J-series™ Services Router User Guide

[Contents] [Prev] [Next] [Index] [Report an Error]

About This Guide

Objectives
Audience
How to Use This Guide
Document Conventions
Notice Icons
Text and Syntax Conventions
Related Juniper Networks Documentation
Documentation Feedback
Requesting Support

J-series Overview

Introducing the J-series Services Router

J-series Services Router Overview
J-series Software Features and Licenses

System Overview

J2300 Services Router Hardware Features

J2300 Chassis

J2300 Routing Engine

J2300 Boot Devices
J2300 Boot Sequence

J2300 Front Panel

ALARM LED
Power Button and POWER ON LED
CONFIG Button and LED
Console Port
J2300 USB Port

J2300 Physical Interface Module (PIM)

J2300 LAN Ports

J2300 Power System

J2300 Cooling System

J4300 and J6300 Services Router Hardware Features

J4300 and J6300 Chassis

Midplane

J4300 and J6300 Routing Engine

J4300 and J6300 Boot Devices
J4300 and J6300 Boot Sequence

J4300 and J6300 Front Panel

ALARM LED
Power Button and POWER ON LED
CONFIG Button and Configuration LED
Console Port
J4300 and J6300 USB Port
J4300 and J6300 LAN Ports
J4300 and J6300 Removable Compact Flash Drive

J4300 and J6300 Physical Interface Modules (PIMs)

J4300 Power System

J6300 Power System

J4300 and J6300 Cooling System

Software Overview

Routing Engine and Packet Forwarding Engine

Kernel and Microkernel

Processes

Management Process
Chassis Process
Routing Protocols Process
Interface Process
Forwarding Process

User Interfaces

Installing the J-series Services Router

Installing and Connecting a Services Router

Before You Begin

Unpacking the J-series Services Router

Installing the J2300 Services Router

Installing the J2300 Services Router on a Desk
Installing the J2300 Services Router on a Wall
Installing the J2300 Services Router into a Rack

Installing the J4300 or J6300 Services Router

Connecting Interface Cables to the Services Router

Chassis Grounding

Connecting Power to the Services Router

Powering a Services Router On and Off

Establishing Basic Connectivity

Basic Connectivity Terms

Basic Connectivity Overview

Router Identification

Root Password

Time Zone and System Time

Management Interface Address

Before Initial Configuration
During Initial Configuration
After Initial Configuration

Management Access

Before You Begin

Configuring the Services Router with J-Web Quick Configuration

Connecting to the J-Web Interface
Configuring Basic Settings with Quick Configuration

Configuring the Services Router with a Configuration Editor

Connecting to the CLI
Configuring Basic Settings with a Configuration Editor

Configuring Autoinstallation

Autoinstallation Overview
Autoinstallation Requirements for End Users
Autoinstallation Requirements for Service Providers
Enabling Autoinstallation with the CLI

Verifying Basic Connectivity

Managing J-series Licenses

J-series License Overview

Software Feature Licenses
Port Licenses
License Key Components

Before You Begin

Managing J-series Licenses with the J-Web Interface

Adding New Licenses with the J-Web Interface
Deleting Licenses with the J-Web User Interface
Displaying License Keys with the J-Web Interface
Downloading Licenses with the J-Web Interface

Managing J-series Licenses with the CLI

Adding New Licenses with the CLI
Deleting a License with the CLI
Saving License Keys with the CLI

Verifying J-series License Management

Configuring Network Interfaces

Network Interfaces Terms

Interfaces Overview

Network Interface Types
Interfaces and Interface Naming

Before You Begin

Configuring Network Interfaces with Quick Configuration

Configuring an E1 Interface with Quick Configuration
Configuring a Fast Ethernet Interface with Quick Configuration
Configuring a T1 Interface with Quick Configuration
Configuring a T3 Interface with Quick Configuration
Configuring a Serial Interface with Quick Configuration

Configuring Network Interfaces with a Configuration Editor

Adding a Network Interface with a Configuration Editor
Deleting a Network Interface with a Configuration Editor

Verifying Interface Configuration

Using the J-series User Interfaces

J-series User Interface Overview

User Interface Overview

J-Web Overview
CLI Overview
Comparison of Configuration Interfaces

Before You Begin

Using the J-Web Interface

Starting the J-Web Interface
J-Web Layout
J-Web Sessions

Using the Command-Line Interface

CLI Command Hierarchy

Starting the CLI

CLI Operational Mode

CLI Configuration Mode

CLI Basics

Editing Keystrokes
Command Completion
Online Help
Configuring the CLI Environment

Using J-series Configuration Tools

Configuration Tools Terms

Configuration Tools Overview

Editing and Committing a Configuration

J-Web Configuration Options

CLI Configuration Commands

Filtering Configuration Command Output

Before You Begin

Using J-Web Quick Configuration

Using the J-Web Configuration Editor

Editing and Committing the Clickable Configuration

Editing the Clickable Configuration
Discarding Parts of a Candidate Configuration
Committing a Clickable Configuration

Viewing the Configuration Text

Editing and Committing the Configuration Text

Uploading a Configuration File

Managing Configuration Files with the J-Web Interface

Configuration Database and History Overview
Displaying Users Editing the Configuration
Comparing Configuration Files
Downloading a Configuration File
Loading a Previous Configuration File
Setting a Rescue Configuration

Using the CLI Configuration Editor

Entering and Exiting Configuration Mode

Navigating the Configuration Hierarchy

Modifying the Configuration

Adding or Modifying a Statement or Identifier
Deleting a Statement or Identifier
Copying a Statement
Renaming an Identifier
Inserting an Identifier
Deactivating a Statement or Identifier

Committing a Configuration with the CLI

Verifying a Configuration
Committing a Configuration and Exiting Configuration Mode
Committing a Configuration That Requires Confirmation
Scheduling and Canceling a Commit
Loading a Previous Configuration File

Entering Operational Mode Commands During Configuration

Managing Configuration Files with the CLI

Loading a New Configuration File
Saving a Configuration File

Managing the Services Router

Managing Users and Operations

System Management Terms

System Management Overview

System Authentication

User Accounts

Login Classes

Permission Bits
Denying or Allowing Individual Commands

Template Accounts

System Log Files

Before You Begin

Managing Users and Files with the J-Web Interface

Managing Users with Quick Configuration

Adding a RADIUS Server for Authentication
Adding a TACACS+ Server for Authentication
Configuring System Authentication
Adding New Users

Managing Files with the J-Web Interface

Cleaning Up Files
Downloading Files
Deleting Files

Managing Users and Files with a Configuration Editor

Setting Up RADIUS Authentication

Setting Up TACACS+ Authentication

Configuring Authentication Order

Controlling User Access

Defining Login Classes
Creating User Accounts

Setting Up Template Accounts

Creating a Remote Template Account
Creating a Local Template Account

Using System Logs

Sending System Log Messages to a File
Sending System Log Messages to a User Terminal
Archiving System Logs
Disabling System Logs

Accessing Remote Devices with the CLI

Using the telnet Command
Using the ssh Command

Monitoring and Diagnosing a Services Router

Monitoring and Diagnostic Terms

Monitoring and Diagnostic Tools Overview

Monitoring Tools Overview
J-Web Diagnostic Tools Overview
CLI Diagnostic Commands Overview
Filtering Command Output

Before You Begin

Using the Monitoring Tools

Monitoring System Properties
Monitoring the Chassis
Monitoring the Interfaces
Monitoring Routing Information
Monitoring Firewalls
Monitoring IPSec Tunnels
Monitoring NAT Pools

Using J-Web Diagnostic Tools

Using the J-Web Ping Host Tool
Using the J-Web Traceroute Tool

Using CLI Diagnostic Commands

Using the ping Command

Using the traceroute Command

Using the monitor interface Command

Using the monitor traffic Command

Using the monitor file Command

Using mtrace Commands

Using the mtrace from-source Command
Using the mtrace monitor Command

Configuring SNMP for Network Management

Network Management Overview

Managers and Agents
SMI, MIBs, and OIDs
Standard and Enterprise MIBs
SNMP Requests
SNMP Communities
SNMP Traps

Before You Begin

Configuring SNMP with Quick Configuration

Configuring SNMP with a Configuration Editor

Defining System Identification Information
Configuring SNMP Agents and Communities
Managing SNMP Trap Groups
Controlling Access to MIBs

Verifying the SNMP Configuration

Configuring Routing Protocols

Routing Overview

Routing Terms

Routing Overview

Networks and Subnetworks
Autonomous Systems
Interior and Exterior Gateway Protocols
Routing Tables
Forwarding Tables
Dynamic and Static Routing
Route Advertisements
Route Aggregation

RIP Overview

Distance-Vector Routing Protocols
Maximizing Hop Count
RIP Packets
Split Horizon and Poison Reverse Efficiency Techniques
Limitations of Unidirectional Connectivity

OSPF Overview

Link-State Advertisements
Role of the Designated Router
Path Cost Metrics
Areas and Area Border Routers
Role of the Backbone Area
Stub Areas and Not-So-Stubby Areas

BGP Overview

Point-to-Point Connections

BGP Messages for Session Establishment

BGP Messages for Session Maintenance

Multiple Exit Discriminator

Scaling BGP for Large Networks

Route Reflectors—for Added Hierarchy
Confederations—for Subdivision

Configuring Static Routes

Static Routing Overview

Static Route Preferences

Qualified Next Hops

Control of Static Routes

Route Retention
Readvertisement Prevention
Forced Rejection of Passive Route Traffic

Default Properties

Before You Begin

Configuring Static Routes with Quick Configuration

Configuring Static Routes with a Configuration Editor

Configuring a Basic Set of Static Routes
Controlling Static Route Selection
Controlling Static Routes in the Routing and Forwarding Tables
Defining Default Behavior for All Static Routes

Verifying the Static Route Configuration

Configuring a RIP Network

RIP Overview

RIP Traffic Control with Metrics
Authentication

Before You Begin

Configuring a RIP Network with Quick Configuration

Configuring a RIP Network with a Configuration Editor

Configuring a Basic RIP Network

Controlling Traffic in a RIP Network

Controlling Traffic with the Incoming Metric
Controlling Traffic with the Outgoing Metric

Enabling Authentication for RIP Exchanges

Enabling Authentication with Plain-Text Passwords
Enabling Authentication with MD5 Authentication

Verifying the RIP Configuration

Configuring an OSPF Network

OSPF Overview

Enabling OSPF
OSPF Areas
Path Cost Metrics

Before You Begin

Configuring an OSPF Network with Quick Configuration

Configuring an OSPF Network with a Configuration Editor

Configuring the Router Identifier

Configuring a Single-Area OSPF Network

Configuring a Multiarea OSPF Network

Creating the Backbone Area
Creating Additional OSPF Areas
Configuring Area Border Routers

Configuring Stub and Not-So-Stubby Areas

Tuning an OSPF Network for Efficient Operation

Controlling Route Selection in the Forwarding Table
Controlling the Cost of Individual Network Segments
Enabling Authentication for OSPF Exchanges
Controlling Designated Router Election

Verifying an OSPF Configuration

Configuring BGP Sessions

BGP Overview

BGP Peering Sessions
IBGP Full Mesh Requirement
Route Reflectors and Clusters
BGP Confederations

Before You Begin

Configuring a BGP Network with Quick Configuration

Configuring BGP Networks with a Configuration Editor

Configuring a Point-to-Point Peering Session
Configuring BGP Within a Network
Configuring a Route Reflector
Configuring BGP Confederations

Verifying a BGP Configuration

Configuring Routing Policy, Firewall Filters, and Class of Service

Policy, Firewall Filter, and Class-of-Service Overview

Policy, Firewall Filter, and CoS Terms

Routing Policy Overview

Routing Policy Components

Routing Policy Terms
Routing Policy Match Conditions
Routing Policy Actions
Default and Final Actions

Applying Routing Policies

Firewall Filter Overview

Stateful and Stateless Firewall Filters
Process for Configuring a Stateful Firewall Filter and NAT
Summary of Stateful Firewall Filter and NAT Match Conditions and Actions
Planning a Stateless Firewall Filter
Stateless Firewall Filter Match Conditions, Actions, and Action Modifiers

Class-of-Service Overview

Benefits of DiffServ CoS

DSCPs and Forwarding Service Classes

JUNOS CoS Functions

How Forwarding Classes and Schedulers Work

Default Forwarding Class Queue Assignments
Default Scheduler Settings
Default Behavior Aggregate (BA) Classifiers
DSCP Rewrites
Sample BA Classification

Configuring Routing Policies

Before You Begin

Configuring a Routing Policy with a Configuration Editor

Configuring the Policy Name
Configuring a Policy Term
Rejecting Known Invalid Routes
Injecting OSPF Routes into the BGP Routing Table
Grouping Source and Destination Prefixes in a Forwarding Class
Configuring Policy to Prepend the AS Path
Configuring Damping Parameters

Configuring Firewall Filters and NAT

Before You Begin

Configuring a Stateful Firewall Filter with Quick Configuration

Configuring a Stateful Firewall Filter with a Configuration Editor

Configuring a Stateless Firewall Filter with a Configuration Editor

Stateless Firewall Filter Strategies

Strategy for a Typical Stateless Firewall Filter
Strategy for Handling Packet Fragments

Configuring a Routing Engine Firewall Filter for Services and Protocols from Trusted Sources

Configuring a Routing Engine Firewall Filter to Protect Against TCP and ICMP Floods

Configuring a Routing Engine Firewall Filter to Handle Fragments

Applying a Stateless Firewall Filter to an Interface

Verifying Firewall Filter Configuration

Configuring Virtual Private Networks

Before You Begin

Configuring a Stateful Firewall Filter with Quick Configuration

Configuring a Stateful Firewall Filter with a Configuration Editor

Configuring a Stateless Firewall Filter with a Configuration Editor

Stateless Firewall Filter Strategies

Strategy for a Typical Stateless Firewall Filter
Strategy for Handling Packet Fragments

Configuring a Routing Engine Firewall Filter for Services and Protocols from Trusted Sources

Configuring a Routing Engine Firewall Filter to Protect Against TCP and ICMP Floods

Configuring a Routing Engine Firewall Filter to Handle Fragments

Applying a Stateless Firewall Filter to an Interface

Verifying Firewall Filter Configuration

Configuring Class of Service with DiffServ

Before You Begin

Configuring CoS with DiffServ with a Configuration Editor

Configuring a Policer for a Firewall Filter
Configuring and Applying a Firewall Filter for a Multifield Classifier
Assigning Forwarding Classes to Output Queues
Configuring and Applying Rewrite Rules
Configuring and Applying Behavior Aggregate Classifiers
Configuring RED Drop Profiles for Assured Forwarding Congestion Control
Configuring Schedulers
Configuring and Applying Scheduler Maps
Configuring and Applying Virtual Channels

Verifying a DiffServ Configuration

Managing Multicast Transmissions

Multicast Overview

Multicast Terms

Multicast Architecture

Upstream and Downstream Interfaces
Subnetwork Leaves and Branches
Multicast IP Address Ranges
Notation for Multicast Forwarding States

Dense and Sparse Routing Modes

Strategies for Preventing Routing Loops

Reverse-Path Forwarding for Loop Prevention
Shortest-Path Tree for Loop Prevention
Administrative Scoping for Loop Prevention

Multicast Protocol Building Blocks

Configuring a Multicast Network

Before You Begin

Configuring a Multicast Network with a Configuration Editor

Configuring SAP and SDP
Configuring IGMP
Configuring the PIM Static RP
Configuring a PIM RPF Routing Table

Verifying a Multicast Configuration

Managing Packet Security

Configuring IPSec for Secure Packet Exchange

IPSec Tunnel Overview

Security Associations
Securing IncomingTraffic
Translating Outgoing Traffic

Before You Begin

Configuring an IPSec Tunnel with Quick Configuration

Configuring an IPSec Tunnel with a Configuration Editor

Configuring IPSec Services Interfaces
Configuring IPSec Service Sets
Configuring an IPSec Stateful Firewall Filter
Configuring a NAT Pool

Verifying the IPSec Tunnel Configuration

Upgrading the Services Router

Performing Software Upgrades and Reboots

Upgrade Overview

Before You Begin

Downloading Software Upgrades from Juniper Networks

Installing Software Upgrades with J-Web Quick Configuration

Installing Software Upgrades from a Remote Server
Installing Software Upgrades by Uploading Files

Installing Software Upgrades with the CLI

Downgrading the Software with the J-Web Interface

Downgrading the Software with the CLI

Configuring Boot Devices

Configuring Boot Devices with the CLI
Copying Software Images to Boot Devices with UNIX
Copying Software Images to Boot Devices with Cygwin

Configuring a Boot Device to Receive Software Failure Memory Snapshots

Deleting a Rescue Configuration

Rebooting or Halting a Services Router with the J-Web Interface

Rebooting the Services Router with the CLI

Halting the Services Router with the CLI

Replacing and Troubleshooting Hardware Components

Replacing Hardware Components

Tools and Parts Required

Replacing the Console Port Cable

Replacing a PIM

Removing a PIM
Installing a PIM

Replacing PIM Cables

Removing a PIM Cable
Installing a PIM Cable

Removing and Installing the Primary Compact Flash Disk

Removing the Primary Compact Flash Disk
Installing the Primary Compact Flash Disk

Removing and Installing the Removable Compact Flash Disk

Removing the Removable Compact Flash Disk
Installing the Removable Compact Flash Disk

Removing and Installing the USB Drive

Removing the USB Drive
Installing the USB Drive

Removing and Installing DRAM Modules

Removing a DRAM Module
Installing a DRAM Module

Replacing a Power Supply Cord in a J2300 or J4300 Router

Replacing Power System Components in a J6300 Router

Removing a Power Supply in a J6300 Router
Installing a Power Supply in a J6300 Router
Replacing a Power Supply Cord in a J6300 Router

Troubleshooting Hardware Components

Chassis Alarm Conditions
Contacting the Juniper Networks Technical Assistance Center

J-series Requirements and Specifications

Preparing for Router Installation

General Site Guidelines

Desktop and Wall Mounting Requirements

Rack Requirements

Rack Size and Strength
Spacing of Mounting Holes
Connection to Building Structure

Router Environmental Tolerances

Fire Safety Requirements

Fire Suppression
Fire Suppression Equipment

Power Guidelines, Requirements, and Specifications

Site Electrical Wiring Guidelines

Signaling Limitations
Radio Frequency Interference
Electromagnetic Compatibility

Router Power Requirements

AC Power, Connection, and Power Cord Specifications

Network Cable Specifications

Site Preparation Checklist

Network Cable Specifications and Connector Pinouts

Serial PIM Cable Specifications

RS-232 DTE Cable Pinout
RS-232 DCE Cable Pinout
RS-422/449 (EIA-449) DTE Cable Pinout
RS-422/449 (EIA-449) DCE Cable Pinout
EIA-530A DTE Cable Pinout
EIA-530A DCE Cable Pinout
V.35 DTE Cable Pinout
V.35 DCE Cable Pinout
X.21 DTE Cable Pinout
X.21 DCE Cable Pinout

RJ-45 Connector Pinouts for the Routing Engine (Ethernet) Port

DB-9 Connector Pinouts for the Console Port

E1 and T1 RJ-48 Cable Pinouts

Safety and Regulatory Compliance Information

Definition of Safety Warning Levels

Safety Guidelines and Warnings

General Safety Guidelines and Warnings

Qualified Personnel Warning
Preventing Electrostatic Discharge Damage

Electrical Safety Guidelines and Warnings

General Electrical Safety Guidelines
AC Power Electrical Safety Guidelines
Grounded Equipment Warning
Warning Statement for Norway and Sweden
In Case of Electrical Accident
Multiple Power Supplies Disconnection Warning
Power Disconnection Warning
TN Power Warning
Telecommunication Line Cord Warning

Installation Safety Guidelines and Warnings

Chassis Lifting Guidelines
Installation Instructions Warning
Rack-Mounting Requirements and Warnings
Ramp Warning

Laser and LED Safety Guidelines and Warnings

General Laser Safety Guidelines
Class 1 Laser Product Warning
Class 1 LED Product Warning
Laser Beam Warning
Radiation from Open Port Apertures Warning

Maintenance and Operational Safety Guidelines and Warnings

Battery Handling Warning
Jewelry Removal Warning
Lightning Activity Warning
Operating Temperature Warning
Product Disposal Warning

Agency Approvals

Compliance Statements for EMC Requirements

FCC Part 15 Statement
FCC Part 68 Statement

Customer Support and Product Return

Contacting Customer Support and Returning Hardware

Locating Component Serial Numbers

PIM Serial Number Label
J6300 Power Supply Serial Number Labels

Contacting Customer Support

Information You Might Need to Supply to JTAC

Return Procedure

Packing a Router or Component for Shipment

Tools and Parts Required
Packing the Services Router for Shipment
Packing Components for Shipment

Indexes

[Contents] [Prev] [Next] [Index] [Report an Error]

Table of Contents