Openstack is one of the most important solution to build Cloud environment and provide a complete solution to create a multi tenants and redundant datacenter. Using Openstack gives capabilities to controls large pools of compute, storage, and networking resources throughout a datacenter, all managed through a dashboard that gives administrators control while empowering their users Read more
Most of the times Network engineer have to generate a lot of configuration to deploy new services. Generate same configuration with few changes to adapt configuration to each device is really boring and subject to many human errors. In this blog post, we will see how to easily generate configuration for many devices based on Read more
Most of the time, OSPF as a CE to PE protocol could be deployed using basic Shamlink between your PE. But sometimes, it is necessary to deals with multiple OSPF domain in the same MPLS VPN. In that case, RFC 4577 provides a solution with route tagging over the backbone. This article will provide some Read more
BGP is used to announce IP to everyone on Internet but also to announce VPN, FlowSpec, and so on. In this blog post, we will try to present main BGP options used to calculate PATH and how to configure BGP options with Junos devices.
Juniper provides Virtual SRX images called Firefly Perimeter. With this virtual edition, you can configure lot of functionnalities available on hardware SRX : Routing, firewalling, IPSec, UAC and so on. So you can also configure clustering to deploy your Security devices over 2 different ESX.
Flowspec is a new method defined in RFC 5575 that aims to provide traffic filtering or Deny of Service mitigation. This method is based on BGP and introduce new NLRI to transport information across your network. Informations are encoded into new NLRI (AFI=1 SAFI=133). This blog post will describe how configure juniper bgp flowspec
This article will talk about how to configure Cone Nat on any SRX devices. This function is helpful when your network transport some protocols not covered by any ALG and where some sessions are dynamically created by end points. For example, it is not necessary to open big port’s range for your SIP devices
Few months ago, we talked about Ruby to interact with your Junos devices. But you can use lot of langages such as Perl or Python. In this article, we will focuse on Python library which seems to be one of the most used library for DevOps. And in order to cimplify your development, Juniper developped Read more
Recently, I have to work on RSVP options to reserve bandwith in a customer MPLS network. So this article tries to sum up some keypoints. If you want to read more about RSVP TE and its use in a network, you can refer to Tim Hoffman Blog Post.
One way to interconnect Customer Edge routers to Provider Edge routers is to configure OSPF between devices. it allows routers to share their routing table together and propagate all new route inside the VPN. Using OSPF as a CE to PE protocol imply some critical points : OSPF is not forwarding through your VPN. So Read more