jncie-sp v1.1 technology focused workbook (2017) ·  · 2017-04-05jncie-sp v1.1 technology focused...

28
JNCIE-SP v1.1 Technology focused workbook (2017) Demo workbook

Upload: dangthuan

Post on 25-May-2018

270 views

Category:

Documents


4 download

TRANSCRIPT

Page 1: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

JNCIE-SP v1.1 Technology focused workbook (2017) Demo workbook

Page 2: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Why this demo workbook?

This workbook is intended to give you an idea of what the

purched workbook looks like, and the way the original workbook

teaches you the curriculum.

Due to this, we hope you will understand that

some content will be covered.

If you have any questions, please don’t hesitate to contact me.

Jörg Buesink

[email protected]

Owner iNET ZERO

Page 3: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

About the authors

About meJörg lives in the Netherlands near Amsterdam and brings more than 10 years

of experience in the IT and networking industry. He has worked for several

large ISPs / service providers in the role of technical consultant,designer and

network architect.He has extensiveexperience in network implementation,

design and architecture and teached several networking classes.

CertificationsQuadruple JNCIE certified

(JNCIE-DC#007,JNCIE-ENT#21,JNCIE-SP#284 and JNCIE-SEC#30)

Triple CCIE #15032

(Routing/Switching, Service provider and Security),

Cisco CCDE#20110002 certified,

Huawei HCIE#2188 Routing and Switching.

About meIvan van lives in East Europe country of Bulgaria. He has more than 10 years

experience with IP technologies, working at several Internet Service Provid-

ers, big enterprise companies and International system integrators. Through-

out his career, Ivan gained extensive experience designing, implementing

and supporting IP networks based mostly on Juniper Networks and Cisco

Systems solutions and devices.

Ivan worked on various international projects, designing, securing and imple-

menting MPLS/IP backbone for multinational mobile operators. Ivan has the

following certificates: JNCIE, JNCIP-SEC and various Cisco certificates.

About meAlexey has more then 12+ experience in the Telecom/IT industry.He is a triple

CCIE (R&S, SP, Sec) #17405 and JNCIE-SP#313, certified Cisco and Juniper

instructor.

Page 4: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

iNET ZERO Rack rental service

Did you know that this workbook could be used in combination with our premium JNCIE rack rental

service? Take a look on our website for more information www.inetzero.com

Warning:

Please do NOT change the root account password for any of our devices to prevent unnecessary password

recovery. Thank you for your cooperation

Target audience

This workbook is developed for experienced network engineers who are preparing for the Juniper

Networks JNCIE-SP lab exam. Although not required it is highly recommended that you have passed the

JNCIP-SP written exam.

How to use this workbook

We recommend that you start your JNCIE lab preparation by completing the first 7 chapters only. Always

take a note on the time spent for each chapter/ task to see if you improved once you go over the chapters

again. Ensure that at least you perform the first 7 chapters twice before you start with final chapter (the

super lab). You are ready to try the 8-hour super Lab if you are able to configure the chapter’s tasks with-

out the need to look at the answers presented in the appendix. The superlab must be completed within 8

hours as it simulates a full day JNCIE lab experience. Good luck!

iNET ZERO support

Always feel free to ask us questions regarding the workbook or JNCIE rack rental. You can reach us at

[email protected]. We love to hear from you regarding your preparation progress. Your feedback regard-

ing our products is also very appreciated!

Page 5: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

General information

iNET ZERO support Chapter 1: System Features

Task 1.1: Primary hostname/user configuration

Task 1.2: Aggregated interface configuration

Task 1.3: Advanced aggregated interface configuration

Task 1.4: Network integration - NTP

Task 1.5: Network Integration - Configuration archival

Task 1.6: Network Integration - Syslog

Task 1.7: Static routing and jumbo frames support

Task 1.8: SNMPv2 Configuration

Task 1.9: Basic RE Protection

Chapter 2: IGP

Part 1: IS-IS Troubleshooting

Part 2: Single-area OSPFv2

Task 2.1 Single-area OSPFv2 baseline

Task 2.2 OSPFv2 Network Types

Task 2.3 OSPFv2: DR/BDR election

Task 2.4 OSPFv2: Authentication

Task 2.5 OSPFv2: Timers

Task 2.6 OSPFv2: BFD

Task 2.7 OSPFv2: Passive interfaces

Task 2.8 OSPFv2: Load-balancing

Task 2.9 OSPFv2: Cost tuning

Task 2.10: OSPFv2: Miscellaneous features

Part 3: Multi-area OSPFv2

Task 3.1 OSPFv2: Multi-area baseline

Task 3.2 OSPFv2: Redistribution

Task 3.3 OSPFv2: NSSA

Task 3.4 OSPFv2: Summarization

Part 4: Multi-level IS-IS

Task 4.1: IS-IS Baseline

Task 4.2: IS-IS Authentication

Task 4.3: IS-IS Timers

Page 6: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 5: OSPFv3 and IS-IS (IPv6)

Task 5.1

Task 5.2

Task 5.3

Chapter 3: MPLS

Part 1. RSVP

Task 3.1: MPLS and RSVP baseline

Task 3.2: RSVP Refresh Reduction and Authentication

Task 3.3: RSVP LSP without CSPF

Task 3.4: RSVP ERO

Task 3.5. RSVP Load-Balancing

Task 3.6: RSVP LSP Policy Selection

Task 3.7: RSVP LSP Primary and Secondary Paths

Task 3.8: RSVP LSP Policing and Timers

Task 3.9: RSVP LSP Usage for Internal Traffic

Task 3.10: RSVP LSP Optimization.

Task 3.11: RSVP Node/Link Protection

Task 3.12: Fast Reroute for RSVP LSP

Task 3.13: RSVP Link Coloring

Task 3.14: RSVP Link Coloring (cont.)

Task 3.15: RSVP LSP Auto-Bandwidth

Task 3.1: RSVP LSP TTL Handling

Part 2. LDP

Task 3.17: LDP Baseline

Task 3.18: LDP Tunneling

Task 3.19: LDP Policies

Chapter 4: BGP

Part 1. Basic BGP

Task 4.1: iBGP Full Mesh

Task 4.2: eBGP Neighborship and Authentication.

Task 4.3: Enabling BFD for BGP.

Task 4.4: BGP Route Injection and AS Path Manipulation.

Task 4.5: Destination-based Remote-Triggered Blackhole (RTBH) Filtering

Task 4.6: Source-based RTBH Filtering

Page 7: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 2. BGP Policies

Task 4.8: BGP Prefix Propagation and BGP Multipath.

Task 4.9: BGP Prefix Filtering.

Task 4.10: BGP Prefix Origination and Filtering

Task 4.11: BGP Conditional Route Advertising

Task 4.12: BGP Attributes Manipulation

Task 4.13: BGP Scaling

Part 3. IPv6 Tunneling Initial configurations: Part 3

Task 4.14: IPv6 Tunneling through IPv4/MPLS Cloud

Chapter 5: VPNs

Part 1. L3VPN

Task 5.1: L3VPN with BGP as PE-CE protocol

Task 5.2: L3VPN transparency.

Task 5.3: Hub and Spoke VPN (BGP-based)

Task 5.4: VPN Route Leaking

Task 5.5: VPN Internet Access

Part 2. L3VPN PE-CE OSPF

Task 5.6: OSPF Sham Link

Task 5.7: Hub and Spoke L3VPN (OSPF)

Part 3. L2VPN

Task 5.8: Martini L2VPN

Task 5.9: Kompella L2VPN (VC Type 4)

Task 5.10: Kompella L2VPN (VC Type 5)

Part 4. VPLS

Task 5.11: LDP-based VPLS

Task 5.12: BGP-based VPLS

Task 5.13: Advanced VPLS

Task 5.14: VLAN Normalization (Approach 1)

Task 5.15: VLAN Normalization (Approach 2)

Task 5.16: VPLS Features

Task 5.17: BUM Replication with P2MP LSP

Chapter 6: Multicast VPN

Task 6.1: PIM Sparse Mode

Task 6.2: P2MP LDP Inclusive Provider Tunnel

Task 6.3: P2MP RSVP Inclusive Provider Tunnel

Page 8: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Chapter 7: Class of Service

Task 7.1: Multi-field classification

Task 7.2: BA classification

Task 7.3: Policing

Task 7.4: Scheduling

Task 7.5: WRED drop profiles

Task 7.6: Rewrite rules

Task 7.7: Class-based forwarding (CBF)

Task 7.8: LSP policing

Full day lab challenge

Part 1: System Features

Task 1.1: Services configuration

Task 1.2: Centralized authentication management

Task 1.3: Local user configuration

Task 1.6: Active configuration archival

Task 1.7: Interface configuration

Task 1.8: RE Protection

Task 1.9: Advanced prefix matching

Task 1.10: Advanced RE protection

Part 2: IGP

Task 2.1: Troubleshooting

Task 2.2: Multiple IP addresses on OSPF interface

Task 2.3: RIP

Task 2.4: IS-IS authentication

Task 2.5: IS-IS and OSPF Redistribution

Task 2.6: IPv6 routing

Task 2.7 General requirements

Part 3: MPLS

Task 3.1: MPLS and RSVP configuration

Task 3.2: LSPs between SRX2 and SRX7

Task 3.3: LSPs between SRX1 and SRX6

Task 3.4: LSP protection

Task 3.5: LSPs between SRX6 to SRX3

Task 3.6: LDP configuration

Task 3.7: LSP forwarding based on CoS

Page 9: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 4: BGP

Task 4.1: iBGP configuration

Task 4.2: eBGP configuration

Task 4.3: Customer BGP policy

Task 4.4: Upstream BGP policy

Task 4.5: Partner BGP policy

Task 4.6: IPv6 tunneling

Task 4.7: BGP general requirements

Part 5: VPN

Task 5.1: VPN Infrastructure

Task 5.2: OSPF-based L3VPN

Task 5.3: BGP-based L3VPN

Task 5.4: L2circuit VPN configuration

Task 5.9: BGP VPLS configuration

Task 5.6: VPLS transport

Appendix Chapter 1: System Features

Task 1.1: Primary hostname/user configuration

Task 1.2: Aggregated interface configuration

Task 1.3: Advanced aggregated interface configuration

Task 1.4: Network integration - NTP

Task 1.5: Network Integration - Configuration archival

Task 1.6: Network Integration - Syslog

Task 1.7: Static routing and jumbo frames support

Task 1.8: SNMPv2 Configuration

Task 1.9: Basic RE Protection

Appendix: Chapter 2 - IGP

Part 1: IS-IS Troubleshooting

Part 2: Single-area OSPFv2

Task 2.1 Single-area OSPFv2 baseline

Task 2.2 OSPFv2 Network Types

Task 2.3 OSPFv2: DR/BDR election

Task 2.4 OSPFv2: Authentication

Task 2.5 OSPFv2: Timers

Task 2.6 OSPFv2: BFD

Task 2.7 OSPFv2: Passive interfaces

Task 2.8 OSPFv2: Load-balancing

Task 2.9 OSPFv2: Cost tuning

Task 2.10: OSPFv2: Miscellaneous features

Page 10: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 3: Multi-area OSPFv2

Task 3.1 OSPFv2: Multi-area baseline

Task 3.2 OSPFv2: Redistribution

Task 3.3 OSPFv2: NSSA

Task 3.4 OSPFv2: Summarization

Part 4: Multi-level IS-IS

Task 4.1: IS-IS Baseline

Task 4.2: IS-IS Authentication

Task 4.3: IS-IS Timers

Task 4.4: IS-IS Route Leaking

Part 5: OSPFv3 and IS-IS (IPv6)

Task 5.1

Task 5.2

Task 5.3

Appendix: Chapter 3 - MPLS

Part 1. RSVP

Task 3.1: MPLS and RSVP baseline

Task 3.2: RSVP Refresh Reduction and Authentication

Task 3.3: RSVP LSP without CSPF

Task 3.4: RSVP ERO

Task 3.5. RSVP Load-Balancing

Task 3.7: RSVP LSP Primary and Secondary Paths

Task 3.8: RSVP LSP Policing and Timers

Task 3.9: RSVP LSP Usage for Internal Traffic

Task 3.10: RSVP LSP Optimization.

Task 3.11: RSVP Node/Link Protection

Task 3.12: Fast Reroute for RSVP LSP

Task 3.13: RSVP Link Coloring

Task 3.14: RSVP Link Coloring (cont.)

Task 3.15: RSVP LSP Auto-Bandwidth

Task 3.16: RSVP LSP TTL Handling

Part 2. LDP

Task 3.17: LDP Baseline

Task 3.18: LDP Tunneling

Task 3.19: LDP Policies

Page 11: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Appendix: Chapter 4 - BGP

Part 1. Basic BGP

Task 4.1: iBGP full mesh

Task 4.2: eBGP Neighborship and Authentication.

Task 4.3: Enabling BFD for BGP.

Task 4.4: BGP Route Injection and AS Path Manipulation.

Task 4.5: Destination-based Remote-Triggered Blackhole (RTBH) Filtering

Task 4.6: Source-based RTBH Filtering

Part 2. BGP Policies

Task 4.8: BGP Prefix Propagation and BGP Multipath.

Task 4.9: BGP Prefix Filtering.

Task 4.10: BGP Prefix Origination and Filtering

Task 4.11: BGP Conditional Route Advertising

Task 4.12:

Task 4.13: BGP Scaling

Task 4.14: IPv6 Tunneling through IPv4/MPLS Cloud

Appendix: Chapter 5 - VPN

Part 1. L3VPN

Task 5.1: L3VPN with BGP as PE-CE protocol

Task 5.2: L3VPN transparency.

Task 5.3: Hub and Spoke VPN (BGP-based)

Task 5.4: VPN Route Leaking

Task 5.5: VPN Internet Access

Task 5.6: OSPF Sham Link

Task 5.7: Hub and Spoke L3VPN (OSPF)

Task 5.8: Martini L2VPN

Task 5.9: Kompella L2VPN (VC Type 4)

Task 5.10: Kompella L2VPN (VC Type 5)

Task 5.11: LDP-based VPLS

Task 5.12: BGP-based VPLS

Task 5.13: Advanced VPLS

Task 5.14: VLAN Normalization (Approach 1)

Task 5.15: VLAN Normalization (Approach 2)

Task 5.16: VPLS Features

Task 5.17: BUM Replication with P2MP LSP

Appendix: Chapter 6 - Multicast

Task 6.1: PIM Sparse Mode

Task 6.2: P2MP LDP Inclusive Provider Tunnel

Task 6.3: P2MP RSVP Inclusive Provider Tunnel

Page 12: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Appendix: Chapter 7 - Class of Service

Task 7.1: Multi-field classification

Task 7.2: BA classification

Task 7.3: Policing

Task 7.4: Scheduling

Task 7.5: WRED drop profiles

Task 7.6: Rewrite rules

Task 7.7: Class-based forwarding (CBF)

Task 7.8: LSP policing

Appendix – Full day lab challenge

Part 1: System Features

Task 1.1: Services configuration

Task 1.2: Centralized authentication management

Task 1.3: Local user configuration

Task 1.6: Active configuration archival

Task 1.7: Interface configuration

Task 1.8: RE Protection

Part 2: IGP

Task 2.1: Troubleshooting

Task 2.2: Multiple IP addresses on OSPF interface

Task 2.3: RIP

Task 2.4: IS-IS authentication

Task 2.5: IS-IS and OSPF Redistribution

Task 2.6: IPv6 routing

Task 2.7 General requirements

Part 3: MPLS

Task 3.1: MPLS and RSVP configuration

Task 3.2: LSPs between SRX2 and SRX7

Task 3.3: LSPs between SRX1 and SRX6

Task 3.5: LSPs between SRX6 to SRX3

Task 3.6: LDP configuration

Task 3.7: LSP forwarding based on CoS

Part 4: BGP

Task 4.1: iBGP configuration

Task 4.3: Customer BGP policy

Task 4.7: BGP general requirements

Page 13: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 5: VPN

Task 5.1: VPN Infrastructure

Task 5.2: OSPF-based L3VPN

Task 5.3: BGP-based L3VPN

Task 5.4: L2circuit VPN configuration

Task 5.9: BGP VPLS configuration

Task 5.6: VPLS transport

Part 1: IS-IS TroubleshootingInitial configs: IS-IS-TShoot

Objective: Troubleshoot IS-IS adjacencies in the rack. They should be established across logical connec-

tions between the routers according to the diagram. All neighbors should have no more than one adjacen-

cy across each logical interface.

Page 14: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 2: Single-area OSPFv2

Initial configs: IPv4-basic

Task 2.1 Single-area OSPFv2 baseline

• Configure OSPFv2 area 0 on all router’s interfaces according to the diagram.

Task 2.2 OSPFv2 Network Types

• Reconfigure R3 and R4 so that there will be no DR/BDR election on the links

between R3 and R4.

Task 2.3 OSPFv2: DR/BDR election

• Reconfigure R1-R3 and R2-R4 OSPF adjacencies so that R3 and R4 will always

be the DRs on their respective segments.

• You are allowed to configure R1 and R2 routers only.

Task 2.4 OSPFv2: Authentication

• Configure clear text authentication between R1 and R3 using password “R1R3CLR”

• Configure MD5 authentication between R2 and R4 using password “R2R4MD5”

Page 15: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Chapter 3: MPLS

Introduction:

MPLS is a technology that plays an invaluable role in any modern SP network providing different services

to its customers. This is not only “just another way” of switching packets carried across SP network, but

its an approach of building a scalable universal infrastructure ready to support existing and introduc-

ing new services in the future by defining a number of different ways of assigning packets to Labeled

Switched Paths (LSP). LSPs are unidirectional tunnels between MPLS nodes.

MPLS-enabled router (called LSR in MPLS terminology) performs exact-match label lookup to understand

which outgoing interface to be use for packet delivery instead of traditional, longest-match lookup of

destination IP address against the routing table. Labels are pushed on IP packets between its Layer2 and

Layer 3 headers on the edge of MPLS network by edge routers commonly called PE (provider-edge) rout-

ers. The operation of adding MPLS labels to the stack is called “push”, which is mostly performed on MPLS

ingress nodes. On intermediate MPLS nodes the MPLS label is changed, this operation is called “swap”. On

the egress MPLS node, the operation of removing the MPLS label from IP packet is called the “pop” opera-

tion and is performed by either the egress PE or in most of cases the Penultimate Hop MPLS node (PHP).

PHP behavior optimizes label operations by removing the upper MPLS label from the label stack on the

second-to-last (penultimate) MPLS node before LSP egress. This approach helps to avoid double opera-

tions on the egress PE router: popping the label and performing regular longest-match IP lookup.

Task 3.15: RSVP LSP Auto-Bandwidth• Enable auto-bandwidth on LSP AG1 with bandwidth reallocation interval set to 300 seconds.

• Adjust the auto-bandwidth statistics interval to 30 seconds and use the name “mpls-stat”

for the statistics file.

Task 3.1: RSVP LSP TTL Handling• On Orange LSP enable Juniper proprietary mechanism for TTL handling,

making LSP visible as a “2-hop router”.

Enter this temporary vouchercode within 1 week to get

10% off your purchase! ( workbooks only ) G

o to:

www.bit.ly/2cE5T1Z

H2993DJ

Automatically expires within one week of downloading this demo workbook

Page 16: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 2. LDPInitial configurations: OSPFv2-baseline

Task 3.17: LDP Baseline

• Enable LDP on R1-R3 and R2-R4 links and also on R1 and R2 loopback interfaces.

• LDP sessions should be extended and authenticated with MD5 hashes of R1R3 and

R2R4 passwords respectively.

• On both pairs, ensure that LDP sessions will not be established with non-configured LDP peers.

Page 17: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 1. L3VPNInitial configuration: Part 1

Task 5.1: L3VPN with BGP as PE-CE protocol• Configure VPN B using interfaces and addressing according to the diagram using

BGP as PE-CE routing protocol.

• Modify configuration so that PE routers receive only the VPNv4 prefixes that have

locally configured route-targets

• RDs and RTs can be any values of your choice.

Content o

nly available

in th

e origin

al work

book

Page 18: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Part 5: OSPFv3 and IS-IS (IPv6)Initial configs: OSPFv3-IS-IS-IPv6

Task 5.1

• Configure IS-IS and OSPFv3 baseline according to the diagram.

Configuration:

R1:

set interfaces ge-0/0/4 unit 13 family iso

set interfaces ge-0/0/4 unit 15 family iso

set interfaces lo0.0 family iso address 49.0001.1111.1111.1111.00

set protocols isis level 1 disable

set protocols isis interface ge-0/0/4.13

set protocols isis interface ge-0/0/4.15

set protocols isis interface lo0.0

Page 19: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

R5:

set interfaces ge-0/0/4 unit 15 family iso

set interfaces ge-0/0/4 unit 35 family iso

set interfaces lo0.0 family iso address 49.0001.5555.5555.5555.00

set protocols isis level 1 disable

set protocols isis interface ge-0/0/4.15

set protocols isis interface ge-0/0/4.35

set protocols isis interface lo0.0

set protocols ospf3 area 0 interface ge-0/0/4.25

Verification:

lab@R1# run show isis adjacency

Interface System L State Hold (secs) SNPA

ge-0/0/4.13 R3 2 Up 6 2c:21:72:cd:26:84

ge-0/0/4.15 R5 2 Up 7 f8:c0:1:dd:3:84

lab@R3# run show isis adjacency

Interface System L State Hold (secs) SNPA

ge-0/0/4.13 R1 2 Up 26 0:26:88:ef:75:84

ge-0/0/4.35 R5 2 Up 8 f8:c0:1:dd:3:84

lab@R2# run show ospf3 neighbor

ID Interface State Pri Dead

10.10.1.4 ge-0/0/4.24 Full 128 32

Neighbor-address fe80::fac0:100:18dc:3184

10.10.1.5 ge-0/0/4.25 Full 128 36

Neighbor-address fe80::fac0:100:19dd:384

lab@R4# run show ospf3 neighbor

ID Interface State Pri Dead

10.10.1.3 ge-0/0/1.0 Full 128 36

Neighbor-address fe80::2e21:72ff:fecd:2681

10.10.1.2 ge-0/0/4.24 Full 128 35

Neighbor-address fe80::fac0:100:18dd:204

Page 20: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Task 5.3• Enable redistribution on R3 and R5 between OSPFv3 and IS-IS.

• Make sure you have full IP reachability between all existing prefixes and at the

same time there are no routing loops and suboptimal routing.

Configuration:

R3 and R5:

set policy-options policy-statement isis-ospf term 1 from protocol isis

set policy-options policy-statement isis-ospf term 1 then accept

set protocols ospf3 export isis-ospf

set policy-options policy-statement ospf-isis term 1 from protocol ospf3

set policy-options policy-statement ospf-isis term 1 then accept

set protocols isis export ospf-isis

set protocols isis level 2 external-preference 149

Verification:

After enabling mutual redistribution on R3 and R5:

lab@R5# run show route 2000:db8::1

inet6.0: 24 destinations, 37 routes (24 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2000:db8::/64 *[OSPF3/150] 00:05:08, metric 10, tag 0

> to fe80::fac0:100:19dd:204 via ge-0/0/4.25

[IS-IS/165] 00:24:53, metric 10

> to fe80::226:8800:fef:7584 via ge-0/0/4.15

lab@R5# run traceroute 2000:db8::1

traceroute6 to 2000:db8::1 (2000:db8::1) from 2001:db8:0:19::5, 64 hops max, 12 byte packets

1 2001:db8:0:19::2 (2001:db8:0:19::2) 9.990 ms 3.696 ms 4.775 ms

2 2001:db8:0:18::4 (2001:db8:0:18::4) 8.211 ms 8.387 ms 7.661 ms

3 2001:db8:0:22::3 (2001:db8:0:22::3) 7.506 ms 7.619 ms 8.077 ms

4 2001:db8:0:d::1 (2001:db8:0:d::1) 8.149 ms !A 2.576 ms !A 7.983 ms !A

We see the suboptimal routing to the prefix originated at R1: R5->R2->R4->R3->R1 instead going directly

to R1 due to a better external preference of OSPFv3 (150) in comparison with IS-IS L2 external preference

(165).

Enter this temporary vouchercode within 1 week to get

10% off your purchase! ( workbooks only ) G

o to:

http://bit.ly/2cE5T1Z

H2993DJ

Automatically expires within one week of downloading this demo workbook

Page 21: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

lab@R5# run show route 2000:db8::1

inet6.0: 24 destinations, 37 routes (24 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2000:db8::/64 *[OSPF3/150] 00:05:08, metric 10, tag 0

> to fe80::fac0:100:19dd:204 via ge-0/0/4.25

[IS-IS/165] 00:24:53, metric 10

> to fe80::226:8800:fef:7584 via ge-0/0/4.15

To resolve this IS-IS L2 external preference should be “better” than OSPFv3 one. This can be achieved by 2

ways: increasing OSPFv3 external preference or decreasing IS-IS L2 external one on both R3 and R5.

After changing L2 external preference:

lab@R5# run show route 2000:db8::1

inet6.0: 24 destinations, 34 routes (24 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both

2000:db8::/64 *[IS-IS/149] 00:10:59, metric 10

> to fe80::226:8800:fef:7584 via ge-0/0/4.15

[OSPF3/150] 00:45:28, metric 10, tag 0

> to fe80::fac0:100:19dd:204 via ge-0/0/4.25

lab@R5# run traceroute 2000:db8::1

traceroute6 to 2000:db8::1 (2000:db8::1) from 2001:db8:0:f::5, 64 hops max, 12 byte packets

1 2001:db8:0:f::1 (2001:db8:0:f::1) 7.623 ms !A 3.332 ms !A 7.466 ms !A

Now, everything works as expected.

Page 22: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Appendix: Chapter 3 - MPLS

Part 1. RSVPInitial configurations: OSPFv2-baseline

Task 3.1: MPLS and RSVP baseline • Enable MPLS processing and RSVP signalling on all interfaces from the diagram on all routers

Configuration:

R1:

set interfaces ge-0/0/4.13 family mpls

set protocols mpls interface all

set protocols rsvp interface ge-0/0/4.13

Page 23: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

R2:

set interfaces ge-0/0/4.24 family mpls

set protocols mpls interface all

set protocols rsvp interface ge-0/0/4.24

R3:

set interfaces ge-0/0/1.0 family mpls

set interfaces ge-0/0/2.0 family mpls

set interfaces ge-0/0/4.13 family mpls

set interfaces ge-0/0/4.35 family mpls

set protocols mpls interface all

set protocols rsvp interface ge-0/0/1.0

set protocols rsvp interface ge-0/0/2.0

set protocols rsvp interface ge-0/0/4.13

set protocols rsvp interface ge-0/0/4.35

R4:

set interfaces ge-0/0/1.0 family mpls

set interfaces ge-0/0/2.0 family mpls

set interfaces ge-0/0/4.24 family mpls

set interfaces ge-0/0/4.45 family mpls

set protocols mpls interface all

set protocols rsvp interface ge-0/0/1.0

set protocols rsvp interface ge-0/0/2.0

set protocols rsvp interface ge-0/0/4.24

set protocols rsvp interface ge-0/0/4.45

R5:

set interfaces ge-0/0/4.35 family mpls

set interfaces ge-0/0/4.45 family mpls

set protocols mpls interface all

set protocols rsvp interface ge-0/0/4.35

set protocols rsvp interface ge-0/0/4.45

Page 24: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Verification:

lab@R1> show mpls interface

Interface State Administrative groups (x: extended)

ge-0/0/4.13 Up <none>

lab@R1> show rsvp interface

RSVP interface: 1 active

Active Subscr- Static Available Reserved

Highwater

Interface State resv iption BW BW BW mark

ge-0/0/4.13 Up 1 100% 1000Mbps 1000Mbps 0bps 0bps

lab@R2> show mpls interface

Interface State Administrative groups (x: extended)

ge-0/0/4.24 Up <none>

lab@R2> show rsvp interface

RSVP interface: 1 active

Active Subscr- Static Available Reserved

Highwater

Interface State resv iption BW BW BW mark

ge-0/0/4.24 Up 0 100% 1000Mbps 1000Mbps 0bps 0bps

lab@R3> show mpls interface

Interface State Administrative groups (x: extended)

ge-0/0/1.0 Up <none>

ge-0/0/2.0 Up <none>

ge-0/0/4.13 Up <none>

ge-0/0/4.35 Up <none>

lab@R3> show rsvp interface

RSVP interface: 4 active

Active Subscr- Static Available Reserved

Page 25: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Highwater

Interface State resv iption BW BW BW mark

ge-0/0/1.0 Up 1 100% 1000Mbps 1000Mbps 0bps 0bps

ge-0/0/2.0 Up 0 100% 1000Mbps 1000Mbps 0bps 0bps

ge-0/0/4.13 Up 0 100% 1000Mbps 1000Mbps 0bps 0bps

ge-0/0/4.35 Up 0 100% 1000Mbps 1000Mbps 0bps 0bps

lab@R4> show mpls interface

Interface State Administrative groups (x: extended)

ge-0/0/1.0 Up <none>

ge-0/0/2.0 Up <none>

ge-0/0/4.24 Up <none>

ge-0/0/4.45 Up <none>

lab@R4> show rsvp interface

RSVP interface: 4 active

Task 5.6: VPLS transport

• For conserving bandwidth make sure that for ingress replication over the VPLS, ingress PEs are

sending only one packet for each broadcast, unknown or multicast frame. Replication should be done

downstream to the egress.

On SRX1, SRX6 and SRX7 devices:

[edit]

lab@srx1# set protocols mpls label-switched-path vpls-p2mp-dynamic template

[edit]

lab@srx1# set protocols mpls label-switched-path vpls-p2mp-dynamic optimize-timer 450

[edit]

lab@srx1# set protocols mpls label-switched-path vpls-p2mp-dynamic p2mp

[edit]

lab@srx1# set routing-instances VPLS-1 provider-tunnel rsvp-te label-switched-path-template

vpls-p2mp-dynamic

[edit]

lab@srx1# commit

commit complete

Page 26: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

Verification:

[edit]

lab@srx1# run show mpls lsp p2mp

Ingress LSP: 1 sessions

P2MP name: 172.30.30.1:6:vpls:VPLS-1, P2MP branch count: 1

To From State Rt P ActivePath LSPname

172.30.30.6 172.30.30.1 Up 0 * 172.30.30.6:172.30.30.1:6:vpls:VPLS-1

Total 1 displayed, Up 1, Down 0

Egress LSP: 4 sessions

P2MP name: 172.30.30.6:5:vpls:VPLS-2, P2MP branch count: 1

To From State Rt Style Labelin Labelout LSPname

172.30.30.1 172.30.30.6 Up 0 1 SE 262145 - 172.30.30.1:172.30.30.6:5:vpls:VPLS-2

P2MP name: 172.30.30.7:7:vpls:VPLS-2, P2MP branch count: 1

To From State Rt Style Labelin Labelout LSPname

172.30.30.1 172.30.30.7 Up 0 1 SE 3 - 172.30.30.1:172.30.30.7:7:vpls:VPLS-2

Total 2 displayed, Up 2, Down 0

Transit LSP: 0 sessions

Total 0 displayed, Up 0, Down 0

[edit]

lab@srx6# run show mpls lsp p2mp

Ingress LSP: 1 sessions

P2MP name: 172.30.30.6:5:vpls:VPLS-2, P2MP branch count: 1

To From State Rt P ActivePath LSPname

172.30.30.1 172.30.30.6 Up 0 * 172.30.30.1:172.30.30.6:5:vpls:VPLS-2

Total 1 displayed, Up 1, Down 0

Egress LSP: 5 sessions

P2MP name: 172.30.30.1:6:vpls:VPLS-1, P2MP branch count: 1

To From State Rt Style Labelin Labelout LSPname

172.30.30.6 172.30.30.1 Up 0 1 SE 262146 - 172.30.30.6:172.30.30.1:6:vpls:VPLS-1

P2MP name: 172.30.30.7:7:vpls:VPLS-2, P2MP branch count: 1

To From State Rt Style Labelin Labelout LSPname

172.30.30.6 172.30.30.7 Up 0 1 SE 3 - 172.30.30.6:172.30.30.7:7:vpls:VPLS-2

Total 2 displayed, Up 2, Down 0

DEMO END

Content only available in the orginal workbook

Page 27: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

This workbook was developed by iNET ZERO.

All rights reserved. No part of this publication may be reproduced or distributed in any form or

by any means without the prior written permission of iNET ZERO a registered company in the

Netherlands. This product cannot be used by or transferred to any other person.

You are not allowed to rent, lease, loan or sell iNET ZERO training products including this

workbook and its configurations. You are not allowed to modify, copy, upload, email or

distribute this workbook in any way. This product may only be used and printed for your

own personal use and may not be used in any commercial way. Juniper (c), Juniper Networks

inc, JNCIE, JNCIP, JNCIS, JNCIA, Juniper Networks Certified Internet Expert, are registered

trademarks of Juniper Networks, Inc.

Page 28: JNCIE-SP v1.1 Technology focused workbook (2017) ·  · 2017-04-05JNCIE-SP v1.1 Technology focused workbook (2017) ... Primary hostname/user configuration Task 1.2: ... Task 7.8:

This original workbook helped over more than 340+ people achieve the expert certification

Unfortunately you have reached the end of this demo workbook.

Enter this temporary vouchercode within 1 week to get

10% off your purchase! ( workbooks only ) Go to:

http://bit.ly/2cE5T1Z

H2993DJAutomatically expires within one week of downloading this demo workbook