CONTROL PLANE DAN FORWARDING PLANE

 JUNOS : Kernel Base Unix FreeBSD

 RE ( Routing Engine ) : Brain Platform
 CONTROL PLANE : Routing Protocol,
 GRES : Gracefull Routing Engine Switchover ( feature )
 Maintains Routing Engine Intelligence

 The RE handles all protocol processes in addition to other software processes

that control the device’s interfaces, the chassis components, system
management, and user access to the device. These software processes run on
top of the Junos kernel, which interacts with the PFE. The software directs all
protocol traffic from the network to the RE for the required processing.

 The RE controls the PFE by providing accurate, up-to-date Layer 2 and Layer 3
forwarding tables and by downloading microcode
and managing software processes that reside in the PFE’s microcode.
 FORWARD TRAFFIC

 The PFE is the central processing component of the forwarding plane. The PFE
systematically forwards traffic based on its local
copy of the forwarding table.
 TRANSIT TRAFFIC

 Transit traffic consists of all traffic that enters an ingress network port, is
compared against the forwarding table entries, and is finally forwarded out an
egress network port toward its destination.

 Transit traffic passes through the forwarding plane only and is never sent to or
processed by the control plane. By processing transit traffic through the
forwarding plane only, platforms running the Junos OS can achieve predictably
high performance rates. Transit traffic can be both unicast and multicast traffic.
Unicast transit traffic enters one ingress port and is transmitted out
exactly one egress port toward its destination. Although multicast transit traffic
 EXCEPTION TRAFFIC

 Unlike transit traffic, exception traffic does not pass through the local device but rather
requires some form of special handling.
Examples of exception traffic include the following:
• Packets addressed to the chassis, such as routing protocol updates, Telnet sessions, pings,
traceroutes, and
replies to traffic sourced from the RE;
• IP packets with the IP options field (options in the packet’s IP header are rarely seen, but
the PFE was purposely
designed not to handle IP options; packets with IP options must be sent to the RE for
processing); and
• Traffic that requires the generation of Internet Control Message Protocol (ICMP) messages.
ICMP messages are sent to the packet’s source to report various error conditions and to
respond to ping requests. Examples of
ICMP errors include destination unreachable messages, which are sent when no entry is
present in the forwarding table for the
JENIS PERANGKAT JUNIPER
 ACX Series
 LN Series
 MX Series
M Series
T Series
 SRX Series ( Firewall )
 EX Series ( Switch )
 QFX Series
 PTX Series
J Series ( Firewall )
USER INTERFACE
OPERATIONAL MODE

root@router>
root@router> ?
root@router>help topic Interfaces address
root@router>help reference interfaces address
user@router> set cli complete-on-space off
user@router> show route | display ?
user@router>
Mode Configuration
[Edit]
root@router#
Emacs-Style Control Keys
 • Ctrl+b: Moves the cursor left one character;
• Ctrl+a: Moves the cursor to the beginning of the command line;
• Ctrl+f: Moves the cursor right one character;
• Ctrl+e: Moves the cursor to the end of the command line;
• Delete and Backspace: Deletes the character before the cursor;
• Ctrl+d: Deletes the character over the cursor;
• Ctrl+k: Deletes from the cursor to the end of the line;
• Ctrl+u: Deletes all characters and negates the current command;
• Ctrl+w: Deletes the entire word to the left of the cursor;
• Ctrl+l: Redraws the current line;
• Ctrl+p, Ctrl+n: Repeats the previous and next command in the command history,
respectively;
• Esc+d: Deletes the word to the right;
• Esc+b: Moves the cursor back one word with no delete; and
• Esc+f: Moves the cursor forward one word with no delete
 CHAPTER 4 - 5
MANDATORY ROOT AUTHENTICATION
set system root authentication plain-text-password
CONFIGURATION INTERFACE
set interfaces ge-0/0/0.0 description “LINK-KE-INTERNET”
set interfaces ge-0/0/0.0 family inet address 10.1.1.1/24
CONFIG HOSTNAME
set system host-name ROUTER-A
NTP SERVER
set system ntp server 10.0.200.2
set system ntp boot-server 10.0.200.2
show system ntp
show ntp associations
Show system uptime

TIME-ZONE
set system time-zone Asia/jakarta
 DATE
set date 201904011545
 ENABLE WEB MANAGER ACCESS, SSH, TELNET
set system services web-management ?
Set system services telnet
Set system services ssh
 DNS-SERVER
set system name-server 233.190.111.1
 BACKUP KE FTP SERVER
save ftp://john:pass123@172.16.22.25/backup.cfg
load replace ftp://john:pass123@172.16.22.25/backup.cfg
atau
set system archival configuration transfer-on-commit archive-sites
ftp://ftp:password1@10.10.10.1
tersimpan di /var/home/ftp
atau
set system archival configuration transfer-interval 15 archive-sites
"scp://junos@192.168.103.20/home/junos/device_configs" password
"$9$197IhrW87dVY1R87-V4oQF3/p0IEc";
 BANNER
set system login message “\n----------------\n| HANYA UNTUK ADMINISTRATOR |\n------------
----\n\n“
set system login announcement “\n******* LOGIN BERHASIL *******"
 sdfs
 dfgfd
 6
 UPGRADE SOFTWARE
request system software add
http://172.16.22.25/jinstall-ex-3200-12.3R4.6-
domestic-signed.tgz reboot
 CREATE USERNAME/PASSWORD
Set system login user noc class super-user fullname
noc-Telkom authentication plain-text-password
 CHAPTER 6
 Show system user
 Show system storage
 Show system connections
 Show system alarms
 Show system boot-messages
 Show system statistics
 Show system software

 MAINTENANCE
Show chasis alarms
Show chasis hardware
Show chasiss environment
Show chasiss routing-engine

Show configuration ?
Show interface ?
 Ssdfs
PASSWORD
 Power On
RECOVERY
Hit [Enter] to boot immediately, or space bar for command prompt.
Booting [kernel] in 9 seconds...
 Ketik boot -s
 Enter full pathname of shell or 'recovery' for root password recovery or RETURN
for /bin/sh: recovery
 Ketik set system root-authentication plain-text-password
 Ketik commit
 Kemudian Reboot router dengen command request system reboot

 Sumber :
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/recovering-root-password.html
https://kb.juniper.net/InfoCenter/index?page=content&id=KB17565&actp=METADATA
FACTORY DEFAULT
Load factory-default
request system zeroize
CHAPTER-9

 NETWORKING MODEL