Juniper ESCR TescoDay 3

OverviewDay #1

Maintenance and monitoring

Routing protocols

Lab

Day #2

Introduction to Juniper devices

Junos CLI System and

interface configuration

Lab

DAY #4

QoS

FHRP

Lab

DAY #3

Routing policy

Lab

Firewall filters

Lab

Routing policy

Routing policy

Routing policy

defined in policy-option – policy-statement configuration stanza

to make a policy active you have to assign it to protocol, group or neighbour

Definition of policypolicy-options { policy-statement loopbacks-to-bgp { term 1 { from { protocol direct; route-filter 1.1.1.1/32 exact; route-filter 11.11.11.11/32 exact; } then accept; } }}

Activation of routing policyprotocols { bgp { group ebgp { export loopbacks-to-bgp; neighbor 192.168.12.2 { export to-JR2; peer-as 100; } neighbor 192.168.13.3 { peer-as 100; } } }}

Firewall filters a.k.a. ACL

Stateless firewall Protecting Routing Engine (lo0) Protecting network infrastructure (interface)

Firewall filters Firewall filters are defined in firewall – filter configuration

stanza. Can be assign as input or output for particular interface

commit confirm as your 2nd chance

firewall { filter Protect-lo0 { term telnet-from-lo0s { from { source-address { 5.5.5.0/24; }protocol tcp; destination-port telnet; } then { log; reject; } } term accept-all { then accept; } }}

> show interfaces ge-1/1/3.11 extensive Logical interface ge-1/1/3.11 (Index 65549) (SNMP ifIndex 870) (Generation 318) Description: To R1 Flags: SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.11 ] Encapsulation: ENET2 Bandwidth: 100mbps Traffic statistics: Input bytes : 6504297210721 Output bytes : 13197946273155 Input packets: 20307569747 Output packets: 16619390648 IPv6 transit statistics: Input bytes : 0 Output bytes : 0 Input packets: 0 Output packets: 0 Local statistics: Input bytes : 61025439 Output bytes : 82315595 Input packets: 1223888 Output packets: 1226051 Transit statistics: Input bytes : 6504236185282 4513320 bps Output bytes : 13197863957560 4197280 bps Input packets: 20306345859 1258 pps Output packets: 16618164597 956 pps IPv6 transit statistics: Input bytes : 0 Output bytes : 0 Input packets: 0 Output packets: 0