AJRE LD 8.b PDF

ct
io
Advanced Juniper Networks

Routing in the Enterprise
ot
Fo
rR
ep
ro
du
8.b
1194 North Mathilda Avenue

Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Course Number: EDU-JUN-AJRE
Lab Diagrams
Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. JUNOS and JUNOSe are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks
are the property of their respective owners.
Advanced Juniper Networks Routing in the Enterprise Lab Diagrams, Revision 8.b
Copyright 2008, Juniper Networks, Inc.
All rights reserved. Printed in USA.
Revision History:
Revision 8.aDecember 2006
Revision 8.bJanuary 2008
The information in this document is current as of the date listed above.
ct
io
The information in this document has been carefully verified and is believed to be accurate for software Release 8.4R2.3. Juniper Networks assumes no
responsibilities for any inaccuracies that may appear in this document. In no event will Juniper Networks be liable for direct, indirect, special, exemplary, incidental
or consequential damages resulting from any defect or omission in this document, even if advised of the possibility of such damages.
ro
du
Juniper Networks reserves the right to change, modify, transfer or otherwise revise this publication without notice.
YEAR 2000 NOTICE
Juniper Networks hardware and software products do not suffer from Year 2000 problems and hence are Year 2000 compliant. The JUNOS software has no
known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
SOFTWARE LICENSE
The terms and conditions for using this software are described in the software license contained in the acknowledgment to your purchase order or, to the extent
applicable, to any reseller agreement or end-user purchase agreement executed between you and Juniper Networks. By using this software, you indicate that you
understand and agree to be bound by those terms and conditions.
ot
Fo
rR
ep
Generally speaking, the software license restricts the manner in which you are permitted to use the software and may contain prohibitions against certain uses.
The software license may state conditions under which the license is automatically terminated. You should consult the license for further details.
Copyright 2008 Juniper Networks, Inc.
ot
Education Services
du
ep
J4300
ro
Topology
rR
Fo
Lab Diagrams
ct
io
NOTE: These are all implemented as

virtual router routing instances on
Sydney. You can log in to Sydney
and use it as a route server to examine
routing tables and execute ping and
traceroute for each of these virtual
routers. See your lab guide for more
details.
AS 65010
ISP A
ot
ro
du
Education Services
AS 65020
ISP B
ep
rR
Fo
The Internet in the Lab
ct
io
AS 65030
ISP C
ep
rR
isp-b
ro
du
Routing Protocols
Interfaces
Routing Table (*)
(master)
Fo
ct
io
isp-c
Education Services
Routing Protocols
Routing Protocols
Interfaces
Interfaces
Routing Protocols
Interfaces
Routing Table (isp-a.*) Routing Table (isp-b.*) Routing Table (isp-c.*)
isp-a
ot
AS 65010
ISP A
ot
ro
du
ct
io
AS 65030
ISP C
Education Services
instructor@Sydney> show configuration routing-instances isp-a

instance-type virtual-router;
interface fe-2/0/1.15;
interface fe-2/0/1.16;
interface lo0.1;
ISP B
routing-options {
aggregate {
AS 65020
route 172.17.32.0/21;
}
router-id 172.17.32.1;
autonomous-system 65010;
}
protocols {
bgp {
group full-route-customers {
neighbor 172.17.39.18 {
description "HongKong to isp-a";
peer-as 65108;
}
}
[...]
ep
traceroute routing-instance isp-a
rR
show route table isp-a
Fo
ping routing-instance isp-a
0
0/
/
-1
se
se1/0
/1
AS 65108
lo0: 8.1, 8.254
Hong Kong
AS 65010
ISP A
lo0: 9.1, 9.254
Tokyo
AS 65109
Loopback addresses: 10.14.y.z
201
101
102
108
208
203
AS 65115
lo0: 15.1, 15.254
Sao Paulo
se-1/0/0
202
103
207
Denver
se-1/0/1
ct
io
AS 65114
206
205
106
105
204
lo0: 14.1, 14.254
Education Services
Frame Relay
Network
107
104
se-1/0/0
lo0: 11.1, 11.254
Amsterdam
AS 65111
ro
du
ep
rR
Fo
lo0: 10.1, 10.254
London
AS 65110
se-1/0/0
ot
Lab 1a: Policy
se 1/0
/1
1
/0/
1
e
s
AS 65113
lo0: 13.1, 13.254
San Jose
AS 65030
ISP C
lo0: 12.1, 12.254
Montreal
AS 65112
se1
.2 /0/1
lo0: 8.1, 8.254
0
0/
/
-1
se
Hong Kong .1
lo0: 9.1, 9.254
Tokyo
Serial addresses: 192.168.25.x/30

601
602
608
lo0: 15.1, 15.254
Sao Paulo
.14
se-1/0/0
603
Amsterdam
604
Denver
.13
se-1/0/1
606
ct
io
lo0: 14.1, 14.254
607
Education Services
Frame Relay
Network
605
se-1/0/0
.6
lo0: 11.1, 11.254
ro
du
ep
rR
Fo
London
lo0: 10.1, 10.254
se-1/0/0
.5
ot
Lab 1b: Policy
se -
1/0
/1
.10
1
/0/
se-1
.9
Montreal
lo0: 13.1, 13.254
San Jose
lo0: 12.1, 12.254
.236
Hong Kong
AS 65240
lo0: 10.14.243.255
.238
lo0: 10.14.243.253
Group A
All fe-2/0/1
VLAN 240
10.14.243.x/28
.237
lo0: 10.14.243.254
Tokyo
.238
lo0: 10.14.255.254
Sao Paulo .237
se-1/0/0
0
0/
/
-1
se
se
-1/
0/
1
se-1/0/0
Group B
.236
lo0: 10.14.247.253
.237
Amsterdam
.238
se-1/0/1
Denver
Montreal
.237
All fe-2/0/1
VLAN 248
10.14.251.x/28
.238
lo0: 10.14.251.255
AS 65248
lo0: 10.14.251.254
se-1/0/1 San Jose
ct
io
lo0: 10.14.255.255
Education Services
lo0: 10.14.255.253
Group D
.236
All fe-2/0/1
VLAN 252
10.14.255.x/28
AS 65252
AS 65030
se-1/0/1
se-1/0/0
lo0: 10.14.247.254
ro
du
ISP C
AS 65010
ISP A
ep
AS 65244
All fe-2/0/1
VLAN 244
10.14.247.x/28
rR
Fo
London
lo0: 10.14.247.255
ot
Lab 2: BGP Routing
Group C
.236
lo0: 10.14.251.253
ot
/0/1
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
lo0: 192.168.25.6
8.1/30
San Jose fe-2/0/0
lo0: 192.168. 25.7
Denver
lo0: 192.168.25.8
Education Services
10.1/26
Sao Paulo fe-2/0/1
fe-2/0/1
10.65/27
VLAN 102
/1
/0
0
fe .10
8
ro
du
ct
io
fe-2/0/0
Montreal se-1/0/0
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
- 8
fe
ep
rR
ISP A
Clocking Mode = Internal (provide serial interface timing)
VLAN 101
se-1/0/0
8.13/30
fe
17 -2/0
2
.1 /1 V
7
.
38 LA
.2 N
0
/2 16
9
Fo
Interface addresses: 10.14.x.y (except as noted)

Loopback addresses: 192.168.25.x/32
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
London
lo0: 192.168.25.3
fe-2/0/1
Tokyo
11.129/27 lo0: 192.168.25.2
fe-2/0/1
11.1/27
VLAN 105
fe
11 -2/0
.
6
5/2 /1
7
Lab 3a: IGP Conversion
fe-0/0/1
8.30/30
/1
2/0 27
fe 5 /
9.6
VLAN 104
1
0/
0/ 30
fe .5/
8
se-1/0/0
8.21/30
se-1/0/1
8.22/30
VLAN 103
VLAN 100
/0
/0 0
2
3
fe 8.6/
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A 0/2
L
2
V 7.
1
0/ 7.3
/
-2 1
fe 72.
1
fe-0/0/1
8.29/30
ot
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
/0/1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
Denver
lo0: 192.168.25.8
Education Services
VLAN 102
10.1/26
Sao Paulo fe-2/0/1
Area 2
10.14.10.0/24
fe-2/0/1
lo0: 192.168. 25.7 10.65/27
/1
/0
0
fe .10
8
ro
du
ct
io
fe-2/0/0
Montreal se-1/0/0
8.1/30
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
fe
ep
rR
San Jose fe-2/0/0
VLAN 101
se-1/0/0
8.13/30
fe
17 -2/0
2
.1 /1 V
7
.
38 LA
.2 N
0
/2 16
9
Fo
ISP A
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
London
lo0: 192.168.25.3
fe-2/0/1
Tokyo
11.129/27 lo0: 192.168.25.2
fe-2/0/1
11.1/27
VLAN 105
fe
11 -2/0
.
6
5/2 /1
7

se-1/0/0
8.21/30
se-1/0/1
8.22/30
1
0/
0/ 30
fe .5/
8
VLAN 104
/1
2/0 27
fe 5 /
9.6
fe-0/0/1
8.30/30
Lab 3b: IGP Conversion
/0
/0 0
2
3
fe 8.6/
VLAN 100
VLAN 103
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A 0/2
L
2
V 7.
1
0/ 7.3
/
-2 1
fe 72.
1
fe-0/0/1
8.29/30
ot
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
/0/1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
Denver
lo0: 192.168.25.8
Education Services
VLAN 102
10.1/26
Sao Paulo fe-2/0/1
Area 2
10.14.10.0/24
fe-2/0/1
lo0: 192.168. 25.7 10.65/27
/1
/0
0
fe .10
8
ro
du
ct
io
fe-2/0/0
Montreal se-1/0/0
8.1/30
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
fe
ep
rR
VLAN 101
se-1/0/0
8.13/30
fe
17 -2/0
2
.1 /1 V
7
.
38 LA
.2 N
0
/2 16
9
San Jose fe-2/0/0
Fo
ISP A
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
London
lo0: 192.168.25.3
fe-2/0/1
Tokyo
11.129/27 lo0: 192.168.25.2
fe-2/0/1
11.1/27
VLAN 105
fe
11 -2/0
.
6
5/2 /1
7

se-1/0/0
8.21/30
se-1/0/1
8.22/30
1
0/
0/ 30
fe .5/
8
VLAN 104
/1
2/0 27
fe 5 /
9.6
fe-0/0/1
8.30/30
Lab 4a: CRTP
/0
/0 0
2
3
fe 8.6/
VLAN 100
VLAN 103
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A 0/2
L
2
V 7.
1
0/ 7.3
/
-2 1
fe 72.
1
fe-0/0/1
8.29/30
ot
se-1/0/0
/0/1
Hong Kong se-1 30
4/
lo0: 192.168.25.1 8.1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
Denver
lo0: 192.168.25.8
Education Services
VLAN 102
10.1/26
Sao Paulo fe-2/0/1
Area 2
10.14.10.0/24
fe-2/0/1
lo0: 192.168. 25.7 10.65/27
/1
/0
0
fe .10
8
ro
du
ep
rR
San Jose
ct
io
se-1/0/0
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
se-1/0/0
fe-2/0/0
Montreal se-10/1
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
fe
fe-2/0/0
8.1/30
VLAN 101
se-1/0/0
se-1/0/1
8.13/30
fe
17 -2/0
2
.1 /1 V
7
.
38 LA
.2 N
0
/2 16
7
Fo
ISP A
London
lo0: 192.168.25.3
fe-2/0/1
Tokyo
11.129/27 lo0: 192.168.25.2
fe-2/0/1
11.1/27
VLAN 105
fe
11 -2/0
.
6
5/2 /1
7

se-1/0/0
se-1/0/1
8.21/30
se-1/0/0
se-1/0/1
8.22/30
1
0/
0/ 30
fe .5/
8
VLAN 104
/1
2/0 27
fe 5 /
9.6
fe-0/0/1
8.30/30
Lab 4b: Multilink PPP
/0
/0 0
2
3
fe 8.6/
VLAN 100
VLAN 103
se-1/0/0
se-1/0/1
8.26/30
15
7
N
A 0/2
L
2
V 7.
1
0/ 7.3
/
-2 1
fe 72.
1
fe-0/0/1
8.29/30
se-1/0/0
se-1/0/1
8.25/30
0
0/
/
-1
se
se1/0
/1
AS 65108
lo0: 8.1, 8.254
Hong Kong
AS 65010
ISP A
lo0: 9.1, 9.254
Tokyo
AS 65109
201
101
102
108
208
203
AS 65115
lo0: 15.1, 15.254
Sao Paulo
se-1/0/0
202
103
207
Denver
se-1/0/1
ct
io
AS 65114
206
205
106
105
204
lo0: 14.1, 14.254
Education Services
Frame Relay
Network
107
104
se-1/0/0
lo0: 11.1, 11.254
Amsterdam
AS 65111
ro
du
ep
rR
Fo
lo0: 10.1, 10.254
London
AS 65110
se-1/0/0
ot
Lab 5a: Firewall Policy and NAT
se 1/0
/1
1
/0/
1
e
s
AS 65113
lo0: 13.1, 13.254
San Jose
AS 65030
ISP C
lo0: 12.1, 12.254
Montreal
AS 65112
ot
X Values
Hong Kong=200
Tokyo=201
London=202
Amsterdam=203
Montreal=204
San Jose=205
Denver=206
Sao Paulo=207
X.2/24
Education Services
ro
du
ep
rR
fe-2/0/1 Hong Kong

X.1/24
VLAN X
Fo
Hong Kong VR fe-2/0/1
Fast Ethernet addresses: 192.168.x.z

Internet
ct
io
Lab 5b: Firewall Policy and NAT
ot
lo0: 8.1, 8.254
Hong Kong
192.168.200.2
lo0: 9.1, 9.254
192.168.201.2
HongKong-vr
Tokyo
Tokyo-vr

VR Fast Ethernet addresses: 192.168.x.z/24
(See Lab 5b for more VR configuration.)
Internet
ep
rR
ct
io
Education Services
Denver-vr
192.168.206.2
192.168.207.2
lo0: 14.1,14.254
Denver
ro
du
lo0: 11.1,11.254
SaoPaulo-vr
lo0: 15.1,15.254
Sao Paulo
lo0: 10.1,10.254
Amsterdam
192.168.203.2
192.168.202.2
London
Amsterdam-vr
London-vr
Fo
Lab 6: IPSec VPNs
SanJose-vr
192.168.205.2
San Jose
192.168.204.2
lo0: 13.1,13.254
Montreal-vr
Montreal
lo0: 12.1,12.254
ot
lo0: 8.1, 8.254
Hong Kong
200.2, 200.254
lo0: 9.1, 9.254
201.2, 201.254
HongKong-vr
Tokyo
Tokyo-vr

Lab 7: CoS
Internet
ep
ct
io
Education Services
Denver-vr
206.2, 206.254
207.2, 207.254
lo0: 14.1,14.254
Denver
ro
du
lo0: 11.1,11.254
Amsterdam
SaoPaulo-vr
lo0: 15.1,15.254
Sao Paulo
lo0: 10.1,10.254
rR
London
203.2, 203.254
202.2, 202.254
Fo
Amsterdam-vr
London-vr
SanJose-vr
205.2, 205.254
San Jose
204.2, 204.254
lo0: 13.1,13.254
Montreal-vr
Montreal
lo0: 12.1,12.254
ot
Serial Interface and DLCI

(See Lab 1b diagram for
interface, DLCI, and IP
address assignments.)
Frame Relay
Fast Ethernet Addresses: 172.17.x.y/29

Provider Gateway: 172.17.x.z
ISP A
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
Education Services
lo0
Router
ro
du
ep
VLAN w
Hong Kong fe-2/0/1
rR
Tokyo
Fo
17
15
13
ct
io
11
VLAN (w)
37.28
37.20
37.12
37.4
fe-2/0/1 (x.y)
Lab 8a: Branch Office Connectivity
37.25
37.17
37.9
37.1
Provider GW (x.z)
ot
lo0
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Router
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
(VPN)
18
17
16
15
14
13
12
11
VLAN (w)
fe-2/0/1 (x.y)
38.28
37.28
38.20
37.20
38.12
37.12
38.4
ct
io
37.4
ro
du
ISP A
Education Services
.142
.141
.138
.137
.134
.133
.130
.129
gr0 (v)
ep
rR
VLAN w
fe-2/0/1
Fo
VLAN w
Hong Kong fe-2/0/1
Tokyo

gr-0/0/0.0 address: 192.168.25.v/30
38.25
37.25
38.17
37.17
38.9
37.9
38.1
37.1
Provider GW (x.z)
Lab 8b: Branch Office Connectivity
ot
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
lo0
604
604
603
603
602
602
601
601
L2VPN
VLAN (t)
gr0 (v)
.142
.141
.138
.137
.134
.133
.130
.129
Education Services
.14
.13
.10
.9
.6
.5
.2
.1
L2VPN (v)
(VPN)
18
17
16
15
14
n
38.28
37.28
38.20
37.20
38.12
37.12
38.4
37.4
fe-2/0/1 (x.y)
ct
io
13
12
11
VLAN (w)
ISP A
ro
du
ep
VLAN w
rR
fe-2/0/1
VLAN w
HongKong fe-2/0/1
Tokyo
Fo
Router
fe-2/0/1
fe-2/0/1

gr-0/0/0.0 and L2 VPN address: 192.168.25.v/30
Lab 8c: Branch Office Connectivity
VLAN t
38.25
37.25
38.17
37.17
38.9
37.9
38.1
37.1
Provider GW (x.z)
ot
Education Services
du
ep
J4350
ro
Topology
rR
Fo
Lab Diagrams
ct
io
NOTE: These are all implemented as

virtual router routing instances on
Sydney. You can log in to Sydney
and use it as a route server to examine
routing tables and execute ping and
traceroute for each of these virtual
routers. See your lab guide for more
details.
AS 65010
ISP A
ot
ro
du
Education Services
AS 65020
ISP B
ep
rR
Fo
ct
io
AS 65030
ISP C
ep
rR
isp-b
ro
du
Routing Protocols
Interfaces
Routing Table (*)
(master)
Fo
ct
io
isp-c
Education Services
Routing Protocols
Routing Protocols
Interfaces
Interfaces
Routing Protocols
Interfaces
Routing Table (isp-a.*) Routing Table (isp-b.*) Routing Table (isp-c.*)
isp-a
ot
AS 65010
ISP A
ot
ro
du
ct
io
AS 65030
ISP C
Education Services
instructor@Sydney> show configuration routing-instances isp-a

instance-type virtual-router;
interface ge-0/0/3.15;
interface ge-0/0/3.16;
interface lo0.1;
ISP B
routing-options {
aggregate {
AS 65020
route 172.17.32.0/21;
}
router-id 172.17.32.1;
autonomous-system 65010;
}
protocols {
bgp {
group full-route-customers {
neighbor 172.17.39.18 {
description "HongKong to isp-a";
peer-as 65108;
}
}
[...]
ep
traceroute routing-instance isp-a
rR
show route table isp-a
Fo
ping routing-instance isp-a
0
0/
/
-1
se
se1/0
/1
AS 65108
lo0: 8.1, 8.254
Hong Kong
AS 65010
ISP A
lo0: 9.1, 9.254
Tokyo
AS 65109
201
101
102
108
208
203
AS 65115
lo0: 15.1, 15.254
Sao Paulo
se-1/0/0
202
103
207
Denver
se-1/0/1
ct
io
AS 65114
206
205
106
105
204
lo0: 14.1, 14.254
Education Services
Frame Relay
Network
107
104
se-1/0/0
lo0: 11.1, 11.254
Amsterdam
AS 65111
ro
du
ep
rR
Fo
lo0: 10.1, 10.254
London
AS 65110
se-1/0/0
ot
Lab 1a: Policy
se 1/0
/1
1
/0/
1
e
s
AS 65113
lo0: 13.1, 13.254
San Jose
AS 65030
ISP C
lo0: 12.1, 12.254
Montreal
AS 65112
se1
.2 /0/1
lo0: 8.1, 8.254
0
0/
/
-1
se
Hong Kong .1
lo0: 9.1, 9.254
Tokyo
Serial addresses: 192.168.25.x/30

601
602
608
lo0: 15.1, 15.254
Sao Paulo
.14
se-1/0/0
603
Amsterdam
604
Denver
.13
se-1/0/1
606
ct
io
lo0: 14.1, 14.254
607
Education Services
Frame Relay
Network
605
se-1/0/0
.6
lo0: 11.1, 11.254
ro
du
ep
rR
Fo
London
lo0: 10.1, 10.254
se-1/0/0
.5
ot
Lab 1b: Policy
se -
1/0
/1
.10
1
/0/
se-1
.9
Montreal
lo0: 13.1, 13.254
San Jose
lo0: 12.1, 12.254
.236
Hong Kong
AS 65240
lo0: 10.14.243.255
.238
lo0: 10.14.243.253
Group A
All ge-0/0/3
VLAN 240
10.14.243.x/28
.237
lo0: 10.14.243.254
Tokyo
lo0: 10.14.255.254
Sao Paulo .237
se-1/0/0
0
0/
/
-1
se
se
-1/
0/
1
se-1/0/0
.238
Group B
.236
lo0: 10.14.247.253
.237
Amsterdam
.238
se-1/0/1
Denver
Montreal
.237
All ge-0/0/3
VLAN 248
10.14.251.x/28
.238
lo0: 10.14.251.255
AS 65248
lo0: 10.14.251.254
se-1/0/1 San Jose
ct
io
lo0: 10.14.255.255
Education Services
lo0: 10.14.255.253
Group D
.236
All ge-0/0/3
VLAN 252
10.14.255.x/28
AS 65252
AS 65030
se-1/0/1
se-1/0/0
lo0: 10.14.247.254
ro
du
ISP C
AS 65010
ISP A
ep
AS 65244
All ge-0/0/3
VLAN 244
10.14.247.x/28
rR
Fo
London
lo0: 10.14.247.255
ot
Lab 2: BGP Routing
Group C
.236
lo0: 10.14.251.253
ot
/0/1
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
lo0: 192.168.25.6
8.1/30
San Jose ge-0/0/2
ge-0/0/3
lo0: 192.168. 25.7 10.65/27
Denver
lo0: 192.168.25.8
Education Services
10.1/26
Sao Paulo ge-0/0/3
VLAN 102
ro
du
1
0/
/
-0
ge .10
8
ct
io
ge-0/0/2
Montreal se-1/0/0
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
- 8
ge
ep
rR
ISP A
VLAN 101
se-1/0/0
8.13/30
ge
17 -0/
2
.1 0/3
7
.
38 VLA
.2 N
0
/2 16
9
Fo

se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
London
lo0: 192.168.25.3
ge-0/0/3
Tokyo
11.129/27 lo0: 192.168.25.2
ge-0/0/3
11.1/27
VLAN 105
ge
11 -0/0
.
6
5/2 /3
7
Lab 3a: IGP Conversion
ge-0/0/1
8.30/30
/3
0/0 7
ge 5/2
9.6
VLAN 104
/1
/0
0
0
ge .5/3
8
se-1/0/0
8.21/30
se-1/0/1
8.22/30
VLAN 103
VLAN 100
/2
/0 0
0
- /3
ge 8.6
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A /2
VL 7.20
/3
/0 17.3
0
.
ge 172
ge-0/0/1
8.29/30
ot
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
/0/1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
lo0: 192.168.25.8
Education Services
10.1/26
Sao Paulo ge-0/0/3
Area 2
10.14.10.0/24
ge-0/0/3
lo0: 192.168. 25.7 10.65/27
Denver
VLAN 102
ro
du
1
0/
/
-0
ge .10
8
ct
io
ge-0/0/2
Montreal se-1/0/0
8.1/30
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
ge
ep
rR
San Jose ge-0/0/2
VLAN 101
se-1/0/0
8.13/30
ge
17 -0/
2
.1 0/3
7
.
38 VLA
.2 N
0
/2 16
9
Fo
ISP A
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
London
lo0: 192.168.25.3
ge-0/0/3
Tokyo
11.129/27 lo0: 192.168.25.2
ge-0/0/3
11.1/27
VLAN 105
ge
11 -0/0
.
6
5/2 /3
7

se-1/0/0
8.21/30
se-1/0/1
8.22/30
/1
/0
0
0
ge .5/3
8
VLAN 104
/3
0/0 7
ge 5/2
9.6
ge-0/0/1
8.30/30
Lab 3b: IGP Conversion
/2
/0 0
0
- /3
ge 8.6
VLAN 100
VLAN 103
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A /2
VL 7.20
/3
/0 17.3
0
.
ge 172
ge-0/0/1
8.29/30
ot
Hong Kong se-1 30

4/
lo0: 192.168.25.1 8.1
/0/1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
lo0: 192.168.25.8
Education Services
10.1/26
Sao Paulo ge-0/0/3
Area 2
10.14.10.0/24
ge-0/0/3
lo0: 192.168. 25.7 10.65/27
Denver
VLAN 102
ro
du
1
0/
/
-0
ge .10
8
ct
io
ge-0/0/2
Montreal se-1/0/0
8.1/30
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
ge
ep
rR
VLAN 101
se-1/0/0
8.13/30
ge
17 -0/
2
.1 0/3
7
.
38 VLA
.2 N
0
/2 16
9
San Jose ge-0/0/2
Fo
ISP A
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
London
lo0: 192.168.25.3
ge-0/0/3
Tokyo
11.129/27 lo0: 192.168.25.2
ge-0/0/3
11.1/27
VLAN 105
ge
11 -0/0
.
6
5/2 /3
7

se-1/0/0
8.21/30
se-1/0/1
8.22/30
/1
/0
0
0
ge .5/3
8
VLAN 104
/3
0/0 7
ge 5/2
9.6
ge-0/0/1
8.30/30
Lab 4a: CRTP
/2
/0 0
0
- /3
ge 8.6
VLAN 100
VLAN 103
se-1/0/1
8.25/30
se-1/0/0
8.26/30
15
9
N
A /2
VL 7.20
/3
/0 17.3
0
.
ge 172
ge-0/0/1
8.29/30
ot
se-1/0/0
/0/1
Hong Kong se-1 30
4/
lo0: 192.168.25.1 8.1
Area 1
10.14.9.0/24
lo0: 192.168.25.6
Denver
lo0: 192.168.25.8
Education Services
VLAN 102
10.1/26
Sao Paulo ge-0/0/3
Area 2
10.14.10.0/24
ge-0/0/3
lo0: 192.168. 25.7 10.65/27
1
0/
/
-0
ge .10
8
ro
du
ep
rR
San Jose
ct
io
se-1/0/0
se-1/0/1
8.18/30 Amsterdam
lo0: 192.168.25.4
Area 3
10.14.11.0/24
se-1/0/0
ge-0/0/2
Montreal se-10/1
8.2/30 lo0: 192.168.25.5 8.17/30
/1
/0 .9
0
Area 0
- 8
ge
ge-0/0/2
8.1/30
VLAN 101
se-1/0/0
se-1/0/1
8.13/30
ge
17 -0/
2
.1 0/3
7
.
38 VLA
.2 N
0
/2 16
7
Fo
ISP A
London
lo0: 192.168.25.3
ge-0/0/3
Tokyo
11.129/27 lo0: 192.168.25.2
ge-0/0/3
11.1/27
VLAN 105
ge
11 -0/0
.
6
5/2 /3
7

se-1/0/0
se-1/0/1
8.21/30
se-1/0/0
se-1/0/1
8.22/30
/1
/0
0
0
ge .5/3
8
VLAN 104
/3
0/0 7
ge 5/2
9.6
ge-0/0/1
8.30/30
Lab 4b: Multilink PPP
/2
/0 0
0
- /3
ge 8.6
VLAN 100
VLAN 103
se-1/0/0
se-1/0/1
8.26/30
15
7
N
A /2
VL 7.20
/3
/0 17.3
0
.
ge 172
ge-0/0/1
8.29/30
se-1/0/0
se-1/0/1
8.25/30
0
0/
/
-1
se
se1/0
/1
AS 65108
lo0: 8.1, 8.254
Hong Kong
AS 65010
ISP A
lo0: 9.1, 9.254
Tokyo
AS 65109
201
101
102
108
208
203
AS 65115
lo0: 15.1, 15.254
Sao Paulo
se-1/0/0
202
103
207
Denver
se-1/0/1
ct
io
AS 65114
206
205
106
105
204
lo0: 14.1, 14.254
Education Services
Frame Relay
Network
107
104
se-1/0/0
lo0: 11.1, 11.254
Amsterdam
AS 65111
ro
du
ep
rR
Fo
lo0: 10.1, 10.254
London
AS 65110
se-1/0/0
ot
Lab 5a: Firewall Policy and NAT
se 1/0
/1
1
/0/
1
e
s
AS 65113
lo0: 13.1, 13.254
San Jose
AS 65030
ISP C
lo0: 12.1, 12.254
Montreal
AS 65112
ot
VLAN X
X.1/24
X Values
Hong Kong=200
Tokyo=201
London=202
Amsterdam=203
Montreal=204
San Jose=205
Denver=206
Sao Paulo=207
X.2/24
Education Services
ro
du
ep
rR
Fo
Hong Kong VR ge-0/0/3 ge-0/0/3 Hong Kong
Fast Ethernet addresses: 192.168.x.z

Internet
ct
io
Lab 5b: Firewall Policy and NAT
ot
lo0: 8.1, 8.254
Hong Kong
192.168.200.2
lo0: 9.1, 9.254
192.168.201.2
HongKong-vr
Tokyo
Tokyo-vr

Internet
ep
rR
ct
io
Education Services
Denver-vr
192.168.206.2
192.168.207.2
lo0: 14.1,14.254
Denver
ro
du
lo0: 11.1,11.254
SaoPaulo-vr
lo0: 15.1,15.254
Sao Paulo
lo0: 10.1,10.254
Amsterdam
192.168.203.2
192.168.202.2
London
Amsterdam-vr
London-vr
Fo
Lab 6: IPSec VPNs
SanJose-vr
192.168.205.2
San Jose
192.168.204.2
lo0: 13.1,13.254
Montreal-vr
Montreal
lo0: 12.1,12.254
ot
lo0: 8.1, 8.254
Hong Kong
200.2, 200.254
lo0: 9.1, 9.254
201.2, 201.254
HongKong-vr
Tokyo
Tokyo-vr

Lab 7: CoS
Internet
ep
ct
io
Education Services
Denver-vr
206.2, 206.254
207.2, 207.254
lo0: 14.1,14.254
Denver
ro
du
lo0: 11.1,11.254
Amsterdam
SaoPaulo-vr
lo0: 15.1,15.254
Sao Paulo
lo0: 10.1,10.254
rR
London
203.2, 203.254
202.2, 202.254
Fo
Amsterdam-vr
London-vr
SanJose-vr
205.2, 205.254
San Jose
204.2, 204.254
lo0: 13.1,13.254
Montreal-vr
Montreal
lo0: 12.1,12.254
ot
Serial Interface and DLCI

(See Lab 1b diagram for
interface, DLCI, and IP
address assignments.)
Frame Relay

ISP A
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
Education Services
lo0
Router
ro
du
ep
VLAN w
Hong Kong ge-0/0/3
rR
Tokyo
Fo
17
15
13
ct
io
11
37.28
37.20
37.12
37.4
ge-0/0/3 (x.y)
VLAN (w)
Lab 8a: Branch Office Connectivity
37.25
37.17
37.9
37.1
Provider GW (x.z)
ot
lo0
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Router
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
(VPN)
18
17
16
15
14
13
12
11
VLAN (w)
38.28
37.28
38.20
37.20
38.12
37.12
38.4
ct
io
37.4
38.25
37.25
38.17
37.17
38.9
37.9
38.1
37.1
Provider GW (x.z)
ge-0/0/3 (x.y)
ro
du
ISP A
Education Services
.142
.141
.138
.137
.134
.133
.130
.129
gr0 (v)
ep
rR
VLAN w
ge-0/0/3
Fo
VLAN w
Hong Kong ge-0/0/3
Tokyo

gr-0/0/0.0 address: 192.168.25.v/30
Lab 8b: Branch Office Connectivity
ot
192.168.200.1,.254
192.168.201.1, .254
192.168.202.1, .254
192.168.203.1, .254
192.168.204.1, .254
192.168.205.1, .254
192.168.206.1, .254
192.168.207.1, .254
Hong Kong
Tokyo
London
Amsterdam
Montreal
San Jose
Denver
Sao Paulo
lo0
604
604
603
603
602
602
601
601
L2VPN
VLAN (t)
L2VPN (v)
.142
.141
.138
.137
.134
.133
.130
.129
Education Services
.14
.13
.10
.9
.6
.5
.2
.1
gr0 (v)
(VPN)
18
17
16
15
14
13
38.28
37.28
38.20
37.20
38.12
37.12
38.4
37.4
ge-0/0/3 (x.y)
ct
io
12
11
VLAN (w)
ISP A
ro
du
ep
VLAN w
rR
ge-0/0/3
VLAN w
HongKong ge-0/0/3
Tokyo
Fo
Router
ge-0/0/3
ge-0/0/3

gr-0/0/0.0 and L2 VPN address: 192.168.25.v/30
Lab 8c: Branch Office Connectivity
VLAN t
38.25
37.25
38.17
37.17
38.9
37.9
38.1
37.1
Provider GW (x.z)

AJRE LD 8.b PDF

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

AJRE LD 8.b PDF

Uploaded by

Copyright:

Available Formats

ct

Advanced Juniper Networks

1194 North Mathilda Avenue

Copyright 2008 Juniper Networks, Inc.

Copyright 2008 Juniper Networks, Inc.

NOTE: These are all implemented as

The Internet in the Lab

Routing Table (*)

Copyright 2008 Juniper Networks, Inc.

Routing Table (isp-a.*) Routing Table (isp-b.*) Routing Table (isp-c.*)

The Internet in the Lab

Copyright 2008 Juniper Networks, Inc.

instructor@Sydney> show configuration routing-instances isp-a

traceroute routing-instance isp-a

show route table isp-a

ping routing-instance isp-a

The Internet in the Lab

Copyright 2008 Juniper Networks, Inc.

lo0: 8.1, 8.254

lo0: 9.1, 9.254

Loopback addresses: 10.14.y.z

lo0: 15.1, 15.254

lo0: 14.1, 14.254

lo0: 11.1, 11.254

lo0: 10.1, 10.254

Lab 1a: Policy

lo0: 13.1, 13.254

lo0: 12.1, 12.254

Copyright 2008 Juniper Networks, Inc.

lo0: 8.1, 8.254

lo0: 9.1, 9.254

Serial addresses: 192.168.25.x/30

lo0: 15.1, 15.254

lo0: 11.1, 11.254

Lab 1b: Policy

lo0: 13.1, 13.254

lo0: 12.1, 12.254

Copyright 2008 Juniper Networks, Inc.

Sao Paulo .237

se-1/0/1 San Jose

Lab 2: BGP Routing

Hong Kong se-1 30

San Jose fe-2/0/0

lo0: 192.168. 25.7

Sao Paulo fe-2/0/1

Copyright 2008 Juniper Networks, Inc.

Clocking Mode = Internal (provide serial interface timing)

Interface addresses: 10.14.x.y (except as noted)

Lab 3a: IGP Conversion

Hong Kong se-1 30

Copyright 2008 Juniper Networks, Inc.

Sao Paulo fe-2/0/1

San Jose fe-2/0/0

Clocking Mode = Internal (provide serial interface timing)

Interface addresses: 10.14.x.y (except as noted)

Lab 3b: IGP Conversion

Hong Kong se-1 30

Copyright 2008 Juniper Networks, Inc.

Sao Paulo fe-2/0/1

Clocking Mode = Internal (provide serial interface timing)

San Jose fe-2/0/0

Interface addresses: 10.14.x.y (except as noted)

Routing Table (isp-a.) Routing Table (isp-b.) Routing Table (isp-c.*)

Routing Table (isp-a.) Routing Table (isp-b.) Routing Table (isp-c.*)