0% found this document useful (0 votes)
116 views

JNCIS: Juniper Networks Certified Internet Specialist Study Guide

Uploaded by

Albert Lungu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
116 views

JNCIS: Juniper Networks Certified Internet Specialist Study Guide

Uploaded by

Albert Lungu
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 35

SYBEX Index

JNCIS: Juniper™ Networks Certified


Internet Specialist Study Guide (JN0-303)
Joseph M. Soricelli

Index

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved. No part of this publication
may be stored in a retrieval system, transmitted, or reproduced in any way, including but not limited to photocopy, photograph,
magnetic or other record, without the prior agreement and written permission of the publisher.

ISBN: 0-7821-4072-6

SYBEX and the SYBEX logo are either registered trademarks or trademarks of SYBEX Inc. in the USA and other countries.

TRADEMARKS: Sybex has attempted throughout this book to distinguish proprietary trademarks from descriptive terms by following
the capitalization style used by the manufacturer. Copyrights and trademarks of all products and services listed or described herein
are property of their respective owners and companies. All rules and laws pertaining to said copyrights and trademarks are inferred.

This document may contain images, text, trademarks, logos, and/or other material owned by third parties. All rights reserved. Such
material may not be copied, distributed, transmitted, or stored without the express, prior, written consent of the owner.

The author and publisher have made their best efforts to prepare this book, and the content is based upon final release software
whenever possible. Portions of the manuscript may be based upon pre-release versions supplied by software manufacturers. The
author and the publisher make no representation or warranties of any kind with regard to the completeness or accuracy of the
contents herein and accept no liability of any kind including but not limited to performance, merchantability, fitness for any particular
purpose, or any losses or damages of any kind caused or alleged to be caused directly or indirectly from this book.

Sybex Inc.
1151 Marina Village Parkway
Alameda, CA 94501
U.S.A.
Phone: 510-523-8233
www.sybex.com
4072cINDX.fm Page 731 Sunday, April 4, 2004 3:36 PM

Index
Note to Reader: Bolded page references indicate definitions and main discussions of a topic. Italicized
page references indicate tables and illustrations. References that include a letter, for example B:10,
refer to the bonus chapters that are included on the accompanying CD.

internal Level 1 routes, 243–246


Symbols Level 2 routes, 248–251
OSPF
$ (dollar sign), 51–52
area routes, 142–150, 143
∧ (caret), 51–52
exam essentials, 155
* (asterisk), 47–50
NSSA routes, 151, 151–153
. (dot), 47–50
addressing, IPv6
format for, C:2
overview of, C:7–C:10
A adjacency
defined, 687
AAL (ATM adaptation layer), 660–664, 672,
IS-IS, 193–196
687
Adjacency-RIB-In, 278, 287, 687
accept, 19, 686
Adjacency-RIB-Out, 258, 278, 687
Access-Accept message, 686, B:9, B:10
ADM (add/drop multiplexer), 686
Access-Reject message, 686, B:10
administrative groups
Access-Request message, 686, B:7–B:8,
defined, 687
B:28–B:29
traffic engineering with, 539–547
actions
AFI/SAFI
defined, 686
IPv4 and, 381–388
determining logic result, 14–15
Layer 2 VPNs and, 388–391
overview of, 10
aggregation, 687
activate command, 221
Aggregator attribute, 266–267, 267, 687
active node, 504, 686
AH (Authentication Header), 689
active route, 686
algorithms
adaptive mode
BGP route selection, 276–282
defined, 686
exam essentials, 312
exam essentials, 600
overview of, 276–278
overview of, 584, 584–586
skipping steps, 280–282
Q & A, 602–603
verifying outcome, 278, 278–280
Address Family Identifier, 381, 686
CSPF. see CSPF (Constrained Shortest
address match conditions, 686
Path First)
Address Resolution Protocol (ARP), 687
SPF, 95–100
address summarization
calculation example, 97–100, 97–100
IS-IS network, 242–251
components, 96–97
exam essentials, 252
overview of, 95–96
external Level 1 routes, 246–248

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 732 Sunday, April 4, 2004 3:36 PM

732 ALI (ATM Line Interface) – ATM (Asynchronous Transfer Mode)

ALI (ATM Line Interface), 687 confederation sequence, 687


allow command, 295–296, 687 confederation set, 687
allow-commands attribute, 687, B:15 external-link advertisements, 687, 689
allow-configuration attribute, 687, B:15 sequence, 687
Alternate Priority Queuing (APQ), 687 set, 687
always-compare-med command, 337–338, AS Path, 392
687 defined, 56, 687
American National Standards Institute group, 687
(ANSI), 687 locating routes, 59–64
AND (&&) logical operator. see logical AND modifying
ANSI (American National Standards with configuration statements,
Institute), 687 322–331, 323, 325, 328, 331
answers, review questions and. see Q & A exam essentials, 392
(questions and answers) Q & A, 393–395
anycast address, 420, 687 with routing policy, 331–336, 335
Anycast RP, 420–427 overview of, 262–263, 263
configuring, 422–423 regular expressions
defined, 687 exam essentials, 65
monitoring traffic flows, 424–427 operators, 57
operational theory, 420–421, 421 overview of, 56–59
Q & A, 452, 454 Q & A, 68–69
verifying status of network, 423–424 sample network path, 58
application-specific integrated circuit. see ASBR Summary LSA
ASIC (application-specific integrated defined, 687
circuit) overview of, 85–87
APQ (Alternate Priority Queuing), 687 Q & A, 156, 159
APS (Automatic Protection Switching), 689 ASIC (application-specific integrated circuit)
area address TLV, 163–165, 164, 687 defined, 687
area border router, 687 I/O Manager, 705, A:5, A:6
area route summarization, 142–150, 143 Internet Processor, 704, A:6
area-local opaque LSAs, 93 as-override command
area-range command, 149–150, 153 backbone service for BGP peers, 329, 331
areas defined, 687
defined, 687 for PE-CE routes, 626
IS-IS network Q & A, 682, 684
contiguous set of level 1, 195 assessment test, JNTCP, xxvii–xxxv
exam essentials, 251 associations, A:5–A:6
flooding scope of LSPs, 193 asterisk (*), 47–50
overview of, 193–196 AS-wide opaque LSAs, 93
ARP (Address Resolution Protocol), 687 ATM (Asynchronous Transfer Mode)
AS (Autonomous System) defined, 687
boundary router, 689 as PE-CE connection
confederation, 687 Layer 2 Circuit, 676–678
confederation ID, 687 Layer 2 VPN, 660–664

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 733 Sunday, April 4, 2004 3:36 PM

ATM adaptation layer (AAL) – base transceiver station (BTS) 733

ATM adaptation layer (AAL), 660–664, 672, Autonomous System. see AS (Autonomous
687 System)
atomic, 689 Autonomous System Path. see AS Path
Atomic Aggregate attribute, 265–266, 266, autonomous-system command, 330
689 Auto-RP
attacks, security defined, 689
exam essentials, B:26 exam essentials, 449
firewall filters, B:17–B:18 overview of, 406–410
spoofed packets, B:16–B:17 packet format, 407
unicast reverse path forwarding, Q & A, 451, 454
B:18–B:25 sample network, 407
attempt, 689 availability, B:2–B:3
attributes, BGP. see BGP (Border Gateway
Protocol)
AUC (authentication center), 689
authentication
B
BGP, 292–293 B bit, 74, 689
IS-IS, 200–207 BA (behavior aggregate)
altering default methods for, 206–207 defined, 690, A:3
exam essentials, 252 exam essentials, A:21
Hello, 204–206 overview of, A:8–A:10
MD5 level, 203–204 Q & A, A:23, A:25
overview of, 200–201 backbone area, 689
simple level, 201–203 backbone router
OSPF defined, 690
MD5, 107–108 service for BGP peers, 327–331, 328
overview of, 105 backplane, 690
Q & A, 156, 159 backup
simple, 105–107 Auto-RP, 406
user, B:3–B:16 defined, 690
basics, B:4–B:5 designated router, 690
exam essentials, B:26 IPv4 address field in RRO, 487
RADIUS, B:5–B:10 primary LSP path revertive capability, 555
TACAS+, B:11–B:16 bandwidth
authentication center (AUC), 689 defined, 690
Authentication Header (AU), 689 IS-IS network, 210–211
authentication TLV OSPF, 111–115
defined, 689 base station controller (BSC), 690
overview of, 172–174 base station subsystem (BSS), 690
Q & A, 253, 255 Base Station System GPRS Protocol (BSSGP),
authentication-order command, B:4 690
authentication-type command, 203 base transceiver station (BTS), 690
Automatic Protection Switching (APS), 689

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 734 Sunday, April 4, 2004 3:36 PM

734 behavior aggregate – broadcasts

behavior aggregate. see BA (behavior defined, 691


aggregate) exam essentials, 312–313, 392
Bellcore, 690 IBGP scaling methods, 353–370
Bellman-Ford algorithm, 690 confederations, 371–379, 372
BERT (bit error rate test), 690 configuring network, 359–370, 360
BGP (Border Gateway Protocol) operational theory, 354–359, 355,
adding routes to inet.2, 441–447 357–358
attribute modifications, 318–353 overview of, 353–354
Local Preference, 349–353 route reflection, 354
Multiple Exit Discriminator, 336–349, LSP access to ingress router, 594–597
339 Multiprotocol BGP, 380–391
Origin, 318–322, 320 IPv4, 381, 381–388
AS Path, 322–336, 323, 325, 328, 331, Layer 2 VPNs, 388–391
335 overview of, 380–381
attributes, 260–276 for PE-CE route advertisements, 622–627
Aggregator, 266–267, 267 Q & A, 314–316, 393–395
Atomic Aggregate, 265–266, 266 route selection algorithm, 276–282
Cluster List, 272, 272 defined, 690
common, 260 overview of, 276–278
Community, 267–268, 268 skipping steps, 280–282
exam essentials, 312 verifying outcome, 278, 278–280
Extended Community, 274–276, 276 routing protocol for IPv6, C:14–C:17
Local Preference, 264–265, 265 Update message, 258–259, 259
Multiple Exit Discriminator, 264, 264 BGP Next Hop attribute, 263, 263
Multiprotocol Reachable NLRI, bit error rate test (BERT), 690
273–274, 274 bit field match conditions, 690
Multiprotocol Unreachable NLRI, BITS (Building Integrated Timing Source),
274, 275 691
Next Hop, 263, 263 bootstrap message
Origin, 261–262, 262 defined, 690
Originator ID, 271–272, 272 format, 412
overview of, 260–261 overview of, 411–414
AS Path, 262–263, 263 bootstrap router. see BSR (bootstrap router)
well-known communities, 268, bootstrap routing, 411–417
268–271, 271 advertising RP capabilities, 414–417, 415
configuration, 283–311 electing bootstrap router
authentication, 292–293 bootstrap message format, 412–413
avoiding connection collisions, BSR sample network, 413
293–296 overview of, 411–414
establishing prefix limits, 296–301 Q & A, 451, 454
graceful restart, 287–292 broadcasts
load balancing, 285–287, 286 defined, 691
multihop, 283, 283–285 grace LSA, 103
route damping, 301–311 IS-IS sample network, 164

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 735 Sunday, April 4, 2004 3:36 PM

BSC (base station controller) – CLEC (Competitive Local Exchange Carrier) 735

Link ID and Link Data fields, 75 CD, accompanying book, xxv


network LSA, 79–80 CDMA (Code Division Multiple Access)
OSPF traffic engineering, 533 2000, 691
point-to-point adjacency state TLV, 188 defined, 692
BSC (base station controller), 690 CDR (call detail record), 691
BSR (bootstrap router) CE (customer edge) device
defined, 690 defined, 694
electing, 411–414 exam essentials, 681
bootstrap message format, 412 overview of, 606–607
sample network, 413 Q & A, 682, 684
exam essentials, 449 cell tax, 691
BSS (base station subsystem), 690 centralized Internet access, 648–650
BSSGP (Base Station System GPRS Protocol), CertManager website, xxi
690 CFM (cubic feet per minute), 691
BTS (base transceiver station), 690 channel service unit/data service unit (CSU/
buffer-size command, A:16–A:17 DSU), 691
Building Integrated Timing Source (BITS), CHAP (Challenge Handshake Authentication
691 Protocol), 691
bundle, 691 chassid (chassis daemon), 691
checksum TLV, 174, 174–175, 691
CIDR (classless interdomain routing), 692
CIP (Connector Interface Panel), 693
C circuit cross-connect (CCC), 692
calling policy, 10 Cisco systems router, 338
CAMEL (Customized Application of Mobile Cisco-RP-Announce messages
Enhance Logic), 694 defined, 692
candidate bootstrap router (C-BSR), overview of, 406–408
411–414 Q & A, 451, 454
candidate configuration file, 691 Cisco-RP-Discovery messages
candidate database defined, 692
defined, 691 overview of, 406–409
Q & A, 156, 159 Q & A, 452, 454
SPF algorithm class of service. see CoS (class of service)
example, 97–100, 97–100 classification
overview of, 96–97 defined, A:3
candidate-RP-advertisements. see C-RP-Adv of packets, A:4
(candidate-RP-advertisements) Q & A, A:24–A:25
Capability option, MGBP, 380–381 classless interdomain routing (CIDR), 692
caret (∧), 51–52 clearing the bit, 129
CB (Control Board), 693 CLEC (Competitive Local Exchange Carrier),
C-BSR (candidate bootstrap router), 693
411–414 CLEI (common language equipment
CCC (circuit cross-connect), 692 identifier), 692

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 736 Sunday, April 4, 2004 3:36 PM

736 CLI (command-line interface) – CoS (class of service)

CLI (command-line interface), 692 exam essentials, 64


client peer, 692 simple community, 47–50
clients, 354–356 Competitive Local Exchange Carrier (CLEC),
CLNP (Connectionless Network Protocol), 693
693 complete sequence number PDU. see CSNP
cluster (complete sequence number PDU)
defined, 692 complex community regular expressions,
route reflection, 354–356 50–56
cluster ID asterisk and dot in, 48
choosing, 359 configuring, 54–56
defined, 692 defined, 50
Q & A, 393–395 examples of, 53
route reflection, 354 operators, 51
Cluster List attribute confederations, 371–379, 372
configuring route reflection, 359–364 confederation BGP, 693
defined, 692 configuring network, 374–379
overview of, 272, 272 defined, 693
Q & A, 394–395 exam essentials, 392
route reflection, 354 operational theory, 371–374, 372
Code Division Multiple Access (CDMA) overview of, 371
CDMA2000, 691 Q & A, 394–395
defined, 694 confidentiality, B:3, B:27, B:29
code points, A:7–A:8, A:23, A:25 configuration mode, 693
command completion, 692 Connect, 693
command-line interface (CLI), 692 connection collisions
common language equipment identifier allow command, 295–296
(CLEI), 692 defined, 693
common LSA header, 72–74, 73 passive command, 293–295
communities Connectionless Network Protocol (CLNP),
BGP attributes 693
Community attribute, 267–268, 268 Connector Interface Panel (CIP), 693
Extended Community attribute, constrained path, 693
274–276, 275 Constrained Shortest Path First. see CSPF
well-known, 268, 268–271, 271 (Constrained Shortest Path First)
defined, 27, 692 context-sensitive help, 693
extended, 42–47, 43 Continue message, 693, B:14
regular, 27–42 contributing routes, 693
match criteria usage, 30–37 Control Board (CB), 693
modifying current values, 37–42 control word, 693
overview, 27–30 core, 693
sample network, 28 CoS (class of service)
regular expressions classifying packets, A:4
complex community, 50–56, 51 defined, 692

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 737 Sunday, April 4, 2004 3:36 PM

CPE (customer premises equipment) – destination prefix length 737

exam essentials, A:21–A:22 customer edge device. see CE (customer edge)


JUNOS implementation, A:5–A:20 device
associations, A:5–A:6 customer premises equipment (CPE), 694
behavior aggregate classifiers, Customized Application of Mobile Enhance
A:8–A:10 Logic (CAMEL), 694
configuration, A:6–A:20
defining code points, A:7–A:8
forwarding classes, A:8
multi-field classifiers, A:10–A:12
D
output queues, A:12–A:18 daemon, 694
packet flow, A:5 damping, 303–307, 694
queue servicing, A:18–A:19 damping name command, 307–311
rewrite rules, A:19–A:20 data circuit-terminating equipment (DCE),
overview of, A:2–A:3, A:2–A:3 694
review Q & A, A:23–A:25 data service unit (DSU), 694
terminology, A:3–A:4 Data Terminal Equipment (DTE), 694
CPE (customer premises equipment), 694 Database Description packet, 694
craft interface, 694 database integrity
C-RP-Adv (candidate-RP-advertisements) IS-IS network, 191–192
defined, 691 OSPF, 94–95
overview of, 414–417, 415 data-link connection identifier (DLCI), 694
Q & A, 451, 454 dcd, 694
CSNP (complete sequence number PDU) DCE (data circuit-terminating equipment),
defined, 693 694
IS-IS network and, 170 deactivate command, 221, 694
IS-IS restart operation, 197 dead interval, 695
no-csnp-authentication option, 197 default interface address, 694
CSPF (Constrained Shortest Path First), default route
530–554, 601 configuring not-so-stubby areas, 136,
algorithm steps 139–141
administrative groups, 539–547, 540 configuring stub area, 132–133
CSPF pruning for include groups, 546 defined, 695
overview of, 538–539 multilevel IS-IS internal operation, 223
defined, 693 denial of service (DoS), 695
exam essentials, 600 dense mode
LSP priority and preemption, 547–554 in Auto-RP, 406–410, 449
Q & A, 603 defined, 695
using Traffic Engineering Database, dense wavelength-division multiplexing
530–538, 532 (DWDM), 695
CSU/DSU (channel service unit/data service deny-commands attribute, 695, B:15
unit), 691 deny-configuration attribute, 695, B:15
cubic feet per minute (CFM), 691 designated router, 695
customer AS number, 334–336 Destination Options header, 695, C:6, C:7
destination prefix length, 695

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 738 Sunday, April 4, 2004 3:36 PM

738 deterministic MED – egress router

deterministic MED, 337, 695 DSCP (Differentiated Services Codepoint),


Detour object, 489–490, 489–493, 695 695, A:4
DHCP (Dynamic Host Configuration DSU (data service unit), 694
Protocol), 696 DTE (Data Terminal Equipment), 694
Differentiated Services Codepoint (DSCP), dual inline memory module (DIMM), 696
695, A:4 DVMRP (Distance Vector Multicast Routing
Diffie-Hellman, 695 Protocol), 696
Diffserv, 696 DWDM (dense wavelength-division
Dijkstra algorithm. see SPF (shortest path multiplexing), 695
first) algorithm Dynamic Host Configuration Protocol
DIMM (dual inline memory module), 696 (DHCP), 696
direct routes. see interface routes dynamic host name TLV, 186, 186–187, 696
disable option dynamic label-switched path, 697
defined, 696 dynamic random access memory (DRAM),
graceful restart 697
BGP configuration, 291
IS-IS network, 200
discard command, 147, 696. see also RED
(Random Early Discard)
E
Distance Vector Multicast Routing Protocol E bit
(DVMRP), 696 ASBR summary LSA, 85–86
distance-vector, 696 configuring not-so-stubby areas, 137–138
Distributed Buffer Manager ASICs, 696 configuring stub area, 129
distributed Internet access, 643–644, defined, 697
643–648, 646 AS external LSA, 88
DLCI (data-link connection identifier), 694 external LSAs, 92
dollar sign ($), 51–52 NSSA external LSA, 90
domain ID, 631 router LSAs, 74
defined, 696 EBGP (External BGP), 258, 698
OSPF, 631 ECSA (Exchange Carriers Standards
OSPF route type attribute, 632 Association), 698
overview of, 630–638 edge routers
DoS (denial of service), 695 customer, 606–607
dot (.), 47–50 defined, 697
Down state, 696 ISP network deploying CoS configuration,
downstream on demand, 696 686
downstream unsolicited, 696 peering system between ISP, 697
DRAM (dynamic random access memory), provider, 607
697 editor macros (Emacs), 697
drop profile EGP (Exterior Gateway Protocol), 261–262,
defined, 696 698
exam essentials, A:21 egress router
overview of, A:12–A:14, A:13 defined, 456, 697
Q & A, A:23, A:25 Path message, 463–465

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 739 Sunday, April 4, 2004 3:36 PM

EIA (Electronic Industries Association) – fast reroute 739

PathErr message, 466 expressions


PathTear message, 469 policy, 18–27, 21
RevsError message, 467–468 regular
EIA (Electronic Industries Association), 697 complex community, 50–56, 51
EIR (Equipment Identity Register), 697 AS Path, 56–59, 57–58
electromagnetic interference (EMI), 697 simple community, 47–50
Electronic Industries Association (EIA), 697 ExStart state, 698
Emacs (editor macros), 697 extended communities
embedded OS software, 697 defined, 42
EMI (electromagnetic interference), 697 format, 43
encapsulating security payload (ESP), 697 overview of, 42–47
encapsulations, for PE-CE connection, Extended Community attribute, 274–276,
667–671, 668 276, 698
encryption, TACACS+ payloads, B:16 extended IP reachability TLV
end system, 697 defined, 698
End-of-RIB marker overview of, 184–186, 185
BGP graceful restart operation, 287 Q & A, 253, 255
defined, 697 extended IS reachability TLV
overview of, 288–291 defined, 698
Q & A, 315–316 IS-IS traffic engineering and, 535–538
Equipment Identity Register (EIR), 697 overview of, 175–177, 176
ERO (Explicit Route Object) Q & A, 253, 255, 601, 603
CSPF and, 530–531 Exterior Gateway Protocol (EGP), 261–262,
defined, 698 698
overview of, 485–486, 486 External BGP (EBGP), 258, 698
ESP (encapsulating security payload), 697 external Level 1 routes, 246–248
Established state, 697 external LSAs
Ethernet VLANs NSSA route summarization, 151–153
Layer 2 Circuit, 678–680 overview of, 88–89
Layer 2 VPN, 664–667 external metric, 88, 91, 698
Q & A, 685–686 external route default operation
exact match type, 697 overview of, 230–233
exception packets, 697 wide metrics and, 233–235
Exchange Carriers Standards Association
(ECSA), 698
Exchange state, 698
exclude command, 545
F
EXP bits, 698, A:4 far-end alarm and control (FEAC), 698
explicit null advertisements, 586–588 fast reroute
explicit path, 698 defined, 699
Explicit Route Object. see ERO (Explicit link protection, 579–583
Route Object) node protection, 572–579
export, 698 overview of, 571–572, 572
Q & A, 602–603

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 740 Sunday, April 4, 2004 3:36 PM

740 Fast Reroute object – graceful restart

Fast Reroute object forwarding adjacency, 591–594, 699


defined, 699 forwarding class, 699, A:8
overview of, 493–494, 494 Forwarding Engine Board (FEB), 700
Q & A, 525 Forwarding Equivalence Class. see FEC
FEAC (far-end alarm and control), 698 (Forwarding Equivalence Class)
FEB (Forwarding Engine Board), 700 forwarding plane, 619–621
FEC (Forwarding Equivalence Class) forwarding state bit, 287, 700
defined, 700 forwarding table, 700
example, 511 FPC (flexible PIC concentrator), 699, A:5
LDP label mapping message, 513 Fragment header, 700, C:6, C:6
overview of, 511–517 Frame Relay
Q & A, 526–527 defined, 700
using LDP through RSVP network, Layer 2 Circuit, 674–676
521–522 Layer 2 VPN, 655–660
FF (fixed filter) reservation style from command, 700
defined, 699 FRU (field-replaceable unit), 699
overview of, 475–476 Full state, 106–107, 700
Q & A, 525, 527 fxp1, 700
FIB (forwarding information base), 700 fxp2, 700
field-replaceable unit (FRU), 699 fxpo, 700
FIFO (first in, first out), 699
figure of merit values
defined, 699
overview of, 301–303
G
Q & A, 315–316 Garbage Collection timer, 700
firewall Gateway GPRS Support Node (GGSN), 700
defined, 699 G-CDR, 700
filters, B:17–B:18, B:26 General Packet Radio Service (GPRS), 700
first in, first out (FIFO), 699 generated route, 701
fixed filter reservation style. see FF (fixed GGSN (Gateway GPRS Support Node), 700
filter) reservation style glossary, 685–730
flap damping. see damping GPRS (General Packet Radio Service), 700
flapping. see route flapping GPRS Tunneling Protocol (GTP), 701
flashcards, CD accompanying book, xxv GPRS Tunneling Protocol Control (GTP-C),
flexible PIC concentrator (FPC), 699, A:5 701
floating static route, 699 GPRS Tunneling Protocol User (GTP-U), 701
flood and prune, 699 grace LSA, 102–104, 701
flooding topology, IS-IS grace period TLV, 103
areas and levels, 193–196 graceful restart
mesh groups, 216, 216–218, 218 BGP
Q & A, 254–255 configuring, 288–291
flow control action, 699 exam essentials, 313End-of-RIB
flow label, 699, C:2 marker, 288–291
operation, 288

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 741 Sunday, April 4, 2004 3:36 PM

graceful restart TLV – Host Membership Report 741

overview of, 287–288 header, IPv6


Q & A, 315–316 exam essentials, C:18
defined, 701 format for, C:2
IS-IS LSA, 72–74
configuration, 200 Q & A, C:19–C:21
graceful restart TLV, 198–200 hello interval, 701
restart operation, 197–198 Hello mechanism, 701
OSPF Hello PDU
configuring, 104–105 area address TLV and, 163–164
functionality of, 102 authentication TLV and, 173–174
grace LSA and, 102–104 behavior aggregate, 204–206
link-local LSA using, 93 defined, 702
overview of, 101–102 graceful restart operation, 197
graceful restart TLV graceful restart TLV and, 187–188
configuring IS-IS, 198–200 IS neighbors TLV and, 169
defined, 701 point-to-point adjacency state TLV, 190
overview of, 187, 187–188 helper mode
group address, 701 defined, 702
group operators graceful restart, 200
defined, 19, 701 IS-IS router in, 197–198
example, 24–27 OSPF in, 102
precedence order and, 19 hierarchical route reflection
groups configuring, 364–367, 365
administrative, 539–547 defined, 702
BGP, 701 overview of, 356–358, 357
AS Path, 62–63 Q & A, 394–395
GroupStudy mailing list, xxii High-Level Data Link Control (HDLC), 702
GTP (GPRS Tunneling Protocol), 701 High-Speed Circuit-Switched Data (HSCSD),
GTP-C (GPRS Tunneling Protocol Control), 702
701 hitless restart. see graceful restart
GTP-U (GPRS Tunneling Protocol User), 701 HLR (Home Location Register), 702
HMAC (Hashed Message Authentication
Code), 701
hold down timer, 702
H hold priority
half-life value defined, 702
damping figure of merit, 302 overview of, 547
damping with routing policy, 308 values, 547
defined, 701 hold time, 702
hash, 701 Home Location Register (HLR), 702
Hashed Message Authentication Code Hop-by-Hop Options header, 702, C:4, C:5
(HMAC), 701 Host Membership Query, 702
HDLC (High-Level Data Link Control), 702 Host Membership Report, 702

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 742 Sunday, April 4, 2004 3:36 PM

742 host module – inter-domain MSDP

host module, 702 IMEI (International Mobile Subscriber


host subsystem, 702 Identity), 704
HSCSD (High-Speed Circuit-Switched Data), import, 702
702 incoming I/O Manager ASIC, A:5
independent Internet access, 641–642, 642
inet.0 routing table
BGP routes in, 318
I defined, 702
I/E (Internal/External) bit, 177–182, 178, 181 Q & A, 453–454
I/O Manager ASIC, 705, A:5 RPF tables and, 432, 447–448
IANA (Internet Assigned Numbers inet.1 routing table, 702
Authority) inet.2 RPF table
assigning opaque type codes, 93 adding BGP routes to, 441–447
defined, 704 adding IS-IS routes to, 436–441
AS values, 322 adding local routes to, 432–435, 433
IBGP (Internal BGP) adding OSPF routes to, 436
defined, 258, 704 defined, 703
route damping and, 301 exam essentials, 450
scaling methods overview of, 431
confederations, 371–379, 372 inet.3 routing table, 703
configuring network, 359–370, 360 inet.4 routing table, 703
operational theory, 354–359, 355, inet6.0 routing table, 703
357–358 infinity metric, 703
overview of, 353–354 ingress router
route reflection, 354 defined, 703
ICMP (Internet Control Message Protocol), exam essentials, 600
704 providing LSP access to, 594–599
IDE (Integrated Drive Electronics), 703 init state, 703
Idle state, 702 insert command, 703
IEEE (Institute of Electronic and Electrical instance-type command, 613
Engineers), 703 Institute of Electronic and Electrical
IEFT (Internet Engineering Task Force), 704 Engineers (IEEE), 703
IGMP (Internet Group Management Integrated Drive Electronics (IDE), 703
Protocol), 404, 704 Integrated Services Flowspec object,
IGP (Interior Gateway Protocol) 476–478, 478, 703
advertising LSP to, 591–594 Integrated Services Sender-Tspec object,
associating MED to, 341–345 480–482, 482, 703
BGP routes redistributed from, 319 integrity
defined, 703 defined, B:2
LSP access to ingress router, 594–597 Q & A, B:27, B:29
as origin attribute, 261–262 inter-AS routing, 703
IIEC (International Mobile Station intercluster reflection, 703
Equipment Identity), 704 inter-domain MSDP, 427–431, 428
IKE (Internet Key Exchange), 704

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 743 Sunday, April 4, 2004 3:36 PM

interface – IPv6 (Internet Protocol version 6) 743

interface Internet Processor ASIC, 704, A:6


advertising addresses, 508–510, 509–510 Internet Protocol (IP)
cost, 703 defined, 704
interface metrics version 4. see IPv4 (Internet Protocol
IS-IS network version 4)
manual, 207–210 version 6. see IPv6 (Internet Protocol
reference bandwidth, 210–211 version 6)
OSPF Internet Security Association and Key
manual, 109–111 Management Protocol (ISAKMP), 705
Q & A, 158–159 Internet service provider (ISP), 705
reference bandwidth, 111–115 intra-AS routing, 705
interface routes, 703 IP (Internet Protocol)
Interior Gateway Protocol. see IGP (Interior defined, 704
Gateway Protocol) Interworking, 668, 705
intermediate system, 703 precedence bits. see precedence bits, IP
Intermediate System to Intermediate System. IP external reachability TLV, 180–182, 181,
see IS-IS (Intermediate System to 705
Intermediate System) IP interface address TLV
Internal BGP. see IBGP (Internal BGP) defined, 705
Internal Ethernet, 704 Grace LSA, 103
internal route default operation, 223–230, overview of, 182, 182–183
224 IP internal reachability TLV
Internal/External (I/E) bit, 177–182, 178, 181 defined, 705
International Mobile Station Equipment overview of, 177–179, 178
Identity (IIEC), 704 Q & A, 254–255
International Mobile Subscriber Identity IP Interworking, 667–671
(IMEI), 704 IPSec (Internet Protocol Security), 704
International Organization for IPv4 (Internet Protocol version 4), 381–388
Standardization (ISO), 704 classifying packets, A:4
International Telecommunications Union Error-Spec object, 474, 474–475, 705
(ITU), 704 labeled unicast routes, 384–385
Internet access, VPN customers, 641–650 labeled VPN multicast routes, 387–388
centralized, 648–650 labeled VPN unicast routes, 385–386
distributed, 643–644, 643–648, 646 multicast routes, 382–384
independent, 641–642, 642 RSVP-Hop object, 471–473, 472, 705
Internet Assigned Numbers Authority. see transport address TLV, 503
IANA (Internet Assigned Numbers unicast routes, 380–381, 381
Authority) IPv6 (Internet Protocol version 6), C:1–C:21
Internet Control Message Protocol (ICMP), exam essentials, C:18
704 packet formats, C:3–C:10
Internet Engineering Task Force (IEFT), 704 addressing, C:7–C:10
Internet Group Management Protocol Destination Options header, C:6, C:7
(IGMP), 404, 704 Fragment header, C:6, C:6
Internet Key Exchange (IKE), 704 header, C:3

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 744 Sunday, April 4, 2004 3:36 PM

744 IS neighbors TLV – jitter

Hop-by-Hop Options header, C:4, C:5 TLV details, 162–191


overview of, C:3–C:4 area address TLV, 163–165, 164
Routing header, C:5, C:5 authentication TLV, 172–174
reasons for migrating to, C:2–C:3 checksum TLV, 174, 174–175
review Q & A, C:19–C:21 common TLVs, 162–163
routing protocols dynamic host name TLV, 186,
BGP, C:14–C:17 186–187
IS-IS, C:13–C:14 extended IP reachability TLV,
OSPFv3, C:11–C:12 184–186, 185
RIPng, C:10–C:11 Extended IS reachability TLV,
IS neighbors TLV, 168, 168–169, 705 175–177, 176
IS reachability TLV graceful restart TLV, 187, 187–188
defined, 705 IP external reachability TLV, 180–182,
Extended, 175–177 181
limitations of, 175 IP interface address TLV, 182,
overview of, 165–168, 166 182–183
ISAKMP (Internet Security Association and IP internal reachability TLV, 177–179,
Key Management Protocol), 705 178
IS-IS (Intermediate System to Intermediate IS neighbors TLV, 168, 168–169
System), 161–256 IS reachability TLV, 165–168, 166
adding routes to inet.2, 436–441 LSP entry TLV, 170–172, 171
address summarization, 242–251 padding TLV, 169–170, 170
configuration options, 196–223 point-to-point adjacency state TLV,
authentication, 200–207 188–191, 189
graceful restart, 197–200 protocols supported TLV, 179,
interface metrics, 207–211 179–180
mesh groups, 216, 216–218, 218 traffic engineering IP router ID TLV,
overload bit, 218–223 183, 183–184
wide metrics, 211–215, 212 traffic engineering extensions, 535–538
defined, 703 ISO (International Organization for
exam essentials, 251–252 Standardization), 704
link-state database, 191–196 ISP (Internet service provider), 705
areas and levels, 193, 193–196, 195 ITU (International Telecommunications
database integrity, 191–192 Union), 704
SPF algorithm, 192
multilevel, 223–242
external route default operation,
230–235
J
internal route default operation, jbasa, 705
223–230, 224 jbundle, 705
route leaking, 235–242 J-cell, 705
review Q & A, 253–255 jdocs, 705
routing protocol for IPv6, C:13–C:14 jitter, 705

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 745 Sunday, April 4, 2004 3:36 PM

jkernel – Layer 2 Circuit 745

jkernel, 706
JNCIA (Juniper Networks Certified Internet K
Associate), xv–xvi, xvi
keepalive
JNCIA: Juniper Networks Certified Internet
defined, 706
Associate Study Guide (Sybex), 2, 287,
LDP, 507–508, 508
xxii
MSDP operational theory, 417
JNCIE (Juniper Networks Certified Internet
kernel
Expert), xv–xvi, xviii–xix
defined, 706
JNCIP (Juniper Networks Certified Internet
forwarding table, 706
Professional), xv–xvi, xvii–xviii
key ID, 107–108
JNCIS (Juniper Networks Certified Internet
Kompella, Kireeti, 650
Specialist)
defined, xv–xvi
overview of, xvii
study guides, xxv L
JNTCP (Juniper Networks Technical
label
Certification Program), xv–xxv
base, 653, 706
assessment test, xxvii–xxxv
block offset, 653, 706
how to use this book, xxiv–xxv
defined, 706
M-series routers and T-series routing
multiple push operation, 706
platforms, xv–xvi
pop operation, 523, 706
Juniper Networks Certified Internet
push operation, 579, 706
Associate, xvi
space, 503, 707
Juniper Networks Certified Internet
swap and push operation, 522–523, 707
Expert, xviii–xix
swap operation, 579, 603, 707
Juniper Networks Certified Internet
switching. see MPLS (Multiprotocol Label
Professional, xvii–xviii
Switching)
Juniper Networks Certified Internet
Label Distribution Protocol. see LDP (Label
Specialist, xvii
Distribution Protocol)
nondisclosure agreement, xx–xxi
Label object, 483, 483–484, 706
recertification requirements, xx
Label Request object, 484, 484–485, 706
registration procedures, xix
label values
resources for participants, xxi–xxiv
advertising, 511, 511–517, 513, 517
tips for taking exam, xxiii
defined, 707
website, xxi
labeled IPv4 unicast routes, 384–385
Join message
labeled VPN multicast routes, 387–388
defined, 706
labeled VPN unicast routes, 385–386
MSDP
label-switched path. see LSP (label-switched
Anycast RP, 420–421, 424–427
path)
interdomain, 429–431
label-switching router (LSR), 707
operational theory, 418
Layer 2 Circuit, 672–680
overview of, 400–405
ATM as PE-CE connection, 676–678
jpfe, 706
control plane, 672–674, 673
jroute, 706

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 746 Sunday, April 4, 2004 3:36 PM

746 Layer 2 VPNs – local significance

Ethernet VLANs as PE-CE connection, tunneling, 518, 518–523, 707


678–680 using through RSVP network, 518,
exam essentials, 681 518–523
Frame Relay as PE-CE connection, levels, IS-IS
674–676 contiguous set of Level 1 areas, 195
Layer 2 VPNs. see VPNs (virtual private exam essentials, 251
networks) flooding scope of LSPs, 193
Layer 3 VPNs. see VPNs (virtual private Level 1 routes, 243–246
networks) Level 2 routes, 248–251
LDAP (Lightweight Directory Access overview of, 193–196
Protocol), 707 lifetime, LSP, 192, 253, 255
LDP (Label Distribution Protocol), 499–523 Lightweight Directory Access Protocol
address message (LDAP), 707
defined, 707 line loopback, 707
exam essentials, 524 link
overview of, 508–510, 509 defined, 708
withdraw message, 510 hello, 708
database, 515–516, 707 protection, 579–583, 602–603, 708
defined, 706 link TLV, 533–534, 708
exam essentials, 524 link-local opaque LSAs, 93
Hello message link-state advertisements. see LSAs (link-state
defined, 707 advertisements)
overview of, 500–503, 520 link-state database
Q & A, 526–527 defined, 708
using LDP through RSVP network, IS-IS
520 areas and levels, 193, 193–196, 195
initialization message, 504, 707 database integrity, 191–192
keepalive message, 507–508, 508, 707 SPF algorithm, 192
label mapping message OSPF
defined, 707 database integrity, 94–95
exam essentials, 524 SPF algorithm, 95–100, 96–100
overview of, 512–517, 513 link-state PDUs. see LSPs (link-state PDUs)
label withdraw message link-state request list, 708
defined, 707 link-state request packet, 708
exam essentials, 524 link-state update, 708
overview of, 517, 517 load balancing, 285–287, 286
Layer 2 Circuit, 668 loading, 708
neighbors, 500–503, 502–503 Local Preference attribute
overview of, 499–500 defined, 708
review Q & A, 525–527 modifying, 349–353, 392
sessions overview of, 264–265, 265
establishing, 504–508 Q & A, 314, 316
exchanging information across, local significance, 708
508–517, 509–511, 513, 517

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 747 Sunday, April 4, 2004 3:36 PM

local-as command – LSP-Tunnel-IPv4 Filter-Spec object 747

local-as command defined, 72, 708


defined, 708 exam essentials, 154
exam essentials, 392 AS external, 88–89
overview of, 326–327 network, 79–80, 80
Local-RIB, 258, 278, 708 network summary, 80–84
local-user-name attribute, B:15 NSSA external, 89–93
logical AND Opaque. see Opaque LSA
defined, 19, 708 router
example of, 23 overview of, 74–77, 75
overview of, 20 sample OSPF network, 76, 77–79
logical evaluation, 19–20 LSP (label-switched path)
logical interface handle, 472 controlling behavior, 583–599
logical NOT adaptive mode, 584, 584–586
defined, 19, 709 explicit null advertisements, 586–588
example of, 23–24 LSP and routing protocol interactions,
overview of, 20 591, 591–599
logical operators Time-to-Live, 588, 588–591
defined, 709 CSPF algorithm steps
examples of administrative groups, 539–547, 540
AND, 23 CSPF pruning for include groups, 546
group, 24–27 overview of, 538–539
NOT, 23–24 defined, 707
OR, 22 exam essentials, 600
overview of, 20–22 priority and preemption, 547–554
logical evaluation, 19–20 traffic protection, 554–583
overview of, 19 fast reroute, 571–572, 572
logical OR link protection, 579–583
defined, 19, 709 node protection, 572–578
example of, 22 primary LSP paths, 555, 555–556
overview of, 20 secondary LSP paths, 556–563
longer match type, 21, 25, 33, 67, 709 standby secondary paths, 563–567
loops command, 330–331 using only secondary paths, 567–571
loose hops LSP entry TLV, 170–172, 171, 709
adaptive mode, 586 LSPs (link-state PDUs)
defined, 709 in area address TLV, 163
fast reroute, 573 defined, 708
secondary LSP paths, 556–562 exam essentials, 252
standby secondary LSP paths, 564, 566 in IP internal reachability TLV, 179
using only secondary LSP paths, 567–571 in IS reachability TLV, 165–168
loose path, 455, 486, 709 LSP-Tunnel Session Attribute object,
loss priority, 709, A:8–A:10 495–497, 496, 709
LSAs (link-state advertisements) LSP-Tunnel-IPv4 Filter-Spec object, 478,
ASBR summary, 85–87 478–479, 709
common header, 72–74, 73

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 748 Sunday, April 4, 2004 3:36 PM

748 LSP-Tunnel-IPv4 Sender Template object – MF (multi-field) classifier

LSP-Tunnel-IPv4 Sender Template object, MD5 (Message Digest 5) authentication


479–480, 480, 709 BGP, 292–293
LSP-Tunnel-IPv4 Session object, 470–471, defined, 710
471, 709 IS-IS network
LSR (label-switching router), 707 authentication TLV and, 172–174
checksum TLV and, 175
overview of, 203–204
OSPF, 107–108
M mean time between failure (MTBF), 710
MAC (Media Access Control) address, MED (Multiple Exit Discriminator) attribute
168–169 defined, 711
make before break operation, 586, 709 modifying, 336–349
management daemon (mgd), 709 with configuration statements,
Management Ethernet, 709 338–345, 339
Management Information Base (MIB), 709 exam essentials, 392
mapping agent, 710 overview of, 336–337
Martian address, 710 Q & A, 393, 395
Martian routes, 710 with routing policy, 345–349
Martini, Luca, 650 with selection statements, 337–338
MAS (mobile network access subsystem), 711 overview of, 264, 264
mask. see subnet mask Q & A, 315–316
master router, 710 Media Access Control (MAC) address,
match 168–169
criteria, 30–37 member AS number, 371–374, 376, 710
defined, 710 member AS values
type, 710 choosing, 375
MaxAge defined, 710
defined, 710 overview of, 373–374
LSA, 72 mesh, 710
Q & A, 156, 159 mesh groups
maximum transmission unit (MTU), 169, defined, 710
710 IS-IS network, 216, 216–218, 218
max-suppress value, 302, 710 MSDP, 419
MBGP (Multiprotocol BGP) Q & A, 254–255, 452, 454
defined, 712 message aggregation, 710
exam essentials, 392 Message Digest 5. see MD5 (Message Digest
IPv4, 381–388 5) authentication
Layer 2 VPNs, 388–391 metric-out command, 339–341, 711
overview of, 380–381 MF (multi-field) classifier
Q & A, 394–395 defined, 711, A:3
MBone, 710 exam essentials, A:21
MCS (Miscellaneous Control Subsystem), overview of, A:10–A:12
711 Q & A, A:23, A:25

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 749 Sunday, April 4, 2004 3:36 PM

mgd (management daemon) – multicast 749

mgd (management daemon), 709 signaling protocols


MIB (Management Information Base), 709 LDP. see LDP (Label Distribution
midplane, 711 Protocol)
Miscellaneous Control Subsystem (MCS), RSVP. see RSVP (Resource
711 Reservation Protocol)
mobile network access subsystem (MAS), 711 MP-Reach-NLRI (Multiprotocol Reachable
mobile point-to-point control subsystem NLRI) attribute
(MPS), 711 defined, 712
mobile station, 711 overview of, 273–274, 274
Mobile Station Integrated Services Digital Q & A, 314, 316
Network Number, 711 using MBGP, 381
Mobile Switching Center (MSC), 711 MPS (mobile point-to-point control
mobile transport subsystem (MTS), 711 subsystem), 711
monitor traffic command, 203 MP-Unreach-NLRI (Multiprotocol
MPLS (Multiprotocol Label Switching), Unreachable NLRI) attribute
455–527, 529–604 defined, 712
classifying packets, A:4 overview of, 274, 275
Constrained Shortest Path First, 530–554 Q & A, 314, 316
algorithm steps, 538–547, 540, 546 using MBGP, 381
LSP priority and preemption, 547–554 MSC (Mobile Switching Center), 711
using Traffic Engineering Database, MSDP (Multicast Source Discovery
530–538, 532 Protocol), 417–431
controlling LSP behavior, 583–599 Anycast RP, 420–427, 421
adaptive mode, 584, 584–586 configuring, 422–423
controlling Time-to-Live, 588, monitoring traffic flows, 424–427
588–591 operational theory, 420–421, 421
explicit null advertisements, 586–588 verifying status of network, 423–424
LSP and routing protocol interactions, defined, 711
591, 591–599 exam essentials, 449
defined, 712 inter-domain, 427–431, 428
exam essentials, 524, 600 mesh groups, 419
LSP traffic protection, 554–583 operational theory, 417–418, 418
fast reroute, 571–572, 572 peer-RPF flooding and, 419–420
link protection, 579–583 Q & A, 452–454
node protection, 572–578 MTBF (mean time between failure), 710
primary LSP paths, 555, 555–556 MTS (mobile transport subsystem), 711
secondary LSP paths, 556–563 MTU (maximum transmission unit), 169, 710
standby secondary paths, 563–567 multicast, 397–454
using only secondary paths, 567–571 defined, 711
providing LSP access to just ingress router, distribution tree, 711
597–599 exam essentials, 449–450
Q & A, 601–603 IPv4 routes, 382–384, 387–388
review Q & A, 525–527, 601–603 MSDP, 417–431
anycast RP, 420–427, 421
inter-domain MSDP, 427–431, 428

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 750 Sunday, April 4, 2004 3:36 PM

750 Multicast Source Discovery Protocol – Next Hop attribute

mesh groups, 419 Multiprotocol Label Switching. see MPLS


operational theory, 417–418, 418 (Multiprotocol Label Switching)
peer-RPF flooding, 419–420 Multiprotocol Reachable NLRI. see
PIM rendezvous points, 398–417 MP-Reach-NLRI (Multiprotocol
auto-RP, 406–410, 407 Reachable NLRI) attribute
bootstrap routing, 411–417, 412–413, Multiprotocol Unreachable NLRI. see
415 MP-Unreach-NLRI (Multiprotocol
establishing RPT, 400–401 Unreachable NLRI) attribute
establishing SPT, 401–404
static configuration, 398–400, 399
steady state operation of network,
404–405
N
Q & A, 451–454 N bit, NSSA, 138
reverse path forwarding, 431–448 named-path, 712
creating new RPF table, 432–447 naming conventions
using alternate RPF table, 447–448 overview of, 43–47
review Q & A, 451–454 regular communities, 27
scoping, 711 neighbors, 168–169
Multicast Source Discovery Protocol. see defined, 712
MSDP (Multicast Source Discovery IS neighbors TLV, 168, 168–169, 705
Protocol) LDP, 500–503, 502–503, 705
multi-field classifier. see MF (multi-field) NET (network entity title)
classifier defined, 712
multihop, 711 n-selector in, 713
multihop BGP network layer reachability information,
exam essentials, 312–313 608–610, 610
example, 283 Network Layer Reachability Information.
overview of, 283–285 see NLRI (Network Layer Reachability
multilevel IS-IS, 223–242 Information)
exam essentials, 252 network LSA, 79–80, 80, 712
external route default operation, 230–235 network service access point (NSAP), 712
internal route default operation, 223–230, Network Summary LSA
224 area route summarization, 142–150
route leaking, 235–242 defined, 712
multipath command overview of, 80–84
configuring multihop BGP, 283–284, 312 Q & A, 157, 159
defined, 711 Network Time Protocol (NTP), 712
overview of, 280–282 network-link advertisement, 712
Q & A, 314, 316 Next Hop attribute
Multiple Exit Discriminator. see MED defined, 712
(Multiple Exit Discriminator) attribute exam essentials, 312–313
Multiprotocol BGP. see MBGP overview of, 263, 263
(Multiprotocol BGP)

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 751 Sunday, April 4, 2004 3:36 PM

NLRI (Network Layer Reachability Information) – OSPF (Open Shortest Path First) 751

NLRI (Network Layer Reachability 1X, 686


Information) 1XEV, 686
defined, 381, 712 opaque ID
IPv4, 381–388 defined, 713
Layer 2 VPNs, 388–391 Opaque LSAs and, 94, 102
VPN-IPv4, 608–610, 610, 681 Opaque LSA
no-advertise, 268, 271, 712 defined, 713
no-authentication-check, 206 grace LSA and, 102–104
no-csnp-authentication, 207 OSPF traffic engineering, 531–535, 532
node protection, 572–578, 602–603, 712 overview of, 93
no-decrement-ttl, 589–590 Q & A, 601, 603
no-export, 268, 268–271, 712 opaque type, 102, 714
no-export-subconfed, 268, 713 Open message, BGP, 380–382, 714
no-hello-authentication, 206–207 Open Shortest Path First. see OSPF (Open
nonclient peer, 354–356, 713 Shortest Path First)
nondisclosure agreement, JNTCP, xx–xxi Open Standards Interconnect (OSI), 175, 714
no-propagate-ttl, 590–591 OpenConfirm state, 289, 291, 294–295, 376,
no-psnp-authentication, 207 714
NOT (!) logical operator. see logical NOT OpenSent state, 714
notification cell, 713 operational mode, 714
Notification message, 288, 713 Optical Carrier (OC), 714
not-so-stubby area. see NSSA (not-so-stubby OR operator. see logical OR
area) Origin attribute
NSAP (network service access point), 712 defined, 714
n-selector, 713 modifying
NSSA (not-so-stubby area) altering, 320–322
configuring default origin operation, 318–319
checking for support, 138 Q & A, 393, 395
overview of, 136–142 sample network, 320
sample network, 137 overview of, 261–262, 262
defined, 713 Q & A, 314, 316
exam essentials, 154 Originator ID attribute
external-link advertisements, 713 defined, 714
route summarization, 151, 151–153 overview of, 271–272, 272
NSSA external LSA, 89–93 route reflection, 354, 362–364
NTP (Network Time Protocol), 712 orlonger, 67, 714
null AS Path, 58, 713 OSI (Open Standards Interconnect), 175, 714
Null Register message, 405, 713 OSPF (Open Shortest Path First)
numeric range match conditions, 713 adding routes to inet.2, 436
address summarization
area routes, 142–150, 143
NSSA routes, 151, 151–153
O configuration options
Oakley, 713 authentication, 105–108
OC (Optical Carrier), 714 graceful restart, 101–105

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 752 Sunday, April 4, 2004 3:36 PM

752 OSPFv3 routing protocol – PE (provider edge) router

interface metrics, 109–115 P bit, NSSA, 138


virtual links, 115–127, 116 package, 714
defined, 714 packet data protocol (PDP), 714
Domain ID, 630–638, 631 packet flow, A:5
exam essentials, 154–155 Packet Forwarding Engine, 715
Hello packet, 714 Packet Loss Priority (PLP)
link-state advertisements bit, 716
ASBR summary LSA, 85–87 defined, 715
common LSA header, 72–74, 73 packets, spoofed, B:16–B:17
AS external LSA, 88–89 padding TLV, 169–170, 170, 715
network LSA, 79–80, 80 parentheses ( ), 19
network summary LSA, 80–84 Partial Sequence Number PDU. see PSNP
NSSA external LSA, 89–93 (Partial Sequence Number PDU)
opaque LSA, 93 passive command
router LSA, 74–79, 75–76 BGP connection collisions, 293–295
link-state database defined, 715
algorithm, 95–100, 96–100 Q & A, 315–316
database integrity, 94–95 passive node, 504, 715
for PE-CE route advertisements, 627–638, path attribute, 715
685–686 Path message, RSVP
review Q & A, 156–159 defined, 715
route type attribute, 631–633, 632 overview of, 463, 463–465
stub areas Q & A, 525, 527
configuring, 129–134 Path State Block, 465, 469, 471, 485, 715
configuring totally stub area, 134–136 PathErr message, RSVP, 466–467, 467–468,
not-so-stubby areas, 136–142, 137 715
sample network, 127–129, 128 PathTear message
traffic engineering extensions, 531–535, 532 defined, 715
OSPFv3 routing protocol, C:11–C:12 overview of, 468–469
outgoing I/O Manager ASIC, A:6 Q & A, 525, 527
output queues, A:12–A:18 path-vector protocol, 715
overlay network, 714 payloads, encrypting TACACS+, B:16
overload bit, IS-IS PCI (Peripheral Component Interconnect), 716
defined, 714 PCMCIA (Personal Computer Memory Card
overview of, 218–219 International Association), 716
permanent overload, 219–220 PDFs, study guides, xxv
temporary overload, 220–223 PDP (packet data protocol), 714
PDUs (Protocol Data Units). see also Hello PDU
for common IS-IS TLVs, 162–163
defined, 717
P exam essentials, 251
P (provider) router PE (provider edge) router
defined, 718 defined, 718
exam essentials, 681 exam essentials, 681
overview of, 607

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 753 Sunday, April 4, 2004 3:36 PM

PEC (Policing Equivalence Classes) – possible helper restart mode 753

operating of control plane, 613–619 PLMN (public land mobile network), 718
overview of, 607 PLP (Packet Loss Priority)
Q & A, 682, 684 bit, 716
using BGP for PE-CE connection, defined, 715
622–627 PLR (point of local repair), 579, 716
using OSPF for PE-CE connection, point of local repair (PLR), 579, 716
627–630 point-to-point adjacency state TLV,
PEC (Policing Equivalence Classes), 716 188–191, 189, 716
peer, 715 point-to-point links, 75
peer-RPF flooding poison reverse, 716
defined, 715 policies, security, B:3
MSDP operational theory, 418 policing, 716
overview of, 419–420 Policing Equivalence Classes (PEC), 716
penultimate hop popping (PHP), 465, 715 policy chains
penultimate router defined, 716
controlling TTL, 588–590 exam essentials, 64
defined, 456, 715 network map, 4
explicit null advertisements, 586 overview of, 2–9
link protection, 579 Q & A, 66, 69
LSP node protection, 578 policy expressions, 18–27
Perfect Forward Secrecy (PFS), 716 defined, 717
Peripheral Component Interconnect (PCI), defining, 18
716 exam essentials, 64
permanent virtual circuit (PVC), 716 examples
per-packet load balancing, 287 AND, 23
per-prefix load balancing, 285, 716 group, 24–27
Personal Computer Memory Card NOT, 23–24
International Association (PCMCIA), OR, 22
716 overview of, 20–22
PFS (Perfect Forward Secrecy), 716 logical evaluation, 19–20
PHP (penultimate hop popping), 465, 715 logical operators, 19
PIC (Physical Interface Card), 716 network map, 21
PIC (Physical Interface Connector), A:5 Q & A, 67–69
PIC I/O Manager ASIC, 716 policy subroutines
PIM (Protocol Independent Multicast) defined, 717
defined, 718 determining logic result of, 14–15
rendezvous points, 398–417 exam essentials, 64
auto-RP, 406–410, 407 network map, 11
bootstrap routing, 411–417, 412–413, overview of, 9–14
415 Q & A, 66, 69
establishing RPT, 400–401 pop, 716
establishing SPT, 401–404 possible helper restart mode
static configuration, 398–400, 399 defined, 717
steady state operation of network, IS-IS router in, 197
404–405 OSPF in, 102

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 754 Sunday, April 4, 2004 3:36 PM

754 PPP (Point-to-Point) – queuing

PPP (Point-to-Point), 716 provider edge router. see PE (provider edge)


precedence bits, 717 router
precedence bits, IP provider router. see P (provider) router
defined, 705, 717 Prune message, 404–405, 718
defining code points, A:7 PSNP (Partial Sequence Number PDU)
exam essentials, A:21 defined, 715
explicit null advertisements, 586 IS-IS network and, 170
IPv4, A:4 IS-IS restart operation, 197
multiprotocol label switching, 688 no-psnp-authentication option, 197
Q & A, A:25 push
precedence order defined, 718
logical operators, 19 link protection, 579
SPF algorithm, 95 using LDP through RSVP network,
preempt, 549–554, 717 522–523
preference, 717 PVC (permanent virtual circuit), 716
preferred address, 717
prefix limits, BGP, 296–301
prefix lists
defined, 717
Q
exam essentials, 64 Q & A (questions and answers)
overview of, 16–18 Border Gateway Protocol, 314–316,
Q & A, 67, 69 393–395
prefix-length-range, 717 Intermediate System to Intermediate
primary address, 717 System, 253–255
primary contributing route, 717 multicast, 451–454
primary interface, 717 Multiprotocol Label Switching, 525–527,
primary path 601–603
defined, 717 Open Shortest Path First, 156–159
overview of, 555, 555–556 routing policy, 66–69
Q & A, 601, 603 security, B:27–B:29
priority command, A:17 virtual private networks, 682–684
priority queuing, 717, A:19 QoS (quality of service), 718
priority values, 547–554, 601, 603 quad-wide, 718
private AS values, removing, 322–324, 323 qualified next hop, 718
protocol address, 717 quality of service (QoS), 718
Protocol Data Units (PDUs) querier router, 718
for common IS-IS TLVs, 162–163 questions and answers. see Q & A (questions
defined, 717 and answers)
exam essentials, 251 queuing
protocol families, 717 defined, A:4
Protocol Independent Multicast. see PIM output queues, A:12–A:18
(Protocol Independent Multicast) drop profile, A:12–A:14, A:13
protocol preference, 718 schedulers, A:15–A:18
protocols-supported TLV, 179, 179–180, Q & A, A:23–A:25
718 queue servicing, A:18–A:19

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 755 Sunday, April 4, 2004 3:36 PM

RA (restart acknowledgement) – restart candidate mode 755

regular expression operator, 719


R regular expression term, 719
regular expressions (regex)
RA (restart acknowledgement), 198
community
radio frequency interference (RFI), 718
complex, 50–56, 51
radio network controller (RNC), 718
exam essentials, 64–65
RADIUS (Remote Authentication Dial-In
simple, 47–50
User Service)
configuring routing policies with, 37
Access-Accept message, B:8–B:10, B:9
defined, 719
Access-Reject message, B:10
AS Path
Access-Request message, B:7–B:8
exam essentials, 65
authentication basics, B:4–B:5
operators, 57
defined, 719
overview of, 56–59
exam essentials, B:26
Q & A, 68–69
overview of, B:5–B:7
sample network path, 58
Q & A, B:27–B:29
reject action, 19, 719
Random Early Discard. see RED (Random
Remote Authentication Dial-In User Service.
Early Discard)
see RADIUS (Remote Authentication
rate limiting. see policing
Dial-In User Service)
rate policing. see policing
remove-private command
RBOC (regional Bell operating company),
backbone service for BGP peers and, 329
719
defined, 719
receive, 719
Q & A, 393, 395
recertification requirements, JNTCP, xx
removing private AS numbers with, 374
Record Route object. see RRO (Record
removing private AS values, 323
Route object)
rename command, 719
recursive lookup
rendezvous point tree (RPT)
BGP Next Hop, 263, 284, 313
defined, 398
defined, 719
establishing, 400–401
traffic-engineering-bgp-igp and, 594
rendezvous points. see RPs (rendezvous
RED (Random Early Discard)
points), PIM
defined, 718
Reply message, 719, B:14–B:15
exam essentials, A:21
Request for Comments (RFC), 609, 719
overview of, A:18–A:19
Request message, 719
regex. see regular expressions (regex)
resolve, 720
regional Bell operating company (RBOC),
Resource Reservation Protocol. see RSVP
719
(Resource Reservation Protocol)
Register message, 402–405, 719
resources, for JNTCP participants, xxii
Register Stop message, 403, 719
Response message, 720
registration procedures, JNTCP, xix
restart acknowledgement (RA), 198
regular communities, 27–42
restart candidate mode
match criteria usage, 30–37
defined, 720
modifying current values, 37–42
IS-IS router in, 197
overview of, 27–30
OSPF in, 102
sample network, 28

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 756 Sunday, April 4, 2004 3:36 PM

756 restart state bit – router LSAs

restart state bit, 287, 720 overview of, 301


restart-duration, 200 with routing policy, 307–311
restart-time, 292 route distinguisher, 611, 611–613, 721
result cell, 720, A:5 route filter, 721
Resv message, RSVP, 465–466, 525, 527, route flapping, 301–302, 306, 721
720 route identifier, 721
Resv State Block, 465, 720 route leaking
ResvConf message, 457, 720 defined, 721
ResvErr message, 457–460, 467–468, 720 overview of, 235–242
ResvTear message, 469–470, 525, 527, 720 Q & A, 254–255
reuse value route redistribution, 629–630, 721
damping figure of merit, 301–302 route reflection, 354–370
damping with routing policy, 308 with Cluster List BGP attribute, 272, 272
defined, 720 configuring network
reverse path forwarding. see RPF (reverse hierarchical route reflection, 364–367,
path forwarding) 365
reverse path multicasting (RPM), 720 overview of, 359–364
revertive sample network, 360
defined, 720 using two route reflectors, 367–370
primary paths as, 555, 567 defined, 721
rewrite rules exam essentials, 392
defined, 720, A:4 operational theory
exam essentials, A:22 basic network, 355
overview of, A:19–A:20 choosing Cluster ID, 359
Q & A, A:23, A:25 designing for redundancy, 358, 358–359
RFCs (Requests for Comments), 609, 719 hierarchical route reflection, 356–358,
RFI (radio frequency interference), 718 357
RIB (Routing Information Base), 721 with Originator BGP attribute, 271–272,
rib-group 272
adding BGP routes to inet.2, 441–447 Q & A, 393–395
adding IS-IS routes to inet.2, 436–437 route reflectors. see RR (route reflectors)
adding local routes to inet.2, 432–435 route tag, VPN, 639, 639–641
adding OSPF routes to inet.2, 436 route target
defined, 720 defined, 721
overview of, 432 exam essentials, 681
using inet.2 as RPF table, 447–448 overview of, 613–614
RIP (Routing Information Protocol), 721 Q & A, 682, 684
RIPng routing protocol, C:10–C:11 router address TLV, 533, 721
RNC (radio network controller), 718 Router ID, 721
route damping, 301–311 router LSAs
configuring, 303–307 defined, 721
defined, 720 overview of, 74–77, 75
exam essentials, 313 Q & A, 156–157, 159
figure of merit value, 301–303 sample OSPF network, 76, 77–79

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 757 Sunday, April 4, 2004 3:36 PM

Router Priority – RRO (Record Route object) 757

Router Priority, 721 RPF (reverse path forwarding), 432–447


router-link advertisement, 721 creating new table
routes adding BGP routes to inet.2, 441–447
adding to inet.2, 432–435, 433 adding IS-IS routes to inet.2, 436–441
selecting BGP, 276–282 adding local routes to inet.2, 432–435,
decision algorithm, 276–278 433
skipping algorithm steps, 280–282 adding OSPF routes to inet.2, 436
verifying algorithm outcome, 278, defined, 720
278–280 exam essentials, 450
routing domain, 721 Q & A, 453–454
Routing Engine, 721 unicast, 728, B:18–B:25, B:20
Routing header, 721, C:5, C:5 using alternate RPF table, 447–448
Routing Information Base (RIB), 721 using alternate table, 447–448
Routing Information Protocol (RIP), 721 RPM (reverse path multicasting), 720
routing instance, 722 RPs (rendezvous points), PIM, 398–417
routing policy advertising capabilities of, 414–417, 415
communities auto-RP, 406–410, 407
extended, 42–47, 43 bootstrap routing, 411–417, 412–413, 415
regular, 27–42, 28 defined, 719
regular expressions, 47–56, 51 establishing RPT, 400–401
exam essentials, 64–65 establishing SPT, 401–404
modifying MED attribute with, exam essentials, 449
345–349 MSDP
AS Path Anycast-RP, 420–427, 421
locating routes, 59–64 inter-domain, 427–431, 428
modifying with, 331, 331–336 operational theory, 417–418
regular expressions, 56–59, 57–58 peer-RPF flooding, 419–420
processing methods static configuration, 398–400, 399
policy chains, 2–9, 4 steady state operation of network, 404–405
policy expressions, 18–27, 21 RP-Set
policy subroutines, 9–15, 11 defined, 722
prefix lists, 16–18 exam essentials, 449
review Q & A, 66–69 overview of, 415
route damping with, 307–311 RPT (rendezvous point tree), 398, 400–401
routing protocol daemon (rpd), 722 RR (route reflectors)
routing protocols, IPv6 designing for redundancy, 358–359
BGP and, C:14–C:17 large full mesh of peerings, 357
exam essentials, C:18 overview of, 354–356
IS-IS and, C:13–C:14 Q & A, 393, 395
OSPFv3 and, C:11–C:12 using two, 367–370
RIPng and, C:10–C:11 RRO (Record Route object)
routing table, 722 defined, 719
rpd (routing protocol daemon), 722 overview of, 486–489, 488
Q & A, 526–527

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 758 Sunday, April 4, 2004 3:36 PM

758 RSVP (Resource Reservation Protocol) – security

RSVP (Resource Reservation Protocol),


456–499 S
defined, 720
SA (security association), 722
exam essentials, 524
SA (source active) message
format, 457–458, 458
defined, 724
objects, 458–462, 470–496
mesh groups, 419
Detour object, 489–490, 489–493
operational theory, 417–418, 418
Explicit Route object (ERO), 485–486,
peer-RPF flooding, 419–420
486
SAFI (Subsequent Address Family Identifier),
Fast Reroute object, 493–494, 494
441, 443
Integrated Services Flowspec object,
SAP (Session Announcement Protocol), 723
476–478, 478
SAR (segmentation and reassembly), 722
Integrated Services Sender-Tspec
scaling methods, IBGP
object, 480–482, 482
confederations, 371–379, 372
IPv4 Error-Spec object, 474, 474–475
configuring network, 359–370, 360
IPv4 RSVP-Hop object, 471–473, 472
operational theory, 354–359, 355, 357–358
Label object, 483, 483–484
overview of, 353–354
Label Request object, 484, 484–485
route reflection, 354
LSP-Tunnel Session Attribute object,
SCB (System Control Board), 725
495–497, 496
SCG (SONET Clock Generator), 724
LSP-Tunnel-IPv4 Filter-Spec object,
schedulers
478, 478–479
defined, 722
LSP-Tunnel-IPv4 Sender Template
exam essentials, A:22
object, 479–480, 480
overview of, A:15–A:18
LSP-Tunnel-IPv4 Session object,
scheduling, A:4
470–471, 471
scoping, multicast, 711
Record Route object (RRO), 486–489,
SDH (Synchronous Digital Hierarchy), 725
488
SDP (Session Description Protocol), 723
Style object, 475–476, 476
SE (shared explicit) reservation style
Time-Values object, 473, 473
defined, 723
overview of, 456–457
enabling in adaptive mode, 584, 584–586
Path message, 463, 463–465, 722
overview of, 475–476
PathErr message, 466–467
secondary path, LSP
PathTear message, 468–469
defined, 722
Resv message, 465–466, 722
overview of, 556–563
ResvErr message, 467–468
using only, 567–571
ResvTear message, 469–470
Secure Hash Algorithm (SHA-1), 722
review Q & A, 525–527
secure shell (SSH), 722
sessions, 497–499, 722
security
signaled LSP, 722
controlling network attacks
using LDP through, 518, 518–523
defining spoofed packets, B:16–B:17
unicast reverse path forwarding,
B:18–B:25
using firewall filters, B:17–B:18

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 759 Sunday, April 4, 2004 3:36 PM

security association (SA) – SSB (System Switching Board) 759

exam essentials, B:26 single-connection command, B:12,


principles, B:2–B:3 B:28–B:29
review Q & A, B:27–B:29 site identifiers, 657–660, 723
systematic, B:3 SMS (Short Message Service), 723
user authentication, B:3–B:16 Smurf attacks, B:16–B:17
basics, B:4–B:5 SNMP (Simple Network Management
RADIUS, B:5–B:10 Protocol), 723
TACAS+, B:11–B:16 SNPA (sub-network point of attachment),
security association (SA), 722 168
Security Parameter Index (SPI), 722 SNPA (Sub-Network Point of Attachment),
segmentation and reassembly (SAR), 722 725
Serving GPRS Support Node (SGSN), 722 soft state, 724
Session Announcement Protocol (SAP), 723 software
session attribute object, 723 JNCIS exam, xxv
Session Description Protocol (SDP), 723 JUNOS documentation in PDF, xxv
setup priority SONET (Synchronous Optical Network)
defined, 723 defined, 725
overview of, 547 SONET Clock Generator (SCG), 724
priority values, 547 source active message. see SA (source active)
SFM (Switching and Forwarding Module), message
725 source-based tree, 724
SGSN (Serving GPRS Support Node), 722 source-specific multicasting, 724
SHA-1 (Secure Hash Algorithm), 722 sparse mode, 724
shared explicit. see SE (shared explicit) SPF (shortest path first) algorithm
reservation style defined, 723
shared tree, 723 IS-IS network, 192
shim header, 456, 723 OSPF
Short Message Service (SMS), 723 calculation example, 97–100, 97–100
shortest path first. see SPF (shortest path first) components, 96–97
algorithm exam essentials, 154
shortest path tree (SPT) overview of, 95–96
defined, 398 Q & A, 156, 159
establishing, 401–404 SPI (Security Parameter Index), 722
shortest-path tree, 723 Split Horizon, 724
show route receive-protocol, 28, 52, 723 spoofed packets
SIB (Switch Interface Board), 725 exam essentials, B:26
signaled path, 723 overview of, B:16–B:17
Signaling System 7 (SS7), 723 Q & A, B:27, B:29
simple community regular expressions, SPQ (Strict Priority Queuing), 724
47–52 SPT (shortest path tree)
Simple Network Management Protocol defined, 398
(SNMP), 723 establishing, 401–404
simplex interface, 723 SS7 (Signaling System 7), 723
SSB (System Switching Board), 725

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 760 Sunday, April 4, 2004 3:36 PM

760 SSH (secure shell) – TE (traffic engineering)

SSH (secure shell), 722 Switch Interface Board (SIB), 725


stale-route-time option, 292 Switching and Forwarding Module (SFM),
standby 725
defined, 724 Synchronous Digital Hierarchy (SDH), 725
Q & A, 601 Synchronous Transport Module (STM), 725
secondary paths, 563–567 Synchronous Transport Signal (STS) Level 1,
Start message, 724, B:12–B:14 725
static configuration, 398–400, 399 sysid, 725
static LSP (static label-switched path), 724 syslog, 725
static path, 724 System Control Board (SCB), 725
static route, 724 System Switching Board (SSB), 725
static RP, 398–400, 399, 724 systematic security, B:3
steady state, 404–405
STM (Synchronous Transport Module), 725
strict, 724
strict hop, 465, 724
T
STS (Synchronous Transport Signal) Level 1, TACACS+ (Terminal Access Controller
725 Access Control Sytem), B:11–B:16
stub areas Continue message, B:14
configuring, 129–134 defined, 726
configuring totally stub area, 134–136 encrypting payloads, B:16
defined, 127, 724 exam essentials, B:26
exam essentials, 154 overview of, B:11–B:12
Link ID and Link Data fields, 75 Q & A, B:28–B:29
not-so-stubby areas, 136–142, 137 Reply message, B:14–B:15
Style object, 475–476, 476, 725sample Start message, B:12–B:14
network, 127–129, 128 targeted hello
sub-AS, 725 defined, 726
subnet mask, 725 Layer 2 Circuit exam essentials, 681
Sub-Network Point of Attachment (SNPA), LDP Hello message, 501
168, 725 using LDP through RSVP network, 520
subroutines TCP (Transmission Control Protocol)
defined, 9 BGP using, 292
policy defined, 727
determining logic result of, 14–15 port 179, 726
network map, 11 tcpdump, 726
overview of, 9–14 TE (traffic engineering)
Subsequent Address Family Identifier (SAFI), database, 726
441, 443, 725 defined, 726
summary-link advertisement, 725 Extended IS reachability and, 175–177
suppress value IP router ID TLV, 726
damping figure of merit, 301–302 RSVP, 457
damping with routing policy, 308 wide metrics, 211–215, 212
defined, 725

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 761 Sunday, April 4, 2004 3:36 PM

technical documentation – tree database 761

technical documentation, Juniper networks, IS neighbors TLV, 168, 168–169


xxii IS reachability TLV, 165–168, 166
TED (Traffic Engineering Database), LSP entry TLV, 170–172, 171
530–538 padding TLV, 169–170, 170
exam essentials, 600 point-to-point adjacency state TLV,
IS-IS extensions, 535–538 188–191, 189
OSPF extensions protocols supported TLV, 179,
opaque LSA format, 532 179–180
overview of, 531–535 traffic engineering IP router ID TLV,
Q & A, 601, 603 183, 183–184
Terminal Access Controller Access Control Q & A, 253, 255
Sytem. see TACACS+ (Terminal Access token-bucket algorithm, 726
Controller Access Control Sytem) ToS (type of service), 727
terminating action, 64, 726 totally stubby area, 134–136, 726
terms, 726 traffic engineering. see TE (traffic
Third-Generation Partnership Project engineering)
(3GPP), 686 Traffic Engineering Database. see TED
through, 726 (Traffic Engineering Database)
Timeout timer, 726 traffic engineering IP router ID TLV, 183,
Time-to-Live. see TTL (Time-to-Live) 183–184
Time-Values object, 473, 473, 726 traffic protection, LSP, 554–583
TLV (type, length, value) fast reroute, 571–572, 572
defined, 727 link protection, 579–583
exam essentials, 251 node protection, 572–578
grace LSA, 102–103 primary LSP paths, 555, 555–556
IS-IS network, 162–191 secondary LSP paths, 556–563
area address TLV, 163–165, 164 standby secondary paths, 563–567
authentication TLV, 172–174 using only secondary paths, 567–571
checksum TLV, 174, 174–175 traffic-engineering bgp-igp, 594–596
common TLVs, 162–163 traffic-engineering bgp-igp-both-ribs,
dynamic host name TLV, 186, 596–597
186–187 traffic-engineering mpls-forwarding,
extended IP reachability TLV, 597–599
184–186, 185 training courses, Juniper networks, xxii
Extended IS reachability TLV, transient interfaces, 726
175–177, 176 transit area, 122–123, 726
graceful restart TLV, 187, 187–188 transit links, 75
IP external reachability TLV, 180–182, transit router, 727
181 Transmission Control Protocol. see TCP
IP interface address TLV, 182, (Transmission Control Protocol)
182–183 transmit-rate command, A:15–A:16
IP internal reachability TLV, 177–179, transport mode, 727
178 tree database
defined, 727

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 762 Sunday, April 4, 2004 3:36 PM

762 triggered updates – User Datagram Protocol (UDP)

Q & A, 156, 159 UDP (User Datagram Protocol), 728, B:5


SPF algorithm, 96–100, 97–100 ULTRAN (UMTS Terrestrial Radio Access
triggered updates, 727 Network), 728
Triple-DES, 727 UMTS (Universal Mobile
Tspec object, 480–482, 482, 727 Telecommunications System), 728
TTL (Time-to-Live) UMTS Terrestrial Radio Access Network
overview of, 588, 588–589 (ULTRAN), 728
using no-decrement-ttl command, unicast reverse path forwarding. see uRPF
589–590 (unicast reverse path forwarding)
using no-propagate-ttl command, unicast routes
590–591 adding BGP routes to inet.2, 441
tunnel, 727 defined, 728
tunnel mode, 727 labeled, 384–385
Tunnel PIC, 727 labeled VPN, 385–386
2-Way, 686 overview of, 381–382
Type 1 LSA. see router LSAs uninterruptible power supply (UPS), 728
Type 10 LSA. see Opaque LSA unit, 728
Type 11 LSA. see Opaque LSA Universal Mobile Telecommunications
Type 2 LSA. see network LSA System (UMTS), 728
Type 3 LSA. see Network Summary LSA Up adjacencies, 216, 216–218, 218
Type 4 LSA. see ASBR Summary LSA Up/Down bit. see U/D (Up/Down) bit
Type 7 LSA. see NSSA external LSA Update message
Type 9 LSA. see grace LSA; Opaque LSA defined, 728
type of service (ToS) End-of-RIB marker fields in, 291
defined, 727 overview of, 258–259, 259
type-of-service byte restarting BGP sessions and, 287
migrating to IPv6 format, C:2 Update timer, 728
overview of, A:4 UPS (uninterruptible power supply), 728
Q & A, A:24–A:25 upto, 728
type, length, value. see TLV (type, length, uRPF (unicast reverse path forwarding)
value) defined, 728
overview of, B:18–B:25
Q & A, B:27, B:29
sample network, B:20
U user authentication, B:3–B:16
U/D (Up/Down) bit basics, B:4–B:5
Extended IP reachability TLV, 184–186, exam essentials, B:26
185 RADIUS, B:5–B:10
IP external reachability TLV, 180–182, TACAS+, B:11–B:16
181 User Datagram Protocol (UDP), 728, B:5
IP internal reachability TLV, 177–179,
178

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 763 Sunday, April 4, 2004 3:36 PM

V bit – WDM (wavelength-division multiplexing) 763

Layer 2 VPNs, 650–680


V ATM as PE-CE connection, 660–664
encapsulations for PE-CE connection,
V bit, 74, 728
667–671, 668
values
Ethernet VLANs as PE-CE connection,
BGP attribute, 260–261
664–667
damping figure of merit, 301–302
Frame Relay as PE-CE connection,
modifying community, 37–42
655–660
in simple community expressions, 47–50
information community, 653, 707
VCI (vapor circuit identifier), 728
infrastructure, 651, 651–655, 653–654
VCI (vapor corrosion inhibitor), 728
overview of, 388–391, 650–651
VCT (VPN connection table), 607, 651, 652
Layer 3 VPNs, 608–650
VFT (VPN forwarding table), 607, 729
basic operational concepts, 613–621
virtual circuit, 673, 728
Internet access for VPN customers,
virtual links
641–650, 642–644, 646
configuring, 122–127
labeled VPN unicast routes, 385–386
connecting remote OSPF area, 115–122,
Network Layer Reachability
116
Information, 608–610, 610
defined, 728
Route Distinguishers, 611, 611–613
exam essentials, 154
using BGP for PE-CE route
Link ID and Link Data fields, 75
advertisements, 622–627
virtual path, 729
using OSPF for PE-CE route
Virtual Router Redundancy Protocol
advertisements, 627–638,
(VRRP), 729
631–632
VLAN (virtual local area network), 728
VPN route tag, 639, 639–641
VPI (virtual path identifier), 729
MBGP
VPN connection table (VCT), 607, 651, 652
labeled VPN multicast routes, 387–388
VPN forwarding table (VFT), 607, 729
labeled VPN unicast routes, 385–386
VPN-IPv4 NLRI
Layer 2 VPNs, 388–391
exam essentials, 681
overview of, 380
overview of, 608–610, 610
review Q & A, 682–684
Q & A, 682, 684
VRF (VPN routing and forwarding table),
VPNs (virtual private networks), 605–684
607, 729
basics, 606–608
VRRP (Virtual Router Redundancy
defined, 729
Protocol), 729
exam essentials, 681
Layer 2 Circuit, 672–680, 673
ATM as PE-CE connection, 676–678
control plane, 672–674, 673 W
Ethernet VLANs as PE-CE connection, WCDMA (Wideband Code Division
678–680 Multiple Access), 729
Frame Relay as PE-CE connection, WDM (wavelength-division multiplexing),
674–676 729

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.
4072cINDX.fm Page 764 Sunday, April 4, 2004 3:36 PM

764 website – WRR (weighted round-robin)

website, JNTCP, xxi external routes and, 233–235


weighted round robin (WRR), 729 overview of, 211–215, 212
WF (wildcard filter) reservation style, Wideband Code Division Multiple Access
475–476, 729 (WCDMA), 729
wide metrics WRR (weighted round-robin), 703, 729
defined, 729

Copyright © 2004 SYBEX Inc., 1151 Marina Village Parkway, Alameda, CA 94501. World rights reserved.

You might also like