Difference between revisions of "TDC Juniper"

From Teknologisk videncenter
Jump to: navigation, search
m
m (Goodies)
Line 100: Line 100:
 
     family iso address 49.0001.1921.6800.0001.00;
 
     family iso address 49.0001.1921.6800.0001.00;
 
   }
 
   }
 +
}
 +
</pre>
 +
NetFlow opsætning
 +
<pre>
 +
interfaces {
 +
    ge-0/1/0 {
 +
        unit 0 {
 +
            family inet {
 +
                filter {
 +
                    input all;
 +
                    output all;
 +
                }
 +
                address 192.168.1.1/24;
 +
            }
 +
        }
 +
    }
 +
}
 +
 +
firewall {
 +
    filter all {
 +
        term all {
 +
            then {
 +
                sample;
 +
                accept;
 +
            }
 +
        }
 +
    }
 +
}
 +
 +
forwarding-options {
 +
    sampling {
 +
        input {
 +
            family inet {
 +
                rate 100;
 +
            }
 +
        }
 +
        output {
 +
            cflowd 192.168.1.100 {
 +
                port 2000;
 +
                version 5;
 +
            }
 +
        }
 +
    }
 
}
 
}
 
</pre>
 
</pre>

Revision as of 22:24, 17 November 2011

Juniper

Mandag

I gang med Juniper

  • Software
  • Hardware
  • Konfiguration
  • Hjælp

Basis konfiguration

  • Log
  • Tid
  • Brugere

Slides

Opgaver

Bilag

Tirsdag

Routing

  • Routing tabellen
  • Statisk Routeing
  • OSPF

Slides

Opgaver

Bilag

Onsdag

Routing

  • BGP

Slides

Opgaver

Bilag

Torsdag

Routing

  • BGP

Virtual Instances

  • Unit interfaces
  • Virtual Routers

Slides

Opgaver

Bilag

Fredag

Sikkerhed

  • Device Hardening

Firewall

  • Pakke filtrering

Slides

Opgaver

Bilag

Goodies

IS-IS opsætning

[edit protocols isis]
rael@SRX240#show
interface ge-0/0/0 {
  level 2 disable; # Som default kører interfaces L1 og L2 så derfor slår vi L2 Hello's fra.
}
interface ge-0/0/1 {
  level 2 disable;
}
[edit interfaces]
rael@SRX240#show
interface ge-0/0/0 {
  unit 0 {
    family iso;
    family inet address 10.0.0.1/24;
  }
}
lo0 {
  unit 0 {
    family inet address 192.168.0.1/32;
    family iso address 49.0001.1921.6800.0001.00;
  }
}

NetFlow opsætning

interfaces {
    ge-0/1/0 {
        unit 0 {
            family inet {
                filter {
                    input all;
                    output all;
                }
                address 192.168.1.1/24;
            }
        }
    }
}

firewall {
    filter all {
        term all {
            then {
                sample;
                accept;
            }
        }
    }
}

forwarding-options {
    sampling {
        input {
            family inet {
                rate 100;
            }
        }
        output {
            cflowd 192.168.1.100 {
                port 2000;
                version 5;
            }
        }
    }
}

Links