Juniper JUNOS Cartridge Guide
Release 7.3
E61109-03
June 2016
This guide provides detailed technical information about the Oracle Communications IP Service Activator Juniper JUNOS cartridge, including supported features, options, device configuration information, and a sample device configuration.
This guide consists of the following sections:
This guide is intended for network managers and technical consultants responsible for implementing IP Service Activator within a network using Juniper routers.
IP Service Activator for Oracle Communications documentation and additional Oracle documentation is available from Oracle Help Center:
For more information, see the following documents in the IP Service Activator documentation set:
See IP Service Activator Installation Guide for system requirements and information on installing, upgrading and uninstalling IP Service Activator.
See IP Service Activator System Administrator's Guide for information and procedures related the duties a system administrator performs in monitoring and managing IP Service Activator.
Oracle Communications IP Service Activator cartridges enable you to support the existing services, and also evolve to support emerging services and business needs. The cartridges operate in conjunction with IP Service Activator core product. For more information, see IP Service Activator Concepts.
The following tables list the features and services supported by the IP Service Activator Juniper JUNOS cartridge.
Table 1 lists the support for general IP Service Activator features on the Juniper JUNOS cartridge.
Table 1 General IP Service Activator Features
Area | IP Service Activator Feature | Supported on Juniper JUNOS Cartridge |
---|---|---|
Configuration Protocol Support |
Telnet |
Yes |
Configuration Protocol Support |
Secure Shell (SSH) |
Yes |
Configuration Protocol Support |
Simple Network Management Protocol (SNMP) |
No |
Configuration Protocol Support |
Vendor Proprietary |
No |
Device Discovery |
SNMP |
Yes |
Device Discovery |
Discovery Module |
No |
Device Configuration |
Configuration Audit |
Yes |
Device Configuration |
Command Re-issue |
Yes |
Device Configuration |
Auto ID Migration |
Yes |
Device Configuration |
Save Running Configuration |
Yes |
Device Configuration |
Configuration Version |
No |
Device Configuration |
Configuration Options |
Yes |
Device Configuration |
Synonyms |
Yes |
Device Configuration |
Command Thresholding |
Yes |
Device Configuration |
Threshold Activated Configuration Control |
Yes |
Supported Services |
Transparent Local Area Network (LAN) Service |
No |
Supported Services |
Interface Configuration Management |
Yes |
Supported Services |
Quality of Service (QoS) |
No |
Supported Services |
Layer 3 Multiprotocol Label Switching (MPLS) VPN |
Yes |
Supported Services |
Service Assurance Agent (SAA) |
No |
Supported Services |
Netflow |
No |
Supported Services |
Dynamic User VPN |
No |
Supported Services |
IPsec |
No |
Supported Services |
Virtual Routing and Forwarding (VRF)-Aware IPsec |
No |
Supported Services |
Label Switched Path (LSP) |
No |
Supported Services |
VLAN |
No |
Supported Services |
Base Configuration Policies |
No |
Supported Services |
Layer 2 QoS |
No |
Supported Services |
QoS Attachment |
No |
Supported Services |
VRF Route Maps |
No |
Supported Services |
Virtual Customer Edge (CE) |
No |
Supported Services |
VPN and IP Multicast Module |
No |
Supported Services |
Configuration Template Manager |
Yes |
Supported Services |
QoS with Hierarchical Queuing Framework |
No |
Supported Services |
QoS on ASR Devices |
No |
Configuration Management |
Configuration Archiving and Versioning |
Yes |
Configuration Management |
Configuration Restore |
Yes |
Configuration Management |
Service Configuration Auditing |
Yes |
Configuration Management |
Service Configuration Traceability |
Yes |
Configuration Management |
Service Repair |
Yes |
Configuration Management |
Real-time Configuration Change Tracking |
No |
SDK |
Service Cartridge Software Development Kit (SDK) |
Yes |
SDK |
Configuration Policy SDK |
Yes |
Table 2 lists the Layer 3 MPLS VPN support on the Juniper JUNOS L3 VPN cartridge.
Table 2 Layer 3 MPLS VPN Support
Area | IP Service Activator Feature | Supported on Juniper JUNOS Cartridge |
---|---|---|
Layer 3 MPLS VPN Support |
Layer 3 MPLS VPN Support |
Yes |
Topology |
Mesh |
Yes |
Topology |
Hub and Spoke |
Yes |
Topology |
Management |
Yes |
Addressing |
Public IP (IPv4 and IPv6) |
Yes |
Addressing |
Private IP (IPv4 and IPv6 |
Yes |
Addressing |
Unnumbered |
No |
Addressing |
Interface Description |
Yes |
VRF Table |
Virtual Routing and Forwarding (VRF) Export Map Reference |
Yes |
VRF Table |
VRF Import Map Reference |
Yes |
VRF Table |
VRF Dynamic Host Configuration Protocol (DHCP) Helper |
No |
VRF Table |
VRF Description |
Yes |
VRF Table |
VRF Label |
Yes |
VRF Table |
VRF Route Targets |
Yes |
VRF Table |
VRF Table Name |
Yes |
VRF Table |
VRF Route Distinguisher |
Yes |
VRF Table |
VRF Route Limit (Max Routes) (IPv4 and IPv6) |
Yes |
VRF Table |
EIBGP Multipath Load Sharing |
Yes |
VRF Table |
External Border Gateway Protocol (EBGP) Multipath Load Sharing |
Yes |
VRF Table |
Enhanced Interior Gateway Routing Protocol (EIGRP) Multipath Load Sharing |
No |
VRF Table |
Internal Border Gateway Protocol (IBGP) Multipath Load Sharing |
No |
VRF Table |
IBGP Unequal-cost |
No |
VRF Table |
VRF Import (Max Paths) |
No |
VRF Table |
VRF Target |
No |
VRF Table |
VRF Reduction |
Yes |
VRF Table |
Force Install |
Yes |
VRF Table |
Shareable |
Yes |
VRF Table |
Open Shortest Path First (OSPF) Router ID |
No |
VRF Table |
Interface-less VRF |
No |
Routing Options |
Routing Options |
Yes |
Routing Options |
Autonomous System (AS) |
Yes |
Routing Options |
Autonomous System Number (ASN) Loops |
Yes |
Routing Options |
Independent Domain |
Yes |
Routing Options |
Load Balancing |
Yes |
Routing Options |
IPv4 Multipath |
Yes |
Routing Options |
IPv4 Multipath Unequal Cost |
Yes |
Routing Options |
IPv4 Multipath External and Internal BGP Paths |
Yes |
Routing Options |
IPv6 Multipath |
Yes |
Routing Options |
IPv6 Multipath Unequal Cost |
Yes |
Routing Options |
IPv6 Multipath External and Internal BGP Paths |
Yes |
Static Routing |
Static Global Routes |
Yes |
Static Routing |
Static Local Routes (Redistribution) |
Yes |
Static Routing |
Static Permanent Routes |
Yes |
Static Routing |
Static Tag Value |
Yes |
Static Routing |
Static Next Hop IP Address (IPv4 and IPv6) |
Yes |
Static Routing |
Static Next Hop Interface |
Yes |
Static Routing |
Static Next Hop IP and Interface |
Yes |
Static Routing |
Static Route to Null0 |
Yes |
BGP |
BGP Network Statements (IPv4 and IPv6) |
No |
BGP |
BGP Aggregate Statements (IPv4 and IPv6) |
No |
EBGP |
EBGP AS Override |
Yes |
EBGP |
EBGP Site of Origin |
No |
EBGP |
Remove Private AS |
Yes |
EBGP |
EBGP Update Source |
No |
EBGP |
EBGP Multihop |
Yes |
EBGP |
EBGP Bidirectional Forwarding Detection (BFD) |
Yes |
EBGP |
EBGP Allow AS in |
No |
EBGP |
EBGP Provider Edge (PE)- Customer Edge (CE) MD5 Authentication |
Yes |
EBGP |
EBGP Local AS |
No |
EBGP |
Advertise Address Family (IPv4 and IPv6) |
Yes |
EBGP |
EBGP Local AS No Prepend |
No |
EBGP |
EBGP Neighbor Description |
Yes |
EBGP |
EBGP Soft Reconfiguration |
No |
EBGP |
EBGP Router as Next Hop |
No |
EBGP |
EBGP Neighbor Weight |
No |
EBGP |
EBGP Filters |
Yes |
EBGP |
EBGP Default Route |
No |
EBGP |
EBGP Prefix Limit (IPv4 and IPv6) |
Yes |
EBGP |
EBGP Prefix Limit Restart (IPv4 and IPv6) |
Yes |
EBGP |
EBGP Prefix Filters |
Yes |
EBGP |
EBGP Standard Community Attributes |
No |
EBGP |
EBGP Extended Community Attributes |
No |
EBGP |
EBGP Timers |
Yes |
EBGP |
Keep Alive |
No |
EBGP |
Hold Timer |
Yes |
EBGP |
EBGP Neighbor Advertisement Interval |
No |
EBGP |
EBGP Inbound Route Map |
No |
EBGP |
EBGP Neighbor Site of Origin (SOO) |
No |
EBGP |
External Route Map |
No |
EBGP |
Generated Route Map |
Yes |
EBGP |
EBGP Local Preference |
Yes |
EBGP |
EBGP Site of Origin Route Map |
No |
EBGP |
Route Map Name |
No |
EBGP |
EBGP Outbound Route Map |
No |
EBGP |
External Route Map |
No |
EBGP |
EBGP Route Dampening |
Yes |
EBGP |
Redistribution into Border Gateway Protocol (BGP) |
Yes |
EBGP |
BGP Redistribution Metric and Policy from Connected |
Yes |
EBGP |
BGP Redistribution Metric and Policy from Static |
Yes |
EBGP |
BGP Redistribution Metric and Policy from Routing Information Protocol (RIP) |
Yes |
EBGP |
BGP Redistribution Metric and Policy from OSPF |
Yes |
EBGP |
BGP Redistribution Metric and Policy from EIGRP |
No |
EBGP |
EBGP Neighbor Transport Connection Mode Active/Passive |
No |
EBGP |
EBGP Neighbor Transport PathMTUDiscovery |
No |
EBGP |
EBGP Neighbor Transport Single Session/Multi Session |
No |
EBGP |
EBGP Neighbor |
Yes |
EBGP |
EBGP Log Updown |
Yes |
OSPF |
OSPF Area |
Yes |
OSPF |
OSPF Area Type |
Yes |
OSPF |
OSPF not-so-stubby area (NSSA) Type 7 Redistribution |
No |
OSPF |
OSPF Maximum Paths |
No |
OSPF |
OSPF Cost |
No |
OSPF |
OSPF Process ID |
No |
OSPF |
OSPF BGP Redistribution Tag |
No |
OSPF |
OSPF Distribute in Filter |
No |
OSPF |
OSPF Distribute out Filter |
No |
OSPF |
OSPF Shortest Path First (SPF) Throttling |
No |
OSPF |
OSPF MD5 Authentication |
No |
OSPF |
OSPF Summary Addresses |
No |
OSPF |
Suppress Advertise |
No |
OSPF |
Tag Value |
Yes |
OSPF |
Redistribution into OSPF |
Yes |
OSPF |
OSPF Redistribution Metric and Policy from Connected |
Yes |
OSPF |
OSPF Redistribution Metric and Policy from Static |
Yes |
OSPF |
OSPF Redistribution Metric and Policy from RIP |
Yes |
OSPF |
OSPF Redistribution Metric and Policy from EIGRP |
No |
OSPF |
Default Route |
No |
RIP |
RIP Ignore Routes from Source |
No |
RIP |
RIP Passive Interface |
Yes |
RIP |
Redistribution into RIP |
Yes |
RIP |
RIP Redistribution Metric and Policy from Connected |
Yes |
RIP |
RIP Redistribution Metric and Policy from Static |
Yes |
RIP |
RIP Redistribution Metric and Policy from OSPF |
Yes |
RIP |
RIP Redistribution Metric and Policy from BGP |
Yes |
RIP |
RIP Redistribution Metric and Policy from EIGRP |
No |
RIP |
Default Route |
No |
EIGRP |
EIGRP Device ASN |
No |
EIGRP |
EIGRP Site ASN |
No |
EIGRP |
EIGRP Site of Origin |
No |
EIGRP |
EIGRP Route Map Name for SOO |
No |
EIGRP |
EIGRP MD5 Authentication |
No |
EIGRP |
EIGRP Maximum Paths |
No |
EIGRP |
EIGRP Redistribution |
No |
EIGRP |
EIGRP Redistribution Metrics and Policy from Connected |
No |
EIGRP |
EIGRP Redistribution Metrics and Policy from BGP |
No |
EIGRP |
EIGRP Redistribution Metrics and Policy from Static |
No |
EIGRP |
EIGRP Redistribution Metrics and Policy from OSPF |
No |
EIGRP |
EIGRP Redistribution Metrics and Policy from RIP |
No |
Table 3 lists the Layer 2 VPN support on the Juniper JUNOS L2 VPN cartridge.
Area | IP Service Activator Feature | Supported on Juniper JUNOS Cartridge |
---|---|---|
Layer 2 VPN Support |
Layer 2 VPN Support |
Yes |
Topology |
Mesh |
Yes |
Topology |
Hub and Spoke |
Yes |
Topology |
Point-to-point |
Yes |
Topology |
H-VPLS |
Yes |
Signaling |
BGP |
Yes |
Signaling |
LDP |
Yes |
Discovery |
Auto-discovered |
Yes |
Discovery |
Explicit |
Yes |
MAC Table |
Table size |
Yes |
MAC Table |
Limit action |
No |
MAC Table |
Limit notification |
No |
MAC Table |
Aging time |
Yes |
MAC Table |
Aging type |
No |
VSI |
Profile |
Yes |
VSI |
Route distinguisher: explicit |
Yes |
VSI |
Route distinguisher: auto |
Yes |
VSI |
Bridge domain |
No |
VSI |
Bridge group |
No |
VSI |
Ve range |
No |
VSI |
VeID |
No |
VSI |
VPN ID |
No |
Cross-connect |
Group name |
No |
Cross-connect |
Virtual circuit ID |
Yes |
Cross-connect |
Point-to-point name |
No |
Cross-connect |
Pseudowire name |
No |
Neighbor |
IP Address (IPv4) |
Yes |
Neighbor |
Pseudowire class |
No |
Neighbor |
Pseudowire ID |
No |
Table 4 lists the Interface Configuration Management support on the Juniper JUNOS cartridge.
Table 4 Interface Configuration Management Support
Area | IP Service Activator Feature | Supported on Juniper JUNOS Cartridge |
---|---|---|
Backup Interface |
Backup Interface Policy |
No |
Channelized Interface Creation |
E1 Channelized Interface |
No |
Channelized Interface Creation |
E1 Controller |
No |
Channelized Interface Creation |
E3 Controller |
No |
Channelized Interface Creation |
E3 Channelized Interface |
No |
Channelized Interface Creation |
Synchronous Transport Module level-1 (STM1) Channelized Interface |
No |
Channelized Interface Creation |
STM1 Controller |
No |
Channelized Interface Creation |
T1 Channelized Interface |
No |
Channelized Interface Creation |
T1 Controller |
No |
Channelized Interface Creation |
T3 Channelized Interface |
No |
Channelized Interface Creation |
T3 Controller |
No |
Cisco |
Cisco Ethernet Port |
No |
Cisco |
Cisco Universal Interface |
No |
DialerList |
DialerList |
No |
DLSW |
Data-Link Switching (DLSW) Device |
No |
DLSW |
DLSW Ethernet Interface |
No |
DLSW |
DLSW Token Ring Interface |
No |
HSRP |
Hot Standby Router Protocol (HSRP) |
No |
Interface Creation |
Basic Rate Interface (BRI) |
No |
Interface Creation |
Dialer Interface |
No |
Interface Creation |
Loopback Interface |
No |
Interface Creation |
Multilink Interface |
No |
Interface Creation |
Virtual Template Interface |
No |
Interface Decoration |
POS Interface |
No |
Interface Decoration |
Serial Interface |
No |
Multicast Interface |
Multicast Interface |
No |
PPP Multilink |
PPP Multilink |
No |
SGBP |
Stack Group Bidding Protocol (SGBP) |
No |
Sub Interface Creation |
Asynchronous Transfer Mode (ATM) Sub Interface |
Yes |
Sub Interface Creation |
Frame Relay Sub Interface |
Yes |
Sub Interface Creation |
Virtual Local Area Network (VLAN) Sub Interface |
Yes |
Note:
All supported interface configuration management configuration policies support IPv4 and IPv6 addresses.The L3 VPN options framework in the IP Service Activator Juniper JUNOS cartridge controls the configuration of Layer 3 VPN.
The L3 VPN sample registry file is installed to the following location:
install_dir/ Samples/JUNOSL3VpnSampleRegistry/junos l3Vpn.xml
The L3 VPN sample options file is installed to the following location:
install_dir/ Samples/JUNOSL3VpnSampleRegistry/options
where install_dir is the directory where you installed IP Service Activator.
The following is an example of the location of the options file:
<options> <optionsEntry> <optionsfile>/junosL3Vpn/options/test_options.xml</optionsfile> <appliesTo> <deviceTypes useRegex="true">Juniper.*</deviceTypes> <osVersions useRegex="true">.*</osVersions> </appliesTo> </optionsEntry> </options>
Note:
The paths that are shown in the examples in this section are relative to the Service_Activator_home/Config/networkProcessor directory. Absolute paths are not valid.To configure Juniper JUNOS L3 VPN options:
Create a custom options file based on the sample options file.
Create the following directory:
install_dir/ Config/NetworkProcessor/Custom/Registries
Create a custom registry file in the directory that you created.
Make sure the directory maps the location of the options file to the device type and operating system. For example:
<options> <optionsEntry> <optionsFile>com/oraclecommunications/serviceactivator/cartridges/juniper/junosL3Vpn/options/juniper_cert_test_options.xml</optionsFile> <appliesTo> <deviceTypes useRegex="true">Juniper JuniperM5</deviceTypes> <osVersions useRegex="true">13.2R3.7</osVersions> </appliesTo> </optionsEntry> </options>
Table 5 lists the options that you can set in the Juniper JUNOS L3 VPN cartridge file. The default value is used if an option is not defined.
Table 5 Juniper JUNOS L3 VPN Options
Options | Default Value | Possible Values | Description |
---|---|---|---|
cartridge.juniper.junos.UseMaxPrefixes |
false |
true false |
Sets maximum prefixes when this option is set to true. Otherwise uses the default, which is maximum routes. |
cartridge.juniper.junos.UseRIBGroup |
false |
true false |
Sets routing table group. Uses RIB groups when this option is set to true. |
cartridge.juniper.junos.EnableMPLS |
true |
true false |
Enables the interface: "family mpls" if this option is set to true. |
cartridge.juniper.junos.OverwriteInterfaceDescription |
false |
true false |
Overwrites the interface description, if this option is set to true. |
cartridge.juniper.junos.RemoveInterfaceDescription |
false |
true false |
Removes the interface description when none is provisioned and this option is set to true. |
cartridge.juniper.junos.UseSystemForIp |
true |
true false |
Uses system group instead of the chosen configuration group for IP addresses and the interface description when this option is set to true. Uses the configuration group when this option is set to false. |
cartridge.juniper.junos.ImportFromCommunityCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set policy-options policy-statement {policy-name} term import from community {community-name}" command. |
cartridge.juniper.junos.VrfExportImportCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set routing-instances {vrf-name} (vrf-export|vrf-import) {map-name}" command. |
cartridge.juniper.junos.RedistFromProtocolCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set policy-options policy-statement {policy-name} [term {term-name}] from protocol {protocol(s)}" command. |
cartridge.juniper.junos.MaximumRoutesCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set routing-instances {vrf-name} routing-options (maximum-prefixes|maximum-routes) {value} [log-only|threshold {value}]" command. |
cartridge.juniper.junos.EbgpNeighborExportImportCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set routing-instances {vrf-name} protocols bgp group {group-name} neighbor {IP} (export|import) {policy-name}" command. |
cartridge.juniper.junos.PrefixLimitTeardownCommandFormat |
multiLine |
multiLine singleLine |
Indicates which command format to use: singleLine: uses single line format multiLine (default): uses multiple line format This option is applicable only for "set routing-instances {vrf-name} protocols bgp group {group-name} neighbor {IP} family inet unicast prefix-limit teardown {value} idle-timeout {value}" command. |
cartridge.juniper.junos.commit.sync |
false |
true false |
When the value is set to true, the commit command is sent as the commit synchronize command. |
For cartridge installation and un-installation procedures, see IP Service Activator Installation Guide.
To configure Juniper devices, see the Juniper documentation:
http://www.juniper.net/techpubs/
The IP Service Activator Juniper JUNOS cartridge supports the following authentication methods on all devices:
Telnet with TACACS+
SSH with password authentication
Identify the items that need to be configured on the device, for example: SNMP and Telnet. Refer to the appropriate Juniper documentation for configuration details.
For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc
.
Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info
or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs
if you are hearing impaired.
Oracle Communications IP Service Activator Juniper JUNOS Cartridge Guide, Release 7.3
E61109-03
Copyright © 2010, 2016, Oracle and/or its affiliates. All rights reserved.
This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.
If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:
U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.
This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.
Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.
This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.