Index on | Juniper Networks J-Series instruction

Part 5

Index

■ Index on page 291

Index ■ 289

Image 311

Juniper Networks J-Series manual Index on

Contents

North Mathilda Avenue Sunnyvale, California Administration Guide Series Services Router Administration Guide End User License Agreement IiiPage Abbreviated Table of Contents Series Services Router Administration Guide Table of Contents Management Information Base Using the telnet Command Using the ssh CommandModifying USB Modem Initialization Commands Viii Table of Contents Event Policy Overview Configuring Event Policies Configuring Autoinstallation with a Configuration EditorVerifying Autoinstallation Status Part Monitoring a Services Router Part Managing Services Router Software Part Diagnosing Performance and Network Problems Xiii Part Index Objectives About This GuideObjectives Audience Series Tasks Location of Instruction How to Use This GuideXvi How to Use This Guide Location of J-series Information Text and Syntax Conventions Document ConventionsOn page xvii defines the notice icons used in this guide Web GUI Conventions Related Juniper Networks Documentation Related Juniper Networks Documentation Series Guides and Related Junos Software PublicationsGetting Started Guide for Your Router Xx Related Juniper Networks Documentation Series Services Router Administration GuideChapter in a J-series Guide Documentation Feedback Documentation FeedbackRequesting Technical Support Xxii Requesting Technical Support Opening a Case with Jtac Configuring a Services Router for Administration Configuring a Services Router for AdministrationPage System Management Terms Managing User Authentication and AccessUser Authentication Terms User Accounts User Authentication OverviewUser Authentication User Authentication Overview Permission Bits Login ClassesPredefined Login Classes Permission Bits for Login Classes Template Accounts Denying or Allowing Individual Commands Before You Begin Managing User Authentication with Quick ConfigurationAdding a Radius Server for Authentication To configure a Radius server with Quick Configuration Radius Server Adding a TACACS+ Server for AuthenticationTo configure a TACACS+ server with Quick Configuration Users Quick Configuration for Radius Servers Summary TACACS+ Server Configuring System AuthenticationTo configure system authentication with Quick Configuration Users Quick Configuration for TACACS+ Servers Summary User Information To configure users with Quick ConfigurationAdd a User Quick Configuration Page Summary Adding New Users Managing User Authentication with a Configuration Editor Managing User Authentication with a Configuration EditorSetting Up Radius Authentication Setting Up Radius Authentication Setting Up TACACS+ Authentication Tacacssecret1 Setting Up TACACS+ Authentication172.16.98.24 Set tacplus-server address After password Configuring Authentication OrderConfiguring Authentication Order Insert system authentication-order radius EditEdit Configuration Controlling User AccessDefining Login Classes Defining Login Classes Creating User Accounts Operator-and-boot withOperator-and-boot Request system reboot Set user cmartin class superuser Setting Up Template AccountsConfigurationView Creating User Accounts Creating a Remote Template Account Creating a Remote Template Account Creating a Local Template Account Creating a Local Template Account Recovering the Root Password Recovering the Root Password Ok boot -s Securing the Console Port Securing the Console Port Securing the Console Port Accessing Remote Devices with the CLIUsing the telnet Command CLI ssh Command Options Using the ssh CommandCLI telnet Command Options Configuring Password Retry Limits for Telnet and SSH Access Configuring Password Retry Limits for Telnet and SSH Access Set backoff-threshold Configuring Password Retry Limits for Telnet and SSH AccessConfigurationView and EditEdit Configuration Edit system login retry-optionsPage USB Modem Terms Setting Up USB Modems for Remote ManagementUSB Modem Terms USB Modem Terminology USB Modem OverviewUSB Modem Interfaces Modem Command Description S7=45 How a Services Router Initializes USB ModemsSeries Default Modem Initialization Commands Setting Up USB Modems for Remote Management At the User End USB Modem Connection and Configuration OverviewUSB Modem Connection and Configuration Overview On the Services Router To configure a USB modem interface for the Services Router Connecting the USB Modem to the Services Routers USB PortConfiguring a USB Modem Interface Required S0=0 V1 X4 &C1 E0 Q0 &Q8 %C0 Configuring a USB Modem InterfaceConfigurationView EditEdit Configuration Edit interfaces umd0 Adding a Dialer Interface to a Services Router Configuring a Dialer Interface Required 172.20.10.1 Configuring Dial-In RequiredEdit unit 172.20.10.2 Configuring the Dialer Interface for Dial-In Configuring Chap on Dialer Interfaces OptionalTo configure Chap on the dialer interface Edit interfaces dl0 unit Configuring Chap on Dialer InterfacesPpp-options chap hierarchy level Web Configuration Editor Edit access USB-modem-connect-and then click Next Connecting to the Services Router from the User EndConfiguring a Dial-Up Modem Connection at the User End Connecting to the Services Router from the User End Administering USB Modems Connecting to the Services Router from the User EndAdministering USB Modems Advanced TCP/IP Settings page appears Modifying USB Modem Initialization Commands Modifying USB Modem Initialization Commands Configure Resetting USB ModemsVerifying the USB Modem Configuration Modifying USB Modem Initialization Commands Verifying a USB Modem Interface Verifying a USB Modem Interface Verifying Dialer Interface Configuration Verifying Dialer Interface Configuration Setting Up USB Modems for Remote Management Series Services Router Administration Guide Snmp Architecture Configuring Snmp for Network ManagementSnmp Architecture Snmp Communities Management Information Base Snmp Health Monitor Configuring Snmp for Network ManagementSnmp Traps Spoofing Snmp Traps To configure Snmp features with Quick Configuration Configuring Snmp with Quick Configuration Traps Snmp Quick Configuration SummaryIdentification Communities Health Monitoring Checks the following key indicators Defining System Identification Information Required Configuring Snmp with a Configuration EditorConfiguring Basic System Identification Select Engine id Configuring Snmp Agents and Communities RequiredSet description Set name name Managing Snmp Trap Groups Required Configuring Snmp Agents and Communities Click Categories Controlling Access to MIBs OptionalConfiguring Snmp Trap Groups Select the Authentication , Chassis , Configuring Snmp Views Verifying the Snmp ConfigurationVerifying Snmp Agent Configuration Verifying Snmp Health Monitor Configuration Verifying Snmp Health Monitor Configuration Series Services Router Administration Guide Configuring Snmp for Network Management Page Dhcp Terms Configuring the Router as a Dhcp ServerDhcp Terms Dhcp Terms Dhcp Overview Dhcp Options Compatibility with AutoinstallationConflict Detection and Resolution Configuring the Router as a Dhcp Server Configuring the Dhcp Server with Quick Configuration Configuring the Dhcp Server with Quick Configuration Dhcp Quick Configuration Main Dhcp Quick Configuration Pool Dhcp Quick Configuration Static Binding To configure the Dhcp server with Quick Configuration Server Information Dhcp Server Quick Configuration Pages SummaryDhcp Pool Information Lease Time Dhcp Static Binding Information Boot Options Dhcp Subnet Configuration Configuring the Dhcp Server with a Configuration EditorSample Dhcp Server Configuration Settings Settings Sample Value or Values Dhcp MAC Address Configuration Entry Configuring the Dhcp Server Ip address Verifying a Dhcp Server ConfigurationDisplaying a Dhcp Server Configuration Verifying the Dhcp Binding Database Verifying the Dhcp Binding Database Verifying Dhcp Server Operation Verifying Dhcp Server Operation User@host ping Displaying Dhcp Statistics Displaying Dhcp StatisticsPage Autoinstallation Configuring AutoinstallationAutoinstallation Terms Autoinstallation Terms Host-specific configuration Autoinstallation OverviewSupported Autoinstallation Interfaces and Protocols Configuring Autoinstallation Typical Autoinstallation Process on a New Services Router Before You Begin Configuring Autoinstallation with a Configuration Editor Configuring Autoinstallation with a Configuration Editor ConfigurationView and Edit Edit Configuration Verifying AutoinstallationVerifying Autoinstallation Status Configuring Autoinstallation Verifying Autoinstallation Status Page Commit Script Overview Automating Network Operations and Troubleshooting Var/db/scripts/commit directory Enabling Commit Scripts Enabling Commit Scripts Commit the configurationDisabling Commit Scripts Operation Script Overview Enabling Operation Scripts Enabling Operation ScriptsExecuting Operation Scripts Var/db/scripts/op directory Disabling Operation Scripts Running Self-Diagnostics with Event PoliciesRunning Self-Diagnostics with Event Policies Event Policy Overview Configuring Event Policies Configuring Event Policy Configuring Event PoliciesConfiguring Destination for Uploading Files for Analysis Configure or Edit Set then Set raise-trap Edit then execute-commandsSet output-filename config.txt output-format text Execute the show interfacesPage Monitoring a Services Router Monitoring a Services RouterPage Series Monitoring Terms Monitoring the Router and Routing OperationsMonitoring Terms Monitoring Overview Chassis Monitoring Tools OverviewMonitor Option Function System CoS Web Monitor Options and Corresponding CLI show CommandsRouting Rsvp Sessions-show rsvp session Corresponding CLI Commands Interfaces-show mpls interfaceShow services nat pool IPSec PPPoE Filtering Command OutputShow services rpm probe-results User@host show configuration match address Summary of Key System Properties Output Fields Using the Monitoring ToolsMonitoring System Properties Show system uptime Show system users Show system storage Users Set system hostname commandName-server command Set system time-zone command CPU Usage System Storage Show system processes commandsMonitoring System Process Information Summary of System Process Information Output Fields Summary of Key Chassis Output Fields Alarm SummaryMonitoring the Chassis Absent Field ValuesEnvironment Information Failed FPC Summary Monitoring the Interfaces Down Summary of Key Interfaces Output FieldsInterface Summary MTU Monitoring Routing Information Summary of Key Routing Information Output Fields Monitoring Route InformationShow route terse Show route detail BGP Summary Monitoring BGP Routing InformationShow bgp summary Show bgp neighbor Summary of Key BGP Routing Output Fields BGP Neighbors Down to Up Ospf Interfaces Monitoring Ospf Routing InformationSummary of Key Ospf Routing Output Fields Ospf Neighbors Ospf Statistics Monitoring RIP Routing InformationShow rip statistics Show rip neighbors Summary of Key RIP Routing Output Fields DLSw Capabilities Monitoring DLSw Routing InformationSummary of Key DLSw Routing Information Output Fields RIP Neighbors DLSw Peers DLSw Circuits Monitoring CoS Interfaces Monitoring Class-of-Service PerformanceShow class-of-service Show class-of-service interface interface Summary of Key CoS Classifier Output Fields Show class-of-service classifierMonitoring CoS Classifiers Summary of Key CoS Interfaces Output Fields Monitoring CoS Value Aliases Show class-of-service code-point-aliases Summary of Key CoS RED Drop Profile Output Fields Show class-of-service drop-profileMonitoring CoS RED Drop Profiles Summary of Key CoS Value Alias Output Fields Monitoring CoS Forwarding Classes Show class-of-service forwarding-class Summary of Key CoS Rewrite Rules Output Fields Show class-of-service rewrite-rulesMonitoring CoS Rewrite Rules Summary of Key CoS Forwarding Class Output Fields Summary of Key CoS Scheduler Maps Output Fields Show class-of-service scheduler-mapMonitoring CoS Scheduler Maps Monitoring Mpls Traffic Engineering Information Show mpls lsp Monitoring Mpls InterfacesMonitoring Mpls LSP Information Show mpls interface Transit Monitoring Mpls LSP StatisticsShow mpls lsp statistics Summary of Key Mpls LSP Statistics Output Fields Monitoring Rsvp Session InformationShow rsvp session Summary of Key Rsvp Session Information Output Fields Summary of Key Rsvp Interfaces Information Output Fields Monitoring Mpls Rsvp Interfaces InformationShow rsvp interface Static bandwidth X subscription factor Monitoring Service Sets Monitoring Firewalls Summary of Key Service Set Output FieldsService Set Summary Summary of Key Stateful Firewall Statistics Output Fields Monitoring Stateful Firewall Statistics Bytes Monitoring Stateful Firewall FiltersSummary of Key Stateful Firewall Filters Output Fields Narrow Search Box Entry or Selection Monitoring Firewall Intrusion Detection Services IDSIDS Search-Narrowing Characteristics Summary of Key IPSec Output Fields Monitoring IPSec TunnelsOn page 140 summarizes key output fields in IPSec displays Summary of Key Firewall IDS Output Fields IKE Security AH+ESPIPSec Statistics Hmac-sha1 Monitoring NAT Pools Summary of Key NAT Output Fields Show services nat poolMonitoring Dhcp On page 143 summarizes key output fields in NAT displays Dhcp Statistics Dhcp Conflicts Summary of Key RPM Output Fields Show services rpm probe-resultsMonitoring RPM Probes On page 145 summarizes key output fields in RPM displays Round-Trip Time for a Probe RTT Cumulative Jitter for a Probe Monitoring PPP PPPoE Interfaces Monitoring PPPoESummary of Key PPPoE Output Fields PPPoE Statistics PPPoE Version Monitoring the TGM550 Media Gateway VoIP Telephony Gateway Module Information Summary of Key Media Gateway Information Output FieldsDynamic Call Admission Control Information DSP Page System Log Message Terms Monitoring Events and Managing System Log FilesSystem Log Message Terms System Log Messages Overview System Logging Facilities System Log Message DestinationsSystem Log Facilities and Severity Levels System Logging Severity Levels Regular Expressions Regular Expression Operator Matching Terms Common Regular Expression Operators and the Terms They Match Edit system syslog Configuring System Log Messages with a Configuration EditorSending System Log Messages to a File Sending System Log Messages to a File Set user frank any critical Sending System Log Messages to a User TerminalArchiving System Logs Sending Messages to a User Terminal Filtering System Log Messages Disabling System LogsMonitoring System Log Messages with the J-Web Event Viewer Filtering System Log Messages Installation and Upgrade Guide CLI command-show system processes Viewing System Log Messages Viewing System Log Messages Alarm Terms Configuring and Monitoring Alarms Interface alarm Alarm OverviewAlarm Types Alarm Terms Configuring and Monitoring Alarms Alarm SeverityAlarm Conditions Interface Alarm Conditions Interface Alarm Conditions Linkdown Pic-hold-resetPic-reset Hw-down Chassis Alarm Conditions and Corrective Actions Corrective Action Alarm Severity Chassis Alarm Conditions and Corrective ActionsComponent Alarm Conditions Alarm Type Alarm Condition Corrective Action Configuring Alarms with a Configuration EditorSystem Alarm Conditions and Corrective Actions System Alarm Conditions and Corrective Actions Configuring Interface Alarms Summary of Key Alarm Output Fields Checking Active AlarmsShow chassis alarms Show system alarms On page 174 summarizes the output fields on the alarms Edit User@host# show chassis alarms t3 Verifying the Alarms ConfigurationDisplaying Alarm Configurations To verify alarms configuration, perform the following task Displaying Alarm Configurations Managing Services Router Software Managing Services Router SoftwarePage Upgrade and Downgrade Overview Performing Software Upgrades and RebootsUpgrade and Downgrade Overview Recovery Software Packages Upgrade Software Packages Performing Software Upgrades and Reboots Downloading Software Upgrades from Juniper NetworksSecondary Storage Devices for Backup Installing Software Upgrades with the J-Web Interface Installing Software Upgrades with the J-Web InterfaceInstalling Software Upgrades from a Remote Server Upload Package Summary Installing Software Upgrades by Uploading FilesInstall Remote Summary Var/tmp/junos-j-series8.5R2.1.tar.gz Installing Software Upgrades with the CLIInstalling Software Upgrades with the CLI User@host request system software add unlink no-copy source Downgrading the Software Downgrading the SoftwareDowngrading the Software with the J-Web Interface Downgrading the Software with the CLI User@host request system software rollback Configuring Boot DevicesUser@host request system reboot Configuring Boot Devices Snapshot Summary Click OK Partitions the boot medium CLI request system snapshot Command Options Configuring a Boot Device for Backup with the CLI Swap-size size Option Description PartitionRoot-size size CLI set system dump-device Command Options Recovering Primary Boot DevicesWhy Compact Flash Recovery Might Be Necessary Recovery Hardware Recommended Recovery Hardware and SoftwareConfiguring Internal Compact Flash Recovery Recommended Recovery Hardware and Software \ physdiskwrite -u junos-jseries-7.0-20041028.0-export-cf512 Rebooting or Halting a Services Router Rebooting or Halting a Services Router Option Description Rebooting a Services Router with the CLICLI Request System Reboot Command Options CLI Request System Halt Command Options Halting a Services Router with the CLI This option is a synonym for the at + minutes option Page Managing Files with the J-Web Interface Cleaning Up FilesManaging Files Managing Files with the J-Web Interface Downloading Files Managing Files Deleting the Backup Software ImageCleaning Up Files with the CLI Deleting the Backup Software Image Managing Accounting Files Managing Accounting Files Gz.jc-for example, juniper.conf.gz.jc Encrypting and Decrypting Configuration FilesEncrypting and Decrypting Configuration Files For example Encrypting Configuration FilesRequest system set-encryption-key Commands CLI Command Description Modifying the Encryption Key Decrypting Configuration FilesTo begin the encryption process, commit the configuration To begin the decryption process, commit the configuration At the second prompt, reenter the new encryption key Diagnosing Performance and Network Problems Diagnosing Performance and Network ProblemsPage Series Diagnostic Terms Using Services Router Diagnostic ToolsDiagnostic Terms Web Interface Diagnose and Manage Options Diagnostic Tools OverviewWeb Diagnostic Tools Overview Manage Options CLI Diagnostic Commands Overview Diagnosis and Troubleshooting CLI Diagnostic Command Summary Quit Command Function StartMpls Connection Checking Options for Checking Mpls Connections Interface name Instance to which this Locate LSP usingPing LSP to Layer Ping mpls l3vpn VPN prefix Loopback Address Mpls EnabledGeneral Preparation Ping Mpls Preparation Pinging Hosts from the J-Web Interface Using the J-Web Ping Host ToolPinging Hosts from the J-Web Interface Web Ping Host Field Summary Ping Host Results Icmpseq=0 Icmpseq=number Ping Host Results and Output SummaryWeb Ping Host Results and Output Summary Ping Host Result Checking Mpls Connections from the J-Web Interface Using the J-Web Ping Mpls ToolChecking Mpls Connections from the J-Web Interface Ping LSP to Layer 3 VPN prefix Ping LDP-signaled LSPLocate LSP using interface name Web Ping Mpls Field Summary Ping end point of LSP Instance to which this connection belongsLocate LSP from interface name Locate LSP from virtual circuit information Time Ping Mpls Results and OutputWeb Ping Mpls Results and Output Summary Field Description Tracing Unicast Routes from the J-Web Interface Using the J-Web Traceroute ToolTracing Unicast Routes from the J-Web Interface To use the traceroute tool Traceroute Field Summary Traceroute Web Traceroute Results and Output Summary Traceroute Results and Output Summary Capturing and Viewing Packets with the J-Web Interface Using J-Web Packet CaptureCapturing and Viewing Packets with the J-Web Interface To use J-Web packet capture Advanced Options Packet Capture Field SummaryGe-0/0/0 Addresses Into hostnames in the packet headers displayed Web Packet Capture Results and Output Summary Packet Capture Results and Output Summary Pinging Hosts from the CLI Using CLI Diagnostic CommandsTo quit the ping command, press Ctrl-C CLI ping Command Options Do-not-fragment Checking Mpls Connections from the CLI Following is sample output from a ping command Following is sample output from a ping mpls command Pinging RSVP-Signaled LSPs and LDP-Signaled LSPs Pinging Layer 3 VPNs Following is sample output from a ping mpls l3vpn commandCLI ping mpls l3vpn Command Options Pinging Layer 2 VPNs Following is sample output from a ping mpls l2vpn commandCLI ping mpls l2vpn Command Options Pinging Layer 2 Circuits CLI ping mpls l2circuit Command Options Tracing Unicast Routes from the CLI Using the traceroute CommandTo quit the traceroute command, press Ctrl-C CLI traceroute Command Options Inet6 Using the traceroute monitor CommandFollowing is sample output from a traceroute command Gateway address On page 240 summarizes the output fields of the display To quit the traceroute monitor command, press QCLI traceroute monitor Command Options Tracing Multicast Routes from the CLI CLI traceroute monitor Command Output Summary Using the mtrace from-source Command On page 243 summarizes the output fields of the display CLI mtrace from-source Command Options CLI mtrace from-source Command Output Summary Using the mtrace monitor Command Displaying Log and Trace Files from the CLI CLI mtrace monitor Command Output Summary CLI monitor interface traffic Output Control Keys Using the monitor interface CommandMonitoring Interfaces and Traffic from the CLI CLI monitor interface Output Control Keys User@host monitor interface fe-0/0/0 Using the monitor traffic Command CLI monitor traffic Command Options Match Condition Description CLI monitor traffic Match ConditionsOption Description Brief Extensive Directional Relational Operator CLI monitor traffic Logical OperatorsArithmetic Operator Binary Operator Following is sample output from the monitor traffic command Page Packet Capture Terms Configuring Packet CapturePacket Capture Terms Packet Capture Terms Packet Capture Overview Firewall Filters for Packet Capture Configuring Packet CapturePacket Capture on Router Interfaces Analysis of Packet Capture Files Packet Capture Files Enabling Packet Capture Required Configuring Packet Capture with a Configuration Editor Navigate to the Forwarding options Enabling Packet Capture 259 Configuring Packet Capture on an Interface RequiredConfiguring a Firewall Filter for Packet Capture Optional Configuring Packet Capture on an Interface 192.168.1.1/32 Configuring a Firewall Filter for Packet CaptureEdit firewall 261 Enter set packet-capture disableDisabling Packet Capture Deleting Packet Capture Files Rm pcap-file.fe.0.0.0 Return to the CLI operational modeUser@host start shell Cd /var/tmp Verifying Packet Capture Displaying a Packet Capture ConfigurationVerifying Packet Capture Mv pcap-file.fe.0.0.0 pcap-file.fe.0.0.0.chdsl Verifying Captured Packets Verifying Captured Packets Return to the CLI configuration modeFtp lcd /var/tmp Local directory now /cf/var/tmp Ftp bye Goodbye Edit User@host# Meaning Verify that the output shows the intended packets RPM Terms Configuring RPM Probes RPM test RPM OverviewRPM Probes RPM target Jitter Measurement with Hardware Timestamping Configuring RPM ProbesRPM Tests Probe and Test Intervals Inbound and Outbound Times Icmp Timestamp Probes Only RPM StatisticsRPM Statistics Round-Trip Times RPM for BGP Monitoring Configuring RPM with Quick ConfigurationRPM Thresholds and Traps Performance Probe Owners RPM Quick Configuration SummaryConfiguring RPM with Quick Configuration Router Advanced WAN Access Configuration Guide Maximum Probe Thresholds Generates Snmp traps when the threshold for standard Performance Probe Server Configuring RPM with a Configuration EditorConfiguring Basic RPM Probes Configuring RPM with a Configuration Editor Set probe customerA Configuring Basic RPM ProbesEdit services rpm Click Configure Set test icmp-test probe-type icmp-ping-timestamp Edit services rpm probe customerA192.178.16.5 Set test icmp-test probe-frequency Configuring TCP and UDP Probes Router a Configuration Configuring TCP and UDP Probes Router B Configuration Set probe-limit Tuning RPM ProbesTuning RPM Probes CustomerA Configuring RPM Probes for BGP Monitoring Configuring RPM Probes to Monitor BGP Neighbors Configuring RPM Probes to Monitor BGP Neighbors Add new entry Verifying an RPM ConfigurationDirecting RPM Probes to Select BGP Routers Directing RPM Probes to Select BGP Routers Verifying RPM Statistics Verifying RPM ServicesVerifying RPM Services Verifying RPM Statistics Verifying RPM Probe Servers Verifying RPM Probe Servers Index IndexIndex on Series Services Router Administration Guide Index Symbols 112 Chassis Dd utility, for compact flash recovery 192 Snmp health monitor System logs Dhcp Snmp Junos Internet software Diagnosing problems from 210 Monitoring from 102 See also Snmp Permissions Radius CLI See also RPM probes Preparation Serial number Chassis components BGP TACACS+ Routing Engine, too warm Upgrades Version Hardware, displaying