JUNOS – redistribute static routes into OSPF

Saturday, July 3rd, 2010

policy-options { policy-statement static_2_ospf { term 1 { from protocol static; then accept; } } } # edit policy-options policy-statement static_2_ospf set term 1 from protocol static set term 1 then accept # top # set protocols ospf export static_2_ospf # show | compare [edit protocols ospf] +   export static-into-ospf; [edit policy-options] +   policy-statement static_2_ospf [...]

JUNOS – Authentication using TACACS+

Friday, April 3rd, 2009

Juniper M7i – JUNOS 9.3R2.8 The username must be set to “remote”. #edit system set login user remote class super-user set login user remote full-name “TACACS+ remote User” set login user remote uid 3333 set accounting events [ login interactive-commands ] destination tacplus set authentication-order [ tacplus password ] set tacplus-server 10.20.30.22 source-address 10.20.30.11 port [...]

JUNOS – iBGP – default route

Tuesday, March 31st, 2009

Juniper M7i – JUNOS 9.3R2.8 set routing-options generate route 0.0.0.0/0 discard set routing-options router-id 10.20.30.1 set routing-options autonomous-system xxxxx set protocols bgp group iBGP type internal set protocols bgp group iBGP description “iBGP – Routers” set protocols bgp group iBGP local-address 10.20.30.1 set protocols bgp group iBGP log-updown set protocols bgp group iBGP export default-orginate [...]

JUNOS – Date & Time setup using NTP

Monday, January 12th, 2009

- JUNOS 9.3 R2.8 – Juniper M7i – set system time-zone Europe/Berlin set date 200901301122 or if ntp servers are set set date ntp set system ntp server 192.168.23.1 prefer set system ntp server 192.20.1.22 set system ntp server 192.20.30.33 For time synchronize at boot : set system ntp boot-server 10.20.30.1 If you don´t set [...]

JUNOS – Protecting the routing engine

Sunday, January 11th, 2009

- JUNOS 9.3 R2.8 – Juniper M7i – RE-850 – To protect the RE you only allow that sort of traffic that the router needs to function properly, by building a firewall filter that applies on the loopback interface.You should also limit the amount of traffic that’s reaching the routing engine. set policy-options prefix-list mgmnt-access [...]