#1 CD Ripper v1.72.36 serial key or number

Drive-by Compromise AppleScript .bash_profile and .bashrc Access Token Manipulation Access Token Manipulation Account Manipulation Account Discovery AppleScript Audio Capture Commonly Used Port Automated Exfiltration Data Destruction Exploit Public-Facing Application CMSTP Accessibility Features Accessibility Features Binary Padding Bash History Application Window Discovery Application Deployment Software Automated Collection Communication Through Removable Media Data Compressed Data Encrypted for Impact External Remote Services Command-Line Interface Account Manipulation AppCert DLLs BITS Jobs Brute Force Browser Bookmark Discovery Distributed Component Object Model Clipboard Data Connection Proxy Data Encrypted Defacement Hardware Additions Compiled HTML File AppCert DLLs AppInit DLLs Bypass User Account Control Credential Dumping Domain Trust Discovery Exploitation of Remote Services Data from Information Repositories Custom Command and Control Protocol Data Transfer Size Limits Disk Content Wipe Replication Through Removable Media Control Panel Items AppInit DLLs Application Shimming Clear Command History Credentials in Files File and Directory Discovery Logon Scripts Data from Local System Custom Cryptographic Protocol Exfiltration Over Alternative Protocol Disk Structure Wipe Spearphishing Attachment Dynamic Data Exchange Application Shimming Bypass User Account Control CMSTP Credentials in Registry Network Service Scanning Pass the Hash Data from Network Shared Drive Data Encoding Exfiltration Over Command and Control Channel Endpoint Denial of Service Spearphishing Link Execution through API Authentication Package DLL Search Order Hijacking Code Signing Exploitation for Credential Access Network Share Discovery Pass the Ticket Data from Removable Media Data Obfuscation Exfiltration Over Other Network Medium Firmware Corruption Spearphishing via Service Execution through Module Load BITS Jobs Dylib Hijacking Compile After Delivery Forced Authentication Network Sniffing Remote Desktop Protocol Data Staged Domain Fronting Exfiltration Over Physical Medium Inhibit System Recovery Supply Chain Compromise Exploitation for Client Execution Bootkit Exploitation for Privilege Escalation Compiled HTML File Hooking Password Policy Discovery Remote File Copy Email Collection Domain Generation Algorithms Scheduled Transfer Network Denial of Service Trusted Relationship Graphical User Interface Browser Extensions Extra Window Memory Injection Component Firmware Input Capture Peripheral Device Discovery Remote Services Input Capture Fallback Channels Resource Hijacking Valid Accounts InstallUtil Change Default File Association File System Permissions Weakness Component Object Model Hijacking Input Prompt Permission Groups Discovery Replication Through Removable Media Man in the Browser Multi-hop Proxy Runtime Data Manipulation Launchctl Component Firmware Hooking Control Panel Items Kerberoasting Process Discovery Shared Webroot Screen Capture Multi-Stage Channels Service Stop Local Job Scheduling Component Object Model Hijacking Image File Execution Options Injection DCShadow Keychain Query Registry SSH Hijacking Video Capture Multiband Communication Stored Data Manipulation LSASS Driver Create Account Launch Daemon Deobfuscate/Decode Files or Information LLMNR/NBT-NS Poisoning and Relay Remote System Discovery Taint Shared Content Multilayer Encryption Transmitted Data Manipulation Mshta DLL Search Order Hijacking New Service Disabling Security Tools Network Sniffing Security Software Discovery Third-party Software Port Knocking PowerShell Dylib Hijacking Path Interception DLL Search Order Hijacking Password Filter DLL System Information Discovery Windows Admin Shares Remote Access Tools Regsvcs/Regasm External Remote Services Plist Modification DLL Side-Loading Private Keys System Network Configuration Discovery Windows Remote Management Remote File Copy Regsvr32 File System Permissions Weakness Port Monitors Execution Guardrails Securityd Memory System Network Connections Discovery Standard Application Layer Protocol Rundll32 Hidden Files and Directories Process Injection Exploitation for Defense Evasion Two-Factor Authentication Interception System Owner/User Discovery Standard Cryptographic Protocol Scheduled Task Hooking Scheduled Task Extra Window Memory Injection System Service Discovery Standard Non-Application Layer Protocol Scripting Hypervisor Service Registry Permissions Weakness File Deletion System Time Discovery Uncommonly Used Port Service Execution Image File Execution Options Injection Setuid and Setgid File Permissions Modification Virtualization/Sandbox Evasion Web Service

Junos OS Basics Feature Guide for EX4600 Switches Modified: 2017-03-22 Copyright © 2017, Juniper Networks, Inc. Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089 USA 408-745-2000 www.juniper.net Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Junos OS Basics Feature Guide for EX4600 Switches Copyright © 2017, Juniper Networks, Inc. All rights reserved. The information in this document is current as of the date on the title page. YEAR 2000 NOTICE Juniper Networks hardware and software products are Year 2000 compliant. Junos OS has no known time-related limitations through the year 2038. However, the NTP application is known to have some difficulty in the year 2036. END USER LICENSE AGREEMENT The Juniper Networks product that is the subject of this technical documentation consists of (or is intended for use with) Juniper Networks software. Use of such software is subject to the terms and conditions of the End User License Agreement (“EULA”) posted at http://www.juniper.net/support/eula.html. By downloading, installing or using such software, you agree to the terms and conditions of that EULA. ii Copyright © 2017, Juniper Networks, Inc. Table of Contents About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Supported Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Using the Examples in This Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Merging a Full Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii Merging a Snippet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxii Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiii Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxv Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxv Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . xxv Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxvi Part 1 Autoinstallation Chapter 1 Understanding Autoinstallation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Understanding Autoinstallation of Configuration Files . . . . . . . . . . . . . . . . . . . . . . . 3 Typical Uses for Autoinstallation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Autoinstallation Configuration Files and IP Addresses . . . . . . . . . . . . . . . . . . . 4 Typical Autoinstallation Process on a New Switch . . . . . . . . . . . . . . . . . . . . . . 4 Configuring Autoinstallation of Configuration Files (CLI Procedure) . . . . . . . . . . . . 5 Upgrading Software by Using Automatic Software Download . . . . . . . . . . . . . . . . 7 Verifying Autoinstallation Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Verifying That Automatic Software Download Is Working Correctly . . . . . . . . . . . . 9 Part 2 Basic System Management Chapter 2 Understanding Basic System Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Compressing the Current Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Configuring a DNS Name Server for Resolving a Hostname into Addresses . . . . . 15 Configuring Console and Auxiliary Port Properties . . . . . . . . . . . . . . . . . . . . . . . . . 15 Configuring the Hostname of a Router or Switch by Using a Configuration Group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Configuring the Junos OS to Determine Conditions That Trigger Alarms on Different Interface Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Configuring Junos OS to Disable Protocol Redirect Messages on the Router or Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Configuring Junos OS to Disable the Reporting of IP Address and Timestamps in Ping Responses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Configuring Junos OS to Extend the Default Port Address Range . . . . . . . . . . . . . 19 Configuring the Junos OS to Select a Fixed Source Address for Locally Generated TCP/IP Packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Copyright © 2017, Juniper Networks, Inc. iii Junos OS Basics Feature Guide for EX4600 Switches Configuring System Alarms to Appear Automatically Upon Login . . . . . . . . . . . . 20 Configuring Time-Based User Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Configuring the Timeout Value for Idle Login Sessions . . . . . . . . . . . . . . . . . . . . . . 22 Including the Year or Millisecond in Timestamps . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Mapping the Hostname of the Switch to IP Addresses . . . . . . . . . . . . . . . . . . . . . 24 Modifying the Default Time Zone for a Router or Switch Running Junos OS . . . . . 24 Rebooting and Halting a Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Reaching a Domain Name System Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 Reverting to the Default Factory Configuration by Using the request system zeroize Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 Saving Core Files Generated by Junos OS Processes . . . . . . . . . . . . . . . . . . . . . . . 29 Specifying the Physical Location of the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Example: Configuring User Permissions with Access Privileges for Operational Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Updating the IANA Time Zone Database on Junos OS Devices . . . . . . . . . . . . . . . 41 Importing and Installing Time Zone Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Configuring a Custom Time Zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Viewing Core Files from Junos OS Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 Example: Configuring the Name of the Switch, IP Address, and System ID . . . . . 44 Part 3 Command Line Interface (CLI) Chapter 3 Understanding the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 CLI User Interface Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 CLI Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 CLI Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 CLI Command Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Configuring Login Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Format for Specifying Filenames and URLs in Junos OS CLI Commands . . . . . . . 50 Junos OS Operational Mode Commands That Combine Other Commands . . . . . 52 Overview of Junos OS CLI Operational Mode Commands . . . . . . . . . . . . . . . . . . . 52 CLI Command Categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Commonly Used Operational Mode Commands . . . . . . . . . . . . . . . . . . . . . . 54 Overview of Navigating the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 CLI Command Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 CLI Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Moving Among Hierarchy Levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Understanding the Brief, Detail, Extensive, and Terse Options of Junos OS Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Understanding Junos OS CLI Configuration Mode . . . . . . . . . . . . . . . . . . . . . . . . . 57 Configuration Mode Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Configuration Statements and Identifiers . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Configuration Statement Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 iv Copyright © 2017, Juniper Networks, Inc. Table of Contents Part 4 Dynamic Host Control Protocol (DHCP) Chapter 4 Understanding DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Understanding DHCP Services for Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 DHCP Client/Server Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Using DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 DHCP Relay Servers and DHCP Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Legacy DHCP and Extended DHCP for Server Versions . . . . . . . . . . . . . . . . . 69 Configuring DHCP on a Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 How DHCP Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Configuring a DHCP Client (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Configuring a DHCP Server on Switches (CLI Procedure) . . . . . . . . . . . . . . . . . . . 72 Configuring an Extended DHCP Server on a Switch . . . . . . . . . . . . . . . . . . . . . 72 Configuring a Legacy DHCP Server on a Switch (CLI Procedure) . . . . . . . . . . 73 Part 5 Internet Control Message Protocol (ICMP) Chapter 5 Understanding ICMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Configuring Junos OS to Disable the Reporting of IP Address and Timestamps in Ping Responses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 Configuring Junos OS to Disable the Routing Engine Response to Multicast Ping Packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Configuring the Junos OS ICMPv4 Rate Limit for ICMPv4 Routing Engine Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Part 6 In-Service Software Upgrade (ISSU) Chapter 6 Understanding ISSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 In-Service Software Upgrade (ISSU) System Requirements . . . . . . . . . . . . . . . . . 81 In-Service Software Upgrade (ISSU) Protocol and Process Support . . . . . . . 81 Understanding In-Service Software Upgrade (ISSU) . . . . . . . . . . . . . . . . . . . . . . 83 In-Service Software Upgrade Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Performing an In-Service Software Upgrade (ISSU) . . . . . . . . . . . . . . . . . . . . . . . 84 Preparing the Switch for Software Installation . . . . . . . . . . . . . . . . . . . . . . . . 84 Upgrading the Software Using ISSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Verifying a Unified ISSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Part 7 Licenses Chapter 7 Using Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Junos OS Feature Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Junos OS Feature License Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 Release-Tied License Keys and Upgrade Licenses on MX Series Routers . . . 92 Licensable Ports on MX5, MX10, and MX40 Routers . . . . . . . . . . . . . . . . . . . 93 Copyright © 2017, Juniper Networks, Inc. v Junos OS Basics Feature Guide for EX4600 Switches Port Activation on MX104 Routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 Generating License Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Adding New Licenses (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Installing a License Using a Configuration Statement . . . . . . . . . . . . . . . . . . . 97 Installing Licenses Using the CLI Directly . . . . . . . . . . . . . . . . . . . . . . . . . 98 Installing Licenses Using a Configuration File . . . . . . . . . . . . . . . . . . . . . 99 Installing a License Using an Operational Command . . . . . . . . . . . . . . . . . . 100 Adding a License to a Device with a Single Routing Engine . . . . . . . . . . 100 Adding a License to a Device with Dual Routing Engines . . . . . . . . . . . . 101 Deleting a License (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Using the Operational Command to Delete Licenses . . . . . . . . . . . . . . . . . . 102 Using a Configuration Command to Delete Licenses . . . . . . . . . . . . . . . . . . . 102 Saving License Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 Verifying Junos OS License Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 Displaying Installed Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104 Displaying License Usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Part 8 Login Classes Chapter 8 Understanding Login Classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109 Configuring Junos OS User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109 Configuring the Junos OS to Display a System Login Announcement . . . . . . . . . 110 Configuring Junos OS to Display a System Login Message . . . . . . . . . . . . . . . . . . 110 Part 9 Network Time Protocol (NTP) Chapter 9 Understanding NTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115 Understanding NTP Time Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115 Configuring NTP Authentication Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116 Configuring the NTP Time Server and Time Services . . . . . . . . . . . . . . . . . . . . . . . 117 Configuring the Switch to Operate in Client Mode . . . . . . . . . . . . . . . . . . . . . 117 Configuring the Router or Switch to Operate in Symmetric Active Mode . . . 118 Configuring the Router or Switch to Operate in Broadcast Mode . . . . . . . . . 118 Configuring the Router or Switch to Operate in Server Mode . . . . . . . . . . . . . 119 Configuring the Switch to Listen for Broadcast Messages Using NTP . . . . . . . . . 119 Configuring the Switch to Listen for Multicast Messages Using NTP . . . . . . . . . . 120 Setting the Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120 Synchronizing and Coordinating Time Distribution Using NTP . . . . . . . . . . . . . . . 121 Configuring NTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 Configuring the NTP Boot Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 Specifying a Source Address for an NTP Server . . . . . . . . . . . . . . . . . . . . . . . 122 Example: Configuring NTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123 Example: Configuring NTP as a Single Time Source for Router and Switch Clock Synchronization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 vi Copyright © 2017, Juniper Networks, Inc. Table of Contents Part 10 Non-Stop Software Upgrade (NSSU) Chapter 10 Understanding NSSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129 Understanding Nonstop Software Upgrade on a Virtual Chassis and Mixed Virtual Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129 Requirements for Performing an NSSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130 How an NSSU Works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131 Virtual Chassis and Mixed Virtual Chassis . . . . . . . . . . . . . . . . . . . . . . . . 131 NSSU Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 NSSU and Junos OS Release Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 Overview of NSSU Configuration and Operation . . . . . . . . . . . . . . . . . . . . . . 133 Upgrading Software on a Virtual Chassis and Mixed Virtual Chassis Using Nonstop Software Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 Preparing the Switch for Software Installation . . . . . . . . . . . . . . . . . . . . . . . 133 Upgrading the Software Using NSSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135 Part 11 Passwords Chapter 11 Understanding Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Configuring the Root Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Recovering the Root Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143 Example: Changing the Requirements for Junos OS Plain-Text Passwords . . . . 144 Part 12 RADIUS and TACACS+ System Accounting Chapter 12 Understanding RADIUS and TACACS+ System Accounting . . . . . . . . . . . . 149 Configuring RADIUS System Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149 Configuring Auditing of User Events on a RADIUS Server . . . . . . . . . . . . . . . 149 Specifying RADIUS Server Accounting and Auditing Events . . . . . . . . . . . . . 150 Configuring RADIUS Server Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150 Configuring TACACS+ System Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152 Specifying TACACS+ Auditing and Accounting Events . . . . . . . . . . . . . . . . . 152 Configuring TACACS+ Server Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Part 13 Recovery Installation Chapter 13 Understanding Recovery Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Creating an Emergency Boot Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Creating a Snapshot and Using It to Boot a Device . . . . . . . . . . . . . . . . . . . . . . . . 158 Creating a Snapshot on an External USB Flash Drive and Using It to Boot the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158 Performing a Recovery Installation Using an Emergency Boot Device . . . . . . . . . 160 Recovering from a Failed Software Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 Part 14 Routine Monitoring Chapter 14 Understanding Routine Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 Monitoring System Process Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 Monitoring System Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168 Copyright © 2017, Juniper Networks, Inc. vii Junos OS Basics Feature Guide for EX4600 Switches Monitoring Interface Status and Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169 Other Tools to Configure and Monitor Devices Running Junos OS . . . . . . . . . . . . 170 Part 15 Standard Software Installation and Upgrade Chapter 15 Understanding Standard Software Installation and Upgrade . . . . . . . . . . . 173 Junos OS Package Names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173 Software Installation Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 Creating an Emergency Boot Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 Upgrading Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Downloading Software Files with a Browser . . . . . . . . . . . . . . . . . . . . . . . . . 176 Accessing Software Downloaded to a Remote Location . . . . . . . . . . . . . . . . 177 Connecting to the Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177 Backing Up the Current Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . 177 Installing a Standard Software Package on QFX5100 and QFX5200 Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178 Installing a Standard Software Package on QFX10002 Switches . . . . . . . . . 179 Installing a Standard Software Package on QFX10008 and QFX10016 Switches . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181 Part 16 System Snapshot Chapter 16 Understanding System Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 Understanding System Snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 Creating a Snapshot and Using It to Boot a Device . . . . . . . . . . . . . . . . . . . . . . . 188 Creating a Snapshot on an External USB Flash Drive and Using It to Boot the Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 Part 17 Zero Touch Provisioning (ZTP) Chapter 17 Understanding ZTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193 Understanding Zero Touch Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193 Understanding Zero Touch Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193 Zero Touch Provisioning Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195 Zero Touch Provisioning Restart Process Triggers . . . . . . . . . . . . . . . . . . . . . 198 Configuring Zero Touch Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201 Monitoring Zero Touch Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207 Using the Console to Monitor Zero Touch Provisioning . . . . . . . . . . . . . . . . . 207 Using System Log Alerts to Monitor Zero Touch Provisioning . . . . . . . . . . . . 207 Using Error Messages to Monitor Zero Touch Provisioning . . . . . . . . . . . . . . 208 Using System Log Files to Monitor Zero Touch Provisioning . . . . . . . . . . . . . 208 Using the show dhcp client binding Command . . . . . . . . . . . . . . . . . . . . . . 208 Using the show dhcp client statistics Command . . . . . . . . . . . . . . . . . . . . . 209 Part 18 Configuration Statements and Operational Commands Chapter 18 Basic System Management Configuration Statements . . . . . . . . . . . . . . . . 213 arp (System) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215 auxiliary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216 checksum . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 viii Copyright © 2017, Juniper Networks, Inc. Table of Contents compress-configuration-files (System) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218 console (Physical Port) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219 default-address-selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220 domain-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221 domain-search . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 221 ethernet (Alarm) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 host-name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222 icmpv4-rate-limit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 223 internet-options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224 link-down . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225 location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226 login-alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 management-ethernet (Alarm) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 max-configurations-on-flash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 name-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 no-ping-record-route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 no-ping-time-stamp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 no-redirects (IPv4 Traffic) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230 optional . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231 ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231 retry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232 saved-core-context . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233 saved-core-files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233 source-port (Port Addresses) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234 static-host-mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235 system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236 time-format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241 time-zone . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242 traceoptions (Layer 2 Learning) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 244 uid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 use-imported-time-zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 Chapter 19 DHCP Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 client-identifier (DHCP Client) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 dhcp (DHCP Server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 248 lease-time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 retransmission-attempt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250 retransmission-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251 server-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 252 update-server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 253 vendor-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 254 Chapter 20 ICMP Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255 no-multicast-echo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255 Chapter 21 Login Classes Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257 access-end . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258 access-start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 258 allow-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 allow-configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260 Copyright © 2017, Juniper Networks, Inc. ix Junos OS Basics Feature Guide for EX4600 Switches allowed-days . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 260 announcement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 261 authentication (Login) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 262 class (Defining Login Classes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263 class (Assigning a Class to an Individual User) . . . . . . . . . . . . . . . . . . . . . . . . . . 264 deny-commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 deny-configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266 idle-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 267 load-key-file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268 login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 login-tip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270 message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270 user (Access) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 Chapter 22 NTP Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273 authentication-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274 boot-server (NTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 275 broadcast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 276 broadcast-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277 multicast-client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277 ntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 278 peer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279 server (NTP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280 source-address (NTP, RADIUS, System Logging, or TACACS+) . . . . . . . . . . . . . . 281 trusted-key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 282 Chapter 23 Password Configuration Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283 authentication (Login) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 284 change-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 285 format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286 maximum-length . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 287 minimum-changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288 minimum-length . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289 minimum-lower-cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290 minimum-numerics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291 minimum-punctuations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292 minimum-upper-cases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293 password (Login) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294 permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294 retry-options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 295 root-authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 297 ssh-dsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298 ssh-rsa . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 298 user (Access) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 299 Chapter 24 RADIUS and TACACS+ Accounting Configuration Statements . . . . . . . . . 301 accounting-port (RADIUS Server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 302 destination (Accounting) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 303 events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304 port (TACACS+ Server) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 304 x Copyright © 2017, Juniper Networks, Inc. Table of Contents radius (System) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 305 secret . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306 server (RADIUS Accounting) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306 server (TACACS+ Accounting) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307 single-connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 307 tacplus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 308 timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 309 Chapter 25 Autoinstallation Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311 show system autoinstallation status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 312 Chapter 26 Basic System Management Operational Commands . . . . . . . . . . . . . . . . . . 315 commit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317 clear log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 323 clear chassis display message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 324 clear system commit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 327 clear system reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 328 file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332 file archive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333 file checksum md5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 335 file checksum sha1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336 file checksum sha-256 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337 file compare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 338 file delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342 file list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343 file rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 345 file show . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347 load . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 349 ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 351 request chassis beacon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 355 request chassis fpc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357 request chassis pic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362 request chassis routing-engine master . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 367 request message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 372 request system configuration rescue delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 373 request system configuration rescue save . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374 request system halt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 375 request system logout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 381 request system power-off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 382 request system reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 387 request system storage cleanup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 390 request system zeroize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 400 restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 406 save . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417 Chapter 27 CLI Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419 show cli . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 420 show cli authorization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 422 show cli directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426 show cli history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427 Copyright © 2017, Juniper Networks, Inc. xi Junos OS Basics Feature Guide for EX4600 Switches Chapter 28 Guest VM Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 request app-engine file-copy (crash | log) from-jhost to-vjunos . . . . . . . . . . . . 430 show app-engine arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432 show app-engine bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 434 show app-engine crash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 436 show app-engine info . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438 show app-engine logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 441 show app-engine netstat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 443 show app-engine resource-usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445 show app-engine routing-instance compute-clusters . . . . . . . . . . . . . . . . . . . . . 452 show app-engine routing-instance virtual-machines . . . . . . . . . . . . . . . . . . . . . 454 show app-engine status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 456 show app-engine virtual-machine instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 show app-engine packages system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 462 show app-engine processes compute-cluster compute-node . . . . . . . . . . . . . . 464 Chapter 29 ISSU Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469 request system software in-service-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . 470 show chassis in-service-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483 Chapter 30 Licensing Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487 request system license add . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488 request system license delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489 request system license save . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 490 show system license . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491 Chapter 31 NSSU Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499 request system software nonstop-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500 show chassis nonstop-upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 510 Chapter 32 NTP Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 513 show ntp associations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514 show ntp status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516 Chapter 33 Routine Monitoring Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . 519 show chassis alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 521 show chassis beacon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536 show chassis environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 538 show chassis environment fpc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 603 show chassis environment pem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 630 show chassis environment routing-engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 639 show chassis fan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 645 show chassis firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 659 show chassis fpc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672 show chassis hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 714 show chassis lcd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 900 show chassis led . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 914 show chassis location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 924 show chassis mac-addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 928 show chassis pic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 934 show chassis routing-engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 957 xii Copyright © 2017, Juniper Networks, Inc. Table of Contents show chassis temperature-thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 983 show chassis zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1003 show host . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1009 show log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1010 show subscribers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1014 show system alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1035 show system audit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1038 show system boot-messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1046 show system buffers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1053 show system certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1060 show system commit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1062 show system configuration archival . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1065 show system configuration rescue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1066 show system connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1068 show system core-dumps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1085 show system directory-usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1098 show system processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1102 show system reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1131 show system resource-cleanup processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1134 show system services service-deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1136 show system software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1137 show system statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1145 show system storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1182 show system uptime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190 show system users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1195 show system virtual-memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1200 show version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1258 start shell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1272 test configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1274 traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1275 traceroute monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1279 Chapter 34 Standard Software Installation and Upgrade Operational Commands . . 1281 request system software add . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1282 request system software delete . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1293 request system software download . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1297 request system software rollback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1299 request system software validate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1304 rollback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1308 show system rollback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1309 Chapter 35 System Snapshot Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 1311 request system snapshot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1312 Copyright © 2017, Juniper Networks, Inc. xiii Junos OS Basics Feature Guide for EX4600 Switches xiv Copyright © 2017, Juniper Networks, Inc. List of Figures Part 2 Basic System Management Chapter 2 Understanding Basic System Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Figure 1: Configuring TACACS+ Server Authentication . . . . . . . . . . . . . . . . . . . . . . 33 Part 3 Command Line Interface (CLI) Chapter 3 Understanding the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Figure 2: Commands That Combine Other Commands . . . . . . . . . . . . . . . . . . . . . 52 Figure 3: CLI Command Hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Figure 4: Command Output Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 Figure 5: Configuration Mode Hierarchy of Statements . . . . . . . . . . . . . . . . . . . . . 63 Part 4 Dynamic Host Control Protocol (DHCP) Chapter 4 Understanding DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Figure 6: DHCP Client/Server Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Figure 7: DHCP Four-Step Transfer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Copyright © 2017, Juniper Networks, Inc. xv Junos OS Basics Feature Guide for EX4600 Switches xvi Copyright © 2017, Juniper Networks, Inc. List of Tables About the Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxi Table 1: Notice Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiii Table 2: Text and Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xxiii Part 3 Command Line Interface (CLI) Chapter 3 Understanding the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 Table 3: Commonly Used Operational Mode Commands . . . . . . . . . . . . . . . . . . . 54 Table 4: Summary of Configuration Mode Commands . . . . . . . . . . . . . . . . . . . . . 59 Table 5: Configuration Mode Top-Level Statements . . . . . . . . . . . . . . . . . . . . . . . . 61 Part 4 Dynamic Host Control Protocol (DHCP) Chapter 4 Understanding DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 Table 6: Legacy DHCP and Extended DHCP Server Hierarchy Levels . . . . . . . . . . 69 Table 7: DHCP Client Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Part 6 In-Service Software Upgrade (ISSU) Chapter 6 Understanding ISSU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Table 8: ISSU Protocol Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Part 7 Licenses Chapter 7 Using Licenses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Table 9: Upgrade Licenses for Enhancing Port Capacity . . . . . . . . . . . . . . . . . . . . 94 Table 10: Port Activation License Model for MX104 Routers . . . . . . . . . . . . . . . . . 95 Part 14 Routine Monitoring Chapter 14 Understanding Routine Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167 Table 11: Summary of System Process Information Output Fields . . . . . . . . . . . . 167 Table 12: Summary of Key System Properties Output Fields . . . . . . . . . . . . . . . . 168 Part 15 Standard Software Installation and Upgrade Chapter 15 Understanding Standard Software Installation and Upgrade . . . . . . . . . . . 173 Table 13: Caveats for Downgrading from Junos OS Release 15.1X53-D60 to Previous Software Releases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180 Table 14: Caveats for Downgrading from Junos OS Release 15.1X53-D60 to Previous Software Releases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182 Copyright © 2017, Juniper Networks, Inc. xvii Junos OS Basics Feature Guide for EX4600 Switches Part 18 Configuration Statements and Operational Commands Chapter 25 Autoinstallation Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 311 Table 15: show system autoinstallation status Output Fields . . . . . . . . . . . . . . . . 312 Chapter 26 Basic System Management Operational Commands . . . . . . . . . . . . . . . . . . 315 Table 16: request system storage cleanup Output Fields . . . . . . . . . . . . . . . . . . . 392 Chapter 27 CLI Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419 Table 17: show cli Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 420 Table 18: show cli authorization Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 422 Table 19: show cli directory Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 426 Table 20: show cli history Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 427 Chapter 28 Guest VM Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 429 Table 21: show app-engine arp Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . 432 Table 22: show app-engine bridge Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . 435 Table 23: show app-engine crash Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . 436 Table 24: show app-engine info Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 439 Table 25: show app-engine logs Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 441 Table 26: show app-engine netstat Output Fields . . . . . . . . . . . . . . . . . . . . . . . . 443 Table 27: show app-engine resource-usage Output Fields . . . . . . . . . . . . . . . . . 446 Table 28: show app-engine routing-instance compute-clusters Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 452 Table 29: show app-engine routing-instance virtual-machines Output Fields . . 454 Table 30: show app-engine status Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . 457 Table 31: show app-engine virtual-machine instance Output Fields . . . . . . . . . 459 Table 32: show app-engine packages system Info Output Fields . . . . . . . . . . . . 462 Table 33: show app-engine processes compute-cluster compute-node Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 464 Chapter 29 ISSU Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 469 Table 34: show chassis in-service-upgrade Output Fields . . . . . . . . . . . . . . . . . . 483 Chapter 30 Licensing Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 487 Table 35: show system license Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . 492 Chapter 31 NSSU Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 499 Table 36: show chassis nonstop-upgrade Output Fields . . . . . . . . . . . . . . . . . . . 510 Chapter 32 NTP Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 513 Table 37: show ntp associations Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 514 Table 38: show ntp status Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 516 Chapter 33 Routine Monitoring Operational Commands . . . . . . . . . . . . . . . . . . . . . . . . . 519 Table 39: show chassis alarms Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 528 Table 40: show chassis led Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 536 Table 41: show chassis environment Output Fields . . . . . . . . . . . . . . . . . . . . . . . 545 Table 42: show chassis environment fpc Output Fields . . . . . . . . . . . . . . . . . . . 606 Table 43: show chassis environment pem Output Fields . . . . . . . . . . . . . . . . . . . 632 Table 44: show chassis environment routing-engine Output Fields . . . . . . . . . . 641 Table 45: show chassis fan Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 647 xviii Copyright © 2017, Juniper Networks, Inc. List of Tables Table 46: show chassis firmware Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 662 Table 47: show chassis fpc Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681 Table 48: Routing Engines Displaying DIMM Information . . . . . . . . . . . . . . . . . . . 717 Table 49: show chassis hardware Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 722 Table 50: show chassis lcd Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 902 Table 51: show chassis led Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 915 Table 52: show chassis location Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 926 Table 53: show chassis mac-addresses Output Fields . . . . . . . . . . . . . . . . . . . . 930 Table 54: show chassis pic Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 938 Table 55: show chassis routing-engine Output Fields . . . . . . . . . . . . . . . . . . . . . 960 Table 56: show chassis temperature-thresholds Output Fields . . . . . . . . . . . . . 985 Table 57: show chassis zones Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1004 Table 58: show subscribers Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1017 Table 59: show system alarms Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 1036 Table 60: show system buffers Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 1056 Table 61: show system certificate Output Fields . . . . . . . . . . . . . . . . . . . . . . . . 1060 Table 62: show system commit Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . 1062 Table 63: show system connections Output Fields . . . . . . . . . . . . . . . . . . . . . . . 1071 Table 64: show system core-dumps Output Fields . . . . . . . . . . . . . . . . . . . . . . 1088 Table 65: show system directory-usage Output Fields . . . . . . . . . . . . . . . . . . . . 1100 Table 66: show system processes Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . 1110 Table 67: show system resource-cleanup processes Output Fields . . . . . . . . . . 1134 Table 68: show system services service-deployment Output Fields . . . . . . . . . 1136 Table 69: show system storage Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 1185 Table 70: show system uptime Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . 1192 Table 71: show system users Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1197 Table 72: show system virtual-memory Output Fields . . . . . . . . . . . . . . . . . . . . 1203 Table 73: traceroute Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1277 Table 74: traceroute monitor Output Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1280 Copyright © 2017, Juniper Networks, Inc. xix Junos OS Basics Feature Guide for EX4600 Switches xx Copyright © 2017, Juniper Networks, Inc. About the Documentation • Documentation and Release Notes on page xxi • Supported Platforms on page xxi • Using the Examples in This Manual on page xxi • Documentation Conventions on page xxiii • Documentation Feedback on page xxv • Requesting Technical Support on page xxv Documentation and Release Notes ® To obtain the most current version of all Juniper Networks technical documentation, see the product documentation page on the Juniper Networks website at http://www.juniper.net/techpubs/. If the information in the latest release notes differs from the information in the documentation, follow the product Release Notes. Juniper Networks Books publishes books by Juniper Networks engineers and subject matter experts. These books go beyond the technical documentation to explore the nuances of network architecture, deployment, and administration. The current list can be viewed at http://www.juniper.net/books. Supported Platforms For the features described in this document, the following platforms are supported: • EX Series Using the Examples in This Manual If you want to use the examples in this manual, you can use the load merge or the load merge relative command. These commands cause the software to merge the incoming configuration into the current candidate configuration. The example does not become active until you commit the candidate configuration. If the example configuration contains the top level of the hierarchy (or multiple hierarchies), the example is a full example. In this case, use the load merge command. Copyright © 2017, Juniper Networks, Inc. xxi Junos OS Basics Feature Guide for EX4600 Switches If the example configuration does not start at the top level of the hierarchy, the example is a snippet. In this case, use the load merge relative command. These procedures are described in the following sections. Merging a Full Example To merge a full example, follow these steps: 1. From the HTML or PDF version of the manual, copy a configuration example into a text file, save the file with a name, and copy the file to a directory on your routing platform. For example, copy the following configuration to a file and name the file ex-script.conf. Copy the ex-script.conf file to the /var/tmp directory on your routing platform. system { scripts { commit { file ex-script.xsl; } } } interfaces { fxp0 { disable; unit 0 { family inet { address 10.0.0.1/24; } } } } 2. Merge the contents of the file into your routing platform configuration by issuing the load merge configuration mode command: [edit] [email protected]# load merge /var/tmp/ex-script.conf load complete Merging a Snippet To merge a snippet, follow these steps: 1. From the HTML or PDF version of the manual, copy a configuration snippet into a text file, save the file with a name, and copy the file to a directory on your routing platform. For example, copy the following snippet to a file and name the file ex-script-snippet.conf. Copy the ex-script-snippet.conf file to the /var/tmp directory on your routing platform. commit { file ex-script-snippet.xsl; } 2. Move to the hierarchy level that is relevant for this snippet by issuing the following configuration mode command: xxii Copyright © 2017, Juniper Networks, Inc. About the Documentation [edit] [email protected]# edit system scripts [edit system scripts] 3. Merge the contents of the file into your routing platform configuration by issuing the load merge relative configuration mode command: [edit system scripts] [email protected]# load merge relative /var/tmp/ex-script-snippet.conf load complete For more information about the load command, see CLI Explorer. Documentation Conventions Table 1 on page xxiii defines notice icons used in this guide. Table 1: Notice Icons Icon Meaning Description Informational note Indicates important features or instructions. Caution Indicates a situation that might result in loss of data or hardware damage. Warning Alerts you to the risk of personal injury or death. Laser warning Alerts you to the risk of personal injury from a laser. Tip Indicates helpful information. Best practice Alerts you to a recommended use or implementation. Table 2 on page xxiii defines the text and syntax conventions used in this guide. Table 2: Text and Syntax Conventions Convention Description Examples Bold text like this Represents text that you type. To enter configuration mode, type the configure command: [email protected]> configure Copyright © 2017, Juniper Networks, Inc. xxiii Junos OS Basics Feature Guide for EX4600 Switches Table 2: Text and Syntax Conventions (continued) Convention Description Examples Fixed-width text like this Represents output that appears on the terminal screen. [email protected]> show chassis alarms • Introduces or emphasizes important new terms. • • Identifies guide names. A policy term is a named structure that defines match conditions and actions. • Identifies RFC and Internet draft titles. • Junos OS CLI User Guide • RFC 1997, BGP Communities Attribute Italic text like this Italic text like this No alarms currently active Represents variables (options for which you substitute a value) in commands or configuration statements. Configure the machine’s domain name: Represents names of configuration statements, commands, files, and directories; configuration hierarchy levels; or labels on routing platform components. • To configure a stub area, include the stub statement at the [edit protocols ospf area area-id] hierarchy level. • The console port is labeled CONSOLE. < > (angle brackets) Encloses optional keywords or variables. stub <default-metric metric>; | (pipe symbol) Indicates a choice between the mutually exclusive keywords or variables on either side of the symbol. The set of choices is often enclosed in parentheses for clarity. broadcast | multicast # (pound sign) Indicates a comment specified on the same line as the configuration statement to which it applies. rsvp { # Required for dynamic MPLS only [ ] (square brackets) Encloses a variable for which you can substitute one or more values. community name members [ community-ids ] Indention and braces ( { } ) Identifies a level in the configuration hierarchy. ; (semicolon) Identifies a leaf statement at a configuration hierarchy level. Text like this [edit] [email protected]# set system domain-name domain-name (string1 | string2 | string3) [edit] routing-options { static { route default { nexthop address; retain; } } } GUI Conventions Bold text like this xxiv Represents graphical user interface (GUI) items you click or select. • In the Logical Interfaces box, select All Interfaces. • To cancel the configuration, click Cancel. Copyright © 2017, Juniper Networks, Inc. About the Documentation Table 2: Text and Syntax Conventions (continued) Convention Description Examples > (bold right angle bracket) Separates levels in a hierarchy of menu selections. In the configuration editor hierarchy, select Protocols>Ospf. Documentation Feedback We encourage you to provide feedback, comments, and suggestions so that we can improve the documentation. You can provide feedback by using either of the following methods: • Online feedback rating system—On any page of the Juniper Networks TechLibrary site at http://www.juniper.net/techpubs/index.html, simply click the stars to rate the content, and use the pop-up form to provide us with information about your experience. Alternately, you can use the online feedback form at http://www.juniper.net/techpubs/feedback/. • E-mail—Send your comments to [email protected]

Security and Privacy Systems Security Distributed Systems Security Network Security Security Protocols Software and Application Security Domain-Specific Security and Privacy Architectures Software Security Engineering Formal Methods and Theory of Security Security Requirements Critical infrastructure Protection Smart Grid Security Electric Grid Protection and Resilience