Author name: Damian

In the post on logical systems, I provided three examples. In this post, we are going to walk through in detail how to configure the third example. It consists of two pairs of logical systems, one pair using OSPF and the other using BGP. This walkthrough is being done on a vMX that has a

I think that Juniper logical systems are fantastic. They are a great way to study for certifications. In this post, we’re going to look at what they are, how to connect them together, and how to configure and work with them. Table of Contents What Is A Logical System Logical systems are a way of

When working with a Junos device that has a factory default configuration, you will sometimes see the following error message when trying to commit changes: This means no root password has been set. You can set one with the command below: Note that the password will be encrypted in the configuration file. The plain-text-password specifies

The Junos ‘annotate’ command is a handy way of placing comments into the configuration file. I haven’t seen it widely used in production networks. In non-production environments, it’s a helpful way to identify what project or which engineer has put test config onto the lab equipment. For example, if I’m testing some new feature or

For quite some time, I struggled with the question of how to connect multiple logical systems together on the same broadcast domain or subnet. Typically logical systems are connected to each other using logical tunnel (lt-) interfaces. These are point-to-point connections with only two endpoints. I always ended up with something that looked like the

When authenticating CLI users, the authentication-order statement controls how Junos checks the user credentials that are supplied. This configuration statement is sometimes misunderstood and doesn’t always behave as you might expect. Junos can authenticate users using (local) accounts and passwords on the device, RADIUS, TACACS+, or LDAPS. The authentication-order statement tells the device in which

Configuring Junos RADIUS Authentication – The Quick Answer The shortest answer to configuring RADIUS authentication is to do the following: This can be achieved with the below commands, replacing <variable> with appropriate values. A word of warning, once RADIUS authentication is enabled, all CLI access to the device will use it. This includes both SSH

The error “Can’t assign requested address” indicates that the device could not source traffic from the address that was specified.  This is usually caused by forgetting to specify the relevant routing instance or logical system, or by making a typo in the source address. Another cause can be trying to source traffic from an interface