Daily/networking/junos/juniper-switch.md

JUNIPER SWITCH

global navigatoin

show | display set

up

modification

set replace pattern A with B delete

USERS AND PASSWORDS

show users

show system login | display set

create new user and give a role

set system login user (username) full-name (FULL_username) set system login user (username) class super-user/operator

set password, when already encrypted (copying pass from one switch to another"

set system login user (username) authentication encrypted-password "(crypted_pass)"

when entering in _plaintext, pass will be asked and encrypted

set system login user (username) authentication plain-text-password New password: (enter new pass)

enabling SSH, generate keys

set system services ssh set system services ssh root-login deny set system services ssh protocol-version v2 set system services ssh client-alive-count-max 5 set system services ssh client-alive-interval 12 ? set system services ssh ciphers 3des-cbc

add A record on DNS servers

add rancid user

set system login class rancid permissions view set system login class rancid permissions view-configuration set system login user rancid class rancid set system login user rancid authentication plain-text-password New password: (enter pass)

if authentication with keys, then

set system login user rancid authentication ssh-ecdsa (plain_password)

on rancid server, add host to

do not use ";"c for commenting

vi router.db su - rancid

add key and check that rancid can login

ssh-keygen -R xxx.xxx.196.155 ssh rancid@(new-device) vi ./cloginrc bin/clogin (host)

show configuration

show configuration | display set | match show ethernet-switching interface brief

INTERFACES

list interfaces

show interfaces descriptions show interfaces terse

disable interface (=clean conf + administatively down)

delete interfaces (interface) set interfaces (interface) disable

set interfaces ge-0/0/44 unit 0 family inet address xxx.xxx.196.159/26

set routing-options static route default next-hop xxx.xxx.196.129 set interface ge-0/0/34 description "(host)"

trunk port

set interfaces ge-0/0/44 unit 0 family ethernet-switching interface-mode trunk set interfaces ge-0/0/44 unit 0 family ethernet-switching vlan members mgmt (128)

access port

set interfaces ge-0/0/44 unit 0 family ethernet-switching interface-mode access set interfaces ge-0/0/44 unit 0 family ethernet-switching vlan members mgmt (128)

VLANs

show ethernet-switching interface set vlans mgmt vlan-id 128 ##set interfaces xe-0/0/44 unit 0s family ethernet-switching vlan members mgmt set interfaces vlan unit 128 enable set interfaces irb unit 40 family inet set interfaces irb unit 40 family inet address xxx.xxx.196.159/26 set vlans (vlan name) vlan-id 96 l3-interface irb.96 set interfaces irb unit 96 set interfaces ge-0/0/46 unit 0 family ethernet-switching vlan members [ vlan1 vlan2 ] set interface vlan unit 96 enable

checking and commiting

show | compare commit check commit

show history of commits

request system software rollback

checking that policy is in use

show security policies hit-count | match (number)

MAINTENANCE

backup/restore configuration to file

stop commit server, that somebody will not commit config

request system commit server pause

delete old, save rescue configuration, check timestamp

request system configuration rescue delete request system configuration rescue save show system configuration rescue show system rollback 0

at this point, configuration could be restored with "rollback" command

?? request system software rollback

save config, check

save dhcp-security-snoop config.dhcp-security-snoop.2019073 save dhcp-snooping config.dhcp-snooping.20190731.1024

error: the ethernet-switching subsystem is not running

save dhcpv6-security-snoop config.dhcpv6-security-snoop.20190731.1025 file list detail

resume commit server, when ready

request system commit server pause start

copy from switch to usb memory

scp from switch

save scp://user@hostname/path/filename routing-instance instance-name source-address address

copy from ftp to switch

file copy ftp://anonymous:geg@test.jnpr.net/pub/junos/7.5R2.8/jinstall-7.5R2.8-domestic-signed.tgz /var/tmp/

copy from usb memory to switch

scp from local host to switch

restore configuration file

test configuration (file) load (filename)

insert configuration into terminal, finish with C-D

test configuration terminal

JUNOS UPGRADE

show version status

show version show chassis firmware

attach USB and take a snapshot (flash will be repartitioned and content of USB memory will be erased)

request system snapshot

upload from usb memory

start shell user root mkdir /var/tmp/usb mkdir /var/tmp/downloads

connect usb

ls /dev/da* mount_msdosfs /dev/da0s1 /var/tmp/usb cp /var/tmp/usb(new-file) /var/tmp/downloads umount /var/tmp/usb

upload via scp

validate package first

request system software validate /var/tmp/(new-filename)

applying new version

request system software add /var/tmp/(new-filename) validate

at this point last change to cancel upgrade by deliting jinstall, otherwise reboot

request system reboot