book

Juniper Networks® Reference Guide: JUNOS™ Routing, Configuration, and Architecture

Name: Juniper Networks® Reference Guide: JUNOS™ Routing, Configuration, and Architecture
ISBN: 0201775921

by Thomas M. Thomas II, Doris Pavlichek, Lawrence H. Dwyer III, Rajah Chowbay, Wayne W. Downing III, James Sonderegger

October 2002

Intermediate to advanced

880 pages

18h 48m

English

Addison-Wesley Professional

Read now

Unlock full access

Copyright
Preface
Intended AudienceOrganization of This BookHow to Use This Book
Acknowledgments
Thomas M. Thomas IIDoris PavlichekLarry DwyerRajah ChowbayWayne DowningJames Sonderegger
1. Juniper Networks from the Internet to the Classroom
1.1. The Growth of the Internet1.1.1. Use of the Internet—Commercial and Noncommercial1.1.2. Internet and Router Architectures1.1.2.1. Past Architectures1.1.2.2. IntServ1.1.2.3. Next-Generation Platforms and Architectures1.2. Juniper Networks M-Series1.2.1. Introducing the M40—September 16, 19981.2.2. Juniper Networks Market Segments1.2.2.1. Core1.2.2.2. Edge1.2.2.3. Mobile1.2.3. M-Series Models1.2.3.1. M401.2.3.2. M201.2.3.3. M1601.2.3.4. M5 and M101.2.3.5. M40e1.2.4. Beyond the M-Series1.2.4.1. G101.2.4.2. J20/AXB 250 06 GGSN1.3. Juniper Networks Education Services1.3.1. Course Descriptions1.3.1.1. Introduction to Juniper Networks Routers 11.3.1.2. Introduction to Juniper Networks Routers 21.3.1.3. Advanced MPLS1.3.1.4. Advanced VPN Workshop1.3.2. Juniper Networks Knowledge Centers1.3.3. Authorized Education Centers1.4. Technical Certification Program1.4.1. JNCIS1.4.2. JNCIE1.4.3. Studying for Juniper Networks Certification1.4.3.1. Certification Preparation Guide1.4.3.2. Recommended Reading1.4.3.3. Solutions and Technology Resource Center1.5. Chapter SummaryBibliography
2. Networking Primer
2.1. Overview of the OSI Model2.1.1. OSI Layers and Functions2.1.2. IP Suite2.1.3. Encapsulation at the Lower Layers2.1.4. Network DevicesBridges and Switches2.1.5. Routers2.2. Transmission Technologies2.2.1. LAN Protocols2.2.1.1. The Standard: Ethernet2.2.1.2. Fast Ethernet2.2.1.3. Gigabit Ethernet2.2.2. WAN Protocols2.2.2.1. WAN Technologies2.2.2.2. DS Hierarchy2.2.2.3. Frame Relay2.2.2.4. SONET/SDH2.2.2.5. Dense Wave Division Multiplexing2.2.2.6. HDLC2.2.2.7. PPP2.2.2.8. ATM2.2.2.9. Virtual Paths and Channels2.2.2.10. The Cell2.2.2.11. CCCs2.2.2.12. MPLS2.2.3. IP2.2.3.1. IP Addressing and Binary Conversion2.2.3.2. Network Masks and Subnet Masks2.2.3.3. Subnetting2.2.3.4. Aggregation2.2.3.5. The IP Packet2.2.3.6. TCP Versus UDP2.2.3.7. Multicast2.3. Chapter SummaryBibliography
3. Juniper Networks Router Architecture
3.1. Juniper Networks Router Models3.1.1. M5 and M103.1.2. M203.1.3. M403.1.4. M40e3.1.5. M1603.1.6. G103.2. Architecture Overview3.2.1. Routing Engine3.2.1.1. Function of the Routing Engine3.2.1.2. JUNOS3.2.1.3. Routing Engine SpecificationsThe M160 Miscellaneous Control Subsystem3.2.1.4. The Craft Interface3.2.1.5. Redundancy and Maintenance Options3.2.2. Packet Forwarding Engine (PFE)3.2.2.1. Design and OperationPFE ProcessesASICsPacket Flow3.2.2.2. Model Differences in Control BoardsM5 and M10 FEBM20 SSBM40 System Control BoardM160 Switching and Forwarding Module3.2.3. PFE Clock Generator3.3. Management and Traffic Interfaces3.4. Cooling Systems3.4.1. M5 and M103.4.2. M203.4.3. M403.4.4. M1603.5. Router Power-up and Boot Process3.5.1. Configuring the Router3.6. JUNOS Software Upgrade Procedure3.6.1. Downloading the Software3.6.2. Backing Up the System3.6.3. Copying the Package(s) to the Router3.6.4. Adding the Package(s)3.6.5. Finishing the Upgrade3.7. JUNOScript3.8. Chapter SummaryBibliography
4. The Command Line Interface
4.1. Operational Mode4.2. Entering and Exiting Operational Mode4.3. Operational-Mode Commands4.4. set CLI Command4.4.1. set CLI complete-on-space4.4.2. set CLI idle-timeout4.4.3. set CLI prompt4.4.4. set CLI restart-on-upgrade4.4.5. set CLI screen-length and screen-width4.4.6. set CLI terminal4.4.7. set date4.5. Navigating in Operational Mode4.6. Interpreting CLI Messages4.7. Controlling CLI Output on the Screen4.7.1. Displaying Output4.7.2. Filtering Output4.7.2.1. count4.7.2.2. display4.7.2.3. except4.7.2.4. find and match4.7.2.5. hold4.7.2.6. save4.7.2.7. trim4.7.3. Searching the Output4.8. Viewing the CLI Command History4.9. Monitoring Users4.10. Getting Help in the CLI4.11. Configuration Mode4.12. Entering and Exiting Configuration Mode4.13. Configuration-Mode Hierarchy4.14. Understanding the Configuration-Mode Banner4.15. Navigating in Configuration Mode4.16. Understanding How and Where the Configuration Files Are Stored4.17. Returning to a Previous Configuration4.18. Executing Operational-Mode Commands in Configuration Mode4.19. Displaying Your Configuration4.20. Saving, Modifying, and Loading Configuration Files4.20.1. Saving Configuration Files4.20.1.1. save4.20.2. Modifying Configuration Files4.20.2.1. annotate4.20.2.2. copy4.20.2.3. delete4.20.2.4. rename4.20.2.5. insert4.20.2.6. deactivate and activate4.20.3. Loading Configuration Files from the CLI4.20.3.1. load merge4.20.3.2. load replace4.20.3.3. load override4.20.3.4. Loading Configurations from the Terminal4.21. Creating Configuration Groups4.22. Getting Help in Configuration Mode4.23. Chapter SummaryBibliographyCase Study: User and Access ConfigurationSample Basic Configuration for Router Chicago

5. Router Access and System Administration
5.1. Communicating with the Router5.1.1. Changing the Settings for the Console Port5.1.2. Configuring the Auxiliary Port5.1.3. Configuring the Management Ethernet5.1.3.1. Physical Characteristics5.1.3.2. Logical Characteristics5.2. System Administration5.2.1. User Account Setup5.2.1.1. Defining a Login Class5.2.1.2. Assigning an idle-timeout Interval5.2.1.3. Assigning Access-Privilege Levels5.2.1.4. Setting allow-commands and deny-commands5.2.2. Defining User Accounts5.2.2.1. Specifying a Login Class5.2.2.2. Setting the User Identifier5.2.2.3. Setting Local Authentication5.2.3. Password Recovery5.2.4. Authentication Methods5.2.4.1. RADIUS5.2.4.2. Juniper Networks–Specific RADIUS5.2.5. TACACS+5.2.5.1. Shared User Accounts5.2.6. Dynamic Host Configuration Protocol Relay5.2.7. System Services5.2.7.1. Telnet5.2.7.2. SSH5.2.7.3. FTP5.2.7.4. SCP5.2.8. System Logging5.2.9. Other Administrative Responsibilities5.2.9.1. Setting a Host Name and Domain5.2.9.2. Setting Location5.2.9.3. Setting Time and Date5.2.9.4. Using the NTP5.2.9.5. Designating a DNS Server5.3. Chapter SummaryBibliographyCase Study: A Typical Base Configuration
6. Router Management, Firewall Filters, and Accounting
6.1. SNMP Overview6.1.1. Evolution of SNMP6.1.2. Agents6.1.3. Network-Management Systems6.1.4. MIB6.1.4.1. SNMP OID Example6.1.4.2. Juniper Networks–Specific MIBs6.2. Configuring SNMP on a Juniper Networks Router6.2.1. Basic SNMP Configuration6.2.2. Configuring SNMP Trap Groups6.2.3. Controlling SNMP Access6.2.4. Configuring the Interfaces on Which SNMP Requests Can Be Accepted6.2.5. Verifying Operation and Troubleshooting SNMP6.2.5.1. Trace Options6.2.5.2. SNMP Statistics6.3. Introduction to Firewall Filters6.3.1. Firewall-Filter Terms and Processing6.3.1.1. How Firewall Filters Are Evaluated6.3.2. Configuration Guidelines6.3.2.1. Naming the Filter6.3.2.2. Naming Each Term in the Filter6.3.2.3. Determining Match Conditions6.3.2.4. Assigning the Action Statement6.3.2.5. Applying Firewall Filters to Interfaces6.3.3. IP-Packet Bit Matching6.3.3.1. Protocol Configuration Guidelines6.3.3.2. Configuration Example: Blocking Telnet and SSH6.3.3.3. Configuration Example: Blocking TFTP and Logging Occurrences6.3.4. Additional Applications of Firewall Filters6.3.4.1. Policing and Rate Limiting6.3.4.2. Selectively Forward Packets6.3.5. Verifying Filter Operation6.3.5.1. Configuring Interface-Specific Counters6.4. Accounting6.5. Chapter SummaryReferencesBibliographyCase Study: Securing a Juniper Networks Router
7. Interface Configuration
7.1. Introduction to Interfaces7.1.1. Logical Units7.1.2. Interface Naming and Numbering7.1.3. Position Numbering7.1.3.1. FPC and PIC Numbering for the M40 and M1607.1.3.2. FPC and PIC Numbering for the M5, M10, and M207.1.4. Interface Configuration Basics7.1.4.1. Logical Units Configuration7.1.4.2. Network Addressing7.2. Ethernet, Fast Ethernet, and GigE Interfaces7.2.1. Physical Interface Configuration7.2.2. VLAN and Logical Interface Configuration7.2.3. MAC Address Filtering7.2.4. VRRP7.2.4.1. Balancing Bandwidth7.2.4.2. VRRP Configuration7.3. SONET/SDH Interfaces7.3.1. Configuring Framing on Optical Interfaces7.3.2. PPP Configuration7.3.3. Frame Relay Configuration7.3.4. APS7.4. ATM Interfaces7.4.1. Physical Interface Configuration7.4.2. Logical Interface Configuration7.4.3. ATM QoS Configuration7.5. Serial Interfaces7.5.1. Physical T3 Configuration7.5.2. T3 Logical Configuration7.5.3. T3 Channelized Configuration7.5.4. BERT Configuration7.6. Aggregated Interfaces7.7. Tunnel Interfaces7.8. Loopback7.9. Chapter SummaryBibliography
8. IGP Routing Protocol Configuration
8.1. Routing Protocol Primer8.1.1. Router Metrics8.1.2. Distance Vector Versus Link State8.1.3. Juniper Networks Router Configuration8.2. RIP8.2.1. Theory of Operation8.2.2. RIP Metrics8.2.3. Loop Avoidance8.2.4. RIPv1 Versus RIPv28.2.5. RIP Design Principles8.2.6. Basic RIP Configuration8.2.7. RIP Authentication8.2.8. RIP Parameters8.2.8.1. Manipulating RIP Metrics8.3. Checking RIP Operation8.4. OSPF8.4.1. Theory of Operation8.4.2. OSPF Metrics8.4.3. OSPF Areas8.4.4. Router Types8.4.5. OSPF Database8.4.6. Adjacency8.4.7. LSAs8.4.8. OSPF Network Types8.4.9. Router Elections8.4.10. Stub Areas8.4.10.1. Stub and Totally Stubby Areas8.4.10.2. Not-So-Stubby Areas8.4.11. Equal Cost Paths8.4.12. Virtual Links8.4.13. OSPF Single-Area Configuration8.4.14. OSPF Multiple-Area Configuration8.4.15. OSPF Stub Configuration8.4.16. OSPF NSSA Configuration8.4.17. OSPF Virtual-Link Configuration8.4.18. OSPF Authentication and Configuration8.4.19. Configuring OSPF Options8.4.19.1. area-range8.4.19.2. Changing Cost8.4.19.3. Changing OSPF Priority8.4.20. Checking OSPF Operation8.4.21. Design Principles8.5. IS-IS8.5.1. IS-IS Overview8.5.2. ISO CLNP and Addressing8.5.3. DRs8.5.4. IS-IS PDUs8.5.5. Default Stub Areas8.5.6. IS-IS Route Leaking8.5.7. IS-IS Single-Area Configuration8.5.8. IS-IS Multiple-Area Configuration8.5.9. IS-IS Authentication Configuration8.5.10. Checking IS-IS Operation8.6. Chapter SummaryBibliography
9. BGP Routing Configuration
9.1. BGP Overview9.1.1. External BGP and Internal BGP Conceptual Model9.1.2. Autonomous System Numbers9.1.3. Topologies: Transit and Homing9.1.3.1. Transit and Nontransit AS9.1.3.2. Homing9.1.4. Routing9.1.4.1. RIB9.1.4.2. Routing Tables9.1.4.3. Route Preference9.1.4.4. BGP Route Selection9.1.4.5. Default Routes9.2. The Finite State Machine9.2.1. Transport9.2.2. Events9.2.3. Connection States9.2.3.1. Idle9.2.3.2. Connect9.2.3.3. Active9.2.3.4. OpenSent9.2.3.5. OpenConfirm9.2.3.6. Established9.2.4. Message Types and Formats9.2.4.1. OPEN Message9.2.4.2. UPDATE Message9.2.4.3. NOTIFICATION Message9.2.4.4. KEEPALIVE Message9.2.5. Attributes9.2.5.1. ORIGIN9.2.5.2. AS_PATH9.2.5.3. NEXT_HOP9.2.5.4. MED9.2.5.5. LOCAL_PREF9.2.5.6. ATOMIC_AGGREGATE9.2.5.7. AGGREGATOR9.2.5.8. COMMUNITY9.2.5.9. ORIGINATOR_ID9.2.5.10. CLUSTER_LIST9.3. JUNOS BGP Minimum Configuration9.3.1. Minimum Configuration Parameters9.3.2. IBGP Minimum Configuration9.3.2.1. IBGP Between Physical Interfaces9.3.2.2. IBGP Between Loopback Interfaces9.3.3. EBGP Minimum Configuration9.3.3.1. EBGP Between Physical Interfaces9.3.3.2. RID9.4. Configuration Parameters9.4.1. Configuration Hierarchy9.4.2. Configuration Statements9.4.2.1. advertise-inactive9.4.2.2. allow9.4.2.3. as-override9.4.2.4. authentication-key9.4.2.5. bgp9.4.2.6. cluster9.4.2.7. damping9.4.2.8. description9.4.2.9. disable9.4.2.10. export9.4.2.11. family9.4.2.12. group9.4.2.13. hold-time9.4.2.14. import9.4.2.15. keep9.4.2.16. local-address9.4.2.17. local-as9.4.2.18. local-preference9.4.2.19. log-updown9.4.2.20. metric-out9.4.2.21. multihop9.4.2.22. multipath9.4.2.23. neighbor9.4.2.24. no-aggregator-id9.4.2.25. no-client-reflect9.4.2.26. out-delay9.4.2.27. passive9.4.2.28. path-selection9.4.2.29. peer-as9.4.2.30. preference9.4.2.31. prefix-limit9.4.2.32. protocol9.4.2.33. remove-private9.4.2.34. trace-options9.4.2.35. type9.5. Scaling BGP9.5.1. Route Reflectors9.5.2. Confederations9.6. Chapter SummaryBibliography
10. BGP Routing Case Studies
10.1. Case Study 1: Path Selection10.1.1. Path Selection with RID10.1.2. Path Selection with AS_PATH10.1.3. Path Selection EBGP over IBGP10.1.4. AS_PATH Prepend10.2. Case Study 2: Advanced Path Selection10.2.1. LOCAL_PREF and IGP Metric10.2.2. NEXT_HOP10.2.3. Nexthop-Self10.2.4. MED10.3. Case Study 3: Load Balancing—Multipath and Multihop10.3.1. EBGP Multipath10.3.2. IBGP Multipath10.3.3. EBGP Multihop10.4. Case Study 4: Scaling BGP10.4.1. Route Reflector10.4.2. Confederation10.4.3. Aggregation10.5. Chapter Summary
11. Defining and Implementing Routing Policies
11.1. Routing Policy Overview11.2. RPSL11.3. Structure of JUNOS Routing Policy Language11.3.1. Default Routing Policy Actions11.3.2. Policy-Chain Terms11.3.3. Match Conditions11.3.4. Match Actions11.4. DIET Policies11.4.1. Designing Policies11.4.2. Implementing Policies11.4.3. Executing Policies11.4.4. Testing Policies11.5. Route Redistribution and Filtering11.5.1. Route Redistribution11.5.2. Route Filtering11.6. Route Flap Damping11.6.1. Half-life Decay11.6.2. Damping Policies11.7. Regular Expressions and Communities11.7.1. Regular Expressions for AS Paths11.7.2. Community Regular Expressions11.8. Chapter SummaryBibliography
12. MPLS and Traffic Engineering
12.1. Traffic-Engineering Problems12.2. Traffic-Engineering Solutions12.2.1. Routed IP12.2.2. Switched Transport12.2.3. MPLS12.3. MPLS Operation and Design Principles12.3.1. Functional Overview12.3.1.1. Labels12.3.1.2. LSPs12.3.1.3. LSRs12.3.2. Establishing an LSP12.3.2.1. LDP12.3.2.2. RSVP12.3.2.3. CSPF12.3.3. Prefix Mapping and Routing Table Integration12.3.4. Traffic Protection12.4. MPLS Configuration12.5. Static LSP Configuration12.6. RSVP-Based Dynamic-LSP Configuration12.7. LDP-Based Dynamic-LSP Configuration12.8. CCCs12.9. Chapter SummaryBibliographyCase Study 1: Prefix Mapping and BGPCase Study 2: Using Constraints in RSVP LSPsCase Study 3: CCC Configuration
13. Virtual Private Networks
13.1. Overview of VPNs13.2. VPN Implementation and Topologies13.3. VPN Physical Topologies13.4. Dedicated Extranet VPN13.5. Centralized Extranet VPN13.6. Layer 3 VPNs13.7. Route Distinguishers13.8. Forwarding Tables13.9. Configuring BGP MPLS VPNs13.10. Activating RSVP Signaling Options13.11. Activating LDP Signaling Options13.12. Configuring an IGP13.12.1. IS-IS13.12.2. OSPF13.12.3. Static Routes13.13. Configuring M-BGP on the PE Routers13.14. Configuring the VRF for the VPN13.14.1. VPN Policy13.15. PE-CE Configuration13.15.1. OSPF13.15.2. BGP13.15.3. Static Routes13.16. Chapter SummaryBibliographyCase Study 1: Full-Mesh VPN ConfigurationPE Router ChicagoPE Router New YorkP Router SeattleCE Router RomeCE Router BerlinCase Study 2: Hub-and-Spoke VPN ConfigurationPE Hub Router ChicagoPE Spoke Router RomePE Spoke Router New YorkCE Hub Router SeattleCE Spoke Router SingaporeCE Spoke Router Berlin
14. Multicast Protocols
14.1. Multicast Backbone14.1.1. Benefits of Multicasting14.1.2. JUNOS Multicast Implementations14.2. Multicast Characteristics14.2.1. Multicast Addresses14.2.2. Multicast Functional Overview14.2.2.1. Hosts and Groups14.2.2.2. Receiving IP Datagrams14.2.2.3. Distribution Trees14.2.2.4. TTL14.3. IGMP14.3.1. IGMP Operational Overview14.3.2. Configuring IGMP14.3.3. Verifying an IGMP Configuration14.4. Multicast Routing14.4.1. Shared and Source Trees14.4.2. Dense- and Sparse-Mode Routing Techniques14.4.2.1. Routing with JUNOS and Multicast14.5. Dense-Mode Multicast Routing Protocols14.5.1. DVMRP14.5.1.1. DVMRP Operational Overview14.5.1.2. Configuring DVMRP14.5.1.3. Verifying a DVMRP Configuration14.5.2. PIM Routing Protocol14.5.2.1. PIM-DMPIM-DM Operational OverviewConfiguring PIM-DMVerifying a PIM-DM Configuration14.5.2.2. PIM-SMBootstrap RouterConfiguring PIM-SMVerifying a PIM-SM Configuration14.5.3. Interdomain Multicast Routing14.5.3.1. MSDPConfiguring MSDP14.5.3.2. MBGPConfiguring MBGP14.6. Chapter SummaryBibliography
15. Troubleshooting Juniper Networks Routers
15.1. Introduction to Troubleshooting15.2. Juniper Networks Troubleshooting Model15.2.1. Identify the Symptoms15.2.2. Isolate Possible Causes15.2.3. Take Action to Diagnose the Problem Correctly15.2.4. Evaluate the Solution15.3. Trouble Indicators15.3.1. LEDs15.3.2. SNMP Traps15.4. Troubleshooting the Chassis15.4.1. Environmental Monitoring15.4.1.1. Remote Craft Interface Monitoring on the M40, M40e, and M160 Routers15.4.1.2. Chassis Alarms15.4.2. Power-Supply Monitoring15.4.3. Control Board Monitoring15.4.3.1. M5 and M10 Control Board15.4.3.2. M20 Control Board15.4.3.3. M40 Control Board15.4.3.4. M160 Control Board15.5. Monitoring Interfaces15.5.1. Static Monitoring15.5.2. Real-time Monitoring15.6. Troubleshooting Routing Protocols with the traceoptions Command15.6.1. Viewing traceoptions Output15.6.2. Enabling Global traceoptions15.6.3. Using traceoptions with RIP15.6.4. Using traceoptions with OSPF15.6.5. Using traceoptions with IS-IS15.6.6. Using traceoptions with BGP15.6.7. Troubleshooting Commands for MPLS and VPNs15.6.8. Troubleshooting Commands for Multicast Protocols15.6.8.1. DVMRP15.6.8.2. MSDP15.6.8.3. SAP/SDP15.6.8.4. IGMP15.6.8.5. PIM15.7. Working with JTAC15.8. Chapter SummaryBibliography
Acronyms
About the Authors
A. Practice JNCIS Questions

Content preview from Juniper Networks® Reference Guide: JUNOS™ Routing, Configuration, and Architecture

Chapter 13. Virtual Private Networks

The demand for VPNs is growing each day. VPNs today give customers many different options for connectivity between multiple sites across a shared infrastructure. Today's VPNs also serve to provide more reliable, scalable, and cost-effective ways for service providers to offer services to customers, utilizing their existing IP infrastructures. This chapter describes the different design models and network topologies used when implementing VPNs. In addition, it will cover some of the different VPN applications and business cases for their use. After allowing the reader to become familiar with this technology, case studies will be used to shift gears and focus primarily on the implementation and configuration ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

CCNP and CCIE Enterprise Core & CCNP Enterprise Advanced Routing Portable Command Guide: All ENCOR (350-401) and ENARSI (300-410) Commands in One Compact, Portable Resource

Scott Empson, Patrick Gargano

Publisher Resources

ISBN: 0201775921Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Juniper Networks® Reference Guide: JUNOS™ Routing, Configuration, and Architecture

by Thomas M. Thomas II, Doris Pavlichek, Lawrence H. Dwyer III, Rajah Chowbay, Wayne W. Downing III, James Sonderegger

Chapter 13. Virtual Private Networks

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.