Network Configuration Example Validated Reference - Business Edge Solution Device R-7 Release 1.0 Published: 2014-03-31 Copyright © 2014, Juniper Networks, Inc. Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Network Configuration Example Validated Reference - Business Edge Solution - Device R-7 NCE0126 Copyright © 2014, Juniper Networks, Inc. All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii Copyright © 2014, Juniper Networks, Inc. Table of Contents Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Business Edge Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Business Edge Solution Lab Testing and Validation Architecture . . . . . . . . . . . . . . 2 Related Business Edge Validated Reference NCEs . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Device R-7 Chassis Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Device R-7 Validated Reference Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Copyright © 2014, Juniper Networks, Inc. iii Validated Reference NCE - Business Edge Solution - Device R-7 iv Copyright © 2014, Juniper Networks, Inc. Introduction This document provides a validated reference network configuration example (NCE) for Device R-7 as used in various configurations detailed in the Business Edge Solution 1.0 ® Design Guide. Device R-7 is a Juniper Networks MX80 3D Universal Edge Router functioning as an aggregation customer edge (A-CE) node. A validated reference NCE is a direct presentation of a tested, validated, and working configuration. This document ® is intended for experienced engineers who possess a working knowledge of Junos operating system (Junos OS) software configurations in a hierarchal format. Business Edge Overview The Juniper Networks business edge solution provides design guidance and configurations that enable the provisioning of services to business customers and that support other carrier services to residential and mobile operating units. The solution provides a proven path to service convergence using common IP infrastructure so that the provider can quickly, safely, and conveniently realize the benefits of a fully verified Juniper Networks-based reference architecture. The solution is a complete and deployable network architecture designed to intelligently leverage the variety of advanced and often overlooked technologies inherent in Juniper Networks software and hardware. Juniper Networks has developed this solution with the goal of enabling a streamlined business edge that can create new areas for monetization and help prevent erosion of service margins. By accelerating time to revenue at the business edge, the solution is the first step in streamlining the provider edge and creates new areas for expansion and consolidation. The next step in this transformation is the introduction of the Juniper Networks universal edge. The universal edge is a consolidation of business services, residential services, and wireless edge onto a common IP infrastructure that reduces the need for redundant networks and network elements, enabling expense reduction and optimizing traffic flow to support a complete footprint of service provider offerings. Service providers constantly look to extract additional value from the network by positioning themselves to profitably leverage converging services and network functionality. A performance focused, highly reliable business edge is needed to cost-effectively meet the extraordinary growth in subscribers, services, and traffic driven by an increasingly connected workforce, and business requirements that leverage the network as a commodity rather than a luxury. Transformation to a universal edge solution starts with the adoption of a complete business edge architecture that enables a smooth transition to an edge that supports not only business, but residential subscribers and mobility networks. Copyright © 2014, Juniper Networks, Inc. 1 Validated Reference NCE - Business Edge Solution - Device R-7 Business Edge Solution Lab Testing and Validation Architecture This validated reference NCE is part of a complete, tested and validated business edge solution topology. This document focuses specifically on Device R-7 as shown in Figure 1 on page 2. Device R-7 is a Juniper Networks MX80 3D Universal Edge Router functioning as an aggregation customer edge (A-CE) node. Figure 1: Business Edge Solution Lab Testing Architecture 2 Copyright © 2014, Juniper Networks, Inc. Related Business Edge Validated Reference NCEs For configurations of the other routing devices used in the Business Edge solution test lab topology, refer to the following: • Validated Reference - Business Edge Solution - Device P-0 • Validated Reference - Business Edge Solution - Device P-1 • Validated Reference - Business Edge Solution - Device PE-2 • Validated Reference - Business Edge Solution - Device PE-3 • Validated Reference - Business Edge Solution - Device PE-4 • Validated Reference - Business Edge Solution - Device PE-5 • Validated Reference - Business Edge Solution - Device PE-6 • Validated Reference - Business Edge Solution - Device CE-1 • Validated Reference - Business Edge Solution - Device R9 • Validated Reference - Business Edge Solution - Device R10 Copyright © 2014, Juniper Networks, Inc. 3 Validated Reference NCE - Business Edge Solution - Device R-7 Device R-7 Chassis Hardware The Juniper Networks Business Edge Solution Design Guide makes reference to several configuration scenarios. The scenarios described contain various routers that were configured and tested in the Juniper Networks test lab. Device R-7 is a Juniper Networks MX80 3D Universal Edge Router functioning as an aggregation customer edge (A-CE) node. Table 1 on page 4 lists the hardware contained in this router. Table 1: Chassis Hardware (R7) Chassis Component Version Part Number FRU Model Number Midplane REV 09 711-031594 CHAS-MX80-S PEM 0 REV 04 740-028288 PWR-MX80-AC-S Routing Engine BUILTIN TFEB 0 BUILTIN FPC 0 BUILTIN FPC 1 BUILTIN MIC 0 Fan Tray 4 REV 26 750-028392 MIC-3D-20GE-SFP FANTRAY-MX80-S Copyright © 2014, Juniper Networks, Inc. Device R-7 Validated Reference Configuration The following configuration was used for Device R-7 in Release 1.0 of the Business Edge test lab configuration: CAUTION: The following configuration contains values specific to the Juniper Networks test lab environment. This configuration is intended for use as an example router configuration and not for actual network deployment without first making the modifications necessary to suit an external deployment scenario. version 12.3R3-S2; groups { global { system { domain-name juniper.net; time-zone America/Los_Angeles; authentication-order [ password radius tacplus ]; root-authentication { encrypted-password <password removed>; ## SECRET-DATA } name-server { 192.168.5.68; 192.168.60.131; } radius-server { 192.168.69.162 secret <password removed>; ## SECRET-DATA 192.168.60.52 secret <password removed>; ## SECRET-DATA } tacplus-server { 192.168.5.73 { secret <password removed>; ## SECRET-DATA timeout 15; single-connection; } } login { class readonly { permissions [ interface network routing system trace view ]; } user remote { uid 9999; class superuser; shell csh; } } services { finger; ftp; rlogin; rsh; ssh; Copyright © 2014, Juniper Networks, Inc. 5 Validated Reference NCE - Business Edge Solution - Device R-7 telnet; xnm-clear-text; netconf { ssh; } } syslog { host log { kernel info; any notice; pfe info; interactive-commands any; } file messages { kernel info; any notice; authorization info; pfe info; archive world-readable; } file security { interactive-commands any; archive world-readable; } } ntp { boot-server 172.17.28.5; server 172.17.28.5; } } chassis { network-services enhanced-ip; } interfaces { lo0 { unit 0 { family inet { address 127.0.0.1/32; address 10.255.50.216/32 { primary; } } family iso { address 47.0005.80ff.f800.0000.0108.0001.0102.5505.0216.00; } family inet6 { address abcd::10:255:50:216/128 { primary; } } } } } snmp { location "Business Edge Solution Lab"; contact "Business Edge Lab Admin"; 6 Copyright © 2014, Juniper Networks, Inc. interface fxp0.0; community public { authorization read-only; } community private { authorization read-write; } } routing-options { static { route 172.16.0.0/12 { next-hop 192.168.50.254; retain; no-readvertise; } route 192.168.0.0/16 { next-hop 192.168.50.254; retain; no-readvertise; } } router-id 10.255.50.216; } } re0 { system { host-name pdt-mx80wan-a; backup-router 192.168.50.254; } interfaces { fxp0 { unit 0 { family inet { address 192.168.50.216/25; } } } } } oam-settings { protocols { oam { ethernet { connectivity-fault-management { maintenance-domain <*> { level 7; maintenance-association <*> { continuity-check { interval 10ms; loss-threshold 3; interface-status-tlv; } mep <*> { remote-mep <*> { action-profile CFM-CC-PROFILE; } Copyright © 2014, Juniper Networks, Inc. 7 Validated Reference NCE - Business Edge Solution - Device R-7 } } } } } } } } } apply-groups [ global re0 ]; system { ports { console log-out-on-disconnect; } } interfaces { ge-1/1/2 { vlan-tagging; unit 1 { vlan-id 1; family inet { address 3.0.0.1/30; } family inet6 { address 2002::3.0.0.1/126; } } unit 2 { vlan-id 2; family inet { address 3.0.0.5/30; } family inet6 { address 2002::3.0.0.5/126; } } unit 3 { vlan-id 3; family inet { address 3.0.0.9/30; } family inet6 { address 2002::3.0.0.9/126; } } unit 4 { vlan-id 4; family inet { address 3.0.0.13/30; } family inet6 { address 2002::3.0.0.13/126; } } } ge-1/1/6 { 8 Copyright © 2014, Juniper Networks, Inc. vlan-tagging; unit 1 { vlan-id 1; family inet { address 1.0.0.54/30; } family inet6 { address 2002::1.0.0.54/126; } } unit 2 { vlan-id 2; family inet { address 1.0.0.58/30; } family inet6 { address 2002::1.0.0.58/126; } } unit 3 { vlan-id 3; family inet { address 1.0.0.62/30; } family inet6 { address 2002::1.0.0.62/126; } } unit 4 { vlan-id 4; family inet { address 1.0.0.114/30; } family inet6 { address 2002::1.0.0.114/126; } } } } protocols { oam { ethernet { apply-groups oam-settings; connectivity-fault-management { action-profile CFM-CC-PROFILE { event { adjacency-loss; rdi; } action { interface-down; } } maintenance-domain customer { level 7; maintenance-association customer-site1 { Copyright © 2014, Juniper Networks, Inc. 9 Validated Reference NCE - Business Edge Solution - Device R-7 mep 800 { interface ge-1/1/6; remote-mep 100; } } } } } } } policy-options { policy-statement adv-thru-rip { term 1 { from protocol [ ospf ospf3 ]; then accept; } } policy-statement rip-to-ospf { term 1 { from protocol rip; then accept; } } policy-statement ripng-to-ospf3 { term 1 { from protocol ripng; then accept; } } } routing-instances { vr1 { instance-type virtual-router; interface ge-1/1/2.1; interface ge-1/1/6.1; routing-options { rib vr1.inet6.0 { static { route 0::0/0 next-hop 2002::1.0.0.53; } } static { route 0.0.0.0/0 next-hop 1.0.0.53; } } protocols { ospf { export rip-to-ospf; area 0.0.0.0 { interface ge-1/1/2.1; } } ospf3 { export ripng-to-ospf3; area 0.0.0.0 { interface ge-1/1/2.1; 10 Copyright © 2014, Juniper Networks, Inc. } } rip { group to-pe { export adv-thru-rip; bfd-liveness-detection { minimum-interval 500; multiplier 3; } neighbor ge-1/1/6.1; } } ripng { group to-pe { export adv-thru-rip; neighbor ge-1/1/6.1; } } pim { rp { static { address 10.2.255.1 { version 2; } address 2002::10.2.255.1 { version 2; } } } interface ge-1/1/6.1 { mode sparse; version 2; } interface ge-1/1/2.1 { mode sparse; version 2; } } } } vr2 { instance-type virtual-router; interface ge-1/1/2.2; interface ge-1/1/6.2; routing-options { rib vr2.inet6.0 { static { route 0::0/0 next-hop 2002::1.0.0.57; } } static { route 0.0.0.0/0 next-hop 1.0.0.57; } } protocols { ospf { Copyright © 2014, Juniper Networks, Inc. 11 Validated Reference NCE - Business Edge Solution - Device R-7 export rip-to-ospf; area 0.0.0.0 { interface ge-1/1/2.2; } } ospf3 { export ripng-to-ospf3; area 0.0.0.0 { interface ge-1/1/2.2; } } rip { group to-pe { export adv-thru-rip; bfd-liveness-detection { minimum-interval 500; multiplier 3; } neighbor ge-1/1/6.2; } } ripng { group to-pe { export adv-thru-rip; neighbor ge-1/1/6.2; } } pim { rp { static { address 10.2.255.1 { version 2; } address 2002::10.2.255.1 { version 2; } } } interface ge-1/1/6.2 { mode sparse; version 2; } interface ge-1/1/2.2 { mode sparse; version 2; } } } } vr3 { instance-type virtual-router; interface ge-1/1/2.3; interface ge-1/1/6.3; routing-options { rib vr3.inet6.0 { static { 12 Copyright © 2014, Juniper Networks, Inc. route 0::0/0 next-hop 2002::1.0.0.61; } } static { route 0.0.0.0/0 next-hop 1.0.0.61; } } protocols { ospf { export rip-to-ospf; area 0.0.0.0 { interface ge-1/1/2.3; } } ospf3 { export ripng-to-ospf3; area 0.0.0.0 { interface ge-1/1/2.3; } } rip { group to-pe { export adv-thru-rip; bfd-liveness-detection { minimum-interval 500; multiplier 3; } neighbor ge-1/1/6.3; } } ripng { group to-pe { export adv-thru-rip; neighbor ge-1/1/6.3; } } pim { rp { static { address 10.2.255.1 { version 2; } address 2002::10.2.255.1 { version 2; } } } interface ge-1/1/6.3 { mode sparse; version 2; } interface ge-1/1/2.3 { mode sparse; version 2; } } Copyright © 2014, Juniper Networks, Inc. 13 Validated Reference NCE - Business Edge Solution - Device R-7 } } vr4 { instance-type virtual-router; interface ge-1/1/2.4; interface ge-1/1/6.4; protocols { rip { group to-pe { export adv-thru-rip; bfd-liveness-detection { minimum-interval 500; multiplier 3; } neighbor ge-1/1/6.4; } } ripng { group to-pe { export adv-thru-rip; neighbor ge-1/1/6.4; } } pim { rp { static { address 10.2.255.2 { version 2; } address 2002::10.2.255.2 { version 2; } } } interface ge-1/1/6.4 { mode sparse; version 2; } interface ge-1/1/2.4 { mode sparse; version 2; } } } } } 14 Copyright © 2014, Juniper Networks, Inc.