Configuration

OSPF Configuration

OSPF is an interior gateway protocol (IGP) that routes packets within a single autonomous system (AS). OSPF uses link-state information to make routing decisions, making route calculations using the shortest-path-first (SPF) algorithm (also referred to as the Dijkstra algorithm). Each router running OSPF floods link-state advertisements throughout the AS or area that contain information about...

Persistent (Sticky) MAC Learning

Overview Persistent (Sticky) MAC is a Layer 2 port security feature that prevents unauthorized devices from connecting to your network. When this feature is enabled, the switch will observe the incoming source MAC addresses on a configured port and dynamically learn/save this address to memory. You can set the maximum number of MAC addresses learned....

Persistent (Sticky) MAC Learning

Overview Persistent (Sticky) MAC is a Layer 2 port security feature that prevents unauthorized devices from connecting to your network. When this feature is enabled, the switch will observe the incoming source MAC addresses on a configured port and dynamically learn and save this address to memory. The maximum of MAC address learned is specified...

Protect_RE

Protect RE is very similar to an L3 filter except that they are applied to LoopBack0 interface. Protection of Routing Engine is required for two reasons: Ensure it accepts traffic only from trusted systems. Ensure the Routing Engine is not burning cycles responding to non interesting traffic. Protecting the Routing Engine involves filtering incoming traffic...

QoS for Switches

In a congested environment, Quality of Service(QoS) helps with ensuring that latency-sensitive traffic (such as voice) are prioritized over other traffic. QoS generally involves the following 4 aspects: Classification of Traffic Defining traffic to queue mapping (Forwarding Classes) Defining rules for each queue which help in priority, bandwidth control, providing congestion management etc. of the...

Set up dot1x Authentication for Switch Management Access

If you want to setup dot1x authentication for Switch Management access(switch CLI login purpose) then under additional CLI add the below commands: set system authentication-order radius set system radius-server <radius-server-IP> port 1812 set system radius-server <radius-server-IP> secret "<secret-code>" set system radius-server <radius-server-IP> source-address <radius-Source-IP>   You can also refer to the below Juniper support document...

Static Routes

Overview Static routes are routes that are manually configured and entered into the routing table. The switch uses static routes: When the switch does not have a route to a destination that has a better (lower) preference value. When the switch cannot determine the route to a destination. When the switch is forwarding unroutable packets....