This shows you the differences between two versions of the page.
| network_stuff:juniper:mx [2021/05/27 20:31] – jotasandoku | network_stuff:juniper:mx [2023/11/02 14:38] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 14: | Line 14: | ||
| Example eBGP config | Example eBGP config | ||
| + | set routing-options autonomous-system 65000 | ||
| set protocols bgp group PEER type external | set protocols bgp group PEER type external | ||
| set protocols bgp group PEER local-address x.x.x.x | set protocols bgp group PEER local-address x.x.x.x | ||
| Line 658: | Line 659: | ||
| IPSEC VPN (MS-MIC MS-MPC):\\ | IPSEC VPN (MS-MIC MS-MPC):\\ | ||
| - | * [[https:// | + | * [[https:// |
| - | * [[https:// | + | * [[https:// |
| - | * [[https:// | + | * [[https:// |
| * [[https:// | * [[https:// | ||
| Line 672: | Line 673: | ||
| set firewall family inet filter vpn-filter term admin-services-esp then accept | set firewall family inet filter vpn-filter term admin-services-esp then accept | ||
| - | TROUBLESHOOT:\\ | + | TROUBLESHOOTING IPSEC:\\ |
| show services ipsec-vpn ipsec security-associations detail | show services ipsec-vpn ipsec security-associations detail | ||
| show services ipsec-vpn ipsec statistics | show services ipsec-vpn ipsec statistics | ||
| show services ipsec-vpn ipsec security-associations ipsec_ss_ms_5_2_01 # # like 'sho crypto ipsec ' # like 'sho crypto ipsec sa' | show services ipsec-vpn ipsec security-associations ipsec_ss_ms_5_2_01 # # like 'sho crypto ipsec ' # like 'sho crypto ipsec sa' | ||
| + | |||
| + | |||
| + | ---- | ||
| + | |||
| + | __TROUBLESHOOTING NETFLOW (troubleshooting jflow)__ | ||
| + | \\ | ||
| + | Jflow and Netflow are essentially [[https:// | ||
| + | \\ | ||
| + | cflowd (netflow from alcatel), netstream (netflow from huawei) | ||
| + | |||
| + | show services accounting flow inline-jflow fpc-slot 0 | ||
| + | show services accounting flow inline-jflow fpc-slot 3 | ||
| + | show services accounting flow inline-jflow fpc-slot 7 | ||
| + | From Shell | ||
| + | start shell pfe network fpc0 | ||
| + | debug cos halp show ifds local-only | ||
| + | debug cos halp all_stats non-zero | ||
| + | exit | ||
| + | start shell pfe network fpc3 | ||
| + | debug cos halp show ifds local-only | ||
| + | debug cos halp all_stats non-zero | ||
| + | exit | ||
| + | start shell pfe network fpc7 | ||
| + | debug cos halp show ifds local-only | ||
| + | debug cos halp all_stats non-zero | ||
| + | exit | ||
| + | From mspmand | ||
| + | start shell | ||
| + | vty -s mspmand fpc0 | ||
| + | plugin jflow show statistics | ||
| + | quit | ||
| + | vty -s mspmand fpc3 | ||
| + | plugin jflow show statistics | ||
| + | quit | ||
| + | vty -s mspmand fpc7 | ||
| + | plugin jflow show statistics | ||
| + | quit | ||
| + | |||
| | | ||