Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility

1 Summary of Supported Features

• Supported IP Service Activator Features
  • QoS and Access Control Support
  • MPLS VPN Support
  • Layer 2 Martini VPN Support
  • MPLS Label Switched Path (LSP) Support
• Supported Juniper M-series and T-series Hardware and Software
• Supported Devices
  • Supported JUNOS Versions
  • Juniper-supported Interface Types
  • Supported Traffic Types
• Enhanced Command Threshold Control for Juniper Device Driver

2 Installation and Set-up Notes

• Installation Notes
• Command-line Parameters
  • Setting Command-line Parameters on Oracle Solaris
  • Exporting Routes Between Routing Instances in Overlapping MPLS VPNs
    • The Juniper Device Driver and Existing RIB-group Statements
    • Upgrading Devices from Using RIB Groups to Using auto-export
    • Over-riding the auto-export Command with -UseRIBGroup

3 Discovery and Configuration

• JUNOS Configuration Files
  • About the Configuration Hierarchy
  • About Configuration Groups
  • About Active Configuration
• Communication and Authentication
  • Configuring SSH Authentication Keys
• Obtaining Device Capabilities
• Applying IP Service Activator Configuration
  • Setting Routing Instance Annotation Limits
  • Checking and Forcing Consistency
  • Maintaining Synchronization Between Routing Engines
  • Lengthening the Time Between IP Service Activator Commit Commands
• Offline Configuration
  • Implementing Offline Configuration
  • Command-line Parameters
    • The -FileConfigDeliver and -FileConfigDeliveryDir Parameters
    • The -NoDeviceComm Parameter
    • The -EnableFtp Parameter
• Important Configuration Notes

4 Manual Preconfiguration

• Configuring SNMP
• Configuring User Access Privileges
• Enabling SSH and Telnet
  • Using SSH Authentication
• Checking for Pre-existing System and Group Configurations
• Performing Mandatory Manual Preconfiguration for MPLS VPNs
  • Manually Configuring PE Routers
    • Configuring IP and MPLS on Core Interfaces
    • Configuring Loopback Interfaces
    • Enabling LSPs
  • Manually Configuring P Routers
  • Manually Configuring CE Routers
• Performing Optional Manual Preconfiguration for MPLS VPNs
  • About Predefined Export Maps
  • About Predefined Route List Filters
    • Configuring a Route List Filter
    • Configuring a Prefix List Filter
  • About Predefined Filtering Policies for Route Redistribution
• Performing Manual Preconfiguration for MPLS Tunneling CCCs
  • Configuring RSVP
  • Manually Preconfigured BGP Peering
    • PE Routers in the Same AS
    • PE Routers in More Than One AS
• Performing Mandatory Manual Preconfiguration for Layer 2 Martini VPNs
  • Performing Manual Preconfiguration for Martini Circuits on Ethernet Interfaces

5 Configuration of MPLS VPNs

• Prerequisites for MPLS VPN Configuration
  • Preconfiguring Routers
  • Setting Domain-level Parameters
  • Assigning Roles
• About Routing Tables and Route Targets
  • About VRF Tables
    • About vrf-table-label Keyword
  • Setting Route Distinguishers
  • Setting RD Number per VPN
  • VPN Topology and Route Targets
  • About VRF Import and Export Policies
    • Configuring the Export Policy
    • Configuring the Import Policy
  • Exporting Routes Between Routing Instances in Overlapping VPNs
  • About VRF Re-use and Reduction
  • About Previously Defined Export Maps
  • About Load Balancing in Layer 3 VPNs
• Configuring PE-PE Peering
  • Configuring iBGP
  • Co-existence with Previously Configured iBGP
  • Configuring MD5 Authentication
  • Configuring MPLS on Interfaces (Access Only)
  • Interface IP Address
• About PE-CE Communications
  • PE-CE Communication Using eBGP
    • Basic Juniper Commands
    • eBGP-to-CEs
    • Allow AS In
    • AS Override
    • Local Preference
    • Authentication
    • Route Prefix Filters
    • Prefix Limit
    • Site of Origin
    • eBGP Load Sharing
    • Route Dampening
  • PE-CE Communication Using RIP
  • PE-CE Communication Using OSPF
    • OSPF Domain Tag
  • PE-CE Communication Using Static Routes
    • Specifying the Location of the Next-hop Address
    • Specifying that a Route is Permanent
• Route Redistribution
  • Specifying Metrics for Route Redistribution

6 Configuring Layer 2 Martini VPNs

• Overview of Layer 2 Martini VPNs
  • About Encapsulation Protocols
  • Base Configuration
• Setting Up Layer 2 Martini VPNs
• Provisioning and Deleting Sub-interfaces
  • Provisioning Sub-interfaces for a Layer 2 Martini Connection
    • Creating a Sub-interface for a Layer 2 Martini VPN
    • Checking the Configuration Added to the Device
    • Hints and Tips
  • Deleting Provisioned Sub-interfaces
    • Hints and Tips
• Configuration Requirements
  • MPLS Requirements
  • OSPF Requirements
  • LDP Requirements
• Juniper Commands
  • Defining Endpoints for Data Encapsulation
  • Modifying a Sub-interface's DLCI Number
  • Working with Pre-existing VLAN, DLCI, and VC Endpoints
    • Modifying Endpoint Values
  • Defining the Martini Tunnel

7 Configuring QoS and Access Control Features

• Juniper QoS Features
  • FPC Structure
  • Juniper CoS Overview
  • Firewall Filters
  • Classification of Packets and Queue Selection
• Access Rules
  • Implementing Access Rules
  • Features Supported by Access Rules
    • Header Logging Configuration Details
    • About TCP Control Bit Filtering in Access Rules
  • Example Configuration
• Rate Limiting
  • Juniper Commands
  • Implementing Rate Limiting
  • Example Configuration
• Weighted Round Robin Queuing Mechanism
  • Juniper Commands
    • Classification by Firewall Filters
    • Scheduling Policy Maps
  • Implementing Weighted Round Robin Queuing
  • Example Juniper MPLS PHB Group-WRR
    • Example Configuration for the Example Juniper MPLS PHB Group-WRR

8 Troubleshooting

• Checking the Juniper M-series Device Logs
• Discovering Juniper M-series Devices
• Communication Problems
• Commit Errors
• Inheritance Groups
• Useful JUNOS Commands

9 Useful References

• Juniper Website
  • Juniper Publications
  • Martini Drafts
• Juniper M-series Technical Documentation

A MPLS-VPN Device Configuration

• Sample Network