05 - Troubleshooting Juniper-M - VPN-IP (Modo de Compatibilidad) PDF

Comandos y Troubleshooting en
Juniper-M (VPN-IP)
ACELERAR PARA SER

MS LDERES
23 de Noviembre 2.005
Telefnica Soluciones de Outsorcing

Centro de Formacin TSO
ndice
01 Configuracin del Servicio VPN-IP en Juniper M.
02 Comandos de Monitorizacin en Juniper M

ACELERAR PARA
SER MS LDERES

Centro de Formacin TSO 2
01 Configuracin del Servicio VPN-IP en
Juniper M.
Show configuration routing-instances <nom_VRF>:
Nos permite ver la definicin de nuestra VRF dentro del PE.
ACELERAR PARA
SER MS LDERES
xavm0005@re1-NMAMNOR1> show configuration routing-instances
VPNIP_VRF_ALCAMPO_S_A_A282_363
instance-type vrf;
interface at-0/0/1.194;
interface at-0/0/1.195;
route-distinguisher 3352:36300;
vrf-import VPNIP_ALCAMPO_S_A_A282_363_imp;
vrf-export VPNIP_ALCAMPO_S_A_A282_363_exp;
vrf-table-label;
routing-options {
auto-export;
}
protocols {
bgp {
description VPNIP_VRF_ALCAMPO_S_A_A282_363;
}

Juniper M.
xavm0005@re1-NMAMNOR1> show configuration routing-instances
VPNIP_VRF_ALCAMPO_S_A_A282_363 (Cont)
rip {
receive version-2;
group VPNIP_RIP_Unidireccional {
ACELERAR PARA
export VPNIP_vrf2rip;
SER MS LDERES
neighbor at-0/0/1.194 {
send none;
}
neighbor at-0/0/1.195 {
send none;
}
}
group VPNIP_RIP_Bidireccional {
}
group VPNIP_RIP_PTO_SINGULAR_BCK {
preference 200;
}
}
}

Juniper M.
Show configuration interfaces <nom_subinterface>
Muestra la configuracin del subinterface de conexin con el equipo de cliente.
ACELERAR PARA xavm0005@re1-NMAMNOR1> show configuration interfaces at-0/0/1.194

SER MS LDERES
description atm-scheduler-map map_131_52;

A28581882_ALCAMPO_S_A_A282_VPNI
P_131/52_N/A; family inet {
encapsulation atm-snap;
filter {
point-to-point;
input VPNIP_QoS_Input_at-0/0/1.194;
vci 131.52;
shaping { output VPNIP_QoS_Output_at-0/0/1.194;
vbr peak 896k sustained 896k burst 1; group 20;

} }
oam-period 10; address 10.32.3.213/30;
oam-liveness { }
up-count 3;
down-count 3;
}

Juniper M.
Show configuration interfaces ?
Nos muestra los interfaces conectados al PE. Nos permite ver las conexiones
que recibe a travs de la RED UNO y de la red MetroLan.
ACELERAR PARA
SER MS LDERES
xavm0005@re1-NMAMNOR1> show configuration interfaces ?
at-0/0/0 Conexion con QMNOR1 8/3

e3-1/2/0 Conexion con PMNOR1 13/0
fe-0/1/0 RAL gestion
fe-0/1/1 RAL conmutados
fe-0/1/3 SoftSwitch NLSMNOR2
ge-0/2/0 Conexion con MeBA2 2810000xxxxxxx
ge-0/3/0 Conexion con BANKINTER Tres Cantos Fibra Directa
ge-2/1/0 Conexion con MeBA2 28100001832790
ge-2/2/0 Conexion con MeBA2 28100001832800
lo0 Interface name
so-2/3/0 Conexion con NRAMNOR1
so-3/0/0 Conexion con NMAMRRO3 3/0/0 (28100001817264)
so-4/0/0 Conexion con NJTMDEL2 3/1/0 (28100001817269)

Juniper M.
Show configuration policy-options policy-statement
<nom_politica_filtro>
Muestra las politicas de importacion y de exportacin de redes de una VRF.
ACELERAR PARA
show configuration policy-options policy-statement
SER MS LDERES
VPNIP_ALCAMPO_S_A_A282_363_exp
}
term VPNIP_Direcciones_Loopback_EDC { term exporta_gestion_2Nivel {
from policy VPNIP_Loopbacks_EDCs; from policy Hosts_IP_Segundo_Nivel;
then { then {
community add rt_3352_1001; community add rt_3352_1302;
accept; accept;
} }
} }
term exporta_gestion_2Nivel_CCM { term VPNIP_Direcciones_Enlace_WAN {
from policy Hosts_IP_Segundo_Nivel; from policy VPNIP_Direcciones_WAN;
then { then reject;
community add rt_3352_1302; }
community add rt_3352_36300;
accept;
}

Juniper M.
VPNIP_ALCAMPO_S_A_A282_363_exp (Cont)
term VPNIP_Rutas_RIPyESTATICAS {
ACELERAR PARA from protocol [ rip static ];
SER MS LDERES then {
accept;
}
}
term VPNIP_Rutas_BGP {
from protocol bgp;
then {
next-hop self;
accept;
}
}
term VPNIP_Rutas_Denegadas {
then reject;
}

Juniper M.
VPNIP_ALCAMPO_S_A_A282_363_imp
term VPNIP_Rutas_MBGP {
ACELERAR PARA
from community [ rt_3352_1000 rt_3352_36300 ];
SER MS LDERES
then accept;
}
term VPNIP_Rutas_Denegadas {
then reject;
}

Juniper M.
Show configuration firewall family inet filter <nom_filtro>
Muestra el filtro vigente a travs de un interfaz.
xavm0005@re1-NMAMRRO1> show configuration firewall family inet filter

ACELERAR PARA
SER MS LDERES VPNIP_QoS_Input_at-0/0/0.217
accounting-profile QOS_VPNIP; term filtra-protocolos {
interface-specific; from {
protocol [ 53 55 77 103 ];
term VPNIP_AntiSpoofing_CGest {
}
from {
then {
source-prefix-list { discard;
Centro_Gestion_Servicios_IP; }
} }
} term cuentaTodo {
then {
then {
count tot_rec;
count count_spoof;
next term;
discard; }
} }
}

Juniper M.
VPNIP_QoS_Input_at-0/0/0.217
term cuentaOro { }
from { term VPNIP_Trafico_Plata_In {
ACELERAR PARA
precedence 3;
SER MS LDERES from {
}
precedence 1;
then {
count oro_rec; }
next term; then {
} loss-priority high;
} forwarding-class ClienteCalidad;
term VPNIP_Trafico_Oro_In {
}
from {
}
precedence 3;
} term VPNIP_Resto_Trafico_In {
then { then {
policer VPNIP_RL_Input_Oro_160k; loss-priority high;
count oro_cur; forwarding-class BestEffort;
loss-priority low; }
forwarding-class ClienteCalidad;
}
}

Juniper M.
VPNIP_QoS_Input_at-0/0/0.217
term VPNIP_Trafico_Gestion_In {
ACELERAR PARA
SER MS LDERES from {
precedence 7;
}
then {
policer VPNIP_RL_Input_Gestion_32k;
loss-priority low;
forwarding-class Gestion;
}
}

Juniper M.
Show configuration firewall policer <nom_rate_limit>
Muestra la politica de caudal permitido y caudal remarcado por cada QoS.
ACELERAR PARA
SER MS LDERES xavm0005@re1-NMAMNOR1> show xavm0005@re1-NMAMNOR1> show
configuration firewall policer configuration firewall policer
VPNIP_RL_Output_Multimedia_
VPNIP_RL_Input_Oro_256k
270k
if-exceeding {
if-exceeding {
bandwidth-limit 256k;
bandwidth-limit 270k;
burst-size-limit 48k;
burst-size-limit 50625;
}
}
then {
then discard;
loss-priority high;
forwarding-class ClienteCalidad;
}

ACELERAR PARA
SER MS LDERES
02 Comandos de Monitorizacin en Juniper M

02 Comandos y Troubleshooting en
Juniper-M
Entrando a un Juniper serie M
Para entrar a un Juniper-M se har desde gestip1 (213.0.254.50), gestiap2
(192.168.134.209) o gestip3 (192.168.134.76) empleando el protocolo SSH
hacia el hostname del router o su direccin IP.
ACELERAR PARA
SER MS LDERES
$ ssh nmamaga1
The authenticity of host 'nmamaga1 (194.69.226.168)' can't be established.
RSA key fingerprint is f7:fa:5b:e6:89:82:80:36:75:e3:25:90:7c:01:8f:b1.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'nmamaga1,194.69.226.168' (RSA) to the list of known hosts.
xfgh0001@nmamaga1's password:
--- JUNOS 6.4I20050830_1717_harsha built 2005-08-30 18:12:48 UTC
xfgh0001@NMAMAGA1>

Juniper-M
show interfaces
Muestra el estado de los interfaces.
OTRAS FACILIDADES:
show interfaces description
show interfaces brief
ACELERAR PARA show interfaces extensive
SER MS LDERES
xfgh0001@NMAMAGA1> show interfaces description
Interface Admin Link Description
at-0/0/0.0 up up IFAZ_FICTICIO_BUG_MPLS_PIC
at-0/0/0.1 up up S4111001F_JUNTA_ANDALUCIA_VPNIP_242/32_
at-0/0/0.2 up up A36602837_PEUGEOT_CITR_A337_VPNIP_242/33_
at-0/0/0.3 up up Q9155023F_EMPRESA_PUBL_Q93F_VPNIP_154/32_
at-0/0/0.4 up down A80814593_FOREING_VPNIP_198/32_
at-0/0/0.5 up up A08197931_SERVIABERTIS_B641_VPNIP_154/33_
at-0/0/0.6 up up A11000221_FEDERICO_JOL_A121_VPNIP_242/34_
at-0/0/0.7 up up S4111001F_JUNTA_DE_AND_S41F_VPNIP_154/34_
at-0/0/0.8 up up A07632474_RIUSA_II_S.A_A074_VPNIP_242/35_
at-0/0/0.9 up up B83395988_INSTITUTO_NOTARIAL_VPNIP_242/37_
at-0/0/0.10 up up A12041562_RECORD_RENT__A162_VPNIP_242/36_
at-0/0/0.11 up up A28012342_FIAT_AUTO_ES_A242_VPNIP_242/39_
at-0/0/0.13 up up A82281387_MORGAN_STANL_A887_VPNIP_242/81_
at-0/0/0.15 up up A28103026_MAPFRE_VPNIP_154/35_
at-0/0/0.21 up up Q9155006A_EMPRESA_PUBL_Q96A_VPNIP_242/44_
at-0/0/0.22 up up A18315275_GESTION_DE_I_A175_VPNIP_242/45_
at-0/0/0.26 up up B07012107_VIAJES_BARCE_B007_VPNIP_123/35_
at-0/0/0.27 up down B03260684_NEUMATICOS_S_B084_VPNIP_242/117_
at-0/0/0.28 up up A12584470_RECORD_GO_AL_A170_VPNIP_242/50_
at-0/0/0.29 up up S4111001F_JUNTA_DE_AND_S41F_VPNIP_242/49_

Juniper-M
show interfaces
show interfaces terse
xavm0005@re0-NMAMDEL1> show interfaces terse

Interface Admin Link Proto Local Remote
ACELERAR PARA at-0/0/0 up up
SER MS LDERES at-0/0/0.0 up up inet 10.0.0.1/30
mpls
at-0/0/0.1 up up inet 172.28.0.161/30
at-0/0/0.2 up up inet 172.28.45.133/30
at-0/0/0.3 up up inet 172.28.45.113/30
at-0/0/0.4 up down inet 172.28.45.101/30
at-0/0/0.5 up up inet 172.28.41.233/30
at-0/0/0.6 up down inet 172.28.41.205/30
at-0/0/0.7 up up inet 10.32.4.209/30
at-0/0/0.8 up up inet 172.28.41.245/30
at-0/0/0.9 up down inet 172.28.42.21/30
at-0/0/0.10 up up inet 172.28.42.29/30
at-0/0/0.11 up up inet 172.28.42.37/30
at-0/0/0.12 up up inet 172.28.42.45/30
at-0/0/0.13 up up inet 172.28.41.249/30
at-0/0/0.14 up down inet 172.28.42.1/30
at-0/0/0.15 up up inet 172.28.42.9/30
at-0/0/0.16 up down inet 172.28.41.209/30
at-0/0/0.17 up up inet 172.28.41.93/30
at-0/0/0.18 up up inet 10.32.77.41/30
at-0/0/0.20 up up inet 172.28.41.145/30
at-0/0/0.21 up up inet 172.28.41.129/30

Juniper-M
show interfaces
show interfaces brief
xfgh0001@NMAMAGA1> show interfaces brief

Physical interface: at-0/0/0, Enabled, Physical link is Up
Link-level type: ATM-PVC, MTU: 4482, Clocking: Internal, SDH mode, Speed: OC3, Loopback: None,
ACELERAR PARA Payload scrambler: Enabled
SER MS LDERES Device flags : Present Running
Link flags : None
Logical interface at-0/0/0.0

Description: IFAZ_FICTICIO_BUG_MPLS_PIC
Flags: Point-To-Point Copy-PLP-To-CLP SNMP-Traps 16384 Encapsulation: ATM-SNAP
inet 192.168.1.1/30
mpls
VCI 0.99
Flags: Active, 1024
Total down time: 0 sec, Last down: Never
EPD threshold: 0, Transmit weight cells: 0

Description: S4111001F_JUNTA_ANDALUCIA_VPNIP_242/32_
inet 10.32.0.1/30
VCI 242.32
Flags: Active, OAM, Shaping, 3072
Total down time: 00:00:20 sec, Last down: 103:18:24 ago

Description: A36602837_PEUGEOT_CITR_A337_VPNIP_242/33_
inet 192.168.230.29/30
VCI 242.33
Total down time: 0 sec, Last down: Never

Juniper-M
show interfaces
show interfaces extensive (I)
xfgh0001@NMAMAGA1> show interfaces extensive at-0/0/0.10

Logical interface at-0/0/0.10 (Index 535) (SNMP ifIndex 200) (Generation 473)
Description: A12041562_RECORD_RENT__A162_VPNIP_242/36_
ACELERAR PARA Flags: Point-To-Point Copy-PLP-To-CLP SNMP-Traps 16384 Encapsulation: ATM-SNAP
Traffic statistics:
SER MS LDERES Input bytes : 536238943
Output bytes : 2981921827
Input packets: 3536648
Output packets: 4003386
Local statistics:
Input bytes : 17225820
Transit statistics:
Input bytes : 519013123 1096 bps
Output bytes : 2968607803 928 bps
Input packets: 3260230 2 pps
Output packets: 3777716 1 pps
Protocol inet, MTU: 4470, Generation: 957, Route table: 55
Flags: None
Filters: Input: VPNIP_QoS_Input_at-0/0/0.10-at-0/0/0.10-i, Output: VPNIP_QoS_Output_at-0/0/0.10
Addresses, Flags: Is-Preferred Is-Primary
Destination: 10.32.0.36/30, Local: 10.32.0.37, Broadcast: 10.32.0.39, Generation: 293
VCI 242.36
VBR, Peak: 896kbps, Sustained: 896kbps, Burst size: 1
OAM, Period 10 sec, Up count: 3, Down count: 3
Total down time: 07:08:33 sec, Last down: 28:38:26 ago
ATM per-VC transmit statistics:
Tail queue packet drops: 4
Traffic statistics:
Input bytes : 560965950

Juniper-M
show interfaces
show interfaces extensive (y II)
-- Continuacin
ATM CoS statistics:
VC CoS mode: strict
ACELERAR PARA BestEffort 0:
SER MS LDERES Priority: high, Transmit weight percent: 95
EPD threshold: 0
Packet Drops : 4
ClienteCalidad 1:
Priority: low, Transmit weight percent: 0
EPD threshold: 0
Output bytes : 0
Output packets: 0
Packet Drops : 0
VoIP 2:
EPD threshold: 0
Output bytes : 0
Output packets: 0
Packet Drops : 0
Gestion 3:
EPD threshold: 0
Packet Drops : 0
OAM F5 cell statistics:
Total received: 223007, Total sent: 225624
Loopback received: 222919, Loopback sent: 225536
Last received: 00:00:00, Last sent: 00:00:00
RDI received: 0, RDI sent: 88
Last received: Never, Last sent: 152:59:20
AIS received: 88, AIS sent: 0
Last received: 152:59:20, , Last sent: Never

Juniper-M
show route instance
Muestra las VRFs configuradas en el Juniper-M y el nmero de rutas aprendidas.
OTRAS FACILIDADES:
show route instance | find <expresin regular>
show route instance detail
ACELERAR PARA
SER MS LDERES xfgh0001@NMAMAGA1> show route instance
l3vpn.0 0/0/0
inet6.0 2/0/0
l2circuit.0 0/0/0
VPNIP_VRF_ALTA_GESTION_A806_458 vrf
VPNIP_VRF_ALTA_GESTION_A806_458.inet.0 151/0/0
VPNIP_VRF_ALTA_GESTION_A806_458.inet6.0 0/0/0
VPNIP_VRF_AMPER_S.A._A226_728 vrf
VPNIP_VRF_AMPER_S.A._A226_728.inet.0 15/0/0
VPNIP_VRF_AMPER_S.A._A226_728.inet6.0 0/0/0
VPNIP_VRF_ASISTENCIA_S_A094_848 vrf
VPNIP_VRF_ASISTENCIA_S_A094_848.inet.0 23/0/0
VPNIP_VRF_ASISTENCIA_S_A094_848.inet6.0 0/0/0
xfgh0001@NMAMAGA1> show route instance detail VPNIP_VRF_AMPER_

S.A._A226_728
VPNIP_VRF_AMPER_S.A._A226_728:
Router ID: 0.0.0.0
Type: vrf State: Active
Interfaces:
at-0/0/0.104
lsi.33793
Route-distinguisher: 3352:72800
Vrf-import: [ VPNIP_AMPER_S.A._A226_728_imp ]
Vrf-export: [ VPNIP_AMPER_S.A._A226_728_exp ]
Tables:
VPNIP_VRF_AMPER_S.A._A226_728.inet.0: 51 routes (15 active, 0 holddown, 0 hidden)

Juniper-M
show route table <nombre de la VRF>
Muestra la tabla de rutas de la VRF indicada.
OTRAS FACILIDADES:
show route table <nombre de la VRF> protocol RIP | BGP | STATIC
show route table <nombre de la VRF> detail
ACELERAR PARA
SER MS LDERES xfgh0001@NMAMAGA1> show route table VPNIP_VRF_AMPER_S.A._A226_
728
VPNIP_VRF_AMPER_S.A._A226_728.inet.0: 15 destinations, 51 routes (15 active, 0 holddown, 0 hidden)

+ = Active Route, - = Last Active, * = Both
Etiqueta del VPN
10.32.1.69/32 *[Local/0] 2w3d 11:44:19
Reject
Etiqueta del LSP
140.0.8.0/21 *[BGP/170] 04:37:22, MED 2, localpref 200, from 194.69.226.148
AS path: I
> via so-0/3/0.0, Push 1080, Push 247(top)
[BGP/170] 19:57:40, MED 2, localpref 200, from 213.0.184.197
AS path: I Reflectores
AS path: I
AS path: I Interface de
> via so-0/3/0.0, Push 1080, Push 247(top) Salida
10.0.3.0/24 *[RIP/100] 1w2d 10:38:30, metric 2, tag 0
> to 10.32.6.42 via at-0/0/0.152 Ruta conocida por RIP
10.32.0.12/30 *[Direct/0] 6w1d 01:31:55
> via at-0/0/0.116
Red directamente
conectada

Juniper-M
xfgh0001@NMAMAGA1> show route table VPNIP_VRF_AMPER_S.A._A226_

728 detail
ACELERAR PARA
VPNIP_VRF_AMPER_S.A._A226_728.inet.0: 15 destinations, 51 routes (15 active, 0 holddown, 0 hidden)
SER MS LDERES 10.32.1.69/32 (1 entry, 1 announced)
*Local Preference: 0
Next hop type: Reject
Next-hop reference count: 201
State: <Active NoReadvrt Int>
Age: 2w3d 12:27:33
Task: IF
Announcement bits (1): 0-KRT
AS path: I
140.0.8.0/21 (4 entries, 1 announced)

*BGP Preference: 170/-201
Route Distinguisher: 3352:72801
Next-hop reference count: 18
Source: 194.69.226.148
Next hop: via so-0/3/0.0, selected
Label operation: Push 1080, Push 247(top)
Protocol next hop: 194.69.226.216
Push 1080
Indirect next hop: 1b1b1600 9192
State: <Secondary Active Int Ext>
Local AS: 65056 Peer AS: 65056
Age: 5:20:36 Metric: 2 Metric2: 500
Task: BGP_65056.194.69.226.148+3308
Announcement bits (2): 0-KRT 1-VPNIP_VRF_AMPER_S.A._A226_728-R
AS path: I (Originator) Cluster list: 0.0.0.1
AS path: Originator ID: 194.69.226.216
Communities: target:3352:72800
VPN Label: 1080
Localpref: 200
Router ID: 194.69.226.148
Primary Routing Table bgp.l3vpn.0
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Juniper-M
show bgp summary
Muestra el estado de las sesiones BGP establecidas en el Juniper M.
OTRAS FACILIDADES:
show bgp summary instance <nombre de la VRF>
ACELERAR PARA
SER MS LDERES
xfgh0001@NMAMAGA1> show bgp summary
Groups: 56 Peers: 68 Down peers: 16
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0 730887 183685 0 0 0 0
inet.2 7407 2462 0 0 0 0
bgp.l3vpn.0 77053 19949 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Damped...

193.152.56.2 64804 0 0 0 0 2w3d12h Connect
193.152.56.6 64890 151380 151241 0 1 1w2d12h Establ
inet.0: 1/1/0
193.152.56.10 64896 77266 77226 0 5 1w1d22h Establ
inet.0: 1/1/0
193.152.56.30 64676 151383 151238 0 0 2w3d12h Establ
inet.0: 2/2/0
193.152.56.34 64911 82107 82031 0 1 1w2d12h Establ
inet.0: 0/1/0
193.152.56.42 64648 151389 151239 0 1 1w2d12h Establ
inet.0: 1/1/0
193.152.56.50 64982 0 0 0 0 2w3d12h Connect
193.152.56.54 64991 79744 79650 0 2 1w2d5h Establ
inet.0: 2/2/0
193.152.56.62 65014 0 0 0 0 2w3d12h Active
193.152.56.66 65018 81860 81796 0 7 5d 23:02:36 Establ
inet.0: 0/1/0
194.69.226.148 65056 217013 902 0 2 5:26:02 Establ
inet.0: 3386/180484/0
inet.2: 0/37/0
bgp.l3vpn.0: 17285/17298/0
VPNIP_VRF_IBERIA_.inet.0: 30/30/0
. . . . . . . . . . . . . . . . . . . . . . . .

Juniper-M
show route advertising-protocol bgp <neighbor>
Muestra las rutas que el Juniper M est anunciando al neigbor indicado.
OTRAS FACILIDADES:
show route advertising-protocol bgp <neighbor> table <nombre de la VRF> detail
ACELERAR PARA
xfgh0001@NMAMAGA1> show route advertising-protocol bgp
SER MS LDERES
193.152.56.10
inet.0: 184316 destinations, 731545 routes (184304 active, 0 holddown, 12 hidden)
Restart Complete
Prefix Nexthop MED Lclpref AS path
* 80.26.0.0/18 Self I
* 80.26.64.0/18 Self I
* 80.26.128.0/18 Self I
* 80.26.192.0/18 Self I
* 80.27.0.0/18 Self I
* 80.27.64.0/18 Self I
* 80.28.0.0/18 Self I
* 80.28.64.0/18 Self I
* 80.28.128.0/18 Self I
* 80.28.192.0/18 Self I
* 80.29.0.0/18 Self I
* 80.29.64.0/18 Self I
* 193.148.144.0/20 Self I
* 193.148.160.0/19 Self I
* 193.152.0.0/15 Self I
* 193.152.0.0/16 Self I
* 193.152.0.0/17 Self I
* 194.179.0.0/18 Self I
* 194.179.7.0/24 Self I
* 194.179.16.0/24 Self I
* 194.179.20.0/24 Self I
* 194.179.64.0/18 Self I
* 194.224.0.0/17 Self I
* 194.224.128.0/17 Self I
* 195.53.0.0/16 Self I
* 195.55.0.0/16 Self I
. . . . . . . . . . . . . . . . . . . . . . . .
Juniper-M
show route advertising-protocol bgp <neighbor>
show route advertising-protocol bgp <neighbor> table <nombre de la VRF> detail
xfgh0001@NMAMAGA1> show route advertising-protocol bgp

213.0.184.206 table VPNIP_VRF_INSTITUTO_NOTARIAL_264 detail
ACELERAR PARA
VPNIP_VRF_INSTITUTO_NOTARIAL_264.inet.0: 1959 destinations, 7288 routes (1959 active, 0 holddown, 0 hidden)
SER MS LDERES * 10.0.3.0/24 (1 entry, 1 announced)
BGP group AS65056 type Internal
VPN Label: 1033
Nexthop: Self
MED: 2
Localpref: 100
AS path: I
* 10.0.24.0/24 (1 entry, 1 announced)

VPN Label: 1033
Nexthop: Self
MED: 2
Localpref: 100
AS path: I
* 10.0.25.0/24 (1 entry, 1 announced)

VPN Label: 1033
Nexthop: Self
MED: 2
Localpref: 100
AS path: I
. . . . . . . . . . . . . . . . . . . . . . . .

Juniper-M
show route receive-protocol bgp <neighbor>
Muestra las rutas que el Juniper M est recibiendo del neigbor indicado.
OTRAS FACILIDADES:
show route receive-protocol bgp <neighbor> table <nombre de la VRF> detail
ACELERAR PARA
xfgh0001@NMAMAGA1>show route receive-protocol bgp 193.152.56.10
SER MS LDERES
inet.0: 184372 destinations, 731776 routes (184360 active, 0 holddown, 12 hidden)
Restart Complete
* 194.224.169.184/29 193.152.56.10 100 64896 I

Juniper-M
show route receive-protocol bgp <neighbor>
show route receive-protocol bgp <neighbor> table <nombre de la VRF>
xfgh0001@NMAMAGA1>show route receive-protocol bgp 213.0.184.206

table VPNIP_VRF_INSTITUTO_NOTARIAL_264
ACELERAR PARA
SER MS LDERES
0.0.0.0/0 194.69.226.26 3 100 I
10.0.0.0/24 194.69.226.189 2 100 I
10.0.1.0/24 194.69.226.218 2 100 I
10.0.2.0/24 194.69.226.110 2 100 I
10.0.4.0/24 194.69.226.204 2 100 I
10.0.5.0/24 194.69.226.188 2 100 I
10.0.6.0/24 194.69.226.189 2 100 I
10.0.7.0/24 194.69.226.43 2 100 I
10.0.8.0/24 194.69.226.195 2 100 I
10.0.9.0/24 194.69.226.169 2 100 I
10.0.10.0/24 194.69.226.230 2 100 I
10.0.11.0/24 194.69.226.183 2 100 I
10.0.12.0/24 194.69.226.26 1 80 ?
10.0.13.0/24 194.69.226.229 2 100 I
10.0.14.0/24 194.69.226.27 2 100 I
10.0.15.0/24 194.69.226.27 2 100 I
10.0.16.0/24 194.69.226.27 2 100 I
10.0.17.0/24 194.69.226.159 2 100 I
10.0.18.0/24 194.69.226.27 2 100 I
10.0.19.0/24 194.69.226.183 2 100 I
10.0.20.0/24 194.69.226.27 2 100 I
10.0.21.0/24 194.69.226.200 2 100 I
10.0.22.0/24 194.69.226.222 2 100 I
10.0.23.0/24 194.69.226.195 2 100 I
10.0.26.0/24 194.69.226.204 2 100 I
10.0.27.0/24 194.69.226.199 2 100 I
10.0.28.0/24 194.69.226.199 2 100 I
10.0.30.0/24 194.69.226.232 2 100 I
. . . . . . . . . . . . . . . . . . . . . . . .

Juniper-M
show route advertised-protocol rip <neighbor>
show route advertised-protocol rip <neighbor> table <nombre de la VRF>
xfgh0001@NMABEST1> show route advertised-protocol rip

10.32.6.42 table VPNIP_VRF_INSTITUTO_NOTARIAL_264
ACELERAR PARA
SER MS LDERES xfgh0001@NMABEST1>
show route receive-protocol rip <neighbor>

show route receive-protocol rip <neighbor> table <nombre de la VRF>
xfgh0001@NMABEST1> show route receive-protocol rip 10.32.6.42

table VPNIP_VRF_INSTITUTO_NOTARIAL_264
+ = Active Route, - = Last Active, * = Both
10.0.3.0/24 *[RIP/100] 1w2d 11:44:11, metric 2, tag 0

> to 10.32.6.42 via at-0/0/0.152
172.18.180.208/32 *[RIP/100] 1w2d 11:44:11, metric 2, tag 0
> to 10.32.6.42 via at-0/0/0.152

Juniper-M
telnet routing-instance <nombre de la VRF> <dir. IP> bypass-
routing
Permite hacer un telnet a una direccin IP de un interfaz en una VRF en concreto.
OTRAS FACILIDADES:
ACELERAR PARA telnet routing-instance <nombre de la VRF> <dir. IP> interface <interfaz>
SER MS LDERES
xfgh0001@NMABEST1> telnet routing-instance
VPNIP_VRF_INSTITUTO_NOTARIAL_264 10.32.7.10 bypass-routing
Trying 10.32.7.10...
Connected to 10.32.7.10.
Escape character is '^]'.
C
***************************************************************
***************************************************************
** Esta usted accediendo a una maquina privada con **
** control de ataques exteriores. Si no esta autorizado **
** cierre inmediatamente su conexion. **
***************************************************************
** Telefonica Data Espanya **
***************************************************************
** CGP ANCERT **
** Clientes Estrategicos de Barcelona **
** Telefono: 935848305 **
***************************************************************
***************************************************************
User Access Verification
Username:

Juniper-M
ping routing-instance <nombre de la VRF> <dir. IP> bypass-
routing
Permite hacer un ping a una direccin IP de un interfaz en una VRF en concreto.
OTRAS FACILIDADES:
ping routing-instance <nombre de la VRF> <dir. IP> interface <interfaz>
ACELERAR PARA
SER MS LDERES xfgh0001@NMABEST1> ping routing-instance
VPNIP_VRF_INSTITUTO_NOTARIAL_264 10.32.7.10 bypass-routing
PING 10.32.7.10 (10.32.7.10): 56 data bytes
64 bytes from 10.32.7.10: icmp_seq=0 ttl=255 time=41.730 ms
^C
--- 10.32.7.10 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 40.452/47.425/72.759/12.674 ms
xfgh0001@NMABEST1> ping routing-instance VPNIP_VRF_

INSTITUTO_NOTARIAL_264 10.32.7.10 interface at-0/0/0.496
PING 10.32.7.10 (10.32.7.10): 56 data bytes
^C
--- 10.32.7.10 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max/stddev = 41.242/47.878/72.502/12.321 ms
Juniper-M
Comandos adicionales que se pueden usar utilizando el simbolo
pipeline ( | ).
Con el siguiente formato, cambiando el modificador obtendremos diferentes resultados:
- Show <comando> | modificador <palabra> o <frase>
Donde modificador puede ser:
ACELERAR PARA
SER MS LDERES Count: cuenta las coincidencias de esa palabra o frase sobre el comando ejecutado.
Display: muestra informacin adicional.
Except: mostrar todo lo que no coincida con la palabra o texto definido en el comando.
Find: busca la primera coincidencia y para la bsqueda. En ese momento dependiendo
de la tecla que se pulse cambiara la accin a desarrollar. Por ejemplo:
N: busca la siguiente coincidencia.
Barra espaciadora: pasa a la siguiente pagina de resultados del comando sin
atender al parmetro de busqueda.
Intro: siguiente lnea de los resultados del comando.
Match: solo muestra el texto que coincide con la palabra o frase indicada.
No-more: no hace paginacin en el resultado del comando.
Save: guarda la salida del texto en un archivo.

Juniper-M
xavm0005@re1-NMAMNOR1> show configuration | match ALCAMPO
descriptionA28581882_ALCAMPO_S_A_A282_VPNIP_131/52_N/A;
description A28581882_ALCAMPO_S_A_A282_VPNIP_194/61_N/A;
ACELERAR PARA
SER MS LDERES policy-statement VPNIP_ALCAMPO_S_A_A282_363_exp {
policy-statement VPNIP_ALCAMPO_S_A_A282_363_imp {
VPNIP_VRF_ALCAMPO_S_A_A282_363 {
vrf-import VPNIP_ALCAMPO_S_A_A282_363_imp;
vrf-export VPNIP_ALCAMPO_S_A_A282_363_exp;
description VPNIP_VRF_ALCAMPO_S_A_A282_363;

Juniper-M
Show firewall filter <nom_filtro>
Permite disponer de las estadsticas de trafico cursado a travs de un filtro aplicado en un
Interface, identificndolo por QoS.
xavm0005@re1-NMAMNOR1> show firewall filter VPNIP_QoS_Input_e3-

ACELERAR PARA
1/2/0.73-e3-1/2/0.73-i
SER MS LDERES
Filter: VPNIP_QoS_Input_e3-1/2/0.73-e3-1/2/0.73-i
Counters:
Name Bytes Packets
count_spoof-e3-1/2/0.73-i 0 0
tot_rec-e3-1/2/0.73-i 222537394 1790688
mm_rec-e3-1/2/0.73-i 17758225 314319
oro_rec-e3-1/2/0.73-i 14554544 103969
mm_cur-e3-1/2/0.73-i 17758225 314319
oro_cur-e3-1/2/0.73-i 14554544 103969
Policers:
Name Packets
VPNIP_RL_Input_Gestion_32k-VPNIP_Trafico_Gestion_In-e3-1/2/0.73-i 1
VPNIP_RL_Input_Multimedia_270k-VPNIP_Trafico_Multimedia_In-e3-1/2/0.73-i 0
VPNIP_RL_Input_Oro_128k-VPNIP_Trafico_Oro_In-e3-1/2/0.73-i 0


05 - Troubleshooting Juniper-M - VPN-IP (Modo de Compatibilidad) PDF

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

05 - Troubleshooting Juniper-M - VPN-IP (Modo de Compatibilidad) PDF

Transféré par

Droits d'auteur :

Formats disponibles

Comandos y Troubleshooting en

ACELERAR PARA SER

Telefnica Soluciones de Outsorcing

01 Configuracin del Servicio VPN-IP en Juniper M.

02 Comandos de Monitorizacin en Juniper M

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

ACELERAR PARA xavm0005@re1-NMAMNOR1> show configuration interfaces at-0/0/1.194

description atm-scheduler-map map_131_52;

vbr peak 896k sustained 896k burst 1; group 20;

Telefnica Soluciones de Outsorcing

at-0/0/0 Conexion con QMNOR1 8/3

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

xavm0005@re1-NMAMRRO1> show configuration firewall family inet filter

accounting-profile QOS_VPNIP; term filtra-protocolos {

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

02 Comandos de Monitorizacin en Juniper M

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

xavm0005@re0-NMAMDEL1> show interfaces terse

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1> show interfaces brief

Logical interface at-0/0/0.0

Logical interface at-0/0/0.1

Logical interface at-0/0/0.2

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1> show interfaces extensive at-0/0/0.10

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1> show route instance detail VPNIP_VRF_AMPER_

Telefnica Soluciones de Outsorcing

VPNIP_VRF_AMPER_S.A._A226_728.inet.0: 15 destinations, 51 routes (15 active, 0 holddown, 0 hidden)

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1> show route table VPNIP_VRF_AMPER_S.A._A226_

140.0.8.0/21 (4 entries, 1 announced)

Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Damped...

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1> show route advertising-protocol bgp

* 10.0.24.0/24 (1 entry, 1 announced)

* 10.0.25.0/24 (1 entry, 1 announced)

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

xfgh0001@NMAMAGA1>show route receive-protocol bgp 213.0.184.206

Telefnica Soluciones de Outsorcing

xfgh0001@NMABEST1> show route advertised-protocol rip

show route receive-protocol rip <neighbor>

xfgh0001@NMABEST1> show route receive-protocol rip 10.32.6.42

10.0.3.0/24 *[RIP/100] 1w2d 11:44:11, metric 2, tag 0

Telefnica Soluciones de Outsorcing

User Access Verification

Telefnica Soluciones de Outsorcing

xfgh0001@NMABEST1> ping routing-instance VPNIP_VRF_

Telefnica Soluciones de Outsorcing

Telefnica Soluciones de Outsorcing

xavm0005@re1-NMAMNOR1> show firewall filter VPNIP_QoS_Input_e3-