Juniper configuration recommendations/BCP

2020-10-08 Thread Forrest Christian (List Account)
After nearly 30 years of being a cisco shop, I'm working on configuring our first pair of Juniper MX204's to replace our current provider-edge cisco. I've worked through enough of the Juniper documentation/books to have a fairly good handle on how to configure these, but I wanted to check with th

Juniper configuration recommendations/BCP

2020-10-08 Thread Chriztoffer Hansen
On 08/10/2020 11:37, Forrest Christian (List Account) wrote: > Is there anything I should worry about > which is Juniper-specific? JUNOS default ARP timeout: 20 min. If you connect to IXP's. Recommended ARP timeout: 4 hours.

Re: Fastly's Montreal POP offline

2020-10-08 Thread Eric Dugas via NANOG
I got news this morning, they're investigating since Tuesday ~18:00. No ETA for now. On Oct 8 2020, at 12:04 am, Eric Dugas wrote: > My PNI with them in Montreal is barely passing any traffic since yesterday > just before 18:00. > > Fastly is also on QIX in Montreal, and both LAGs shows no traf

RE: [EXTERNAL] Juniper configuration recommendations/BCP

2020-10-08 Thread Mann, Jason via NANOG
If using loopbacks on the router you have to have a firewall filter on it to permit traffic to the device even if you have a firewall filter on individual interfaces that would allow/deny traffic From: NANOG On Behalf Of Forrest Christian (List Account) Sent: Thursday, October 8, 2020 3:38 AM

Re: [EXTERNAL] Juniper configuration recommendations/BCP

2020-10-08 Thread Pierre LANCASTRE
Hi https://www.juniper.net/assets/kr/kr/local/pdf/books/tw-hardening-junos-devices-checklist.pdf http://62.210.157.99/juniperdayone/TW_Hardening_Junos_Devices.pdf Cheers Pierre Le jeu. 8 oct. 2020 à 16:59, Mann, Jason via NANOG a écrit : > If using loopbacks on the router you have to have a

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Justin Oeder
If you are an OSPF shop, Cisco AD is 110 for internal and external routes. Juniper is 10 for internal and 150 for external. This can be changed via an export (maybe import) policy on the OSPF protocol. There is no 'network' statement in the Junos world. There are a few different ways to solve t

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Casey Russell via NANOG
Forrest, Between Jason and Justin, (and now others probably) they've captured what I was already typing. Basically, that as soon as you create a loopback interface (with a L3 IP) you need to start planning your firewall filter for it. Most of it is as simple as creating filters for SSH and other

RE: Juniper configuration recommendations/BCP

2020-10-08 Thread aaron1
~30 years of being a Cisco IOS shop or Cisco IOS-XR shop? A bit different. Welcome to the SP-world of really nice JunOS Conf Blah blah blah Commit check <- will check your pending config for correctness Commit | compare <- will tell you what is about to

RE: Juniper configuration recommendations/BCP

2020-10-08 Thread aaron1
I just remembered another one I use the heck out of…. Show whateverwhatever | refresh 1 Love it Or refresh 30 (whatever time you want) It’s so nice to be able to take hands off keyboard and know exactly when something changes in that show command…. Piping to “refresh” and a timer w

RE: Juniper configuration recommendations/BCP

2020-10-08 Thread aaron1
Typos, sorry… Meant …fxpc process… Meant …now 540

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Chris Boyd
> On Oct 8, 2020, at 10:55 AM, wrote: > > JunOS is so linux based Um, my MX-204 says FreeBSD amd64.

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Forrest Christian (List Account)
I will say that so far I'm finding JunOS and the Juniper documentation to be a welcome change. In my other life I write networking/IoT code and have done my fair share of unix (linux, freebsd, sunos, etc.) administration over the years. As a result, JunOS is feeling more natural than some device

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Matt Harris
Matt Harris|Infrastructure Lead Engineer 816-256-5446|Direct Looking for something? Helpdesk Portal|Email Support|Billing Portal We build and deliver end-to-end IT solutions. On Thu, Oct 8, 2020 at 5:51 PM Chris Boyd wrote: > > > > On Oct 8, 2020, at 10:55 AM, wrote: > > > > JunOS is so linux

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Ryan Hamel
There is linux happening in some devices. https://www.juniper.net/documentation/en_US/junos/topics/concept/evo-overview.html Ryan On Thu, Oct 8, 2020, 4:16 PM Matt Harris wrote: > Matt Harris​ > | Infrastructure Lead Engineer > 816‑256‑5446 > | Direct > Looking for something? > *Helpdesk Porta

Re: Juniper configuration recommendations/BCP

2020-10-08 Thread Chris Adams
Once upon a time, Matt Harris said: > There's no Linux going on in Junos itself as far as I know, however Juniper > does utilize Wind River Linux as an intermediary virtualization step for > some of their virtualized products like the vSRX. Most (if not all) of the current routing engines run the

RE: Juniper configuration recommendations/BCP

2020-10-08 Thread aaron1
Right, it's been freebsd forever as I understand it, but I thought there had been some more recent involvement with linux, which is why I said that. I'm not an authority on it though. https://www.juniper.net/documentation/en_US/junos/topics/topic-map/vm-host-o verview.html -Aaron