JNCIE Command Reference.docx
《JNCIE Command Reference.docx》由会员分享,可在线阅读,更多相关《JNCIE Command Reference.docx(35页珍藏版)》请在冰点文库上搜索。
JNCIECommandReference
JUNOSCommandReference(JNCIE-M)
MPLSandTE
1.LDPSignaledLSPs
[editinterfaces]---InterfacesforMPLSSupport
lab@r5#setfe-0/0/0.0familympls
[editprotocolsmpls]---EnableMPLSProcessingontheRouter
lab@r7#setinterfaceall
Verify:
showmplsinterface
[editprotocolsldp]---EnabletheLDPInstance
lab@r7#setinterfacefe-0/3/1
[editprotocolsldp]---Optional,forLDPextendedneighbordiscovery
lab@r7#setinterfacelo0.7
[editprotocolsldp]---bothsides
lab@r7#setkeepalive-interval5
[editprotocolsldp]
lab@r7#settraffic-statisticsinterval90fileldp-state
[editrouting-options]
lab@r7#setgraceful-restart
Verify:
showldptraffic-statistics(noconfig)|showlogr7/ldp-stats
showldpinterface
showldpneighbor
showldpsession
showroutetableinet.3---egressrouter’sloopbackaddress
showroutetablempls.0
---left:
inlabel,right:
swaplabel/pop
showldpdatabase(Label-FEC)
Notes:
ØAutomaticallyestablishLSPsbetweentheloopbackaddressesofallLDP-enabledrouters(canbemodifiedwiththeuseofthetransport-addresskeywordintheldpstanza).
ØBydefault,theJUNOSsoftwareimplementationofLDPadvertisesaFECfor/32interfaceroutesonly.
ØLDPisrelianceontheIGPtopreventloopsmeansthereisnoneedtoimplementsomeformofsplithorizon.
ØLDPsignaledLSPsarenotdisplayedintheoutputoftheshowmplslspcommand(onlyRSVPlisted)
ØonlythetrafficassociatedwithBGPnexthopsthatresolvethroughinet.3willbetransportedoveranLSP(showrouteresolution)
[editlogical-routersr7protocolsldp]---defaultmetricis1ininet.3
root@JNCIE#settrack-igp-metric
2.RSVPSignaledLSPs
[editinterfaces]
lab@r1#setfe-0/0/0.0familympls
[editprotocolsmpls]
lab@r1#setinterfaceall
[editprotocolsrsvp]---EnableRSVPSignaling
lab@r3#setinterfaceall---recommenddisablingfxp0
Verify:
showrsvpinterface
showrsvpneighbor---RSVPneighborsaredetectedonly
whenLSPsareactuallysignaled
[editprotocolsrsvp]
lab@r1#setinterfacefe-0/0/1authentication-keyjnx
[editprotocolsmpls]
lab@r1#setlabel-switched-pathr1-r7to10.0.9.7bandwidth10m
[editprotocolsmpls]---withmultipleTEDdomains
lab@r1#setlabel-switched-pathr1-r7no-cspf
Verify:
showrsvpsession
showmplslsp
showroutetablempls.0
---left:
inlabel,right:
label-switched-path
Troubleshoot:
traceoptions{
filersvp;
flagerrordetail;
flagpathdetail;
flagpathteardetail;
}
[editlogical-routersr7protocolsmplslabel-switched-pathr7-r3]
root@JNCIE#setmetric30---defaultisIGP’sbestroutemetricininet.3
3.EROConstraints
[editprotocolsmpls]
lab@r2#setlabel-switched-pathr2-r6primaryvisit-r7-r5
[editprotocolsmpls]---EROsareconsideredstrictbydefault
lab@r2#setpathvisit-r7-r510.0.4.9
10.0.9.7loose
Notes:
Øloopbackaddressesshouldnotbeusedinconjunctionwithstricthops,becausebydefinitionastricthopshouldbedirectlyconnected.
ØyoucanuseastricthopEROpointingtoaneighbor’sloopbackinterfacewhenCSPFisusedtocomputetheLSP’spath.
4.LinkColoring
[editprotocolsmpls]---color-to-numericmappings
lab@r3#setadmin-groupsblue4(bitposition).
[editprotocolsmpls]
lab@r3#setinterfaceso-0/2/0.100admin-groupblue
[editprotocolsmplslabel-switched-pathr4-r3]
lab@r4#setadmin-groupinclude-anyredexcludeblue
Verify:
showmplsinterface
showmplslspextensive(CSPFinformation)
showteddatabaseextensive|match"nodeid|to|color"
Troubleshoot:
traceoptions{
filecspf;
flagcspf;
flagcspf-link;
flagcspf-node;
}
Notes:
aboutCSPF
ØCan’tuseCSPF(coulduseEROs)whenthenetwordhavemultipleroutingdomains(protocols)orMulti-LevelIS-ISorMulti-AreaOSPF,becauseTEinformationisn’tleakedbetweenIS-ISlevelsorOSPFareas
ØJUNOSdoesoffersupportforLSPstitching
ØCSPFincludethecomputationofFastReroutedetours,linkbypass,LSPre-optimization,andtheuseoflinkcoloring
5.InstallingPrefixes(precisecontrol)
[editprotocolsmplslabel-switched-pathr6-r1]---putininet.3
lab@r6#setinstall10.0.5.254
[editprotocolsmplslabel-switched-pathr6-r1]---moveintoinet.0
lab@r6#setinstall10.0.5/24active
Notes:
Øwithmultipleequal-costLSPsexisttothesamedestination,defaultrandomlybalancetrafficonaper-prefixbasis
Øbydefaut,onlyLSPegress/32prefixisinstalledintheinet.3
6.TEShortcuts
label-switched-pathr6-r3to10.0.3.3---mustinasinglerouting-domain
[editprotocolsisis]---automaticinstallationofallprefixesthat
areconsidereddownstreamoftheLSPegressputintotheinet.3orinet.0
⏹lab@r6#settraffic-engineeringshortcuts
[editprotocolsmpls]---moveallintoinet.0
●lab@r6#settraffic-engineeringbgp-igp
Notes:
Øvariousotherdestinationsalsobeingmappedtother6–r3LSP,thiscanbeproblematic(makingtheuseofinstallgenerallypreferred).
ØtheLDPsignaledLSPhasalsobeenmovedintotheinet.0
[editprotocolsmpls]---keepLDP/RSVP/32prefixininet.3
●lab@r6#settraffic-engineeringbgp-igp-both-ribs
[editprotocolsmpls]---@=RoutingUseOnly,#=ForwardingUseOnly
keepIGProutesbeingactiveforroutingpolicyuse
✓lab@r6#settraffic-engineeringmpls-forwarding
7.Prefix-to-LSPMapping
a)forwardingtablepolicyattheLSPingressnode
[editlogical-routersr7policy-optionspolicy-statementlsp-map]
term1{
from{
protocolbgp;
neighbor10.0.3.3;
route-filter0.0.0.0/0upto/24;
}
then{
install-nexthoplspr7-r3;
accept;
}
}
term2{
then{
install-nexthoplspr7-r3-prime;
accept;
}
}
[editrouting-options]
lab@r7#setforwarding-tableexportlsp-map
b)BGPnexthopmanipulationattheLSPegressnode
Ølistingr3’slo0interfaceunderitsarea0definition,whichresultsintheadvertisementofboththeprimaryandsecondarylo0addresses.
Øasecondarylo0addresswillnotbeadvertisedintotheTED,sodisablecspf
ØIBGPexportpolicywillbeusedattheLSPegressnodetoselectivelysettheBGPnexthoptothedesiredLSPegressaddress
8.SecondaryPaths
[editprotocolsmplslabel-switched-pathr1-r7]---establishthesecondarypathbeforetheprimarypathfailed
lab@r1#setsecondaryr1-r7-primestandby
[editprotocolsmplslabel-switched-pathr1-r7]---changetheRSVPreservationstylefromthedefaultFixedFilter(FF)toaSharedExplicit(SE)style
lab@r1#setadaptive
Notes:
Øcandefinemanysecondarypaths,butonlyoneestablishedatime
Ødefineonlysecondarypathstopreventrevertingbacktoprimary(notswitchamongsecondarypaths)
9.FastRerouteandLinkProtection
[editprotocolsmplslabel-switched-pathr6-r4]---protecttheentireLSP,useTEDtolocatedetourpathswhileregardlessofCSPF
lab@r6#setfast-reroute
--------------------------------------------------------
[editprotocolsmplslabel-switched-pathr6-r4]---protectaspecificinterface,makesuseofaTEDandtheCSPF
lab@r6#setlink-protection
[editprotocolsrsvp]
lab@r3#setinterfaceso-0/2/0.100link-protection(path---ERO)
Verify:
showrsvpsessioningressdetail(onfailedrouter)
Notes:
AkeypointtoconsiderwhendealingwithbothFastRerouteandlinkprotectionistheneedforaTEDwithsufficientinformationtoallowasuccessfulCSPFcalculation
10.Preemption(setupandholdpriority)
[editprotocolsmplslabel-switched-pathr5-r1]
lab@r5#setpriorityxx---default7(weak)0(strong)
10.Control-TTL
[editprotocolsmplslabel-switched-pathr2-r6]---onlyatingress
lab@r2#setno-decrement-ttl
[editprotocolsmpls]---atallnodesalongtheLSP,supportmulti-vendors
lab@r2#setno-propagate-ttl
11.Validatethedataplanewithoutusingexternalprefixesormodifyingdefaultroutingtableintegration.
[editinterfaces]---theMPLSpingmechanismalwaystargetsadestinationaddressof127.0.0.1
lab@r1#setlo0.0familyinetaddress127.0.0.1
Verify:
pingmplsrsvpr5-r1
12.Ultimatehoppopping
[editprotocolsldp/mpls]---why?
patibility2.CoS
lab@r6#setexplicit-null
13.Automaticabandwidthreservation
[editprotocolsmpls]
lab@r4#setstatisticsfilempls-stats
setstatisticsauto-bandwidth
[editprotocolsmplslabel-switched-pathr4-r3]–--default86400s
lab@r4#setauto-bandwidthminimum-bandwidth1madjust-interval300
14.RSVP-basedLDPtunneling
[editprotocolsmplslabel-switched-pathr1-r7]---
lab@r1#setldp-tunneling
[editprotocolsldp]---
lab@r1#setinterfacelo0.0
Layer3VPNs(2547bis)
1.StaticandBGProutingforPE-CEconnection
[editrouting-instancesc2]
lab@r6#setinstance-typevrf
[editrouting-instancesc2]---connecttoce
lab@r6#setinterfacefe-0/1/3
[editrouting-instancesc2]---defaultVRFpolicy:
automaticllyadvertiseandreceive;theroutesfromCEaswellasthevrf’sstaticanddirectroutes;localroutescan’tbeexported;
lab@r6#setvrf-targettarget:
65412:
420
[editrouting-options]---automatic
lab@r6#setroute-distinguisher-id10.0.9.6
[editrouting-instancesc2]---manual
lab@r6#setroute-distinguisheras:
nnorip:
nn
[editrouting-instancesc2routing-options]
lab@r6#setstaticroute220.220/16next-hop172.16.0.10
Verify:
ping220.220.0.1routing-instancec2
[editrouting-instancesc2protocolbgpgroupc1]
lab@r4#settypeexternalpeer-as65010neighbor172.16.0.6
Verify:
showbgpsummary[instancec1]
showroutetablec1
[editrouting-instancesc2]---performend-to-endpingandtraceroute
lab@r6#setvrf-table-label
2.MP-BGPamongPE-PE
[editprotocolsbgpgroupintneighbor10.0.9.6]---bothaddressfamilyenabled
lab@r4#show
familyinet{
unicast;
}
familyinet-vpn{
unicast;
}
Verify:
showroutetablec1
showroutetablebgp.l3vpn.0
showrout