Foreword |
|
xiii | |
Preface |
|
xvii | |
|
Lan and Internetworking Overview |
|
|
1 | (46) |
|
|
2 | (8) |
|
|
3 | (5) |
|
Network Types and Communication Modes |
|
|
8 | (1) |
|
|
9 | (1) |
|
|
10 | (10) |
|
|
10 | (1) |
|
Ethernet or 802.3, That Is the Question |
|
|
11 | (2) |
|
|
13 | (3) |
|
Ethernet Standards Wrap-Up |
|
|
16 | (3) |
|
Ethernet Technology Summary |
|
|
19 | (1) |
|
|
20 | (16) |
|
|
20 | (1) |
|
|
21 | (1) |
|
The IP Stack, in a Nutshell |
|
|
22 | (13) |
|
Internet Protocol Summary |
|
|
35 | (1) |
|
|
36 | (8) |
|
|
37 | (1) |
|
|
38 | (3) |
|
|
41 | (2) |
|
|
43 | (1) |
|
|
44 | (1) |
|
|
44 | (2) |
|
|
46 | (1) |
|
|
47 | (62) |
|
|
49 | (15) |
|
|
52 | (3) |
|
Separate Control and Forwarding: It's a Good Thing |
|
|
55 | (2) |
|
|
57 | (4) |
|
|
61 | (3) |
|
|
64 | (1) |
|
|
64 | (9) |
|
|
64 | (1) |
|
|
65 | (1) |
|
|
66 | (2) |
|
A Day in the Life of a Packet |
|
|
68 | (4) |
|
Ex Series Architecture Summary |
|
|
72 | (1) |
|
|
73 | (3) |
|
|
75 | (1) |
|
|
76 | (23) |
|
|
76 | (2) |
|
CLI Operational Modes and General Features |
|
|
78 | (7) |
|
|
85 | (13) |
|
|
98 | (1) |
|
Advanced CLI and Other Cool Stuff |
|
|
99 | (5) |
|
|
99 | (3) |
|
Scheduled Commits and Wildcards |
|
|
102 | (1) |
|
Copying, Renaming, and Inserting |
|
|
103 | (1) |
|
|
104 | (1) |
|
|
105 | (1) |
|
|
106 | (3) |
|
Initial Configuration and Maintenance |
|
|
109 | (82) |
|
The Factory-Default Configuration and EZSetup |
|
|
110 | (12) |
|
Factory-Default Configuration |
|
|
110 | (5) |
|
|
115 | (7) |
|
Factory-Default Configuration and EZSetup Summary |
|
|
122 | (1) |
|
Initial Configuration Using the CLI |
|
|
122 | (1) |
|
CLI Configuration Summary |
|
|
123 | (1) |
|
|
123 | (20) |
|
Customized User Accounts, Authentication, and Authorization |
|
|
124 | (8) |
|
|
132 | (2) |
|
|
134 | (4) |
|
Dynamic Host Configuration Protocol |
|
|
138 | (5) |
|
Secondary Configuration Summary |
|
|
143 | (1) |
|
|
143 | (24) |
|
|
143 | (2) |
|
|
145 | (1) |
|
|
146 | (4) |
|
Ex Interface Configuration Examples |
|
|
150 | (6) |
|
Interface Troubleshooting |
|
|
156 | (11) |
|
|
167 | (1) |
|
|
167 | (20) |
|
|
168 | (2) |
|
|
170 | (6) |
|
|
176 | (3) |
|
|
179 | (3) |
|
|
182 | (1) |
|
|
183 | (4) |
|
Swith Maintenance Summary |
|
|
187 | (1) |
|
|
187 | (1) |
|
|
188 | (1) |
|
|
189 | (2) |
|
|
191 | (76) |
|
|
191 | (24) |
|
|
191 | (7) |
|
Virtual Chassis Design and Deployment Options |
|
|
198 | (8) |
|
Packet Flow in a Virtual Chassis |
|
|
206 | (9) |
|
|
215 | (1) |
|
Configuration, Operation, and Maintenance |
|
|
215 | (26) |
|
Virtual Chassis Configuration Modes |
|
|
216 | (1) |
|
Virtual Chassis Configuration |
|
|
217 | (6) |
|
Virtual Chassis Operation and Maintenance |
|
|
223 | (17) |
|
Configuration, Operation, and Maintenance Summary |
|
|
240 | (1) |
|
Virtual Chassis Case Study |
|
|
241 | (22) |
|
|
244 | (1) |
|
|
245 | (13) |
|
Expand the VC with VCE Links |
|
|
258 | (5) |
|
|
263 | (1) |
|
|
263 | (1) |
|
|
263 | (2) |
|
|
265 | (2) |
|
Virtual LANs and Trunking |
|
|
267 | (52) |
|
Virtual LANs and Trunking |
|
|
267 | (12) |
|
|
268 | (1) |
|
|
268 | (6) |
|
The Native and Default VLANs |
|
|
274 | (3) |
|
Generic Attribute Registration Protocol |
|
|
277 | (1) |
|
VLAN and Trunking Summary |
|
|
278 | (1) |
|
Ex to Catalyst VLAN Integration |
|
|
279 | (35) |
|
Default VLAN/Trunking Behavior |
|
|
280 | (7) |
|
|
287 | (18) |
|
|
305 | (4) |
|
|
309 | (5) |
|
|
314 | (1) |
|
|
314 | (1) |
|
|
314 | (2) |
|
|
316 | (3) |
|
|
319 | (66) |
|
|
319 | (3) |
|
|
320 | (1) |
|
|
321 | (1) |
|
|
322 | (16) |
|
|
322 | (4) |
|
Calculating and Maintaining the Spanning Tree |
|
|
326 | (2) |
|
Bridge Protocol Data Units |
|
|
328 | (2) |
|
BPDU Learning and Port States |
|
|
330 | (2) |
|
|
332 | (2) |
|
Putting the Theory Together |
|
|
334 | (2) |
|
|
336 | (2) |
|
|
338 | (1) |
|
Rapid Spanning Tree Protocol |
|
|
338 | (12) |
|
New BPDU Definition and Function |
|
|
338 | (1) |
|
Interface Types and States |
|
|
339 | (2) |
|
|
341 | (5) |
|
|
346 | (1) |
|
|
347 | (1) |
|
Interoperability Between Juniper and Cisco |
|
|
347 | (3) |
|
|
350 | (1) |
|
Spanning Tree Configuration |
|
|
350 | (19) |
|
Failures with Default Parameters |
|
|
360 | (1) |
|
|
361 | (7) |
|
Spanning Tree Configuration Summary |
|
|
368 | (1) |
|
Multiple Spanning Tree Protocol |
|
|
369 | (8) |
|
|
372 | (5) |
|
|
377 | (1) |
|
|
377 | (4) |
|
|
378 | (3) |
|
|
381 | (1) |
|
|
381 | (1) |
|
|
381 | (2) |
|
|
383 | (2) |
|
|
385 | (66) |
|
|
386 | (7) |
|
|
386 | (1) |
|
|
387 | (2) |
|
|
389 | (4) |
|
Summary of EX Routing Capabilities |
|
|
393 | (1) |
|
|
393 | (18) |
|
|
395 | (1) |
|
Enter the Routed VLAN Interface |
|
|
396 | (1) |
|
|
397 | (7) |
|
|
404 | (3) |
|
Restricting RVI Communications |
|
|
407 | (3) |
|
|
410 | (1) |
|
|
411 | (11) |
|
|
411 | (1) |
|
Route Attributes and Flags |
|
|
412 | (2) |
|
|
414 | (1) |
|
EX Static Routing Scenario |
|
|
414 | (7) |
|
|
421 | (1) |
|
|
422 | (25) |
|
|
423 | (4) |
|
|
427 | (11) |
|
|
438 | (8) |
|
|
446 | (1) |
|
|
447 | (1) |
|
|
447 | (2) |
|
|
449 | (2) |
|
Routing Policy and Firewall Filters |
|
|
451 | (56) |
|
|
451 | (26) |
|
What Is Routing Policy, and When Do I Need One? |
|
|
452 | (1) |
|
Where and How Is Policy Applied? |
|
|
452 | (4) |
|
|
456 | (2) |
|
Policy Match Criteria and Actions |
|
|
458 | (2) |
|
|
460 | (5) |
|
|
465 | (1) |
|
Testing and Monitoring Policy |
|
|
466 | (4) |
|
|
470 | (7) |
|
|
477 | (1) |
|
|
477 | (25) |
|
|
478 | (2) |
|
|
480 | (1) |
|
|
480 | (3) |
|
|
483 | (1) |
|
|
483 | (1) |
|
Transit Filter Case Study |
|
|
484 | (11) |
|
Case Study: Loopback Filters |
|
|
495 | (2) |
|
|
497 | (5) |
|
Storm Control and Rate Limiting |
|
|
502 | (1) |
|
Filters and Policers Summary |
|
|
502 | (1) |
|
|
502 | (1) |
|
|
503 | (2) |
|
|
505 | (2) |
|
Port Security and Access Control |
|
|
507 | (52) |
|
Layer 2 Security Overview |
|
|
507 | (2) |
|
EX Layer 2 Security Support |
|
|
508 | (1) |
|
MAC Limiting, DHCP, and ARP |
|
|
509 | (21) |
|
|
515 | (7) |
|
DHCP Snooping and ARP Inspection |
|
|
522 | (8) |
|
MAC Limiting, DHCP, and ARP Summary |
|
|
530 | (1) |
|
IEEE 802.1X Port-Based Authentication |
|
|
530 | (25) |
|
Terminology and Basic Operation |
|
|
530 | (5) |
|
JUNOS 802.1X Feature Support |
|
|
535 | (3) |
|
|
538 | (17) |
|
802.1X Port-Based Authentication Summary |
|
|
555 | (1) |
|
|
555 | (1) |
|
|
555 | (2) |
|
|
557 | (2) |
|
|
559 | (36) |
|
|
559 | (5) |
|
|
560 | (4) |
|
Deployment Scenarios Summary |
|
|
564 | (1) |
|
|
564 | (4) |
|
|
565 | (2) |
|
|
567 | (1) |
|
Link Layer Discovery Protocol |
|
|
568 | (5) |
|
|
570 | (2) |
|
|
572 | (1) |
|
LLDP with Media Endpoint Discovery |
|
|
573 | (4) |
|
|
574 | (3) |
|
|
577 | (1) |
|
|
577 | (1) |
|
|
578 | (12) |
|
|
579 | (8) |
|
|
587 | (3) |
|
|
590 | (1) |
|
|
590 | (1) |
|
|
590 | (2) |
|
|
592 | (3) |
|
|
595 | (42) |
|
|
596 | (17) |
|
|
597 | (2) |
|
|
599 | (1) |
|
|
600 | (3) |
|
Graceful Routing Engine Switchover |
|
|
603 | (7) |
|
|
610 | (2) |
|
|
612 | (1) |
|
|
612 | (1) |
|
|
613 | (1) |
|
In-Service Software Upgrades |
|
|
614 | (1) |
|
|
615 | (14) |
|
|
616 | (4) |
|
|
620 | (9) |
|
Bidirectional Forwarding Detection (BFD) |
|
|
629 | (3) |
|
High Availability Summary |
|
|
632 | (1) |
|
|
632 | (1) |
|
|
632 | (2) |
|
|
634 | (3) |
Glossary |
|
637 | (62) |
Index |
|
699 | |