精华推荐
企业级Golang运维架
高薪游戏开发架构师
特级Python爬虫全面
融汇技术精华 全面
云端运维大师自动化
打基础！探索前端开
|
3751| 31
|
Juniper英文学习书籍-Juniper Networks Warrior
[复制链接]
|
|
Juniper英文学习书籍-Juniper Networks Warrior Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi 1. An Enterprise VPN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Company Profile 2 Network 2 Traffic Flow 3 Need for Change 4 Class of Service 4 Design Trade-Offs 6 Implementation 10 Prototype Phase 10 Class of Service 18 Cut-Over 31 Main Site 32 Remote Site JAX 32 Remote Sites PHL and IAD 36 Backup Site BNA 37 Conclusions 37 2. Maintaining IDP Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 IDP8200 Background 40 Command-Line Interface 40 Web Management Interface 43 NSM Management 45 Support Tasks 47 Daily Tasks 47 IDP Policies 54 Rulebase Optimization 58 Other Tasks 59 Conclusion 64 3. Data Center Security Design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Discussion 68 Design Trade-Offs 72 Decision 73 Configuration 75 Take One Configuration: Clustering 76 Take 2 Configuration: Active/Active without Reths 87 Take 3 Configuration: Active/Active with One-Legged Reths 88 Testing 89 Summary 90 4. Layer 3 to Layer 2 Conversion. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 Problem 96 Q-in-Q Framing 99 VPLS Overhead 99 Solutions 104 RFC 4623 104 Configurations 106 Management 108 Protocols 118 Core Router Configurations 123 Distribution Switch Configurations 129 Distribution Router Configurations 131 Rate Control 133 CPE Switch Configuration 134 Conclusion 134 5. Internet Access Redress. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137 Objective 138 Design 140 Trade-offs 143 Configuration 147 Clustering 147 Security 150 Routing 159 Implementation 169 Lessons Learned 170 Conclusion 173 6. Service Provider Engagement. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Company Profile 175 Physical Network Topology 176 Services 178 Design Approach 178 Design Trade-Offs 181 Configurations 184 Boilerplate Configuration 184 MX Interfaces 187 EX Boilerplate and Interfaces 193 OSPF 199 MBGP 201 MPLS 202 RSVP 204 Layer 3 VPN 207 VPLS 214 OBM 217 Conclusion 219 7. A PCI-Compliant Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221 Introduction 221 Client Goals 222 Design Trade-Offs 224 Recommended Design 227 Switching Layer 227 Routing Layer 229 Firewall Layer 231 Virtualization 232 Configurations 233 EX4200 Configuration 233 MX240 Configuration 239 Firewall Configuration 245 Deployment 251 Initial Connectivity 251 The Maintenance Window 252 PCI Compliance 252 Summary 254 8. Facilitating Dark Fiber Replacement Using a QFX3500. . . . . . . . . . . . . . . . . . . . . . . . . . . 255 Existing Design 255 Introduction to Fibre Channel 257 Proposed Design 259 Concerns and Resolutions 259 Network Upgrade 261 Advantages and Benefits of the Solution 263 QFX3500 Fibre Channel Gateway Configurations 264 Management Configurations 264 Fibre Channel Gateway Interface Configuration 270 DCB Configuration 272 EX4500 Transit Switch Configurations 276 Interfaces and VLANs 276 Transit Switch DCB Configuration 279 Verification 282 Conclusions 285 9. MX Network Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 Plans and Topology 288 Phase 1 289 MX Configuration 291 Management Configuration 291 Routing Engine Protection 293 Policy Configurations 303 Protocol Configurations 311 Phase 2 315 Final Phases 320 Conclusion 320 10. A Survivable Internet Solution for a Fully Distributed Network. . . . . . . . . . . . . . . . . . . 321 Original Network Architecture 321 WAN Connectivity 322 Addressing 323 Internal Connectivity 323 Firewalls 324 Problem Definition 325 Proposed Solution 1 327 Solution 1 Advantages 329 Solution 1 Details 329 Solution 1 Issues 330 Proposed Solution 2: OSPF over Tunnels 330 Early Death of Solution 2 332 Configuration for Solution 2 332 Final Solution: Static Routes over Tunnels 333 Solution Advantages 334 Solution Issues 335 Email Server Address Resolution 340 Firewall Configurations 342 Conclusion 354 11. Internet Access Rebuild. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357 Requirements 358 Existing Network 358 Routing Protocols 359 Solution Options 363 Three-Layer Design 363 Two-Layer Design 365 One-Tier Design 367 Configurations 372 Deployment Scenario 372 Management Staging and Testing 373 Top-of-Rack Switch Testing 377 ISP Link Testing 383 Production Configuration 391 Cut-Over 396 Conclusion 397 Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 399
购买主题
已有 2 人购买
本主题需向作者支付 2 金币 才能浏览
| |
发表于 2014-1-8 12:28:31
| ||
发表于 2014-1-8 12:53:09
| ||
| ||
| ||
| ||
| ||
| ||
| ||