E-Series Introdution to Juniper Network Routers(ERX320) - Lab Guide

Introduction to Juniper Networks Routers - E-seriesLab Guide 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA 408-745-2000 www.juniper.net Juniper Networks, the Juniper Networks logo. NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. JUNOS and JUNOSe are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Introduction to Juniper Networks Routers—E-series Lab Guide, Revision 7.c Copyright © 2007, Juniper Networks, Inc. All rights reserved. Printed in USA. Revision History: Revision 4.c—April 2003 Revision 7.a—September 2005 Revision 7.b—January 2007 Revision 7.c—April 2007 The information in this document is current as of the date listed above. The information in this document has been carefully verified and is believed to be accurate for software Release 7.3.0. Juniper Networks assumes no responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages. Juniper Networks reserves the right to change, modify, transfer or otherwise revise this publication without notice. YEAR 2000 NOTICE Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The JUNOS software has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. SOFTWARE LICENSE The terms and conditions for using Juniper Networks software are described in the software license provided with the software, or to the extent applicable, in an agreement executed between you and Juniper Networks, or Juniper Networks agent. By using Juniper Networks software, you indicate that you understand and agree to be bound by its license terms and conditions. Generally speaking, the software license restricts the manner in which you are permitted to use the Juniper Networks software, may contain prohibitions against certain uses, and may state conditions under which the license is automatically terminated. You should consult the software license for further details. Contents Lab 1: Introduction to the E-series Router CLI (Detailed) ................................................... 1-1 Part 1: Log In to the E-series Router ....................................................................... 1-3 Part 2: Restore Factory Default Configuration ......................................................... 1-3 Part 3: User Exec and Privileged Exec Modes ....................................................... 1-4 Part 4: CLI Shortcuts ............................................................................................. 1-9 Part 5: Basic show Commands.............................................................................. 1-10 Part 6: File System Commands ............................................................................. 1-13 Part 7: Change Boot Configuration Settings and Reload the E-series Router......... 1-14 Part 8: Review E-series System Operational Status and Configuration Settings .. 1-18 E-series Router Configuration Basics (Detailed) .................................................... 2-1 Part 1: Restore the Factory-Default Configuration ................................................... 2-3 Part 2: Configure IP Parameters on the SRP's Fast Ethernet Interface .................... 2-3 Part 3: Configure IP Parameters on a Loopback Interface ..................................... 2-4 Part 4: Configure the Hostname and Telnet Service ................................................ 2-5 Part 5: Configuring Primary, Secondary, and Tertiary Chassis Timing Sources ....... 2-8 Part 6: Copying Files to Flash Memory .................................................................. 2-10 Part 7: Set the System Date and Time .................................................................. 2-10 Part 8: Configure an Entry in the Host Table ........................................................ 2-11 Part 9: Transfer Files Between the E-series Router and an FTP Server................. 2-12 Part 10: Create a Virtual Router .......................................................................... 2-13 Part 11: Customize the Banner and Send Messages to Users (Optional) ............. 2-16 Lab 2: Contents - iii Contents - iv Intended Audience This course is intended for network professionals. Objectives After successfully completing this course. to reload E-series router. the file system. This course is a required prerequisite for the following: • • E-series Routing Protocols (formerly E-series Circuit Aggregation Basics) E-series Broadband Remote Access Server Configuration Basics Course Overview . Prerequisites Students attending this course should have a general knowledge of the Internet Protocol.v . you should be able to: • • • • • • • • Describe the E-series router features and applications in both a B-RAS and dedicated access environment. including user modes. managers. Describe the file system used on E-series routers. including the roles played by layers 1-4. and hardware architecture. Use the CLI to manipulate files. such as Telnet and FTP. It gives an overview of using the E-series command-line interface (CLI). and file manipulation. including addressing. and anyone needing an overview of the E-series router. Familiarity with common TCP and UDP protocols. Describe the configuration options available for E-series hardware platforms. applications. The course also introduces the concept of virtual routers and discusses the basics of virtual router configuration. CLI shortcuts. and Perform basic virtual router configuration and management tasks.Course Overview The Introduction to Juniper Networks Routers—E-series course provides an introduction to the E-series router platforms. The course teaches students how to use the CLI to perform basic router administration tasks and how to perform a basic configuration of an E-series router. including the E320 router. List the different CLI user modes. Use the CLI to configure the E-series platforms for basic IP connectivity. and to perform basic troubleshooting. The course covers E-series router features. Course Level This is an introductory-level course designed to be a stepping-stone to the more advanced courses available in the Juniper Networks training curriculum. Describe the E-series router hardware architecture. is helpful. Students should also have a basic understanding of the OSI model. Course Agenda Day 1 Lab 1: Lab 2: Introduction to the E-series Router CLI (Detailed) E-series Router Configuration Basics (Detailed) Course Agenda .vi . juniper.net.juniper.net/training/education/ . • Locate the specific software or hardware release and title you need.net/techpubs/ . Please send questions and suggestions for improvement to training@juniper. and class locations from the World Wide Web by pointing your Web browser to: http://www. Juniper Networks Support For technical support. About This Publication The Introduction to Juniper Networks Routers—E-series Lab Guide was developed and tested using software version 7.3. Additional Information .vii .Additional Information Education Services Offerings You can obtain information on the latest Education Services offerings. This document is written and maintained by the Juniper Networks Education Services development team.net/customers/ support/. contact Juniper Networks at http://www.0. Documentation sets and CDs are available through your local Juniper Networks sales office or account representative.juniper. course dates. or at 1-888-314-JTAC (within the United States) or 408-745-2121 (from outside the United States). and choose the format in which you want to view or print the document. Previous and later versions of software may behave differently so you should always consult the documentation and release notes for the version of code you are running before reporting errors. Technical Publications You can print technical manuals and release notes directly from the Internet in a variety of formats: • Go to http://www. Additional Information .viii . It is available in two formats: a high-level format that is designed to make you think through each step and a detailed format that offers step-by-step instructions complete with sample output from most commands.Lab 1 Introduction to the E-series Router CLI (Detailed) Overview This lab introduces you to the E-series router command-line interface (CLI). Inc. Introduction to the E-series Router CLI (Detailed) Lab 1 . By completing this lab. you will perform the following tasks: • • • • • • • • Access the E-series router using a console connection (either directly or through a terminal server) Restore a factory-default configuration (if needed) Explore the differences between User Exec mode and Privileged Exec mode Use CLI shortcuts Perform basic show commands and enter configuration mode Manage the E-series router file system Change boot configuration setting and reload the E-series router Review E-series system operation and configuration file settings Juniper Networks.1 . #.168.##.168. .the E-series Key User and Privileged Exec Mode Commands Key User and Privileged Exec mode commands used in this lab include the following: configure copy running-configuration dir enable reload show boot show configuration show controller show environment show hardware show interfaces show ip interface brief show ip route show timing show utilization show version Our Example Physical Topology Default Router Lo# : 192.10.220 Note : # = Group number Introduction to the E-series Router CLI (Detailed) Lab 1 .1/32 U Virtual Router: vr_# Lo# : 192.0/24 .1/32 OC3 slot 2/0 . Inc.0/24 .#.168.#. VCI 1#0 Fa Fa slot 1/3 slot 1/2 Ethernet VLAN ID : # .2 192.20.158 / 24 FTP Server 192.1 OC3 slot 2/1 10. VPI 0.1 SRP Fa 0/0 10.2 U VCD 1#0.109.Introduction to Juniper Network Routers .168.2 Juniper Networks.109. Introduction to Juniper Network Routers . If you believe this is the case. Introduction to the E-series Router CLI (Detailed) Lab 1 .. End with ^Z.1.the E-series Part 1: Log In to the E-series Router Log in to the E-series router by performing the following step: Note Depending on your classroom location and setup. SRP is running in slot 1 Logged in on console O. ERX310(config)# boot config factory-defaults WARNING: Execution of this command will cause all configuration settings to revert to factory defaults upon the next system reboot. Step 2. Please check with the instructor if you are unsure about the state of your router's patching and to determine whether you should be using direct console connections or accessing the console ports through a terminal server. Proceed with reload? [confirm]y Reload operation commencing.Bypassing Boot Power-On Self-Tests (BPOST) 6128 Symbols loaded.Bypassing Boot Power-On Self-Tests (BPOST) BPOST1 . boot device : local: unit number : 0 processor number : 0 inet on ethernet (e) : 1. one per line. ERX-310-41-e1-d1> Juniper Networks. All rights reserved. noting the slot numbers on the map. If you are accessing the E-series router via a terminal server. Inc.. 219002560 (from 55437395) Starting at 0x100000... you might not need to perform this part.1 Direct console connection: Connect your PC to the E-series router console port and cable the router using the network topology diagram.3 . Copyright (c) 1999-2006 Juniper Networks.. Connection through a terminal server. some of the cabling steps might have already been performed by your instructor. BPOSTO . your instructor will provide you with the required Telnet destination address and terminal server login information.exe.1 flags (f) : 0x26000000 other (o) : local:/ Loading local:/images/srp/srp42d40134. Part 2: Restore Factory Default Configuration Note If your router is already running a factory-default configuration. Step 1. please check with your instructor before skipping this part.1 Enter the following commands to restore a factory-default configuration: ERX310-2> enable Password: ******** ERX310-2# configuration terminal Enter configuration commands.. please wait.. Launch the terminal emulation program provided on your PC and log in to the E-series router.. 0 auto-booting. NOTE: Reverting System Configuration to factory defaults.1. Proceed with 'boot config factory-defaults'? [confirm]y ERX310(config)# exit ERX310# reload WARNING: This command will cause the system to reboot. Inc. 4 Juniper Networks. the prompt is based on the MAC address of the SRP's Ethernet interface. Question: What is the prompt for User Exec mode? __________________________________________________________________ __________________________________________________________________ Answer: The prompt takes the form of the router's configured hostname followed by a greater-than (>) sign. . you are in the User Exec mode. ERX-310-41-e1-d1> show ? aps arp atm bfd bgp Display Display Display Display Display aps information ARP table entries ATM information information for BFD information for BGP Introduction to the E-series Router CLI (Detailed) Lab 1 . Initially.Introduction to Juniper Network Routers . If the hostname has not been explicitly configured. which is a limited read-only mode.the E-series Part 3: User Exec and Privileged Exec Modes Step 3.3 Use the CLI to determine what show commands are available while in User Exec mode. The configure command is not an option at the User Exec privilege level. Inc.2 Use the Question Mark (?) key to determine what commands are available in User Exec mode. Step 3.1 There are three different modes of operation on the E-series router. ERX-310-41-e1-d1> ? baseline Set a baseline for statistics clear Clear system information default Set a command to its default(s) dhcp-external DHCP External dir Display a list of local files disable Reduce the command privilege level enable Enable access to privileged commands erase Erase configuration settings exit Exit from the current command mode help Describe the interactive help system ip Perform IP services l2c L2C operations l2tp L2TP operations macro Run a CLI macro monitor Monitor system information mpls Execute MPLS commands mtrace Trace the path that packets will traverse from source to destination for a given group no Negate a command or set its default(s) ping Send MPLS echo request to remote host show Display system information sleep Make the Command Interface pause for a specified duration terminal Configure the terminal line settings test Test the outcome of a commad trace Trace the path that packets traverse to their destination traceroute Trace the path that packets traverse to their destination ERX-310-41-e1-d1> Question: Can you enter Global Configuration mode directly from User Exec mode? __________________________________________________________________ __________________________________________________________________ Answer: No. Each mode uses a different prompt. Step 3. .the E-series boot bridge bridge1483 bulkstats cac classifier-list clns clock color-mark-profile columns controllers cops dos-protection-group drop-profile dvmrp egress-queue environment fabric-queue flash frame-relay gre hardware hdlc ike interfaces ip ipsec ipv6 is-voice isis l2c l2tp l2vpn last-reset ldp license line log mpls mroute multicast nbma ntp nvs parent-group policy-list policy-parameter ppp pppoe pppoe-service-name-table privilege profile qos qos-parameter qos-parameter-define qos-port-type-profile qos-profile qos-shared-shaper-control queue-profile rate-limit-profile reboot-history rtr scheduler-profile service-management snmp socket sscc statistics-profile subscriber-policy subsystems suspicious-control-flow-detection tcp terminal track Display the settings currently in effect for the next reboot Display bridge information Display the bridge1483 information Display bulkstats information Display CAC information Display classifier lists Display network information for CLNS Display the time and date Display color mark profile entries Display interface-column information Display controller information Display COPS information The DOS protection group Display drop profile Display dvmrp information Display egress queue statistics Display chassis environmental status (power.) Display fabric queue statistics Display information about the flash card Display frame relay information Display gre information Display system hardware information Display the Cisco-HDLC information Display IKE information Display interface status and configuration Display information for IP Display ipsec information Display information for IPv6 Display information for is-voice Display IS-IS routing information Display information for l2c Display L2TP information Display L2VPN information Display information about the last system reset Display ldp information Display license information Display line configuration Display logs and logging configuration Display mpls information Display Multicast routing information Display about igmp globally Display Non-Broadcast Multi-Access Interface information Display Network Time Protocol characteristics Display nvs summary information Display parent group entries Display policy table entries Display policy parameter entries Display the PPP information Display the PPPoE information Configure pppoe service-name table Display privilege level Display profile configuration Display qos information Display qos parameter instance(s) Display qos parameter definition(s) Display default port profile Display qos-profile Show QoS shared shaper controls Display queue profile Display rate limit profile entries Display information about the reboot history Display information for rtr Display scheduler profile Display service management information Display SNMP information Display BSD Socket-Emulation information Display SSC Client Information Display scheduler profile Display subscriber policies Display the subsystems that can be configured for a release Suspicious control flow detection system Display TCP information Display the terminal configuration settings Objects to be tracked Juniper Networks. Introduction to the E-series Router CLI (Detailed) Lab 1 .5 . temp.Introduction to Juniper Network Routers . Inc. etc. and accounting characteristics Set a baseline for statistics Clear a state Set the system's clock Enter Global Configuration mode Copy files Configure debugging functions Set a command to its default(s) Delete a local file Perform DHCP operation DHCP External Reload and perform diagnostics on a specific slot Display a list of local files Reduce the command privilege level Disconnect remote CLI session Enable access to privileged commands Erase configuration settings Exit from the current command mode Halt the system in preparation for power down Describe the interactive help system Manage hotfixes Perform IP services Run IPv6 commands L2C operations L2TP operations Configure logging settings Logout PPP Subscribers Run a CLI macro Monitor system information Display contents of a file Execute MPLS commands Trace the path that packets will traverse from source to destination for a given group Negate a command or set its default(s) Send MPLS echo request to remote host Set PPPoE information Perform profile reassignment Halt and perform a cold restart Rename a local file Send a message to specified lines Service management Display system information Make the Command Interface pause for a specified duration Introduction to the E-series Router CLI (Detailed) Lab 1 . ERX-310-41-e1-d1# ? aaa baseline clear clock configure copy debug default delete dhcp dhcp-external diag dir disable disconnect enable erase exit halt help hotfix ip ipv6 l2c l2tp log logout macro monitor more mpls mtrace no ping pppoe profile-reassign reload rename send service-management show sleep Configure authentication.4 Enter Privileged Exec mode. Inc. . Step 3.Introduction to Juniper Network Routers .the E-series traffic-class traffic-class-group tunnel-server users version vlan vpls Display Display Display Display Display Display Display traffic class traffic class group tunnel-server information information about current users system hardware and software version information VLAN related information information for a vpls instance Step 3. authorization.5 Use the CLI to list the commands available in this mode. ERX-310-41-e1-d1> enable ERX-310-41-e1-d1# Question: What is the prompt for Privileged Exec mode? __________________________________________________________________ __________________________________________________________________ Answer: The Privileged Exec mode prompt replaces the greater-than sign with a hash or pound sign (#).6 Juniper Networks. users in Privileged Exec mode can use the configure command to modify the router's configuration. Additionally. Step 3. temp. Many of these additional commands are potentially invasive or provide potentially sensitive information about the router and its configuration.the E-series telnet terminal test trace traceroute undebug virtual-router write Access a remote system via telnet Configure the terminal line settings Test the outcome of a commad Trace the path that packets traverse to their destination Trace the path that packets traverse to their destination Disable debug logging functions Specify a virtual router Write system information Question: How do the commands available in Privileged Exec mode compare with those available in User Exec mode? __________________________________________________________________ __________________________________________________________________ Answer: There are many more commands available in Privileged Exec mode.7 .6 Use the CLI to list the available show commands when using Privileged Exec mode. Inc. Introduction to the E-series Router CLI (Detailed) Lab 1 .Introduction to Juniper Network Routers .. etc. and accounting characteristics Display access list(s) Display aps information Display ARP table entries Display ATM information Display information for BFD Display information for BGP Display the settings currently in effect for the next reboot Display bridge information Display the bridge1483 information Display bulkstats information Display CAC information Display classifier lists Display network information for CLNS Display the time and date Display color mark profile entries Display interface-column information Display the system's running configuration Display control plane information Display controller information Display COPS information Display DHCP information The DOS protection group Display drop profile Display dvmrp information Display egress queue statistics Display chassis environmental status (power. authorization.) Display core dump configuration Display fabric queue statistics Display information about the flash card Display the forwarding table Display frame relay information Display information for FTP Server Display gre information Display system hardware information Display the Cisco-HDLC information Display the static host table Display hotfix information Display IKE information Display interface status and configuration Display information for IP Display IP subscribers Juniper Networks. ERX-310-41-e1-d1# show ? aaa access-list aps arp atm bfd bgp boot bridge bridge1483 bulkstats cac classifier-list clns clock color-mark-profile columns configuration control-plane controllers cops dhcp dos-protection-group drop-profile dvmrp egress-queue environment exception fabric-queue flash forwarding-table frame-relay ftp-server gre hardware hdlc hosts hotfix ike interfaces ip ip-subscriber Configure authentication. Inc.the E-series ipsec ipv6 is-voice isis l2c l2tp l2vpn last-reset ldp license line log memory-management mpls mroute multicast nbma ntp nvs parent-group policy-list policy-parameter ppp pppoe pppoe-service-name-table privilege processes profile qos qos-parameter qos-parameter-define qos-port-type-profile qos-profile qos-shared-shaper-control queue-profile radius rate-limit-profile reboot-history reload resource route-map rtr scheduler-profile secrets service-management snmp socket sscc statistics statistics-profile subscriber-policy subscribers subsystems suspicious-control-flow-detection tacacs tcp telnet terminal terminate-code timing track traffic-class traffic-class-group tunnel-server users utilization version virtual-router vlan vpls Display ipsec information Display information for IPv6 Display information for is-voice Display IS-IS routing information Display information for l2c Display L2TP information Display L2VPN information Display information about the last system reset Display ldp information Display license information Display line configuration Display logs and logging configuration Display memory management information Display mpls information Display Multicast routing information Display about igmp globally Display Non-Broadcast Multi-Access Interface information Display Network Time Protocol characteristics Display nvs summary information Display parent group entries Display policy table entries Display policy parameter entries Display the PPP information Display the PPPoE information Configure pppoe service-name table Display privilege level Display information about the running processes Display profile configuration Display qos information Display qos parameter instance(s) Display qos parameter definition(s) Display default port profile Display qos-profile Show QoS shared shaper controls Display queue profile Display RADIUS server information Display rate limit profile entries Display information about the reboot history Display system reload configuration Display resource parameters Display route maps Display information for rtr Display scheduler profile Display the current password settings Display service management information Display SNMP information Display BSD Socket-Emulation information Display SSC Client Information Display statistics information Display scheduler profile Display subscriber policies Display activity connected and authenticated clients Display the subsystems that can be configured for a release Suspicious control flow detection system Display TACACS+ server information Display TCP information Display status of telnet daemon Display the terminal configuration settings Display terminate code information Display network timing configuration and status Objects to be tracked Display traffic class Display traffic class group Display tunnel-server information Display information about current users Display system resource utilization Display system hardware and software version information Display information pertaining to virtual routers Display VLAN related information Display information for a vpls instance Step 3.8 Juniper Networks. Introduction to the E-series Router CLI (Detailed) Lab 1 . .Introduction to Juniper Network Routers .7 Enter Global Configuration mode to configure the router from the terminal. There are other useful shortcuts as well. You have already used the Question Mark (?) key shortcut to view all available commands as well as all available options for a particular command. Step 3.Introduction to Juniper Network Routers . ERX-310-41-e1-d1# show version Juniper Edge Routing Switch ERX-310 Juniper Networks. Step 4. Then.8 Exit Global Configuration mode and return to Privileged Exec mode. ERX-310-41-e1-d1(config)# Question: In what two ways can you configure the E-series router? __________________________________________________________________ __________________________________________________________________ Answer: You can configure the router from a script ( . some of the CLI captures might be slightly different. Use ? to assist in answering the following question: Question: What show command would you use to determine the E-series system's hardware and software version information? __________________________________________________________________ __________________________________________________________________ Answer: The show version command returns the requested information. End with ^Z. s cr) file or from a terminal session. one per line. If this is the case. Introduction to the E-series Router CLI (Detailed) Lab 1 .the E-series ERX-310-41-e1-d1# configure Configuring from terminal or file [terminal]? <Enter> Enter configuration commands. ERX-310-41-e1-d1(config)# end ERX-310-41-e1-d1# Part 4: CLI Shortcuts Step 4. Question: What prompt indicates that you are in Global Configuration mode? __________________________________________________________________ __________________________________________________________________ Answer: The word con fig appears in parentheses between the router name and the pound sign.9 . use the Up Arrow key (or Ctrl-p) to recall the command from the command history. Inc. with the latter being the default option. The router in your lab environment might only have a single SRP running in file synchronization mode. The ? is very useful when navigating the E-series router CLI.1 Note The CLI captures in this lab used a router with redundant SRPs running in high-availability mode.2 Enter and execute the command identified in the previous step in its entirety. ------------enabled --.10 Juniper Networks. 22 minutes. ERX-310-41-e1-d1# sh<Tab>ow ERX-310-41-e1-d1# show t<Tab> ERX-310-41-e1-d1# show t? tacacs tcp telnet terminal terminate-code timing track traffic-class traffic-class-group tunnel-server ERX-310-41-e1-d1# show te<Tab> ERX-310-41-e1-d1# show te? telnet terminal terminate-code ERX-310-41-e1-d1# show ter<Tab> ERX-310-41-e1-d1# show termina? terminal terminate-code ERX-310-41-e1-d1# show terminal <Enter> Length: 25 lines. Try tab completion now with the command show terminal. and memory size (if applicable).1 Use ? to answer the following questions.0 release-0.rel Version: 9. If the Tab key is unable to auto-complete the command. All rights reserved.rel 0d17h:19m:15s 15:01) ERX-310-41-e1-d1# <Up Arrow or Ctrl-p> show version Step 4.erx310_9-0-0. scroll through the history buffer until the show version command is displayed on the command line.Introduction to Juniper Network Routers . 17 hours.0 [BuildId 8976] (February 21.erx310_9-0-0. 51 seconds (since SAT FEB 21 2009 08:28:05 UTC) slot ---0 1 2 state -----online online online type ---------SRP310-10G FE-8 OC3-2A-GE admin spare running release slot uptime ------.3 You can save typing time by abbreviating commands.the E-series Copyright (c) 1999-2008 Juniper Networks. 2008 System running for: 0 days. serial numbers and memory configuration? __________________________________________________________________ __________________________________________________________________ Answer: The show hardware command displays information about hardware revisions.rel 0d17h:20m:24s enabled --. Inc. serial numbers.4 Using the Up Arrow key (or ctrl-p). use ? to show all possible completions.0. Verify your answers by running the show command. Question: What show command would you use to determine the E-series router's hardware revision information. ERX-310-41-e1-d1# show configuration Part 5: Basic show Commands Step 5. Edit the command on the command line so that the command to view the current configuration is displayed. Tab completion saves typing time and provides real-time syntax validation because tab completion will not complete a command if you have not entered enough leading characters to uniquely identify it or if it is invalid. Abbreviations will work as long as you enter at least enough leading characters to identify the command uniquely.----. Introduction to the E-series Router CLI (Detailed) Lab 1 . You can also type part of a command and use the Tab key to have the E-series router complete the command. Inc. . Width: 80 columns data-character-bits: 8 bits per character exec-timeout never exec-banner enabled motd-banner enabled login-timeout 30 seconds Step 4.---------------.rel 0d16h:44m:20s enabled --. System Release: erx310_9-0-0.erx310_9-0-0. 0x0) fabric: 10 Gbps (rev. ERX-310-41-e1-d1# show environment chassis: 3 slot (id 0x7. -------A00 A05 A03 base MAC address -------------0090.the E-series ERX-310-41-e1-d1# show hardware serial slot type number ---------------------0 SRP310-10G 4306102273 1 GE/FE 4606010642 2 HYBRID 4305469608 assembly number ---------4500003051 3500104555 4500005002 assembly rev. Introduction to the E-series Router CLI (Detailed) Lab 1 . ERX-310-41-e1-d1#show utilization Please wait. Adding the table option (instead of the all option) causes the router to only display the table of current temperatures.Introduction to Juniper Network Routers . Adding the all option to that command causes the router to display the same information plus a table of current temperatures. including its temperature status.11 . B not present AC power: A ok.dfa6 0090.e1d1 0090.1a41. System Resource Utilization --------------------------heap cpu slot type (%) (%) -----------------0 SRP310-10G 34 3 1 FE-8 35 5 2 OC3-2A-GE 51 4 Question: What show command can you use to determine if the E-series system is overheating? What option can you add to that command to have the router display the actual temperature values? __________________________________________________________________ __________________________________________________________________ Answer: You can use the show environment command to display information about the overall status of the E-series chassis. 0) fans: fanSubsystemOk nvs: ok (1006MB flash disk. rev. -------A06 A02 A03 ram (MB) ---1024 256 256 number of MAC addresses --------1 8 1 slot ---0 1 2 type -----------------SRP310-10G I/O FE-8 I/O 2xOC3-ATM 1xGE I/O serial number ---------4305392663 4305381886 4305515142 assembly number ---------4500004201 3501006702 4500005701 assembly rev...1a42. B not present srp redundancy: none slots: ok online: 0 1 2 line redundancy: none temperature: ok timing: primary Juniper Networks. Inc. The heap parameter indicates how much of the line module's RAM is in use by software.00c5 Question: What show command would you use to determine CPU and memory utilization? __________________________________________________________________ __________________________________________________________________ Answer: The show utilization command displays CPU and memory usage details for each line module. 84% full).. matches running config power: A ok.1a41. appending to previous contents all Display environment details table Display environment table | Filter output using the CLI Filtering feature <cr> ERX-310-41-e1-d1# show environment all Please wait. B not present srp redundancy: none slots: ok online: 0 1 2 line redundancy: none temperature: ok timing: primary primary: internal SC oscillator (ok) secondary: internal SC oscillator (ok) tertiary: internal SC oscillator (ok) auto-upgrade enabled system operational: yes processor temperature (10C . 0x0) fabric: 10 Gbps (rev. 84% full).Introduction to Juniper Network Routers .12 Juniper Networks. appending to previous contents > Redirect the output to a file. matches running config power: A ok. . rev. The display output also indicates that this E-series router does not have any backup settings or parameters configured. Introduction to the E-series Router CLI (Detailed) Lab 1 .70C) ----------33 28 36 IOA temperature status ----------normal normal normal slot ---0 1 2 processor temperature ranges below -5C is too cold above 80C is too hot low temperature warning below 10C high temperature warning above 70C IOA temperature ranges below -5C is too cold above 80C is too hot low temperature warning below 10C high temperature warning above 70C Question: What show command is used to view the configuration and system files currently configured to be used for the next system reboot? __________________________________________________________________ __________________________________________________________________ Answer: The show boot command indicates which system release and configuration file the E-series router will use at the next reboot. replacing previous contents >> Redirect the output to a file.. B not present AC power: A ok.. chassis: 3 slot (id 0x7. replacing previous contents &>> Display and redirect the output to a file. Therefore.the E-series primary: internal SC oscillator (ok) secondary: internal SC oscillator (ok) tertiary: internal SC oscillator (ok) auto-upgrade enabled system operational: yes ERX-310-41-e1-d1# show environment ? &> Display and redirect the output to a file.70C) ----------32 33 41 processor temperature status ----------normal normal normal IOA temperature (10C . this E-series router will always reboot using the system release and configuration file indicated. Inc. 0) fans: fanSubsystemOk nvs: ok (1006MB flash disk. disk0:basic_conf.. Inc. ERX-310-41-e1-d1#terminal width 85 ERX-310-41-e1-d1#dir Please wait. Introduction to the E-series Router CLI (Detailed) Lab 1 .txt ram:bulkstats2.the E-series ERX-310-41-e1-d1# show boot Please wait....13 .Introduction to Juniper Network Routers . .hty disk0:system. where ## is a number larger than 85.rel disk0:erx310_9-0-0.rel . unshared size.rel disk0:erx310_8-2-4. size.sts size --------0 16384 405184 567 160077342 182223038 194194435 3723 1207834 2701 unshared size --------date (UTC) ------------------02/26/2007 07:48:14 02/26/2007 07:48:14 02/21/2009 09:06:36 02/21/2009 09:00:32 04/22/2008 04:21:08 01/16/2009 09:22:54 02/02/2009 06:41:08 08/21/2007 09:29:50 02/09/2009 07:17:20 02/22/2009 02:08:12 in use --- 405184 567 142378264 182223038 194194435 3723 1207834 2701 ! Device -----disk0: ram: Disk capacity ------------Capacity Free (bytes) (bytes) -----------------1054900224 108065015 5777408 5741568 Reserved (bytes) -------68157440 0 Question: What does the exclamation point ( ! ) indicate? __________________________________________________________________ Juniper Networks. To have the file name. ERX-310-41-e1-d1# show timing timing: primary primary: internal SC oscillator (ok) secondary: internal SC oscillator (ok) tertiary: internal SC oscillator (ok) auto-upgrade enabled Part 6: File System Commands Note Be sure to use the CLI help features(question-mark contextsensitive help and tab completion) to help you determine the correct command to accomplish these tasks. date.scr disk0:ftpTest. and in-use columns all appear on a single line. you might need to increase the width of your terminal emulation software and use the CLI command terminal width ## .rel System Configuration: running-configuration Note: This system is not configured with backup settings.log disk0:erx310_7-2-4p0-5. System Release: erx310_9-0-0.. Question: What show command is used to determine the chassis timing configuration? __________________________________________________________________ __________________________________________________________________ Answer: The show timing command displays information about the source and status of the E-series chassis timing.1 Display the list of files on the flash card. file -------------------------disk0:/incoming <DIR> disk0:/outgoing <DIR> disk0:reboot. . Step 6. 1 Start by viewing the current configuration running on the E-series router.0 release-0. ERX-310-41-e1-d1# show configuration ! Configuration script being generated on SUN FEB 22 2009 02:35:18 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9. indicate what each extension means. Files containing scripts are denoted by the .14 Juniper Networks.cnf file. Step 6.mac extension. ERX-310-41-e1-d1# delete test_#.sts). __________________________________________________________________ __________________________________________________________________ Answer: The router uses the .scr extension.0.3 Delete the file test_#. bulk statistics (. Inc.. The other file types are for logs (.log). Part 7: Change Boot Configuration Settings and Reload the E-series Router In this part of the lab. The . Question: For each type of file listed. do not continue until they are at the same point in the lab.2 Save a copy of the running-configuration to a file on the flash card called test_#. and SSH server public keys (.rel extension is used for E-series software releases.cnf ERX-310-41-e1-d1# Stop and determine if your all peer router teams is at the same point in the lab.cnf..0 [BuildId 8976] (February 21.dmp).cnf Please wait. Introduction to the E-series Router CLI (Detailed) Lab 1 . you will reload the E-series router using an existing configuration file called IJNRelab1.hty extension. core dumps (.the E-series __________________________________________________________________ Answer: The exclamation point (!) indicates that the corresponding file is in use by the system.cnf. . The . 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.pub). Step 7. which means the file cannot be deleted. you can see that the E-series router software release (erx310_9-0-0. All rights reserved. ERX-310-41-e1-d1# copy running-configuration test_#. This configuration represents an E-series router using the factory-default configuration. while macros are stored in files with a . Inc. Question: What will happen if you repeat this command? __________________________________________________________________ __________________________________________________________________ Answer: Because you just created a file named test_#.cnf. the router prompts you to confirm your wanting to overwrite the existing test_#. The router keeps the reboot history in a file with a .Introduction to Juniper Network Routers .txt extension is used to indicate a plain text file. In this example. If it is not.cnf extension for binary configuration files.cnf from the flash disk. Step 6.rel) is in use. This lab introduces many troubleshooting techniques and commands and assumes that the provider virtual router team and the workstation virtual router team are working closely together. the E-series ! ! Commands displayed are limited to those available at privilege level 10 ! boot config running-configuration boot system erx310_9-0-0..15 . Introduction to the E-series Router CLI (Detailed) Lab 1 .. license ipsec-tunnels l0agskcs7wd6w6 log engineering log verbosity low no log severity * no log engineering log fields timestamp instance no-calling-task ! End of generated configuration script. Question: What option do you use to have the router display only a specified portion of the configuration (everything relating to physical layer protocols. for example)? __________________________________________________________________ __________________________________________________________________ Juniper Networks.2 Use the CLI help feature to answer the following questions about the show configuration command. Inc.rel no boot backup no boot subsystem no boot backup subsystem no boot force-backup service ctrl-x-reboot line console 0 line vty 0 4 ! ! traffic-class best-effort ! drop-profile default ! queue-profile default ! scheduler-profile default ! qos-shared-shaper-control ! statistics-profile default ! qos-profile atm-default ! qos-profile serial-default ! qos-profile ethernet-default ! qos-profile server-default ! qos-profile lag-default ! ! qos-port-type-profile ethernet qos-profile ethernet-default ! qos-port-type-profile atm qos-profile atm-default ! qos-port-type-profile serial qos-profile serial-default ! qos-port-type-profile server-port qos-profile server-default ! qos-port-type-profile lag qos-profile lag-default ! virtual-router default interface null 0 interface fastEthernet 0/0 no ip source-route .Introduction to Juniper Network Routers . Step 7. ERX-310-41-e1-d1# show boot Please wait.16 Juniper Networks. replacing previous contents &>> Display and redirect the output to a file. Question: What general CLI output-filtering commands can you use to filter the output of show configuration? (Hint: These are the commands that follow the pipe ( I ) character. Question: What option do you use to have the router display only the configuration for a specific virtual router? __________________________________________________________________ __________________________________________________________________ Answer: The virtual-router option to show configuration tells the router to print the current configuration for only the specified virtual router. replacing previous contents >> Redirect the output to a file. appending to previous contents category Display the configuration for a specific category exclude-category Exclude category from output include-defaults Include commands that set default values for various parameters interface Display the configuration for a specific interface virtual-router Display information pertaining to a specific virtual router | Filter output using the CLI Filtering feature <cr> ERX-310-41-e1-d1# show configuration | ? begin Display lines only after a line is found that includes the filtering text exclude Display only those lines that do not include the filtering text include Display only those lines that include the filtering text Step 7. System Release: erx310_9-0-0. Question: What option do you use to have the router display only the configuration for a specific interface? __________________________________________________________________ __________________________________________________________________ Answer: The interface option to show configuration tells the router to print the current configuration for only the specified interface.3 Determine the configuration file and system image the E-series router will use the next time it reloads.. . appending to previous contents > Redirect the output to a file.. include. including show configuration. Inc.the E-series Answer: The category option to show configuration allows you to filter the display so that the router prints only the portions of the configuration that are in the specified category. ERX-310-41-e1-d1# show configuration ? &> Display and redirect the output to a file.) __________________________________________________________________ __________________________________________________________________ Answer: You can use the begin.rel System Configuration: running-configuration Introduction to the E-series Router CLI (Detailed) Lab 1 . and exclude commands to filter the output from any show command.Introduction to Juniper Network Routers . End with ^Z. Question: Configuration filename: __________________________________________________________________ __________________________________________________________________ Answer: The configuration filename is running-configuration.4 From your terminal.the E-series Note: This system is not configured with backup settings.cnf file as its configuration file the next time it boots and that it will only use this file for the next boot.. Step 7. enter Global Configuration mode.rel System Configuration: IJNRe-labl.. Inc. rel. Question: System release filename: __________________________________________________________________ __________________________________________________________________ Answer: The system release filename is erx 7-3-0 . one per line.5 Exit Global Configuration mode and verify that the E-series router will boot using the IJNRe-lab1. ERX-310-41-e1-d1# exit ERX-310-41-e1-d1# show boot Please wait. On subsequent boots.cnf as its configuration file only the next time it boots. This command merely changes the configuration file that will be used for the next boot.17 . System Release: erx310_9-0-0.cnf once Note: This system is not configured with backup settings. the router will revert to using the default configuration file (running-configuration in Automatic Commit mode). Question: What keyword tells you this file will only be used for the next boot? __________________________________________________________________ __________________________________________________________________ Answer: The once keyword specified that this configuration file will only be used for the next boot. Step 7. ERX-310-41-e1-d1(config)# boot config IJNRe-labl. Juniper Networks. Introduction to the E-series Router CLI (Detailed) Lab 1 .Introduction to Juniper Network Routers . ERX-310-41-e1-d1# configure terminal Enter configuration commands.cnf once Question: Does this command cause the E-series router to reboot? __________________________________________________________________ __________________________________________________________________ Answer: No. Change the boot configuration to use the file IJNRe-lab1. 168. Administrative status is Up Hardware is Intel 21440. Unicast 6 Multicast 0..109. Part 8: Review E-series System Operational Status and Configuration Settings Use the network topology diagram and context-sensitive help to complete the following tasks.255.7 While your router is booting. NOTE: Restoring System Configuration from file IJNRe-labl. For example.#.cnf SRP is running in slot 1 Logged in on console O. Inc. E-310> show interfaces fastEthernet 1/2 FastEthernet1/2 is Up..1/32 FastEthernet0/0 192.the E-series Step 7.Bypassing Boot Power-On Self-Tests (BPOST) BPOST1 . if you are working on erx3. Step 8.18 Juniper Networks.# 10. 0 auto-booting.1. 0 packets/sec In: Bytes 986. Symbol Errors 0 Out: Bytes 986. Mac Errors 0.255. please wait.158.20.1a41. Too Longs 0.168. Broadcast 4 Errors 0. Inc.1/32 Status ---------up up up up up Protocol ----------up up up up up Description --------------- erx-srp atm-to-vr_# enet-to-vr_# Step 8. boot device : local: unit number : 0 processor number : 0 inet on ethernet (e) : 1.exe.#. address is 0090. Unicast 5 Multicast 0. the default router's SRP management IP address is 192.1 Have the router display a short listing of all currently configured IP interfaces and their operational state. You can obtain the interface name from the previous step.1/32 FastEthernet1/2.. E-310> Step 7.168.158/24 ATM2/0. Perform a sync before reloading? [confirm]y Reload operation commencing. Discards 0. Notice that the SRP management port IP address is missing the host address.1 flags (f) : 0x26000000 other (0) : local:/ Loading local:/images/srp/srp42d40134.1#0 10.. Administrative 1518 Duplex Mode: Operational Full Duplex.#..6 Reload the E-series router. Proceed with reload? [confirm]y WARNING: The Standby SRP may not be in sync with this SRP. . Alignment 0 CRC 0. Administrative Auto Negotiate Speed: Operational 100 Mbps.dfa8 MAU is 100BASE-TX MTU: Operational 1518. BPOSTO . review the network topology diagram for Lab 1. 0 packets/sec 5 minute output rate 0 bits/sec.------------------null0 255.255/32 Loopback# 192..1.10. All rights reserved. 219002560 (from 55437395) Starting at Ox100000.. E-310> show ip interface brief Interface IP-Address -------------------.109. Fill in the correct host address for this interfaces based on your router number. ERX-310-41-e1-d1# reload WARNING: This command will cause the system to reboot. Broadcast 3 Introduction to the E-series Router CLI (Detailed) Lab 1 .Bypassing Boot Power-On Self-Tests (BPOST) 6128 Symbols loaded. Administrative Auto Negotiate No baseline has been set 5 minute input rate 0 bits/sec.2 Determine if the E-series router is transmitting or receiving frames on the Fast Ethernet interface connected to virtual router vr_#. Copyright (c) 1999-2006 Juniper Networks.Introduction to Juniper Network Routers .. bound to ethernet FastEthernet1/2 Queue length 0 bytes Forwarded packets 5. Discards 0. bytes 168 Dropped committed packets 0. Bytes 0 Out Scheduler Dropped Packets 0. Deferred 0.1/255. Introduction to the E-series Router CLI (Detailed) Lab 1 . bytes 0 Step 8. Late 0. bytes 0 queue 1: traffic class control. bound to FastEthernet1/2 Queue length 0 bytes Forwarded packets 4.255 Operational MTU = 1500 Administrative MTU = 0 Operational speed = 100000000 Administrative speed = 0 Discontinuity Time = 14606 Router advertisement = disabled Proxy Arp = enabled Network Address Translation is disabled TCP MSS Adjustment = disabled Administrative debounce-time = disabled Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed Auto Configure = disabled Auto Detect = disabled Inactivity Timer = disabled Use Framed Routes = disabled Warm-restart initial-sequence-preference: Operational = 0 Administrative = 0 In Received Packets 5. Bytes 0 In Error Packets 0 In Invalid Source Address Packets 0 In Discarded Packets 0 Out Forwarded Packets 5. E-310> show interfaces fastEthernet 1/2 FastEthernet1/2 line protocol Ethernet is up. Bytes 0 Out Discarded Packets 0 Administrative qos-shaping-mode: none Operational qos-shaping-mode: none queue 0: traffic class best-effort. bytes 0 Dropped conformed packets 0. No Carrier 0 Collisions: Single 0. Bytes 640 Unicast Packets 5. bytes 0 Dropped exceeded packets 0. bound to ethernet FastEthernet1/2 Queue length 0 bytes Forwarded packets 0. bytes 0 Dropped committed packets 0. Multiple 0. ip is up Description: enet-to-vr_# Network Protocols: IP Internet address is 10.the E-series Errors 0. Mac Errors 0.255. Bytes 640 Multicast Routed Packets 0. Bytes 640 Multicast Packets 0.255. Inc.3 Determine if the router is sending or receiving IP packets on the same Fast Ethernet interface connected to vr_#. bytes 0 Dropped exceeded packets 0. Discards 0 Administrative qos-shaping-mode: none Operational qos-shaping-mode: none queue 0: traffic class best-effort. ARP responses 1 Errors 0. bytes 0 Juniper Networks. Excessive 0 Policed Statistics: In: 0. Out: 0 ARP Statistics: In: ARP requests 4.19 .255. ARP responses 0 Errors 0. bytes 0 Dropped conformed packets 0.255. Bytes 0 Out Policed Packets 0.Introduction to Juniper Network Routers .0 Broadcast address is 255. bytes 0 Dropped conformed packets 0. bytes 730 Dropped committed packets 0. Bytes 0 In Policed Packets 0. Bytes 640 Unicast Packets 5. Discards 0 Out: ARP requests 3.20.#. #.0 Broadcast address is 255.20.20 Juniper Networks. Bytes 13440 Multicast Packets 0. Bytes 0 Out Scheduler Dropped Packets 0. Bytes 0 Out Discarded Packets 0 Administrative qos-shaping-mode: none Operational qos-shaping-mode: none queue 0: traffic class best-effort. bytes 0 Dropped exceeded packets 0. timeout = 2 sec. bytes 15330 Dropped committed packets 0. E-310> show interfaces fastEthernet 1/2 FastEthernet1/2 line protocol Ethernet is up.255.4 Verify network connectivity by sending 100 ping packets to the IP address of the Fast Ethernet interface in vr_#. Bytes 0 In Error Packets 0 In Invalid Source Address Packets 0 In Discarded Packets 0 Out Forwarded Packets 106. bound to ethernet FastEthernet1/2 Queue length 0 bytes Forwarded packets 105.1/255. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Success rate = 100% (100/100).6 Determine the operational status of all SONET controllers on the router.2.2 100 Sending 100 ICMP echoes to 10.Introduction to Juniper Network Routers . bytes 0 Step 8.2. 10. Bytes 13592 Unicast Packets 106.#.20. bytes 0 Step 8. ip is up Description: enet-to-vr_# Network Protocols: IP Internet address is 10.#. bytes 0 Dropped conformed packets 0. E-310> ping 10. . Bytes 13440 Unicast Packets 105. Inc.20.the E-series Dropped exceeded packets 0.255. Bytes 0 In Policed Packets 0.255. examine the Fast Ethernet's IP interface statistics again to verify that the router sent and received the ping packets. round-trip min/avg/max = 3/3/38 ms Step 8.255 Operational MTU = 1500 Administrative MTU = 0 Operational speed = 100000000 Administrative speed = 0 Discontinuity Time = 14606 Router advertisement = disabled Proxy Arp = enabled Network Address Translation is disabled TCP MSS Adjustment = disabled Administrative debounce-time = disabled Operational debounce-time = disabled Access routing = disabled Multipath mode = hashed Auto Configure = disabled Auto Detect = disabled Inactivity Timer = disabled Use Framed Routes = disabled Warm-restart initial-sequence-preference: Operational = 0 Administrative = 0 In Received Packets 105. Bytes 0 Out Policed Packets 0.255.20. Bytes 13592 Multicast Routed Packets 0. E-310> show controllers sonet Interfaces 2/0 (non channelized) 2/1 (non channelized) ifAdminStatus up up OperationalStatus up up oc3 oc3 Introduction to the E-series Router CLI (Detailed) Lab 1 .5 Using the Up Arrow key.#. #. e. Step 8.VRF.7 View the router's IP routing table.168.route type inter.20.8 Verify that you can ping the IP address of vr_#'s loopback0 interface. *.21 . E.10.1/32 192. timeout = 2 sec.158 10. the operational status is up for both SONET controllers used for ATM connections.route type intra.##.#. Juniper Networks.0/24 10. I2.external type 1.2 Dst/Met ---------0/0 0/0 0/0 0/0 1/0 1/0 Interface ---------------------------------------ATM2/0.168. All rights reserved.1. E-310> enable E-310# show configuration ! Configuration script being generated on SUN FEB 22 2009 02:35:18 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9. IA.metric type internal.1#0 FastEthernet1/2.#.0/24 Type --------Connect Connect Connect Connect Static Next Hop --------------10.##.MPLS label. I. Inc.0 release-0.ISIS level2.9 View the current configuration. Inc.the E-series Question: What status is currently displayed on your router for the SONET controllers used for the ATM connections? __________________________________________________________________ __________________________________________________________________ Answer: In the above example.168.168. round-trip min/avg/max = 4/4/4 ms Step 8. Question: What CLI mode must you access to view the configuration? __________________________________________________________________ __________________________________________________________________ Answer: You must be in Privileged Exec mode to view the configuration.20. Step 8.10.##.#.route type external.168.0.109.NSSA external type1.ISIS level 1.1 Sending 5 ICMP echoes to 192. O.# Question: Is there a route to vrl's loopback0 address? If so.0/24 192.10. P.168. N1.metric type external.OSPF. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.via indirect next-hop Prefix/Length -----------------10.external type2.1 10. i.#. V.# loopback# ATM2/0. N2. E-310> ping 192. Introduction to the E-series Router CLI (Detailed) Lab 1 . E-310> show ip route Protocol/Route type codes: I1.1 192.168. !!!!! Success rate = 100% (5/5). what type of route is it? __________________________________________________________________ __________________________________________________________________ Answer: There are two static routes to vrl's loopback0 address.109.NSSA external type2 L.0/24 192.Introduction to Juniper Network Routers .20. E2.#.2 10.1#0 FastEthernet0/0 FastEthernet1/2.1 192.periodic download. E1.#.#.0 [BuildId 8976] (February 21. 20.255.255.#.1 255.1 255. Inc.255.255.0 ! interface atm 2/1.22 Juniper Networks.the E-series ! ! Commands displayed are limited to those available at privilege level 10 ! boot config running-configuration boot system erx310_9-0-0.109.255.0 ! interface fastEthernet 1/3 Introduction to the E-series Router CLI (Detailed) Lab 1 .158 255.rel no boot backup no boot subsystem no boot backup subsystem no boot force-backup hostname "E-310" service ctrl-x-reboot line console 0 line vty 0 4 ! ! traffic-class best-effort ! drop-profile default ! queue-profile default ! scheduler-profile default ! qos-shared-shaper-control ! statistics-profile default ! qos-profile atm-default ! qos-profile serial-default ! qos-profile ethernet-default ! qos-profile server-default ! qos-profile lag-default ! ! qos-port-type-profile ethernet qos-profile ethernet-default ! qos-port-type-profile atm qos-profile atm-default ! qos-port-type-profile serial qos-profile serial-default ! qos-port-type-profile server-port qos-profile server-default ! qos-port-type-profile lag qos-profile lag-default ! virtual-router default interface null 0 interface loopback # ip address 192.1#0 point-to-point atm pvc 1#0 0 1#0 aal5snap 0 0 0 interface fastEthernet 0/0 ip description erx3-srp ip address 192.10.168.2.255.0 interface fastEthernet 1/2 mtu 1522 encapsulation vlan ! interface fastEthernet 1/2.168. .255.# ip description enet-to-vr_# vlan id # ip address 10.1 255.255.255 interface atm 2/0 atm clock internal chassis interface atm 2/0.#.1#0 point-to-point atm pvc 1#0 0 1#0 aal5snap 0 0 0 ip description atm-to-vr_# ip address 10.Introduction to Juniper Network Routers . 168.255.255. All rights reserved.2 255. Question: Does this display include default configuration settings? If not. E-310# show configuration category interfaces ! Configuration script being generated on SUN FEB 22 2009 05:12:04 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9.255.##.20.255. Inc.0 interface fastEthernet 1/3.0 [BuildId 8976] (February 21.255.10.0 ip route 192.# vlan id # . Introduction to the E-series Router CLI (Detailed) Lab 1 .255.168. . ip route 192.0 255.1 .1 255.1 ip route 192.#. .255.#.23 .#.#. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.##. Step 8.0 release-0.0. Inc.168.2 license ipsec-tunnels l0agskcs7wd6w6 ! ! ================================================================================================== virtual-router vr_# aaa authentication atm1483 default radius aaa accounting atm1483 default radius aaa authentication ip default radius aaa accounting ip default radius aaa authentication ipsec default radius aaa accounting ipsec default radius aaa authentication ppp default radius aaa accounting ppp default radius ! ip address-pool local aaa authentication radius-relay default radius aaa accounting radius-relay default radius aaa authentication tunnel default radius aaa accounting tunnel default radius interface null 0 interface loopback 0 ip address 192.0 10.10.255 interface atm 6/1.the E-series mtu 1522 encapsulation vlan ! interface fastEthernet 1/3.2 255. .255.10 View the router's interface configuration. .0 255. how can you have the router display both the default and nondefault configuration? __________________________________________________________________ __________________________________________________________________ Answer: No.255.# ip description enet-to-default ip address 10.Introduction to Juniper Network Routers .#.255.20.0 255.20.255. no ip source-route log engineering log verbosity low no log severity * no log engineering log fields timestamp instance no-calling-task ! End of generated configuration script.#.1#0 ip description atm-to-default ip address 10. you can add the include-defaults option.To display both the default and nondefault configuration.##.0 10.10.168.255.2 ip route 192. show configuration does not cause the router to include most default settings.0 255.0 10.#.0 10.255.255. ! ! Commands displayed are limited to those available at privilege level 10 ! Juniper Networks.#.168. .1 255.#.255 interface atm 6/1.255 interface atm 2/0 atm clock internal chassis interface atm 2/0.0 Step 8. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.0.168.1#0 ip description atm-to-default ip address 10.1#0 point-to-point atm pvc 1#0 0 1#0 aal5snap 0 0 0 interface fastEthernet 0/0 ip description erx3-srp ip address 192. E-310# show configuration interface fastEthernet 0/0 ! Configuration script being generated on SUN FEB 22 2009 04:57:53 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9.255.255. ! The category displayed is: interfaces ! virtual-router default interface null 0 interface loopback # ip address 192.20.0 ! interface atm 2/1. Introduction to the E-series Router CLI (Detailed) Lab 1 .10.0 ! interface fastEthernet 1/3 mtu 1522 encapsulation vlan ! interface fastEthernet 1/3.11 View the configuration for only the SRP's Fast Ethernet interface.# ip description enet-to-default ip address 10.#.255.Introduction to Juniper Network Routers .2 255.255.158 255.255.2.1 255.168.255.255.255. ! ================================================================================================== ! virtual-router vr_# interface null 0 interface loopback 0 ip address 192.10.0 [BuildId 8976] (February 21. Inc.168. Inc.the E-series ! NOTE: This script represents only a subset of the full system configuration.158 255.255.. All rights reserved.255.#.0 interface fastEthernet 1/3.255.1 255.# vlan id # . interface fastEthernet 0/0 ip description erx-srp ip address 192.0 Tell your instructor that you have completed Lab 1.255.255.# ip description enet-to-vr_# vlan id # ip address 10.109.2 255.0 interface fastEthernet 1/2 mtu 1522 encapsulation vlan ! interface fastEthernet 1/2.168.##.255.0 release-0.1#0 point-to-point atm pvc 1#0 0 1#0 aal5snap 0 0 0 ip description atm-to-vr_# ip address 10.#.255.24 Juniper Networks.109.255.20..1 255. ! ! Commands displayed are limited to those available at privilege level 10 ! ! NOTE: This script represents only a subset of the full system configuration. secondary. and tertiary chassis timing sources Copy files to flash memory Set the system date and time Configure an entry in the host table on the E-series router Copy a backup of the E-series router's configuration to a FTP server and copy a file from the FTP server to the E-series router Create a virtual router Customize the banner and send messages to users (optional) Juniper Networks. you will perform the following tasks: • • • • • • • • • • • Restore the factory-default configuration Configure IP parameters on the SRP's Fast Ethernet interface Configure IP parameters on a loopback interface Configure the hostname and Telnet server Configure primary.1 . Inc. It is available in two formats: a high-level format that is designed to make you think through each step and a detailed format that offers step-by-step instructions complete with sample output from most commands. By completing this lab.Lab 2 E-series Router Configuration Basics (Detailed) Overview This lab introduces basic E-series router configuration commands. E-series Router Configuration Basics (Detailed) Lab 2 . 0/24 .#.##.#.109.168.1 SRP Fa 0/0 10.220 Note : # = Group number E-series Router Configuration Basics (Detailed) Lab 2 .168.0/24 .1 OC3 slot 2/1 10.1/32 U Virtual Router: vr_# Lo# : 192.2 Juniper Networks.20.168.109. Inc.2 U VCD 1#0.2 192.the E-series Key User and Privileged Exec Mode Commands Key User and Privileged Exec mode commands used in this lab include the following: clear line clock set configure copy enable exit ping reload send show configuration show hosts show ip interface brief show ip route show timing show users show virtual-router telnet Our Example Physical Topology Default Router Lo# : 192. VCI 1#0 Fa Fa slot 1/3 slot 1/2 Ethernet VLAN ID : # .10.168.#. .158 / 24 FTP Server 192.1/32 OC3 slot 2/0 . VPI 0.Introduction to Juniper Network Routers . Proceed with 'boot config factory-defaults'? [confirm]y ERX310(config)# exit ERX310# reload WARNING: This command will cause the system to reboot. E-310(config)# End with ^Z. Part 2: Configure IP Parameters on the SRP's Fast Ethernet Interface Note Use the information on the topology diagrams and the Question Mark (?) key to assist you in performing the following steps. BPOSTO .. please wait. if you are working on group 3.3 While your router is booting. ERX-310-41-e1-d1> Step 1.. Step 2. Step 1. Fill in the correct host address for these interfaces based on your group number..0 [BuildId 8976] (February 21. 0 auto-booting. one per line.exe.2 Configure the E-series router to boot using the factory-default configuration file. ERX310(config)# boot config factory-defaults WARNING: Execution of this command will cause all configuration settings to revert to factory defaults upon the next system reboot. Inc. ! ! Commands displayed are limited to those available at privilege level 10 ! ! NOTE: This script represents only a subset of the full system configuration. review the network topology diagram for Lab 2.168. For example.. Inc.. ERX-310-41-e1-d1> enable ERX-310-41-e1-d1# show configuration interface fastEthernet 0/0 ! Configuration script being generated on SUN FEB 22 2009 05:35:16 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9. boot device : local: unit number : 0 processor number : 0 inet on ethernet (e) : 1. Juniper Networks. All rights reserved.0. All rights reserved. and use the reload command to reboot the router.Introduction to Juniper Network Routers .1.0 release-0.. Inc.3 . verify the boot configuration. NOTE: Reverting System Configuration to factory defaults. Copyright (c) 1999-2006 Juniper Networks.33. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks. E-310# configure terminal Enter configuration commands.1 Enter Global Configuration mode on the E-series router..Bypassing Boot Power-On Self-Tests (BPOST) BPOST1 . SRP is running in slot 1 Logged in on console O.1.1. the virtual router's loopback 0 IP address is 192.Bypassing Boot Power-On Self-Tests (BPOST) 6128 Symbols loaded.. E-series Router Configuration Basics (Detailed) Lab 2 . Notice that the loopback interfaces and the SRP management port IP addresses are missing host addresses. Proceed with reload? [confirm]y Reload operation commencing.1 flags (f) : 0x26000000 other (o) : local:/ Loading local:/images/srp/srp42d40134.the E-series Part 1: Restore the Factory-Default Configuration Step 1. 219002560 (from 55437395) Starting at 0x100000.1 Enter Privileged Exec mode and review the current configuration of the SRP's Fast Ethernet interface. 0 [BuildId 8976] (February 21.4 Return to Privileged Exec mode. ERX-310-41-e1-d1# configure terminal Enter configuration commands.255.255.168. enter Interface Configuration mode and configure the Fast Ethernet interface on the SRP using the IP address and subnet mask indicated on the topology diagram. one per line. the # represents your assigned router number.109. enter Interface Configuration mode and configure the loopback 0 interface using the IP address and subnet mask shown on the network topology diagram.168.109.220. round-trip min/avg/max = 0/0/1 ms Part 3: Configure IP Parameters on a Loopback Interface Step 3. and then verify that you can ping the FTP server indicated on the topology diagrams.0 Step 2. For the host IP address. ERX-310-41-e1-d1(config-if)# end ERX-310-41-e1-d1# show configuration interface fastEthernet 0/0 ! Configuration script being generated on SUN FEB 22 2009 05:35:16 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9. Then. interface fastEthernet 0/0 ip description erx-srp ip address 192. Use a description of erx#-srp.Introduction to Juniper Network Routers .0 release-0. Inc.255. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.168.#. one per line. !!!!! Success rate = 100% (5/5). review your configuration for accuracy. the # represents your assigned router number. End with ^Z.0.158 255. timeout = 2 sec. ERX-310-41-e1-d1(config)# interface fastEthernet 0/0 ERX-310-41-e1-d1(config-if)# ip address 192. Note If you are unable to ping the FTP server indicated on diagram.0 ERX-310-41-e1-d1# ping 192.168. ERX-310-41-e1-d1(config)# interface loopback # ERX-310-41-e1-d1(config-if)# ip address 192. ERX-310-41-e1-d1(config)# run show configuration interface loopback # ! Configuration script being generated on SUN FEB 22 2009 05:57:40 UTC ! Juniper Edge Routing Switch ERX-310 E-series Router Configuration Basics (Detailed) Lab 2 .4 Juniper Networks. Then. ! ! Commands displayed are limited to those available at privilege level 10 ! ! NOTE: This script represents only a subset of the full system configuration.the E-series interface fastEthernet 0/0 Step 2. where # represents your assigned router number.158 255.109. .109. ERX-310-41-e1-d1# configure terminal Enter configuration commands.2 Enter Global Configuration mode. Configure the subnet mask using the prefixlength notation.255.168. End with ^Z. For the host IP address. Inc.2 Without leaving Interface Configuration mode. ERX-310-41-e1-d1(config-if)# ip description erx-srp Step 2. All rights reserved.1 Enter Global Configuration mode.1/32 Step 3.220 Sending 5 ICMP echoes to 192. please notify your instructor.3 Configure an IP description for the SRP's Fast Ethernet interface. review the configuration for accuracy. Introduction to Juniper Network Routers . Juniper Networks. where the <model number> is your router model number..168. Inc. Context-sensitive help and command completion are also available when using the run or the do command.#. Step 4. did the router display the subnet mask using the prefixlength notation? __________________________________________________________________ __________________________________________________________________ Answer: No.the E-series ! Version: 9.1 255. Inc.255. E-series Router Configuration Basics (Detailed) Lab 2 . Step 3. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks. Question: In the configuration.255 Question: How did you execute a Privileged Exec mode command without exiting Interface Configuration mode? __________________________________________________________________ __________________________________________________________________ Answer: You can run any User Exec or Privileged Exec mode command within any configuration mode by prefacing it with the run or the do command.255. ! ! Commands displayed are limited to those available at privilege level 10 ! ! NOTE: This script represents only a subset of the full system configuration. E-310(config)# line vty 0 29 E-310(config-line)# password j-protek Please wait.. It converted the prefix-length notation to dotted-decimal notation.2 Enter Line Configuration mode to configure all 30 possible virtual lines using the line vty x y command.0 [BuildId 8976] (February 21.0 release-0. interface loopback # ip address 192. Configure a password of j-protek on these lines.3 Exit Interface Configuration mode.5 . All rights reserved.1 Configure the hostname as E-<model number>.0. ERX-310-41-e1-d1(config-if)# exit ERX-310-41-e1-d1(config)# Part 4: Configure the Hostname and Telnet Service Step 4. ERX-310-41-e1-d1(config)#hostname E-310 E-310(config)# Question: What happens to the prompt? __________________________________________________________________ __________________________________________________________________ Answer: The hostname portion of the prompt changes from the MAC address of the SRP's Fast Ethernet interface to the hostname you just configured. 0 .255.0 release-0.3 Return to Privileged Exec mode and view the configuration to confirm the accuracy of your changes.:HdiyL*7:y1Gj ! traffic-class best-effort ! drop-profile default ! queue-profile default ! scheduler-profile default ! qos-shared-shaper-control ! statistics-profile default ! qos-profile atm-default ! qos-profile serial-default ! qos-profile ethernet-default ! qos-profile server-default ! qos-profile lag-default ! qos-port-type-profile ethernet qos-profile ethernet-default ! qos-port-type-profile atm qos-profile atm-default ! qos-port-type-profile serial qos-profile serial-default ! qos-port-type-profile server-port qos-profile server-default ! qos-port-type-profile lag qos-profile lag-default ! virtual-router default interface null 0 interface loopback # ip address 192.255. .168. ! ! Commands displayed are limited to those available at privilege level 10 ! boot config running-configuration boot system erx310_9-0-0. Inc.#.255.0 [BuildId 8976] (February 21. E-310(config-line)# end E-310# show configuration ! Configuration script being generated on SUN FEB 22 2009 02:35:18 UTC ! Juniper Edge Routing Switch ERX-310 ! Version: 9. Inc.6 Juniper Networks.rel no boot backup no boot subsystem no boot backup subsystem no boot force-backup hostname "E-310" service ctrl-x-reboot controller sonet 2/0 controller sonet 2/1 line console 0 line vty 0 29 password 5 ''(B=R.158 255. All rights reserved.0.Introduction to Juniper Network Routers . .109. .255. 2008 15:01) ! Copyright (c) 1999-2008 Juniper Networks.168.255 interface fastEthernet 0/0 ip description erx3-srp ip address 192. no ip source-route log engineering log verbosity low no log severity * no log engineering E-series Router Configuration Basics (Detailed) Lab 2 .the E-series E-310(config-line)# Step 4.1 255. 168. Question: How are the users connected to the E-series router? __________________________________________________________________ __________________________________________________________________ Answer: In this example.8. idle time -------21:44:24 connected since ---------------02/21/2009 08:30 02/22/2009 03:45 Question: How many users are currently logged in to the E-series router? __________________________________________________________________ __________________________________________________________________ Answer: In this example. E-310> show users line connected number line name user from ---------------------------------0 console 0 console 1* vty 0 (telnet) 192.1 Note: '*' indicates current user. All these times are given in a 24-hour clock (for example. Question: How long have the users been connected? __________________________________________________________________ __________________________________________________________________ Answer: In this example. All rights reserved. Copyright (c) 1999-2006 Juniper Networks. one user is attached to the E-series router via the console and another is attached through a Telnet session.168. 19:30 would be 7:30 PM).#. Inc.3.#. Juniper Networks. the password is encrypted to prevent its disclosure. Question: Is the password displayed in clear-text when you have the router print its configuration? __________________________________________________________________ __________________________________________________________________ Answer: No. which was originated from 192.168. E-310# telnet 192. Inc. E-310> Step 4. two users are currently logged in to the E-series router.7 .4 From your router. establish a Telnet session to your E-series router's loopback interface to verify Telnet functionality.5 Enter Privileged Exec mode on this Telnet session and determine which users are currently logged in to the E-series router.the E-series log fields timestamp instance no-calling-task ! End of generated configuration script. the console session was started at 02/21/2009 08:30 and the user connected through a Telnet session at 02/22/2009 03:45.Introduction to Juniper Network Routers . Step 4.1 Telnet password: ********** Logged in on vty 0 via telnet. E-series Router Configuration Basics (Detailed) Lab 2 . Inc.7 Disconnect your Telnet session using the exit command. Secondary. The clear line n command can be used to close another connection. Question: What is the current secondary chassis timing source? __________________________________________________________________ __________________________________________________________________ Answer: In this example. E-310# exit Logging out.the E-series Step 4.Introduction to Juniper Network Routers . Question: What is the current tertiary chassis timing source? __________________________________________________________________ __________________________________________________________________ E-series Router Configuration Basics (Detailed) Lab 2 . E-310# Part 5: Configuring Primary.1 Before making any configuration changes. the current primary timing source is the E-series router's internal system controller oscillator. You cannot use the command to end your own connection.8 Juniper Networks. Step 4. and Tertiary Chassis Timing Sources Step 5. . first document the default factory settings for the E-series chassis timing sources: E-310# show timing timing: primary primary: internal SC oscillator (ok) secondary: internal SC oscillator (ok) tertiary: internal SC oscillator (ok) auto-upgrade enabled Question: What is the current primary chassis timing source? __________________________________________________________________ __________________________________________________________________ Answer: In this example. E-310> enable Password: ******** E-310# clear line 1 Cannot kill your own session Question: Were you able to clear your own Telnet session? __________________________________________________________________ __________________________________________________________________ Answer: No. the current secondary timing source is the E-series router's internal system controller oscillator.6 Try to end your Telnet session using the clear line n command. E-310(config)# run show timing timing: tertiary (failover from primary) primary: external SC T1 (A) (ERROR) secondary: external SC T1 (B) (ERROR) tertiary: internal SC oscillator (ok) auto-upgrade enabled Question: What is the current primary chassis timing source? __________________________________________________________________ __________________________________________________________________ Answer: The primary timing source is now the external BITS clock attached to T1 port A on the E-series router's system controller I/O module. E-310(config)# timing source secondary line t1:b Step 5. As a result. Question: What timing source is the E-series chassis currently using? __________________________________________________________________ __________________________________________________________________ Answer: In this example. Question: What is the current secondary chassis timing source? __________________________________________________________________ Juniper Networks. E-series Router Configuration Basics (Detailed) Lab 2 . the current tertiary timing source is the E-series router's internal system controller oscillator. we do not have a BITS clock connected to T1 port A or port B.Introduction to Juniper Network Routers . Step 5. E-310(config)# timing source tertiary internal Step 5. End with "Z.3 Configure the E-series router's secondary chassis timing source to be the external BITS clock connected to T1 port B on the SRP. and the timing sources will not be used.the E-series Answer: In this example.4 Configure the E-series router's tertiary chassis timing source to be internal.2 Configure the E-series router's primary chassis timing source to be the external BITS clock connected to T1 port A on the SRP. Note In our lab environment. E-310(config)# timing source primary line t1:a Step 5.5 Within Global Configuration mode. E-310# configure terminal Enter configuration commands. analyze the current chassis timing status to answer the questions that follow. these timing sources will display an ERROR condition.9 . one per line. Inc. the E-series router is using its primary timing source. Introduction to Juniper Network Routers . would the router use it or would it continue to use the tertiary source? __________________________________________________________________ __________________________________________________________________ Answer: Because the output shows that the auto-upgrade feature is enabled. E-310(config)# ^Z E-310# copy running-configuration start_#.1 Before making any configuration changes. Inc.the E-series __________________________________________________________________ Answer: The secondary timing source is now the external BITS clock attached to T1 port B on the E-series router's system controller I/O module. Question: What timing source is the E-series chassis currently using? __________________________________________________________________ __________________________________________________________________ Answer: The E-series router is using its tertiary timing source due to the failure of its primary and secondary sources. E-310# show clock TUE SEP 26 2006 13:24:34 UTC E-310# Question: What is the current date and time on your E-series router? __________________________________________________________________ __________________________________________________________________ E-series Router Configuration Basics (Detailed) Lab 2 . determine the current system date and time.cnf Destination file exists..10 Juniper Networks. Question: If the primary source became functional.1 Copy the running-configuration to a file on the flash called start_#. E-310# Part 7: Set the System Date and Time Step 7. proceed with copy? [confirm] y Please wait. the Eseries router would use a more preferred timing source if it became available. Question: What is the current tertiary chassis timing source? __________________________________________________________________ __________________________________________________________________ Answer: The current tertiary timing source is the E-series router's internal system controller oscillator.cnf.. . Other courses' labs might use this saved configuration file as a starting point so report any errors or problems to your instructor. Part 6: Copying Files to Flash Memory Step 6. E-310(config)# host ftp-host 192.Introduction to Juniper Network Routers . one per line. you must define an entry for that host in the host table. 2006.109. E-series Router Configuration Basics (Detailed) Lab 2 . you use the host command to bind a locally defined symbolic name to an IP address.13.55.220 Sending 5 ICMP echoes to 10.4 Verify that the FTP server is correctly listed in the host table. E-310# ping 192.7. and verify the results.1 Determine if there are any entries in the host table. timeout = 2 sec. September 26. round-trip min/avg/max = 0/0/1 ms Step 8. E-310(config)# run show hosts Static Host Table ----------------name ip address type ------------------------NFS Host Table -------------name userid groupid --------------- Step 8.168.220 ftp NFS Host Table -------------name userid groupid --------------- Juniper Networks.220 ftp Step 8. Inc.2 Set the E-series router's time and date (taking into account time zones). E-310# configure terminal Enter configuration commands.2 Examine the topology diagrams and obtain the IP address of the FTP server. it is 13:24:34 Coordinated Universal Time (UTC) on Tuesday. E-310(config)# run show hosts Static Host Table ----------------name ip address type ------------------------ftp-host 192.109. In the case of file servers. Step 8. Step 7. !!!!! Success rate = 100% (5/5).168. If no FTP username and password are configured. Verify that you can ping the FTP server from your E-series router.the E-series Answer: In this example. E-310# clock set 13:25:00 26 September 2006 E-310# show clock TUE SEP 26 2006 13:26:02 UTC Part 8: Configure an Entry in the Host Table To transfer files to or from a remote file server.3 Enter Global Configuration mode using your terminal and configure a static host entry for the FTP server using the hostname ftp-host. and (optionally) FTP account parameters. the protocol which will be used to access that IP address.109.168. End with ^Z. Do not configure an FTP username and password.11 . the router uses a username of anonymous and a null password when contacting this FTP server. cnf backup_#. timeout = 2 sec. .12 Juniper Networks.cnf on the router's flash card. E-310# Question: Did the copy operation succeed? __________________________________________________________________ __________________________________________________________________ Answer: The copy operation succeeded. !!!!! Success rate = 100% (5/5). round-trip min/avg/max = 0/0/1 ms Question: Did this work? Without DNS. If the copy command were to fail.cnf Please wait. Part 9: Transfer Files Between the E-series Router and an FTP Server It is useful to be able to transfer files between the E-series Router and an FTP server.109.5 Try to ping the FTP server using the name you defined in the host table. proceed with copy? [confirm] y Please wait. Step 9.1 Copy the running-configuration to the FTP server.220. E-310# E-series Router Configuration Basics (Detailed) Lab 2 . where the # is your group number.2 Now.. You will practice doing that in this lab part. E-310(config)# run ping ftp-host Resolving "ftp-host" Sending 5 ICMP echoes to 192... One important use for this is backing up E-series router configuration files to an FTP server and retrieving and restoring configuration files from backups stored on an FTP server.168.cnf. E-310(config)#end E-310# copy running-configuration ftp-host:erx-backup_#. Inc.the E-series Step 8. If you want to load this configuration on the router. reverse the operation by copying the file erx-backup_#.Introduction to Juniper Network Routers . it should work. E-310# copy ftp-host:erx-backup_#. you would receive an error message. you can set the router to boot once using this configuration file and reload the router. Name the file erx-backup_#. The router used the entry you just defined in the host table to resolve the IP address for that name. Step 9.cnf from the FTP server back to your Eseries router.. naming it backup_#.cnf Destination file exists. how was the router able to determine the IP address of the name you entered? __________________________________________________________________ __________________________________________________________________ Answer: Yes. you can configure and manage layer 1 and layer 2 parameters within any virtual router context.route type external. E-series Router Configuration Basics (Detailed) Lab 2 . e.external type 1. Step 10. E.2 Determine the routing protocols that are currently running in the default virtual router. Inc. E-310# show virtual-router default detail Virtual Router: default Ip: Present Ipv6: Not Present Mgtm: Not Present Mgtmv6: Not Present Bgp: Not Present Isis: Not Present Ospf: Not Present Pim: Not Present Rip: Not Present Igmp: Not Present Mld: Not Present Dvmrp: Not Present Mpls: Not Present Ldp: Not Present Rsvp: Not Present Question: What routing protocols are currently running in the default virtual router? __________________________________________________________________ __________________________________________________________________ Answer: According to this output. V. E2. However.1 Determine the number of virtual routers currently configured.MPLS label.VRF.ISIS level2. no routing protocols are running in the default virtual router.OSPF. I.ISIS level 1.metric type internal.NSSA external type1.route type inter. IA. P. E1.13 . i.route type intra. N2. O.3 Examine the IP routing table in the default virtual router. E-310# show virtual-router Virtual Router : default Question: What are the names of the currently configured virtual routers? __________________________________________________________________ __________________________________________________________________ Answer: Currently.Introduction to Juniper Network Routers . Step 10. I2.metric type external.NSSA external type2 L.the E-series Part 10: Create a Virtual Router Note On the E-series router.external type2. *. you must configure and manage layer 3 parameters within a specific virtual router context.via indirect next-hop Juniper Networks. the only virtual router that is configured is the default virtual router.periodic download. E-310# show ip route Protocol/Route type codes: I1. N1. Step 10. Note Virtual router names cannot be abbreviated and are case sensitive.168. Inc. E-series Router Configuration Basics (Detailed) Lab 2 .0/24 Connect 192.168.--------.14 Juniper Networks.109.---------------------------------------192. If no virtual router name appears.-----------------------------up up E-310-srp up Question: How many IP interfaces are configured? __________________________________________________________________ __________________________________________________________________ Answer: The default virtual router has two user-defined interfaces and a null0 interface that is created automatically as a destination for discarded packets.168. then you are configuring the default virtual router.1/32 Status ---------up up up Protocol Description ----------.109.------------------null0 255.255.---------.4 Examine the IP interfaces in the default virtual router. E-310(config)# virtual-router vr_# Proceed with new virtual-router creation? [confirm]y E-310:vr_#(config)# Question: How did the E-series router's prompt change? __________________________________________________________________ __________________________________________________________________ Answer: The prompt changed to show that you are configuring virtual router vr_#.168.109.1 0/0 loopback# Question: How many routes are listed? __________________________________________________________________ __________________________________________________________________ Answer: There are two routes listed. Question: Can you tell which virtual router you are currently configuring? __________________________________________________________________ __________________________________________________________________ Answer: Yes. .the E-series Prefix/Length Type Next Hop Dst/Met Interface -----------------. E-310# configure terminal Enter configuration commands. Both routes are to directly connected networks.168.158 0/0 FastEthernet0/0 192.255/32 FastEthernet0/0 192.5 Create a new virtual router called vr_#.#. E-310# show ip interface brief Interface IP-Address ------------------------.#.--------------. End with ^Z.#. the virtual router name appears in the prompt.1/32 Connect 192.Introduction to Juniper Network Routers . Step 10.168.255.158/24 Loopback# 192. Step 10. one per line. 255.1/32 up up Question: How many IP interfaces are configured? __________________________________________________________________ Juniper Networks.ISIS level 1. E-series Router Configuration Basics (Detailed) Lab 2 .0/32 Connect 192.##. I.1/32 Step 10.periodic download.255/32 up up Loopback# 192. which is the directly connected network configured on the loopback0 interface.NSSA external type2 L.external type 1.--------. E-310:vr_#(config)# interface loopback 0 E-310:vr_#(config-if)# ip address 192.8 Exit Configuration mode and examine the IP routing table in the new virtual router. *. IA. E-310:vr_#(config-if)# end E-310:vr_# # show ip route Protocol/Route type codes: I1.255. e.metric type internal. Step 10.168. I2.external type2.15 .##.Introduction to Juniper Network Routers .------------------. O.----------.168.7 Determine the number of virtual routers currently configured.NSSA external type1.route type intra.168. For the host IP address.168.metric type external.#.--------------. Question: Are the routes from the default virtual router listed in vr1's routing table? __________________________________________________________________ __________________________________________________________________ Answer: No. E1. E-310:vr_#(config-if)# run show virtual-router Virtual Router : default Virtual Router : vr_# Step 10.MPLS label. the # represents your group number.the E-series Step 10.route type inter.---------------------------------------192. N1.6 Configure the loopback0 interface in the virtual router vr_# using the IP address and subnet mask found on the physical topology diagram. V.1 0/0 loopback0 Question: How many routes are listed in the new virtual router? __________________________________________________________________ __________________________________________________________________ Answer: The routing table contains a single route.route type external. i. P. E-310:vr_# # show ip interface brief E-310# show ip interface brief Interface IP-Address Status Protocol Description ------------------------. N2.---------.OSPF. E. Virtual routers do not exchange routing information unless external connectivity is established to enable them to communicate with each other and they are configured to exchange routing information through a common routing protocol. E2.##.9 Examine the IP interfaces in the new virtual router.ISIS level2.VRF.via indirect next-hop Prefix/Length Type Next Hop Dst/Met Interface -----------------.---------.-----------------------------null0 255. Inc. . E-310:vr_# # ping 192. Layer 3 information is not shared between virtual routers. Tell your instructor that you have completed the mandatory aspects of Lab 2.10 From the new virtual router. Each virtual router has its own null0 interface.1. try pinging the default virtual router's loopback0 address. Then. Inc. round-trip min/avg/max = 0/0/0 ms Question: Was the ping successful? Why or why not? __________________________________________________________________ __________________________________________________________________ Answer: The ping was unsuccessful because vr_# has no connectivity to the default virtual router. Success rate = 0% (0/5). you may proceed with the optional parts of this lab. Unauthorized access is strictly prohibited! E-310:vr# # configure terminal Enter configuration commands.#.168.. such as: You are attempting to access a secure computing device. you must establish a physical link between the routers. timeout = 2 sec. End with the character '^'.16 Juniper Networks. Question: Are the default virtual router's IP interfaces listed? __________________________________________________________________ __________________________________________________________________ Answer: No.168. Step 10.#.1 Sending 5 ICMP echoes to 192. End with ^Z... If time permits. one per line.. you must establish IP connectivity (including appropriate IP routing) between the two routers.Introduction to Juniper Network Routers .the E-series __________________________________________________________________ Answer: Two IP interfaces are configured: null° and loopback0. . Part 11: Customize the Banner and Send Messages to Users (Optional) Step 11.1 Configure a multiline banner. E-310:vr_#(config)# banner ^ Enter remainder of text message. First. Question: How can you establish connectivity between the default virtual router and vr_#? __________________________________________________________________ __________________________________________________________________ Answer: You can establish connectivity between these two virtual routers the same way you establish connectivity between two physically separate routers. E-series Router Configuration Basics (Detailed) Lab 2 . E-310 con0 is now available Press RETURN to get started. Juniper Networks. Inc. Copyright (6) 1999-2006 Juniper Networks.the E-series You are attempting to access a secure computing device." Proceed with send? [confirm]y E-310# *** *** TUE SEP 26 2006 13:49:40 UTC *** Message from console 0 to all lines *** This is a test message. E-series Router Configuration Basics (Detailed) Lab 2 .Introduction to Juniper Network Routers . This is only a test.17 . E-310# Question: What delimiters can you use for the banner and send commands? __________________________________________________________________ __________________________________________________________________ Answer: You can use any character as a delimiter. Inc. E-310:vr_#(config)# exit E-310:vr_# # exit Logging out. All rights reserved. You are attempting to access a secure computing device. Tell your instructor that you have completed Lab 2. Unauthorized access is strictly prohibited! Logged in on console 0. provided it will not appear within the text you want to enter. This is only a test.3 Send a message to all users currently logged in to the E-series router. As you saw with the banner command. the router reminds you to end your message with the delimiter you chose if your entire message does not appear on a single line. E-310> Step 11. E-310# send * "This is a test message. Unauthorized access is strictly prohibited! ^ Step 11.2 Log out and then reconnect to the E-series router to determine if the banner is correctly displayed.