Network Management Administration Guide for - Juniper Networks

490 Pages·2014·4.7 MB·English

by  Juniper Networks

Junos® OS
Network Management and Monitoring
Guide
Published
2022-12-15
ii
Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, California 94089
USA
408-745-2000
www.juniper.net
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc.
in the United States and other countries. All other trademarks, service marks, registered marks, or registered service
marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right
to change, modify, transfer, or otherwise revise this publication without notice.
Junos® OS Network Management and Monitoring Guide
Copyright © 2022 Juniper Networks, Inc. All rights reserved.
The information in this document is current as of the date on the title page.
YEAR 2000 NOTICE
Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related
limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036.
END USER LICENSE AGREEMENT
The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use
with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License
Agreement ("EULA") posted at https://support.juniper.net/support/eula/. By downloading, installing or using such
software, you agree to the terms and conditions of that EULA.
iii
Table of Contents
About This Guide | lx
1 Overview
Network Management Overview | 2
Network Management | 2
Benefits of using the CLI to Manage the Network | 2
Understanding Device Management Functions in Junos OS | 3
Understanding Device and Network Management Features | 5
Understanding Tracing and Logging Operations | 10
Junos Space Support for Network Management | 12
Monitoring Overview | 15
Diagnostic Tools Overview | 16
2 Operation, Administration, and Management Features
Ethernet OAM and Connectivity Fault Management for Routers | 21
Introduction to OAM Connectivity Fault Management (CFM) | 21
Ethernet OAM Connectivity Fault Management | 21
IEEE 802.1ag OAM Connectivity Fault Management Overview | 23
Configuring Connectivity Fault Management (CFM) | 29
Creating a Maintenance Domain | 30
Configuring Maintenance Intermediate Points (MIPs) | 31
Configuring Maintenance Association Intermediate Points in ACX Series | 33
Creating a Maintenance Association | 37
Continuity Check Protocol Parameters Overview | 37
Configuring Continuity Check Protocol Parameters for Fault Detection | 39
Configuring a MEP to Generate and Respond to CFM Protocol Messages | 40
Configuring a Maintenance Association End Point (MEP) | 40
Configuring a remote Maintenance Association End Point (MEP) | 42
Configuring MEP Interfaces to Support Ethernet Frame Delay Measurements | 44
Configuring Service Protection for VPWS over MPLS Using the MEP Interface | 45
Configuring Linktrace Protocol in CFM | 51
Configuring Rate Limiting of Ethernet OAM Messages | 51
iv
Configuring Ethernet Local Management Interface | 54
Ethernet Local Management Interface Overview | 54
Configuring the Ethernet Local Management Interface | 57
Example E-LMI Configuration | 59
Configuring a CFM Action Profile to Specify CFM Actions for CFM Events | 65
CFM Action Profile to Bring Down a Group of Logical Interfaces Overview | 66
Configuring a CFM Action Profile to Bring Down a Group of Logical Interfaces | 67
Enabling Enhanced Connectivity Fault Management Mode | 71
Configuring M120 and MX Series Routers for CCC Encapsulated Packets | 73
IEEE 802.1ag CFM OAM Support for CCC Encapsulated Packets Overview | 73
CFM Features Supported on Layer 2 VPN Circuits | 74
Configuring CFM for CCC Encapsulated Packets | 74
Configuring Connectivity Fault Management for Interoperability During Unified In-Service
Software Upgrades | 75
Configuring Unified ISSU for 802.1ag CFM | 76
Junos OS Support for Performance Monitoring Compliant with Technical Specification MEF 36 | 80
Damping CFM performance Monitoring Traps and Notifications to Prevent Congestion of The
NMS | 81
Example: Configuring Ethernet CFM on Physical Interfaces | 82
Requirements | 82
Overview | 82
Configuration | 83
Example: Configuring Ethernet CFM on Bridge Connections | 85
Example: Configuring Ethernet CFM over VPLS | 90
CFM Action Profile Asynchronous Notification | 100
CFM Monitoring between CE and PE Devices | 101
CFM Action Profile Asynchronous Notification | 102
Configuring a CFM Action Profile to Asyncronus Notification | 103
Understanding CFM Monitoring between CE and PE Devices | 105
Configuring Port Status TLV and Interface Status TLV | 107
TLVs Overview | 107
Various TLVs for CFM PDUs | 108
Support for Additional Optional TLVs | 110
MAC Status Defects | 118
Configuring Remote MEP Action Profile Support | 120
Monitoring a Remote MEP Action Profile | 121
v
Configuring Chassis ID TLV | 122
Configuring MAC Flush Message Processing in CET Mode | 123
Example: Configuring an Action Profile Based on Connection Protection TLVs | 126
Requirements | 126
Overview and Topology | 127
Configuration | 128
Configuring Continuity Check Messages | 130
Configuring Faster Protection Switching for Point-to-Point Network Topologies | 130
Configuring Faster Convergence for Dual-Homed Multipoint-to-Multipoint Network
Topologies | 132
Configuring a Primary VLAN ID for Increased Flexibility | 133
Configuring a Remote Maintenance Association to Accept a Different ID | 134
Link Fault Management for Routers | 136
Introduction to OAM Link Fault Management (LFM) | 136
IEEE 802.3ah OAM Link-Fault Management Overview | 136
Understanding Ethernet OAM Link Fault Management for ACX Series Routers | 137
Configuring Ethernet 802.3ah OAM | 139
Configuring Link Fault Management | 141
Configuring Link Discovery | 142
Configuring the OAM PDU Interval | 142
Configuring the OAM PDU Threshold | 143
Configuring Threshold Values for Local Fault Events on an Interface | 143
Disabling the Sending of Link Event TLVs | 144
Example: Configuring IEEE 802.3ah OAM Support on an Interface | 144
Example: Configuring IEEE 802.3ah OAM Support for an Interface on ACX Series | 145
Requirements | 145
Overview and Topology | 146
Configuring IEEE 802.3ah OAM on an ACX Series Router | 146
Example: Configuring Ethernet LFM Between Provider Edge and Customer Edge | 149
Example: Configuring Ethernet LFM for CCC | 150
Example: Configuring Ethernet LFM for Aggregated Ethernet | 152
Configuring an OAM Action Profile | 155
Specifying the Actions to Be Taken for Link-Fault Management Events | 156
Monitoring the Loss of Link Adjacency | 157
vi
Monitoring Protocol Status | 157
Configuring Threshold Values for Fault Events in an Action Profile | 158
Applying an Action Profile | 158
Remote Fault Detection for Link Fault Management | 159
Detecting Remote Faults | 159
Enabling Dying Gasp Functionality | 160
Remote Loopback for Link Fault Management | 162
Setting a Remote Interface into Loopback Mode | 162
Enabling Remote Loopback Support on the Local Interface | 163
Enabling Nonstop Routing for Ethernet Link Fault Management on Backup Routers | 163
Example: Configuring Ethernet LFM with Loopback Support | 168
Ethernet Service OAM (ITU-TY.1731) for Routers | 171
ITU-T Y.1731 Ethernet Service OAM Overview | 171
Ethernet Frame Delay Measurements Overview | 172
Ethernet Frame Loss Measurement Overview | 179
Service-Level Agreement Measurement | 180
On-Demand Mode for SLA Measurement | 181
Proactive Mode for SLA Measurement | 181
Ethernet Failure Notification Protocol Overview | 183
Ethernet Synthetic Loss Measurement Overview | 184
Scenarios for Configuration of ETH-SLM | 185
Format of ETH-SLM Messages | 186
Transmission of ETH-SLM Messages | 188
Configuring Ethernet Frame Delay Measurement Sessions | 191
Guidelines for Configuring Routers to Support an ETH-DM Session | 192
Guidelines for Starting an ETH-DM Session | 193
Guidelines for Managing ETH-DM Statistics and ETH-DM Frame Counts | 196
Configuring Routers to Support an ETH-DM Session | 201
Configuring MEP Interfaces | 201
Ensuring That Distributed ppm Is Not Disabled | 202
Enabling the Hardware-Assisted Timestamping Option | 205
Configuring the Server-Side Processing Option | 205
Triggering an Ethernet Frame Delay Measurements Session | 206
vii
Starting an ETH-DM Session | 208
Using the monitor ethernet delay-measurement Command | 208
Starting a One-Way ETH-DM Session | 209
Starting a Two-Way ETH-DM Session | 210
Example: Configuring One-Way Ethernet Frame Delay Measurements with Single-Tagged
Interfaces | 211
Example: Configuring Two-Way Ethernet Frame Delay Measurements with Single-Tagged
Interfaces | 217
Managing Continuity Measurement Statistics | 223
Displaying Continuity Measurement Statistics | 223
Clearing Continuity Measurement Statistics | 224
Viewing Ethernet Frame Delay Measurements Statistics | 225
Managing ETH-DM Statistics and ETH-DM Frame Counts | 226
Displaying ETH-DM Statistics Only | 227
Displaying ETH-DM Statistics and Frame Counts | 228
Displaying ETH-DM Frame Counts for MEPs by Enclosing CFM Entity | 229
Displaying ETH-DM Frame Counts for MEPs by Interface or Domain Level | 230
Clearing ETH-DM Statistics and Frame Counts | 231
Configuring Ethernet Frame Loss Measurement | 233
Configuring Statistical Frame Loss Measurement for VPLS Connections | 233
Managing ETH-LM Statistics | 234
Displaying ETH-LM Statistics | 234
Clearing ETH-LM Statistics | 236
Example: Measuring Ethernet Frame Loss for Single-Tagged LMM/LMR PDUs | 237
Requirements | 237
Overview and Topology | 237
Configuration | 238
Verification | 251
Example: Measuring Ethernet Frame Loss for Dual-Tagged LMM/LMR PDUs | 253
Requirements | 254
Overview and Topology | 254
Configuration | 255
Verification | 268
Configuring an Iterator Profile | 270
Configuring an Iterator Profile | 271
viii
Verifying the Configuration of an Iterator Profile | 274
Displaying the Configuration of an Iterator Profile for Two-way Delay Measurement | 275
Displaying the Configuration of an Iterator Profile for Loss Measurement | 276
Displaying the Configuration of a Remote MEP with an Iterator Profile | 277
Disabling an Iterator Profile | 278
Managing Iterator Statistics | 279
Displaying Iterator Statistics | 279
Clearing Iterator Statistics | 286
Configuring a Remote MEP with an Iterator Profile | 287
Configuring Ethernet Synthetic Loss Measurements | 289
Guidelines for Configuring ETH-SLM | 289
Starting a Proactive ETH-SLM Session | 291
Configuring MEP Interfaces | 291
Configuring an Iterator Profile for ETH-SLM | 292
Associating the Iterator Profile with MEPs for ETH-SLM | 294
Starting an On-Demand ETH-SLM Session | 296
Managing ETH-SLM Statistics and ETH-SLM Frame Counts | 297
Displaying ETH-SLM Statistics Only | 297
Displaying ETH-SLM Statistics and Frame Counts | 298
Displaying ETH-SLM Frame Counts for MEPs by Enclosing CFM Entity | 300
Displaying ETH-SLM Frame Counts for MEPs by Interface or Domain Level | 301
Clearing ETH-SLM Statistics and Frame Counts | 302
Clearing Iterator Statistics | 303
Troubleshooting Failures with ETH-SLM | 304
Ethernet Alarm Indication | 306
Ethernet Alarm Indication Signal (ETH-AIS) Function Overview | 306
Ethernet Alarm Indication Signal Overview | 311
Configuring ETH-AIS on a CFM MEP | 312
Configuring an Action Profile | 313
Configuring an Action to Be Taken When an AIS Alarm Is Detected | 315
Attaching the Action Profile to a CFM MEP | 316
Configuring Alarm Indication Signal on ACX Series Routers | 318
Inline Transmission Mode | 321
Enabling Inline Transmission of Continuity Check Messages for Maximum Scaling | 321
ix
Enabling Inline Transmission of Link Fault Management Keepalives for Maximum Scaling | 322
Enabling Inline Mode Of Performance Monitoring To Achieve Maximum Scaling | 326
Supported Inline CCM and Inline PM Scaling Values | 329
Ethernet OAM Connectivity Fault Management for Switches | 332
Ethernet OAM and CFM for Switches | 332
Understanding Ethernet OAM Connectivity Fault Management for Switches | 332
Configuring Ethernet OAM Connectivity Fault Management (CLI Procedure) | 335
Creating the Maintenance Domain | 336
Configuring the Maintenance Domain MIP Half Function | 337
Creating a Maintenance Association | 337
Configuring the Continuity Check Protocol | 338
Configuring a Maintenance Association End Point | 339
Configuring a Connectivity Fault Management Action Profile | 340
Configuring the Linktrace Protocol | 340
Example: Configuring Ethernet OAM Connectivity Fault Management on EX Series Switches | 341
Requirements | 342
Overview and Topology | 342
Configuring Ethernet OAM Connectivity Fault Management on Switch 1 | 342
Configuring Ethernet OAM Connectivity Fault Management on Switch 2 | 344
Verification | 347
Ethernet OAM Link Fault Management for Switches | 349
OAM Link Fault Management | 349
Understanding Ethernet OAM Link Fault Management | 349
Configuring Ethernet OAM Link Fault Management | 351
Example: Configuring Ethernet OAM Link Fault Management | 354
Requirements | 355
Overview and Topology | 355
Configuring Ethernet OAM Link Fault Management on Switch 1 | 355
Configuring Ethernet OAM Link Fault Management on Switch 2 | 357
Verification | 359
Ethernet Frame Delay | 361
Ethernet Frame Delay | 361
Understanding Ethernet Frame Delay Measurements on Switches | 362
x
Configuring MEP Interfaces on Switches to Support Ethernet Frame Delay Measurements (CLI
Procedure) | 364
Configuring One-Way Ethernet Frame Delay Measurements on Switches (CLI Procedure) | 365
Configuring an Iterator Profile on a Switch (CLI Procedure) | 365
Triggering an Ethernet Frame Delay Measurement Session on a Switch | 367
Configuring Two-Way Ethernet Frame Delay Measurements on Switches (CLI Procedure) | 367
Ethernet OAM for Security Devices | 369
Configuring Ethernet OAM Connectivity Fault Management | 369
Understanding Ethernet OAM Connectivity Fault Management | 370
Configuring the Continuity Check Protocol on a Security Device | 372
Configuring the Link Trace Protocol on a Security Device | 374
Creating a Maintenance Domain on a Security Device | 375
Configuring a Maintenance Domain MIP Half Function on a Security Device | 376
Creating a Maintenance Association on a Security Device | 377
Configuring a Maintenance Association End Point on a Security Device | 377
Example: Configuring Ethernet OAM Connectivity Fault Management on a Security Device | 379
Requirements | 379
Overview | 380
Configuring Ethernet OAM Connectivity Fault Management | 381
Verification | 389
Configuring Ethernet OAM Link Fault Management | 394
Understanding Ethernet OAM Link Fault Management for SRX Series Services Gateways | 395
Example: Configuring Ethernet OAM Link Fault Management on a Security Device | 397
Requirements | 397
Overview | 398
Configuration | 399
Verification | 402
Example: Configuring Remote Loopback Mode on VDSL Interfaces on a Security Device | 403
Requirements | 404
Overview | 404
Configuration for Scenario 1 | 405
Configuration for Scenario 2 | 407
Verification | 408
3 Uplink Failure Detection