Managing Services Router Software | Juniper Networks J-Series

Part 3

Managing Services Router Software

■Performing Software Upgrades and Reboots on page 179

■Managing Files on page 199

Managing Services Router Software ■ 177

Image 199

Juniper Networks J-Series manual Managing Services Router Software

Contents

North Mathilda Avenue Sunnyvale, California Administration Guide Series Services Router Administration Guide End User License Agreement IiiPage Abbreviated Table of Contents Series Services Router Administration Guide Table of Contents Management Information Base Using the telnet Command Using the ssh CommandModifying USB Modem Initialization Commands Viii Table of Contents Verifying Autoinstallation Status Configuring Autoinstallation with a Configuration EditorEvent Policy Overview Configuring Event Policies Part Monitoring a Services Router Part Managing Services Router Software Part Diagnosing Performance and Network Problems Xiii Part Index Objectives About This GuideObjectives Audience Series Tasks Location of Instruction How to Use This GuideXvi How to Use This Guide Location of J-series Information On page xvii defines the notice icons used in this guide Document ConventionsText and Syntax Conventions Web GUI Conventions Related Juniper Networks Documentation Getting Started Guide for Your Router Series Guides and Related Junos Software PublicationsRelated Juniper Networks Documentation Chapter in a J-series Guide Series Services Router Administration GuideXx Related Juniper Networks Documentation Requesting Technical Support Documentation FeedbackDocumentation Feedback Xxii Requesting Technical Support Opening a Case with Jtac Configuring a Services Router for Administration Configuring a Services Router for AdministrationPage User Authentication Terms Managing User Authentication and AccessSystem Management Terms User Accounts User Authentication OverviewUser Authentication User Authentication Overview Predefined Login Classes Login ClassesPermission Bits Permission Bits for Login Classes Template Accounts Denying or Allowing Individual Commands Before You Begin Managing User Authentication with Quick ConfigurationAdding a Radius Server for Authentication To configure a Radius server with Quick Configuration Radius Server Adding a TACACS+ Server for AuthenticationTo configure a TACACS+ server with Quick Configuration Users Quick Configuration for Radius Servers Summary TACACS+ Server Configuring System AuthenticationTo configure system authentication with Quick Configuration Users Quick Configuration for TACACS+ Servers Summary User Information To configure users with Quick ConfigurationAdd a User Quick Configuration Page Summary Adding New Users Setting Up Radius Authentication Managing User Authentication with a Configuration EditorManaging User Authentication with a Configuration Editor Setting Up Radius Authentication Setting Up TACACS+ Authentication Tacacssecret1 Setting Up TACACS+ Authentication172.16.98.24 Set tacplus-server address After password Configuring Authentication OrderConfiguring Authentication Order Insert system authentication-order radius EditEdit Configuration Controlling User AccessDefining Login Classes Defining Login Classes Creating User Accounts Operator-and-boot withOperator-and-boot Request system reboot Set user cmartin class superuser Setting Up Template AccountsConfigurationView Creating User Accounts Creating a Remote Template Account Creating a Remote Template Account Creating a Local Template Account Creating a Local Template Account Recovering the Root Password Recovering the Root Password Ok boot -s Securing the Console Port Securing the Console Port Using the telnet Command Accessing Remote Devices with the CLISecuring the Console Port CLI telnet Command Options Using the ssh CommandCLI ssh Command Options Configuring Password Retry Limits for Telnet and SSH Access Configuring Password Retry Limits for Telnet and SSH Access Set backoff-threshold Configuring Password Retry Limits for Telnet and SSH AccessConfigurationView and EditEdit Configuration Edit system login retry-optionsPage USB Modem Terms Setting Up USB Modems for Remote ManagementUSB Modem Terms USB Modem Interfaces USB Modem OverviewUSB Modem Terminology Modem Command Description S7=45 How a Services Router Initializes USB ModemsSeries Default Modem Initialization Commands Setting Up USB Modems for Remote Management At the User End USB Modem Connection and Configuration OverviewUSB Modem Connection and Configuration Overview On the Services Router Configuring a USB Modem Interface Required Connecting the USB Modem to the Services Routers USB PortTo configure a USB modem interface for the Services Router S0=0 V1 X4 &C1 E0 Q0 &Q8 %C0 Configuring a USB Modem InterfaceConfigurationView EditEdit Configuration Edit interfaces umd0 Adding a Dialer Interface to a Services Router Configuring a Dialer Interface Required 172.20.10.1 Configuring Dial-In RequiredEdit unit 172.20.10.2 To configure Chap on the dialer interface Configuring Chap on Dialer Interfaces OptionalConfiguring the Dialer Interface for Dial-In Edit interfaces dl0 unit Configuring Chap on Dialer InterfacesPpp-options chap hierarchy level Web Configuration Editor Edit access USB-modem-connect-and then click Next Connecting to the Services Router from the User EndConfiguring a Dial-Up Modem Connection at the User End Connecting to the Services Router from the User End Administering USB Modems Connecting to the Services Router from the User EndAdministering USB Modems Advanced TCP/IP Settings page appears Modifying USB Modem Initialization Commands Modifying USB Modem Initialization Commands Configure Resetting USB ModemsVerifying the USB Modem Configuration Modifying USB Modem Initialization Commands Verifying a USB Modem Interface Verifying a USB Modem Interface Verifying Dialer Interface Configuration Verifying Dialer Interface Configuration Setting Up USB Modems for Remote Management Series Services Router Administration Guide Snmp Architecture Configuring Snmp for Network ManagementSnmp Architecture Snmp Communities Management Information Base Snmp Health Monitor Configuring Snmp for Network ManagementSnmp Traps Spoofing Snmp Traps To configure Snmp features with Quick Configuration Configuring Snmp with Quick Configuration Traps Snmp Quick Configuration SummaryIdentification Communities Health Monitoring Checks the following key indicators Configuring Basic System Identification Configuring Snmp with a Configuration EditorDefining System Identification Information Required Select Engine id Configuring Snmp Agents and Communities RequiredSet description Set name name Managing Snmp Trap Groups Required Configuring Snmp Agents and Communities Click Categories Controlling Access to MIBs OptionalConfiguring Snmp Trap Groups Select the Authentication , Chassis , Verifying Snmp Agent Configuration Verifying the Snmp ConfigurationConfiguring Snmp Views Verifying Snmp Health Monitor Configuration Verifying Snmp Health Monitor Configuration Series Services Router Administration Guide Configuring Snmp for Network Management Page Dhcp Terms Configuring the Router as a Dhcp ServerDhcp Terms Dhcp Terms Dhcp Overview Dhcp Options Compatibility with AutoinstallationConflict Detection and Resolution Configuring the Router as a Dhcp Server Configuring the Dhcp Server with Quick Configuration Configuring the Dhcp Server with Quick Configuration Dhcp Quick Configuration Main Dhcp Quick Configuration Pool Dhcp Quick Configuration Static Binding To configure the Dhcp server with Quick Configuration Server Information Dhcp Server Quick Configuration Pages SummaryDhcp Pool Information Lease Time Dhcp Static Binding Information Boot Options Dhcp Subnet Configuration Configuring the Dhcp Server with a Configuration EditorSample Dhcp Server Configuration Settings Settings Sample Value or Values Dhcp MAC Address Configuration Entry Configuring the Dhcp Server Displaying a Dhcp Server Configuration Verifying a Dhcp Server ConfigurationIp address Verifying the Dhcp Binding Database Verifying the Dhcp Binding Database Verifying Dhcp Server Operation Verifying Dhcp Server Operation User@host ping Displaying Dhcp Statistics Displaying Dhcp StatisticsPage Autoinstallation Configuring AutoinstallationAutoinstallation Terms Autoinstallation Terms Supported Autoinstallation Interfaces and Protocols Autoinstallation OverviewHost-specific configuration Configuring Autoinstallation Typical Autoinstallation Process on a New Services Router Before You Begin Configuring Autoinstallation with a Configuration Editor Configuring Autoinstallation with a Configuration Editor ConfigurationView and Edit Edit Configuration Verifying AutoinstallationVerifying Autoinstallation Status Configuring Autoinstallation Verifying Autoinstallation Status Page Commit Script Overview Automating Network Operations and Troubleshooting Var/db/scripts/commit directory Enabling Commit Scripts Disabling Commit Scripts Commit the configurationEnabling Commit Scripts Operation Script Overview Enabling Operation Scripts Enabling Operation ScriptsExecuting Operation Scripts Var/db/scripts/op directory Running Self-Diagnostics with Event Policies Running Self-Diagnostics with Event PoliciesDisabling Operation Scripts Event Policy Overview Configuring Event Policies Configuring Event Policy Configuring Event PoliciesConfiguring Destination for Uploading Files for Analysis Configure or Edit Set then Set raise-trap Edit then execute-commandsSet output-filename config.txt output-format text Execute the show interfacesPage Monitoring a Services Router Monitoring a Services RouterPage Series Monitoring Terms Monitoring the Router and Routing OperationsMonitoring Terms Monitoring Overview Chassis Monitoring Tools OverviewMonitor Option Function System Routing Web Monitor Options and Corresponding CLI show CommandsCoS Rsvp Sessions-show rsvp session Corresponding CLI Commands Interfaces-show mpls interfaceShow services nat pool IPSec Show services rpm probe-results Filtering Command OutputPPPoE User@host show configuration match address Summary of Key System Properties Output Fields Using the Monitoring ToolsMonitoring System Properties Show system uptime Show system users Show system storage Users Set system hostname commandName-server command Set system time-zone command CPU Usage System Storage Show system processes commandsMonitoring System Process Information Summary of System Process Information Output Fields Monitoring the Chassis Alarm SummarySummary of Key Chassis Output Fields Absent Field ValuesEnvironment Information Failed FPC Summary Monitoring the Interfaces Interface Summary Summary of Key Interfaces Output FieldsDown MTU Monitoring Routing Information Show route terse Show route detail Monitoring Route InformationSummary of Key Routing Information Output Fields BGP Summary Monitoring BGP Routing InformationShow bgp summary Show bgp neighbor Summary of Key BGP Routing Output Fields BGP Neighbors Down to Up Ospf Interfaces Monitoring Ospf Routing InformationSummary of Key Ospf Routing Output Fields Ospf Neighbors Ospf Statistics Monitoring RIP Routing InformationShow rip statistics Show rip neighbors Summary of Key RIP Routing Output Fields DLSw Capabilities Monitoring DLSw Routing InformationSummary of Key DLSw Routing Information Output Fields RIP Neighbors DLSw Peers DLSw Circuits Monitoring CoS Interfaces Monitoring Class-of-Service PerformanceShow class-of-service Show class-of-service interface interface Summary of Key CoS Classifier Output Fields Show class-of-service classifierMonitoring CoS Classifiers Summary of Key CoS Interfaces Output Fields Monitoring CoS Value Aliases Show class-of-service code-point-aliases Summary of Key CoS RED Drop Profile Output Fields Show class-of-service drop-profileMonitoring CoS RED Drop Profiles Summary of Key CoS Value Alias Output Fields Monitoring CoS Forwarding Classes Show class-of-service forwarding-class Summary of Key CoS Rewrite Rules Output Fields Show class-of-service rewrite-rulesMonitoring CoS Rewrite Rules Summary of Key CoS Forwarding Class Output Fields Monitoring CoS Scheduler Maps Show class-of-service scheduler-mapSummary of Key CoS Scheduler Maps Output Fields Monitoring Mpls Traffic Engineering Information Show mpls lsp Monitoring Mpls InterfacesMonitoring Mpls LSP Information Show mpls interface Show mpls lsp statistics Monitoring Mpls LSP StatisticsTransit Summary of Key Mpls LSP Statistics Output Fields Monitoring Rsvp Session InformationShow rsvp session Summary of Key Rsvp Session Information Output Fields Show rsvp interface Monitoring Mpls Rsvp Interfaces InformationSummary of Key Rsvp Interfaces Information Output Fields Static bandwidth X subscription factor Monitoring Service Sets Service Set Summary Summary of Key Service Set Output FieldsMonitoring Firewalls Summary of Key Stateful Firewall Statistics Output Fields Monitoring Stateful Firewall Statistics Summary of Key Stateful Firewall Filters Output Fields Monitoring Stateful Firewall FiltersBytes IDS Search-Narrowing Characteristics Monitoring Firewall Intrusion Detection Services IDSNarrow Search Box Entry or Selection Summary of Key IPSec Output Fields Monitoring IPSec TunnelsOn page 140 summarizes key output fields in IPSec displays Summary of Key Firewall IDS Output Fields IPSec Statistics AH+ESPIKE Security Hmac-sha1 Monitoring NAT Pools Summary of Key NAT Output Fields Show services nat poolMonitoring Dhcp On page 143 summarizes key output fields in NAT displays Dhcp Statistics Dhcp Conflicts Summary of Key RPM Output Fields Show services rpm probe-resultsMonitoring RPM Probes On page 145 summarizes key output fields in RPM displays Round-Trip Time for a Probe RTT Cumulative Jitter for a Probe Monitoring PPP Summary of Key PPPoE Output Fields Monitoring PPPoEPPPoE Interfaces PPPoE Statistics PPPoE Version Monitoring the TGM550 Media Gateway VoIP Dynamic Call Admission Control Information Summary of Key Media Gateway Information Output FieldsTelephony Gateway Module Information DSP Page System Log Message Terms Monitoring Events and Managing System Log FilesSystem Log Message Terms System Log Messages Overview System Log Facilities and Severity Levels System Log Message DestinationsSystem Logging Facilities System Logging Severity Levels Regular Expressions Regular Expression Operator Matching Terms Common Regular Expression Operators and the Terms They Match Edit system syslog Configuring System Log Messages with a Configuration EditorSending System Log Messages to a File Sending System Log Messages to a File Set user frank any critical Sending System Log Messages to a User TerminalArchiving System Logs Sending Messages to a User Terminal Filtering System Log Messages Disabling System LogsMonitoring System Log Messages with the J-Web Event Viewer Filtering System Log Messages Installation and Upgrade Guide CLI command-show system processes Viewing System Log Messages Viewing System Log Messages Alarm Terms Configuring and Monitoring Alarms Interface alarm Alarm OverviewAlarm Types Alarm Terms Configuring and Monitoring Alarms Alarm SeverityAlarm Conditions Interface Alarm Conditions Interface Alarm Conditions Linkdown Pic-hold-resetPic-reset Hw-down Chassis Alarm Conditions and Corrective Actions Component Alarm Conditions Chassis Alarm Conditions and Corrective ActionsCorrective Action Alarm Severity Alarm Type Alarm Condition Corrective Action Configuring Alarms with a Configuration EditorSystem Alarm Conditions and Corrective Actions System Alarm Conditions and Corrective Actions Configuring Interface Alarms Summary of Key Alarm Output Fields Checking Active AlarmsShow chassis alarms Show system alarms On page 174 summarizes the output fields on the alarms Edit User@host# show chassis alarms t3 Verifying the Alarms ConfigurationDisplaying Alarm Configurations To verify alarms configuration, perform the following task Displaying Alarm Configurations Managing Services Router Software Managing Services Router SoftwarePage Upgrade and Downgrade Overview Performing Software Upgrades and RebootsUpgrade and Downgrade Overview Recovery Software Packages Upgrade Software Packages Secondary Storage Devices for Backup Downloading Software Upgrades from Juniper NetworksPerforming Software Upgrades and Reboots Installing Software Upgrades from a Remote Server Installing Software Upgrades with the J-Web InterfaceInstalling Software Upgrades with the J-Web Interface Install Remote Summary Installing Software Upgrades by Uploading FilesUpload Package Summary Var/tmp/junos-j-series8.5R2.1.tar.gz Installing Software Upgrades with the CLIInstalling Software Upgrades with the CLI User@host request system software add unlink no-copy source Downgrading the Software Downgrading the SoftwareDowngrading the Software with the J-Web Interface Downgrading the Software with the CLI User@host request system software rollback Configuring Boot DevicesUser@host request system reboot Configuring Boot Devices Snapshot Summary Click OK Partitions the boot medium CLI request system snapshot Command Options Configuring a Boot Device for Backup with the CLI Root-size size Option Description PartitionSwap-size size Why Compact Flash Recovery Might Be Necessary Recovering Primary Boot DevicesCLI set system dump-device Command Options Recovery Hardware Recommended Recovery Hardware and SoftwareConfiguring Internal Compact Flash Recovery Recommended Recovery Hardware and Software \ physdiskwrite -u junos-jseries-7.0-20041028.0-export-cf512 Rebooting or Halting a Services Router Rebooting or Halting a Services Router CLI Request System Reboot Command Options Rebooting a Services Router with the CLIOption Description CLI Request System Halt Command Options Halting a Services Router with the CLI This option is a synonym for the at + minutes option Page Managing Files Cleaning Up FilesManaging Files with the J-Web Interface Managing Files with the J-Web Interface Downloading Files Managing Files Deleting the Backup Software ImageCleaning Up Files with the CLI Deleting the Backup Software Image Managing Accounting Files Managing Accounting Files Encrypting and Decrypting Configuration Files Encrypting and Decrypting Configuration FilesGz.jc-for example, juniper.conf.gz.jc For example Encrypting Configuration FilesRequest system set-encryption-key Commands CLI Command Description Modifying the Encryption Key Decrypting Configuration FilesTo begin the encryption process, commit the configuration To begin the decryption process, commit the configuration At the second prompt, reenter the new encryption key Diagnosing Performance and Network Problems Diagnosing Performance and Network ProblemsPage Diagnostic Terms Using Services Router Diagnostic ToolsSeries Diagnostic Terms Web Diagnostic Tools Overview Diagnostic Tools OverviewWeb Interface Diagnose and Manage Options Manage Options CLI Diagnostic Commands Overview Diagnosis and Troubleshooting CLI Diagnostic Command Summary Quit Command Function StartMpls Connection Checking Options for Checking Mpls Connections Interface name Instance to which this Locate LSP usingPing LSP to Layer Ping mpls l3vpn VPN prefix Loopback Address Mpls EnabledGeneral Preparation Ping Mpls Preparation Pinging Hosts from the J-Web Interface Using the J-Web Ping Host ToolPinging Hosts from the J-Web Interface Web Ping Host Field Summary Ping Host Results Icmpseq=0 Icmpseq=number Ping Host Results and Output SummaryWeb Ping Host Results and Output Summary Ping Host Result Checking Mpls Connections from the J-Web Interface Using the J-Web Ping Mpls ToolChecking Mpls Connections from the J-Web Interface Ping LSP to Layer 3 VPN prefix Ping LDP-signaled LSPLocate LSP using interface name Web Ping Mpls Field Summary Ping end point of LSP Instance to which this connection belongsLocate LSP from interface name Locate LSP from virtual circuit information Time Ping Mpls Results and OutputWeb Ping Mpls Results and Output Summary Field Description Tracing Unicast Routes from the J-Web Interface Using the J-Web Traceroute ToolTracing Unicast Routes from the J-Web Interface To use the traceroute tool Traceroute Field Summary Traceroute Web Traceroute Results and Output Summary Traceroute Results and Output Summary Capturing and Viewing Packets with the J-Web Interface Using J-Web Packet CaptureCapturing and Viewing Packets with the J-Web Interface To use J-Web packet capture Ge-0/0/0 Packet Capture Field SummaryAdvanced Options Addresses Into hostnames in the packet headers displayed Web Packet Capture Results and Output Summary Packet Capture Results and Output Summary Pinging Hosts from the CLI Using CLI Diagnostic CommandsTo quit the ping command, press Ctrl-C CLI ping Command Options Do-not-fragment Checking Mpls Connections from the CLI Following is sample output from a ping command Following is sample output from a ping mpls command Pinging RSVP-Signaled LSPs and LDP-Signaled LSPs CLI ping mpls l3vpn Command Options Following is sample output from a ping mpls l3vpn commandPinging Layer 3 VPNs CLI ping mpls l2vpn Command Options Following is sample output from a ping mpls l2vpn commandPinging Layer 2 VPNs Pinging Layer 2 Circuits CLI ping mpls l2circuit Command Options Tracing Unicast Routes from the CLI Using the traceroute CommandTo quit the traceroute command, press Ctrl-C CLI traceroute Command Options Inet6 Using the traceroute monitor CommandFollowing is sample output from a traceroute command Gateway address CLI traceroute monitor Command Options To quit the traceroute monitor command, press QOn page 240 summarizes the output fields of the display Tracing Multicast Routes from the CLI CLI traceroute monitor Command Output Summary Using the mtrace from-source Command On page 243 summarizes the output fields of the display CLI mtrace from-source Command Options CLI mtrace from-source Command Output Summary Using the mtrace monitor Command Displaying Log and Trace Files from the CLI CLI mtrace monitor Command Output Summary CLI monitor interface traffic Output Control Keys Using the monitor interface CommandMonitoring Interfaces and Traffic from the CLI CLI monitor interface Output Control Keys User@host monitor interface fe-0/0/0 Using the monitor traffic Command CLI monitor traffic Command Options Match Condition Description CLI monitor traffic Match ConditionsOption Description Brief Extensive Directional Relational Operator CLI monitor traffic Logical OperatorsArithmetic Operator Binary Operator Following is sample output from the monitor traffic command Page Packet Capture Terms Configuring Packet CapturePacket Capture Terms Packet Capture Terms Packet Capture Overview Packet Capture on Router Interfaces Configuring Packet CaptureFirewall Filters for Packet Capture Analysis of Packet Capture Files Packet Capture Files Enabling Packet Capture Required Configuring Packet Capture with a Configuration Editor Navigate to the Forwarding options Enabling Packet Capture 259 Configuring Packet Capture on an Interface RequiredConfiguring a Firewall Filter for Packet Capture Optional Configuring Packet Capture on an Interface Edit firewall Configuring a Firewall Filter for Packet Capture192.168.1.1/32 261 Enter set packet-capture disableDisabling Packet Capture Deleting Packet Capture Files Rm pcap-file.fe.0.0.0 Return to the CLI operational modeUser@host start shell Cd /var/tmp Verifying Packet Capture Displaying a Packet Capture ConfigurationVerifying Packet Capture Mv pcap-file.fe.0.0.0 pcap-file.fe.0.0.0.chdsl Verifying Captured Packets Verifying Captured Packets Return to the CLI configuration modeFtp lcd /var/tmp Local directory now /cf/var/tmp Ftp bye Goodbye Edit User@host# Meaning Verify that the output shows the intended packets RPM Terms Configuring RPM Probes RPM test RPM OverviewRPM Probes RPM target Jitter Measurement with Hardware Timestamping Configuring RPM ProbesRPM Tests Probe and Test Intervals Inbound and Outbound Times Icmp Timestamp Probes Only RPM StatisticsRPM Statistics Round-Trip Times RPM Thresholds and Traps Configuring RPM with Quick ConfigurationRPM for BGP Monitoring Configuring RPM with Quick Configuration RPM Quick Configuration SummaryPerformance Probe Owners Router Advanced WAN Access Configuration Guide Maximum Probe Thresholds Generates Snmp traps when the threshold for standard Performance Probe Server Configuring RPM with a Configuration EditorConfiguring Basic RPM Probes Configuring RPM with a Configuration Editor Set probe customerA Configuring Basic RPM ProbesEdit services rpm Click Configure Set test icmp-test probe-type icmp-ping-timestamp Edit services rpm probe customerA192.178.16.5 Set test icmp-test probe-frequency Configuring TCP and UDP Probes Router a Configuration Configuring TCP and UDP Probes Router B Configuration Set probe-limit Tuning RPM ProbesTuning RPM Probes CustomerA Configuring RPM Probes for BGP Monitoring Configuring RPM Probes to Monitor BGP Neighbors Configuring RPM Probes to Monitor BGP Neighbors Add new entry Verifying an RPM ConfigurationDirecting RPM Probes to Select BGP Routers Directing RPM Probes to Select BGP Routers Verifying RPM Services Verifying RPM ServicesVerifying RPM Statistics Verifying RPM Statistics Verifying RPM Probe Servers Verifying RPM Probe Servers Index on IndexIndex Series Services Router Administration Guide Index Symbols 112 Chassis Dd utility, for compact flash recovery 192 Snmp health monitor System logs Dhcp Snmp Junos Internet software Diagnosing problems from 210 Monitoring from 102 See also Snmp Permissions Radius CLI See also RPM probes Preparation Serial number Chassis components BGP TACACS+ Routing Engine, too warm Upgrades Version Hardware, displaying