Getting green with JUNOS
In a branch office you generally have workers who work standard business hours. These generally exist between the hours of 0700 and 1800 hours. Most branches have VOIP handsets or APs that run off PoE. These do not need to…
Auto discovery with Solarwinds NPM
Solarwinds Orion NPM is a feature rich management platform that offers a comprehensive monitoring solution. Leveraging SNMP, this product can manage every single aspect of a device down to the last degree. Today I am going to show off one…
JUNOS routed interfaces
Quick one today and a memory refresh for myself. Routed L3 links between a SRX and an EX2200-C. I have currently two up links connected between the two. I want to advertise a L3 VLAN across to the SRX. I…
Branch Considerations with Juniper
Micro and Small branch considerations are far and wide between depending on what is the requirements are. From experiences I have found this to be a nightmare with some vendors. A set solution may not exist or the solutions that…
Slices and JUNOS
In the land of JUNOS, in the fires of Mount Doom. No, I’ll resist but I felt like I had Eye of Sauron on me. On a UNIX OS a concept of slices exist. The reason these exist are due…
Interesting limitations or silly Anthony?
As previous blogs have indicated I have my hands on a Juniper Networks EX-2200. This device has great functionality what I found great was the dual-purpose uplink ports. As pictured below these ports are linked and can take either a RJ-45…
Dancing on the strings of DevOps
The buzzword in the industry of late is DevOps. It is one that I hope isn’t tarnished by the marketing machine where buzzwords go to die. DevOps is the shift in the paradigm of network and infrastructure management. Centralized infrastructure…
Remote console lab access
My Juniper lab is at home and contains an EX2220-C and a SRX110. Traditionally I created an interface in which I could SSH to. This worked for a while but when labbing you are generally testing new things. Well needless…
My other ride is an EX
Today was a good day. I had a new arrival into the family. The Juniper Networks EX-2200 12-C PoE+. In addition to my SRX110-H-VA Firewall I now have a fully fledged JUNOS switch with all the bells a whistles. Juniper…
Still Guarding the Edge with Junos
Again we come to the topic of guarding the edge. Another day, another battle. Last time it was Spanning-tree defence mechanisms, today it is mac address spoofing. Every device has a MAC address and is populated into a devices CAM…
EIGRP to be part-open but why bother?
My first taste of networking came via the Cisco Learning Academy. I did my CCNA and the old school ROUTE, and it did a pretty good job of praising the joys of EIGRP. You learned EIGRP early on, and it…
They told me I could do anything, So I broke OSPF
As many readers have been aware I have been working away at Juniper posts. Working through various topics I have passed Junos and Enterprise. Security looks to be on the horizon. I will see how I feel when I get…
Juniper SRX110 and ADSL
As many of you are well aware I own a Juniper Networks SRX110H-VA firewall. THis firewall has been the focus of many blogs up until now. I have covered off a myriad of subjects with many more to come in…
Prudish behavior
Back on the juniper posts today, I am going to jump into local user authentication. Juniper offer quite a few options on configuring user based access. I will start to explore these among many other topics this year. I am of the…
Juniper Networks JNCIS-ENT Exam Review
Today I sat the JNCIS-ENT exam. As my previous post let on, I didn’t pass the exam the first time. I was close but not close enough. I felt it was a fair exam and I am going break it…
You only fail when you give up
Certification testing happens all the time in our industry. Certifications come and go and technology changes. There are two things that remain constant. The pursuit of knowledge and higher learning, and passing/not passing. The pursuit of knowledge is what differentiates…
Guard the edge with Junos
Just a quick one today. I had planned to take the JNCIS-Security this month but accidentally booked JNCIS-Enterprise. Not to worry in the slightest. The same great content will be served up, just with a focus on routing and switching.…
Have faith and stem the flood of SYNers
In my previous post I showed what a SYN flood and SYN scan was. The ability to determine open ports rather silently and not trigger alarms may have raised the eyebrows of some. I mentioned that Stateful Packet Inspection and…
Rescue configuration
It wasn’t until I was fiddling around with what my SRX could do did I stumble across something that intrigued me. I was trying to figure out why my Alarm light was being displayed at the front of the SRX…
The power of USB backups on the SRX110
The SRX110 device that I have been labbing with has come with two USB slots. One is designed to be a 3g/4g wan module which would allow a failover internet connection and could server as a remote access gateway. I…
Policy this, policy that
Next topic on the blog is Security policies. An important part of firewalls is controlling of traffic. Once we logically define zones and we segregate the network we need to control traffic to and from these zones. It is important…
HIT that interface
Juniper works very different to IOS. If you have been following my blog recently you will have discovered I have been on the Sauce. Fresh of the JNCIA Junos pass I am diving into JNCIS-SEC. I am going to explain…
Minister of Firewall Zone Planning
Like Cisco, Juniper offer their equivalent to security levels. Known as zones, the SRX family can classify common interfaces and apply hierarchical policies that allow stable scalability. This post is designed to introduce Cisco people to the Juniper equivalent, and new…
VLANs and more
As I slowly diversify my skill set and acquire JUNOS knowledge I find that knowing the technology and underlying concepts are the same. Minor changes like routing preference and the like is easy to deal with. Slowly I am working…
JNCIA JUNOS review
Today I passed the Juniper Networks JNCIA JUNOS exam. I am quite elated to be honest. My roots as a network engineer have come from the Cisco Network academy and I have climbed part of their certification tree. Upon acquisition…