Juniper

EX Switches

Helpful shell commands

ifmon

Time-elapsing interface counters: i/o bytes, i/o packets, errors, etc.
Pass the interface name when calling the command.

Usage: ifmon [-v] [-JL <lrname>] [interface]

What do the other flags do..?

iftop

Time-elapsing overview of interface counters: for all interfaces
Gives each port's rate in pps or bps, etc.

Usage: iftop [-v] [-d]

• -v : shows version
• -d : same as running without arguments, but adds interface descriptions

mtr

Yes.. Juniper actually includes mtr: pass it a hostname, watch a time-lapse
traceroute occur. Lookup the details online; widely available tool.

tcpdump

Juniper includes a modified version of tcpdump; again, look it up elsewhere.

Semi-hidden debug interfaces

lcdd: Line Card Daemon

"lcdd" from a shell (not the cli) connects you to various other parts of the switch,
including the software forwarding infrastructure (sfid), chassis manager (chassism),
and the virtual chassis system (vccpd). You don't need to be root to get into these.
The general idea is:

 > lcdd 0 <area>

Where area is one of the above/below items. The digit (0) is the FPC slot number. EX switches only have FPC0.

vty: Shell out to other parts of the system

"vty fpc0": connect to PFE

root@3200-24t:RE:0% vty fpc0


BSD platform (MPC 8544 processor, 48MB memory, 0KB flash)

PFEM0(vty)# show version

Juniper Embedded Microkernel Version 10.1R1.8
Built by builder on 2010-02-12 17:42:57 UTC
Copyright (C) 1998-2010, Juniper Networks, Inc.
All rights reserved.


BSD platform (MPC 8544 processor, 48MB memory, 0KB flash)
Current time   : Fri Nov 19 14:36:37 2010

Elapsed time   :      15+01:46:39

Firewall / Packet Filtering

Generic Info

External Documentation

• TechDoc: Firewall Filters for EX Series Switches Overview
• TechDoc: Firewall Filter Configuration Statements Supported by JUNOS Software for EX Series Switches
• TechDoc: Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series Switches
• Firewall Filter Match Conditions and Actions for EX Series Switches

VLANs

Generic Info

External Documentation

• TechDoc: Understanding Bridging and VLANs on EX Series Switches

Tag Swapping (VLAN Translation)

External Documentation

• KB article: VLAN Translation on EX3200/EX4200
• TechDoc: "mapping"

QinQ / Stacked Tags

External Documentation

• TechDoc: Understanding Q-in-Q Tunneling on EX Series Switches
• TechDoc: Example: Setting Up Q-in-Q Tunneling on EX Series Switches
• TechDoc: Configuring Q-in-Q Tunneling (CLI Procedure)
• TechDoc: Verifying That Q-in-Q Tunneling Is Working

MPLS

Generic Info

• TechDoc: JUNOS MPLS for EX-series Switches Overview
• TechDoc: Understanding JUNOS MPLS Components for EX-series Switches

Path Protection

• TechDoc: Understanding MPLS and Path Protection on EX-series Switches
• TechDoc: Configuring Path Protection in an MPLS Network (CLI Procedure)

Network Topology

Rings

External Documentation

• TechDoc: Ethernet Ring Protection Switching Configuration Example
• TechDoc: Ethernet Ring Protection