Juniper Network Switches

Common Configuration Snippets

System Time

set system time-zone America/New_York
Automatically Set Clock with NTP
- set system ntp server 1.2.3.4
- Repeat for additional servers
Manually Set Clock in Operation Mode
- set date "yyyyMMddhhmm.ss"
- You can ignore the error message
VIEW SYSTEM TIME (newer software will display in UTC)
- show system uptime

General Configuration Items

set system host-name YOUR-HOST-NAME
set system services ssh protocol-version v2
- Newer software will block root login unless "root-login" command is set under ssh config
set system services netconf ssh
set chassis aggregated-devices ethernet device-count 2
- Select the number of Link Aggregation Groups (LAG) that you want (LACP/802.3ad)
set chassis alarm management-ethernet link-down ignore
- Turn off this alarm if you don't use the out-of-band management port
set interfaces YOUR-IF-NUM unit 0 family ethernet-switching vlan members VNUM
- assign normal port to vlan (untagged)
set interfaces YOUR-IF-NUM unit 0 family ethernet-switching port-mode trunk
set interfaces YOUR-IF-NUM unit 0 family ethernet-switching native-vlan-id VNUM
- REMOVE vlan from members if it is set as native-vlan-id on trunk port (for untagged)
set interfaces YOUR-IF-NUM unit 0 family ethernet-switching vlan members VNUM
- Trunk Interface can have One Untagged Vlan (native) and Many Tagged Vlan's assigned
set interfaces YOUR-IF-NUM description "Describe Port Usage or Name Here"
set interfaces YOUR-IF-NUM ether-options 802.3ad ae#
- Add port to ae# (aggregated-devices ethernet, starting with 0)
- 802.3ad is LACP link aggregation protocol
- Must delete unit 0 from ae# interfaces before commit will be allowed
set interfaces ae# aggregated-ether-options lacp active
set interfaces ae# unit 0 family ethernet-switching port-mode trunk
- NEWER SOFTWARE might use command "interface-mode" rather than port-mode!!
set interfaces ae# unit 0 family ethernet-switching vlan members VNUM
- Assign vlan number to LACP (ae) trunk. Repeat for additional vlan's
set poe interface all disable
- Disable one or all interfaces for Power over Ethernet delivery
set vlans VLAN-NAME vlan-id VNUM
- Assign Vlan Number to Vlan Name
set vlans VLAN-NAME l3-interface vlan.UNIT-NUM
- Assign Layer-Three (IP) Sub-Interface to Vlan Name
- Recommend Unit number to match vlan id
- NEWER SOFTWARE uses l3-interface irb.UNIT-NUM rather than vlan.UNIT-NUM
- irb = Integrated Routing and Bridging
set interfaces vlan unit UNIT-NUM description "Purpose of Vlan IP Interface"
- Unit number must match value devined for VLAN-NAME l3-interface under set vlans
- NEWER SOFTWARE uses l3-interface irb.UNIT-NUM rather than vlan.UNIT-NUM
set interfaces vlan unit UNIT-NUM family inet dhcp
- Use DHCP for IP Assignment to switch Vlan IP Interface (or configure manually)

Important Concepts

commit
- Always Commit your configuration changes!! Unlike Cisco, changes are not live until committed.
show configuration | display set | no-more
- Like "show running-config" from Cisco
show vlans
run SOME-COMMAND
- Same as "do" from Cisco configuration mode. Helps use "show" commands from edit mode.
wildcard range set interfaces ge-0/0/[0-4,10,15-20] unit 0 ...
- Change more than one interface at the same time!!!

Automatic Speed and Duplex

The EX4500 Series 10G Base-T Switch Ports default configuration will not auto-negotiate 1G port speeds. Here are some hints to change that if needed.

set interfaces xe-0/0/30 ether-options auto-negotiation
set interfaces xe-0/0/30 ether-options link-mode automatic
set interfaces xe-0/0/30 ether-options speed auto-negotiation
- The "auto-negotiation" setting is required for this config to work.

Safe Shutdown

Keep the switch connected to an UPS battery backup to avoid issues during short power interruptions. To safely power-off the switch, check the current procedure from Juniper. Here are some hints.

request system halt
request system power-off
- Most switch models to the same thing regardless of whether you use the halt or power-off command (still need to remove power cords)
WAIT for a while (5 to 10 minutes) for the switch to complete the shutdown sequence
AFTER WAITING, you can remove power. If you want to be sure, use a serial console to request system halt and then wait for the "system has halted" message before removing power.

View Backup Partition Status

The backup partition should contain an identical copy (snapshot) of the active partition. This might be created automatically, or you can manually update the snapshot using "request system snapshot slice alternate". I believe this is a copy of JunOS, and NOT a copy of the configuration which must be saved for recovery separately.

show system snapshot media internal
show system storage partitions

Save a Rescue Configuration

If the system is in a known-good state, you should Save a Rescue Configuration. There is usually an alarm on the system until a rescue configuration has been saved.

request system configuration rescue save
- REPEAT this step periodically to save NEWER KNOWN GOOD configurations for rescue
show system configuration rescue
- View the saved rescue configuration including date & time stamp
show chassis alarms

notesbytom/Juniper-Switches.md