Blog focusing on networking security products from Cisco, Check Point, Juniper, F5, Fortinet, VMware and GNS3.
Monday, January 30, 2012
JUNOS Olive GRE Tunnel Configuration
still same topology used as previous posts. Added GRE tunnel in the topology with two new OSPF areas.
version 10.4R3.4;
system {
backup-router 10.50.2.1;
root-authentication {
encrypted-password "$1$MsDQp3dk$uxdtlK7LKSqp4mHjg/zxZ1"; ## SECRET-DATA
}
login {
user test {
uid 2000;
class super-user;
authentication {
encrypted-password "$1$XKhC35Ei$9ED4o245Ts.jyQ2BqeeQR/"; ## SECRET-DATA
}
}
}
services {
ftp;
telnet;
web-management {
http {
port 80;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any notice;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
logical-systems {
r1 {
interfaces {
em1 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.1/24;
}
}
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.1/24;
}
}
}
gre {
unit 1 {
description "GRE Tunnel";
tunnel {
source 10.1.13.1;
destination 10.1.13.3;
}
family inet {
address 10.254.0.1/30;
}
}
}
lo0 {
unit 1 {
family inet {
address 10.1.1.1/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface lo0.1;
inactive: interface em1.13;
interface em1.15;
interface gre.1;
}
}
}
routing-options {
router-id 10.10.1.1;
}
}
r2 {
interfaces {
em2 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.2/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.2/24;
}
}
}
gre {
unit 3 {
tunnel {
source 10.1.24.2;
destination 10.1.24.4;
}
family inet {
address 10.253.0.1/30;
}
}
}
lo0 {
unit 2 {
family inet {
address 10.1.1.2/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em2.25;
interface lo0.2;
interface gre.3;
}
}
}
routing-options {
router-id 10.1.1.2;
}
}
r3 {
interfaces {
em3 {
unit 13 {
vlan-id 13;
family inet {
address 10.1.13.3/24;
}
}
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.3/24;
}
}
}
gre {
unit 2 {
tunnel {
source 10.1.13.3;
destination 10.1.13.1;
}
family inet {
address 10.254.0.2/30;
}
}
}
lo0 {
unit 3 {
family inet {
address 10.1.1.3/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
inactive: interface em3.13;
interface em3.36;
interface lo0.3;
interface gre.2;
}
}
}
routing-options {
router-id 10.1.1.3;
}
}
r4 {
interfaces {
em4 {
unit 24 {
vlan-id 24;
family inet {
address 10.1.24.4/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.4/24;
}
}
}
gre {
unit 4 {
tunnel {
source 10.1.24.4;
destination 10.1.24.2;
}
family inet {
address 10.253.0.2/30;
}
}
}
lo0 {
unit 4 {
family inet {
address 10.1.1.4/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em4.46;
interface lo0.4;
interface gre.4;
}
}
}
routing-options {
router-id 10.1.1.4;
}
}
r5 {
interfaces {
em5 {
unit 15 {
vlan-id 15;
family inet {
address 10.1.15.5/24;
}
}
unit 25 {
vlan-id 25;
family inet {
address 10.1.25.5/24;
}
}
}
lo0 {
unit 5 {
family inet {
address 10.1.1.5/32;
}
}
}
}
protocols {
ospf {
export ex_filter_routes_5;
area 0.0.0.0 {
interface em5.15;
interface em5.25;
}
area 0.0.0.10 {
interface lo0.5;
}
}
}
policy-options {
policy-statement ex_filter_routes_5 {
from {
route-filter 10.1.1.5/32 exact;
}
then accept;
}
}
routing-options {
router-id 10.1.1.5;
}
}
r6 {
interfaces {
em6 {
unit 36 {
vlan-id 36;
family inet {
address 10.1.36.6/24;
}
}
unit 46 {
vlan-id 46;
family inet {
address 10.1.46.6/24;
}
}
}
lo0 {
unit 6 {
family inet {
address 10.1.1.6/32;
}
}
}
}
protocols {
ospf {
area 0.0.0.0 {
interface em6.36;
interface em6.46;
}
area 0.0.0.20 {
interface lo0.6;
}
}
}
routing-options {
router-id 10.1.1.6;
}
}
}
interfaces {
em0 {
unit 0 {
family inet {
address 10.50.2.230/24;
}
}
}
em1 {
vlan-tagging;
}
em2 {
vlan-tagging;
}
em3 {
vlan-tagging;
}
em4 {
vlan-tagging;
}
em5 {
vlan-tagging;
}
em6 {
vlan-tagging;
}
}
routing-options {
static {
route 0.0.0.0/0 {
next-hop 10.50.2.1;
retain;
no-readvertise;
}
}
}
------------------------------------------
test# run show route logical-system r5
inet.0: 15 destinations, 15 routes (15 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both
10.1.1.1/32 *[OSPF/10] 00:01:12, metric 1
> to 10.1.15.1 via em5.15
10.1.1.2/32 *[OSPF/10] 00:01:16, metric 1
> to 10.1.25.2 via em5.25
10.1.1.3/32 *[OSPF/10] 00:01:12, metric 2
> to 10.1.15.1 via em5.15
10.1.1.4/32 *[OSPF/10] 00:01:16, metric 2
> to 10.1.25.2 via em5.25
10.1.1.5/32 *[Direct/0] 00:12:06
> via lo0.5
10.1.1.6/32 *[OSPF/10] 00:01:11, metric 3
> to 10.1.15.1 via em5.15
to 10.1.25.2 via em5.25
10.1.15.0/24 *[Direct/0] 00:01:57
> via em5.15
10.1.15.5/32 *[Local/0] 00:01:57
Local via em5.15
10.1.25.0/24 *[Direct/0] 00:01:57
> via em5.25
10.1.25.5/32 *[Local/0] 00:01:57
Local via em5.25
10.1.36.0/24 *[OSPF/10] 00:01:12, metric 3
> to 10.1.15.1 via em5.15
10.1.46.0/24 *[OSPF/10] 00:01:16, metric 3
> to 10.1.25.2 via em5.25
10.253.0.0/30 *[OSPF/10] 00:01:16, metric 2
> to 10.1.25.2 via em5.25
10.254.0.0/30 *[OSPF/10] 00:01:12, metric 2
> to 10.1.15.1 via em5.15
224.0.0.5/32 *[OSPF/10] 00:12:08, metric 1
MultiRecv
[edit]
test#
test# run show ospf neighbor logical-system r1
Address Interface State ID Pri Dead
10.1.15.5 em1.15 Full 10.1.1.5 128 35
10.254.0.2 gre.1 Full 10.1.1.3 128 34
[edit]
test# run show ospf neighbor logical-system r2
Address Interface State ID Pri Dead
10.1.25.5 em2.25 Full 10.1.1.5 128 34
10.253.0.2 gre.3 Full 10.1.1.4 128 38
[edit]
test#
Labels:
Juniper
Subscribe to:
Post Comments (Atom)

No comments:
Post a Comment
Note: Only a member of this blog may post a comment.