JUNOS High Availability

Larger Cover

Best Practices for High Network Uptime

By James Sonderegger, Orin Blomberg, Kieran Milne, Senad Palislamovic

Publisher: O'Reilly Media

Released: August 2009

Pages: 690

Whether your network is a complex carrier or just a few machines supporting a small enterprise, JUNOS High Availability will help you build reliable and resilient networks that include Juniper Networks devices. With this book's valuable advice on software upgrades, scalability, remote network monitoring and management, high-availability protocols such as VRRP, and more, you'll have your network uptime at the five, six, or even seven nines -- or 99.99999% of the time.

Rather than focus on "greenfield" designs, the authors explain how to intelligently modify multi-vendor networks. You'll learn to adapt new devices to existing protocols and platforms, and deploy continuous systems even when reporting scheduled downtime. JUNOS High Availability will help you save time and money.

Manage network equipment with Best Common Practices
Enhance scalability by adjusting network designs and protocols
Combine the IGP and BGP networks of two merging companies
Perform network audits
Identify JUNOScripting techniques to maintain high availability
Secure network equipment against breaches, and contain DoS attacks
Automate network configuration through specific strategies and tools

This book is a core part of the Juniper Networks Technical Library™.

JUNOS HA Concepts
1. Chapter 1 High Availability Network Design Considerations
  1. Why Mention Cost in a Technical Book?
  2. A Simple Enterprise Network
  3. Redundancy and the Layered Model
  4. What Does It All Mean?
2. Chapter 2 Hardware High Availability
  1. Divide and Conquer
  2. Packet Flows
  3. Redundancy and Resiliency
3. Chapter 3 Software High Availability
  1. Software Architecture
  2. One OS to Rule Them
  3. Automation of Operations
4. Chapter 4 Control Plane High Availability
  1. Under the Hood of the Routing Engine
  2. Graceful Routing Engine Switchover
  3. Graceful Restart
  4. MPLS Support for Graceful Restart
  5. Non-Stop Active Routing
  6. Non-Stop Bridging
  7. Choosing Your High Availability Control Plane Solution
5. Chapter 5 Virtualization for High Availability
  1. Virtual Chassis in the Switching Control Plane
  2. Control System Chassis
JUNOS HA Techniques
1. Chapter 6 JUNOS Pre-Upgrade Procedures
  1. JUNOS Package Overview
  2. Pre-Upgrade Verifications
  3. Moving Services Away from a Router
2. Chapter 7 Painless Software Upgrades
  1. Snapshots
  2. Software Upgrades with Unified ISSU
  3. Software Upgrades Without Unified ISSU
  4. Snapshots Redux
  5. Image Upgrade Tweaks and Options
  6. J Series Considerations
3. Chapter 8 JUNOS Post-Upgrade Verifications
  1. Post-Upgrade Verification
  2. Fallback Procedures
  3. Applicability
4. Chapter 9 Monitoring for High Availability
  1. I Love Logs
  2. Simple Network Management Protocol
  3. Traffic Monitoring
5. Chapter 10 Management Interfaces
  1. A GUI for Junior Techs
  2. Mid-Level Techs and the CLI
  3. Deep Magic for Advanced Techs
6. Chapter 11 Management Tools
  1. JUNOScope
  2. Juniper AIS
  3. Partner Tools
7. Chapter 12 Managing Intradomain Routing Table Growth
  1. Address Allocation
  2. Address Aggregation
8. Chapter 13 Managing an Interdomain Routing Table
  1. Enterprise Size and Effective Management
  2. Border Gateway Protocol (BGP)
Network Availability
1. Chapter 14 Fast High Availability Protocols
  1. Protocols for Optical Networks
  2. Rapid Spanning Tree Protocol
  3. Interior Gateway Protocols
  4. Bidirectional Forwarding Detection
  5. Virtual Router Redundancy Protocol
  6. MPLS Path Protection
2. Chapter 15 Transitioning Routing and Switching to a Multivendor Environment
  1. Industry Standards
  2. Multivendor Architecture for High Availability
  3. Routing Protocol Interoperability
3. Chapter 16 Transitioning MPLS to a Multivendor Environment
  1. Multivendor Reality Check
  2. MPLS Signaling for High Availability
  3. MPLS Transition Case Studies
4. Chapter 17 Monitoring Multivendor Networks
  1. Are You In or Out?
  2. SNMP Configuration
  3. Syslog Configuration
  4. Configuration Management
  5. Configuration for AAA
  6. JUNOS GUI Support
  7. What IS Normal?
5. Chapter 18 Network Scalability
  1. Hardware Capacity
  2. Network Scalability by Design
6. Chapter 19 Choosing, Migrating, and Merging Interior Gateway Protocols
  1. Choosing Between IS-IS and OSPF
  2. Migrating from One IGP to Another
  3. Merging Networks Using a Common IGP
7. Chapter 20 Merging BGP Autonomous Systems
  1. Planning the Merge
  2. Merging Our ASs Off
  3. Monitoring the Merge
8. Chapter 21 Making Configuration Audits Painless
  1. Why Audit Configurations?
  2. Configuration Auditing 101
  3. Auditing Configurations
  4. Performing and Updating Audits
9. Chapter 22 Securing Your Network Equipment Against Security Breaches
  1. Authentication Methods
  2. Hardening the Device
  3. Firewall Filters
10. Chapter 23 Monitoring and Containing DoS Attacks in Your Network
  1. Attack Detection
  2. Taking Action When a DoS Attack Occurs
  3. Attack Prevention
  4. Gathering Evidence
11. Chapter 24 Goals of Configuration Automation
  1. CLI Configuration Automation
  2. Automating Remote Configuration
12. Chapter 25 Automated Configuration Strategies
  1. Configuration Change Types
  2. Automation Strategies
Appendixes
1. Appendix System Test Plan
  1. Physical Inspection and Power On
  2. Check General System Status
  3. Check Routing Engine and Storage Media
  4. Test Optical Interfaces
  5. Failover and Redundancy Tests
  6. Final Burn-In Check
2. Appendix Configuration Audit
  1. Audit Responsibilities
  2. Audit Response Key
  3. Audit Checklist
  4. Audit Interval
3. Appendix High Availability Configuration Statements
  1. Routing Engine and Switching Control Board
  2. Graceful Routing Engine Switchover
  3. Nonstop Bridging Statements
  4. Nonstop Active Routing
  5. Graceful Restart
  6. VRRP
  7. Unified In-Service Software Upgrade (ISSU)

Colophon

Title:

JUNOS High Availability

By:

James Sonderegger, Orin Blomberg, Kieran Milne, Senad Palislamovic

Publisher:

O'Reilly Media

Formats:

Print
Ebook
Safari Books Online

Print:

August 2009

Ebook:

August 2009

Pages:

690

Print ISBN:

978-0-596-52304-6

| ISBN 10:

0-596-52304-1

Ebook ISBN:

978-0-596-80609-5

| ISBN 10:

0-596-80609-4

James Sonderegger

James Sonderegger (JNCIE-M #130, JNCIS-FWV, JNCIS-ER, and Juniper Certified Instructor) holds a MS in IT Management and is a Resident Engineer Manager on Juniper Networks' Professional Services Team. James spent five years as an Engineer in Residence for Federal customers and has been in the networks industry for the last twelve years. His former employers include The Analysis Corporation (TAC), Ericsson IP Infrastructure, and Automated Data Processing. James was a co-author on "Juniper Networks Reference Guide. Routing, Configuration, and Architecture", ISBN 0201775921, Addison-Wesley Publishing, 2002.

View James Sonderegger's full profile page.
Orin Blomberg

Orin Blomberg (CCNP, CCSP, CCIP, CCVP, CCDP, JNCIS-M, JNCIS-FWV, JNCIS-ER, JNCIA-IDP, JNCI) is the technical lead for SSL VPNs and remote access at the Washington State Department of Information Service. His primary responsibilities include providing remote access and secure connectivity for state agencies, county, city governments, and tribal nation governments, as well as connectivity to federal agencies. His former employers include General Dynamics C4 Systems, Ericsson IP Infrastructure, and the US Army.

View Orin Blomberg's full profile page.
Kieran Milne

Kieran Milne (JNCIE-M #380, JNCIS-ER, JNCIA-WX, JNCIA-EX, JNCIA-E, JNCI, CCNA, Nortel NCTS) is a training developer and technical trainer within the Education Services department at Juniper Networks. With over ten years of experience in the networking industry, Kieran has taught all over the world, in both corporate and college settings. Before joining Juniper Networks, Kieran spent time at Nortel Networks and Alcatel. He is the author of the O'Reilly book JUNOS Networking Essentials, and contributes to exam development for the Juniper Networks Technical Certification Program. Kieran lives and works out of Canada.

View Kieran Milne's full profile page.
Senad Palislamovic

Senad Palislamovic (JNCIE-M #145 and JNCIS-E) is a Professional Services Engineer at Juniper Networks, where he consults, designs, and implements MPLS enabled NGEN services for largest global ASPs and financial networks. He has also worked as a JTAC Engineer troubleshooting major ISPs' networks. Before JTAC, Senad held various network positions at Weber State University where he designed and implemented scalable network solutions. Senad holds B.S Degree in Telecommunications and IS&T from Weber State University and has over 10 years of experience in various enterprise and ISP networking technologies. He lives in New York with his wife Samera.

View Senad Palislamovic's full profile page.