Blog focusing on networking security products from Cisco, Check Point, Juniper, F5, Fortinet, VMware and GNS3.
Monday, January 30, 2012
JUNOS Olive GRE Tunnel Configuration
still same topology used as previous posts. Added GRE tunnel in the topology with two new OSPF areas.
version 10.4R3.4;
system {
backup-router 10.50.2.1;
root-authentication {
encrypted-password "$1$MsDQp3dk$uxdtlK7LKSqp4mHjg/zxZ1"; ## SECRET-DATA
}
login {
user test {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$XKhC35Ei$9ED4o245Ts.jyQ2BqeeQR/"; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.1/24;
}
}
}
gre {
unit 1 {
description "GRE Tunnel";
tunnel {
source 10.1.13.1;
destination 10.1.13.3;
}
family inet {
address 10.254.0.1/30;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.1;
inactive: interface em1.13;
interface em1.15;
interface gre.1;
}
}
}
routing-options {
router-id 10.10.1.1;
}
}
r2 {
interfaces {
em2 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.2/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.2/24;
}
}
}
gre {
unit 3 {
tunnel {
source 10.1.24.2;
destination 10.1.24.4;
}
family inet {
address 10.253.0.1/30;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em2.25;
interface lo0.2;
interface gre.3;
}
}
}
routing-options {
router-id 10.1.1.2;
}
}
r3 {
interfaces {
em3 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.3/24;
}
}
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.3/24;
}
}
}
gre {
unit 2 {
tunnel {
source 10.1.13.3;
destination 10.1.13.1;
}
family inet {
address 10.254.0.2/30;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.1.1.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
inactive: interface em3.13;
interface em3.36;
interface lo0.3;
interface gre.2;
}
}
}
routing-options {
router-id 10.1.1.3;
}
}
r4 {
interfaces {
em4 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.4/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.4/24;
}
}
}
gre {
unit 4 {
tunnel {
source 10.1.24.4;
destination 10.1.24.2;
}
family inet {
address 10.253.0.2/30;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.1.1.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em4.46;
interface lo0.4;
interface gre.4;
}
}
}
routing-options {
router-id 10.1.1.4;
}
}
r5 {
interfaces {
em5 {
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.5/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.5/24;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.1.1.5/32;
}
}
}
}
protocols {
ospf {
export ex_filter_routes_5;
area 0.0.0.0 {
interface em5.15;
interface em5.25;
}
area 0.0.0.10 {
interface lo0.5;
}
}
}
policy-options {
policy-statement ex_filter_routes_5 {
from {
route-filter 10.1.1.5/32 exact;
}
then accept;
}
}
routing-options {
router-id 10.1.1.5;
}
}
r6 {
interfaces {
em6 {
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.6/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.6/24;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.1.1.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em6.36;
interface em6.46;
}
area 0.0.0.20 {
interface lo0.6;
}
}
}
routing-options {
router-id 10.1.1.6;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.50.2.230/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 10.50.2.1;
retain;
no-readvertise;
}
}
}
------------------------------------------
test# run show route logical-system r5
inet.0: 15 destinations, 15 routes (15 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.1/32 *[OSPF/10] 00:01:12, metric 1
> to 10.1.15.1 via em5.15
10.1.1.2/32 *[OSPF/10] 00:01:16, metric 1
> to 10.1.25.2 via em5.25
10.1.1.3/32 *[OSPF/10] 00:01:12, metric 2
> to 10.1.15.1 via em5.15
10.1.1.4/32 *[OSPF/10] 00:01:16, metric 2
> to 10.1.25.2 via em5.25
10.1.1.5/32 *[Direct/0] 00:12:06
> via lo0.5
10.1.1.6/32 *[OSPF/10] 00:01:11, metric 3
> to 10.1.15.1 via em5.15
to 10.1.25.2 via em5.25
10.1.15.0/24 *[Direct/0] 00:01:57
> via em5.15
10.1.15.5/32 *[Local/0] 00:01:57
Local via em5.15
10.1.25.0/24 *[Direct/0] 00:01:57
> via em5.25
10.1.25.5/32 *[Local/0] 00:01:57
Local via em5.25
10.1.36.0/24 *[OSPF/10] 00:01:12, metric 3
> to 10.1.15.1 via em5.15
10.1.46.0/24 *[OSPF/10] 00:01:16, metric 3
> to 10.1.25.2 via em5.25
10.253.0.0/30 *[OSPF/10] 00:01:16, metric 2
> to 10.1.25.2 via em5.25
10.254.0.0/30 *[OSPF/10] 00:01:12, metric 2
> to 10.1.15.1 via em5.15
224.0.0.5/32 *[OSPF/10] 00:12:08, metric 1
MultiRecv
[edit]
test#
test# run show ospf neighbor logical-system r1
Address Interface State ID Pri Dead
10.1.15.5 em1.15 Full 10.1.1.5 128 35
10.254.0.2 gre.1 Full 10.1.1.3 128 34
[edit]
test# run show ospf neighbor logical-system r2
Address Interface State ID Pri Dead
10.1.25.5 em2.25 Full 10.1.1.5 128 34
10.253.0.2 gre.3 Full 10.1.1.4 128 38
[edit]
test#
Saturday, January 28, 2012
JUNOS Olive Dual ISP OSPF Configuration
This lab is used to emulate a common network topology which is two offices has two network connections. One primary connection as main usage, and second connection will be used as failover purpose only. No load balancing requirement at this time.
R5 and R6 can be considered as two branches core switch or firewall. R1 and R2 are acting as edge routers connecting to peer router R3 and R4 in another office.
Basic LAB regarding to how to setup logic router and ospf in JUNOS can be referred to previous posts:
Configurations:
test> show configuration
## Last commit: 2012-01-29 07:03:41 UTC by test
version 10.4R3.4;
system {
backup-router 10.50.2.1;
root-authentication {
encrypted-password "$1$MsDQp3dk$uxdtlK7LKSqp4mHjg/zxZ1"; ## SECRET-DATA
}
login {
user test {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$XKhC35Ei$9ED4o245Ts.jyQ2BqeeQR/"; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.1/24;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.1;
interface em1.13;
interface em1.15;
}
}
}
routing-options {
router-id 10.10.1.1;
}
}
r2 {
interfaces {
em2 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.2/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.2/24;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em2.24;
interface em2.25;
interface lo0.2;
}
}
}
routing-options {
router-id 10.1.1.2;
}
}
r3 {
interfaces {
em3 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.3/24;
}
}
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.3/24;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.1.1.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em3.13;
interface em3.36;
interface lo0.3;
}
}
}
routing-options {
router-id 10.1.1.3;
}
}
r4 {
interfaces {
em4 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.4/24;
}
}
unit 26 {
vlan-id 26;
family inet {
address 10.1.26.4/24;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.1.1.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em4.24;
interface em4.46;
interface lo0.4;
}
}
}
routing-options {
router-id 10.1.1.4;
}
}
r5 {
interfaces {
em5 {
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.5/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.5/24;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.1.1.5/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em5.15;
interface em5.25;
}
}
}
routing-options {
router-id 10.1.1.5;
}
}
r6 {
interfaces {
em6 {
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.6/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.6/24;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.1.1.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em6.36;
interface em6.46;
}
}
}
routing-options {
router-id 10.1.1.6;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.50.2.230/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 10.50.2.1;
retain;
no-readvertise;
}
}
}
--------------------------------------------------------------------
verifications:
test> show ospf neighbor logical-system r1
Address Interface State ID Pri Dead
10.1.13.3 em1.13 Full 10.1.1.3 128 37
10.1.15.5 em1.15 Full 10.1.1.5 128 36
test> show ospf neighbor logical-system r2
Address Interface State ID Pri Dead
10.1.24.4 em2.24 Full 10.1.1.4 128 35
10.1.25.5 em2.25 Full 10.1.1.5 128 36
test> show ospf neighbor logical-system r3
Address Interface State ID Pri Dead
10.1.13.1 em3.13 Full 10.10.1.1 128 34
10.1.36.6 em3.36 Full 10.1.1.6 128 33
test> show route protocol ospf logical-system r3
inet.0: 13 destinations, 13 routes (13 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.1/32 *[OSPF/10] 00:00:48, metric 1
> to 10.1.13.1 via em3.13
10.1.1.2/32 *[OSPF/10] 00:00:38, metric 3
> to 10.1.13.1 via em3.13
10.1.1.4/32 *[OSPF/10] 00:00:38, metric 4
> to 10.1.13.1 via em3.13
10.1.15.0/24 *[OSPF/10] 00:00:48, metric 2
> to 10.1.13.1 via em3.13
10.1.24.0/24 *[OSPF/10] 00:00:38, metric 4
> to 10.1.13.1 via em3.13
10.1.25.0/24 *[OSPF/10] 00:00:43, metric 3
> to 10.1.13.1 via em3.13
10.1.46.0/24 *[OSPF/10] 00:00:48, metric 2
> to 10.1.36.6 via em3.36
224.0.0.5/32 *[OSPF/10] 00:04:52, metric 1
MultiRecv
test> ping 10.1.1.3 logical-system r5
PING 10.1.1.3 (10.1.1.3): 56 data bytes
64 bytes from 10.1.1.3: icmp_seq=0 ttl=63 time=2.235 ms
64 bytes from 10.1.1.3: icmp_seq=1 ttl=63 time=1.759 ms
64 bytes from 10.1.1.3: icmp_seq=2 ttl=63 time=2.118 ms
R5 and R6 can be considered as two branches core switch or firewall. R1 and R2 are acting as edge routers connecting to peer router R3 and R4 in another office.
Basic LAB regarding to how to setup logic router and ospf in JUNOS can be referred to previous posts:
OSPF between two JunOS routing instances
Configurations:
test> show configuration
## Last commit: 2012-01-29 07:03:41 UTC by test
version 10.4R3.4;
system {
backup-router 10.50.2.1;
root-authentication {
encrypted-password "$1$MsDQp3dk$uxdtlK7LKSqp4mHjg/zxZ1"; ## SECRET-DATA
}
login {
user test {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$XKhC35Ei$9ED4o245Ts.jyQ2BqeeQR/"; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.1/24;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.1;
interface em1.13;
interface em1.15;
}
}
}
routing-options {
router-id 10.10.1.1;
}
}
r2 {
interfaces {
em2 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.2/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.2/24;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em2.24;
interface em2.25;
interface lo0.2;
}
}
}
routing-options {
router-id 10.1.1.2;
}
}
r3 {
interfaces {
em3 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.3/24;
}
}
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.3/24;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.1.1.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em3.13;
interface em3.36;
interface lo0.3;
}
}
}
routing-options {
router-id 10.1.1.3;
}
}
r4 {
interfaces {
em4 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.4/24;
}
}
unit 26 {
vlan-id 26;
family inet {
address 10.1.26.4/24;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.1.1.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em4.24;
interface em4.46;
interface lo0.4;
}
}
}
routing-options {
router-id 10.1.1.4;
}
}
r5 {
interfaces {
em5 {
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.5/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.5/24;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.1.1.5/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em5.15;
interface em5.25;
}
}
}
routing-options {
router-id 10.1.1.5;
}
}
r6 {
interfaces {
em6 {
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.6/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.6/24;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.1.1.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em6.36;
interface em6.46;
}
}
}
routing-options {
router-id 10.1.1.6;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.50.2.230/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 10.50.2.1;
retain;
no-readvertise;
}
}
}
--------------------------------------------------------------------
verifications:
test> show ospf neighbor logical-system r1
Address Interface State ID Pri Dead
10.1.13.3 em1.13 Full 10.1.1.3 128 37
10.1.15.5 em1.15 Full 10.1.1.5 128 36
test> show ospf neighbor logical-system r2
Address Interface State ID Pri Dead
10.1.24.4 em2.24 Full 10.1.1.4 128 35
10.1.25.5 em2.25 Full 10.1.1.5 128 36
test> show ospf neighbor logical-system r3
Address Interface State ID Pri Dead
10.1.13.1 em3.13 Full 10.10.1.1 128 34
10.1.36.6 em3.36 Full 10.1.1.6 128 33
test> show route protocol ospf logical-system r3
inet.0: 13 destinations, 13 routes (13 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.1/32 *[OSPF/10] 00:00:48, metric 1
> to 10.1.13.1 via em3.13
10.1.1.2/32 *[OSPF/10] 00:00:38, metric 3
> to 10.1.13.1 via em3.13
10.1.1.4/32 *[OSPF/10] 00:00:38, metric 4
> to 10.1.13.1 via em3.13
10.1.15.0/24 *[OSPF/10] 00:00:48, metric 2
> to 10.1.13.1 via em3.13
10.1.24.0/24 *[OSPF/10] 00:00:38, metric 4
> to 10.1.13.1 via em3.13
10.1.25.0/24 *[OSPF/10] 00:00:43, metric 3
> to 10.1.13.1 via em3.13
10.1.46.0/24 *[OSPF/10] 00:00:48, metric 2
> to 10.1.36.6 via em3.36
224.0.0.5/32 *[OSPF/10] 00:04:52, metric 1
MultiRecv
test> ping 10.1.1.3 logical-system r5
PING 10.1.1.3 (10.1.1.3): 56 data bytes
64 bytes from 10.1.1.3: icmp_seq=0 ttl=63 time=2.235 ms
64 bytes from 10.1.1.3: icmp_seq=1 ttl=63 time=1.759 ms
64 bytes from 10.1.1.3: icmp_seq=2 ttl=63 time=2.118 ms
Friday, January 27, 2012
Gartner Magic Quadrant for SSL VPN (2012, 2011 and 2008)
2012
from : http://www.gartner.com/technology/reprints.do?id=1-18BC075&ct=111213&st=sb
Juniper , Cisco and F5 network are leader in this market. Checkpoint is in the visionaries quadrant.
2011
Major players are not having too much difference from 2010. F5 was able to make it into leaders Quadrant in 2011.2008
On 2008, Juniper, Citrix and F5 were in the learders quadrant, but Checkpoint was only in niche players.Tuesday, January 24, 2012
OSPF between two JunOS routing instances
test> show version and haiku
Model: olive
JUNOS Base OS boot [10.4R3.4]
JUNOS Base OS Software Suite [10.4R3.4]
JUNOS Kernel Software Suite [10.4R3.4]
JUNOS Packet Forwarding Engine Support (M/T Common) [10.4R3.4]
JUNOS Packet Forwarding Engine Support (M20/M40) [10.4R3.4]
JUNOS Online Documentation [10.4R3.4]
JUNOS Voice Services Container package [10.4R3.4]
JUNOS Border Gateway Function package [10.4R3.4]
JUNOS Services AACL Container package [10.4R3.4]
JUNOS Services LL-PDF Container package [10.4R3.4]
JUNOS Services PTSP Container package [10.4R3.4]
JUNOS Services Stateful Firewall [10.4R3.4]
JUNOS Services NAT [10.4R3.4]
JUNOS Services Application Level Gateways [10.4R3.4]
JUNOS Services Captive Portal and Content Delivery Container package [10.4R3.4]
JUNOS Services RPM [10.4R3.4]
JUNOS AppId Services [10.4R3.4]
JUNOS IDP Services [10.4R3.4]
JUNOS Runtime Software Suite [10.4R3.4]
JUNOS Routing Software Suite [10.4R3.4]
JUNOS Web Management [10.4R3.4]
Nothing feels as good
Arms filled with wiggling children
So much hope and love
-----------------------------------------------------------------------------------------------
test> show configuration
## Last commit: 2012-01-24 13:39:41 UTC by test
version 10.4R3.4;
system {
backup-router 10.50.2.1;
root-authentication {
encrypted-password "$1$MsDQp3dk$uxdtlK7LKSqp4mHjg/zxZ1"; ## SECRET-DATA
}
login {
user test {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$XKhC35Ei$9ED4o245Ts.jyQ2BqeeQR/"; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 12 {
vlan-id 12;
family inet {
address 10.1.12.1/24;
}
}
unit 14 {
vlan-id 14;
family inet {
address 10.1.14.1/24;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em1.12;
interface lo0.1;
}
}
}
routing-instances {
r1-vr-r1 {
instance-type virtual-router;
}
}
}
r2 {
interfaces {
em2 {
unit 12 {
vlan-id 12;
family inet {
address 10.1.12.2/24;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface lo0.2;
interface em2.12;
}
}
}
}
}
interfaces {
lt-0/0/0 {
unit 1 {
encapsulation ethernet;
peer-unit 3;
family inet {
address 10.0.1.1/24;
}
}
unit 3 {
encapsulation ethernet;
peer-unit 1;
family inet {
address 10.0.1.3/24;
}
}
}
em0 {
unit 0 {
family inet {
address 10.50.2.230/24;
}
}
}
em1 {
vlan-tagging;
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.3/24;
}
}
}
em4 {
vlan-tagging;
}
lo0 {
unit 11 {
family inet {
address 11.11.11.11/32;
}
}
unit 33 {
family inet {
address 33.33.33.33/32;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 10.50.2.1;
retain;
no-readvertise;
}
}
}
routing-instances {
vr-r1 {
instance-type virtual-router;
interface lt-0/0/0.1;
interface em1.13;
interface lo0.11;
routing-options {
router-id 11.11.11.11;
}
protocols {
ospf {
area 0.0.0.20 {
interface em1.13;
interface lt-0/0/0.1;
interface lo0.11;
}
}
}
}
vr-r3 {
instance-type virtual-router;
interface lt-0/0/0.3;
interface em3.13;
interface lo0.33;
protocols {
ospf {
area 0.0.0.20 {
interface em3.13;
interface lt-0/0/0.3;
interface lo0.33;
}
}
}
}
}
---------------------------------------------------------------------
test> show ospf neighbor instance vr-r1
Address Interface State ID Pri Dead
10.1.13.3 em1.13 2Way 33.33.33.33 128 36
test> show ospf neighbor instance vr-r1
Address Interface State ID Pri Dead
10.1.13.3 em1.13 Full 33.33.33.33 128 35
---------------------------------------------------------------------
test> show route
inet.0: 3 destinations, 3 routes (3 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
0.0.0.0/0 *[Static/5] 16:34:49
> to 10.50.2.1 via em0.0
10.50.2.0/24 *[Direct/0] 16:34:49
> via em0.0
10.50.2.230/32 *[Local/0] 16:34:49
Local via em0.0
vr-r3.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.13.0/24 *[Direct/0] 00:00:49
> via em3.13
10.1.13.3/32 *[Local/0] 00:00:49
Local via em3.13
11.11.11.11/32 *[OSPF/10] 00:00:09, metric 1
> to 10.1.13.1 via em3.13
33.33.33.33/32 *[Direct/0] 00:55:49
> via lo0.33
224.0.0.5/32 *[OSPF/10] 01:59:27, metric 1
MultiRecv
vr-r1.inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.13.0/24 *[Direct/0] 00:00:49
> via em1.13
10.1.13.1/32 *[Local/0] 00:00:49
Local via em1.13
11.11.11.11/32 *[Direct/0] 00:55:49
> via lo0.11
33.33.33.33/32 *[OSPF/10] 00:00:09, metric 1
> to 10.1.13.3 via em1.13
224.0.0.5/32 *[OSPF/10] 02:10:44, metric 1
MultiRecv
------------------------------------------------------------------------
test> show ospf database instance vr-r1
OSPF database, Area 0.0.0.20
Type ID Adv Rtr Seq Age Opt Cksum Len
Router *11.11.11.11 11.11.11.11 0x80000033 1908 0x22 0x4dea 48
Router 33.33.33.33 33.33.33.33 0x8000002b 1909 0x22 0xfd37 48
Network 10.1.13.3 33.33.33.33 0x80000010 1909 0x22 0xf1e8 32
test> show ospf database instance vr-r1
OSPF database, Area 0.0.0.20
Type ID Adv Rtr Seq Age Opt Cksum Len
Router *11.11.11.11 11.11.11.11 0x80000033 1908 0x22 0x4dea 48
Router 33.33.33.33 33.33.33.33 0x8000002b 1909 0x22 0xfd37 48
Network 10.1.13.3 33.33.33.33 0x80000010 1909 0x22 0xf1e8 32
Monday, January 23, 2012
Junos Oliver Logical Router OSPF Lab
Have a Juniper Oliver running in my vm environment as a test for a while.

I believe it is common for people like to research network technology but would not like to purchase expansive devices to stack them at home. To make myself more understanding how ospf operate in JunOS environment, I started to set up a small topology to configure OSPF with logical router feature.

I believe it is common for people like to research network technology but would not like to purchase expansive devices to stack them at home. To make myself more understanding how ospf operate in JunOS environment, I started to set up a small topology to configure OSPF with logical router feature.
So far, only configured OSPF area 10 between logical router R1 and R2:
root> show configuration
## Last commit: 2012-01-23 02:18:33 UTC by root
version 10.4R3.4;
system {
root-authentication {
encrypted-password "$1$tD7scqlb$0OSEHovD6G2Oez087zChZ/"; ## SECRET-DATA
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 12 {
vlan-id 12;
family inet {
address 10.1.12.1/24;
}
}
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
unit 14 {
vlan-id 14;
family inet {
address 10.1.14.1/24;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface em1.12;
interface lo0.1;
}
}
}
}
r2 {
interfaces {
em2 {
unit 12 {
vlan-id 12;
family inet {
address 10.1.12.2/24;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.10 {
interface lo0.2;
interface em2.12;
}
}
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 192.168.2.230/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
}
root>
test> show ospf neighbor logical-system r1
Address Interface State ID Pri Dead
10.1.12.2 em1.12 Full 10.1.1.2 128 33
test> show ospf da logical-system r1
OSPF database, Area 0.0.0.10
Type ID Adv Rtr Seq Age Opt Cksum Len
Router *10.1.1.1 10.1.1.1 0x80000071 2145 0x22 0x5901 48
Router 10.1.1.2 10.1.1.2 0x8000006d 2146 0x22 0x75e4 48
Network 10.1.12.2 10.1.1.2 0x80000040 2146 0x22 0x8533 32
Subscribe to:
Posts (Atom)






