Tuesday, May 17, 2016

Junos Commands

 JUNOS 13.2X51-D30.4 built 2014-11-27 11:53:55 UTC

show arp | match 10.166.6.10
show arp | match 10.166

 show ethernet-switching table | match 00:09
 show ethernet-switching table | match 00:09:18:06:1b:b7

connect to member VC number 1
request session member 1

list poe controller

show poe controller


Add interface to POE
 from master VC

configure
Entering configuration mode
Users currently editing the configuration:
  admin terminal p0 (pid 11354) on since 2016-05-10 18:01:24 SGT, idle 17:27:19
      {master:1}[edit]

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-6/0/25

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-5/0/35

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-6/0/30

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-6/0/9

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-5/0/46

{master:1}[edit]
admin@sb01-2-fd1a# set poe interface ge-6/0/1

{master:1}[edit]
admin@sb01-2-fd1a# show | compare
[edit poe]
    interface ge-6/0/1 { ... }
+   interface ge-6/0/25;
+   interface ge-5/0/35;
+   interface ge-6/0/30;
+   interface ge-6/0/9;
+   interface ge-5/0/46;

commit


Add interface to storm control

configure


#set interfaces interface-range NCE-WAPs unit 0 family ethernet-switching storm-control edge

set interfaces interface-range student unit 0 family ethernet-switching storm-control edge

set interfaces interface-range ICT-Staff  unit 0 family ethernet-switching storm-control edge

set interfaces interface-range NCE-Biometrics  unit 0 family ethernet-switching storm-control edge

set interfaces interface-range NCE-VC-Room-Mgmt  unit 0 family ethernet-switching storm-control edge
set interfaces interface-range NCE-Door-Access  unit 0 family ethernet-switching storm-control edge
set interfaces interface-range NCE-Sec-Cams-1  unit 0 family ethernet-switching storm-control edge
set interfaces interface-range NCE-Apple-TV  unit 0 family ethernet-switching storm-control edge
set interfaces interface-range staff  unit 0 family ethernet-switching storm-control edge
set forwarding-options storm-control-profiles edge all bandwidth-percentage 15

commit

Enable FTP

 configure 


 set system services ftp 

set commit

run show interfaces me0




admin@sb01-2-fd1a> show log messages.0.gz | match dhcp

May 16 08:55:54 2016  sb01-2-fd1a init: dhcp-service (PID 1292) terminate signal 15 sent
May 16 08:55:59 2016  sb01-2-fd1a init: dhcp-service (PID 1292) exited with status=0 Normal Exit
May 16 08:59:49 2016  sb01-2-fd1a jdhcpd: Notifying producers about new consumer dhcpToAutoconf
May 16 08:59:49 2016  sb01-2-fd1a jdhcpd: LIBJSNMP_SA_IPC_REG_ROWS: ns_subagent_register_mibs: registering 9 rows
May 16 09:00:04 2016  sb01-2-fd1a jdhcpd: LIBJSNMP_NS_LOG_WARNING: WARNING: AgentX master agent failed to respond to ping.  Attempting to re-register.
May 16 10:36:55 2016  sb01-2-fd1a /kernel: GENCFG: op 59 (JDHCPD blob) failed; err 1 (Unknown)
May 16 13:41:10 2016  sb01-2-fd1a init: dhcp-service (PID 1292) Signal 15 sent
May 16 13:41:11 2016  sb01-2-fd1a init: dhcp-service (PID 1292) terminate signal 15 sent
May 16 13:41:15 2016  sb01-2-fd1a init: dhcp-service (PID 1292) exited with status=0 Normal Exit
May 16 13:45:05 2016  sb01-2-fd1a jdhcpd: LIBJSNMP_SA_IPC_REG_ROWS: ns_subagent_register_mibs: registering 9 rows
May 16 13:45:35 2016  sb01-2-fd1a jdhcpd: LIBJSNMP_NS_LOG_WARNING: WARNING: AgentX master agent failed to respond to ping.  Attempting to re-register.


admin@sb01-2-fd1a> show system core-dumps

fpc0:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc1:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
-rw-rw----  1 root  field    5953295 May 5  15:08 /var/tmp/jdhcpd.core-tarball.0.tgz
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory
total files: 1

fpc2:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc3:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc4:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc5:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc6:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory

fpc7:
--------------------------------------------------------------------------
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory

/var/crash/kernel.*: No such file or directory


admin@sb01-2-fd1a> file archive source /var/log/ destination /var/tmp/mastermay17.tgz
/usr/bin/tar: Removing leading `/' from member names

{master:5}
admin@sb01-2-fd1a> show virtual-chassis

Preprovisioned Virtual Chassis
Virtual Chassis ID: 1013.cf56.891a
Virtual Chassis Mode: Enabled
                                                Mstr           Mixed Route Neighbor List
Member ID  Status   Serial No    Model          prio  Role      Mode  Mode ID  Interface
0 (FPC 0)  Prsnt    PD3715010100 ex4300-48p       0   Linecard     N  VC   7  vcp-255/1/1
                                                                           1  vcp-255/1/0
1 (FPC 1)  Prsnt    PD3715010174 ex4300-48p     129   Backup       N  VC   2  vcp-255/1/0
                                                                           0  vcp-255/1/1
2 (FPC 2)  Prsnt    PD3715010421 ex4300-48p       0   Linecard     N  VC   3  vcp-255/1/0
                                                                           1  vcp-255/1/1
3 (FPC 3)  Prsnt    PD3715010414 ex4300-48p       0   Linecard     N  VC   2  vcp-255/1/1
                                                                           4  vcp-255/1/0
4 (FPC 4)  Prsnt    PD3715010285 ex4300-48p       0   Linecard     N  VC   5  vcp-255/1/0
                                                                           3  vcp-255/1/1
5 (FPC 5)  Prsnt    PD3715010124 ex4300-48p     129   Master*      N  VC   4  vcp-255/1/1
                                                                           6  vcp-255/1/0
6 (FPC 6)  Prsnt    PD3715010153 ex4300-48p       0   Linecard     N  VC   7  vcp-255/1/0
                                                                           5  vcp-255/1/1
7 (FPC 7)  Prsnt    PD3715010225 ex4300-48p       0   Linecard     N  VC   6  vcp-255/1/1
                                                                           0  vcp-255/1/0

{master:5}
admin@sb01-2-fd1a> show poe controller
Controller  Maximum   Power         Guard    Management   Status        Lldp
index       power     consumption   band                                Priority
   0        925.00W   9.02W           0W     Class        AT_MODE       Disabled
   1        925.00W   0.00W           0W     Class        AT_MODE       Disabled
   2        925.00W   17.44W          0W     Class        AT_MODE       Disabled
   3        925.00W   30.38W          0W     Class        AT_MODE       Disabled
   4        925.00W   90.36W          0W     Class        AT_MODE       Disabled
   5        925.00W   47.04W          0W     Class        AT_MODE       Disabled
   6        925.00W   19.80W          0W     Class        AT_MODE       Disabled
   7        925.00W   0.00W           0W     Class        AT_MODE       Disabled

{master:5}
admin@sb01-2-fd1a> start shell
% vty fpc5


BSD platform (QorIQ P202H processor, 0MB memory, 0KB flash)

(vty)# show poe system status
CPU Status 1 = 0x0 ; normal.
CPU Status 2 = 0x2
Factory default = 0x0 ; factory default param not set.
GIE = 0x0 ; GIE Normal.
Private Label = 0x1
User Byte = 0xff
Device Fail Status = (0xc0), all devices OK.
Temperature disconnect = (0x0), all devices temperatures ok.
Temperature Alarm = (0x0), all devices temperatures under limit.
Interrupt Register = 0x4


(vty)# exit




% cli
{master:5}
admin@sb01-2-fd1a>

{master:5}
admin@sb01-2-fd1a>

{master:5}
admin@sb01-2-fd1a> request session member 1

--- JUNOS 14.1X53-D35.3 built 2016-03-01 02:32:19 UTC

***************************************************************
*     Only authorised persons are allowed access to this      *
*       Equipment. Any unauthorized use is prohibited.        *
*                                                             *
*                                                             *
*                                                             *
***************************************************************
;warning: This chassis is operating in a non-master role as part of a virtual-chassis (VC) system.
warning: Use of interactive commands should be limited to debugging and VC Port operations.
warning: Full CLI access is provided by the Virtual Chassis Master (VC-M) chassis.
warning: The VC-M can be identified through the show virtual-chassis status command executed at this console.
warning: Please logout and log into the VC-M to use CLI.
{backup:1}
admin@sb01-2-fd1a> start shell
% cd /var/tmp
% ls
263_new.s19                     gres-tp                         juniper.conf+.gz                member0may4.tgz.tar             member4may4.tgz.tar             rtsdb
backup-afterswitch.tgz          install                         master-afterswitch.tgz          member2may4.tgz.tar             member6may4.tgz.tar             sampled.pkts
backupmay4.tgz.tar              jdhcpd.core-tarball.0.tgz       mastermay4.tgz.tar              member3may4.tgz.tar             pics                            vi.recover


% cli
warning: This chassis is operating in a non-master role as part of a virtual-chassis (VC) system.
warning: Use of interactive commands should be limited to debugging and VC Port operations.
warning: Full CLI access is provided by the Virtual Chassis Master (VC-M) chassis.
warning: The VC-M can be identified through the show virtual-chassis status command executed at this console.
warning: Please logout and log into the VC-M to use CLI.
{backup:1}

Copy file from member 1 to master (fpc:5)
admin@sb01-2-fd1a> file copy fpc1:/var/tmp/jdhcpd.core-tarball.0.tgz fpc5:/var/tmp







Thursday, May 14, 2015

Replace switch.

                                                                                                                                                

Remove a Member Switch, Replace It with a Different Switch, and Reapply the 
Old Configuration

Login to Master Switch
admin@sd01-1-fd1a> configure
Entering configuration mode

{master:0}[edit]
admin@sd01-1-fd1a# set virtual-chassis preprovisioned

{master:0}[edit]
admin@sd01-1-fd1a# set virtual-chassis member 1 role line-card
{master:0}[edit]
admin@sd01-1-fd1a# set virtual-chassis member 1 serial-number PD0208233776

{master:0}[edit]
admin@sd01-1-fd1a# commit

  • Factory reset the member switch.
  • Re-connect the VCP cables




Juniper Switches

DHCP Relay

Login to core switch

show routing-instances NCE forwarding-options dhcp-relay



{master:1}[edit]
admin@scl0-0-vcf0# show routing-instances NCE forwarding-options dhcp-relay group clients
active-server-group bluecat;
interface irb.1024;
interface irb.1104;
interface irb.1902;
interface irb.2010;
interface irb.2040;



if vlan id is not listed the;

set routing-instances NCE forwarding-options dhcp-relagroup clients interface irb.2001

commit



{master:1}[edit]
admin@scl0-0-vcf0# show routing-instances NCE forwarding-options dhcp-relay group clients
active-server-group bluecat;
interface irb.1024;
interface irb.1104;
interface irb.1902;
interface irb.2001;
interface irb.2010;
interface irb.2040;



Create Vlan,logical VLAN interface, add members

admin@sb01-1fd1a# set vlans staff-vlan vlan-id 1050

admin@sb01-1fd1a# edit interface interface-range staff-vlan
admin@sb01-1fd1a# set unit 0 family ethernet-switching interface-mode access vlan members staff-vlan
admin@sb01-1fd1a# set member ge-0/1/1
admin@sb01-1fd1a# set member ge-0/0/[10-20]

admin@sb01-1fd1a# commit and-quit



Set Vlan speed 100m/  no-auto-negotiation 
edit
edit interfaces interface-range Door-Access
{master:1}[edit interfaces interface-range Door-Access]
set speed 100m
set link-mode full-duplex
set ether-options no-auto-negotiation

{master:1}[edit]
admin@sb01-1-fd1a# commit and-quit

Junos Upgrade/Installation Firmware Steps - using USB to copy software package to EX switch


Junos Installation Steps - using USB to copy software package to EX switch

  1. Format the USB Drive to FAT-32.

  2. Copy Junos software package you downloaded from the Juniper support site in Stage 1 to the USB.  (It is recommended to use dedicated USB drive and copy only the Junos software package to it.)

  3. On the EX switch, login into shell mode:
  4. {master:0}
    root@EX-4200> start shell
    root@EX-4200:RE:0%
  5. Mount the USB:
  6. root@EX-4200:RE:0% mount_msdosfs /dev/da1s1 /mnt 
  7. Copy the Junos software package from the USB to the /var/tmp directory of the EX switch:  
  8. root@EX-4200:RE:0% cd /mnt
    root@EX-4200:RE:0% ls
    root@EX-4200:RE:0% jinstall-ex-10.0S10.1-domestic-signed.tgz
    root@EX-4200:RE:0% cp jinstall-ex-10.0S10.1-domestic-signed.tgz /var/tmp
    Check if the Junos software package is copied to /var/tmp directory of the EX switch:
    root@EX-4200:RE:0% cd /var/tmp 
    root@EX-4200:RE:0% ls 
    root@EX-4200:RE:0% jinstall-ex-10.0S10.1-domestic-signed.tgz 


  9. Install Junos on the EX switch via the CLI (Command Line Interface) prompt:  

  10. For Standalone devices:
    root@EX-4200:RE:0% cli 
    root@EX-4200> request system software add /var/tmp/jinstall-ex-10.0S10.1-domestic-signed.tgz
    For 8200 Series:
    % cli
    > request system software add /var/tmp/jinstall-ex-10.0S10.1-domestic-signed.tgz re0 
    > request system software add /var/tmp/jinstall-ex-10.0S10.1-domestic-signed.tgz re1
    For Virtual Chassis:
    & cli
    > request system software add /var/tmp/jinstall-ex-10.0S10.1-domestic-signed.tgz member 1     
  11. Reboot the EX switch:

  12. For Standalone devices:
    root@EX-4200> request system reboot
    For Virtual Chassis:
    root@EX-4200> request system reboot all member
    For 8200 series when rebooting/upgrading Backup:
    run request system reboot other-routing-engine - 
    Reboot the system? [yes, no] (no) YES 

  13. After the reboot has completed, log in and verify that the new version of the software is properly installed:
  14. user@switch> show version
    If you encounter a problem during the installation, go to Stage 4 for troubleshooting upgrade failures.

Back-up and restore config files



  • Insert SANDISK in the usb port available on the rear panel of EX-series Ethernet switch.


  • Enter the shell as root:
user@switch> start shell user root
Password:
root@switch%
  • Mount SANDISK to /mnt
root@switch% mount_msdosfs /dev/da1s1 /mnt

  • Copy the most recent 4 configuration files under /config  to the USB disk:
root@switch% cp /config/*.gz /mnt
root@switch% ls /mnt
juniper.conf.1.gz       juniper.conf.3.gz       rescue.conf.gz
juniper.conf.2.gz       juniper.conf.gz

Note: The other configuration files are located in /config/db/config. Copy  the configuration files to the USB as required.
  • Unmount usb disk and then pull it out:

    user@switch% umount /mnt