ports VLANs and Layer 3 interfaces J EX8200 ports VLANs and Layer 3 interfaces J EX4200 ports...

Page 2802: ...ing text synonyms the port numbers are also listed afs 1483 bgp 179 biff 512 bootpc 68 bootps 67 cmd 514 cvspserver 2401 dhcp 67 domain 53 eklogin 2105 ekshell 2106 exec 512 finger 79 ftp 21 ftp data 20 http 80 https 443 ident 113 imap 143 kerberos sec 88 klogin 543 kpasswd 761 krb prop 754 krbupdate 760 kshell 544 ldap 389 login 513 mobileip agent 434 mobilip mn 435 msdp 639 netbios dgm 138 netbi...

Page 2803: ...st prefix list J EX4200 ports and VLANs J EX8200 not supported J EX4200 ports and VLANs J EX8200 ports and VLANs The tag field in the Ethernet header The tag values can be 1 4095 dot1q tag number J EX4200 ports and VLANs J EX8200 ports and VLANs J EX4200 ports and VLANs J EX8200 ports and VLANs User priority field of the tagged Ethernet packet User priority values can be 0 7 In place of the numeri...

Page 2804: ...drop precedences in each class for a total of 12 code points are defined in RFC 2597 Assured Forwarding PHB dscp number J EX4200 ports and VLANs J EX8200 not supported J EX4200 ports and VLANs J EX8200 ports and VLANs Ethernet type field of a packet The EtherType value specifies what protocol is being transported in the Ethernet frame In place of the numeric value you can specify one of the follow...

Page 2805: ...ng depends upon the associated icmp type you must specify icmp type along with icmp code In place of the numeric value you can specify one of the following text synonyms the field values are also listed The options are grouped by the ICMP type with which they are associated parameter problem ip header bad 0 required option missing 1 redirect redirect for host 1 redirect for network 0 redirect for ...

Page 2806: ...ace on which the packet is received You can specify the wildcard character as part of an interface name NOTE An interface from which a packet is sent cannot be used as a match condition interface interface name J EX4200 not supported J EX8200 not supported J EX4200 Layer 3 interfaces J EX8200 Layer 3 interfaces Presence of the options field in the IP header ip options J EX4200 not supported J EX82...

Page 2807: ...er 3 interfaces IP source address field which is the address of the source node sending the packet For IPV6 the source address field is 128 bits in length The filter description syntax supports the text representations for IPv6 addresses that are described in RFC 2373 IP Version 6 Addressing Architecture source address ip address J EX4200 ports and VLANs J EX8200 ports and VLANs J EX4200 ports and...

Page 2808: ... established J EX4200 not supported J EX8200 not supported J EX4200 ports VLANs and Layer 3 interfaces J EX8200 ports VLANs and Layer 3 interfaces One or more TCP flags bit name fin syn rst push ack urgent logical operators logical AND logical OR negation numerical value 0x01 through 0x20 text synonym tcp initial To specify multiple flags use logical operators tcp flags flags tcp initial J EX4200 ...

Page 2809: ... These four classes with three drop precedences in each class for a total of 12 code points are defined in RFC 2597 Assured Forwarding PHB traffic class J EX4200 not supported J EX8200 not supported J EX4200 Layer 3 interfaces J EX8200 Layer 3 interfaces TTL type to match The value can be 1 255 ttl value J EX4200 ports and VLANs J EX8200 ports and VLANs J EX4200 ports and VLANs J EX8200 ports and ...

Page 2810: ...s and Bind Points Description Match Condition Egress Ingress J EX4200 Layer 3 interfaces J EX8200 Layer 3 interfaces J EX4200 Layer 3 interfaces J EX8200 Layer 3 interfaces Specifies the 128 bit address that is the final destination node address for the packet The filter description syntax supports the text representations for IPv6 addresses as described in RFC 2373 IP Version6 Addressing Architec...

Page 2811: ...ace of the numeric value you can specify one of the following text synonyms the port numbers are also listed afs 1483 bgp 179 biff 512 bootpc 68 bootps 67 cmd 514 cvspserver 2401 dhcp 67 domain 53 eklogin 2105 ekshell 2106 exec 512 finger 79 ftp 21 ftp data 20 http 80 https 443 ident 113 imap 143 kerberos sec 88 klogin 543 kpasswd 761 krb prop 754 krbupdate 760 kshell 544 ldap 389 login 513 mobile...

Page 2812: ... dot1q tag number J EX4200 ports and VLANs J EX8200 ports and VLANs J EX4200 ports and VLANs J EX8200 ports and VLANs User priority field of the tagged Ethernet packet User priority values can be 0 7 In place of the numeric value you can specify one of the following text synonyms the field values are also listed background 1 Background best effort 0 Best effort controlled load 4 Controlled load ex...

Page 2813: ...nreachable no route to destination 0 administratively prohibited 1 address unreachable 3 port unreachable 4 icmp code number J EX4200 ports VLANs and Layer 3 interfaces J EX8200 Layer 3 interfaces J EX4200 Layer 3 interfaces J EX8200 Layer 3 interfaces ICMP packet type field Typically you specify this match in conjunction with the protocol match statement to determine which protocol is being used ...

Page 2814: ...s IP source address field which is 128 bits in length The filter description syntax supports the text representations for IPv6 addresses that are described in RFC 2373 IP Version 6 Addressing Architecture source address ip address J EX4200 ports and VLANs J EX8200 ports and VLANs J EX4200 ports and VLANs J EX8200 ports and VLANs Source MAC address You can define a source MAC address with a prefix ...

Page 2815: ... the protocol tcp match condition tcp initial J EX4200 ports VLANs and Layer 3 interfaces J EX8200 Layer 3 interfaces J EX4200 ports VLANs and Layer 3 interfaces J EX8200 Layer 3 interfaces Differentiated Services code point DSCP The DiffServ protocol uses the type of service ToS byte in the IP header The most significant six bits of this byte form the DSCP You can specify DSCP in hexadecimal bina...

Page 2816: ...set is returned if the packet is a TCP packet Otherwise nothing is returned If you do not specify a message type the ICMP notification destination unreachable is sent with the default message communication administratively filtered NOTE reject is not a supported action for IPv6 traffic reject message type J EX4200 ingress and egress J EX8200 not supported Forward matched packets to a virtual routi...

Page 2817: ...supported action modifier for IPv6 traffic log J EX4200 ingress only J EX8200 not supported Set the packet loss priority PLP loss priority high low J EX4200 ingress only J EX8200 ingress only Apply rate limits to the traffic You can specify a policer for ingress port VLAN and router firewall filters only policer policer name J EX4200 ingress only J EX8200 ingress only Log an alert for this packet ...

Page 2818: ...tches all the conditions and no action is specified in the then statement the default action accept is taken When a firewall filter consists of more than one term the firewall filter is evaluated sequentially 1 The packet is evaluated against the conditions in the from statement in the first term 2 If the packet matches all the conditions in the term the action in the then statement is taken and t...

Page 2819: ...it filter term term implicit rule then discard Consequently if a packet passes through all the terms in a filter without matching any conditions the packet is discarded If you configure a firewall filter that has no terms all packets that pass through the filter are discarded NOTE Firewall filtering is supported on packets that are at least 48 bytes long Related Documentation Firewall Filters for ...

Page 2820: ...tches all packets An individual condition in a from statement cannot contain a list of values For example you cannot specify numeric ranges or multiple source or destination addresses Individual conditions in a from statement cannot be negated A negated condition is an explicit mismatch Numeric Filter Match Conditions Numeric filter conditions match packet fields that are identified by a numeric v...

Page 2821: ... example edit firewall family family name filter filter name term term name from user host set interface ge 0 1 user host set interface ge 0 1 user host set interface ge IP Address Filter Match Conditions Address filter match conditions can match prefix values in a packet such as IP source and destination prefixes For address filter match conditions you specify a keyword that identifies the field ...

Page 2822: ... occurs in the following term if the value of the source mac address field matches either of the following addresses edit firewall family family name filter filter name term term name from user host set source mac address 00 11 22 33 44 55 user host set source mac address 00 11 22 33 20 15 Bit Field Filter Match Conditions Bit field filter conditions match packet fields if particular bits in those...

Page 2823: ...onsecutive terms with additional bit field values In the following example the two terms configured match the SYN ACK FIN or RST bit in the TCP flags field edit firewall family family name filter filter name term term name1 from user host set tcp flags syn ack edit firewall family family name filter filter name term term name2 from user host set tcp flags fin rst You can use text synonyms to speci...

Page 2824: ... J EX Series Switches Overview on page 2721 Understanding Firewall Filter Match Conditions on page 2748 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Understanding the Use of Policers in Firewall Filters Policing or rate limiting is an important component of firewall filters that lets you control the amount of traffic that enters an inte...

Page 2825: ... Administrators of J EX Series Switches can use firewall filters in conjunction with virtual routing instances to specify different routes for packets to travel in their networks To set up this feature which is called filter based forwarding you specify a filter and match criteria and then specify the virtual routing instance to send packets to You might want to use filter based forwarding to rout...

Page 2826: ...2754 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2827: ...ket flow Requirements on page 2755 Overview on page 2756 Configuring an Ingress Port Firewall Filter to Prioritize Voice Traffic and Rate Limit TCP and ICMP Traffic on page 2759 Configuring a VLAN Ingress Firewall Filter to Prevent Rogue Devices from Disrupting VoIP Traffic on page 2764 Configuring a VLAN Firewall Filter to Count Monitor and Analyze Egress Traffic on the Employee VLAN on page 2766...

Page 2828: ...t tcp icmp Prevents rogue devices from using HTTP sessions to mimic the gatekeeper device that manages call registration admission and call status for VoIP calls Only TCP or UDP ports should be used and only the gatekeeper uses HTTP That is all voice vlan traffic on TCP ports should be destined for the gatekeeper device This firewall filter applies to all phones on voice vlan including communicati...

Page 2829: ...istribution switch s uplink module is configured to support a Layer 3 connection to a J series router The J EX Series switches are configured to support VLAN membership Table 341 on page 2757 shows the VLAN configuration components for the VLANs Table 341 Configuration Components VLANs VLAN Description VLANSubnetandAvailable IP Addresses VLAN ID VLAN Name Voice VLAN used for employee VoIP traffic ...

Page 2830: ...2 63 is subnet s broadcast address 40 camera vlan Ports on the J EX Series switches support Power over Ethernet PoE to provide both network connectivity and power for VoIP telephones connecting to the ports Table 342 on page 2758 shows the switch ports that are assigned to the VLANs and the IP and MAC addresses for devices connected to the switch ports Table 342 Configuration Components Switch Por...

Page 2831: ...ddress 00 05 85 00 00 02 set firewall family ethernet switching filter ingress port voip class limit tcp icmp term voip high from protocol udp set firewall family ethernet switching filter ingress port voip class limit tcp icmp term voip high then forwarding class expedited forwarding set firewall family ethernet switching filter ingress port voip class limit tcp icmp term voip high then loss prio...

Page 2832: ...15 set class of service schedulers voice high priority high set class of service schedulers net control buffer size percent 10 set class of service schedulers net control priority high set class of service schedulers best effort buffer size percent 75 set class of service schedulers best effort priority low set class of service scheduler maps ethernet diffsrv cos map forwarding class expedited for...

Page 2833: ...h set term icmp connection from protocol icmp user switch set term icmp connection then policer icmp policer user switch set term icmp connection then count icmp counter user switch set term icmp connection then forwarding class best effort user switch set term icmp connection then loss priority high 7 Define the term best effort with no match conditions for an implicit match on all packets that d...

Page 2834: ...s network control scheduler net control user switch set scheduler maps ethernet diffsrv cos map forwarding class best effort scheduler best effort 11 Associate the scheduler map with the outgoing interface edit class of service user switch set interfaces ge 0 1 0 scheduler map ethernet diffsrv cos map Results Display the results of the configuration user switch show firewall policer tcp connection...

Page 2835: ...en policer icmp connection policer count icmp counter forwarding class best effort loss priority high term best effort then forwarding class best effort loss priority high interfaces ge 0 0 0 description voice priority and tcp and icmp traffic rate limiting filter at ingress port unit 0 family ethernet switching filter input ingress port voip class limit tcp icmp ge 0 0 1 description voice priorit...

Page 2836: ...ddress 192 0 2 14 set firewall family ethernet switching filter ingress vlan rogue block term to gatekeeper from destination port 80 set firewall family ethernet switching filter ingress vlan rogue block term to gatekeeper then accept set firewall family ethernet switching filter ingress vlan rogue block term from gatekeeper from source address 192 0 2 14 set firewall family ethernet switching fil...

Page 2837: ...itch set term from gatekeeper from source address 192 0 2 14 user switch set term from gatekeeper from source port 80 user switch set term from gatekeeper then accept 4 Define the term not gatekeeper to ensure all voice vlan traffic on TCP ports is destined for the gatekeeper device edit firewall family ethernet switching filter ingress vlan rogue block user switch set term not gatekeeper from des...

Page 2838: ... following commands and paste them into the switch terminal window edit set firewall family ethernet switching filter egress vlan watch employee term employee to corp from destination address 192 0 2 16 28 set firewall family ethernet switching filter egress vlan watch employee term employee to corp then accept set firewall family ethernet switching filter egress vlan watch employee term employee ...

Page 2839: ...to web from destination port 80 user switch set term employee to web then count employee web counter user switch set term employee to web then analyzer employee monitor NOTE See Example Configuring Port Mirroring for Local Monitoring of Employee Resource Use on J EX Series Switches on page 3249 for information about configuring the employee monitor analyzer 4 Apply the firewall filter egress vlan ...

Page 2840: ...92 0 2 33 28 set firewall family ethernet switching filter ingress vlan limit guest term guest to guest then accept set firewall family ethernet switching filter ingress vlan limit guest term no guest employee no peer to peer from destination mac address 00 05 85 00 00 DF set firewall family ethernet switching filter ingress vlan limit guest term no guest employee no peer to peer then accept set v...

Page 2841: ...uest as an input filter to the interface for guest vlan edit user switch set vlans guest vlan description restrict guest to employee traffic and peer to peer applications on guest VLAN user switch set vlans guest vlan filter input ingress vlan limit guest Results Display the results of the configuration user switch show firewall family ethernet switching filter ingress vlan limit guest term guest ...

Page 2842: ...pply a firewall filter to a routed port Layer 3 uplink module to give highest priority to employee vlan traffic destined for the corporate subnet 1 Define the firewall filter egress router corp class edit user switch set firewall family inet filter egress router corp class 2 Define the term corp expedite edit firewall user switch set family inet filter egress router corp class term corp expedite f...

Page 2843: ...confirm that the firewall filters are working properly perform the following tasks Verifying that Firewall Filters and Policers are Operational on page 2771 Verifying that Schedulers and Scheduler Maps are Operational on page 2772 Verifying that Firewall Filters and Policers are Operational Purpose Verify the operational state of the firewall filters and policers that are configured on the switch ...

Page 2844: ...ame Low non TCP 1 default drop profile Low TCP 1 default drop profile High non TCP 1 default drop profile High TCP 1 default drop profile Scheduler default nc Forwarding class network control Index 22 Transmit rate 5 percent Rate Limit none Buffer size 5 percent Priority low Drop profiles Loss priority Protocol Index Name Low non TCP 1 default drop profile Low TCP 1 default drop profile High non T...

Page 2845: ...J EX Series Switches on page 2883 Configuring Firewall Filters CLI Procedure on page 2779 Configuring Firewall Filters J Web Procedure on page 2784 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 edit firewall Configuration Statement Hierarchy on page 42 Example Using Filter Based Forwarding...

Page 2846: ...rface ge 0 0 3 0 set routing instances vrf01 routing options static route 12 34 56 0 24 next hop 10 1 3 254 set firewall family inet filter fil term t1 then routing instance vrf01 Step by Step Procedure To configure filter based forwarding 1 Create interfaces to the application servers edit user switch set interfaces ge 0 0 0 unit 0 family inet address 10 1 0 1 24 user switch set interfaces ge 0 0...

Page 2847: ...onfiguration user switch show configuration interfaces ge 0 0 0 unit 0 family inet filter input fil address 10 1 0 1 24 ge 0 0 3 unit 0 family inet address 10 1 3 1 24 firewall family inet filter fil term t1 from source address 1 1 1 1 32 protocol tcp then routing instance vrf01 routing instances vrf01 instance type virtual router interface ge 0 0 1 0 interface ge 0 0 3 0 routing options static ro...

Page 2848: ... 0 0 24 ifdn 0 rslv 613 1 ge 0 0 0 0 10 1 0 0 32 iddn 0 10 1 0 0 recv 611 1 ge 0 0 0 0 10 1 0 1 32 user 0 rjct 36 3 10 1 0 1 32 intf 0 10 1 0 1 locl 612 2 10 1 0 1 32 iddn 0 10 1 0 1 locl 612 2 10 1 0 255 32 iddn 0 10 1 0 255 bcst 610 1 ge 0 0 0 0 10 1 1 0 26 ifdn 0 rslv 583 1 vlan 0 10 1 1 0 32 iddn 0 10 1 1 0 recv 581 1 vlan 0 10 1 1 1 32 user 0 rjct 36 3 10 1 1 1 32 intf 0 10 1 1 1 locl 582 2 1...

Page 2849: ... Index NhRef Netif default perm 0 rjct 600 1 Meaning The output indicates that the filter was created on the interface and that the virtual routing instance is forwarding matching traffic to the correct IP address Related Documentation Configuring Firewall Filters CLI Procedure on page 2779 Configuring Static Routing CLI Procedure on page 1444 Configuring Static Routing J Web Procedure on page 144...

Page 2850: ...2778 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2851: ...wall Filters CLI Procedure You configure firewall filters on J EX Series switches to control traffic that enters ports on the switch or enters and exits VLANs on the network and Layer 3 routed interfaces To configure a firewall filter you must configure the filter and then apply it to a port VLAN or Layer 3 interface Configuring a Firewall Filter on page 2779 Applying a Firewall Filter to a Port o...

Page 2852: ...s and can have a maximum of 64 characters Each filter name must be unique 3 If you want to apply a firewall filter to multiple interfaces and name individual firewall counters specific to each interface configure the interface specific option edit firewall family ethernet switching filter ingress port filter user switch set interface specific 4 Specify a term name edit firewall family ethernet swi...

Page 2853: ...et switching filter ingress port filter term term one user switch set then discard You can specify no more than one action accept discard or routing instance per filter term To specify action modifiers for example to count and classify packets in a forwarding class edit firewall family ethernet switching filter ingress port filter term term one user switch set then count counter one user switch se...

Page 2854: ...scription of the firewall filter and the interface to which the filter is applied edit interfaces user switch set ge 0 0 1 description filter to limit tcp traffic filter at trunk port for employee vlan and voice vlan applied on the interface NOTE Providing the description is optional 2 Specify the unit number and family address type for the interface edit interfaces user switch set ge 0 0 1 unit 0...

Page 2855: ...ing a Firewall Filter to a Layer 3 Routed Interface To apply a firewall filter to a Layer 3 routed interface on a switch 1 Specify the interface name and provide a meaningful description of the firewall filter and the interface to which the filter is applied edit interfaces user switch set ge 0 1 0 description filter to count and monitor employee vlan traffic applied on layer 3 interface NOTE Prov...

Page 2856: ...iguring Policers to Control Traffic Rates CLI Procedure on page 2788 Assigning Multifield Classifiers in Firewall Filters to Specify Packet Forwarding Behavior CLI Procedure on page 2791 Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Firewall Filters for J EX Series Switches Overview on page 2721 Configuring Firewall Filters J Web Procedure You configure firewal...

Page 2857: ...ct the filter type Specifies the filter type port VLAN firewall filter or router firewall filter Filter type Enter a name Specifies the name for the filter Filter name Click Add to add new terms Enter information as specified in Table 344 on page 2786 and Table 345 on page 2786 Specifies the terms to be associated with the filter Add new terms or edit existing terms Select terms to be part of the ...

Page 2858: ...AC address To specify the ports interfaces click Add Ports and enter the port number To delete the IP address MAC address or port details select it and click Remove Specifies the destination IP address MAC address and available ports NOTE MAC address is specified only for port VLAN filters Destination Select one Accept Discard Specifies the packet action for the term Action Select the match condit...

Page 2859: ... which the packet is received Interface Select a value from the list Specifies the Ethernet type field of a packet NOTE This option is not applicable for a routing filter Ether type Select a value from the list Specifies the user priority field of the tagged Ethernet packet User priority values can be 0 7 In place of the numeric value you can specify one of the following text synonyms the field va...

Page 2860: ...ity Select the analyzer port mirroring configuration from the list Specifies whether to perform port mirroring on packets Port mirroring copies all packets entering one switch port to a network monitoring connection on another switch port Analyzer Related Documentation Configuring Firewall Filters CLI Procedure on page 2779 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J...

Page 2861: ...licer policer one The policer name can contain letters numbers and hyphens and can be up to 64 characters long 2 Configure rate limiting for the policer a Specify the bandwidth limit in bits per second bps to control the traffic rate on an interface edit firewall policer policer one user switch set if exceeding bandwidth limit 300k The range for the bandwidth limit is 1k through 102 3g bps b Speci...

Page 2862: ...ny other filter must be applied to a port VLAN or Layer 3 interface For information about applying firewall filters see the sections on applying firewall filters in Configuring Firewall Filters CLI Procedure on page 2779 NOTE You can include policer actions on ingress firewall filters only Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Sw...

Page 2863: ...ure the terms of the filter including the forwarding class and loss priority action modifiers as appropriate When you specify a forwarding class you must also specify the packet loss priority For example each of the following terms examines different packet header fields and assigns an appropriate classifier and the packet loss priority The term voice traffic matches packets on the voice vlan and ...

Page 2864: ...ation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Verifying That Firewall Filters Are Operational on page 2799 Monitoring Firewall Filter Traffic on page 2800 Defining CoS Classifiers CLI Procedure on page 2914 Defining CoS Classifiers J Web Procedure on page 2916 Configuring Firewall Filters CLI Procedure on page 2779 Configuring Fire...

Page 2865: ... check whether the policy produces the results that you expect Table 346 Policies Global Configuration Parameters Your Action Function Field To add a prefix list 1 Click Add 2 Enter a name for the prefix list 3 To add an IP address click Add 4 Enter the IP address and the subnet mask and click OK 5 Click OK To edit a prefix list click Edit Edit the settings and click OK To delete a prefix list sel...

Page 2866: ... route Preference Type or select and edit the value Specifies a metric value You can specify up to four metric values Metric To add an interface select Add Interface Select the interface from the list To add an address select Add Address Select the address from the list To remove an interface select it and click Remove Specifies a name or IP address of one or more routing device interfaces Do not ...

Page 2867: ...ies Community Destination tab Select a value from the list Specifies an address family protocol Family Select a value from the list Specifies a routing instance Routing Instance Select a value from the list Specifies the name of a routing table RIB Type a value Specifies the individual preference value for the route Preference Type a value Specifies a metric value Metric To add an interface select...

Page 2868: ...Extracts the last AS number in the existing AS path and affixes that AS number to the beginning of the AS path n times where n is a number from 1 through 32 The AS number is added before the local AS number has been added to the path This action adds AS numbers to AS sequences only not to AS sets If the existing AS path begins with a confederation sequence or set the affixed AS numbers are placed ...

Page 2869: ...s for a route passing through your network based on the source address Destination class The value entered here maintains packet counts for a route passing through your network based on the destination address in the packet Forwarding class Class of Service Related Documentation Configuring BGP Sessions J Web Procedure on page 1431 Configuring an OSPF Network J Web Procedure on page 1435 Configuri...

Page 2870: ...2798 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2871: ...e web 0 0 Filter ingress port voip class limit tcp icmp Counters Name Bytes Packets icmp counter 0 0 Policers Name Packets icmp connection policer 0 tcp connection policer 0 Filter ingress vlan rogue block Filter ingress vlan limit guest Meaning The showfirewall command displays the names of all firewall filters policers and counters that are configured on the switch For each counter that is speci...

Page 2872: ...ys the names of all firewall filters and policers that are configured on the switch For each policer that is specified in a filter configuration the output field shows the current packet count for all packets that exceed the specified rate limits Related Documentation Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Configuring Firewall Filters CLI Procedure on page 2779 Co...

Page 2873: ...counts for counters and packet count for policers Monitoring Traffic for a Specific Firewall Filter Purpose Perform the following task to monitor the number of packets and bytes that matched a firewall filter and monitor the number of packets that exceeded the policer rate limits Action Use the operational mode command user switch show firewall filter ingress vlan rogue block Filter ingress vlan r...

Page 2874: ... Documentation Configuring Firewall Filters CLI Procedure on page 2779 Configuring Firewall Filters J Web Procedure on page 2784 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Verifying That Firewall Filters Are Operational on page 2799 2802 Dell PowerConnect J Serie...

Page 2875: ...ion for the firewall filter configuration is completed in the CLI module Solution When a firewall filter configuration exceeds the amount of available TCAM table space you must configure a new firewall filter with fewer filter terms so that the space requirements for the filter do not exceed the available space in the TCAM table You can perform either of the following procedures to correct the pro...

Page 2876: ...l family ethernet switching filter new filter ingress vlan 2 Apply the firewall filter to the port VLAN or Layer 3 interfaces to overwrite the bind points of the original filter for example edit user switch set vlans voice vlan description smaller filter to block rogue devices on voice vlan user switch set vlans voice vlan filter input new filter ingress vlan 3 Commit the operation edit user switc...

Page 2877: ...ewall family family name filter filter name interface specific term term name from match conditions then action action modifiers policer policer name filter specific if exceeding bandwidth limit bps burst size limit bytes then policer action Related Documentation Firewall Filter Configuration Statements Supported by Junos OS for J EX Series Switches on page 2806 Example Configuring Firewall Filter...

Page 2878: ...ts inet Filter IPv4 packets inet6 Filter IPv6 packets family family name The filter name option identifies the filter The name can contain letters numbers and hyphens and can be up to 64 characters long To include spaces in the name enclose the name in quotation marks filter filter name The interface specific statement configures unique names for individual firewall counters specific to each inter...

Page 2879: ...option specifies the maximum allowed burst size to control the amount of traffic bursting To determine the value for the burst size limit you can multiply the bandwidth of the interface on which the filter is applied by the amount of time in seconds to allow a burst of traffic at that bandwidth to occur burst size bandwidth allowable time for burst traffic You can specify a decimal value or a deci...

Page 2880: ...ame accounting profile name edit firewall policer policer name logical bandwidth policer logical interface policer edit firewall policer policer name if exceeding bandwidth percent number Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 ...

Page 2881: ...uring Prefix Lists as path Syntax as path name regular expression Hierarchy Level edit dynamic policy options edit logical systems logical system name policy options edit policy options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define an autonomous system AS path regular expression for use in a routing policy match condition Options ...

Page 2882: ...sted below the as path group hierarchy name Namethatidentifiestheregularexpression Thenamecancontainletters numbers and hyphens and can be up to 255 characters long To include spaces in the name enclose it in quotation marks regular expression One or more regular expressions used to match the AS path Required Privilege Level routing To view this statement in the configuration routing control To ad...

Page 2883: ...llion which is also called a thousand million Range 1000 1k through 102 300 000 000 102 3g bps J EX Series switches 8000 8k through 40 000 000 000 40g bps routers Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX...

Page 2884: ...rough 2 147 450 880 bytes J EX Series switches 1500 through 1 00 000 000 000 bytes routers Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring Policers to Control Traffic Ra...

Page 2885: ...in the range from 0 through 65 535 community value is the community identifier and can be a number in the range from 0 through 65 535 You also can specify community ids for communities as one of the following well known community names which are defined in RFC 1997 BGP Communities Attribute no export Routes containing this community name are not advertised outside a BGP confederation boundary no a...

Page 2886: ...h specifies the bandwidth in bytes per second NOTE You can specify 4 byte AS numbers as defined in RFC 4893 BGP Support for Four octet AS Number Space as well as the 2 byte AS numbers In plain number format you can configure a value in the range from 1 through 4 294 967 295 To configure a target or origin extended community that includes a 4 byte AS number in the plain number format append the let...

Page 2887: ...ormation Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a policy condition based on the existence of routes in specific tables for use in BGP export policies Options if route exists address Specify the address of the route in question table table name Specify a routing table Required Privilege Level routing To view this statement in the configuration ...

Page 2888: ...aximum hold down time minutes is the maximum time that a route can be suppressed no matter how unstable it has been Range 1 through 720 Default 60 minutes name Name that identifies the set of damping parameters The name can contain letters numbers and hyphens and can be up to 255 characters long To include spaces in the name enclose it in quotation marks reuse number Reuse threshold number is the ...

Page 2889: ...icy options as path path name edit policy options as path group group name edit policy options community community name edit policy options condition condition name edit policy options policy statement policy statement name edit policy options prefix list prefix list name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define routing polic...

Page 2890: ...P packets inet Filter IPv4 packets inet6 Filter IPv6 packets The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Por...

Page 2891: ...enclose it in quotation marks The remaining statements are explained separately Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX...

Page 2892: ...er statement input Apply a firewall filter to traffic entering the port or Layer 3 interface output Apply a firewall filter to traffic exiting the Layer 3 interface Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on ...

Page 2893: ...r Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring Firewall Filters CLI Procedure on page 2779 Configuring Firewall Filters J Web Procedure on page 2784 Firewall Filters for J EX Series Switches Overview on page 2721 filter specific Syntax filter specific Hierarchy Level edit firewall policer policer name Release Information Statement introduced before Junos OS Release...

Page 2894: ... are explained separately Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring Firewall Fil...

Page 2895: ... contain for a match You can specify one or more match conditions If you specify more than one they all must match for a match to occur and for the action in the then statement to be taken Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J ...

Page 2896: ...ining statements are explained separately Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Understanding the ...

Page 2897: ...uired Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Configuring Firewall Filters CLI Procedure on page 2779 Configuring Firewall Filters J Web Procedure on page 2784 Firewall Filters for J EX Series Switches Ov...

Page 2898: ...s long The remaining statements are explained separately Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Example Combining CoS with MPLS on J EX Series Switches on page 2883 Configu...

Page 2899: ...y family name Optional Specify an address family protocol Specify inet for IPv4 Specify inet6 for 128 bit IPv6 and to enable interpretation of IPv6 router filter addresses For IS IS traffic specify iso For IPv4 multicast VPN traffic specify inet mvpn For IPv6 multicast VPN traffic specify inet6 mvpn For multicast distribution tree MDT IPv4 traffic specify inet mdt NOTE When family is not specified...

Page 2900: ... matches source address filter source prefix match type actions Optional Unicast source addresses in multiprotocol BGP MBGP and Multicast Source Discovery Protocol MSDP environments on which to perform an immediate match source prefix is the IPv4 or IPv6 route prefix to match match type is the type of match see Configuring Route Lists and actions is the action to take if the source prefix matches ...

Page 2901: ...ting policy statement or firewall filter statement Options name Name that identifies the list of IPv4or IPv6 address prefixes ip addresses List of IPv4 or IPv6 address prefixes one IP address per line in the configuration The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configur...

Page 2902: ...ets Options routing instance name Name of a virtual routing instance Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Filter Based Forwarding on J EX Series Switches on page 2773 Configuring Virtual Routing Instances CLI Procedure on page 1142 Understanding Filter Base...

Page 2903: ...in quotation marks The remaining statements are explained separately Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Swi...

Page 2904: ...ivilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Firewall Filter Match Conditions and Actions for J EX Series Switches on page 2728 Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Example Using Filter Based Forwarding to Route Application Tr...

Page 2905: ...exceeds the rate limits defined by the policer Required Privilege Level firewall To view this statement in the configuration firewall control To add this statement to the configuration Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Configuring F...

Page 2906: ...2834 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2907: ...CHAPTER 106 Operational Mode Commands for Firewall Filters 2835 ...

Page 2908: ...unts for all filters counter counter name Clear the packet and byte counts for a filter counter that has been configured with the counter firewall filter action filter filter name Clear the packet and byte counts for the specified firewall filter logical system logical system name Clear the packet and byte counts for the specified logical system Required Privilege Level clear Related Documentation...

Page 2909: ... filter filter name Optional Clear the packet and byte counts for the specified firewall filter Required Privilege Level clear Related Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Verifying That Firewall Filters Are Operational on page 2799 Verifying That Policers Are Operational on page 2800 Firewall Filters for J EX Seri...

Page 2910: ...nal Name of a filter counter logical system all logical system name Optional Perform this operation on all logical systems or on a particular system log Optional Display log entries for firewall filters terse Optional Display firewall filter names only Required Privilege Level view Related Documentation clear firewall on page 2836 List of Sample Output show firewall filter on page 2840 show firewa...

Page 2911: ... is prefixed with two underscore __ characters and the name of the logical system for example __ls1 filter1 Filter Display filter counter information Name Name of a filter counter that has been configured with the counter firewall filter action Bytes Number of bytes that match the filter term under which the counter action is specified Packets Number of packets that matched the filter term under w...

Page 2912: ...s c1 ge 5 0 0 1 in 0 0 show firewall Logical Systems user host show firewall Filter __lr1 test Counters Name Bytes Packets icmp 420 5 Filter __default_bpdu_filter__ Filter __lr1 inet_filter1 Counters Name Bytes Packets inet_tcp_count 0 0 inet_udp_count 0 0 Filter __lr1 inet_filter2 Counters Name Bytes Packets inet_icmp_count 0 0 inet_pim_count 0 0 Filter __lr2 inet_filter1 Counters Name Bytes Pack...

Page 2913: ...ed Documentation Example Configuring Firewall Filters for Port VLAN and Router Traffic on J EX Series Switches on page 2755 Verifying That Firewall Filters Are Operational on page 2799 Verifying That Policers Are Operational on page 2800 Firewall Filters for J EX Series Switches Overview on page 2721 Understanding the Use of Policers in Firewall Filters on page 2752 List of Sample Output show fire...

Page 2914: ...ewall Filter egress vlan filter Counters show firewall Name Bytes Packets employee web counter 0 0 Filter ingress port filter Counters Name Bytes Packets ingress port counter 0 0 Filter ingress port voip class filter Counters Name Bytes Packets icmp counter 0 0 Policers Name Packets icmp connection policer 0 tcp connection policer 0 show firewall filter filter name user host show firewall filter e...

Page 2915: ...5 192 168 3 4 08 00 50 pfe R ge 1 0 1 0 ICMP 192 168 3 5 192 168 3 4 08 00 49 pfe R ge 1 0 1 0 ICMP 192 168 3 5 192 168 3 4 08 00 48 pfe R ge 1 0 1 0 ICMP 192 168 3 5 192 168 3 4 08 00 47 pfe R ge 1 0 1 0 ICMP 192 168 3 5 192 168 3 4 2843 Chapter 106 Operational Mode Commands for Firewall Filters ...

Page 2916: ... system Required Privilege Level view List of Sample Output show firewall log on page 2845 show firewall log detail on page 2845 Output Fields Table 352 on page 2844 lists the output fields for the show firewall log command Output fields are listed in the approximate order in which they appear Table 352 show firewall log Output Fields Field Description Field Name Time that the event occurred Time ...

Page 2917: ... 66 513 Time of Log 2004 10 13 10 37 17 PDT Filter f Filter action accept Name of interface fxp0 0 Name of protocol TCP Packet Length 1020 Source address 172 17 22 108 829 Destination address 192 168 70 66 513 Time of Log 2004 10 13 10 37 17 PDT Filter f Filter action accept Name of interface fxp0 0 Name of protocol TCP Packet Length 49245 Source address 172 17 22 108 829 Destination address 192 1...

Page 2918: ...t fields are listed in the approximate order in which they appear Table 353 show interfaces filters Output Fields Level of Output Field Description Field Name All levels Name of the physical interface Interface All levels Interface state up or down Admin All levels Link state up or down Link All levels Protocol that is configured on the interface Proto All levels Name of the firewall filter to be ...

Page 2919: ... down ge 0 0 10 up down ge 0 0 10 0 up down show interfaces filters interface name user host show interfaces filters ge 0 0 0 Interface Admin Link Proto Input Filter Output Filter ge 0 0 0 up down ge 0 0 0 0 up down eth switch unknown 2847 Chapter 106 Operational Mode Commands for Firewall Filters ...

Page 2920: ...s command Output fields are listed in the approximate order in which they appear Table 354 show interfaces policers Output Fields Level of Output Field Description Field Name All levels Name of the interface Interface All levels Interface state up or down Admin All levels Link state up or down Link All levels Protocol configured on the interface Proto All levels Policer to be evaluated when packet...

Page 2921: ...e 0 0 0 0 up down eth switch Interface Admin Link Proto Input Policer Output Policer ge 0 0 1 up down ge 0 0 1 0 up down eth switch Interface Admin Link Proto Input Policer Output Policer ge 0 0 2 up down ge 0 0 3 up down ge 0 0 4 up down ge 0 0 5 up down ge 0 0 6 up down ge 0 0 7 up down ge 0 0 8 up down ge 0 0 9 up down ge 0 0 10 up down ge 0 0 10 0 up down eth switch show interfaces policers in...

Page 2922: ...n page 2752 List of Sample Output show policer on page 2850 show policer policer name on page 2851 Output Fields Table 355 on page 2850 lists the output fields for the showpolicer command Output fields are listed in the approximate order in which they appear Table 355 show policer Output Fields Level of Output Field Description Field Name All levels Name of filter that is configured with the filte...

Page 2923: ...cer 0 Filter ingress vlan rogue block show policer policer name user host show policer tcp connection policer Filter ingress port filter Policers Name Packets tcp connection policer 0 2851 Chapter 106 Operational Mode Commands for Firewall Filters ...

Page 2924: ...ivilege Level view Related Documentation show policy damping on page 1886 List of Sample Output show policy on page 2852 show policy policy name on page 2853 show policy Multicast Scoping on page 2853 Output Fields Table 356 on page 2852 lists the output fields for the show policy command Output fields are listed in the approximate order in which they appear Table 356 show policy Output Fields Fie...

Page 2925: ...olicy test statics Policy test statics from 3 0 0 0 8 accept 3 1 0 0 16 accept then reject show policy Multicast Scoping user host show policy test statics Policy test statics from multicast scoping 8 2853 Chapter 106 Operational Mode Commands for Firewall Filters ...

Page 2926: ...ogical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show policy conditions detail on page 2855 Output Fields Table 357 on page 2854 lists the output fields for the show policy conditions command Output fields are listed in the approximate order in which they appear Table 3...

Page 2927: ... detail Configured conditions Condition cond1 event Existence of a route in a specific routing table show policy conditions detail Dependent routes 4 4 4 4 32 generation 3 6 6 6 6 32 generation 3 10 10 10 10 32 generation 3 Condition cond2 event Existence of a route in a specific routing table Dependent routes None Condition tables Table inet 0 generation 4 dependencies 3 If route exists condition...

Page 2928: ...t routes learned from internal BGP IBGP or external BGP EGBP multihop peers Required Privilege Level view Related Documentation show policy damping on page 1886 List of Sample Output test policy on page 2856 Output Fields For information about output fields see the output field tables for the show route command the show route detail command the show route extensive command or the show route terse ...

Page 2929: ...vice CoS Overview on page 2859 Examples CoS Configuration on page 2883 Configuring CoS on page 2911 Verifying CoS Configuration on page 2935 Configuration Statements for CoS on page 2943 Operational Mode Commands for CoS on page 2977 2857 ...

Page 2930: ...2858 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2931: ... CoS Forwarding Classes on page 2870 Understanding CoS Tail Drop Profiles on page 2872 Understanding CoS Schedulers on page 2873 Understanding CoS Two Color Marking on page 2876 Understanding CoS Rewrite Rules on page 2876 Understanding Port Shaping and Queue Shaping for CoS on J EX Series Switches on page 2878 Understanding Junos OS EZQoS for CoS Configurations on J EX Series Switches on page 287...

Page 2932: ...rms in a CoS domain Because J EX Series Switches implement CoS in hardware rather than in software you can experiment with and deploy CoS features without affecting packet forwarding and switching performance NOTE CoS policies can be enabled or disabled on each interface of a J EX Series switch Also each physical and logical interface on the switch can have custom CoS rules associated with it When...

Page 2933: ...hich performs the same actions Switch D also examines the packets and determines the appropriate groups Because Switch D sits at the far end of the network it can rewrite the CoS bits of the packets before transmitting them Figure 79 Packet Flow Across the Network Default CoS Behavior on J EX Series Switches If you do not configure any CoS settings on the switch the software performs some CoS func...

Page 2934: ...u can configure policers to discard packets that exceed the rate limits If you want to configure CoS parameters such as loss priority and forwarding class you must use firewall filters Classifiers Packet classification associates incoming packets with a particular CoS servicing level In the Junos OS classifiers associate packets with a forwarding class and loss priority and assign packets to outpu...

Page 2935: ... the loss priority setting to identify packets that have experienced congestion Typically you mark packets exceeding some service level with a high loss priority Schedulers Each switch interface has multiple queues assigned to store packets The switch determines which queue to service based on a particular method of scheduling This process often involves determining which type of packet should be ...

Page 2936: ... switch you can assign a meaningful name or alias to the CoS values and use this alias instead of bits when configuring CoS components These aliases are not part of the specifications but are well known through usage For example the alias for DSCP 101110 is widely accepted as ef expedited forwarding When you configure classes and define classifiers you can refer to the markers by alias names You c...

Page 2937: ...01100 af12 001110 af13 010010 af21 010100 af22 010110 af23 011010 af31 011100 af32 011110 af33 100010 af41 100100 af42 100110 af43 000000 be 001000 cs1 010000 cs2 011000 cs3 100000 cs4 101000 cs5 110000 nc1 cs6 111000 nc2 cs7 IEEE 802 1p CoS Values 000 be 2865 Chapter 107 Class of Service CoS Overview ...

Page 2938: ... af11 101 af12 110 nc1 cs6 111 nc2 cs7 Related Documentation Understanding Junos OS CoS Components for J EX Series Switches on page 2862 Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Code Point Aliases CLI Procedure on page 2914 Defining CoS Code Point Aliases J Web Procedure on page 2912 2866 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos ...

Page 2939: ...tive of the classifier applied to the ingress interface On J EX8200 Ethernet Switches you can specify BA classifiers for bridged multidestination traffic and IP multidestination traffic The BA classifier for multicast packets is applied to all interfaces on the J EX8200 switch This topic describes Behavior Aggregate Classifiers on page 2867 Multifield Classifiers on page 2869 Behavior Aggregate Cl...

Page 2940: ...60 Allowed BA Classification Allowed BA Classification Type of Interface IEEE 802 1p IP Precedence DSCP DSCP IPv6 Layer 2 interface IEEE 802 1p IP Precedence DSCP Layer 3 interface IPv4 IEEE 802 1p IP Precedence DSCP IPv6 Layer 3 interface IPv6 You can configure all the allowed classifier types on the same logical interface or on different logical interfaces If you need to apply all classifier rul...

Page 2941: ...sses and source and destination port numbers of the packet With MF classifiers you set the forwarding class and loss priority of a packet based on firewall filter rules MF classification is normally performed at the network edge because of the general lack of DSCP or IP precedence support in end user applications On an edge switch an MF classifier provides the filtering functionality that scans th...

Page 2942: ...cast be Provides no service profile for multicast packets NOTE The forwarding classes multicast expedited forwarding multicast assured forwarding and multicast best effort are applicable only to J EX8200 Ethernet Switches J EX Series Switches support up to 16 forwarding classes thus allowing granular packet classification For example you can configure multiple classes of EF traffic such as EF EF1 ...

Page 2943: ...he software delivers packets in this service class with a high priority These packets are not delay sensitive Typically these packets represent routing protocol hello or keep alive messages Because loss of these packets jeopardizes proper network operation packet delay is preferable to packet discard network control nc Table 362 Default Forwarding Classes for Multicast Packets Comments Forwarding ...

Page 2944: ...at specific queue The queue fullness defines the delay buffer bandwidth which provides packet buffer space to absorb burst traffic up to the specified duration of delay Once the specified delay buffer becomes full packets with 100 percent drop probability are dropped from the tail of the buffer On J EX Series Switches drop probability is implicitly set to 100 percent and it cannot be modified You ...

Page 2945: ...ueue2 andnetwork control queue7 are used in the default configuration By default the best effort forwarding class queue 0 receives 95 percent of the bandwidth and buffer space for the output link and the network control forwarding class queue 7 receives 5 percent The default drop profile causes the buffer to fill completely and then to discard all incoming packets until it has free space NOTE On J...

Page 2946: ...are 95 0 0 0 0 0 0 and 5 percent of the total available bandwidth The default buffer size percentages for queues 0 through 7 are 95 0 0 0 0 0 0 and 5 percent of the total available buffer NOTE On J EX8200 switches the default scheduler transmission rates for queues 0 through 7 are 75 0 20 0 0 0 0 and 5 percent of the total available bandwidth The default buffer size percentages for queues 0 throug...

Page 2947: ...her queue numbers is always scheduled prior to traffic in lower queue numbers In other words in case of two high priority queues the queue with higher queue number is processed first Packets in low priority queues are transmitted only when strict high priority queues are empty Scheduler Drop Profile Maps Drop profile maps associate drop profiles with a scheduler Drop profile map sets the drop prof...

Page 2948: ... affected by any previous marking or metering of the examined packets In other words the policer is blind to any previous coloring a packet might have had Related Documentation Understanding Junos OS CoS Components for J EX Series Switches on page 2862 Understanding the Use of Policers in Firewall Filters on page 2752 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Underst...

Page 2949: ... an IP precedence rewrite rule is active bits 3 4 and 5 of the ToS byte are always reset to zero when code points are rewritten Default Rewrite Rule To enable a rewrite rule on an interface you can either create your own rewrite rule and enable it on the interface or enable a default rewrite rule See Defining CoS Rewrite Rules CLI Procedure on page 2925 Table 363 on page 2877 shows the default rew...

Page 2950: ... queue shaping can be used to manage the excess traffic and avoid congestion Port shaping defines the maximum bandwidth allocated to a port while queue shaping defines a limit on excess bandwidth usage per queue This topic covers Port Shaping on page 2878 Queue Shaping on page 2878 Port Shaping Port shaping enables you to shape the aggregate traffic through a port or channel to a rate that is less...

Page 2951: ...orwarding classes schedulers and scheduler maps and then apply these components to the interfaces Therefore configuring CoS can be a fairly complex and time consuming task EZQoS works by automatically assigning preconfigured values to all CoS parameters based on the typical application requirements These preconfigured values are stored in a template with a unique name You can change the preconfigu...

Page 2952: ...ult or custom You do not bind the EXP classifier or the EXP rewrite rule to individual interfaces The switch automatically and implicitly applies the default or the custom EXP classifier and the default or the custom EXP rewrite rule to the appropriate MPLS enabled interfaces Because rewrite rules affect only egress interfaces the switch applies the EXP rewrite rule only to those MPLS interfaces t...

Page 2953: ...ar interface but it is not required You can configure one interface as DSCP1 and another as DSCP2 and another and IP precedence and so forth Default Classifiers and Default Rewrite Rules The default classifiers support only two forwarding classes best effort and network control and use only two queues 0 and 7 However J EX Series switches support up to sixteen forwarding classes and eight queues To...

Page 2954: ...e same as for the other CoS configurations on J EX Series switches Default schedulers are provided for best effort and network control forwarding classes If you are using assured forwarding expedited forwarding or other custom forwarding classes we recommend that you configure a scheduler to support that forwarding class See Understanding CoS Schedulers on page 2873 Related Documentation Junos OS ...

Page 2955: ...an divide traffic on your switch into classes and provide various levels of throughput and packet loss This is especially important for traffic that is sensitive to jitter and delay such as voice traffic This example shows how to configure CoS on a single J EX Series switch in the network Requirements on page 2883 Overview and Topology on page 2883 Configuration on page 2886 Verification on page 2...

Page 2956: ...er The J EX Series access switch is configured to support VLAN membership Switch ports ge 0 0 0and ge 0 0 1 are assigned to the voice vlan for two VoIP phones Switch port ge 0 0 2 is assigned to the camera vlan for the surveillance camera Switch ports 2884 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2957: ...tions 192 168 1 22 32 192 168 1 23 through 192 168 1 35 192 168 1 36 is the subnet s broadcast address 30 server vlan Ports on the J EX Series switches support Power over Ethernet PoE to provide both network connectivity and power for VoIP telephones connecting to the ports Table 365 on page 2885 shows the switch interfaces that are assigned to the VLANs and the IP addresses for devices connected ...

Page 2958: ...ching filter voip_class term network_control then forwarding class network control loss priority low set firewall family ethernet switching filter voip_class term best_effort_traffic then forwarding class best effort loss priority low set interfaces ge 0 0 0 description phone1 voip ingress port set interfaces ge 0 0 0 unit 0 family ethernet switching filter input voip_class set interfaces ge 0 0 1...

Page 2959: ... app_class set interfaces ge 0 0 5 unit 0 family ethernet switching filter input app_class set interfaces ge 0 0 6 unit 0 family ethernet switching filter input app_class set class of service schedulers voice sched buffer size percent 10 set class of service schedulers voice sched priority strict high set class of service schedulers voice sched transmit rate percent 10 set class of service schedul...

Page 2960: ...thernet switching filter voip_class 3 Define the term voip edit firewall user switch set family ethernet switching filter voip_class term voip from source address 192 168 1 1 32 user switch set family ethernet switching filter voip_class term voip from source address 192 168 1 2 32 user switch set family ethernet switching filter voip_class term voip protocol udp user switch set family ethernet sw...

Page 2961: ...filter video_class term best_effort_traffic then forwarding class best effort loss priority low 11 Apply the firewall filter video_class as an input filter to the interface for the surveillance camera edit interfaces user switch set ge 0 0 2 description video ingress port user switch set ge 0 0 2 unit 0 family ethernet switching filter input video_class 12 Define the firewall filter app_class to c...

Page 2962: ...twork control loss priority low 18 Define the term best_effort_traffic for the app_class filter edit firewall user switch set family ethernet switching filter app_class term best_effort_traffic then forwarding class best effort loss priority low 19 Apply the firewall filter app_class as an input filter to the interfaces for the servers hosting applications edit interfaces user switch set ge 0 0 3 ...

Page 2963: ...oice scheduler voice sched user switch set scheduler maps ethernet cos map forwarding class video scheduler video sched user switch set scheduler maps ethernet cos map forwarding class app scheduler app sched user switch set scheduler maps ethernet cos map forwarding class mail scheduler mail sched user switch set scheduler maps ethernet cos map forwarding class db scheduler db sched user switch s...

Page 2964: ...otocol udp source port 2979 then forwarding class video loss priority low term network control from precedence net control internet control then forwarding class network control loss priority low term best_effort_traffic then forwarding class best effort loss priority low filter app_class term app from source address 192 168 1 23 32 protocol tcp source port 1491 2512 2513 2598 2897 2892 Dell Power...

Page 2965: ...p source port 1521 1525 1527 1571 1810 2481 then forwarding class db loss priority low term erp from source address 192 168 1 26 32 protocol tcp source port 3200 3300 3301 3600 then forwarding class erp loss priority low term network control from precedence net control internet control then forwarding class network control loss priority low term best_effort_traffic then forwarding class best effor...

Page 2966: ...0 video sched buffer size percent 15 priority low transmit rate percent 15 app sched buffer size percent 10 priority low transmit rate percent 10 mail sched buffer size percent 5 priority low transmit rate percent 5 db sched buffer size percent 10 priority low transmit rate percent 10 erp sched buffer size percent 10 priority low transmit rate percent 10 nc sched buffer size percent 5 priority str...

Page 2967: ...d forwarding class erp scheduler erp sched forwarding class network control scheduler nc sched forwarding class best effort scheduler be sched user switch show interfaces ge 0 0 0 unit 0 family ethernet filter input voip_class ge 0 0 1 unit 0 family ethernet filter input voip_class ge 0 0 2 unit 0 family ethernet filter input video_class ge 0 0 3 unit 0 family ethernet filter input app_class ge 0 ...

Page 2968: ...duler Map Has Been Applied to the Interface on page 2898 Verifying That the Defined Forwarding Classes Exist and Are Mapped to Queues Purpose Verify that the following forwarding classes app db erp mail video and voice have been defined and mapped to queues Action user switch show class of service forwarding class Forwarding class ID Queue app 0 5 db 1 2 erp 2 3 best effort 3 0 mail 4 1 voice 5 6 ...

Page 2969: ...s priority Protocol Index Name High non TCP 1 default drop profile High TCP 1 default drop profile Scheduler mail sched Forwarding class mail Index 22 Transmit rate 5 percent Rate Limit none Buffer size 5 percent Priority low Drop profiles Loss priority Protocol Index Name High non TCP 1 default drop profile High TCP 1 default drop profile Scheduler db sched Forwarding class db Index 22 Transmit r...

Page 2970: ...age 2914 Defining CoS Classifiers CLI Procedure on page 2914 Defining CoS Forwarding Classes CLI Procedure on page 2918 Defining CoS Schedulers CLI Procedure on page 2920 Configuring CoS Tail Drop Profiles CLI Procedure on page 2925 Assigning CoS Components to Interfaces CLI Procedure on page 2928 Configuring Firewall Filters CLI Procedure on page 2779 Example Combining CoS with MPLS on J EX Serie...

Page 2971: ...npage3071 Thisexampleassumes that an MPLS network has been configured using a cross circuit connect CCC Overview and Topology This example describes adding custom classifiers and custom rewrite rules to switches in an MPLS network that is using MPLS over CCC It is a unidirectional configuration Therefore you need to configure custom classifiers and custom rewrite rules as follows On the ingress PE...

Page 2972: ...licing filter mypolicer filter myfilter Policing filter configured and applied to the LSP Specifies the name of the custom DSCP classifier dscp1 Custom DSCP classifier Name of the custom EXP rewrite rule e1 Custom EXP rewrite rule Interface that receives packets from devices outside the network The custom DSCP classifier must be specified on this CCC interface ge 0 0 1 0 Customer edge interface In...

Page 2973: ...ch PE 1 The EXP classifier is enabled by default on the switch and applied implicitly to these interfaces ge 0 0 5 0 and ge 0 0 6 0 Core interfaces receiving packets from other MPLS switches Interfaces that transmit packets to the egress PE PE 2 The EXP rewrite rule is applied implicitly on these interfaces Schedulers can also be specified and will be applied to these interfaces ge 0 0 7 0 and ge ...

Page 2974: ...s exp e1 forwarding class expedited forwarding loss priority low code point 111 4 Bind the DSCP classifier to the CCC interface edit user switch set class of service interfaces ge 0 0 1 unit 0 classifier dscp1 5 Specify the number of bits per second permitted on average for the firewall policer which will later be applied to the LSP edit firewall set policer mypolicer if exceeding bandwidth limit ...

Page 2975: ... policer mypolicer policer mypolicer if exceeding bandwidth limit 500m burst size limit 33553920 then discard Configuring the Remote PE Switch CLI Quick Configuration To quickly configure a custom EXP classifier on the remote PE switch copy the following commands and paste them into the switch terminal window of PE 2 edit set class of service classifiers exp exp1 import default set class of servic...

Page 2976: ...py the following commands and paste them into the switch terminal window of the provider switch edit set class of service classifiers exp exp1 import default set class of service classifiers exp exp1 forwarding class expedited forwarding loss priority low code points 010 set class of service rewrite rules exp e1 forwarding class expedited forwarding loss priority low code point 111 Step by Step Pr...

Page 2977: ...ying That the CoS Classifiers Are Going to the Right Queue on page 2905 Verifying the CoS Forwarding Table Mapping on page 2908 Verifying the Rewrite Rules on page 2909 Verifying That the Policer Firewall Filter Is Operational Purpose Verify the operational state of the policer that is configured on the ingress PE switch Action user switch show firewall Filter myfilter Policers Name Packets mypoli...

Page 2978: ... 0 25 011001 0 0 26 011010 0 0 27 011011 0 0 28 011100 0 0 29 011101 0 0 30 011110 0 0 31 011111 0 0 32 100000 0 0 33 100001 0 0 34 100010 0 0 35 100011 0 0 36 100100 0 0 37 100101 0 0 38 100110 0 0 39 100111 0 0 40 101000 0 0 41 101001 0 0 42 101010 0 0 43 101011 0 0 44 101100 0 0 45 101101 0 0 46 101110 0 0 47 101111 0 0 48 110000 3 0 49 110001 3 0 50 110010 3 0 51 110011 3 0 52 110100 3 0 53 11...

Page 2979: ... 7 111 3 0 Classifier table index 16 entries 8 Table type Untrust Entry Code point Forwarding class PLP 0 000 0 0 1 001 0 0 2 010 0 0 3 011 0 0 4 100 0 0 5 101 0 0 6 110 0 0 7 111 0 0 Classifier table index 9346 entries 64 Table type DSCP Entry Code point Forwarding class PLP 0 000000 0 0 1 000001 0 0 2 000010 0 0 3 000011 0 0 4 000100 0 0 5 000101 0 0 6 000110 0 0 7 000111 1 0 8 001000 0 0 9 0010...

Page 2980: ...3 0 54 110110 3 0 55 110111 3 0 56 111000 3 0 57 111001 3 0 58 111010 3 0 59 111011 3 0 60 111100 3 0 61 111101 3 0 62 111110 3 0 63 111111 3 0 Meaning This output shows that a new DSCP classifier has been created index 9346 on the ingress PE switch PE 1 Verifying the CoS Forwarding Table Mapping Purpose For each logical interface display either the table index of the classifier for a given code p...

Page 2981: ...s State 0 000 Enabled 001 Enabled 1 010 Enabled 011 Enabled 2 100 Enabled 101 Enabled 3 110 Enabled 111 Enabled Rewrite table index 35 entries 4 Table type IPv4 precedence FC Low bits State High bits State 0 000 Enabled 000 Enabled 1 101 Enabled 101 Enabled 2 001 Enabled 001 Enabled 3 110 Enabled 111 Enabled Rewrite table index 9281 entries 1 Table type EXP FC Low bits State High bits State 1 111 ...

Page 2982: ...2910 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 2983: ...ng CoS Rewrite Rules CLI Procedure on page 2925 Defining CoS Rewrite Rules J Web Procedure on page 2926 Assigning CoS Components to Interfaces CLI Procedure on page 2928 Assigning CoS Components to Interfaces J Web Procedure on page 2928 Configuring Junos OS EZQoS for CoS CLI Procedure on page 2930 Configuring CoS on MPLS Provider Edge Switch Using IP Over MPLS CLI Procedure on page 2931 Configuri...

Page 2984: ...Classifiers J Web Procedure on page 2916 Defining CoS Code Point Aliases J Web Procedure on page 2912 Defining CoS Forwarding Classes J Web Procedure on page 2918 Defining CoS Rewrite Rules J Web Procedure on page 2926 Defining CoS Schedulers J Web Procedure on page 2920 Assigning CoS Components to Interfaces J Web Procedure on page 2928 Defining CoS Code Point Aliases J Web Procedure You can use ...

Page 2985: ...int name Select a value Specifies a code point type The code point type can be DSCP or IP precedence Code point type To specify a CoS value type it in the appropriate format For DSCP CoS values use the format xxxxxx where x is 1 or 0 for example 101110 For IP precedence CoS values use the format xxx where x is 1 or 0 for example 111 Specifies the CoS value for which an alias is defined Changing th...

Page 2986: ...ncoming packets with a particular CoS servicing level Classifiers associate packets with a forwarding class and loss priority and assign packets to output queues based on the associated forwarding class The Junos OS supports two general types of classifiers Behavior aggregate or CoS value traffic classifiers Examines the CoS value in the packet header The value in this single field determines the ...

Page 2987: ...t class of service classifiers user switch set dscp ba classifier forwarding class ef loss priority high code points 101110 Associate code point 001100 with forwarding class af and loss priority high edit class of service classifiers user switch set dscp ba classifier forwarding class af loss priority high code points 001100 Associate code point 110001 with forwarding class nc and loss priority hi...

Page 2988: ...ommit the changes immediately for them to take effect To commit all changes to the active configuration select Commit Options Commit See Using the Commit Options to Commit Configuration Changes J Web Procedure on page 334 for details about all commit options 2 Click one Add Adds a classifier Enter information into the classifier page as described in Table 371 on page 2916 Edit Modifies an existing...

Page 2989: ... assured forwarding Provides high assurance for packets within the specified service profile Excess packets are dropped network control Packetscanbedelayed but not dropped 4 Select the loss priority To assign a loss priority select one high Packet has a high loss priority low Packet has a low loss priority Sets the forwarding classes and the packet loss priorities PLPs for specific CoS values and ...

Page 2990: ...arding classes user switch set class be queue num 0 user switch set class ef queue num 1 user switch set class af queue num 2 user switch set class nc queue num 3 user switch set class ef1 queue num 4 user switch set class ef2 queue num 5 user switch set class af1 queue num 6 user switch set class nc1 queue num 7 Related Documentation Defining CoS Forwarding Classes J Web Procedure on page 2918 Ex...

Page 2991: ...n internal queue number select an integer from 0 through 7 appropriate for your platform Specifies the internal queue numbers to which forwarding classes are assigned By default if a packet is not classified it is assigned to the class associated with queue 0 You can have more than one forwarding class to a queue number Queue Type the name for example be class Specifies the forwarding class names ...

Page 2992: ...r switch set be map forwarding class best effort scheduler be sched 3 Assign the scheduler map be map to an Ethernet interface ge 0 0 1 edit class of service interfaces user switch set ge 0 0 1 scheduler map be map 4 Alternatively to assign the scheduler map be map to all the Ethernet interfaces using wild cards ge edit class of service interfaces user switch set ge scheduler map be map Related Do...

Page 2993: ...73 on page 2921 Delete Deletes an existing scheduler Table 373 Schedulers Configuration Page Your Action Function Field To name a scheduler type the name for example be scheduler Specifies the name for a scheduler Scheduler Name To set a priority select one low Packets in this queue are transmitted last strict high Packets in this queue are transmitted first To specify no scheduling priority selec...

Page 2994: ...s voice or video Buffer Size To specify shaping rate as a percentage select Percent and type an integer from 1 through 100 To specify shaping rate as a number select Rate and enter a value To specify no shaping rate select the blank Specifies the rate at which queues transmit packets Shaping Rate To define a transmit rate select the appropriate option To enforce the exact transmission rate select ...

Page 2995: ...ting scheduler map Table 374 Scheduler Maps Configuration Fields Your Action Function Field To name a map type the name for example be scheduler map Specifies the name for a scheduler map Scheduler Map Name To associate a scheduler with a forwarding class locate the forwarding class and select the scheduler in the box next to it For example for the best effort forwarding class select the configure...

Page 2996: ...e name for a drop profile Drop Profile Name Select one Segmented or Interpolated Specifies the drop profile graph type Drop profile graph To add new values 1 Click Add 2 Enter the fill level 3 Enter the drop probability 4 Click OK To edit an existing value click Edit and modify the fill level and drop probability To delete a value select it and click Delete Specifies values for the following two p...

Page 2997: ...g it a name and associating it with a forwarding class loss priority and a code point thus creating a rewrite table After the rewrite rule is created enable it on an interface You can also apply an existing rewrite rule on an interface NOTE To replace an existing rewrite rule on the interface with a new rewrite rule of the same type first explicitly remove the rewrite rule and then apply the new r...

Page 2998: ...write Rules on page 2938 Understanding CoS Rewrite Rules on page 2876 Defining CoS Rewrite Rules J Web Procedure You can use the J Web interface to define CoS rewrite rules Use the rewrite rules to alter the CoS values in outgoing packets to meet the requirements of the targeted peer A rewrite rule examines the forwarding class and loss priority of a packet and sets its bits to a corresponding val...

Page 2999: ...ets Typically RED drop profile is aggressive and no loss priority is defined assured forwarding Provides high assurance for packets within the specified service profile Excess packets are dropped network control Packetscanbedelayed but not dropped 4 Select the loss priority To assign a loss priority select one high Packet has a high loss priority low Packet has a low loss priority To edit an exist...

Page 3000: ...component for example a rewrite rule named customup rw to all Gigabit Ethernet interfaces on the switch use wild characters for the interface name and logical interface unit number edit class of service interfaces user switch set ge unit rewrite rules ieee 802 1 customup rw Related Documentation Assigning CoS Components to Interfaces J Web Procedure on page 2928 Example Configuring CoS on J EX Ser...

Page 3001: ... logical interface Table 377 Assigning CoS Components to Logical Interfaces Your Action Function Field Type the interface name To assign CoS services to all logical interfaces configured on this physical interface type the wildcard character Specifies the name of a logical interface Allows you to assign CoS components while configuring a logical interface on a physical interface at the same time U...

Page 3002: ...applications The EZQoS VoIP template is stored in etc config ezqos voip conf To configure EZQoS using the CLI 1 Load the EZQoS configuration file etc config ezqos voip conf edit user switch load merge etc config ezqos voip conf 2 Apply the EZQoS group ezqos voip edit user switch set apply groups ezqos voip 3 Apply the DSCP classifier ezqos dscp classifier to a Gigabit Ethernet interface ge 0 0 0 e...

Page 3003: ...1 import default 2 Add the expedited forwarding class to this custom DSCP classifier specifying a loss priority and code point edit class of service user switch set classifiers dscp dscp1 forwarding class expedited forwarding loss priority low code points 000111 3 Specify the values for the custom EXP rewrite rule e1 edit class of service user switch set rewrite rules exp e1 forwarding class exped...

Page 3004: ... you can use only one type of DSCP IP precedence and only one type of IEEE 802 1p on the CCC interfaces This procedure creates a custom DSCP classifier and a custom EXP rewrite rule on the ingress PE It also enables a policer on the label switched path LSP of the ingress PE to ensure that the amount of traffic forwarded through the LSP never exceeds the requested bandwidth allocation 1 Import the ...

Page 3005: ... discard 8 To reference the policer configure a filter term that includes the policer action edit firewall user switch set family any filter myfilter term t1 then policer mypolicer 9 Apply the filter to the LSP edit protocols mpls set label switched path lsp_to_pe2_ge1 policing filter myfilter NOTE You can also configure schedulers and shapers as needed See Defining CoS Schedulers CLI Procedure on...

Page 3006: ...2934 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3007: ...classifier Action To monitor CoS classifiers in the J Web interface select Monitor Class of Service Classifiers To monitor CoS classifiers in the CLI enter the following CLI command show class of service classifier Meaning Table 378 on page 2935 summarizes key output fields for CoS classifiers Table 378 Summary of Key CoS Classifier Output Fields Additional Information Values Field To display clas...

Page 3008: ...s to queues on the switch Action To monitor CoS forwarding classes in the J Web interface select Monitor Class of Service Forwarding Classes To monitor CoS forwarding classes in the CLI enter the following CLI command show class of service forwarding class Meaning Table 379 on page 2936 summarizes key output fields for CoS forwarding classes Table 379 Summary of Key CoS Forwarding Class Output Fie...

Page 3009: ...interfaces that have CoS components in the CLI enter the following command show class of service interface interface Meaning Table 380 on page 2937 summarizes key output fields for CoS interfaces Table 380 Summary of Key CoS Interfaces Output Fields Additional Information Values Field To display names of logical interfaces configured on this physical interface click the plus sign Name of a physica...

Page 3010: ...wing command show class of service rewrite rules Meaning Table 381 on page 2938 summarizes key output fields for CoS rewrite rules Table 381 Summary of Key CoS Rewrite Rules Output Fields Additional Information Values Field Names of rewrite rules Rewrite Rule Name To display forwarding classes loss priorities and rewritten CoS values click the plus sign Rewrite rule type dscp For IPv4 DiffServ tra...

Page 3011: ...wing CLI command show class of service scheduler map Meaning Table 382 on page 2939 summarizes key output fields for CoS scheduler maps Table 382 Summary of Key CoS Scheduler Maps Output Fields Additional Information Values Field For details click the plus sign Name of a scheduler map Scheduler Map Index of a specific object scheduler maps schedulers or drop profiles Index Name of a scheduler Sche...

Page 3012: ...drop profile Loss Priority Transport protocol corresponding to a drop profile Protocol Name of the drop profile Drop Profile Name Index of a specific object scheduler maps schedulers or drop profiles Index Related Documentation Defining CoS Schedulers CLI Procedure on page 2920 Defining CoS Schedulers J Web Procedure on page 2920 Example Configuring CoS on J EX Series Switches on page 2883 Monitor...

Page 3013: ...formation for each CoS random early detection RED drop profile on the J EX8200 switch Action To monitor CoS RED drop profiles in the J Web interface select Monitor Class of Service RED Drop Profiles To monitor CoS RED drop profiles in the CLI enter the following CLI command show class of service drop profile Meaning Table 384 on page 2941 summarizes the key output fields for CoS RED drop profiles ...

Page 3014: ...ted profile Type Internal index of this drop profile Index Percentage fullness of a buffer queue This value is the x coordinate of the RED drop profile graph Fill Level Drop probability of a packet corresponding to a specific queue buffer fill level This value is the y coordinate of the RED drop profile graph Drop Probability Related Documentation Defining CoS Drop Profiles J Web Procedure on page...

Page 3015: ...ding class class name loss priority loss priority code points aliases 6 bit patterns code point aliases dscp ieee 802 1 inet precedence alias name bits forwarding classes class class name queue num queue number priority high low interfaces interface name scheduler map map name unit logical unit number forwarding class class name classifiers dscp ieee 802 1 inet precedence classifier name default m...

Page 3016: ...883 DefiningCoSCode PointAliases CLIProcedure onpage2914orDefiningCoSCode Point Aliases J Web Procedure on page 2912 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on page 2916 Defining CoS Forwarding Classes CLI Procedure on page 2918 or Defining CoS Forwarding Classes J Web Procedure on page 2918 Configuring CoS Tail Drop Profiles CLI Procedure on...

Page 3017: ...ass mcast af Default forwarding class for assured forwarding of multicast traffic mcast be Default best effort forwarding class for multicast traffic mcast ef Default forwarding class for expedited forwarding of multicast traffic Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understandin...

Page 3018: ...ze When this option is configured sharing is disabled on the queue restricting the usage to guaranteed buffers only percentpercentage Buffer size as a percentage of total buffer remainder Remaining buffer available Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on ...

Page 3019: ...ass are sent to the high priority ingress queue or the low priority ingress queue By default packets are sent to the low priority ingress queue The primary use of this option is to prevent high priority input traffic from being dropped due to congestion on the port groups of oversubscribed line cards Options class name Name of forwarding class queue num queue number Output queue number Range 0 thr...

Page 3020: ...aces interface name scheduler map map name unit logical unit number forwarding class class name classifiers dscp ieee 802 1 inet precedence classifier name default multi destination family ethernet broadcast forwarding class name inet classifiers dscp inet precedence classifier name scheduler map map name rewrite rules dscp ieee 802 1 inet precedence rewrite name import rewrite name default forwar...

Page 3021: ... control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 DefiningCoSCode PointAliases CLIProcedure onpage2914orDefiningCoSCode Point Aliases J Web Procedure on page 2912 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on page 2916 Defining CoS Forwarding Classes CLI Procedu...

Page 3022: ... or a custom classifier The statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Example Combining CoS with MPLS on J EX Series Switches on page 2898 Defining CoS Classifiers CLI Procedure on page 2...

Page 3023: ...oints Syntax code points aliases 6 bit patterns Hierarchy Level edit class of service classifiers dscp ieee 802 1 inet precedence forwarding class class name loss priority level Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify one or more DSCP code point aliases or bit sets for association with a forwarding class Options aliases Nam...

Page 3024: ... drop profile profile name Name of the drop profile The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Schedulers CLI Procedure on page 2920 or Defining CoS Schedulers J...

Page 3025: ...ing statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 DefiningCoSCode PointAliases CLIProcedure onpage2914orDefiningCoSCode Point Aliases J Web Procedure on page 2912 Defining CoS Classifiers CLI...

Page 3026: ...the classifier The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 DefiningCoSCode PointAliases CLIProcedure onpage2914orDefiningCoSCode Point Aliases J Web Procedure on page 2912 Def...

Page 3027: ...ify the Ethernet broadcast traffic family The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding CoS Schedulers on page 2873 Understanding CoS Forwarding Classes on page 2870 Understanding CoS Classifiers on page 2867 2955 Chapter 111 ...

Page 3028: ...the switch You cannot bind it to an individual interface and you cannot disable it Options classifier name Name of the classifier The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding Using CoS with MPLS Networks on J EX Series Swit...

Page 3029: ...Series switches Description Specify the multidestination traffic family The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding CoS Schedulers on page 2873 Understanding CoS Forwarding Classes on page 2870 Understanding CoS Classifier...

Page 3030: ...ase 10 2 for J EX Series switches Description Define forwarding class name and option values Options class name Name of the forwarding class The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on ...

Page 3031: ...ber The statement is explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX series Switches on page 2883 Defining CoS Forwarding Classes CLI Procedure on page 2918 or Defining CoS Forwarding Classes J Web Procedure on page 2918 Understandin...

Page 3032: ...ning statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on page 2916 DefiningCoSCode PointAliases CL...

Page 3033: ...t class of service classifiers hierarchy level default Default classifier mapping Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on ...

Page 3034: ...fy the IP multicast family The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding CoS Schedulers on page 2873 Understanding CoS Forwarding Classes on page 2870 Understanding CoS Classifiers on page 2867 2962 Dell PowerConnect J Serie...

Page 3035: ... the classifier The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on page 2916 Defini...

Page 3036: ...red Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Classifiers CLI Procedure on page 2914 or Defining CoS Classifiers J Web Procedure on page 2916 Defining CoS Forwarding Classes CLI Procedure on page 2918 or Defining CoS Fo...

Page 3037: ...Options level Can be one of the following high Packet has high loss priority low Packet has low loss priority The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Classifier...

Page 3038: ...witches Description Define the CoS configuration for multidestination traffic The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding CoS Schedulers on page 2873 Understanding CoS Forwarding Classes on page 2870 Understanding CoS Clas...

Page 3039: ...erface for IP over MPLS Options filter filter name Specify the name of the policing filter no automatic policing Disable automatic policing on this LSP Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation policer on page 2826 Configuring Policers to Control Traffic Rates CLI Procedure on page 2...

Page 3040: ...re on page 2920 Understanding CoS Schedulers on page 2873 protocol Syntax protocol protocol drop profile profile name Hierarchy Level edit class of service schedulers scheduler name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the protocol type for the specified drop profile Options drop profile profile name Name of the drop pro...

Page 3041: ...h all queues on the interface The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Combining CoS with MPLS on J EX Series Switches on page 2883 Defining CoS Rewrite Rules CLI Procedure on page 2925 or Defining CoS Rewrite Rules J Web Pro...

Page 3042: ...ap name Name of the scheduler map Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 AssigningCoSComponentstoInterfaces CLIProcedure onpage2928orAssigningCoS Components to Interfaces J Web Procedure on page 2928 Understanding CoS Sc...

Page 3043: ...me Name of the scheduler map The remaining statement is explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Forwarding Classes CLI Procedure on page 2918 or Defining CoS Forwarding Classes J Web Proc...

Page 3044: ...hes Description Specify scheduler name and parameter values Options scheduler name Name of the scheduler The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Defining CoS Schedulers CL...

Page 3045: ...s the same as no shaping at all Options percentpercentage Shaping rate as a percentage of the available interface bandwidth Range 0 through 100 percent rate Peak rate in bits per second bps You can specify a value in bits per second either as a complete decimal number or as a decimal number followed by the abbreviation k 1000 m 1 000 000 or g 1 000 000 000 Range 3200 through 32 000 000 000 bps Req...

Page 3046: ...centage Size of the shared buffer as a percentage of the buffer allocated to the shared buffer pool Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 Understanding Junos OS CoS Components for J EX Series Switches on page 2862 2974 ...

Page 3047: ...ther as a complete decimal number or as a decimal number followed by the abbreviation k 1000 m 1 000 000 or g 1 000 000 000 Range 3200 through 160 000 000 000 bps percent percentage Percentage of transmission capacity A percentage of zero drops all packets in the queue Range 0 through 100 percent remainder Remaining rate available Required Privilege Level routing To view this statement in the conf...

Page 3048: ... to be able to use the physical device Options logical unit number Number of the logical unit Range 0 through 16 385 The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring CoS on J EX Series Switches on page 2883 AssigningCoSCo...

Page 3049: ...CHAPTER 112 Operational Mode Commands for CoS 2977 ...

Page 3050: ... Output fields are listed in the approximate order in which they appear Table 385 show class of service Output Fields Level of Output Field Description Field Name All levels The forwarding class configuration Forwarding class Name of the forwarding class ID Forwarding class ID Queue Queue number Fabric Priority J EX8200 switches only Fabric priority either high or low The fabric priority determine...

Page 3051: ... All levels Delay buffer size in the queue Buffer size All levels Drop profiles configured for the specified scheduler Drop profiles All levels Transport protocol corresponding to the drop profile Protocol All levels Name of the drop profile Name All levels Number of queues that can be configured on the interface Queues supported All levels Number of queues currently configured Queues in use All l...

Page 3052: ... best effort low 001 best effort low 010 best effort low 011 best effort low 100 best effort low 101 best effort low 110 network control low 111 network control low Classifier ieee8021p untrust Code point type ieee 802 1 Index 16 Code point Forwarding class Loss priority 000 best effort low 001 best effort low 010 best effort low 011 best effort low 100 best effort low 101 best effort low 110 best...

Page 3053: ...cheduler default be Forwarding class best effort Index 20 Transmit rate 95 percent Rate Limit none Buffer size 95 percent Priority low Drop profiles Loss priority Protocol Index Name High non TCP 1 default drop profile High TCP 1 default drop profile Scheduler default nc Forwarding class network control Index 22 Transmit rate 5 percent Rate Limit none Buffer size 5 percent Priority low Drop profil...

Page 3054: ...best effort low 000 best effort high 001 expedited forwarding low 010 expedited forwarding high 011 fw class low 100 fw class high 101 network control low 110 network control high 111 Rewrite rule ieee8021p default Code point type ieee 802 1 Index 34 Forwarding class Loss priority Code point best effort low 000 best effort high 001 expedited forwarding low 010 expedited forwarding high 011 fw clas...

Page 3055: ... of the ieee 802 1 type type inet precedence Optional Display all classifiers of the inet precedence type Required Privilege Level view List of Sample Output show class of service classifier type ieee 802 1 on page 2984 Output Fields Table 386 on page 2983 describes the output fields for the show class of service classifier command Output fields are listed in the approximate order in which they ap...

Page 3056: ...Classifier ieee802 1 default Code point type ieee 802 1 Index 3 Code Point Forwarding Class Loss priority 000 best effort low show class of service classifier type ieee 802 1 001 best effort high 010 expedited forwarding low 011 expedited forwarding high 100 assured forwarding low 101 assured forwarding medium high 110 network control low 111 network control high Classifier users ieee802 1 Code po...

Page 3057: ...y IEEE 802 1 code point aliases inet precedence Optional Display IPv4 precedence code point aliases Required Privilege Level view List of Sample Output show class of service code point aliases exp on page 2986 Output Fields Table 387 on page 2985 describes the output fields for the show class of service code point aliases command Output fields are listed in the approximate order in which they appe...

Page 3058: ...ice code point aliases exp Code point type exp Alias Bit pattern show class of service code point aliasesexp af11 100 af12 101 be 000 be1 001 cs6 110 cs7 111 ef 010 ef1 011 nc1 110 nc2 111 2986 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3059: ...ge Level view List of Sample Output show class of service drop profile on page 2988 Output Fields Table388onpage2987describestheoutputfieldsfortheshowclass of servicedrop profile command Output fields are listed in the approximate order in which they appear Table 388 show class of service drop profile Output Fields Field Description Field Name Name of a drop profile Drop profile Type of this drop ...

Page 3060: ...rop probability show class of service drop profile 100 100 Drop profile user drop profile Type interpolated Index 2989 Fill level Drop probability 0 0 1 1 2 2 4 4 5 5 6 6 8 8 10 10 12 15 14 20 15 23 64 entries total 90 96 92 96 94 97 95 98 96 98 98 99 99 99 100 100 2988 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3061: ...89 show class of service forwarding class Output Fields Field Description Field Name Name of forwarding class Forwarding class Forwarding class identifier ID CoS queue mapped to the forwarding class Queue Not supported on J EX Series switches and can be ignored Policing priority J EX8200 switches only Fabric priority for the forwarding class either high or low Determines the priority of packets in...

Page 3062: ...network control 3 7 low mcast be 4 2 low mcast ef 5 4 low mcast af 6 6 low 2990 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3063: ...tion Field Name Name of a physical interface Physical interface Index of this interface or the internal index of this object Index Status of dedicated queues configured on an interface Supported on Trio MPC MIC interfaces on MX Series routers only Dedicated Queues Number of queues you can configure on the interface Queues supported Number of queues currently configured Queues in use Number of queu...

Page 3064: ...uler map Rewrite or Translation Table for IQE PICs only Object Name of an object Name Type of an object dscp dscp ipv6 exp ieee 802 1 ip or inet precedence Type show class of service interface Physical user host show class of service interface so 0 2 3 Physical interface so 0 2 3 Index 135 Queues supported 8 Queues in use 4 show class of service interface Physical Total non default queues created ...

Page 3065: ...service interface Gigabit Ethernet user host show class of service interface ge 6 2 0 Physical interface ge 6 2 0 Index 175 Queues supported 4 Queues in use 4 Scheduler map default Index 2 Input scheduler map default Index 3 Chassis scheduler map default chassis Index 4 2993 Chapter 112 Operational Mode Commands for CoS ...

Page 3066: ...s Field Description Field Name Information about Packet Forwarding Engine traffic Input Packets Number and rate of input packets Output Packets Number and rate of output packets Packet Forwarding Engine Traffic statistics Information about Packet Forwarding Engine local traffic Local packets input Number of local input packets Local packets output Number of local output packets Software input high...

Page 3067: ... Forwarding Engine Local Protocol statistics Information about Packet Forwarding Engine hardware discards Timeout Number of packets discarded because of timeouts Truncated key Number of packets discarded because of truncated keys Bits to test Number of bits to test Data error Number of packets discarded because of data errors Stack underflow Number of packets discarded because of stack underflows ...

Page 3068: ...rd statistics Timeout 0 Truncated key 0 Bits to test 0 Data error 0 Stack underflow 0 Stack overflow 0 Normal discard 0 Extended discard 0 Invalid interface 0 Info cell drops 0 Fabric drops 0 Packet Forwarding Engine Input IPv4 Header Checksum Error and Output MTU Error statistics Input Checksum 0 Output MTU 0 2996 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3069: ...ugh 7 on the J EX8208 switch and 0 through 15 on the J EX8216 switch Required Privilege Level view Related Documentation show pfe statistics traffic multicast on page 3003 show pfe statistics traffic egress queues on page 3001 show interfaces queue on page 1016 Monitoring Interface Status and Traffic on page 931 Understanding Junos OS CoS Components for J EX Series Switches on page 2862 List of Sa...

Page 3070: ...w pfe statistics traffic cpu J EX8208 Switch user switch show pfe statistics traffic cpu Queue 0 Forwarding classes best effort Queued show pfe statistics traffic cpu J EX8208 Switch Packets Not Available Bytes Not Available Packets 0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0 0 bps RED dropped packets 0 0 pps Low 0 0 pps High 0 0 pps Queue 1 Forwarding...

Page 3071: ...pped packets 0 0 pps Low 0 0 pps High 0 0 pps Queue 5 Packets Not Available Bytes Not Available Packets 0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0 0 bps RED dropped packets 0 0 pps Low 0 0 pps High 0 0 pps Queue 6 Packets Not Available Bytes Not Available Packets 0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0...

Page 3072: ...RED dropped packets 0 0 pps Low 0 0 pps High 0 0 pps 3000 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3073: ...le values are 0 through 7 on the J EX8208 switch and 0 through 15 on the J EX8216 switch Required Privilege Level view Related Documentation show pfe statistics traffic cpu on page 2997 show pfe statistics traffic multicast on page 3003 show interfaces queue on page 1016 Monitoring Interface Status and Traffic on page 931 Understanding Junos OS CoS Components for J EX Series Switches on page 2862 ...

Page 3074: ...Tail dropped packets 0 fpc 4 J EX8208 Switch fpc 4 J EX8208 Switch 3002 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3075: ...tch the FPC slot number is the slot number for the line card Possible values are 0 through 7 on the J EX8208 switch and 0 through 15 on the J EX8216 switch Required Privilege Level view Related Documentation show pfe statistics traffic cpu on page 2997 show pfe statistics traffic egress queues on page 3001 show interfaces queue on page 1016 Monitoring Interface Status and Traffic on page 931 Under...

Page 3076: ...h Number of high loss priority bytes dropped because of RED RED dropped bytes Egress packets dropped by the PFE because none of the ports on the physical interface are needed to forward the packet Multicast Replication Engine dropped packets show pfe statistics traffic multicast fpc 0 J EX8208 Switch show pfe statistics traffic multicast fpc 0 J EX8208 Switch user switch show pfe statistics traffi...

Page 3077: ...s 0 0 pps Low 0 0 pps High 0 0 pps Queue 4 Packets Not Available Bytes Not Available Packets 0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0 0 bps RED dropped packets 0 0 pps Low 0 0 pps High 0 0 pps Queue 5 Packets Not Available Bytes Not Available Packets 0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0 0 bps RED ...

Page 3078: ...0 0 pps Bytes 0 0 bps Tail dropped packets 0 RED dropped bytes 0 0 bps Low 0 0 bps High 0 0 bps RED dropped packets 0 0 pps Low 0 0 pps High 0 0 pps Multicast Replication Engine dropped packets 0 pps 3006 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3079: ... page 3009 Examples PoE Configuration on page 3013 Configuring PoE on page 3021 Verifying PoE Configuration on page 3025 Troubleshooting PoE Configuration on page 3031 Configuration Statements for PoE on page 3033 Operational Mode Commands for PoE on page 3045 3007 ...

Page 3080: ...3008 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3081: ...802 3af standard In this standard the amount of power that can be supplied to a powered device is limited to 15 4 W Whether a J EX Series switch supports PoE depends on the switch model Consult your switch hardware guide for information on PoE support PoE Power Management Switches that have PoE ports have a PoE controller that keeps track of the PoE power consumption on the switch and allocates po...

Page 3082: ...ugh 3 84 W 4 0 W 1 3 84 through 6 49 W 7 0 W 2 6 49 through 12 95 W 15 4 W 3 The powered device communicates to the PoE controller which class it belongs to when it is connected The PoE controller then allocates to the interface the maximum power required by the class see Table 395 on page 3010 It does not allocate power to an interface until a powered device is connected Class 0 is the default cl...

Page 3083: ...E Configuration and Monitoring The factory default configuration enables PoE on switches that support PoE By default the power management mode is class and the power priority of all interfaces is low If the default configuration meets your needs you do not need to configure PoE before you connect powered devices to the switch To monitor the powered devices and to manage PoE power consumption you c...

Page 3084: ...3012 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3085: ...rface This example describes a default configuration of PoE interfaces on a J EX Series switch Requirements on page 3013 Overview and Topology on page 3013 Configuration on page 3014 Verification on page 3014 Requirements This example uses the following software and hardware components One J EX Series switch that supports PoE Before you configure PoE be sure you have Performed the initial switch c...

Page 3086: ...p PCs file servers integrated printer fax copier machines no PoE required ge 0 0 21 through ge 0 0 23 Unused ports for future expansion Configuration To enable the default PoE configuration on the switch perform these tasks CLI Quick Configuration To quickly enable the default configuration on the switch Simply connect the powered devices to the PoE ports Step by Step Procedure To use the PoE inte...

Page 3087: ...hernet PoE ports supply electric power over the same ports that are used to connect network devices These ports allow you to plug in devices that need both network connectivity and electric power such as voice over IP VoIP phones wireless access points and some IP cameras By default PoE ports on J EX Series switches are set to low power priority You can configure a PoE port to have a high power pr...

Page 3088: ...es ge 0 0 8 through ge 0 0 23 Switch hardware default VLAN name ge 0 0 0 Connection to a wireless access point requires PoE ge 0 0 1 and ge 0 0 2 high Security IP Cameras require PoE ge 0 0 3 high Emergency VoIP phone requires PoE ge 0 0 4 high VoIP phone in Executive Office requires PoE ge 0 0 5 through ge 0 0 7 Other VoIP phones require PoE ge 0 0 8 through ge 0 0 20 Direct connections to deskto...

Page 3089: ...user switch set ge 0 0 0 description wireless access point user switch set ge 0 0 1 description security camera front door user switch set ge 0 0 2 description security camera back door user switch set ge 0 0 3 description emergency phone user switch set ge 0 0 4 description Executive Office VoIP phone user switch set ge 0 0 5 description staff VoIP phone user switch set ge 0 0 6 description staff...

Page 3090: ...e VoIP phone unit 0 family ethernet switching ge 0 0 5 description staff VoIP phone unit 0 family ethernet switching ge 0 0 6 description staff VoIP phone unit 0 family ethernet switching ge 0 0 7 description staff VoIP phone unit 0 family ethernet switching poe interface all interface ge 0 0 1 priority high telemetries interface ge 0 0 2 priority high telemetries interface ge 0 0 3 3018 Dell Powe...

Page 3091: ... Low 7 9W 0 ge 0 0 1 Enabled ON 15 4W High 4 8W 0 ge 0 0 2 Enabled ON 15 4W High 4 8W 0 ge 0 0 3 Enabled ON 15 4W High 3 3W 2 ge 0 0 4 Enabled ON 15 4W High 4 7W 2 ge 0 0 5 Enabled ON 15 4W Low 3 2W 2 ge 0 0 6 Enabled ON 15 4W Low 3 3W 2 ge 0 0 7 Enabled ON 15 4W Low 3 3W 2 Meaning The show poe interface command lists PoE interfaces configured on the switch with their status priority power consump...

Page 3092: ...3020 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3093: ...tions and their default settings for the switch as a whole and for the PoE interfaces Table 398 PoE Configurable Options and Default Settings Description Default Option Switch Options Reserves up to 19 W out of the PoE power budget to be used in the case of a spike in PoE power consumption 0 W guard band Sets the PoE power management mode for the switch static The maximum power delivered by an int...

Page 3094: ...cluded in the configuration disables PoE on the interface The interface maintains network connectivity but no longer supplies power to a connected powered device Power is not allocated to the interface Not included in default configuration disable To configure PoE 1 To change power management mode from the default class mode to static mode edit poe user switch set management static 2 To reserve a ...

Page 3095: ...ure Power over Ethernet The page displays a list of all interfaces except uplink ports Specific operational details about an interface are displayed in the Details section of the page The details include the PoE Operational Status and Port class NOTE After you make changes to the configuration in this page you must commit the changes for them to take effect To commit all changes to the active conf...

Page 3096: ...s the maximum power value is overridden by the maximum power value of the class of power device that is connected to the switch on the PoE port PoE Management Enter a value to set the guard band value in watts The default value is 0 Specifies the band to control power availability on the switch Guard Band watts Related Documentation Configuring PoE CLI Procedure on page 3021 Example Configuring Po...

Page 3097: ...face 1 Select Troubleshoot CLI Terminal 2 Type a CLI command show poe controller show poe interface show poe telemetries interface For detailed information about using these CLI commands to monitor PoE power consumption see Monitoring PoE Power Consumption CLI Procedure on page 3026 Meaning In the J Web interface the PoE Monitoring screen is divided into two parts The top half of the screen displa...

Page 3098: ...terfaces on page 3026 Power Consumption for PoE Interfaces over Time on page 3027 PoE Power Consumption for the Switch Purpose Determine the current PoE power consumption for the switch as a whole Action Enter the following command user switch show poe controller Controller Maximum Power Guard band Management index power consumption 0 130 W 65W 15W Static Meaning At the time the command was execut...

Page 3099: ...y the intervals at which power consumption data is collected from once every minute to once every 30 minutes The default is once every 5 minutes You can also specify the duration over which the records are collected from 1 hour default to 24 hours Action To collect historical records of PoE interface power consumption and display those records 1 Add the telemetries statement to the PoE interface c...

Page 3100: ...er of PoE Ports on the Switch Purpose Verify the number of PoE ports on a switch The number of PoE ports on a switch varies according to switch model Action Enter the following command user switch show chassis hardware Hardware inventory Item Version Part number Serial number Description Chassis BH0208375304 EX4200 24T Routing Engine 0 REV 11 750 021261 BH0208375304 EX4200 24T 8 POE FPC 0 REV 11 7...

Page 3101: ...e 0 0 6 Enabled ON 15 4W Low 3 3W 2 ge 0 0 7 Enabled OFF 15 4W Low 0 0W 0 To view configuration and status for a single PoE interface enter user switch show poe interface ge 0 0 3 PoE interface status PoE interface ge 0 0 3 Administrative status Enabled Operational status ON Power limit on the interface 15 4W Priority High Power consumed 3 3W Class of power device 2 Meaning The command output show...

Page 3102: ...ple Configuring PoE Interfaces on a J EX Series Switch on page 3013 Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Monitoring PoE Power Consumption CLI Procedure on page 3026 3030 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3103: ... cable properly seated in the port socket Use the show poe controller command to check the PoE power budget and consumption for the switch Has the PoE power budget been exceeded for the switch Use the show poe interface command to check the maximum power provided by the interface Does the powered device require more power than is available on the interface Use the show poe telemetries interface co...

Page 3104: ...3032 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3105: ... name disable maximum power watts priority high low telemetries disable duration hours interval minutes management class static notification control fpc slot number disable Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configuring PoE CLI Procedure on page 3021 PoE and EX Series Switches Overview on page 3009 3033 ...

Page 3106: ...apability of this interface delete the disable statement from the interface entry in the configuration When used with telemetries Disable the collection of PoE power consumption records for this port Any previously collected records are deleted However the telemetries configuration is retained including the values for interval and duration To re enable record collection delete the disable statemen...

Page 3107: ... power consumption of a PoE interface Options hours Number of hours over which the data is to be collected Range 1 through 24 Default 1 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configurin...

Page 3108: ... is 0 On a standalone J EX4200 switch 0 through 9 On a J EX4200 switch in a Virtual Chassis indicating the member ID The remaining statement is explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series S...

Page 3109: ...ption Options watts Amount of power to be reserved in case of a spike in PoE consumption Range 0 through 19 Default 0 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configuring PoE CLI Procedur...

Page 3110: ...any settings specified with all interface name Name of the specific interface being configured If you use the interface statement without any substatements PoE is enabled on all interfaces or the specified interface with default values for the remaining statements The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system co...

Page 3111: ...umption of a PoE interface Options minutes Frequency of data collection Range 1 through 30 Default 5 Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configuring PoE CLI Procedure on page 3021 Co...

Page 3112: ... for more information about classes of powered devices static The amount of power allocated to the interface is determined by the value of the maximum power statement not the class of the connected powered device This amount is allocated even when a powered device is not connected to the interface ensuring that power is available when needed Required Privilege Level system To view this statement i...

Page 3113: ...ines the maximum power for the port Options watts The maximum number of watts that can be supplied to the port Range 0 0 through 15 4 for switches that support only IEEE 802 3af and 0 0 through 30 0 for switches that also support IEEE 802 3at Default 15 4 for switches that support IEEE 802 3af and 30 0 for switches that support IEEE 802 3at Required Privilege Level system To view this statement in...

Page 3114: ...rap is sent whenever a PoE interface is enabled or disabled The remaining statements are explained separately Required Privilege Level system To view this statement in the configuration system control To add this statement to the configuration Related Documentation Example Configuring PoE Interfaces with Different Priorities on a J EX Series Switch on page 3015 Configuring PoE CLI Procedure on pag...

Page 3115: ...o be treated as high priority in terms of power allocation If the switch needs to shut down powered devices because PoE demand exceeds the PoE budget power is not shut down on this interface until it has been shut down on all the low priority interfaces low Specifies that this interface is to be treated as low priority in terms of power allocation If the switch needs to shut down powered devices b...

Page 3116: ...ollected at the specified intervals Logging stops at the end of the specified duration If you did not specify the duration and interval statements data is collected at five minute intervals for one hour The remaining statements are explained separately Default Logging of power consumption is disabled Required Privilege Level system To view this statement in the configuration system control To add ...

Page 3117: ...CHAPTER 119 Operational Mode Commands for PoE 3045 ...

Page 3118: ...047 Output Fields Table402onpage3046liststheoutputfieldsfortheshowpoecontrollercommand Output fields are listed in the approximate order in which they appear Table 402 show poe controller Output Fields Field Description Field Name Controller number Controller index Maximum power that the switch can provide to the PoE ports Maximum power Total amount of power being used by the PoE ports at the time...

Page 3119: ...e controller user switch show poe controller Controller Maximum Power Guard band Management show poe controller index power consumption 0 130 W 43W 15W Class 3047 Chapter 119 Operational Mode Commands for PoE ...

Page 3120: ...mand Output fields are listed in the approximate order in which they appear Table 403 show poe interface Output Fields Field Description Field Name SingleInterface Output Field Name All Interfaces Output Interface name PoE Interface Interface Administrative state of the PoE interface Enabled or Disabled If the PoE interface is disabled it can provide network connectivity but it cannot provide powe...

Page 3121: ... interface Interface Admin status Oper status Max power Priority Power consumption Class ge 0 0 0 Enabled ON 15 4W Low 7 9W 0 show poe interface ge 0 0 1 Enabled ON 15 4W Low 3 2W 2 ge 0 0 2 Enabled ON 15 4W Low 3 2W 2 ge 0 0 3 Enabled ON 15 4W Low 3 2W 2 ge 0 0 4 Enabled ON 15 4W Low 3 2W 2 ge 0 0 5 Enabled ON 15 4W Low 3 2W 2 ge 0 0 6 Enabled ON 15 4W Low 3 2W 2 ge 0 0 7 Enabled ON 15 4W Low 3 2...

Page 3122: ...rocedure on page 3028 List of Sample Output show poe notification control on page 3051 Output Fields Table 404 on page 3050 lists the output fields for the show poe notification control command Output fields are listed in the approximate order in which they appear Table 404 show poe notification control Output Fields Field Description Field Name FPC slot number FPC slot Status of notification cont...

Page 3123: ...show poe notification control user switch show poe notification control FPC slot Notification control status 0 OFF show poe notification control 3051 Chapter 119 Operational Mode Commands for PoE ...

Page 3124: ... Consumption CLI Procedure on page 3026 Verifying PoE Configuration and Status CLI Procedure on page 3028 Troubleshooting PoE Interfaces on page 3031 List of Sample Output show poe telemetries interface Last 10 Records on page 3053 show poe telemetries interface All Records on page 3053 Output Fields Table 405 on page 3052 lists the output fields for the show poe telemetries interface command Outp...

Page 3125: ... 18 08 57 UTC 15 4W 51 6V 13 01 27 2008 18 07 57 UTC 15 4W 51 6V 14 01 27 2008 18 06 57 UTC 15 4W 51 6V 15 01 27 2008 18 05 57 UTC 15 4W 51 6V 16 01 27 2008 18 04 56 UTC 15 4W 51 6V 17 01 27 2008 18 03 56 UTC 15 4W 51 6V 18 01 27 2008 18 02 56 UTC 15 4W 51 6V 19 01 27 2008 18 01 56 UTC 15 4W 51 6V 20 01 27 2008 18 00 56 UTC 15 4W 51 6V 21 01 27 2008 17 59 56 UTC 15 4W 51 6V 22 01 27 2008 17 58 56 ...

Page 3126: ...3054 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3127: ...verview on page 3057 Example of MPLS Configuration on page 3071 Configuring MPLS on page 3097 Verifying MPLS on page 3115 Configuration Statements for MPLS on page 3121 Operational Mode Commands for MPLS on page 3139 3055 ...

Page 3128: ...3056 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3129: ...iency in the network MPLS services can be used to connect various sites to a backbone network and to ensure better performance for low latency applications such as VoIP and other business critical functions Junos OS MPLS for J EX Series switches supports Layer 2 protocols Layer 2 VPNs RSVP based label switched paths LSPs MPLS based circuits cross connect CCCs IP over MPLS Class of service CoS NOTE...

Page 3130: ...c engineering architecture Traffic engineering provides the capabilities to do the following Route primary paths around known bottlenecks or points of congestion in the network Provide precise control over how traffic is rerouted when the primary path is faced with single or multiple failures Provide efficient use of available aggregate bandwidth and long haul fiber by ensuring that certain subset...

Page 3131: ...PLS label onto it This label places the packet in a forwarding equivalence class FEC and determines its handling and destination through the MPLS tunnel The egress provider edge switch the exit point from the MPLS tunnel pops the MPLS label off the outgoing packet MPLS traffic is bidirectional Therefore each PE switch can be configured as both an ingress switch and an egress switch depending on th...

Page 3132: ... ingress PE switch to the egress PE switch See Configuring MPLS on Provider Edge Switches Using IP Over MPLS CLI Procedure on page 3107 for additional information Provider Switch You must configure one or more provider switches as transit switches within the network to support the forwarding of MPLS packets You can add provider switches without changing the configuration of the PE switches A provi...

Page 3133: ...e core interfaces of both the provider edge and provider switches You do not need to apply it to the loopback interface because the MPLS protocol uses the framework established by the RSVP session to create LSPs On the provider edge switches the configuration of the MPLS protocol must also include the definition of an LSP RSVP Resource Reservation Protocol RSVP is a signaling protocol that allocat...

Page 3134: ...ies Switches Overview on page 3057 Understanding MPLS and Path Protection on J EX Series Switches on page 3063 Example Configuring MPLS on J EX Series Switches on page 3071 Configuring MPLS on Provider Edge Switches Using Circuit Cross Connect CLI Procedure on page 3111 Configuring MPLS on Provider Edge Switches Using IP Over MPLS CLI Procedure on page 3107 Configuring MPLS on Provider Switches CL...

Page 3135: ... then directs traffic from the failed path to the new path This rerouting process can be time consuming and prone to failure For example the outage signals to the ingress switch might get lost or the new path might take too long to come up resulting in significant packet drops You can configure path protection by configuring primary and secondary paths on the ingress switch If the primary path fai...

Page 3136: ...ult or custom You do not bind the EXP classifier or the EXP rewrite rule to individual interfaces The switch automatically and implicitly applies the default or the custom EXP classifier and the default or the custom EXP rewrite rule to the appropriate MPLS enabled interfaces Because rewrite rules affect only egress interfaces the switch applies the EXP rewrite rule only to those MPLS interfaces t...

Page 3137: ...particular interface but it is not required You can configure one interface as DSCP1 and another as DSCP2 and another and IP precedence and so forth Default Classifiers and Default Rewrite Rules The default classifiers support only two forwarding classes best effort and network control and use only two queues 0 and 7 However J EX Series switches support up to sixteen forwarding classes and eight q...

Page 3138: ...e same as for the other CoS configurations on J EX Series switches Default schedulers are provided for best effort and network control forwarding classes If you are using assured forwarding expedited forwarding or other custom forwarding classes we recommend that you configure a scheduler to support that forwarding class See Understanding CoS Schedulers on page 2873 Related Documentation Junos OS ...

Page 3139: ...tion in their label forwarding table They then replace the old label with a new label and forward the packet to the next switch in the path When the packet reaches the egress PE switch the label is removed and the packet again becomes a native IP packet and is again forwarded based on its IP routing information MPLS Label Switched Paths and MPLS Labels on J EX Series Switches on page 3067 Reserved...

Page 3140: ... sole label entry no label stacking It indicates that the label must be popped on receipt 3 Implicit Null label This label is used in the control protocol RSVP only to request label popping by the downstream switch It never actually appears in the encapsulation Labels with a value of 3 must not be used in the data packet as real labels No payload type IPv4 or IPv6 is implied with this label MPLS L...

Page 3141: ... its core interface ge 0 0 7 removes the MPLS label and sends the IP packet out of its customer edge interface ge 0 0 1 to a destination that is beyond the scope of the tunnel Figure 82 MPLS Label Swapping Figure 82 on page 3069 shows the path of a packet as it passes in one direction from the ingress PE switch to the egress PE switch However the MPLS configuration also allows traffic to travel in...

Page 3142: ...Procedure on page 3111 Configuring MPLS on Provider Edge Switches Using IP over MPLS CLI Procedure on page 3107 Configuring MPLS on Provider Switches CLI Procedure on page 3102 Junos OS MPLS Applications Configuration Guide at http www juniper net techpubs software junos Junos OS VPNs Configuration Guide at http www juniper net techpubs software junos 3070 Dell PowerConnect J Series Ethernet Switc...

Page 3143: ...customer edge interfaces on the PE switches of the MPLS network as either circuit cross connect CCC or IP family inet interfaces This example shows how to configure an MPLS tunnel using a CCC For information on configuring MPLS with an IP interface see Configuring MPLS on Provider Edge Switches Using MPLS Over IP CLI Procedure on page 3107 Requirements on page 3071 Overview and Topology on page 30...

Page 3144: ... connect the remote PE switch and the provider switch are aggregated Ethernet interfaces NOTE Core interfaces cannot be tagged VLAN interfaces Core interfaces can be aggregated ethernet interfaces This example includes a LAG between the provider switch and the remote PE switch because this type of configuration is another option you can implement For information on configuring LAGs see Configuring...

Page 3145: ...using the RSVP protocol The statement must specify the loopback address and the core interfaces that will be used for the RSVP session rsvp RSVP protocol The logical units of the core interfaces are configured to belong to both family inet and family mpls The logical unit of the customer edge interface is configured to belong to family ccc family inet family mpls family ccc Interface family Interf...

Page 3146: ...cates that this switch is using the RSVP protocol The statement must specify the loopback address and the core interfaces that will be used for the RSVP session rsvp RSVP protocol The logical unit of the core interface is configured to belong to both family inet and family mpls The logical unit of the customer edge interface is configured to belong to family ccc family inet family mpls family ccc ...

Page 3147: ...at will be used for the RSVP session rsvp RSVP protocol The logical units for the loopback interface and core interfaces belong to family inet The logical units of the core interfaces are also configured to belong to family mpls family inet family mpls Interface family Interfaces that connect the provider switch P to PE 1 Aggregated Ethernet interface on P that connects to aggregated Ethernet inte...

Page 3148: ...f area 0 0 0 0 interface ge 0 0 5 0 user switchPE 1 set ospf area 0 0 0 0 interface ge 0 0 6 0 3 Configure MPLS on the local switch with a label switched path to the remote egress PE switch edit protocols user switchPE 1 set mpls label switched path lsp_to_pe2_ge1 to 127 1 1 3 4 Configure MPLS on the core interfaces edit protocols user switchPE 1 set mpls interface ge 0 0 5 0 user switchPE 1 set m...

Page 3149: ...mote interface switch ge 1 to pe2 transmit lsp lsp_to_pe2_ge1 user PE 1 set connections remote interface switch ge 1 to pe2 receive lsp lsp_to_pe1_ge1 Results Display the results of the configuration user switchPE 1 show configuration interfaces ge 0 0 1 unit 0 family ccc ge 0 0 5 unit 0 family inet address 10 1 5 1 24 family mpls ge 0 0 6 unit 0 family inet address 10 1 6 1 24 family mpls lo0 uni...

Page 3150: ...e0 set interfaces lo0 unit 0 family inet address 127 1 1 3 32 set interfaces ae0 unit 0 family inet address 10 1 9 2 24 set interfaces ae0 unit 0 family mpls set interfaces ge 0 0 1 unit 0 family ccc set protocols connections remote interface switch ge 1 to pe1 interface ge 0 0 1 0 set protocols connections remote interface switch ge 1 to pe1 transmit lsp lsp_to_pe1_ge1 set protocols connections r...

Page 3151: ... core interface edit user switchPE 2 set interfaces ae0 unit 0 family mpls 8 Configure the logical unit of the customer edge interface as a CCC edit interfaces ge 0 0 1 unit 0 user PE 2 set family ccc 9 Configure the interface based CCC from PE 2 to PE 1 edit protocols user PE 2 set connections remote interface switch ge 1 to pe2 interface ge 0 0 1 0 user PE 2 set connections remote interface swit...

Page 3152: ... set protocols ospf area 0 0 0 0 interface ge 0 0 6 0 set protocols ospf area 0 0 0 0 interface ae0 set protocols mpls interface ge 0 0 5 0 set protocols mpls interface ge 0 0 6 0 set protocols mpls interface ae0 set protocols rsvp interface lo0 0 set protocols rsvp interface ge 0 0 5 0 set protocols rsvp interface ge 0 0 6 0 set protocols rsvp interface ae0 set interfaces lo0 unit 0 family inet a...

Page 3153: ...et rsvp interface ge 0 0 5 user switchP set rsvp interface ge 0 0 6 user switchP set rsvp interface ae0 5 Configure IP addresses for the loopback and core interfaces edit user switchP set interfaces lo0 unit 0 family inet address 127 1 1 2 32 user switchP set interfaces ge 0 0 5 unit 0 family inet address 10 1 5 1 24 user switchP set interfaces ge 0 0 6 unit 0 family inet address 10 1 6 1 24 user ...

Page 3154: ... ge 0 0 5 0 interface ge 0 0 6 0 interface ae0 0 Verification To confirm that the configuration is working properly perform these tasks Verifying the Physical Layer on the Switches on page 3083 Verifying the Routing Protocol on page 3083 Verifying the Core Interfaces Being Used for the MPLS Traffic on page 3083 Verifying RSVP on page 3084 Verifying the Assignment of Interfaces for MPLS Label Opera...

Page 3155: ...terfaces are configured as both inet and mpls The Local column for the core interfaces shows the IP address configured for these interfaces Verifying the Routing Protocol Purpose Verify the state of the configured routing protocol Perform this verification task on each of the switches The state must be Full Action user switchPE 1 show ospf neighbor Address Interface State ID Pri Dead 127 1 1 2 ge ...

Page 3156: ...used as the beginning of the CCC and which interface is being used to push the MPLS packet to the next hop Perform this task only on the PE switches Action user switchPE 1 show route forwarding table family mpls MPLS Destination Type RtRef Next hop Type Index NhRef Netif default perm 0 dscd 50 1 0 user 0 recv 49 3 1 user 0 recv 49 3 2 user 0 recv 49 3 299776 user 0 Pop 541 2 ge 0 0 1 0 ge 0 0 1 0 ...

Page 3157: ...edure on page 3107 Configuring MPLS on Provider Switches CLI Procedure on page 3102 Junos OS MPLS for J EX Series Switches Overview on page 3057 For information on the interface statement for OSPF see the Junos OS Routing Protocols Configuration Guide at http www juniper net techpubs software junos Example Combining CoS with MPLS on J EX Series Switches You can use class of service CoS within MPLS...

Page 3158: ...S over CCC It is a unidirectional configuration Therefore you need to configure custom classifiers and custom rewrite rules as follows On the ingress PE switch custom DSCP classifier and custom EXP rewrite rule On the egress PE switch custom EXP classifier On the provider switch customer EXP classifier and custom EXP rewrite rule NOTE You can also configure schedulers and shapers as needed If you ...

Page 3159: ...scp1 Custom DSCP classifier Name of the custom EXP rewrite rule e1 Custom EXP rewrite rule Interface that receives packets from devices outside the network The custom DSCP classifier must be specified on this CCC interface ge 0 0 1 0 Customer edge interface Interfaces that transmit MPLS packets to other switches within the MPLS network The EXP rewrite rule is applied implicitly to these interfaces...

Page 3160: ...rite rule is applied implicitly on these interfaces Schedulers can also be specified and will be applied to these interfaces ge 0 0 7 0 and ge 0 0 8 0 Core interfaces transmitting packets to other switches within the MPLS network Configuring the Local PE Switch CLI Quick Configuration To quickly configure a custom DSCP classifier custom EXP rewrite rule and a policer on the local PE switch copy th...

Page 3161: ... class of service interfaces ge 0 0 1 unit 0 classifier dscp1 5 Specify the number of bits per second permitted on average for the firewall policer which will later be applied to the LSP edit firewall set policer mypolicer if exceeding bandwidth limit 500m 6 Specify the maximum size permitted for bursts of data that exceed the given bandwidth limit for this policer edit firewall policer set mypoli...

Page 3162: ...ly configure a custom EXP classifier on the remote PE switch copy the following commands and paste them into the switch terminal window of PE 2 edit set class of service classifiers exp exp1 import default set class of service classifiers exp exp1 forwarding class expedited forwarding loss priority low code points 010 Step by Step Procedure To configure a custom EXP classifier on the egress PE swi...

Page 3163: ...forwarding class expedited forwarding loss priority low code points 010 set class of service rewrite rules exp e1 forwarding class expedited forwarding loss priority low code point 111 Step by Step Procedure To configure a custom EXP classifier and a custom EXP rewrite rule on the provider switch 1 Import the default EXP classifier classes to the custom EXP classifier that you are creating edit cl...

Page 3164: ... That the Policer Firewall Filter Is Operational Purpose Verify the operational state of the policer that is configured on the ingress PE switch Action user switch show firewall Filter myfilter Policers Name Packets mypolicer t1 0 Meaning This output shows that the firewall filter mypolicer has been created Verifying That the CoS Classifiers Are Going to the Right Queue Purpose Verify that the CoS...

Page 3165: ...0 34 100010 0 0 35 100011 0 0 36 100100 0 0 37 100101 0 0 38 100110 0 0 39 100111 0 0 40 101000 0 0 41 101001 0 0 42 101010 0 0 43 101011 0 0 44 101100 0 0 45 101101 0 0 46 101110 0 0 47 101111 0 0 48 110000 3 0 49 110001 3 0 50 110010 3 0 51 110011 3 0 52 110100 3 0 53 110101 3 0 54 110110 3 0 55 110111 3 0 56 111000 3 0 57 111001 3 0 58 111010 3 0 59 111011 3 0 60 111100 3 0 61 111101 3 0 62 111...

Page 3166: ...1 0 0 6 110 0 0 7 111 0 0 Classifier table index 9346 entries 64 Table type DSCP Entry Code point Forwarding class PLP 0 000000 0 0 1 000001 0 0 2 000010 0 0 3 000011 0 0 4 000100 0 0 5 000101 0 0 6 000110 0 0 7 000111 1 0 8 001000 0 0 9 001001 0 0 10 001010 0 0 11 001011 0 0 12 001100 0 0 13 001101 0 0 14 001110 0 0 15 001111 0 0 16 010000 0 0 17 010001 0 0 18 010010 0 0 19 010011 0 0 20 010100 0...

Page 3167: ...een created index 9346 on the ingress PE switch PE 1 Verifying the CoS Forwarding Table Mapping Purpose For each logical interface display either the table index of the classifier for a given code point type or the queue number if it is a fixed classification in the forwarding table Action user switch show class of service forwarding table classifier mapping Table Index Interface Index Q num Table...

Page 3168: ...ate High bits State 0 000 Enabled 000 Enabled 1 101 Enabled 101 Enabled 2 001 Enabled 001 Enabled 3 110 Enabled 111 Enabled Rewrite table index 9281 entries 1 Table type EXP FC Low bits State High bits State 1 111 Enabled 000 Disabled Meaning This output shows that a new EXP classifier with the index number 9281 has been created Related Documentation Configuring MPLS on Provider Edge Switches Usin...

Page 3169: ...protection as a mechanism for protecting against label switched path LSP failures Path protection reduces the time required to recalculate a route in case of a failure within the MPLS tunnel You configure path protection on the ingress provider edge switch in your MPLS network You do not configure the egress provider edge switch or the provider switches for path protection You can explicitly speci...

Page 3170: ...ks on the ingress provider edge switch 1 Configuring the Primary Path on page 3099 2 Configuring the Secondary Path on page 3099 3 Configuring the Revert Timer on page 3100 3098 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3171: ...t protocols mpls label switched path lsp_to_240 to 127 0 0 8 user switch set primary primary_path_lsp_to_240 2 Configure an explicit route for the primary path by specifying the IP address of the loopback interface or the switch IP address or hostname of each switch used in the MPLS tunnel You can specify the link types as either strict or loose in each path statement If the link type is strict th...

Page 3172: ...240 to 127 0 0 8 user switch set secondary secondary_path_lsp_to_240 standby 2 Configure an explicit route for the secondary path by specifying the IP address of the loopback interface or the switch IP address or hostname of each switch used in the MPLS tunnel You can specify the link types as either strict or loose in each path statement This configuration uses the default strict designation for ...

Page 3173: ...ems or stability problems during this time the timer is restarted TIP If you do not explicitly configure the revert timer it is set by default to 60 seconds To configure the revert timer for LSPs configured with primary and secondary paths For all LSPs on the switch edit protocols mpls user switch set revert timer 120 For a specific LSP on the switch edit protocols mpls label switched path user sw...

Page 3174: ...h complete the following tasks 1 Enable the routing protocol OSPF or IS IS on the loopback interface and on the core interfaces NOTE You can use the switch address as an alternative to the loopback interface edit protocols user switch set ospf area 0 0 0 0 interface lo0 0 user switch set ospf area 0 0 0 0 interface ge 0 0 5 0 user switch set ospf area 0 0 0 0 interface ge 0 0 6 0 user switch set o...

Page 3175: ... 0 6 unit 0 family mpls user switch set interfaces ae0 unit 0 family mpls NOTE You can enable family mpls on either individual interfaces or aggregated Ethernet interfaces You cannot enable it on tagged VLAN interfaces Related Documentation Example Configuring MPLS on J EX Series Switches on page 3071 Configuring MPLS on Provider Edge Switches Using Circuit Cross Connect CLI Procedure on page 3111...

Page 3176: ... expedited forwarding class to this custom DSCP classifier specifying a loss priority and code point edit class of service user switch set classifiers dscp dscp1 forwarding class expedited forwarding loss priority low code points 000111 3 Specify the values for the custom EXP rewrite rule e1 edit class of service user switch set rewrite rules exp e1 forwarding class expedited forwarding loss prior...

Page 3177: ...u are using MPLS with CCC you can use only one type of DSCP IP precedence and only one type of IEEE 802 1p on the CCC interfaces This procedure creates a custom DSCP classifier and a custom EXP rewrite rule on the ingress PE It also enables a policer on the label switched path LSP of the ingress PE to ensure that the amount of traffic forwarded through the LSP never exceeds the requested bandwidth...

Page 3178: ...nd shapers as needed See Defining CoS Schedulers CLI Procedure on page 2920 Related Documentation Configuring MPLS on Provider Edge Switches Using Circuit Cross Connect CLI Procedure on page 3111 Assigning CoS Components to Interfaces CLI Procedure on page 2928 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Understanding the Use of Policers in Firewall Filters on page 275...

Page 3179: ... network or to ensure better performance for low latency applications such as VoIP and other business critical functions To implement MPLS on J EX Series switches you must configure two provider edge PE switches an ingress PE switch and an egress PE switch and at least one provider switch You can configure the customer edge interfaces on the PE switches of the MPLS network as either circuit cross ...

Page 3180: ...faces thereby identifying the interfaces that will be used for forwarding MPLS packets edit user switch set interfaces ge 0 0 5 unit 0 family mpls user switch set interfaces ge 0 0 6 unit 0 family mpls 6 Configure RSVP on the loopback interface and the core interfaces edit protocols user switch set rsvp interface lo0 0 user switch set rsvp interface ge 0 0 5 0 user switch set rsvp interface ge 0 0...

Page 3181: ...address for the loopback interface and for the core interfaces edit user switch set interfaces lo0 unit 0 family inet address 208 208 208 208 32 user switch set interfaces ge 0 0 5 unit 0 family inet address 10 1 20 1 24 user switch set interfaces ge 0 0 6 unit 0 family inet address 10 1 21 1 24 4 Configure MPLS on the core interfaces edit protocols user switch set mpls interface ge 0 0 5 0 user s...

Page 3182: ... a static route from the ingress PE switch to the egress PE switch thereby indicating to the routing protocol that the packets will be forwarded over the MPLS LSP that has been set up to that destination edit user switch setrouting optionsstaticroute121 121 121 0 24next hop208 208 208 208 user switch set routing options static route 121 121 121 0 24 resolve Related Documentation Example Configurin...

Page 3183: ...CCC The customer edge interface can be either a simple interface or a tagged VLAN interface In both cases you configure the logical unit of the customer edge interface to belong to family ccc and you must configure an association between that interface and two label switched paths LSPs one for transmitting MPLS packets to the remote PE and the other for receiving MPLS packets from the remote PE Th...

Page 3184: ... user switch set mpls label switched path lsp_to_pe2_ge1 to 127 1 1 3 TIP lsp_to_pe2_ge1 is the LSP name You will need to use the specified name again when configuring the CCC 5 Configure MPLS on the core interfaces edit protocols user switch set mpls interface ge 0 0 5 0 user switch set mpls interface ge 0 0 6 0 user switch set mpls interface ae0 6 Configure RSVP on the loopback interface and the...

Page 3185: ...tchge 1 to pe2interfacege 0 0 1 0 user switch set connections remote interface switch ge 1 to pe2 transmit lsp lsp_to_pe2_ge1 user switch set connections remote interface switch ge 1 to pe2 receive lsp lsp_to_pe1_ge1 edit protocols user switch setconnectionsremote interface switchge 1 to pe2interfacege 0 0 2 1 user switch set connections remote interface switch ge 1 to pe2 transmit lsp lsp_to_pe2_...

Page 3186: ...page 3107 Configuring an OSPF Network J Web Procedure on page 1435 Verifying That MPLS Is Working Correctly on page 3115 Understanding Junos OS MPLS Components for J EX Series Switches on page 3059 3114 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3187: ... CCC on page 3117 Verifying the Physical Layer on the Switches Purpose Verify that the interfaces are up Perform this verification task on each of the switches Action user switch show interfaces ge terse Interface Admin Link Proto Local Remote ge 0 0 0 up up ge 0 0 0 0 up up ge 0 0 1 0 up up ccc ge 0 0 2 0 up up ccc ge 0 0 3 0 up up eth switch ge 0 0 4 0 up up eth switch ge 0 0 5 0 up up inet 10 1...

Page 3188: ...is switch The output shows that the state is full meaning that the routing protocol is operating correctly that is hello packets are being exchanged between directly connected neighbors For additional information on checking and monitoring routing protocols see the Junos OS Routing Protocols and Policies Command Reference at http www juniper net techpubs software junos Verifying the Core Interface...

Page 3189: ... Meaning This output shows that CCC has been set up on interface ge 0 0 1 0 The switch receives ingress traffic on ge 0 0 1 0 with label 299776 It pops that label and swaps it to label 299792 which it pushes out on interface ge 0 0 5 0 Verifying the Status of the CCC Purpose Verify the status of the CCC You should perform this task only on the provider edge switches Action user switch show connect...

Page 3190: ...0 ActivePath primary_path_lsp_to_240 primary LoadBalance Random Encoding type Packet Switching type Packet GPID IPv4 Primary primary_path_lsp_to_240 State Up Priorities 7 0 SmartOptimizeTimer 180 Exclude red Computed ERO S L denotes strict loose hops CSPF metric 2 10 3 3 2 S 10 3 4 2 S Received RRO ProtectionFlag 1 Available 2 InUse 4 B W 8 Node 10 SoftPreempt 20 Node ID 10 3 3 2 10 3 4 2 6 Mar 11...

Page 3191: ...utput verifies that RSVP is enabled and operational on interface ge 0 0 20 0 Verifying a Secondary Path Purpose Verify that a secondary path is established Action Deactivate a switch that is critical to the primary path and then issue the following command user switch show mpls lsp extensive Ingress LSP 1 sessions 127 0 0 8 From 127 0 0 1 State Up ActiveRoute 0 LSPname lsp_to_240 ActivePath second...

Page 3192: ... 05 686 CSPF computation result accepted 127 0 0 20 127 0 0 40 27 Mar 4 15 28 35 852 CSPF failed no route toward 127 0 0 11 132 times 26 Mar 4 14 25 12 113 Clear Call CSPF computation failed 25 Mar 4 14 25 12 113 CSPF link down deleted 0 0 0 0 127 0 0 20 0 127 0 0 20 0 0 0 0 10 10 10 10 0 10 10 10 10 Standby secondary_path_lsp_to_240 State Up Priorities 7 0 SmartOptimizeTimer 180 Computed ERO S L ...

Page 3193: ...ofile name profile name interface all interface names disable guest vlan vlan id vlan name mac radius restrict maximum requests number no reauthentication quiet period seconds reauthentication interval seconds retries number server fail deny permit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single single secure supplicant timeout sec...

Page 3194: ...diate leave interface interface name group limit limit multicast router interface static group ip address proxy query interval seconds query last member interval seconds query response interval seconds robust count number lldp disable advertisement interval seconds hold multiplier number interface all interface name disable traceoptions file filename files number size size world readable no world ...

Page 3195: ...disable bpdu block on edge bridge priority priority configuration name name forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revision level r...

Page 3196: ...file profile name default actions interface down linktrace age 30m 10m 1m 30s 10s path database size path database size maintenance domain domain name level number mip half function none default explicit name format character string none dns mac 2oct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery d...

Page 3197: ...e period count frame period summary count symbol period count negotiation options allow remote loopback no allow link events rstp disable bpdu block on edge bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files num...

Page 3198: ... bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout action a...

Page 3199: ... Understanding 802 1X and LLDP and LLDP MED on J EX Series Switches on page 2261 Understanding MSTP for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch o...

Page 3200: ...n two circuits in a CCC connection The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring MPLS on J EX Series Switches on page 3071 Configuring MPLS on Provider Edge Switches CLI Procedure Junos OS MPLS Applications Configurati...

Page 3201: ...ed interfaces on the switch You cannot bind it to an individual interface and you cannot disable it Options classifier name Name of the classifier The remaining statements are explained separately Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding Using CoS with MPLS Networks on...

Page 3202: ...witch interface name Name of an interface Aggregated Ethernet aex Gigabit Ethernet ge fpc pic port Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring MPLS on J EX Series Switches on page 3071 Configuring MPLS on Provider Edge Switches CLI Procedure Configuring MPLS on Prov...

Page 3203: ...s and can contain letters digits periods and hyphens To include other characters enclose the name in quotation marks The name must be unique on the ingress switch remote provider edge switch Either the loopback address or the switch address Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation E...

Page 3204: ...separately Default MPLS is disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring MPLS on J EX Series Switches on page 3071 Configuring MPLS on Provider Edge Switches CLI Procedure Configuring MPLS on Provider Switches CLI Procedure on page 3102 Junos OS MPLS Applicat...

Page 3205: ...tinuing sequentially along the path until reaching the egress provider edge switch Default If you do not specify the addresses or hostnames of any switches the LSP is calculated by the switch hostname Optional See address Default If you do not specify the addresses or hostnames of any switches the LSP is calculated by the switch loose Optional Indicates that the next address in the path statement ...

Page 3206: ...6 Configuring Policers to Control Traffic Rates CLI Procedure on page 2788 Configuring CoS on MPLS Provider Edge Switch Using Circuit Cross Connect CLI Procedure on page 2932 Configuring CoS on MPLS Provider Edge Switch Using IP Over MPLS CLI Procedure on page 2931 primary Syntax primary path name Hierarchy Level edit protocols mpls label switched path lsp name Release Information Statement introd...

Page 3207: ...lude the logical portion of the name which corresponds to the logical unit number of the CCC interface receive lsp label switched path Name of the LSP from the connection s source This LSP name was specified by the label switched path statement on the remote provider edge switch in the protocols mpls stanza transmit lsp label switched path Name of the LSP to the connection s destination This LSP n...

Page 3208: ... is restarted If you have configured a value of 0 seconds for the revert timer statement and traffic is switched to the secondary path the traffic remains on that path indefinitely It is never switched back to the primary path unless you intervene Default 60 seconds Options seconds Value in seconds Range 0 through 65 535 seconds Required Privilege Level routing To view this statement in the config...

Page 3209: ...S MPLS Applications Configuration Guide at http www juniper net techpubs software junos secondary Syntax secondary path name standby Hierarchy Level edit protocols mpls label switched path lsp name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify one or more secondary paths to use for the label switched path LSP You can configure mo...

Page 3210: ...protocols ospf isis Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Enable the traffic engineering features of the specified routing protocol Default Traffic engineering is disabled Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation E...

Page 3211: ...CHAPTER 125 Operational Mode Commands for MPLS 3139 ...

Page 3212: ... all LSPs that originated from this routing device that is all LSPs for which this routing device is the ingress routing device Depending on the number of LSPs involved it might take a while to restart all the LSPs autobandwidth Optional Clear LSP autobandwidth counters logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system n...

Page 3213: ...ow rsvp session on page 3221 List of Sample Output clear mpls lsp on page 3141 Output Fields When you enter this command you are provided feedback on the status of your request clear mpls lsp user host clear mpls lsp clear mpls lsp 3141 Chapter 125 Operational Mode Commands for MPLS ...

Page 3214: ...nection destination address Optional Destination address for GMPLS and MPLS LSPs from the RSVP sender template gracefully Optional Gracefully reset an RSVP session for a nonpacket LSP in two passes In the first pass the Admin Status object is signaled along the path to the other endpoint of the RSVP session In the second pass the path used by the RSVP session is torn down This option can only be u...

Page 3215: ... session on page 3221 List of Sample Output clear rsvp session on page 3143 Output Fields When you enter this command you are provided feedback on the status of your request clear rsvp session user host clear rsvp session clear rsvp session 3143 Chapter 125 Operational Mode Commands for MPLS ...

Page 3216: ... error statistics logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level clear Related Documentation show rsvp statistics on page 3229 List of Sample Output clear rsvp statistics on page 3144 Output Fields When you enter this command you are provided feedback on the status of your request clear rsvp s...

Page 3217: ...forwarding class Optional Value of the forwarding class for the MPLS ping packets interface interface name Ping an interface configured for the Layer 2 circuit on the egress provider edge PE router logical system all logical system name Optional Perform this operation on all logical systems or on the specified logical system size bytes Optional Size of the label switched path LSP ping request pack...

Page 3218: ...e on page 3146 ping mpls l2circuit virtual circuit detail on page 3146 Output Fields When you enter this command you are provided feedback on the status of your request An exclamation point indicates that an echo reply was received A period indicates that an echo reply was not received within the timeout period An x indicates that an echo reply was received with an error code Packets with an error...

Page 3219: ...bnet detail Optional Display detailed information about the echo requests sent and received exp forwarding class Optional Value of the forwarding class for the MPLS ping packets instance instance name local site id local site id number remote site id remote site id number Ping a combination of the Layer 2 VPN routing instance name the local site identifier and the remote site identifier testing th...

Page 3220: ...atus of your request An exclamation point indicates that an echo reply was received A period indicates that an echo reply was not received within the timeout period An x indicates that an echo reply was received with an error code these packets are not counted in the received packets count They are accounted for separately ping mpls l2vpn instance user host ping mpls l2vpn instance vpn1 remote sit...

Page 3221: ...xp forwarding class Optional Value of the forwarding class for the MPLS ping packets l3vpn name Optional Layer 3 VPN name logical system all logical system name Optional Perform this operation on all logical systems or on the specified logical system prefix prefix name Ping to test whether a prefix is present in a provider edge PE router s or switch s VPN routing and forwarding VRF table by means ...

Page 3222: ...ndicates that an echo reply was not received within the timeout period An x indicates that an echo reply was received with an error code these packets are not counted in the received packets count They are accounted for separately ping mpls l3vpn user host ping mpls l3vpn vpn1 prefix 10 255 245 122 32 lsping statistics 5 packets transmitted 5 packets received 0 packet loss ping mpls l3vpn ping mpl...

Page 3223: ... for the MPLS ping packets fec Ping an LDP signaled LSP using the forwarding equivalence class FEC prefix and length instance routing instance name Optional Allows you to ping a combination of the routing instance and forwarding equivalence class FEC associated with an LSP logical system all logical system name Optional Perform this operation on all logical systems or on the specified logical syst...

Page 3224: ...U from System B to System A is 500 bytes and the ping request packet size is 1000 bytes the echo response is dropped because the PAD TLV is included in the echo response making it too large Required Privilege Level network List of Sample Output ping mpls ldp fec count on page 3152 Output Fields When you enter this command you are provided feedback on the status of your request An exclamation point...

Page 3225: ...ets instance routing instance name Optional Ping a combination of the routing instance and forwarding equivalence class FEC associated with an LSP connection logical system all logical system name Optional Perform this operation on all logical systems or on the specified logical system prefix name LDP forwarding equivalence class FEC prefix or RSVP LSP endpoint address size bytes Optional Size of ...

Page 3226: ...ndicates that an echo reply was not received within the timeout period An x indicates that an echo reply was received with an error code these packets are not counted in the received packets count They are accounted for separately ping mpls lsp end point detail user host ping mpls lsp end point 10 255 245 119 detail Route to end point address is via LDP FEC Request for seq 1 to interface 67 label ...

Page 3227: ... 5 destination address Optional Specify an address other than the default 127 0 0 1 32 for the ping echo requests The address can be anything within the 127 8 subnet detail Optional Display detailed information about the echo requests sent and received NOTE When using the detail option the reported time is based on the system time configured on the local and remote routers Differences in these sys...

Page 3228: ...e remote router or switch to ping an LSP terminating there You must configure MPLS even if you intend to ping only LDP forwarding equivalence classes FECs You can configure the ping interval for the ping mpls rsvp command by specifying a new time in seconds using the lsp ping interval statement at the edit protocols mpls oam hierarchy level For more information see the Junos OS MPLS Applications C...

Page 3229: ... Egress ok time 0 242 ms Local transmit time 1205310695s 215737us Remote receive time 1205310695s 215979us lsping egress 192 168 1 3 statistics 1 packets transmitted 1 packets received 0 packet loss ping mpls rsvp multipoint detail count user host ping mpls rsvp sample lsp multipoint detail count 1 Request for seq 1 to interface 70 label 299952 Request for seq 1 to interface 70 no label stack Requ...

Page 3230: ...cket size 3952 Reply for seq 5 return code Egress ok time 37 176 ms Local transmit time 2009 04 24 14 05 46 CEST 555 881 ms Remote receive time 2009 04 24 14 05 46 CEST 518 705 ms Request for seq 6 to interface 86 no label stack packet size 4228 Reply for seq 6 return code Egress ok time 36 962 ms Local transmit time 2009 04 24 14 05 47 CEST 561 809 ms Remote receive time 2009 04 24 14 05 47 CEST ...

Page 3231: ...r seq 14 Request for seq 15 to interface 86 no label stack packet size 4472 Timeout for seq 15 lsp ping sweep result Maximum Transmission Unit MTU is 4468 bytes 3159 Chapter 125 Operational Mode Commands for MPLS ...

Page 3232: ...tion adjustment on the specified LSP only AdditionalInformation For this command to work properly the following conditions must exist Automatic bandwidth allocation must be enabled on the LSP The parameters for adjustment interval and maximum average bandwidth are not reset after you issue the request mpls lsp adjust autobandwidth command The difference between the adjusted bandwidth and the curre...

Page 3233: ...tional Display all connections brief extensive Optional Display the specified level of output Use history to display information about connection history Use labels to display labels used for transmit and receive LSPs Use status to display information about the connection and interface status interface switch Optional Display interface switch connections only lsp switch Optional Display LSP switch...

Page 3234: ...uit status See the output s legend for an explanation of the status field values Legend for Status St Type of connection if sw Layer 2 switching cross connect rmt if Remote interface switch While graceful restart is in progress rmt if will display a state St of Restart lsp sw LSP stitching cross connect While graceful restart is in progress lsp sw will display a state St of Restart Legend for conn...

Page 3235: ...tching DS disabled Dn down Legend for circuit types only outbound conn is up intf interface only inbound conn is up tlsp transmit LSP Up operational rlsp receive LSP RmtDn remote CCC down Restart restarting CCC Graceful restart Restarting Connection Circuit Type St Time last up Up trans IFSW ed if sw Up Aug 5 15 39 15 1 so 1 0 2 0 intf Up t1 0 1 2 0 intf Up SW db rmt if Restart 0 so 1 0 3 0 intf U...

Page 3236: ... Optional Display labels used for transmit and receive LSPs name Optional Display information about the specified connection only remote interface switch Optional Display remote interface switch connections only name Optional Display information about the specified connection only status Optional Display information about the connection and interface status Required Privilege Level view Related Do...

Page 3237: ...tch While graceful restart is in progress rmt if will display a state St of Restart Legend for connection types Type of circuit intf Interface circuit tlsp Transmit LSP circuit rlsp Receive LSP circuit Legend for circuit types Name of the configured CCC connection Connection Circuit Type of connection Type State of the connection St Time that the connection or circuit last transitioned to the Up o...

Page 3238: ...an 29 13 07 55 TLSP up 300112 1 0 4097 1 1 Jan 29 13 07 54 RLSP up 299776 1 0 Jan 29 13 01 08 Remote CCC down 0 0 Jan 29 13 01 08 Interface up ge 0 0 0 10 0 0 Jan 29 13 01 06 Interface down ge 0 0 0 10 0 0 Jan 29 13 01 04 Remote CCC down 0 0 Jan 29 13 01 02 Interface down 0 0 show connections labels user switch show connections labels Connection Circuit Type St Time last up Up trans ge1 to pe2 rmt...

Page 3239: ... user switch show connections status Connection Circuit Type St Time last up Up trans xcon10_ge0_to_239 rmt if Up Jan 29 13 07 56 1 ge 0 0 0 10 intf Up lsp_to_240_10 tlsp Up lsp_to_239_10 rlsp Up xcon11_ge0_to_239 rmt if Up Jan 29 13 07 57 1 ge 0 0 0 11 intf Up lsp_to_240_11 tlsp Up lsp_to_239_11 rlsp Up 3167 Chapter 125 Operational Mode Commands for MPLS ...

Page 3240: ...appear Table 414 show link management Output Fields Field Description Field Name Name of the peer Peer Name Internal identifier for the peer The range of values is 0 through 64 000 System identifier State of the peer Up or Down State Address to which a control channel is established Control address Identifier assigned to the control channel by the local peer The range of values is 1 through 4 294 ...

Page 3241: ...ching that can be performed on the traffic engineered link Supported values are PSC 1 and Packet Switching Smallest single allocation of bandwidth possible on the traffic engineered link This number is equal to the smallest bandwidth interface that is a member of the traffic engineered link in bps Minimum bandwidth Largest single allocation of bandwidth possible on the traffic engineered link This...

Page 3242: ...e ID State TxSeqNum RcvSeqNum Flags 24547 24547 Up 1027 1026 TE links pro4 ba TE link name pro4 ba State Init Local identifier 2662 Remote identifier 0 Encoding SDH SONET Switching PSC 1 Minimum bandwidth 155 52Mbps Maximum bandwidth 155 52Mbps Total bandwidth 155 52Mbps Available bandwidth 155 52Mbps Name State Local ID Remote ID Bandwidth Used LSP name so 1 0 2 Up 21271 0 155 52Mbps No 3170 Dell...

Page 3243: ...are listed in the approximate order in which they appear Table 415 show link management peer Output Fields Field Description Field Name Name of the peer Peer Name Internal identifier for the peer The range of values is 0 through 64 000 System identifier State of the peer Up or Down State Address to which a control channel is established Control address How often the routing device sends Link Manag...

Page 3244: ...ports only code value R which indicates that the control channel is restarting after a failure in the control plane as when the Link Management Protocol LMP process starts or restarts Flags Traffic engineered links that are managed by their peer TE links show link managementpeer user host show link management peer Peer name sonet System identifier 41448 State Up Control address 70 70 70 70 show li...

Page 3245: ...he specified path only Required Privilege Level view Related Documentation show link management on page 3168 show link management peer on page 3171 show link management statistics on page 3176 show link management te link on page 3178 List of Sample Output show link management routing on page 3175 Output Fields Table 416 on page 3173 describes the output fields for the show link management routing...

Page 3246: ... This number is equal to the largest bandwidth interface that is a member of the link in bps Maximum bandwidth Sum of the bandwidth in bps or Mbps of all interfaces that are members of the link Total bandwidth Sum of the bandwidth in bps or Mbps of all interfaces that are members of the link and that are not yet allocated Available bandwidth Forwarding adjacency LSP information Resource Type of re...

Page 3247: ...m bandwidth 100Mbps Total bandwidth 100Mbps Available bandwidth 100Mbps TE link name __rpd fe 0 1 2 0 State Up Local identifier 2147483650 Remote identifier 0 Local address 192 168 37 73 Remote address 192 168 37 73 Encoding Ethernet Minimum bandwidth 0bps Maximum bandwidth 100Mbps Total bandwidth 100Mbps Available bandwidth 100Mbps TE link name __rpd so 0 2 0 0 State Down Local identifier 2147483...

Page 3248: ...agement statistics Output Fields Field Description Field Name Number of received packets by message type If the count for a message type is zero that message type is not displayed If the count for all message types is zero this field is not displayed Received packets Number of received bad packets by message type If the count for a message type is zero that message type is not displayed If the cou...

Page 3249: ...by message type that have been dropped by the receiver after the LMP retransmission interval has been exceeded If the count for a message type is zero that message type is not displayed If the count for all message types is zero this field is not displayed Dropped packets show link management statistics user host show link management statistics peer pro4 a Statistics for peer pro4 a Received packe...

Page 3250: ...ics on page 3176 List of Sample Output show link management te link on page 3179 Output Fields Table 418 on page 3178 describes the output fields for the show link management te link command Output fields are listed in the approximate order in which they appear Table 418 show link management te link Output Fields Field Description Field Name Traffic engineered link name TE link name State of the t...

Page 3251: ...nterface Name State of the interface Up or Down State Identifier of the local side of the interface Local ID Identifier of the remote side of the interface Remote ID Bandwidth in bps or Mbps of the member interface Bandwidth Whether the resource is allocated to an LSP Yes or No Used LSP name LSP name show link management te link user host show link management te link TE link name FA bd State Up Lo...

Page 3252: ... all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show mpls admin groups on page 3180 Output Fields Table 419 on page 3180 describes the output fields for the show mpls admin groups command Output fields are listed in the approximate order in which they appear Table 419 show mpls admin groups Output Fields Field Description Field Name Name o...

Page 3253: ...f Sample Output show mpls call admission control on page 3182 Output Fields Table420onpage3181describestheoutputfieldsfortheshowmplscall admission control command Output fields are listed in the approximate order in which they appear Table 420 show mpls call admission control Output Fields Field Description Field Name Current available bandwidth on each LSP path Depending on whether the LSP is an ...

Page 3254: ...1 20kbps ct2 30kbps ct3 0bps Layer2 connections Neighbor address 10 255 245 215 Circuit so 0 3 0 0 vc 5 VC bandwidth ct0 50kbps ct1 40kbps ct2 40kbps LSP name pro1 be gold 2 Primary Available bandwidth ct0 0bps ct1 40kbps ct2 40kbps ct3 0bps LSP name pro1 be silver Primary prim1 Available bandwidth ct0 10kbps ct1 20kbps ct2 0bps ct3 40kbps Layer2 connections Neighbor address 10 255 245 215 Circuit...

Page 3255: ...fortheshowmplscspfcommand Output fields are listed in the approximate order in which they appear Table 421 show mpls cspf Output Fields Field Description Field Name Number of LSPs queued for automatic path computation Queue length Current queue length current Maximum queue length high water mark maximum Number of aborted computation attempts dequeued Counters for label switched path computations P...

Page 3256: ...verage amount of time required for each CSPF computation Avg per CSPF Percentage of routing process CPU used in the CSPF computation of rpd show mpls cspf user host show mpls cspf CSPF statistics Queue length current maximum dequeued show mpls cspf 0 0 0 Paths total successful no route sys error CSPFs 0 0 0 0 0 Time secs total CSPFs avg per CSPF of rpd 0 000000 0 000000 0 000000 0 0000 3184 Dell P...

Page 3257: ...showmplsdiffserv te command Output fields are listed in the approximate order in which they appear Table 422 show mpls diffserv te Output Fields Field Description Field Name Bandwidth constraint model supported The maximum allocation model MAM forEXP inferredLSPs E LSPs iscurrentlysupported Bandwidth model DiffServ traffic engineering class TE class MPLS class type that corresponds to the DiffServ...

Page 3258: ...te0 ct0 3 te1 ct1 2 3186 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3259: ...figured with both the setprotocol mpls interface interface name and set interface interface name unit 0 family mpls statements Required Privilege Level view List of Sample Output show mpls interface on page 3187 Output Fields Table 423 on page 3187 describes the output fields for the show mpls interface command Output fields are listed in the approximate order in which they appear Table 423 show m...

Page 3260: ...CLI Procedure Configuring MPLS on Provider Switches CLI Procedure on page 3102 List of Sample Output show mpls interface on page 3188 Output Fields Table 424 on page 3188 describes the output fields for the show mpls interface command Output fields are listed in the approximate order in which they appear Table 424 show mpls interface Output Fields Field Description Field Name Name of the interface...

Page 3261: ...LSPs brief detail extensive terse Optional Display the specified level of output The extensive option displays the same information as the detail option but covers the most recent 50 events bidirectional unidirectional Optional Display bidirectional or unidirectional LSP information respectively bypass Optional Display LSPs used for protecting other LSPs defaults Optional Display the MPLS LSP defa...

Page 3262: ... packet Therefore it is counted as an IPv4 packet not an MPLS packet transit Optional Display LSPs transiting this routing device Required Privilege Level view Related Documentation clear mpls lsp on page 3140 List of Sample Output show mpls lsp defaults on page 3195 show mpls lsp descriptions on page 3196 show mpls lsp detail on page 3196 show mpls lsp extensive on page 3196 show mpls lsp p2mp on...

Page 3263: ...n the forwarding table For ingress LSPs the forwarding table is the primary IPv4 table inet 0 For transit and egress RSVP sessions the forwarding table is the primary MPLS table mpls 0 Active Route brief Path An asterisk underneath this column indicates that the LSP is a primary path P brief detail Name of the LSP LSPname detail Type of LSP multiclass LSP multiclass diffServ TE LSP or Differentiat...

Page 3264: ...ared Protection All levels Bidirectional LSPs Incoming label for reverse direction traffic for this LSP Upstream label in All levels Bidirectional LSPs Outgoing label for reverse direction traffic for this LSP Upstream label out All levels Bidirectional LSPs Label the upstream node suggests to use in the Resv message that is sent Suggested label received All levels Bidirectional LSPs Label the dow...

Page 3265: ... or Dn down State detail extensive Ingress LSP Class of service value COS detail extensive Ingress LSP Active bandwidth for the LSP path for each MPLS class type in bps Bandwidth per class detail extensive Ingress LSP Configured value of the optimize timer indicating the total amount of time allowed before path reoptimization in seconds OptimizeTimer detail extensive Ingress LSP Configured value o...

Page 3266: ...ure on the corresponding path section If the downstream routing device can set up only a link protection backup path the Local protection available bit is set but the Node protection bit is cleared 0x09 Detour is established Combination of 0x01 and 0x08 0x10 Preemption pending The preempting node sets this flag if a pending preemption is in progress for the traffic engine LSP This flag indicates t...

Page 3267: ... is complete RESV rcvfrom detail Recorded route for the session taken from the record route object Record route detail Number of soft preemptions that occurred on a path and when the last soft preemption occurred Only successful soft preemptions are counted those that actually resulted in a new path being used Soft preempt detail Path is in the process of being soft preempted This display is remov...

Page 3268: ...mpt 192 168 37 89 192 168 37 87 Total 1 displayed Up 1 Down 0 Egress LSP 0 sessions Total 0 displayed Up 0 Down 0 show mpls lsp extensive user host show mpls lsp extensive Ingress LSP 5 sessions 10 255 71 242 From 10 255 71 238 State Up ActiveRoute 1009 LSPname sample ccc ActivePath path3 primary Link protection desired LoadBalance Random Encoding type Packet Switching type Packet GPID IPv4 Primar...

Page 3269: ...user host show mpls lsp p2mp detail Ingress LSP 2 sessions P2MP name p2mp lsp1 P2MP branch count 1 10 255 245 51 From 10 255 245 50 State Up ActiveRoute 0 LSPname p2mp branch 1 ActivePath path1 primary P2MP name p2mp lsp1 LoadBalance Random Encoding type Packet Switching type Packet GPID IPv4 Primary path1 State Up Computed ERO S L denotes strict loose hops CSPF metric 25 192 168 208 17 S Received...

Page 3270: ...y Required Privilege Level view List of Sample Output show mpls path on page 3198 Output Fields Table 426 on page 3198 describes the output fields for the show mpls path command Output fields are listed in the approximate order in which they appear Table 426 show mpls path Output Fields Field Description Field Name Information about ingress LSPs Each path has one line of output Path name Addresses...

Page 3271: ...el of output ccc Optional Display the specified circuit cross connect interface name for entries to match destination Optional Display the destination prefix family family name Optional Display routing table entries for the specified family ethernet switching inet inet6 iso mpls vlan classification label label Optional Display route entries for the specified label name matching ip_prefix Optional ...

Page 3272: ...own in parentheses cloned clon TCP or multicast only Cloned route destination dest Remote addresses directly reachable through an interface destination down iddn Destination route for which the interface is unreachable interface cloned ifcl Cloned route for which the interface is unreachable route down ifdn Interface route for which the interface is unreachable ignore ignr Ignore this route interf...

Page 3273: ... given prefix Index extensive Logical interface index from which the route is learned For example for interface routes this is the logical interface index of the route itself For static routes this field is zero For routes learned through routing protocols this is the logical interface index from which the route is learned Route interface index none detail extensive Number of routes that refer to ...

Page 3274: ... dest 0 10 93 15 255 bcst 320 1 me0 0 14 14 14 0 24 ifdn 0 rslv 1319 1 ge 0 0 25 0 14 14 14 0 32 iddn 0 14 14 14 0 recv 1317 1 ge 0 0 25 0 14 14 14 2 32 user 0 rjct 36 2 14 14 14 2 32 intf 0 14 14 14 2 locl 1318 2 14 14 14 2 32 iddn 0 14 14 14 2 locl 1318 2 14 14 14 255 32 iddn 0 14 14 14 255 bcst 1316 1 ge 0 0 25 0 224 0 0 0 4 perm 1 mdsc 35 1 224 0 0 1 32 perm 0 224 0 0 1 mcst 31 3 224 0 0 5 32 ...

Page 3275: ...1 59 cc 89 c0 Next hop type unicast Index 1320 Reference 1 Next hop interface ae0 0 Destination 2 2 2 2 32 Route type interface Route reference 0 Route interface index 0 Flags sent to PFE Nexthop 2 2 2 2 Next hop type local Index 1308 Reference 2 Destination 2 2 2 2 32 Route type destination Route reference 0 Route interface index 66 Flags none Nexthop 2 2 2 2 Next hop type local Index 1308 Refere...

Page 3276: ...1 0 ge 0 0 0 4 CCC user 0 3 3 3 2 Push 300016 1337 2 ae1 0 ge 0 0 0 5 CCC user 0 3 3 3 2 Push 299824 1325 2 ae1 0 ge 0 0 0 7 CCC user 0 3 3 3 2 Push 299920 1331 2 ae1 0 ge 0 0 0 8 CCC user 0 3 3 3 2 Push 299840 1326 2 ae1 0 ge 0 0 0 9 CCC user 0 3 3 3 2 Push 299888 1329 2 ae1 0 ge 0 0 0 10 CCC user 0 3 3 3 2 Push 300112 1343 2 ae1 0 ge 0 0 0 11 CCC user 0 3 3 3 2 Push 299776 1322 2 ae1 0 ge 0 0 0 ...

Page 3277: ... 0 0 1 mcst 31 3 224 0 0 5 32 user 1 224 0 0 5 mcst 31 3 Routing table __master anon__ inet Internet Destination Type RtRef Next hop Type Index NhRef Netif 224 0 0 0 4 perm 0 mdsc 1289 1 224 0 0 1 32 perm 0 224 0 0 1 mcst 1285 1 Routing table default inet6 Internet6 Destination Type RtRef Next hop Type Index NhRef Netif ff00 8 perm 0 mdsc 43 1 ff02 1 128 perm 0 ff02 1 mcst 39 1 3205 Chapter 125 Op...

Page 3278: ...formation created by the Link Management Protocol LMP logical system all logical system name Optional Perform this operation on all logical systems or on a particular logical system Required Privilege Level view List of Sample Output show rsvp interface brief on page 3209 show rsvp interface detail on page 3209 show rsvp interface extensive on page 3209 show rsvp interface link management on page ...

Page 3279: ...managed by the peer they are associated with TElink All levels Number of reservations that are actively reserving bandwidth on the interface Active resv detail Number of times an RSVP session was preempted on this interface PreemptionCnt detail Percentage change in reserved bandwidth to trigger an IGP update Update threshold All levels User configured subscription factor Subscription extensive Ban...

Page 3280: ...ny routers along a path PathTear detail Statistics about Resv messages which are sent from the RSVP receiver along the data paths and store reservation state information in each node along the path Resv detail Statistics about ResvErr messages which are advisory messages that are sent when an attempt to establish a reservation fails ResvErr detail Statistics about ResvTear messages which remove re...

Page 3281: ...Type Total Last 5 seconds Sent Received Sent Received Path 16 0 1 0 PathErr 0 0 0 0 PathTear 1 0 0 0 Resv 0 11 0 1 ResvErr 0 0 0 0 ResvTear 0 0 0 0 Hello 66 67 1 1 Ack 0 0 0 0 Srefresh 0 0 0 0 EndtoEnd RSVP 0 0 0 0 show rsvp interface extensive user host show rsvp interface extensive so 1 0 0 0 Index 72 State Ena Up NoAuthentication NoAggregate NoReliable NoLinkProtection HelloInterval 9 second Ad...

Page 3282: ...s AvailableBW 155 52Mbps TElink TElnk2 Link ID 37808 ActiveResv 1 PreemptionCnt 0 StaticBW 155 52Mbps ReservedBW 0bps AvailableBW 155 52Mbps PEER B State Up Active Control Channel so 1 0 0 0 TElink TElnkAB1 Link ID 1598 ActiveResv 0 PreemptionCnt 0 StaticBW 622 08Mbps ReservedBW 0bps AvailableBW 622 08Mbps TElink TElnkAB2 Link ID 1597 ActiveResv 0 PreemptionCnt 0 StaticBW 622 08Mbps ReservedBW 0bp...

Page 3283: ...e 429 on page 3211 lists the output fields for the showrsvpneighbor command Output fields are listed in the approximate order in which they appear Table 429 show rsvp neighbor Output Fields Level of Output Field Description Field Name All levels Number of neighbors that the routing device has learned of Each neighbor has one line of output RSVP neighbor detail Name of the interface where the neigh...

Page 3284: ...ed RSVP neighbor has restarted and is undergoing state recovery graceful restart procedures Dead Routing device has lost all communication with the RSVP neighbor Any RSVP sessions with that neighbor are torn down status All levels Time elapsed since the neighbor state changed either from up to down or from down to up The format is hh mm ss LastChange detail Time elapsed since the neighbor state ch...

Page 3285: ...An RSVP refresh reduction extension enabled Both local and remote routing devices support the ack extension RFC 2961 disabled Remote routing device does not support the ack extension Ack extension detail Status of the MPLS fast reroute mechanism that protects traffic from link failure enabled Link protection feature has been turned on protecting the neighbor with a bypass LSP disabled No link prot...

Page 3286: ...lliseconds Restart time detail Length of time during which the restarting node attempts to recover its lost states with help from its neighbors in milliseconds Recovery time is advertised by the restarting node to its neighbors and applies to nodal faults The restarting node considers its graceful restart complete after this time has elapsed Recovery time 3214 Dell PowerConnect J Series Ethernet S...

Page 3287: ...via ecstasyl status Up Last changed time 28 47 Idle 0 sec Up cnt 3 Down cnt 2 Message received 632 Hello sent 673 received 656 interval 3 sec Remote instance 0x6432838a Local instance 0x74b72e36 Refresh reduction operational Remote end enabled Ack extension enabled Link protection enabled LSP name Bypass_to_192 168 207 203 Bypass LSP operational Backup routes 1 Backup LSPs 0 Bypass explicit route ...

Page 3288: ...LSPs that are inactive or active respectively interface interface name Optional Display RSVP sessions for the specified interface only lsp type Optional Display information about RSVP sessions with regard to LSPs bypass Sessions used for bypass LSPs lsp Sessions used to set up LSPs nolsp Sessions not used to set up LSPs name session name Optional Display information about the named session session...

Page 3289: ...ss RSVP All levels Information about the transit RSVP sessions Transit RSVP All levels Destination egress switch of the session To All levels Source ingress switch of the session From All levels State of the path Up Down or AdminDn AdminDn indicates that the LSP is being taken down gracefully State detail Destination egress switch of the LSP Address brief detail State of the LSP that is being hand...

Page 3290: ...xed filter SE shared explicit or WF wildcard filter Resv style or Style brief detail Incoming label for this LSP Label in brief detail Outgoing label for this LSP Label out brief detail Number of seconds remaining in the lifetime of the reservation Time left detail Date and time when the RSVP session was initiated Since detail Sender s traffic specification which describes the sender s traffic par...

Page 3291: ...SVP 1 sessions 1 1 1 1 From 2 2 2 2 LSPstate Up ActiveRoute 0 LSPname to a LSPpath Primary Suggested label received Suggested label sent Recovery label received Recovery label sent 3 Resv style 1 FF Label in Label out 3 Time left Since Fri Mar 26 18 42 42 2004 Tspec rate 300kbps size 300kbps peak Infbps m 20 M 1500 DiffServ info diffServ TE LSP bandwidth ct1 300kbps Port number sender 1 receiver 1...

Page 3292: ...Explct route 3 3 3 2 4 4 4 2 3220 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3293: ...vation Protocol RSVP sessions Options none Display standard information about all RSVP sessions brief detail extensive terse Optional Display the specified level of output bidirectional unidirectional Optional Display information about bidirectional or unidirectional RSVP sessions only respectively bypass Optional Display RSVP sessions for bypass LSPs down up Optional Display only LSPs that are in...

Page 3294: ...utput Field on page 3227 show rsvp session detail GMPLS on page 3227 show rsvp session extensive on page 3227 show rsvp session p2mp on page 3228 Output Fields Table 431 on page 3222 describes the output fields for the show rsvp session command Output fields are listed in the approximate order in which they appear Table 431 show rsvp session Output Fields Level of Output Field Description Field Na...

Page 3295: ...ress RSVP sessions the forwarding table is the primary IPv4 table inet 0 For transit and egress RSVP sessions the forwarding table is the primary MPLS table mpls 0 Active Route brief detail Name of the LSP LSPname detail Indicates whether the RSVP session is for the primary or secondary LSP path LSPpath can be either primary or secondary and can be displayed on the ingress egress and transit routi...

Page 3296: ...es the sender s traffic parameters Tspec detail Indicates whether the LSP is a multiclass LSP multiclass diffServ TE LSP or a Differentiated Services aware traffic engineering LSP diffServ TE LSP DiffServ info detail Bandwidth for each class type ct0 ct1 ct2 or ct3 bandwidth detail Protocol ID and sender receiver port used in this RSVP session Port number detail Fast reroute has been requested by ...

Page 3297: ...he bypass LSP Creating backup LSP link down extensive Link has come back up and the LSP has been restored Because the backup LSP is no longer needed it is deleted Deleting backup LSP protected LSP restored detail Displays the value of the path MTU received from the network through signaling and the value used for forwarding This value is only displayed on ingress routing devices with the allow fra...

Page 3298: ... session statistics user host show rsvp session statistics Ingress RSVP 2 sessions To From State Packets Bytes LSPname 10 255 245 24 10 255 245 22 Up 0 0 pro3 bd 10 255 245 24 10 255 245 22 Up 44868 2333136 pro3 bd 2 Total 2 displayed Up 2 Down 0 Egress RSVP 2 sessions To From State Packets Bytes LSPname 10 255 245 22 10 255 245 24 Up 0 0 pro3 db 10 255 245 22 10 255 245 24 Up 0 0 pro3 db 2 Total ...

Page 3299: ...r1 to r3 LSPpath Primary Bidirectional Upstream label in 21253 Upstream label out Suggested label received Suggested label sent 21253 Recovery label received Recovery label sent Resv style 0 Label in Label out Time left Since Mon Aug 16 17 54 40 2006 Tspec rate 0bps size 0bps peak 155 52Mbps m 20 M 1500 Port number sender 2 receiver 46115 protocol 0 PATH rcvfrom localclient Adspec sent MTU 1500 PA...

Page 3300: ...count 1 To From State Rt Style Labelin Labelout LSPname 10 255 245 34 10 255 245 25 Up 0 1 FF 100128 p2mp branch 1 P2MP name p2mp lsp2 P2MP branch count 1 To From State Rt Style Labelin Labelout LSPname 10 255 245 34 10 255 245 25 Up 0 1 FF 3 p2mp st br1 P2MP name lsp a_b P2MP branch count 1 Total 2 displayed Up 2 Down 0 Egress RSVP 0 sessions Total 0 displayed Up 0 Down 0 Transit RSVP 0 sessions ...

Page 3301: ...nd Output fields are listed in the approximate order in which they appear Table 432 show rsvp statistics Output Fields Field Description Field Name Statistics about different RSVP messages Packet Type Total number of packets sent since RSVP was enabled Total Sent Total number of packets received since RSVP was enabled Total Received Total number of packets sent in the last 5 seconds Last 5 seconds...

Page 3302: ...that have been sent to and received from the neighbor Hello Statistics for the number of End to end RSVP messages EndtoEnd RSVP Statistics about errored RSVP packets Errors The packet was not processed because its length is inappropriate Rcv pkt bad length The packet is not one of the well known RSVP types as defined in RFC 2205 Resource ReSerVation Protocol RSVP Rcv pkt unknown type The packet is...

Page 3303: ... is used by two different RSVP messages This duplication is usually caused when a neighboring routing device restarts Recv duplicated msg id Counter of packets discarded because a TE link was not found No TE link to recv Hop Number of RSVP packets received on an interface that is not enabled for RSVP Rcv pkt disabled interface Number of times the buffer for assembling an outgoing RSVP message was ...

Page 3304: ...o path information 10 0 Resv style conflict 0 0 Port conflict 0 0 Resv no interface 0 0 PathErr to client 38 0 ResvErr to client 0 0 Path timeout 8 0 Resv timeout 57 0 Message out of order 0 0 Unknown ack msg 2978 0 Recv nack 86 0 Recv duplicated msg id 5 0 No TE link to recv Hop 0 0 Rcv pkt disabled interface 0 0 Transmit buffer full 0 0 Transmit failure 0 0 Receive failure 0 0 P2MP RESV discarde...

Page 3305: ...pproximate order in which they appear Table 433 show rsvp version Output Fields Field Description Field Name RSVP software version Resource ReSerVation Protocol version Status of RSVP Enabled or Disabled RSVP protocol Configured time interval used to generate periodic RSVP messages R refresh timer Number of RSVP messages that can be lost before an RSVP state is declared stale K keep multiplier Cur...

Page 3306: ...ime Time in seconds that an LSP is kept after it has been soft preempted This is a global property of the RSVP protocol Soft preemption cleanup show rsvp version Router in Steady State user host show rsvp version Resource ReSerVation Protocol version 1 rfc2205 RSVP protocol Enabled R refresh timer 30 seconds show rsvp version Router in Steady State K keep multiplier 3 Preemption Normal Soft preemp...

Page 3307: ...abase detail system name on page 3238 show ted database extensive on page 3238 Output Fields Table 434 on page 3235 describes the output fields for the show ted database command Output fields are listed in the approximate order in which they appear Table 434 show ted database Output Fields Level of Output Field Description Field Name All levels Number of nodes and pseudonodes participating in IS I...

Page 3308: ... bandwidth in bps Static BW extensive Subscription factor for the interface which is the percentage of the link bandwidth that can be used for the RSVP reservation process You configure this by including the subscription statement when configuring RSVP Reservable bandwidth extensive Must include diffserv te statement when configuring LSPs Amount of bandwidth actually reserved by RSVP for each prio...

Page 3309: ...n is for the entire interface n Priority level The range is from 0 high through 7 low n Mbps Amount of the maximum bandwidth Minimum LSP BW Minimum LSP bandwidth in Mbps Amount of bandwidth actually reserved for each priority level The bandwidth shown is for the entire interface Minimum LSP BW is displayed only when switching type is PSC 1 or TDM Interface MTU Displayed only when switching type is...

Page 3310: ...PF 0 0 0 0 To 10 255 245 24 Local 4 4 4 4 Remote 5 5 5 5 Metric 1 Static BW 155 52Mbps Reservable BW 155 52Mbps Available BW TE class bps te0 155 52Mbps te1 155 52Mbps te2 155 52Mbps te3 155 52Mbps te4 155 52Mbps te5 155 52Mbps te6 155 52Mbps te7 155 52Mbps Diffserv TE BW model Maximum allocation model Static BW CT class bps ct0 155 52Mbps ct1 155 52Mbps ct2 155 52Mbps ct3 155 52Mbps Interface Swi...

Page 3311: ...d Description Field Name brief Hostname and address of the node that the link is coming from An address of 00 indicates that the node is the routing device itself An address in the range 0 01 through 0 FF indicates that the node is a pseudonode ID brief Hostname and address of the node that the link is going to An address of 00 indicates that the node is the routing device itself An address in the...

Page 3312: ...0bps localBW 4 0bps 5 0bps 6 0bps 7 0bps merino 00 123 456 1 14 corriedale 00 123 456 1 11 LocalPath 0 localBW 0 0bps 1 0bps 2 0bps 3 0bps localBW 4 0bps 5 0bps 6 0bps 7 0bps merino 00 123 456 1 14 perendale 00 123 456 1 13 LocalPath 0 localBW 0 0bps 1 0bps 2 0bps 3 0bps localBW 4 0bps 5 0bps 6 0bps 7 0bps merino 00 123 456 1 14 cheviot 00 123 456 1 10 LocalPath 0 localBW 0 0bps 1 0bps 2 0bps 3 0b...

Page 3313: ...Privilege Level view List of Sample Output show ted protocol on page 3241 Output Fields Table 436 on page 3241 describes the output fields for the show ted protocol command Output fields are listed in the approximate order in which they appear Table 436 show ted protocol Output Fields Field Description Field Name Protocol that reported the node information IS IS 1 IS IS Level 1 IS IS 2 IS IS Level...

Page 3314: ...3242 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3315: ...Monitoring RPM on page 3403 Ethernet OAM Link Fault Management on page 3427 Ethernet OAM Connectivity Fault Management on page 3463 Monitoring General Network Traffic and Hosts on page 3513 ConfigurationStatementsforGeneralNetworkManagementandMonitoringonpage3517 Operational Mode Commands for General Network Management and Monitoring on page 3531 3243 ...

Page 3316: ...3244 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3317: ...ing sources of problems on your network by locating abnormal or heavy bandwidth usage from particular stations or applications Port mirroring copies packets to either a local interface for local monitoring or to a VLAN for remote monitoring You can use port mirroring to copy these packets Packets entering or exiting a port Packets entering a VLAN on J EX4200 Ethernet Switches Packets exiting a VLA...

Page 3318: ...he packets exiting other ports to the same local analyzer port or analyzer VLAN Packets entering a VLAN on a J EX4200 switch You can mirror the packets entering a VLAN on these switches to either a local analyzer port or to an analyzer VLAN On J EX4200 switches you can configure multiple VLANs up to 256 VLANs including a VLAN range and PVLANs as ingress input to an analyzer Packets exiting a VLAN ...

Page 3319: ... You cannot mirror packets exiting or entering the following ports Dedicated Virtual Chassis ports VCPs Management port me0 or vme0 Routed VLAN interfaces RVIs On J EX8200 switches you can set a ratio only for ingress packets On J EX4200 switches mirrored packets exiting a tagged interface might contain an incorrect VLAN ID On J EX4200 switches tagged packets mirrored to an analyzer port might con...

Page 3320: ...terface on the switch that is being mirrored either on traffic entering or exiting the interface An input interface cannot also be an output interface for an analyzer Input interface Also known as mirrored ports or monitored interfaces See statistical sampling Mirror ratio A computer running a protocol analyzer application Monitoring station An analyzer session that has both input and output stanz...

Page 3321: ...X Series Switches on page 3249 Example Configuring Port Mirroring for Remote Monitoring of Employee Resource Use on J EX Series Switches on page 3254 Example Configuring Port Mirroring for Local Monitoring of Employee Resource Use on J EX Series Switches J EX Series switches allow you to configure port mirroring to send copies of packets to either a local interface for local monitoring or to a VLA...

Page 3322: ...ic entering the ports connected to employee computers The second example shows the same scenario but includes a filter to mirror only the employee traffic going to the Web Network Topology In this example ge 0 0 0 and ge 0 0 1 serve as connections for employee computers In this example one interface ge 0 0 10 is reserved for analysis of mirrored traffic Connect a PC running a protocol analyzer app...

Page 3323: ...er called employee monitor and specify the input source interfaces and the analyzer output interface 1 Configure each interface connected to employee computers as an input interface for the port mirror analyzer that we are calling employee monitor edit ethernet switching options user switch set analyzer employee monitor input ingress interface ge 0 0 0 0 user switch set analyzer employee monitor i...

Page 3324: ...t ge 0 0 10 unit 0 family ethernet switching 2 Configure the employee web monitor analyzer output the input to the analyzer comes from the action of the filter edit ethernet switching options user switch set analyzer employee web monitor output interface ge 0 0 10 0 3 Configure a firewall filter called watch employee to send mirrored copies of employee requests to the Web to the employee web monit...

Page 3325: ...employee to web from destination port 80 then analyzer employee web monitor interfaces ge 0 0 0 unit 0 family ethernet switching port mode trunk vlan members employee vlan voice vlan filter input watch employee ge 0 0 1 family ethernet switching filter input watch employee Verification To confirm that the configuration is correct perform these tasks Verifying That the Analyzer Has Been Correctly C...

Page 3326: ...Traffic CLI Procedure on page 3260 Configuring Port Mirroring to Analyze Traffic J Web Procedure on page 3263 Understanding Port Mirroring on J EX Series Switches on page 3245 Example Configuring Port Mirroring for Remote Monitoring of Employee Resource Use on J EX Series Switches J EX Series switches allow you to configure port mirroring to send copies of packets to either a local interface for l...

Page 3327: ...y This topic includes two related examples that describe how to configure port mirroring to the remote analyzer VLAN so that analysis can be performed from a remote monitoring station The first example shows how to configure a J EX Series switch to mirror all traffic from employee computers The second example shows the same scenario but the setup includes a filter to mirror only the employee traff...

Page 3328: ... 0 0 0 set ethernet switching options analyzer employee monitor input egress interface ge 0 0 1 0 set ethernet switching options analyzer employee monitor loss priority high output vlan remote analyzer Step by Step Procedure To configure basic remote port mirroring Configure the VLAN tag ID for the remote analyzer VLAN 1 edit vlans user switch set remote analyzer vlan id 999 2 Configure the interf...

Page 3329: ...t firewall family ethernet switching filter watch employee term employee to corp from source address 192 0 2 16 28 set firewall family ethernet switching filter watch employee term employee to corp then accept set firewall family ethernet switching filter watch employee term employee to web from destination port 80 set firewall family ethernet switching filter watch employee term employee to web t...

Page 3330: ...t filter watch employee term employee to web from destination port 80 user switch set filter watch employee term employee to web then analyzer employee web monitor 5 Apply the firewall filter to the employee interfaces edit interfaces user switch setge 0 0 0unit0familyethernet switchingfilterinputwatch employee user switch setge 0 0 1unit0familyethernet switchingfilterinputwatch employee Results C...

Page 3331: ...tor loss priority high output vlan 999 vlans remote analyzer vlan id 999 Verification To confirm that the configuration is working properly perform these tasks Verifying That the Analyzer Has Been Correctly Created on page 3259 Verifying That the Analyzer Has Been Correctly Created Purpose Verify that the analyzer named employee monitor or employee web monitor has been created on the switch with t...

Page 3332: ...Port Mirroring on J EX Series Switches on page 3245 Configuring Port Mirroring Configuring Port Mirroring to Analyze Traffic CLI Procedure on page 3260 Configuring Port Mirroring to Analyze Traffic J Web Procedure on page 3263 Configuring Port Mirroring to Analyze Traffic CLI Procedure J EX Series switches allow you to configure port mirroring to send copies of packets to either a local interface ...

Page 3333: ...t analyzer employee monitor ratio 200 When the ratio is set to 200 1 of every 200 packets is mirrored to the analyzer You can use statistical sampling to reduce the volume of mirrored traffic as a high volume of mirrored traffic can be performance intensive for the switch On J EX8200 switches you can set a ratio only for ingress packets 3 Configure the destination interface for the mirrored packet...

Page 3334: ...irrored traffic can be performance intensive for the switch Filtering the Traffic Entering an Analyzer To filter which packets are mirrored to an analyzer create the analyzer and then use it as the action in the firewall filter You can use firewall filters in both local and remote port mirroring configurations If the same analyzer is used in multiple filters or terms the packets are copied to the ...

Page 3335: ...rexample filtertermto analyzerthenanalyzeremployee monitor 3 Apply the firewall filter to the interfaces or VLAN that are input to the analyzer edit user switch set interfaces ge 0 0 0 unit 0 family ethernet switching filter input example filter edit user switch set vlan rspan filter input example filter Related Documentation Configuring Port Mirroring to Analyze Traffic J Web Procedure on page 32...

Page 3336: ...he Commit Options to Commit Configuration Changes J Web Procedure on page 334 for details about all commit options 2 Click one Add Add an analyzer Enter information as specified in Table 438 on page 3264 Edit Modify details of the selected analyzer Enter information as specified in Table 438 on page 3264 Delete Delete the selected analyzer Enable Disable Enable or disable the selected analyzer tog...

Page 3337: ...associated interface to be specified as an analyzer interface Analyzer Port Click Add and select Port or VLAN Next select the interfaces or VLANs Click Remove to delete an ingress interface or VLAN Specifies interfaces or VLANs for which entering traffic is mirrored Ingress Click Add to add egress interfaces Click Remove to remove egress interfaces Specifies interfaces for which exiting traffic is...

Page 3338: ...monitor analyzer has a ratio of 1 mirroring every packet the default a loss priority of high set this option to high whenever the analyzer output is to a VLAN is mirroring the traffic entering ge 0 0 0 and ge 0 0 1 and sending the mirrored traffic to the analyzer called remote analyzer Related Documentation Configuring Port Mirroring to Analyze Traffic J Web Procedure on page 3263 Configuring Port...

Page 3339: ...terface name dot1q tunneling ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write interval sec...

Page 3340: ...ll interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip interface all interface name access ports vlan vlan name forwarding class assured forwarding best effort expedited forwarding network co...

Page 3341: ...tanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switches on page 1051 Understanding Unknown Unicast Forwarding on J EX Series Switches on page 2512 Understanding MAC Notification on J EX Series Switches on page 1060 3269 Chapter 126 Port Mirroring ...

Page 3342: ...and the Junos OS creates no default analyzers Options name Name that identifies the analyzer The name can be up to 125 characters long must begin with a letter and can include uppercase letters lowercase letters numbers dashes and underscores No other special characters are allowed The remaining statements are explained separately Required Privilege Level routing To view this statement in the conf...

Page 3343: ...iption Specify ports for which traffic exiting the interface is mirrored in an port mirroring configuration The statement is explained separately Default No default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding Port Mirroring on J EX Series Switches on page 3245 3271 Chapte...

Page 3344: ...ng ether type 0x8100 0x88a8 0x9100 interfaces interface name no mac learning mac notification notification interval seconds mac table aging time seconds port error disable disable timeout timeout redundant trunk group group name name interface interface name primary interface interface name secure access port dhcp snooping file location local_pathname remote_URL timeout seconds write interval seco...

Page 3345: ...hcp no examine dhcp ip source guard no ip source guard mac move limit limit action action storm control action shutdown interface all interface name bandwidth bandwidth no broadcast no unknown unicast traceoptions file filename files number no stamp replace size size world readable no world readable flag flag disable unknown unicast forwarding vlan all vlan name interface interface name voip inter...

Page 3346: ...ecurity for J EX Series Switches Overview on page 2545 Understanding BPDU Protection for STP RSTP and MSTP on J EX Series Switches on page 1278 Understanding Redundant Trunk Links on J EX Series Switches on page 1049 Understanding Storm Control on J EX Series Switches on page 2511 Understanding 802 1X and VoIP on J EX Series Switches on page 2263 Understanding Q in Q Tunneling on J EX Series Switc...

Page 3347: ...ation The statements are explained separately Default No default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Mirroring for Local Monitoring of Employee Resource Use on J EX Series Switches on page 3249 Example Configuring Port Mirroring for Remote Monitoring of...

Page 3348: ...switch Packets exiting a VLAN on a J EX8200 switch The remaining statements are explained separately Default No default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Mirroring for Local Monitoring of Employee Resource Use on J EX Series Switches on page 3249 Exam...

Page 3349: ...refore you should generally select specific input interfaces in preference to using the all keyword or use the all keyword in combination with setting a ratio for statistical sampling interface name Apply port mirroring to the specified interface only Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Docu...

Page 3350: ...capacity is exceeded For port mirroring configurations with output to an analyzer VLAN set the loss priority to high Default Low Options priority The value for priority can be low or high Default low Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Understanding Port Mirroring on J EX Serie...

Page 3351: ...monitoring The statements are explained separately Default No default Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation Example Configuring Port Mirroring for Local Monitoring of Employee Resource Use on J EX Series Switches on page 3249 Example Configuring Port Mirroring for Remote Monitori...

Page 3352: ...irroring on J EX Series Switches on page 3245 vlan Syntax vlan vlan id vlan name Hierarchy Level edit ethernet switching options analyzer name input ingress edit ethernet switching options analyzer name output Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure mirrored traffic to be sent to a VLAN for remote monitoring Options vlan ...

Page 3353: ...lyzer can have output to either an interface or a VLAN not both Output VLAN Displays the ratio of packets to be mirrored between 1 and 2047 where 1 sends copies of all packets and 2047 sends copies of 1 out of every 2047 packets Mirror ratio Displays the loss priority of mirrored packets By default loss priority is set to low with mirrored traffic dropped in preference for regular traffic when cap...

Page 3354: ...Ingress monitored interfaces ge 0 0 1 0 3282 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3355: ... station You can configure sFlow technology on a J EX Series Switch to continuously monitor traffic at wire speed on all interfaces simultaneously This topic describes Sampling Mechanism and Architecture of sFlow Technology on J EX Series Switches on page 3283 Adaptive Sampling on page 3284 sFlow Agent Address Assignment on page 3285 Sampling Mechanism and Architecture of sFlow Technology on J EX ...

Page 3356: ...ffic conditions Interfaces on which incoming traffic exceeds the system threshold are checked so that all violations can be regulated without affecting the traffic on other interfaces Every 5 seconds the agent checks interfaces to get the number of samples and interfaces are grouped based on the slot that they belong to The top five interfaces that produce the highest number of samples are selecte...

Page 3357: ...can be used to provide network traffic visibility information You can explicitly configure the IP address to be assigned to source data sFlow datagrams If you do not explicitly configure that address the IP address of the configured Gigabit Ethernet interface 10 Gigabit Ethernet interface or the routed VLAN interface RVI is used as the source IP address Related Documentation Example Configuring sF...

Page 3358: ...for high speed switched or routed networks sFlow technology samples network packets and sends the samples to a monitoring station The information gathered is used to create a network traffic visibility picture An sFlow monitoring system consists of an sFlow agent embedded in the switch and a centralized collector The sFlow agent runs on the switch It combines interface counters and flow samples an...

Page 3359: ...Quick Configuration To quickly configure sFlow technology copy the following commands and paste them into the switch terminal window edit protocols sflow set collector 10 204 32 46 Set collector udp port 5600 set interfaces ge 0 0 0 set polling interval 20 set sample rate 1000 3287 Chapter 127 sFlow Monitoring Technology ...

Page 3360: ...gregation group LAG interface that is an aggregated Ethernet interface with a name such as ae0 You can enable sFlow technology on the member interfaces that make up the LAG 4 Specify how often the sFlow agent polls the interface edit protocols sflow user switch set polling interval 20 NOTE The polling interval can be specified as a global parameter also Specify 0 if you do not want to poll the int...

Page 3361: ...ed and is set to 300 packets second Meaning The output shows that sFlow technology is enabled and specifies the values for the sample rate sample limit and polling interval Verifying That sFlow Technology Is Enabled on the Intended Interface Purpose Verify that sFlow technology is enabled on interfaces and display the sampling parameters Action Use the show sflow interface command user switch show...

Page 3362: ...sFlow Technology for Network Monitoring CLI Procedure You can configure sFlow technology designed for monitoring high speed switched or routed networks to continuously monitor traffic at wire speed on all interfaces simultaneously The Junos OS fully supports the sFlow standard described in RFC 3176 InMon Corporation s sFlow A Method for Monitoring Traffic in Switched and Routed Networks see http f...

Page 3363: ...er switch set polling interval seconds edit protocols sflow interfaces user switch set sample rate number NOTE The interface level configuration overrides the global configuration 7 To specify an IP address to be used as the agent ID for the sFlow agent edit protocols sflow user switch set agent id ip address 8 To specify the source IP address to be used for sFlow datagrams edit protocols sflow us...

Page 3364: ...ermit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single single secure supplicant timeout seconds transmit period seconds static mac address interface interface name vlan assignment vlan id vlan name gvrp enable disable interface all interface name disable join timer millseconds leave timer milliseconds leaveall timer milliseconds igm...

Page 3365: ...seconds robust count number lldp disable advertisement interval seconds hold multiplier number interface all interface name disable traceoptions file filename files number size size world readable no world readable match regex flag flag detail disable receive send lldp med disable fast start number interface all interface name disable location elin number civic based what number country code code ...

Page 3366: ...port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revision level revision level traceoptions file filename files number size size no stamp world readable no world readable flag flag mvrp disable interface all interface name disable join timer milliseconds leave timer milliseconds leav...

Page 3367: ...ct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery direction down interface interface name remote mep mep id action profile profile name link fault management action profile profile name action syslog link down event link adjacency loss link event rate frame error count frame period count frame peri...

Page 3368: ... name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag sflow agent id collector ip address udp port port number disable interfaces interface name disable polling interval seconds sample rate number polling interval seconds sample rate ...

Page 3369: ...amp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout action alarm block cost cost disable edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world read...

Page 3370: ... for J EX Series Switches on page 1277 Understanding Multiple VLAN Registration Protocol MVRP on J EX Series Switches on page 1054 Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch on page 3427 Understanding RSTP for J EX Series Switches on page 1276 Understanding STP for J EX Ser...

Page 3371: ...48 Example Monitoring Network Traffic Using sFlow Technology on J EX Series Switches on page 3285 Configuring sFlow Technology for Network Monitoring CLI Procedure on page 3290 disable Syntax disable Hierarchy Level edit protocols sflow edit protocols sflow interfaces interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Disable t...

Page 3372: ...o disable sFlow monitoring on individual interfaces The remaining statements are explained separately Options interface name Name of the interface on which to configure sFlow parameters Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation edit protocols Configuration Statement Hierarchy on page...

Page 3373: ...nterface the switch waits the number of seconds that is configured for the global sFlow configuration If no global interval is configured the switch waits 20 seconds between messages Options seconds Number of seconds between port statistics update messages A 0 zero value specifies that polling is disabled Range 0 3600 seconds Default 20 seconds Required Privilege Level routing To view this stateme...

Page 3374: ...t the rate configured for the global sFlow configuration If no global rate is configured the switch samples 1 in 2000 packets Options number Denominator of the ratio that composes the sample rate Range 100 1 048 576 Default 2000 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation edit protocol...

Page 3375: ...witched or routed networks to continuously monitor traffic at wire speed on specified interfaces simultaneously sFlow data can be used to provide network traffic visibility information The remaining statements are explained separately Default The sFlow protocol is disabled by default Required Privilege Level routing To view this statement in the configuration routing control To add this statement ...

Page 3376: ...port number for this collector Default 6343 Required Privilege Level routing To view this statement in the configuration routing control To add this statement to the configuration Related Documentation edit protocols Configuration Statement Hierarchy on page 48 Example Monitoring Network Traffic Using sFlow Technology on J EX Series Switches on page 3285 Configuring sFlow Technology for Network Mo...

Page 3377: ... on page 3285 Configuring sFlow Technology for Network Monitoring CLI Procedure on page 3290 List of Sample Output show sflow on page 3305 Output Fields Table 440 on page 3305 lists the output fields for the show sflow command Output fields are listed in the approximate order in which they appear Table 440 show sflow Output Fields Level of Output Field Description Field Name All levels Status of t...

Page 3378: ...Sample limit 300 packets second Polling interval 20 seconds Agent ID 10 93 54 7 3306 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3379: ...85 Configuring sFlow Technology for Network Monitoring CLI Procedure on page 3290 Output Fields Table441onpage3307liststheoutputfieldsfortheshowsflowcollector command Output fields are listed in the approximate order in which they appear Table 441 show sflow collector Output Fields Level of Output Field Description Field Name All levels IP address of the collector IP address All levels UDP port nu...

Page 3380: ...lds Table442onpage3308liststheoutputfieldsfortheshowsflowinterfacecommand Output fields are listed in the approximate order in which they appear Table 442 show sflow interface Output Fields Level of Output Field Description Field Name All levels Interfaces on which sFlow technology is enabled Interfaces All levels Rate at which packets are sampled Sample rate All levels Number of packets sampled p...

Page 3381: ...into the configuration page for SNMP as described in Table 443 on page 3309 3 To apply the configuration click Apply NOTE After you make changes to the configuration in this page you must commit the changes for them to take effect To commit all changes to the active configuration select Commit Options Commit See Using the Commit Options to Commit Configuration Changes J Web Procedure on page 334 f...

Page 3382: ...ation information for the system lab name or rack name for example Free form text string that specifies the location of the system System Location Type the hostname of the system Free form text string that overrides the system hostname System Override Name Communities To add a community click Add Type the name of the community being added Specifies the name of the SNMP community Community Name Sel...

Page 3383: ... the systems to receive SNMP traps generated by the trap group being configured Targets Health Monitoring Select the check box to enable the health monitor and configure options Clear the check box to disable the health monitor NOTE If you select the Enable Health Monitoring check box and do not specify options then SNMP health monitoring is enabled with default values Enables the SNMP health moni...

Page 3384: ...log message when the value of a sampled indicator is decreasing For example if the falling threshold is 80 the default SNMP generates an event when the value of any key indicator falls back to 80 percent or less Falling Threshold Related Documentation Monitoring System Process Information on page 554 Monitoring System Properties on page 550 Configuration Statements for SNMP edit snmp Configuration...

Page 3385: ...dd this statement to the configuration Related Documentation Configuring the Address address mask Syntax address mask address mask Hierarchy Level edit snmp v3 target address target address name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Verify the source addresses for a group of target addresses Options address mask combined with the...

Page 3386: ... interface of that trap Options outgoing interface Value of agent address of all SNMPv1 traps generated by this router The outgoing interface option sets the agent address of each SNMPv1 trap to the address of the outgoing interface of that trap Default disabled The agent address is not specified in SNMPv1 traps Required Privilege Level snmp To view this statement in the configuration snmp control...

Page 3387: ... syslog subtag syslog subtag variable oid variable Hierarchy Level edit snmp rmon Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure RMON alarm entries Options index Identifies this alarm entry as an integer The remaining statements are explained separately Required Privilege Level snmp To view this statement in the configuration sn...

Page 3388: ...iguration Related Documentation Configuring the SNMP Community String bucket size Syntax bucket size number Hierarchy Level edit snmp rmon history Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the sampling of Ethernet statistics for network fault diagnosis planning and performance tuning Default 50 Options number Number of disc...

Page 3389: ...ilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring SNMP Trap Groups client list Syntax client list client list name ip addresses Hierarchy Level edit snmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a list of SNMP clients Options ...

Page 3390: ...fore Junos OS Release 10 2 for J EX Series switches Description Specify the IPv4 or IPv6 addresses of the SNMP client hosts that are authorized to use this community Default If you omit the clients statement all SNMP clients using this community string are authorized to access the router Options address Address of an SNMP client that is authorized to access this router You must specify an address ...

Page 3391: ...iption Configure the timer for the SNMP Set reply and start of the commit Options seconds Delay between affirmative SNMP Set reply and start of the commit Default 5 seconds Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Commit Delay Timer 3319 Chapter 128 SNMP ...

Page 3392: ...nd the operations read only or read write allowed on those objects The SNMP client application specifies an SNMP community name in Get GetBulk GetNext and Set SNMP requests Default If you omit the community statement all SNMP requests are denied Options community name Community string If the name includes spaces enclose it in quotation marks The remaining statements are explained separately Requir...

Page 3393: ...argets configured for that trap group The community string in the trap matches the name of the trap group and hence the value of eventCommunity If nothing is configured traps are sent to each group with the rmon alarm category set Options community name Identifies the trap group that is used when generating a trap if the event is configured to send traps Required Privilege Level snmp To view this ...

Page 3394: ...r an SNMPv1 or SNMPv2c community If unconfigured it is the same as the community index If the name includes spaces enclose it in quotation marks NOTE Community names must be unique You cannot configure the same community name at the edit snmp community and edit snmp v3 snmp community community index hierarchy levels The community name at the editsnmpv3snmp communitycommunity index hierarchy level ...

Page 3395: ...ated Documentation Configuring the System Contact on a Device Running Junos OS description Syntax description description Hierarchy Level edit snmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define the value of the MIB II sysDescription object which is the description of the system being managed Options description System description ...

Page 3396: ...ion Related Documentation Configuring the Description Configuring an Event Entry and Its Attributes destination port Syntax destination port port number Hierarchy Level edit snmp trap group Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Assign a trap port number other than the default Default If you omit this statement the default port is...

Page 3397: ...ryption keys are generated based on the associated passwords and the engine ID If you configure or change the engine ID you must commit the new engine ID before you configure SNMPv3 users Otherwise the keys generated from the configured passwords are based on the previous engine ID For the engine ID we recommend using the MAC address of fxp0 Options local engine id suffix Explicit setting for the ...

Page 3398: ...falling event index Syntax falling event index index Hierarchy Level edit snmp rmon alarm index Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description The index of the event entry that is used when a falling threshold is crossed If this value is zero no event is triggered Options index Index of the event entry that is used when a falling threshol...

Page 3399: ...rated A single event is also generated if the first sample after this entry becomes valid is less than or equal to this threshold After a falling event is generated another falling event cannot be generated until the sampled value rises above this threshold and reaches the rising threshold Options percentage The lower threshold for the alarm entry Range 1 through 100 Default 70 percent of the maxi...

Page 3400: ...3 648 through 2 147 483 647 Default 20 percent less than rising threshold Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Falling Threshold or Rising Threshold rising threshold on page 3345 falling threshold interval Syntax falling threshold interval seconds Hierarchy Level edit ...

Page 3401: ...l edit snmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Filter out information related to specific interfaces from the output of SNMP Get and GetNext requests performed on interface related MIBs Options all internal interfaces Filters out information related to internal interfaces from the output of SNMP Get and GetNext requests interf...

Page 3402: ...ing Access Privileges for an SNMPv3 Group Syntax group group name Hierarchy Level edit snmp v3 vacm security to group security model usm v1 v2c security name security name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define access privileges granted to a group Options group name Identifies a collection of SNMP security names that belong...

Page 3403: ...d before Junos OS Release 10 2 for J EX Series switches Description Configure health monitoring The remaining statements are explained separately Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring Health Monitoring on Devices Running Junos OS 3331 Chapter 128 SNMP ...

Page 3404: ...he periodic statistical sampling of data from various types of networks This group contains configuration entries that specify an interface polling period and other parameters The interface interface name statement is mandatory Other statements in the history group are optional Default Not configured Options history index Identifies this history entry as an integer Range 1 through 655535 Required ...

Page 3405: ...t snmp rmon history history index Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the interface to be monitored in the specified RMON history entry Only one interface can be specified for a particular RMON history index There is a one to one relationship between the interface and the history index The interface must be specified in...

Page 3406: ...ration snmp control To add this statement to the configuration interval Syntax interval seconds Hierarchy Level edit snmp health monitor Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Interval between samples Options seconds Time between samples in seconds Range 1 through 2147483647 seconds Default 300 seconds Required Privilege Level snm...

Page 3407: ...elated Documentation Configuring the Interval location Syntax location location Hierarchy Level edit snmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define the value of the MIB II sysLocation object which is the physical location of the managed system Options location Location of the local system You must enclose the name within quota...

Page 3408: ...to the configuration Related Documentation Specifying a Routing Instance in an SNMPv1 or SNMPv2c Community message processing model Syntax message processing model v1 v2c v3 Hierarchy Level edit snmp v3 target parameters target parameter name parameters Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the message processing model ...

Page 3409: ...onfiguration Related Documentation Configuring the System Name nonvolatile Syntax nonvolatile commit delay seconds Hierarchy Level edit snmp Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure options for SNMP Set requests The statement is explained separately Required Privilege Level snmp To view this statement in the configuration ...

Page 3410: ...elated Documentation Configuring the Inform Notification Type and Target Address Configuring the SNMPv3 Trap Notification notify filter Configuring the Profile Name Syntax notify filter profile name oid oid include exclude Hierarchy Level edit snmp v3 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a group of MIB objects on which to...

Page 3411: ...iguration Related Documentation Applying the Trap Notification Filter notify view Syntax notify view view name Hierarchy Level edit snmp v3 vacm access group group name default context prefix security model any usm v1 v2c security level authentication none privacy Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate the view with a co...

Page 3412: ...tion Related Documentation Configuring MIB Views oid Syntax oid oid include exclude Hierarchy Level edit snmp v3 notify filter profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify an object identifier OID used to represent a subtree of MIB objects Options exclude Exclude the subtree of MIB objects represented by the specifi...

Page 3413: ...09 Junos OS Network Management Configuration Guide at http www juniper net techpubs software junos parameters Syntax parameters message processing model v1 v2c v3 security level none authentication privacy security model usm v1 v2c security name security name Hierarchy Level edit snmp v3 target parameters target parameters name Release Information Statement introduced before Junos OS Release 10 2 ...

Page 3414: ... Port read view Syntax read view view name Hierarchy Level edit snmp v3 vacm access group group name default context prefix security model any usm v1 v2c security level authentication none privacy Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate the view with a community or a group name SNMPv3 Options view name The name of the vie...

Page 3415: ...snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Request Type variable on page 3368 rising event index Syntax rising event index index Hierarchy Level edit snmp rmon alarm index Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Index of the event en...

Page 3416: ...ated if the first sample after this entry becomes valid is greater than or equal to this threshold After a rising event is generated another rising event cannot be generated until the sampled value falls below this threshold and reaches the falling threshold Options percentage The lower threshold for the alarm entry Range 1 through 100 Default 80 percent of the maximum possible value Required Priv...

Page 3417: ...generated another rising event cannot be generated until the sampled value falls below this threshold and reaches the falling threshold Options integer The lower threshold for the alarm entry Range 2 147 483 648 through 2 147 483 647 Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring th...

Page 3418: ...c sets of data to meet common network monitoring requirements Each group is optional so that vendors do not need to support all the groups within the MIB Junos OS supports RMON Statistics History Alarm and Event groups The J EX Series documentation describes only the rmon history statement The statements are explained separately Default Disabled Required Privilege Level snmp To view this statement...

Page 3419: ...nstance is defined within a logical system include the logical system logical system name statement at the editsnmpcommunitycommunity name hierarchy level and specify the routing instance statement under the edit snmp community community name logical system logical system name hierarchy level Options routing instance name Name of the routing instance Required Privilege Level snmp To view this stat...

Page 3420: ... Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Trap Target Address sample type Syntax sample type absolute value delta value Hierarchy Level edit snmp rmon alarm index Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Method of sampling the...

Page 3421: ... Related Documentation Configuring the Security Level security level Defining Access Privileges Syntax security level authentication none privacy notify view view name read view view name write view view name Hierarchy Level edit snmp v3 vacm access group group name default context prefix security model any usm v1 v2c Release Information Statement introduced before Junos OS Release 10 2 for J EX S...

Page 3422: ...he configuration Related Documentation Configuring the Security Model security model Group Syntax security model usm v1 v2c security name security name group group name Hierarchy Level edit snmp v3 vacm security to group Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Define a security model for a group Options usm SNMPv3 security model v1...

Page 3423: ...security name Security Group Syntax security name security name group group name Hierarchy Level edit snmp v3 vacm security to group security model usm v1 v2c Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate a group or a community string with a configured security group Options security name Username configured at the editsnmpv3us...

Page 3424: ...level to a security name Options security name Name used when performing access control NOTE The security name must match the configured security name at the editsnmpv3target parameterstarget parameters nameparameters hierarchy level when you configure traps or informs Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration ...

Page 3425: ...ecurity name at the edit snmp v3 vacm security to group hierarchy level must match the security name at the edit snmp v3 snmp community community index hierarchy level Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Security Name security to group Syntax security to group securit...

Page 3426: ... interface interface name bucket size number interval seconds owner owner name Hierarchy Level edit Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure SNMP The statements are explained separately Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related ...

Page 3427: ...efore Junos OS Release 10 2 for J EX Series switches Description Set the source address of every SNMP trap packet sent by this router to a single address regardless of the outgoing interface If the source address is not specified the default is to use the address of the outgoing interface as the source address Options address Source address of SNMP traps You can configure the source address of tra...

Page 3428: ...corresponding thresholds Default rising or falling alarm Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring the Sample Type syslog subtag Syntax syslog subtag syslog subtag Hierarchy Level edit snmp rmon alarm index Release Information Statement introduced before Junos OS Release 10 2 f...

Page 3429: ...on Related Documentation Configuring the Tag Configuring the SNMPv3 Trap Notification tag list Syntax tag list tag list Hierarchy Level edit snmp v3 target address target address name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure an SNMP tag list used to select target addresses Options tag list Defines sets of target addresses ...

Page 3430: ...Release 10 2 for J EX Series switches Description Configure a management application s address and parameters to be used in sending notifications Options target address name String that identifies the target address The remaining statements are explained separately Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Rela...

Page 3431: ...l snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Defining and Configuring the Trap Target Parameters Applying Target Parameters targets Syntax targets address Hierarchy Level edit snmp trap group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Config...

Page 3432: ...rds trace output is the name of the process being traced for example mib2d or snmpd Use this option to specify another name files number Optional Maximum number of trace files per SNMP subagent When a trace file for example snmpd reaches its maximum size it is archived by being renamed to snmpd 0 The previous snmpd 1 is renamed to snmpd 2 and so on The oldest archived file is deleted Range 2 throu...

Page 3433: ...efine the output to include lines that contain the regular expression size size Optional Maximum size in kilobytes KB of each trace file before it is closed and archived Range 10 KB through 1 GB Default 1000 KB world readable no world readable Optional By default log files can be accessed only by the user who configures the tracing operation The world readable option enables any user to read the f...

Page 3434: ...embedded in SNMP trap notification packets as one variable binding varbind known as the community name At least one trap group must be configured for SNMP traps to be sent Options group name Name of the trap group If the name includes spaces enclose it in quotation marks The remaining statements are explained separately Required Privilege Level snmp To view this statement in the configuration snmp...

Page 3435: ...ew this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring Source and Agent Addresses for SNMP Traps type Syntax type inform trap Hierarchy Level edit snmp v3 notify name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the type of notification Options inform De...

Page 3436: ...otification log Add an entry to logTable log and trap Send an SNMP trap and make a log entry none No notifications are sent snmptrap Send an SNMP trap Default log and trap Required Privilege Level snmp To view this statement in the configuration snmp control To add this statement to the configuration Related Documentation Configuring an Event Entry and Its Attributes 3364 Dell PowerConnect J Serie...

Page 3437: ...et parameters target parameters name target parameters target parameters name notify filter profile name parameters message processing model v1 v2c V3 security level authentication none privacy security model usm v1 v2c security name security name usm local engine user username authentication md5 authentication password authentication password authentication sha authentication password authenticat...

Page 3438: ...ord privacy none privacy password privacy password vacm access group group name default context prefix security model any usm v1 v2c security level authentication none privacy notify view view name read view view name write view view name security to group security model usm v1 v2c security name security name group group name Hierarchy Level edit snmp Release Information Statement introduced befor...

Page 3439: ...ivacy notify view view name read view view name write view view name security to group security model usm v1 v2c security name security name group group name Hierarchy Level edit snmp v3 Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure view based access control model VACM information The remaining statements are explained separate...

Page 3440: ... control To add this statement to the configuration Related Documentation Configuring the Variable version Syntax version all v1 v2 Hierarchy Level edit snmp trap group group name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the version number of SNMP traps Options all Send an SNMPv1 and SNMPv2 trap for every trap condition v1 S...

Page 3441: ...up of MIB objects on which to define access To enable a view you must associate the view with a community by including the view statement at the edit snmp community community name hierarchy level NOTE To remove an OID completely use the delete view all oid oid number command but omit the include parameter Options view name Name of the view The remaining statement is explained separately Required P...

Page 3442: ...iguring the SNMP Community String write view Syntax write view view name Hierarchy Level edit snmp v3 vacm access group group name default context prefix security model any usm v1 v2c security level authentication none privacy Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Associate the view with a community or a group name SNMPv3 Options...

Page 3443: ...ted for the interface configured for the history group but not the configuration of that group If you want to delete the RMON history group configuration you must use the delete snmp rmon history configuration mode command Options interface name Delete the samples of Ethernet statistics collected for this interface all Delete the samples of Ethernet statistics collected for all interfaces that hav...

Page 3444: ...ty names 0 Bad community uses 0 ASN parse errors 0 Too bigs 0 No such names 0 Bad values 0 Read onlys 0 General errors 0 Total request varbinds 8 Total set varbinds 0 Get requests 0 Get nexts 8 Set requests 0 Get responses 0 Traps 0 Silent drops 0 Proxy drops 0 Output Packets 2298 Too bigs 0 No such names 0 Bad values 0 General errors 0 Get requests 0 Get nexts 0 Set requests 0 Get responses 8 Tra...

Page 3445: ...Bad values 0 General errors 0 Get requests 0 Get nexts 0 Set requests 0 Get responses 0 Traps 0 3373 Chapter 128 SNMP ...

Page 3446: ...e to display the list of available traps Question mark Question mark to display possible completions Required Privilege Level request List of Sample Output request snmp spoof trap with Variable Bindings on page 3374 request snmp spoof trap Illegal Trap Name on page 3374 request snmp spoof trap Question Mark on page 3378 request snmp spoof trap with Variable Bindings user host requestsnmpspoof trap...

Page 3447: ...enMismatch isisLSPTooLargeToPropagate isisManualAddressDrops isisMaxAreaAddressesMismatch isisOriginatingLSPBufferSizeMismatch isisOwnLSPPurge isisProtocolsSupportedMismatch isisRejectedAdjacency isisSequenceNumberSkip isisVersionSkew jnxAccessAuthServerDisabled jnxAccessAuthServerEnabled jnxAccessAuthServiceDown jnxAccessAuthServiceUp jnxBfdSessDetectionTimeHigh jnxBfdSessTxIntervalHigh jnxBgpM2B...

Page 3448: ...istPortLoopProtectStateChangeTrap jnxMIMstCistPortRootProtectStateChangeTrap jnxMIMstErrTrap jnxMIMstGenTrap jnxMIMstInvalidBpduRxdTrap jnxMIMstMstiPortLoopProtectStateChangeTrap jnxMIMstMstiPortRootProtectStateChangeTrap jnxMIMstNewRootTrap jnxMIMstProtocolMigrationTrap jnxMIMstRegionConfigChangeTrap jnxMIMstTopologyChgTrap jnxMacChangedNotification jnxMplsLdpInitSesThresholdExceeded jnxMplsLdpPa...

Page 3449: ...p jnxPowerSupplyFailure jnxPowerSupplyOK jnxRedundancySwitchover jnxRmonAlarmGetFailure jnxRmonGetOk jnxSecAccessIfMacLimitExceeded jnxSecAccessdsRateLimitCrossed jnxSonetAlarmCleared jnxSonetAlarmSet jnxSpSvcSetCpuExceeded jnxSpSvcSetCpuOk jnxSpSvcSetZoneEntered jnxSpSvcSetZoneExited jnxStormEventNotification jnxSyslogTrap jnxTemperatureOK jnxVccpPortDown jnxVccpPortUp jnxVpnIfDown jnxVpnIfUp jnx...

Page 3450: ...PortOnOffNotification pingProbeFailed pingTestCompleted pingTestFailed ptopoConfigChange risingAlarm rpMauJabberTrap sdlcLSStatusChange sdlcPortStatusChange topologyChange traceRoutePathChange traceRouteTestCompleted traceRouteTestFailed vrrpTrapAuthFailure vrrpTrapNewMaster warmStart request snmp spoof trap Question Mark user host request snmp spoof trap Possible completions trap The name of the ...

Page 3451: ...nelMismatch apsEventFEPLF apsEventModeMismatch apsEventPSBF apsEventSwitchover authenticationFailure bfdSessDown bfdSessUp bgpBackwardTransition bgpEstablished coldStart dlswTrapCircuitDown dlswTrapCircuitUp more 10 3379 Chapter 128 SNMP ...

Page 3452: ...nmp health monitor on page 3382 show snmp health monitor alarms detail on page 3384 Output Fields Table 444 on page 3380 describes the output fields for the show snmp health monitor command Output fields are listed in the approximate order in which they appear Table 444 show snmp health monitor Output Fields Level of Output Field Description Field Name All levels Alarm identifier Alarm Index All l...

Page 3453: ...e value to compare against the upper and lower thresholds It can have the value of absolute value or delta value Sample type detail Alarm that might be sent when this entry is first activated depending on the following criteria Alarm is sent when one of the following situations exists Value of the alarm is above or equal to the rising threshold and the startup type is either rising alarm or rising...

Page 3454: ...0 35 active 32775 Health Monitor jkernel daemon CPU utilization Init daemon 0 active Chassis daemon 50 active Firewall daemon 0 active Interface daemon 5 active SNMP daemon 11 active MIB2 daemon 42 active Sonet APS daemon 0 active VRRP daemon 0 active Alarm daemon 3 active PFE daemon 0 active CRAFT daemon 0 active Traffic sampling control daemon 0 active Ilmi daemon 0 active Remote operations daem...

Page 3455: ...aemon 2132 active Remote operations daemon 2964 active CoS daemon 3044 active Pic Services Logging daemon 1944 active Internal Routing Service Daemon 1392 active Network Access Service daemon 1992 active Forwarding UDP daemon 1876 active Routing socket proxy daemon 1296 active Disk Monitoring daemon 1180 active Inet daemon 1296 active Syslog daemon 1180 active Adaptive Services PIC daemon 3220 act...

Page 3456: ...bsolute value Startup alarm rising alarm Owner Health Monitor config file system utilization Creator Health Monitor State active Sample interval 300 seconds Rising threshold 80 Falling threshold 70 Rising event index 32768 Falling event index 32768 Instance Value 0 Instance State active Alarm Index 32770 Variable name jnxOperatingCPU 9 1 0 0 Variable OID 1 3 6 1 4 1 2636 3 1 13 1 8 9 1 0 0 Sample ...

Page 3457: ...ex 32768 Instance Name sysApplElmtRunCPU 3 1 1 Instance Description Init daemon Instance Value 0 Instance State active Instance Name sysApplElmtRunCPU 3 2 2786 Instance Description Chassis daemon Instance Value 50 Instance State active Instance Name sysApplElmtRunCPU 3 3 2938 Instance Description Firewall daemon Instance Value 0 Instance State active Instance Name sysApplElmtRunCPU 3 4 2942 Instan...

Page 3458: ...tance State active Instance Name sysApplElmtRunCPU 3 15 2940 Instance Description PFE daemon Instance Value 0 Instance State active Instance Name sysApplElmtRunCPU 3 16 2788 Instance Description CRAFT daemon Instance Value 0 Instance State active Instance Name sysApplElmtRunCPU 3 17 2918 Instance Description Traffic sampling control daemon more 23 3386 Dell PowerConnect J Series Ethernet Switch Co...

Page 3459: ...t device and acknowledged by the target device Sent Number of informs held in memory pending a response from the target device Pending Number of informs discarded after the specified number of retransmissions to the target device were attempted Discarded Number of informs that did not receive an acknowledgement from the target device within the timeout specified Timeouts Connection failures that o...

Page 3460: ...ut RMON alarms or events events Optional Display information about RMON events logs Optional Display information about RMON monitoring logs Required Privilege Level view List of Sample Output show snmp rmon on page 3390 show snmp rmon alarms detail on page 3390 show snmp rmon events detail on page 3391 Output Fields Table 446 on page 3388 describes the output fields for the show snmp rmon command ...

Page 3461: ...tivated under creation Entry is being configured and is not yet activated unknown State is not one of the above State All levels Name of the SNMP object instance being monitored Variable name All levels Event identifier Event Index detail Type of notification made when an event is triggered It can be one of the following log A system log message is generated and an entry is made to the log table s...

Page 3462: ...y was created through the CLI the owner has monitor prepended to it Owner detail Mechanism by which the entry was configured CLI or SNMP Creator detail Time period between samples in seconds Sample interval detail Upper limit threshold value configured by the user Rising threshold detail Lower limit threshold value configured by the user Falling threshold detail Event triggered when the rising thr...

Page 3463: ...shold 100000 Falling threshold 80000 Rising event index 1 Falling event index 1 Current value 0 show snmp rmon events detail user host show snmp rmon events detail Event Index 1 Type log and trap Community boy elroy Last event 2002 01 30 01 13 01 PST Creator CLI State active 3391 Chapter 128 SNMP ...

Page 3464: ...mple 15 on page 3394 Output Fields Table 447 on page 3392 lists the output fields for the show smp rmon history command Output fields are listed in the approximate order in which they appear Table 447 show smp rmon history Output Fields Field Description Field Name Identifies this RMON history entry within the RMON history group History Index The entity that configured this entry Range is 0 to 32 ...

Page 3465: ...but were otherwise well formed Fragments Total number of packets that were less than 64 octets in length excluding framing bits but including FCS octets and had either an FCS error or an alignment error Fragment frames normally increment because both runts which are normal occurrences caused by collisions and noise hits are counted Jabbers Number of frames that were longer than 1518 octets excludi...

Page 3466: ...errors 0 Undersize Pkts 0 Oversize Pkts 0 Fragments 0 Jabbers 0 Collisions 0 Utilization 0 show snmp rmon history 1 sample 15 user host show snmp rmon history 1 sample 15 Index 1 Owner monitor Status valid Data Source ifIndex 17 Interval 1800 Buckets Requested 50 Buckets Granted 50 Sample Index 44 Interval Start Thu Jan 1 00 08 35 1970 Drop Events 0 Octetes 0 Packets 0 Broadcast Pkts 0 Multicast P...

Page 3467: ...at were for an unsupported SNMP version Bad community names snmpInBadCommunityNames Total number of messages delivered to the SNMP entity that used an SNMP community name not known to the entity Bad community uses snmpInBadCommunityUses Total number of messages delivered to the SNMP entity that represented an SNMP operation that was not allowed by the SNMP community named in the message ASN parse ...

Page 3468: ... have been accepted and processed by the SNMP entity Traps snmpInTraps Total number of SNMP traps generated by the SNMP entity Silent drops snmpSilentDrops Total number of GetRequest GetNextRequest GetBulkRequest SetRequests and InformRequest PDUs delivered to the SNMP entity that were silently dropped because the size of a reply containing an alternate response PDU with an empty variable bindings...

Page 3469: ... context that is unknown to the SNMP engine Unsupported security levels usmStatsUnsupportedSecLevels Total number of packets received by the SNMP engine which were dropped because they requested a security level unknown to the SNMP engine or otherwise unavailable Not in time windows usmStatsNotInTimeWindows Total number of packets received by the SNMP engine that were dropped because they appeared...

Page 3470: ... generated by the SNMP entity Get responses snmpOutGetResponses Total number of SNMP GetResponse PDUs generated by the SNMP entity Traps snmpOutTraps Total number of SNMP traps generated by the SNMP entity Output show snmp statistics user host show snmp statistics SNMP statistics Input show snmp statistics Packets 246213 Bad versions 12 Bad community names 12 Bad community uses 0 ASN parse errors ...

Page 3471: ...on general Optional Display SNMPv3 general information groups Optional Display SNMPv3 security to group information notify filter Optional Display SNMPv3 notify and optionally notify filter information target address parameters Optional Display SNMPv3 target and optionally either target address or target parameter information users Optional Display SNMPv3 user information AdditionalInformation To ...

Page 3472: ...nambiguously identifies the local SNMPv3 engine Engine boots Number of times the local SNMPv3 engine has rebooted or reinitialized since the engine ID was last changed Engine time Number of seconds since the local SNMPv3 engine was last rebooted or reinitialized Max msg size Maximum message size the sender can accommodate Engine ID SNMPv3 engine ID associated with each user User SNMPv3 user Auth P...

Page 3473: ...volatile active Engine ID 81 00 0a 4c 04 64 64 64 64 User Auth Priv Storage Status UNEW md5 none nonvolatile active Group name Security Security Storage Status model name type g1 usm user1 nonvolatile active g2 usm user2 nonvolatile active g3 usm user3 nonvolatile active Access control Group Context Security Read Write Notify prefix model level view view view g1 usm privacy v1 v1 g2 usm authent v1...

Page 3474: ...3402 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3475: ...guring Real Time Performance Monitoring RPM on page 3407 Verifying Real Time Performance Monitoring on page 3416 Operational Mode Commands for Real Time Performance Monitoring on page 3416 RPM Overview UnderstandingReal TimePerformanceMonitoringonJ EXSeriesSwitchesonpage3404 3403 ...

Page 3476: ... an SNMP client Use the history of the most recent 50 probes to analyze trends in your network and predict future needs RPM provides MIB support with extensions for RFC 2925 Definitions of Managed Objects for Remote Ping Traceroute and Lookup Operations This topic includes RPM Packet Collection on page 3404 Tests and Probe Types on page 3404 Hardware Timestamps on page 3405 Limitations of RPM on p...

Page 3477: ...do not support hardware timestamps for HTTP or TCP probes You can timestamp the following RPM probes to improve the measurement of latency or jitter ICMP ping ICMP ping timestamp UDP ping UDP ping timestamp Youshouldconfiguretherequesterwithhardwaretimestamps seeFigure87onpage3406 to get more meaningful results than you would get without the timestamps The responder does not need to be configured ...

Page 3478: ...mp statement at the edit services rpm probe probe owner test test name hierarchy level The RPM feature provides a configuration option to set one way hardware timestamps Use one way timestamps when you want information about one way time rather than round trip times for packets to traverse the network between the requester and the responder As shown in Figure 87 on page 3406 one way timestamps rep...

Page 3479: ...ration procedures see Junos OS Services Interfaces Configuration Guide at http www juniper net techpubs software junos Configuring Real Time Performance Monitoring J Web Procedure on page 3407 Configuring SNMP J Web Procedure on page 3309 Monitoring Network Traffic Using Traceroute on page 3515 Configuring Real Time Performance Monitoring RPM Configuring Real Time Performance Monitoring J Web Proc...

Page 3480: ...Protocol UDP TCP packets with user configured ports user configured Differentiated Services code point DSCP type of service ToS packets and Hypertext Transfer Protocol HTTP packets J EX Series switches support the following tests and probe types Ping tests ICMP echo ICMP timestamp HTTP tests HTTP get not available for BGP RPM services UDP and TCP tests with user configured ports UDP echo TCP conne...

Page 3481: ...f performance probe tests d Double click one of the performance probe tests to edit the test parameters 3 Enter the Maximum Number of Concurrent Probes and specify the Probe Servers 4 Click Apply to apply the RPM probe settings Table 450 RPM Probe Owner Concurrent Probes and Probe Servers Configuration Fields Your Action Function Field 1 Click Add and type an owner name 2 In Performance Probe Test...

Page 3482: ...Name Type the IP address in dotted decimal notation or the URL of the probe target If the target is a URL type a fully formed URL that includes http Specifies the IP address or the URL of the probe target Target Address or URL Type the source address to be used for the probe If you do not supply this value the packet uses the outgoing interface s address as the probe source address Specifies the I...

Page 3483: ...age Size Type the number 7 a standard TCP or UDP port number or a port number from 49160 through 65535 Specifies the TCP or UDP port to which probes are sent To use TCP or UDP probes you must configure the remote server as a probe receiver Both the probe server and the remote server must be Dell PowerConnect network devices configured to receive and transmit RPM probes on the same TCP or UDP port ...

Page 3484: ...lure and generates a system log message Jitter Type a number from 0 through 60000000 Sets the maximum allowable standard deviation in microseconds if exceeded triggers a probe failure and generates a system log message Standard Deviation Type a number from 0 through 60000000 Sets the one way time in microseconds from the switch to the remote server if exceeded triggers a probe failure and generate...

Page 3485: ...d Egress Standard Deviation Exceeded To enable SNMP traps for this condition select the check box To disable SNMP traps clear the check box Generates SNMP traps when the threshold for maximum outbound time is exceeded Egress Time Exceeded To enable SNMP traps for this condition select the check box To disable SNMP traps clear the check box Generates SNMP traps when the threshold for jitter in inbo...

Page 3486: ...for the total number of lost probes is exceeded Test Failure Related Documentation Configuring SNMP J Web Procedure on page 3309 Viewing Real Time Performance Monitoring Information on page 3416 Configuring the Interface for RPM Timestamping for Client Server on a J EX Series Switch CLI Procedure Use real time performance monitoring RPM to configure active probes to track and monitor traffic acros...

Page 3487: ...Specify the time in seconds to wait between sending packets edit services rpm probe owner test test name user switch set probe interval interval 7 Specify the time in seconds to wait between tests edit services rpm probe owner test test name user switch set test interval interval 8 Specify the source IP address to be used for probes If the source IP address is not one of the switch s assigned addr...

Page 3488: ...Real time performance monitoring RPM on J EX Series switches enables you to configure and send probes to a specified target and monitor the analyzed results to determine packet loss round trip time and jitter The J Web interface provides a graphical view of RPM information for J EX Series switches To view the RPM information using the J Web interface 1 Select Troubleshoot RPM View RPM 2 Select the...

Page 3489: ...pm active servers command Output fields are listed in the approximate order in which they appear Table 452 show services rpm active servers Output Fields Field Description Field Name Protocol configured on the receiving probe server The protocol can be the User Datagram Protocol UDP or the Transmission Control Protocol TCP Protocol Port configured on the receiving probe server Port Output interfac...

Page 3490: ...mple Output show services rpm history results on page 3419 show services rpm history results detail on page 3420 Output Fields Table 453 on page 3418 lists the output fields for the show services rpm history results command Output fields are listed in the approximate order in which they appear Table 453 show services rpm history results Output Fields Level of Output Field Description Field Name Al...

Page 3491: ...ationoftheround triptime inmicroseconds measured over the course of the current test Measurement show services rpm history results user host show services rpm history results Owner Test Probe received Round trip time flintstone 0 Tue Dec 28 15 56 22 2004 158 usec show services rpm history results flintstone 0 Tue Dec 28 15 56 23 2004 218 usec flintstone 0 Tue Dec 28 15 56 24 2004 161 usec flintsto...

Page 3492: ...ement Round trip time Minimum 141 usec Maximum 217 usec Average 179 usec Jitter 76 usec Stddev 38 usec Owner flintstone Test 0 Probe results Response received Tue Dec 28 15 56 41 2004 Rtt 230 usec Results over current test Probes sent 3 Probes received 3 Loss percentage 0 Measurement Round trip time Minimum 141 usec Maximum 230 usec Average 196 usec Jitter 89 usec Stddev 39 usec Owner flintstone T...

Page 3493: ...ar Table 454 show services rpm probe results Output Fields Field Description Field Name Owner name When you configure the probe owner statement at the edit services rpm hierarchy level this field displays the configured owner name When you configure BGP neighbor discovery through RPM the output for this field is Rpm Bgp Owner Owner Name of a test representing a collection of probes When you config...

Page 3494: ...Egress interarrival jitter Egress interarrival jitter in microseconds Ingress interarrival jitter Ingress interarrival jitter in microseconds Round trip interarrival jitter Round trip interarrival jitter in microseconds Probe results Probes are grouped into tests and the statistics are calculated for each test If a test contains 10 probes the average minimum and maximum results are calculated from...

Page 3495: ...sured for the most recently completed test Peak to peak Peak to peak difference in microseconds Stddev Standard deviation in microseconds Sum Statistical sum Results over last test Displays statistics made for all the probes independently of the grouping into tests as well as statistics for the current test Probes sent Number of probes sent in all tests Probes received Number of probe responses re...

Page 3496: ...egative Egress jitter Samples 5 Minimum 5 usec Maximum 1812 usec Average 926 usec Peak to peak 1807 usec Stddev 665 usec Sum xxxx usec Measurement Ingress time Samples 10 Minimum 805 usec Maximum 2859 usec Average 1644 usec Peak to peak 2054 usec Stddev 738 usec Sum xxxx usec Measurement Positive Ingress jitter Samples 5 Minimum 5 usec Maximum 2054 usec Average 876 usec Peak to peak 2049 usec Stdd...

Page 3497: ...mum 5 usec Maximum 2054 usec Average 876 usec Peak to peak 2049 usec Stddev 679 usec Sum xxxx usec Measurement Negative Egress jitter Samples 5 Minimum 5 usec Maximum 1812 usec Average 926 usec Peak to peak 1807 usec Stddev 665 usec Sum xxxx usec Measurement Ingress time Samples 10 Minimum 805 usec Maximum 2859 usec Average 1644 usec Peak to peak 2054 usec Stddev 738 usec Sum xxxx usec Measurement...

Page 3498: ...3426 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3499: ...ink fault management LFM You can configure IEEE 802 3ah OAM LFM on point to point Ethernet links that are connected either directly or through Ethernet repeaters The IEEE 802 3ah standard meets the requirement for OAM capabilities even as Ethernet moves from being solely an enterprise technology to a WAN and access technology and the standard remains backward compatible with existing Ethernet tech...

Page 3500: ...onfigured link fault event occurs Remote Loopback Mode Remote loopback mode ensures link quality between the switch and a remote peer during installation or troubleshooting In this mode when the interface receives a frame that is not an OAM PDU or a pause frame it sends it back on the same interface on which it was received The link appears to be in the active state You can use the returned loopba...

Page 3501: ...thernet links that are connected either directly or through Ethernet repeaters This example uses two J EX4200 switches connected directly Before you begin configuring Ethernet OAM LFM on two switches connect the two switches directly through a trunk interface Configuring Ethernet OAM Link Fault Management on Switch 1 CLI Quick Configuration To quickly configure Ethernet OAM LFM copy the following ...

Page 3502: ...ch 2 CLI Quick Configuration To quickly configure Ethernet OAM LFM on switch 2 copy the following commands and paste them into the switch terminal window edit protocols oam ethernet link fault management set interface ge 0 0 1 set interface ge 0 0 1 negotiation options allow remote loopback Step by Step Procedure To configure Ethernet OAM LFM on switch 2 Enable OAM on the peer interface on switch ...

Page 3503: ...ts supported Variable requests unsupported Meaning When the output displays the MAC address and the discover state is Send Any it means that OAM LFM has been configured properly Related Documentation Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 Understanding Ethernet OAM Link Fault Management for a J EX Series Switch on page 3427 Configuring Ethernet OAM Link Fault Man...

Page 3504: ...event threshold values on an interface for the local errors that trigger the sending of link event TLVs Set the threshold value in seconds for sending frame error events or taking the action specified in the action profile edit protocols oam ethernet link fault management user switch set interface interface name event thresholds frame error count Set the threshold value in seconds for sending fram...

Page 3505: ...n profile profile name event link adjacency loss NOTE For each action profile you must specify at least one link event and one action The actions are taken only when all of the events in the action profile are true If more than one action is specified all actions are executed You can set a low threshold for a specific action such as logging the error and set a high threshold for another action suc...

Page 3506: ...ication quiet period seconds reauthentication interval seconds retries number server fail deny permit use cache vlan id vlan name server reject vlan vlan id vlan name server timeout seconds supplicant multiple single single secure supplicant timeout seconds transmit period seconds static mac address interface interface name vlan assignment vlan id vlan name gvrp enable disable interface all interf...

Page 3507: ...conds query response interval seconds robust count number lldp disable advertisement interval seconds hold multiplier number interface all interface name disable traceoptions file filename files number size size world readable no world readable match regex flag flag detail disable receive send lldp med disable fast start number interface all interface name disable location elin number civic based ...

Page 3508: ...e mode no root port priority priority max age seconds max hops hops msti msti id vlan vlan id vlan name interface interface name disable cost cost edge mode mode priority priority revision level revision level traceoptions file filename files number size size no stamp world readable no world readable flag flag mvrp disable interface all interface name disable join timer milliseconds leave timer mi...

Page 3509: ... explicit name format character string none dns mac 2oct maintenance association ma name continuity check hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery direction down interface interface name remote mep mep id action profile profile name link fault management action profile profile name action syslog link down event link adjacency loss link even...

Page 3510: ...ority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action block alarm cost cost edge mode mode no root port priority priority max age seconds traceoptions file filename files number size size no stamp world readable no world readable flag flag sflow agent id collector ip address udp port port number disable interfaces interface name disable polling int...

Page 3511: ... number size size no stamp world readable no world readable flag flag vstp bpdu block on edge disable force version stp vlan all vlan id vlan name bridge priority priority forward delay seconds hello time seconds interface all interface name bpdu timeout action alarm block cost cost disable edge mode mode no root port priority priority max age seconds traceoptions file filename files number size s...

Page 3512: ...ch on page 3427 Understanding RSTP for J EX Series Switches on page 1276 Understanding STP for J EX Series Switches on page 1275 Understanding How to Use sFlow Technology for Network Monitoring on a J EX Series Switch on page 3283 Understanding VSTP for J EX Series Switches on page 1281 action Syntax action syslog link down Hierarchy Level edit protocols oam ethernet link fault management Release ...

Page 3513: ...ease 10 2 for J EX Series switches Description Configure an Ethernet OAM link fault management LFM action profile by specifying a profile name The remaining statements are explained separately Options profile name Name of the action profile Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentati...

Page 3514: ...back in Ethernet OAM link fault management LFM on all Ethernet interfaces or the specified interface on the J EX Series switch Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Ethernet OAM Link Fault Management on J EX Series Switches on page 3428 Configuring Etherne...

Page 3515: ...nterval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery direction down interface interface name remote mep mep id action profile profile name link fault management action profile profile name action syslog link down event link adjacency loss link event rate frame error count frame period count frame period summary count symbol period count interface interface n...

Page 3516: ...management CFM for IEEE 802 1ag Operation Administration and Management OAM support on the switches The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Ethernet OAM Link Fault Management on J EX Series Switches on page 3...

Page 3517: ...ted Documentation Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 event thresholds Syntax event thresholds frame error count frame period count frame period summary count symbol period count Hierarchy Level edit protocols oam ethernet link fault management interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switch...

Page 3518: ...on Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 frame period Syntax frame period count Hierarchy Level edit protocols oam ethernet link fault management event link event rate edit protocols oam ethernet link fault management interface interface name event thresholds Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Descripti...

Page 3519: ...specified in the action profile An errored frame second is any 1 second period that has at least one errored frame This event is generated if the number of errored frame seconds is equal to or greater than the specified threshold for that period Options count Threshold count in seconds for frame period summary error events Range 1 through 100 seconds Required Privilege Level interface To view this...

Page 3520: ...tion Configure Ethernet OAM link fault management LFM for all interfaces or for specific interfaces The remaining statements are explained separately Options interface name Name of the interface to be enabled for IEEE 802 3ah OAM link fault management LFM support Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configurat...

Page 3521: ...am ethernet link fault management interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the discovery mode used for IEEE 802 3ah Operation Administration and Maintenance OAM link fault management LFM support The discovery process is triggered automatically when OAM 802 3ah functionality is enabled on an interface...

Page 3522: ...ink event rate frame error count frame period count frame period summary count symbol period count Hierarchy Level edit protocols oam ethernet link fault management action profile event Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the number of link fault management LFM events per second The remaining statements are explained ...

Page 3523: ...k no allow link events Hierarchy Level edit protocols oam ethernet Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure Ethernet OAM link fault management LFM for all interfaces or for specific interfaces The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration in...

Page 3524: ...rol To add this statement to the configuration Related Documentation Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 no allow link events Syntax no allow link events Hierarchy Level edit protocols oam ethernet link fault management interface interface name negotiation options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches De...

Page 3525: ...k hold interval minutes interval 10m 10s 1m 1s 100ms loss threshold number mep mep id auto discovery direction down interface interface name remote mep mep id action profile profile name link fault management action profile profile name action syslog link down event link adjacency loss link event rate frame error count frame period count frame period summary count symbol period count interface int...

Page 3526: ...connectivity fault management CFM for IEEE 802 1ag Operation Administration and Management OAM support on the switches The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Example Configuring Ethernet OAM Link Fault Management on J EX Series...

Page 3527: ...ent on J EX Series Switches on page 3428 Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 pdu threshold Syntax pdu threshold threshold value Hierarchy Level edit protocols oam ethernet link fault management interface interface name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure how many protocol data uni...

Page 3528: ... edit protocols oam ethernet link fault management action profile profile name event link event rate edit protocols oam ethernet link fault management interface interface name event thresholds Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Configure the threshold for sending symbol period events or taking the action specified in the actio...

Page 3529: ...essage for the Ethernet Operation Administration and Maintenance OAM link fault management LFM event Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring Ethernet OAM Link Fault Management CLI Procedure on page 3431 Operational Mode Commands for Ethernet OAM Link Fault Managemen...

Page 3530: ...ink Fault Management CLI Procedure on page 3431 List of Sample Output show oam ethernet link fault management brief on page 3462 show oam ethernet link fault management detail on page 3462 Output Fields Table 455 on page 3458 lists the output fields for the show oam ethernet link fault management command Output fields are listed in the approximate order in which they appear Table 455 show oam ethe...

Page 3531: ...r OAM PDUs which are needed to maintain the OAM session Remote loopback status All levels Remote entity information Remote MUX action Indicates the state of the multiplexer functions of the OAM sublayer Device is forwarding non OAM PDUs to the lower sublayer or discarding non OAM PDUs Remote parser action Indicates the state of the parser function of the OAM sublayer Device is forwarding non OAM P...

Page 3532: ...error event window in the received PDU The protocol default value is the number of symbols that can be received in one second on the underlying physical layer Window detail The number of errored symbols in the period required for the event to be generated Threshold detail The number of symbol errors in the period reported in the received event PDU Errors in period detail The number of errored symb...

Page 3533: ... of symbol error event TLVs that have been transmitted after the OAM sublayer was reset Events detail The symbol error event window in the transmitted PDU Window detail The number of errored symbols in the period required for the event to be generated Threshold detail The number of symbol errors in the period reported in the transmitted event PDU Errors in period detail The number of errored symbo...

Page 3534: ...vent 0 Variable request 0 Variable response 0 Loopback control 0 Organization specific 0 OAM transmit statistics Information 186347 Event 0 Variable request 0 Variable response 0 Loopback control 0 Organization specific 0 OAM received symbol error event information Events 0 Window 0 Threshold 0 Errors in period 0 Total errors 0 OAM received frame error event information Events 0 Window 0 Threshold...

Page 3535: ...802 1ag standard for Operation Administration and Management OAM The IEEE 802 1ag specification provides for Ethernet connectivity fault management CFM CFM monitors Ethernet networks that might comprise one or more service instances for network compromising connectivity faults The major features of CFM are Fault monitoring using the continuity check protocol This is a neighbor discovery and health...

Page 3536: ...ng relationships between various maintenance domains The level is embedded in each CFM frame CFM messages within a given level are processed by MEPs at that same level To enable CFM on an Ethernet interface you must configure maintenance domains maintenance associations and maintenance association end points MEPs Figure 88 on page 3464 shows the relationships among maintenance domains maintenance ...

Page 3537: ...a point to point Gigabit Ethernet link The link between these two switches is monitored using CFM Configuring Ethernet OAM Connectivity Fault Management on Switch 1 CLI Quick Configuration To quickly configure Ethernet OAM CFM copy the following commands and paste them into the switch terminal window edit protocols oam ethernet connectivity fault management maintenance domain set name format chara...

Page 3538: ...1 auto discovery direction down Configuring Ethernet OAM Connectivity Fault Management on Switch 2 CLI Quick Configuration To quickly configure Ethernet OAM CFM copy the following commands and paste them into the switch terminal window edit protocols oam ethernet connectivity fault management maintenance domain set name format character string set maintenance domain private level 0 set maintenance...

Page 3539: ...guration edit user switch2 show protocols oam ethernet connectivity fault management maintenance domain private level 0 maintenance association private ma continuity check interval 1s mep 100 interface ge 0 2 5 auto discovery direction down Verification To confirm that the configuration is working properly perform these tasks Verifying That OAM CFM Has Been Configured Properly on page 3467 Verifyi...

Page 3540: ...red properly Related Documentation Understanding Ethernet OAM Connectivity Fault Management for a J EX Series Switch on page 3463 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos Configuring Ethernet OAM Connectivity Fault Management ConfiguringEthernetOAMConnectivityFaultManagement CLIProcedure onpage3468 Configuring Ethernet OAM Connectivity Fault M...

Page 3541: ...ame user switch set name format format For example to specify the name format as MAC address plus a two octet identifier edit protocols oam ethernet connectivity fault management maintenance domain domain name user switch set name format mac 2oct 3 Configure the maintenance domain level which is used to indicate the nesting relationship between this domain and other domains Use a value from 0 thro...

Page 3542: ... Specify the continuity check hold interval The hold interval is the number of minutes to wait before flushing the MEP database if no updates occur The default value is 10 minutes edit protocols oam ethernet connectivity fault management maintenance domain domain name maintenance association ma name continuity check user switch set hold interval number 3 Specify the CCM interval The interval is th...

Page 3543: ...ace must have a VLAN ID edit protocols oam ethernet connectivity fault management maintenance domain domain name maintenance association ma name mep mep id user switch set interface interface name 5 You can configure a remote MEP from which CCMs are expected If autodiscovery is not enabled the remote MEP must be configured under the mep statement If the remote MEP is not configured under the mep s...

Page 3544: ... entries are deleted after the age timer expires edit protocols oam ethernet connectivity fault management user switch set linktrace age time 2 Configure the number of linktrace reply entries to be stored per linktrace request edit protocols oam ethernet connectivity fault management user switch set linktrace path database size path database size Related Documentation Example Configuring Ethernet ...

Page 3545: ...ansmit period seconds static mac address interface interface name vlan assignment vlan id vlan name gvrp enable disable interface all interface name disable join timer millseconds leave timer milliseconds leaveall timer milliseconds igmp snooping traceoptions file filename files number size size world readable no world readable match regex flag flag detail disable receive send vlan vlan id vlan nu...

Page 3546: ...dable match regex flag flag detail disable receive send lldp med disable fast start number interface all interface name disable location elin number civic based what number country code code ca type number ca value value mpls interface all interface name label switched path lsp name to remote provider edge switch path destination address hostname strict loose mstp disable bpdu block on edge bridge...

Page 3547: ...ns file filename files number size size no stamp world readable no world readable flag flag mvrp disable interface all interface name disable join timer milliseconds leave timer milliseconds leaveall timer milliseconds registration forbidden normal no dynamic vlan traceoptions file filename files number size size no stamp world readable no world readable flag flag oam ethernet connectivity fault m...

Page 3548: ... id action profile profile name link fault management action profile profile name action syslog link down event link adjacency loss link event rate frame error count frame period count frame period summary count symbol period count interface interface name link discovery active passive pdu interval interval event thresholds threshold value remote loopback event thresholds frame errorcount frame pe...

Page 3549: ...er size size no stamp world readable no world readable flag flag sflow agent id collector ip address udp port port number disable interfaces interface name disable polling interval seconds sample rate number polling interval seconds sample rate number source ip stp disable bridge priority priority forward delay seconds hello time seconds interface all interface name disable bpdu timeout action blo...

Page 3550: ...name files number size size no stamp world readable no world readable flag flag Related Documentation 802 1X for J EX Series Switches Overview on page 2253 Example Configure Automatic VLAN Administration Using GVRP on page 1087 Understanding MAC RADIUS Authentication on J EX Series Switches Understanding Server Fail Fallback and 802 1X Authentication on J EX Series Switches on page 2258 IGMP Snoop...

Page 3551: ...face down Hierarchy Level edit protocols oam ethernet connectivity fault management Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure a name and default action for an action profile Options profile name Name of the action profile default actions Defines the action to be taken when connectivity to the remote MEP is lost interface down B...

Page 3552: ...Interfaces Configuration Guide at http www juniper net techpubs software junos auto discovery J EX Series Switch Only Syntax auto discovery Hierarchy Level edit protocols oam ethernet connectivity fault management maintenance domain domain name maintenance association ma name mep mep id Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Enable th...

Page 3553: ...emote mep mep id action profile profile name Hierarchy Level edit protocols oam ethernet Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure connectivity fault management for IEEE 802 1ag Operation Administration and Management OAM support The remaining statements are explained separately Required Privilege Level interface To view this s...

Page 3554: ...h Only Syntax direction down Hierarchy Level edit protocols oam ethernet connectivity fault management maintenance domain domain name maintenance association ma name mep mep id Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Specify that connectivity fault management CFM packets CCMs be transmitted only in one direction for the MEP that is the...

Page 3555: ...ace name ge xe fpc pic port fpc pic port unit number fpc pic port unit number vlan vlan id Hierarchy Level edit protocols oam ethernet connectivity fault management maintenance domain domain name maintenance association ma name mep mep id Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure IEEE 802 1ag Operation Administration and Manage...

Page 3556: ...tween continuity check messages Options 10m 10 minutes 10s 10 seconds 1m 1 minute 1s 1 second 100ms 100 milliseconds 10ms 10 milliseconds Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation ConfiguringEthernetOAMConnectivityFaultManagement CLIProcedure onpage3468 Junos OS Network Interface...

Page 3557: ...468 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos linktrace J EX Series Switch Only Syntax linktrace age 30m 10m 1m 30s 10s path database size path database size Hierarchy Level edit protocols oam ethernet connectivity fault management Release Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure c...

Page 3558: ...hat can be lost before the remote MEP is marked as down Options number Number of continuity check messages that can be lost before the remote MEP is marked down Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation ConfiguringEthernetOAMConnectivityFaultManagement CLIProcedure onpage3468 Jun...

Page 3559: ...lease 10 2 for J EX Series switches Description Configure the name of the maintenance association in IEEE compliant format Options ma name The name of the maintenance association within the maintenance domain The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration R...

Page 3560: ...lease Information Statement introduced in Junos OS Release 10 2 for J EX Series switches Description Configure the name of the maintenance domain in IEEE compliant format Options domain name The name for the maintenance domain The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to t...

Page 3561: ...meric identifier of the maintenance association end point MEP within the maintenance association Options mep id Numeric identifier of the MEP Range 1 through 8191 The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation ConfiguringEthernetOAMCon...

Page 3562: ...maintenance domains and maintenance associations must be the same Options none Specify to not use the mip half function default Specify to use the default mip half function explicit Specify an explicit mip half function Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation ConfiguringEtherne...

Page 3563: ...ed Documentation ConfiguringEthernetOAMConnectivityFaultManagement CLIProcedure onpage3468 Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos path database size J EX Series Switch Only Syntax path database size path database size Hierarchy Level edit protocols oam ethernet connectivity fault management linktrace Release Information Statement introduced ...

Page 3564: ...intenance association Options mep id Specify the numeric identifier of the MEP Range 1 through 8191 The remaining statement is explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation ConfiguringEthernetOAMConnectivityFaultManagement CLIProcedure onpage3468 Junos OS Network...

Page 3565: ...d level Required Privilege Level clear Related Documentation show oam ethernet connectivity fault management interfaces on page 3498 show oam ethernet connectivity fault management linktrace path database on page 3504 show oam ethernet connectivity fault management mip on page 3512 List of Sample Output clear oam ethernet connectivity fault management statistics on page 3493 Output Fields When you...

Page 3566: ...age 3512 List of Sample Output show oam ethernet connectivity fault management forwarding state on page 3495 show oam ethernet connectivity fault management forwarding state interface on page 3495 show oam ethernet connectivity fault management forwarding state interface detail on page 3496 show oam ethernet connectivity fault management forwarding state interface interface name on page 3496 Outpu...

Page 3567: ...ne 2 Drop none 3 Drop none 4 Drop none 5 Drop none 6 Drop none 7 Drop none show oam ethernet connectivity fault management forwarding state interface user host show oam ethernet connectivity fault management forwarding state interface Interface name ge 3 0 0 0 Maintenance domain forwarding state Level Direction Filter action Nexthop Nexthop type index 0 Drop none 1 Drop none 2 Drop none 3 Drop non...

Page 3568: ...vel 6 Filter action Drop Nexthop type none Level 7 Direction down Filter action Receive Nexthop type none Interface name xe 0 0 0 0 Level 0 Filter action Drop Nexthop type none Level 1 Filter action Drop Nexthop type none show oam ethernet connectivity fault management forwarding state interface interface name user host show oam ethernet connectivity fault management forwarding state interface int...

Page 3569: ...4 Drop none 5 Drop none 6 Drop none 7 down Receive none 3497 Chapter 131 Ethernet OAM Connectivity Fault Management ...

Page 3570: ...y fault management linktrace path database on page 3504 show oam ethernet connectivity fault management mep database on page 3512 List of Sample Output show oam ethernet connectivity fault management interfaces on page 3501 show oam ethernet connectivity fault management interfaces detail on page 3501 showoamethernetconnectivity fault managementinterfacesextensiveonpage3502 show oam ethernet conne...

Page 3571: ...dentifier All levels Number of MEP neighbors Neighbours detail extensive MEP direction configured Direction detail extensive MAC address configured for the MEP MAC address detail extensive Indicates the status of the Connectivity Fault Management CFM protocol running on the MEP Running inactive disabled or unsupported MEP status detail extensive Whether the remote MEP is not receiving connectivity...

Page 3572: ...xtensive Linktrace responses received LTRs received detail extensive Sequence number of next LTM request to be transmitted Sequence number of next LTM request detail extensive If the interface is attached to an initiator MEP for a one way ETH DM session Number of one way delay measurement 1DM PDU frames sent to the peer MEP in this session For all other cases this field displays 0 1DMs sent detail...

Page 3573: ...e remote MEP State remote MEP extensive Interface of the remote MEP Interface remote MEP show oam ethernet connectivity fault management interfaces user host show oam ethernet connectivity fault management interfaces Interface Link Status Level MEP Neighbours Identifier ge 1 1 0 0 Up Active 0 2 1 ge 1 1 0 1 Up Active 0 2 1 show oam ethernet connectivity fault management interfaces ge 1 1 0 10 Up A...

Page 3574: ...host show oam ethernet connectivity fault management interfaces extensive Interface name ge 5 2 9 0 Interface status Active Link status Up Maintenance domain name md0 Format string Level 5 Maintenance association name ma1 Format string Continuity check status enabled Interval 100ms Loss threshold 3 frames MEP identifier 1 Direction down MAC address 00 90 69 0b 4b 94 MEP status running Defects Remo...

Page 3575: ...aces Interface Link Status Level MEP Neighbours Identifier ge 4 0 1 0 vlan 100 Up Active 5 100 0 ge 10 3 10 4091 vlan 4091 Down Inactive 4 400 0 ge 4 0 0 0 Up Active 6 200 0 user host show oam ethernet connectivity fault management interfaces ge 4 0 0 0 Interface Link Status Level MEP Neighbours Identifier ge 4 0 0 0 Up Active 6 200 0 user host show oam ethernet connectivity fault management inter...

Page 3576: ...493 show oam ethernet connectivity fault management interfaces on page 3498 show oam ethernet connectivity fault management mip on page 3512 List of Sample Output show oam ethernet connectivity fault management path database on page 3505 show oam ethernet connectivity fault management linktrace path database Two traceroute Commands on page 3505 Output Fields Table 458 on page 3504 lists the output...

Page 3577: ...03 04 05 Interface ge 5 0 0 0 Maintenance Domain MD1 Level 7 Maintenance Association MA1 Local Mep 1 show oam ethernet connectivity fault management path database Hop TTL Source MAC address Next hop MAC address Transaction Identifier 100001 1 63 00 00 aa aa aa aa 00 00 bb bb bb bb 2 62 00 00 bb bb bb bb 00 00 cc cc cc cc 3 61 00 00 cc cc cc cc 00 01 02 03 04 05 4 60 00 01 02 03 04 05 00 00 00 00 0...

Page 3578: ...p id Optional Display connectivity fault management information for the specified remote MEP only Required Privilege Level view Related Documentation clear oam ethernet connectivity fault management statistics on page 3493 show oam ethernet connectivity fault management interfaces on page 3498 show oam ethernet connectivity fault management mip on page 3512 List of Sample Output show oam ethernet ...

Page 3579: ...covery is enabled or disabled Auto discovery Priority used for CCMs and linktrace messages transmitted by the MEP Priority Interface identifier Interface name Local interface status Interface status Local link status Link status Whether the remote MEP is not receiving CCMs Remote MEP not receiving CCM Whether erroneous CCMs have been received ErroneousCCMreceived Whether cross connect CCMs have be...

Page 3580: ...ence number of next LTM request If the MEP is an initiator for a one way ETH DM session Number of one way delay measurement 1DM PDU frames sent to the peer MEP in this session For all other cases this field displays 0 1DMs sent If the MEP is a receiver for a one way ETH DM session Number of valid 1DM frames received For all other cases this field displays 0 Valid 1DMs received If the MEP is a rece...

Page 3581: ...fect indication In the Maintenance domain section displays the last transmitted port status TLV value In the Remote MEP section displays the last value of port status TLV received from the remote MEP In the Action profile section displays the last occurred event port status tlv blocked event This event occurred due to the reception of blocked value in the port status TLV from remote MEP Port statu...

Page 3582: ... Maintenance association name vpls vlan200 Format string Continuity check status enabled Interval 100ms Loss threshold 3 frames MEP identifier 200 Direction up MAC address 00 19 e2 b0 74 01 Auto discovery enabled Priority 0 Interface name ge 0 0 1 0 Interface status Active Link status Up Remote MEP identifier 100 State ok MAC address 00 19 e2 b2 81 4b Type Learned Interface vt 0 1 10 1049088 Last ...

Page 3583: ...Last event Interface status tlv lower layer down Action Interface down Time 2009 03 27 14 25 10 PDT 00 00 02 ago 3511 Chapter 131 Ethernet OAM Connectivity Fault Management ...

Page 3584: ...ult management mip on page 3512 Output Fields Table 460 on page 3512 lists the output fields for the show oam ethernet connectivity fault managementmip command Output fields are listed in the approximate order in which they appear Table 460 show oam ethernet connectivity fault management mip Output Fields Field Description Field Name Header for the MIP information showing the MIP name MIP informat...

Page 3585: ...ost tool 1 Select Troubleshoot Ping Host 2 Next to Advanced options click the expand icon 3 Enter information into the Ping Host page as described in Table 461 on page 3513 The Remote Host field is the only required field 4 Click Start The results of the ping operation are displayed in the main pane If no options are specified each ping response is in the following format bytes bytes from ip addre...

Page 3586: ...Specifies the type of service TOS value in the IP header of the ping request packet Type of Service Select the routing instance name from the list Name of the routing instance for the ping attempt Routing Instance Select the interval from the list Specifies the interval in seconds between transmissions of individual ping requests Interval Type the size in bytes of the packet The size can be from 0...

Page 3587: ...e of the first traceroute packet is set to 1 In this manner each waypoint along the path to the destination host replies with a Time Exceeded packet from which the source IP address can be obtained The results of the traceroute operation are displayed in the main pane If no options are specified each line of the traceroute display is in the following format hop number host ip address as number tim...

Page 3588: ...s the interface on which the traceroute packets are sent Interface From the list select the TTL Specifies the maximum time to live TTL hop count for the traceroute request packet Time to live From the list select the decimal value of the TOS field Specifies the type of service TOS value to include in the IP header of the traceroute request packet Type of Service To display the AS numbers select th...

Page 3589: ...e is archived the router or switch attempts to transfer the file to the first URL in the list moving to the next site only if the transfer does not succeed The log file is stored at the archive site with a filename of the format router name_log filename_timestamp Options site name Any valid FTP URL to a destination For information about specifying valid FTP URLs see the Junos OS System Basics Conf...

Page 3590: ...as destination class usage configured For information about configuring source classes see the Junos OS Routing Protocols Configuration Guide at http www juniper net techpubs software junos For information about configuring source class usage see the Junos OS Network Interfaces Configuration Guide at http www juniper net techpubs software junos Options profile name Name of the destination class pr...

Page 3591: ...Related Documentation Configuring the Counters destination classes Syntax destination classes destination class name Hierarchy Level edit accounting options class usage profile profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the destination classes for which statistics are collected Options destination class name Name ...

Page 3592: ...ror packets input multicast Input packets arriving by multicast input packets Input packets input unicast Input unicast packets output bytes Output bytes output errors Generic output error packets output multicast Output packets sent by multicast output packets Output packets output unicast Output unicast packets Required Privilege Level interface To view this statement in the configuration interf...

Page 3593: ...Series switches Description Specify the accounting log file associated with the profile Options filename Name of the log file You must specify a filename already configured in the file statement at the edit accounting options hierarchy level Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentat...

Page 3594: ...og Files files Syntax files number Hierarchy Level edit accounting options file filename Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the maximum number of log files to be used for accounting data Options number The maximum number of files When a log file for example profilelog reaches its maximum size it is renamed profilelog 0...

Page 3595: ...a firewall filter you include the accounting profile statement at the edit firewall filter filter name hierarchy level For more information about firewall filters see the Junos OS Network Interfaces Configuration Guide Options profile name Name of the filter profile The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration inte...

Page 3596: ...ics and write them to a file in the var log directory You can specify an interface profile for either a physical or a logical interface Options profile name Name of the interface profile The remaining statements are explained separately Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation C...

Page 3597: ...EX Series switches Description Specify how often statistics are collected for the accounting profile Options minutes Length of time between each collection of statistics Range 1 through 2880 minutes Default 30 minutes Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring the Inte...

Page 3598: ...To add this statement to the configuration Related Documentation Configuring the MIB Profile object names Syntax object names mib object name Hierarchy Level edit accounting options mib profile profile name Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the name of each MIB object for which MIB statistics are collected for an acco...

Page 3599: ...IB Profile routing engine profile Syntax routing engine profile profile name fields field name file filename interval minutes Hierarchy Level edit accounting options Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Create a Routing Engine profile to collect selected Routing Engine statistics and write them to a file in the var log directory...

Page 3600: ...ecify MB xg to specify GB Range 256 KB through 1 GB Required Privilege Level interface To view this statement in the configuration interface control To add this statement to the configuration Related Documentation Configuring the Maximum Size of the File source classes Syntax source classes source class name Hierarchy Level edit accounting options class usage profile profile name Release Informati...

Page 3601: ...rval minutes Hierarchy Level edit accounting options file filename Release Information Statement introduced before Junos OS Release 10 2 for J EX Series switches Description Specify the length of time the file remains open and receives new statistics before it is closed and transferred to an archive site Options minutes Time the file remains open and receives new statistics before it is closed and...

Page 3602: ...3530 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3603: ...CHAPTER 134 Operational Mode Commands for General Network Management and Monitoring 3531 ...

Page 3604: ...ional Display absolute TCP sequence numbers count count Optional Specify the number of packet headers to display 0 through 1 000 000 The monitor traffic command quits automatically after displaying the number of packets specified interface interface name Optional Specify the interface on which the monitor traffic command displays packet data If no interface is specified the monitor traffic command...

Page 3605: ...eds the configured size AdditionalInformation In the monitor traffic command you can specify an expression to match by using the matching option and including the expression in quotation marks monitor traffic matching expression Replace expression with one or more of the match conditions listed in Table 463 on page 3533 Table 463 Match Conditions for the monitor traffic Command Description Conditi...

Page 3606: ...t packets ether Matches broadcast or multicast Ethernet frames This match condition can be prepended withsrc and dst ether broadcast multicast Matches packets with the specified Ethernet address or Ethernet packets of the specified protocol type The ether protocol arguments arp ip and rarp are also independent match conditions so they must be preceded by a backslash when used in the ether protocol...

Page 3607: ...operators to compare arithmetic expressions composed of integer constants binary operators a length operator and special packet data accessors The arithmetic expression matching condition uses the following syntax monitor traffic matching ether 0 1 0 arithmetic_expression relational_operator arithmetic_expression The packet data accessor uses the following syntax protocol byte offset size The opti...

Page 3608: ...face ae x command for aggregated Ethernet interfaces such as ae0 only shows inbound traffic data the command does not show VLAN tag information in the output Table 465 Arithmetic and Relational Operators for the monitor traffic Command Description Arithmetic or Relational Operator Arithmetic Operator Addition operator Subtraction operator Division operator Bitwise AND Bitwise exclusive OR Bitwise ...

Page 3609: ...telnet ack 4122529971 win 17678 DF ttl 121 id 6812 04 38 16 265926 Out my server work net telnet telnet my server home net 1295 P 1 38 37 ack 0 win 17680 DF tos 0x10 ttl 6 monitor traffic extensive Absolute Sequence user host monitor traffic extensive no domain names no resolve no timestamp count 20 matching tcp absolute sequence listening on fxp0 In 207 17 136 193 179 192 168 4 227 1024 404278085...

Page 3610: ... 156 4139 P 1 40 39 ack 0 win 17680 DF tos 0x10 ttl 64 id 52376 monitor traffic matching user host monitor traffic matching net 192 168 1 0 24 verbose output suppressed use detail or extensive for full protocol decode Address resolution is ON Use no resolve to avoid any reverse lookup delay Address resolution timeout is 4s Listening on fxp0 capture size 96 bytes Reverse lookup for 192 168 1 255 fa...

Page 3611: ...s or hostname of the remote system to ping bypass routing Optional Bypass the normal routing tables and send ping requests directly to a system on an attached network If the system is not on a directly attached network an error is returned Use this option to ping a local system through an interface that has no route through it count requests Optional Number of ping requests to send The range of va...

Page 3612: ... range of values in bytes is 0 through 65 468 The default value is 56 which is effectively 64 bytes because 8 bytes of ICMP header data are added to the packet source source address Optional IP address of the outgoing interface This address is sent in the IP source address field of the ping request If this option is not specified the default address is usually the loopback interface lo 0 strict Op...

Page 3613: ... 098 ms 64 bytes from 192 168 169 254 icmp_seq 4 ttl 253 time 1 032 ms 64 bytes from 192 168 169 254 icmp_seq 5 ttl 253 time 1 044 ms C abort ping hostname size count user host ping skye size 200 count 5 PING skye net 192 168 169 254 200 data bytes 208 bytes from 192 168 169 254 icmp_seq 0 ttl 253 time 1 759 ms 208 bytes from 192 168 169 254 icmp_seq 1 ttl 253 time 2 075 ms 208 bytes from 192 168 ...

Page 3614: ...the same output object id The object can be represented by a sequence of dotted integers such as 1 3 6 1 2 1 2 or by its subtree name such as interfaces When entering multiple objects enclose the objects in quotation marks Required Privilege Level snmp To view this statement in the configuration List of Sample Output show snmp mib get on page 3543 show snmp mib get Multiple Objects on page 3543 sh...

Page 3615: ...nc sysObjectID 0 jnxProductNameM20 sysUpTime 0 1640992 sysContact 0 Your contact sysName 0 my router sysLocation 0 building 1 sysServices 0 4 show snmp mib walk decimal user host show snmp mib walk decimal jnxUtilData jnxUtilCounter32Value 102 114 101 100 100 show snmp mib walk ASCII show snmp mib walk ascii jnxUtilData jnxUtilCounter32Value fred 100 show snmp mib walk Multiple Indices show snmp m...

Page 3616: ...tly attached network an error is returned Use this option to display a route to a local system through an interface that has no route through it clns Optional Trace the route belonging to Connectionless Network Service CLNS gateway address Optional Address of a router or switch through which the route transits inet inet6 Optional Trace the route belonging to IPv4 or IPv6 respectively interface int...

Page 3617: ...ters Layer 3 VPN on page 3546 traceroute Through an MPLS LSP on page 3546 Output Fields Table 467 on page 3545 describes the output fields for the traceroute command Output fields are listed in the approximate order in which they appear Table 467 traceroute Output Fields Field Description Field Name IP address of the receiver traceroute to Maximum number of hops allowed hops max Size of packets be...

Page 3618: ... 0 450 ms 0 444 ms 3 10 156 169 254 0 931 ms 0 876 ms 0 862 ms traceroute Between CE Routers Layer 3 VPN user host traceroute vpn09 traceroute to vpn09 skybank net 10 255 14 179 30 hops max 40 byte packets 1 10 39 10 21 10 39 10 21 0 598 ms 0 500 ms 0 461 ms 2 10 39 1 13 10 39 1 13 0 796 ms 0 775 ms 0 806 ms MPLS Label 100006 CoS 0 TTL 1 S 1 3 vpn09 skybank net 10 255 14 179 0 783 ms 0 716 ms 0 68...

Page 3619: ...PART 25 Index Index on page 3549 3547 ...

Page 3620: ...3548 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Page 3621: ... page field summary 403 Add a User Configuration page field summary 402 Address Resolution Protocol ARP See ARP proxy ARP address statement 2376 anycast RPs 2081 local RPs 2081 SNMPv3 3313 address mask statement 3313 address pool statement 2377 address range statement 2377 addresses router source 177 administrative groups See groups advertise external statement 1467 advertise inactive statement 14...

Page 3622: ...cing flag 1718 as path statement 1477 2809 as path group statement 2810 asm override ssm statement 1478 ASN BGP community routes displaying 1918 ASs configuring 1487 paths aggregate routes 1477 generated routes 1477 1514 operations tracing 1718 static routes 1477 private removing 1678 assert tracing flag 2131 assert timeout statement 2083 attributes statement 2379 attributes match statement 562 au...

Page 3623: ...6 hold time 1563 idle after switch over statement 1565 keepalive messages 1718 local address 1595 local interface 1598 monitoring 1455 MP BGP 1536 MTU discovery 1620 multihop sessions 1622 neighbors clearing connections 1756 displaying 1812 open messages 1649 outbound route filters interoperability 1507 packets tracing 1718 peers 1624 policy routing 1529 1567 preferences 1660 route reflection 1513...

Page 3624: ...taining 514 SSL certificates adding 397 unsigned certificate obtaining 516 certificates statement 460 certification authority statement 461 CFM statistics See OAM connectivity fault management statistics change type statement 413 chassis alarm condition indicator 544 alarm conditions displaying 634 ALM LED 544 craft interface display messages clearing the display of 202 displaying 233 stopping the...

Page 3625: ...0 clear log command 360 612 clear multicast bandwidth admission command 2152 clear multicast scope command 2154 clear multicast sessions command 2155 clear multicast statistics command 2156 clear mvrp statistics command 1230 clearoamethernetconnectivity fault management statistics 3493 clear ospf overload command 1768 clear pim join command 2157 clear pim register command 2158 clear pim statistics...

Page 3626: ...ssifiers page 2916 CoS forwarding classes page 2918 CoS scheduler maps page 2920 CoS schedulers page 2920 CoS value aliases 2913 deleting rescue configuration 376 629 displaying archival configuration 383 current configuration 244 previous configuration 385 rescue configuration 384 rewrite rules page 2926 saving rescue configuration 377 630 secure Web access 395 syntax verifying 387 upgrading J We...

Page 3627: ...940 RED profile information displaying 2987 rewrite rules See rewrite rules scheduler maps See scheduler maps schedulers See schedulers CoS queue statistics 1016 cost statement STP 1361 counters statement 3519 country code statement 2389 CPU utilization displaying 555 craft interface display messages clearing 202 displaying on the craft interface display 233 stopping 233 critical system logging se...

Page 3628: ...CP leases configuring 448 monitoring 452 DHCP pages field summary 448 DHCP pools configuring Quick Configuration 448 monitoring 452 DHCP server boot operations 449 configuration 447 information 448 monitoring operations 452 static bindings 449 subnet for configuration Quick Configuration 448 dhcp statement usage guidelines 465 dhcp option82 statement 2674 dhcp snooping file statement 2675 dhcp tru...

Page 3629: ... 943 edit interfaces configuration statement hierarchy 943 editing configuration text 331 egress statement port mirroring 3271 elin statement 2396 embedded rp statement 2091 emergency system logging severity level 1643 enable statement routing options 1584 encoding statement 467 engine id statement SNMPv3 3325 enrollment retry statement 468 enrollment url statement 468 environmental information ch...

Page 3630: ...ing table 1533 IS IS 1530 OSPF 1531 PIM 2091 RIP 1532 RIPng 1532 export rib statement 1533 external preference statement IS IS 1534 OSPF 1535 F facility override statement 573 falling event index statement 3326 falling threshold statement health monitor 3327 RMON 3328 falling threshold interval statement RMON 3328 family 2957 family statement 957 BGP 1536 bootstrap 2092 class of service 2957 firew...

Page 3631: ... to output queues 2918 defining 2918 monitoring 2936 summary 2919 forwarding software process 23 forwarding table aggregate routes 1509 generated routes 1509 multicast information displaying 2199 policy routing 1533 static routes 1466 1575 1682 forwarding class statement 2404 class of service 2958 forwarding classes statement 2959 forwarding table statement 1542 FPC environmental information displ...

Page 3632: ...n 534 health monitor alarms displaying 3380 health monitor statement 3331 hello tracing flag IS IS 1721 PIM 2131 hello authentication key statement 1556 hello authentication type statement 1557 hello interval statement IS IS 1558 OSPF 1559 PIM 2098 hello padding statement 1560 hello time statement 1367 helper disable statement IS IS 1545 helpers statement 470 history of CLI commands displaying 153...

Page 3633: ...re attached bit statement 1566 ignore lsp metrics statement OSPF 1566 immediate leave statement 2101 IGMP 2102 immediate update statement accounting 2407 import statement 2961 BGP 1567 bootstrap 2103 OSPF 1568 PIM 2103 RIP 1569 RIPng 1570 route resolution 1571 import policy statement 1571 import rib statement 1572 include mp next hop statement 1573 indirect next hop 1573 indirect next hop statemen...

Page 3634: ...es conflicting displaying 519 removing from DHCP server conflict list 511 IP multicast announced sessions displaying 2209 bandwidth admission clearing 2152 flow map information displaying 2189 forwarding table displaying 2199 interface information displaying 2191 network information displaying 2193 next hop table displaying 2195 PIM to IGMP message translation information displaying 2197 PIM to ML...

Page 3635: ... 1850 interfaces 1579 interfaces displaying 1851 IPv4 unicast topology 1640 IPv6 unicast topology 1589 1636 level properties global 1593 link protection statement 1594 link state database entries clearing 1762 displaying 1843 loose authentication 1601 LSPs 1721 interval 1601 lifetime 1602 tracing 1721 mesh groups 1608 metrics 1676 IPv6 1589 multicast 1587 1588 normal 1610 wide 1745 multicast topol...

Page 3636: ...ry usage displaying 266 kernel replication state displaying 260 key pair for digital certificate generating 515 keyboard sequences used with monitor interface command 991 used with monitor interface traffic command 991 L l3 interface statement 1201 labeled unicast statement 1592 LACP See Link Aggregation Control Protocol lacp statement 968 LAN access interfaces definition 864 laptop See management...

Page 3637: ... 627 stopping 628 status displaying 626 log out on disconnect statement 176 log prefix statement system logging 580 log updown statement 1600 logging out users 215 logging system 1643 logical operators for monitor traffic command 3535 logical system statement 3336 login classes specifying 401 login statement 419 login time displaying 551 login alarms statement 420 login tip statement 420 logout us...

Page 3638: ... paths statement 1605 maximum power statement 3041 maximum prefixes statement 1606 maximum requests statement 2420 maximum rps statement 2111 MD5 checksum calculating 364 615 med igp update interval statement 1607 member statement 823 972 member range statement 974 members statement interfaces 973 1211 memory utilization displaying 555 menu item statement 188 mep statement 3489 mesh groups 1608 me...

Page 3639: ...asses displaying 3185 interfaces displaying 3187 3188 labels displaying routes 1972 Layer 2 circuit connections operability checking 3145 Layer 2 VPN connections operability checking 3147 Layer 3 VPN connections operability checking 3149 LDP signaled LSP connections operability checking 3151 link management information displaying all 3168 peers 3171 routing process 3173 statistics 3176 traffic eng...

Page 3640: ...p path mtu discovery statement 183 no ipv4 multicast statement 1634 no ipv4 routing statement 1635 no ipv6 multicast statement 1635 no ipv6 routing statement 1636 no ipv6 unicast statement 1636 no management vlan statement 824 no multicast echo statement 190 no nssa abr statement 1637 no path mtu discovery statement 193 no ping record route statement 190 no ping time stamp statement 191 no psnp au...

Page 3641: ...ntenance OAM connectivity fault management See OAM connectivity fault management link fault management See OAM link fault management operational mode scripts executing 207 options statement 1643 RADIUS 2424 order statement 2425 accounting 2425 OSPF adjacencies 1474 area type 1437 areas configuring 1474 backbone 1474 bandwidth based metrics 1491 BFD 1498 configuration 1435 designated router 1670 en...

Page 3642: ... IS IS 1647 OSPF 1648 owner statement 3341 P P2MP LSPs testing 3155 packet capture 548 Packet Forwarding Engine CPU traffic statistics displaying 2997 IPv4 statistics displaying 663 IPv6 statistics displaying 666 next hops displaying 659 overview 22 158 392 routing table displaying 661 terse information displaying 669 traffic statistics displaying 2994 packet headers transmitted displaying 3532 pa...

Page 3643: ...anycast 2082 displaying 2228 embedded 2091 maximum 2111 sparse dense mode 2088 statistics clearing 2159 displaying 2235 version 2139 pim statement 2114 pim to igmp proxy statement 1653 pim to mld proxy statement 1654 ping command 3539 ping host tool J Web 3513 ping mpls l2circuit command 3145 ping mpls l2vpn command 3147 ping mpls l3vpn command 3149 ping mpls ldp command 3151 ping mpls lsp end poi...

Page 3644: ...ment aggregate routes 1664 BGP 1660 generated routes 1664 IS IS 1661 OSPF 1662 RIP 1663 RIPng 1663 static routes 1664 preferences aggregate routes 1664 IS IS 1534 1661 OSPF 1535 1662 static routes 1664 prefix limit IS IS 1665 OSPF 1666 prefix list 2829 prefix statement 1665 2690 port security 2689 prefix export limit statement IS IS 1665 OSPF 1666 prefix limit statement 1667 prefix list statement ...

Page 3645: ...d runs statement IS IS 1704 OSPF 1705 rate limit statement 487 ratio statement 3280 read view statement 3342 readvertise statement 1672 real time monitoring files 626 interfaces 991 IP multicast paths 2161 traffic 3532 real time performance monitoring RPM See RPM realm statement 1673 reauthentication statement 2435 reboot immediately with J Web 78 rebooting with J Web 77 rebooting router software ...

Page 3646: ...stem software add command 108 request system software delete command 111 request system software rollback command 113 request system software validate command 115 request system storage cleanup command 227 request virtual chassis recycle command 838 request virtual chassis vc port dedicated port command 841 request virtual chassis vc port uplink port command 840 request virtual chassis renumber co...

Page 3647: ...6 statistics clearing 1772 displaying 1897 update interval 1739 ripng statement 1693 rising event index statement 3343 rising threshold statement health monitor 3344 RMON 3345 rlogin service configuring 492 RMON alarms and events displaying 3388 history displaying 3392 rmon statement 3345 3346 robust count statement 2122 IGMP 2123 role 829 role statement 829 rollback displaying 385 requesting 113 ...

Page 3648: ...view 22 158 392 status displaying 653 switchover information displaying 260 Routing Information Protocol See RIP routing instances router identifier 1694 routing policies displaying 2852 testing the configuration for 2856 routing protocol software process 23 routing tables BGP RIB groups 1687 creating 1685 exporting routes 1533 import policy 1571 importing routes 1572 nonactive routes exchanging w...

Page 3649: ...ment access 2439 authentication 2440 secret RADIUS 403 secure access Junos XML management protocol SSL access 395 Secure Access page field summary 396 secure access port statement 2693 secure authentication statement 2440 security certificate See certificates security features 2245 security level statement for access privileges 3349 for SNMP notifications 3349 security model statement for access p...

Page 3650: ...sis environment command 635 show chassis environment fpc command 637 show chassis environment routing engine command 638 show chassis firmware command 236 show chassis fpc command 639 show chassis hardware command 643 show chassis location command 649 show chassis pic command 650 show chassis routing engine command 653 show chassis temperature thresholds command 655 show class of service classifie...

Page 3651: ...how mpls cspf command 3183 show mpls diffserv te command 3185 show mpls interface command 3187 3188 show mpls lsp command 3189 show mpls path command 3198 show multicast flow map command 2189 show multicast interface command 2191 show multicast mrinfo command 2193 show multicast next hops command 2195 show multicast pim to igmp proxy command 2197 show multicast pim to mld proxy command 2198 show m...

Page 3652: ...and 1984 show route protocol command 1987 show route range command 1996 show route receive protocol command 2000 show route resolution command 2007 show route snooping command 2010 show route source gateway command 2018 show route summary command 2024 show route table command 2026 show route terse command 1461 2033 show rsvp interface command 3206 show rsvp neighbor command 3211 show rsvp session ...

Page 3653: ... statistics displaying 3387 MIB object values displaying 3542 RMON alarms and events displaying 3388 RMON history clearing 3371 RMON history displaying 3392 statistics clearing 3372 displaying 3395 system location 3335 traps spoofing 3374 version 3 configuration displaying 3399 SNMP features 3309 snmp statement 3354 snmp community statement 3355 snooping routes displaying 2010 sockets displaying a...

Page 3654: ...g 435 subscriber leave timer statement 1711 subscribers displaying 435 summaries statement 1712 supplicant statement 2450 supplicant timeout statement 2451 support technical requesting lxxi switching configuring 1133 1136 1146 switching platform halting J Web 77 rebooting J Web 77 switchover displaying information about 260 symbol period statement 3456 syntax of configuration files verifying 387 s...

Page 3655: ... 2695 flow map 1716 forwarding cache 1716 RADIUS 2454 RADIUS or TACACS 2453 timeout user setting 140 timer tracing flag 1730 1733 timers tracing flag STP 1382 timestamp CLI output setting 146 timestamping for client server with RPM 3414 to statement 2827 topologies statement IS IS 1717 topology change state machine tracing flag STP 1382 trace files display of starting 627 stopping 628 status displ...

Page 3656: ... machine STP 1382 port role select state machine STP 1382 port role transit state machine STP 1382 port state transit state machine STP 1382 port transmit state machine STP 1382 ppmd STP 1382 prune PIM 2132 psn 1721 regex parse 1733 register 2132 report IGMP 2137 route RIPng 1730 routing 1733 rp 2132 spf IS IS 1721 OSPF 1724 state RIPng 1730 routing protocols 1733 state machine variables STP 1382 ...

Page 3657: ...onents warranty limitations lxxi trunk interfaces definition 864 trusted key statement 200 TTY displaying 551 type statement 1737 3364 type 7 statement 1738 U udp port statement 3304 uid statement 431 unit statement class of service 2976 interfaces 496 984 UNIX level shell creating 154 unknown unicast forwarding statement rate limiting 2533 update tracing flag RIP 1727 RIPng 1730 update interval s...

Page 3658: ... management 699 mastership 790 member id 838 member ID 847 members of 823 monitoring 809 nonvolatile storage 702 overview 691 port status displaying 851 preprovisioning 752 renumber 839 replacing a member switch 811 session 837 setting uplink port as VCP 792 software upgrade 698 system uptime 842 timer configuration 797 troubleshooting 815 uplink VCP 840 version compatibility 705 Virtual Chassis p...

Page 3659: ...tement 1745 wins server statement 507 within statement 608 working directory current displaying 152 current setting 139 world readable statement archiving of all system log files 560 system logging 609 write interval statement 2704 write view statement 3370 X XSLT converting to SLAX 223 Y yellow alarms See minor alarms 3587 Index ...

Page 3660: ...3588 Dell PowerConnect J Series Ethernet Switch Complete Software Guide for Junos OS ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands