Junos OS Routing Processes
Junos OS consists of multiple processes that run on different platforms and have unique functions. The separation of functions provides operational stability, because each process accesses its own protected memory space. This section provides a brief overview of Junos OS routing-specific processes.
As an example, Table 1 describes the processes that run on MX Series 5G Universal Routing Platforms.
Process |
Name |
Description |
---|---|---|
Clksync process (RE) |
clksyncd |
Defines the operation of synchronous Ethernet and Precision Time Protocol (PTP) on a Juniper Networks MX Series router. The operation includes communication with the Packet Forwarding Engine (clock-sync module) to program and process clock events from the EEC clock. Operates the PTP stack, exchanges packets, and handles the configuration changes for the modular MX Series (MX80). Controls the configuration and monitoring of the overall operation of the PTP functionality for chassis-based MX Series platforms (MX240, MX480, and so on). |
Clock-sync process (PFE) |
clock-sync |
Programs and monitors the modular interface card (MIC), the CPLD, and the EEC clock. Peer of the clksyncd process module. Captures all PTP and Synchronous Ethernet statistics on the Packet Forwarding Engine and provides them to the Routing Engine. |
Interchassis communication process |
iccpd |
Exchanges proprietary Junos OS messages between two Juniper Networks MX Series routers that take part in a multichassis link aggregation group (LAG). |
Statistics agent process |
stats-agentd |
Acts as a relay process to collect interface statistics for all software development kit (SDK) applications. Interacts with the pfed process to collect the logical interface statistics for SDK applications. |
Table 2 lists other processes that are common across Junos OS routing platforms.
Process |
Name |
Description |
---|---|---|
Adaptive services process |
adaptive-services |
Manages the configuration for stateful firewall, Network Address Translation (NAT), intrusion detection service (IDS), and IP Security (IPsec) services on the Adaptive Services PIC. |
Alarm control process |
alarm-control |
Configures the system alarm. |
Access Node Control Protocol (ANCP) process |
ancpd-service |
Works with a special Internet Group Management Protocol (IGMP) session to collect outgoing interface mapping events in a scalable manner. |
Application identification process |
application-identification |
Identifies an application using intrusion detection and prevention (IDP) to allow or deny traffic based on applications running on standard or nonstandard ports. |
RADIUS accounting process |
audit-process |
Gathers statistical data that can be used for general network monitoring, analyzing, and tracking usage patterns, for billing a user based upon the amount of time or type of services accessed. |
Auto-configuration process |
auto-configuration |
Configures interfaces automatically. |
Boot process |
bootp |
Enables a router, switch, or interface to act as a Dynamic Host Configuration Protocol (DHCP) or bootstrap protocol (BOOTP) relay agent. DHCP relaying is disabled. |
Captive portal content delivery process |
captive-portal-content-delivery |
Specifies the location to which a subscriber's initial Internet browser session is redirected, enabling initial provisioning and service selection for the subscriber. |
Universal Edge Layer 2 Tunneling Protocol process |
ce-l2tp-service |
(M10, M10i, M7i, and MX Series routers only) Establishes L2TP tunnels and Point-to-Point Protocol (PPP) sessions through L2TP tunnels. |
Ethernet OAM connectivity fault management process |
cfm |
Monitors the physical link between two switches. |
Chassis control process |
chassis-control |
Manages the chassis. |
Class of service process |
class-of-service |
Controls the network device’sCoS configuration. |
Ethernet clock synchronization process |
clksyncd-service |
Uses Synchronous Ethernet (SyncE) for external clock synchronization . |
Craft interface I/O control process |
craft-control |
Controls the I/O of the craft interface. |
Database replication process |
database-replication |
(EX Series switches and MX Series routers only) Manages the replication of updates from the primary to the client in the database management system. |
Datapath trace process |
datapath-trace-service |
Traces the path taken by the packet through the network. |
Dynamic Host Configuration Protocol process |
dhcp-service |
(EX Series switches and MX Series routers only) Enables a DHCP server to allocate network IP addresses and deliver configuration settings to client hosts without user intervention. |
Diameter process |
diameter-service |
Implements the Diameter protocol which uses the Transmission Control Protocol (TCP) and Stream Control Transmission Protocol (SCTP) instead of User Datagram Protocol (UDP), for monitoring the network. |
Disk monitoring process |
disk-monitoring |
Checks the health of the hard drive on the Routing Engine. |
Dynamic flow capture (DFC) process |
dynamic-flow-capture |
Controls the DFC configurations on Monitoring Services III PICs. |
ECC parity errors logging process |
ecc-error-logging |
Logs the ECC parity errors into the memory on the Routing Engine. |
Connectivity fault management (CFM) process |
ethernet-connectivity-fault-management |
Provides IEEE 802.1ag OAM CFM database information for CFM maintenance association end points (MEPs) in a CFM session. |
Ethernet OAM Link-Fault-Management process |
ethernet-link-fault-management |
(EX Series switches and MX Series routers only) Provides the OAM link fault management (LFM) information for Ethernet interfaces. |
Event processing process |
event-processing or eventd |
Configures the application to handle all generated events. |
Firewall process |
firewall |
Manages the firewall configuration and enables accepting or rejecting packets that are transiting an interface on a device. |
General authentication process |
general-authentication-service |
(EX Series switches and MX Series routers only) Manages general authentication of a user. |
Inter-Chassis Communication Protocol (ICCP) process |
iccp-service |
Synchronizes data within a set of two (or more) PEs that form a redundancy group (RG). |
IDP policy process |
idp-policy |
Enables various attack detection and prevention techniques on traffic traversing the network. |
Integrated Local Management Interface process |
ilmi |
Provides bidirectional exchange of management information between two Asynchronous Transfer Mode (ATM) interfaces across a physical connection. |
Inet process |
inet-process |
Configures the IP multicast family. |
Init process |
init |
Initializes the USB modem. |
Interface control process |
interface-control |
Controls the router's or switch’s physical interface devices and logical interfaces. |
Kernel replication process |
kernel-replication |
Replicates the state of the backup Routing Engine when graceful Routing Engine switchover (GRES) is configured. |
Layer 2 address flooding and learning process |
l2-learning |
Enables a network device to:
|
Layer 2 Control Protocol process |
l2cpd-service |
Enables features such as Layer 2 protocol tunneling and nonstop bridging. |
Link Aggregation Control Protocol process |
lacp |
The process:
|
Link management process |
link-management |
Manages traffic engineering links. |
Local policy decision function process |
local-policy-decision-function |
Regulates the collection of statistics related to applications and application groups and tracking of information about dynamic subscribers and static interfaces. |
Logical system multiplexer process |
logical-system-mux or lrmuxd |
Manages multiple instances of the routing protocols process (rpd) on a machine running logical routers. |
MAC validation process |
mac-validation |
Configures MAC address validation that enables a network device to validate if received packets contain a trusted IP source and an Ethernet MAC source address. |
Management Information Base II process |
mib-process |
Provides the device's MIB II agent. |
Mobile IP process |
mobile-ip |
Configures Junos OS Mobile IP features. |
NFS mount requests process |
mountd-service |
(Some EX Series switches and MX Series routers only) Completes internal NFS mount requests for MS-PIC and MS-MPC. |
MPLS Periodic Traceroute process |
mpls-traceroute |
Enables tracing of forwarding equivalence classes (FECs) for LDP Layered Service Providers (LSPs). |
Multiservice process |
mspd |
Configures multiservice edge routers. |
Multicast Snooping process |
multicast-snooping |
(EX Series switches and MX Series routers only) Makes Layer 3 information, such as the MAC addresses of members of a multicast group, known to Layer 2 devices, such as VLAN switches. |
DNS server process |
named-service |
Enables a device to resolve hostnames into addresses. |
Bidirectional Forwarding Detection (BFD) process |
neighbor-liveness |
Displays the process that specifies the maximum length of time that the device waits for its neighbor to re-establish an LDP session. |
Remote NFS server process |
nfsd-service |
Provides remote file access for applications that need NFS-based transport. |
Network time process |
ntp |
Provides the mechanisms to synchronize time and coordinate time distribution in a large, diverse network. |
Packet-triggered dynamic subscribers and policy control (PTCP) process |
packet-triggered-subscribers |
Enables the application of policies to dynamic subscribers that are controlled by a subscriber termination device. |
Peer selection service process |
peer-selection-service |
Enables peer selection. |
Periodic packet management process |
periodic-packet-services |
Processes a variety of time-sensitive periodic tasks so that other processes can more optimally direct their resources. |
Packet Forwarding Engine process |
pfed |
Gathers and reports Packet Forwarding Engine statistics. |
Packet gateway service process |
pgcp-service or pgcpd |
Configures the Packet Gateway Control Protocol (PGCP) that is required for the border gateway function (BGF) feature. |
Pragmatic General Multicast process |
pgm |
Enables a reliable transport layer for multicast applications. |
PIC services logging process |
pic-services-logging or fsad (the file system access daemon) |
Enables PICs to send special logging information to the Routing Engine for archiving on the hard drive. |
Point-to-Point Protocol (PPP) process |
ppp |
Enables transporting IP traffic across point-to-point links. |
Universal edge PPP process |
ppp-service |
Enables transporting IP traffic across universal edge routers. |
Point-to-Point Protocol over Ethernet process |
pppoe |
Allows users to connect to a network of hosts over a bridge or access concentrator. |
Process health monitor process |
process-monitor or pmond |
Extends the SNMP RMON alarm infrastructure to provide predefined monitoring for a selected set of object instances (such as file system usage, CPU usage, and memory usage) and dynamic object instances (such as Junos OS processes). Note:
The process health monitor process is enabled by default
on the Routing Engines of MX Series routers, even when no service
interfaces are configured. To disable this process, include the |
Redundancy interface management process |
redundancy-interface-process |
Serves as an active or backup process of an application server and can be configured to process traffic for more than one logical application server. |
Remote operations process |
remote-operations |
Provides the ping and traceroute MIBs. |
Resource cleanup process |
resource-cleanup |
Enables cleaning of resources by entities other than the application itself. |
Routing process |
routing |
Directs forwarding on the basis of routing tables, which maintain a record of the routes to various network destinations. |
Traffic sampling control process |
sampling |
Performs packet sampling based on particular input interfaces and various fields in the packet header. |
Session Border Control (SBC) configuration process |
sbc-configuration-process |
Configures the session border controller functionality that enables delivery of voice, video, and other multimedia services with assured quality and security. |
SDK service process |
sdk-service |
Runs on the Routing Engine and enables communication between the SDK application and Junos OS. Although the SDK service process is present on the router, it is turned off by default. |
Secure Neighbor Discovery (SND) protocol process |
secure-neighbor-discovery or send |
(EX Series switches and MX Series routers only) Provides support for protecting NDP messages. |
Service Deployment System (SDX) process |
service-deployment |
Enables Junos OS to work with the Session and Resource Control (SRC) software. |
Simple Network Management Protocol (SNMP) process |
snmp |
Enables the monitoring of network devices from a central location, and provides the device’s SNMP primary agent. |
SONET Automatic Protection Switching (APS) process |
sonet-aps |
Monitors any SONET interface that participates in APS. |
Static subscribers process |
static-subscribers |
Associates subscribers with statically configured interfaces, and provides dynamic service activation and activation for these subscribers. |
Tunnel OAM process |
tunnel-oamd |
Enables the Operations, Administration, and Maintenance of Layer 2 tunneled networks. |
Virtual Router Redundancy Protocol (VRRP) process |
vrrp |
(EX Series switches and MX Series routers only) Enables hosts on a LAN to make use of redundant routing platforms on that LAN without requiring more than the static configuration of a single default route on the hosts. |
Watchdog timer process |
watchdog |
Enables the watchdog timer when Junos OS encounters a problem. |