Transcript for Chat: 'JUNOS Live Chat', Tue Sep 01 11:00AM PDT 2009
ac: Welcome to the JUNOS live chat, we will start in 4 minutes
ac: Feel free to submit your question ahead of time
chozhall1: Harry, are there any plans to update sybex book series? Working
on JNCIE-M and looking for all the resources I can find...
drdata: To chozhall1 We are working on an updated errata list that can
be sent out, but currently no plans for offcial updates..
Toufiq-ur-Rehman: Hello Doug
Doug_Marschke: Hello All, thanks for coming!
Toufiq-ur-Rehman: Thanks a lot
Toufiq-ur-Rehman: Its 12am in our country
ac: Thanks for joining us Toufiq-ur-Rehman
chozhall1: What tips, tricks, and/or suggestions do you have for JNCIE-M
prep besides the obvious read until your eyes bleed?
Doug_Marschke: To chozhall1 I hope your eyes don't bleed, that would
make the test hard 
There are some certification bootcamps out there, one of
them by Proteus Networks. I would consider that one the best, lol.
drdata: To chozhall1 Actually practice is better than reading. You
must make mistakes, and have a good idea how to quickly isolate and correct. Reading does not develop
those skills.
Ankur: Hi everybody, a general question regarding ospf
redrover23: I attended CJNR training a few years ago and still have the
books. I have revision 6.b. What version is it now? I'm trying to determine if
they are still good for pursuing certs.
drdata: I think the cjnr is not much updated and still largely relavent.
Ankur: what's teh practical significance of totally stubby area, I
haven'e seen anywhere does Junos doesn't support it?
Doug_Marschke: To Ankur Historically, it was a scalabilty issue with
lower performance routers. These days, it is really used for security policy
and visibility. JUNOS supports stubby areas
zrcheng: I am reading ER book, is it possible to get the whole config in
text file for each chapter?
drdata: To zrcheng depends on teh chapter. I think I saved configs for
my chapters. Send me an email harry@juniper.net
jmattan: Reminder: to ask questions, you need to be logged into J-Net.
If you're not a member, join for free right now by clicking on
"register" on the top left o your screen.
MarkG: Hello Doug, thanks for taking the time.
sfouant: can you tell us what might happen with the JNTCP program moving
forward, especially in light of the new SRX platforms... how will the tracks be
broken up, and will JNTCP create a JNCIE-SEC or something equivalent to focus
on Enhanced Services in JUNOS?
drdata: To sfouant A good q. Always check the latest info on the
website.
redrover23: Are there any plans to develop a high density (maybe 4 port)
serial EIA-530 PIC?
drdata: To redrover23 Not aware of any. Sorry
MarkG: I've read both the books and found them excellent. Maybe one
improvement for a future version of the EX book might be addding a QoS chapter
as I can't find much info on QoS on the EX series.
Doug_Marschke: To MarkG I agree 
We had a page count issue with the
publisher, so couldn't add QoS, but the routing book has some great Qos info.
Most of that would also apply to the Ex
sfouant: well in light of 'JUNOS Enterprise Routing' and 'JUNOS
Enterprise Switching', any plans to write any new books on Enhanced Services?
drdata: To sfouant Not at present. Wanted to keep what family I have
left. ARe you volunteering?
jmattan: To sfouant: 'll actually be hosting a live chat in 3 weeks
(Sept 15) on enhancements to the certification program. We will have a new SEC
cert (JNCIS-CERT) and we can talk more about it then. Suffice it to say, it
will have a lot of SRX material.
zrcheng: thanks. a question regarding services in ER book, is it
possible to do NAT and IPsec at same time, say the traffic got source nat then
go through IPsec tunnel?
Doug_Marschke: To zrcheng Simple answer is Yes.
ac: Thanks everyone for all the great questions. Doug and Harry will
answer your questions in the orders received.
jmattan: Toufiq: We're going to limit this live chat to Enterprise topics and
things like IS-IS don't fall within the scope of the event. We're happy to
review those questions offline or, better yet, go ahead and post your questions
on J-Net for the entire Juniper community to see and comment on.
redrover23: There arent many testing center options in San Diego. Are there plans to certify more
testing sites in San DIego?
jmattan: To redrover23 To be honest, I am not sure what plans we have to
get more testing centers in San Diego.
If you send me an email offline (jmattan@juniper.net) I can do some research
for you.
sfouant: Doug and Harry, given that the structure of 'Juniper Enterprise
Routing' is quite different from that in the JNCIP-M AND JNCIE-M Study Guides,
can you outline what would be your best course of action for preparing for the
JNCIE-ER exams using this book?
drdata: To sfouant to add, one reason the approach is different is the
lack of an ex hands-on exam, and the desire to break free of the "good for
cert only" brading.
Doug_Marschke: To sfouant I would say to set-up our topo and walk
through the examples. If you can follow and configure each example, you will be
fully prepared for the test.
zrcheng: if limiting the NAT using interface style, need to apply on
inside interface?
Doug_Marschke: To zrcheng Not sure I understand your question. Interface
style does not have an inside interface. For interface style, you can apply a
ipsec and NAT service set on the same interface. Hope this helps.
MarkG: Regarding the QoS, what platform is the EX 'based on'? Should I
use the configuration examples for the M- or J-series (e.g. regarding how the
packets are serviced)?
drdata: To MarkG Excelent q. I beleive it is more J-series than M. The
specs I have are: Strict Priority (SP), Shaped Deficit Weighted Round Robin
(SDWRR), and mixed SP and SDWRR.
kellyk7: Does anybody have recomendations on a Simulator or Test
environment.. Can anything be set up in VMware?
Doug_Marschke: To kellyk7 Official answer is No. But we see people
posting on this all the time for general JUNOS. However, we have some options
for live gear at Proteus too.
jmattan: Sfouant: No. We're not saying that. Enterprise Switching is a
separate track. Come back in 3 weeks when we talk about the cert program
enhancements.
drdata: anymore qs folks? Getting quite in here.
jmattan: this question came in prior to the event. Q: Most of Juniper
printed books are not found normally in markets so students need to be download
it from internet so what�s the plan of Juniper to find some solutions so that
every one can purchase it from markets. A: Most of our JUNOS books are
published by O�Reilly Media. They can be found on most internet bookstores.
In China, India, and Europe,
individual local publishers may, or may not, choose to translate. If you ever
have problems, go to www.oreilly.com and search for the name of the JUNOS
title. Another great place to find our books is www.juniper.net/books as all of
our books are listed here.
zrcheng: Maybe I am wrong, I thought if you apply a ipsec and NAT
service set on the same interface, the traffic will go through one or the
other, not one and another.
Doug_Marschke: To zrcheng No, there is an order of operations. This is
actually in the services chapter, so SFW, NAT, and IPSEC go through an order
depending on input or output direction.
Chema: Hello. Is JUNOS Enterprise Routing book covering JNCIE-ER
scenarios, like old Sybex books covers JNCIP-M and JNCIE-M scenarios.
Doug_Marschke: To Chema The information is presented differently than
the sybex books but it is all there.
jtb: question to admin. My connection was down a few minutes and I had
to refresh the chat, no old question/answers seen. Is the chat recorded for
future review ?
ac: To jtb We will post the chat transcript in the JUNOS board
jmattan: Welcome to new arrivals! Today we are talking with Harry
Reynolds and Doug Marschke, authors of both the JUNOS Enterprise Switching and
JUNOS Enterprise Routing books. They�ll answer questions regarding topics
found in the books like high availability, spanning tree, intro to virtual
chassis, etc. They will also answer your JUNOS certification related questions
as these books are official study guides for some of the exams.
spuluka: A question on the best configuration to use for 802.1x secured
ports in a UAC deployment. We are planning on four VLANS in the system: public
internet only, full internal, partner limited access and remediation. The
deployment scenario is for the conference room meetings. They often bring in
little switches and there is a mix of internal and external laptops there. I'm
trying to figure out the best way to setup these ports.
drdata: To spuluka A complex q. I think a combination of radius based
auth and a guest vlan for those that fail auth/do not support 802.1x may work.
kellyk7: For the exams and real life is there a reason to become
proficient with J-web.. or stick with CLI
Doug_Marschke: To kellyk7 Currently for the lab exams, there is no Jweb,
but there is for the written exams. In my experience, I have several customers
who use jweb for remote locations, but it is usually fairly staright forward.
sfouant: do you know of any plans to mirror the configuration of VLANs
and Routed-VLAN Interfaces between the EX series and the MX series, currently
each has a different methodology for configuration, it would make more sense
for Juniper to come up with a standardized approach which could be used on either
platform
drdata: To sfouant One junos, eh? I have seen more than a few
compliants on this. IIRC, there was a "good" reason for the irb vs
vlan interface contruct. AFAIK, this will not change soon.
zrcheng: thanks, is there a ER and EX combined IE in the future?
jmattan: To zrcheng Not sure. I'll be meeting with our Training and
Certification team to prep for the certification live chat on Sept 22 (3 weeks
from today). We can answer that question then.
Doug_Marschke: For all guests out there, feel free to create a user name
so you can ask questions
BryanM: Is there an IE-FW cert in the pipeline?
Doug_Marschke: To BryanM Yes, but I see a very long pipe, hope the
string is long too.
kellyk7: OK can you give a what to expect in the area of Monitoring and
Real time performance. is Sflow hit very hard on the exams
drdata: To kellyk7 as always we are not alowed to reveal exam topic
specifics. Always check latest cert roadmap info on the web. That said, the er
book is based on the class, and the exam is based on both. I do not recall much
focus on rpm in there.
redrover23: Do the JNCIA (-ER) and JNCIS (-ER) have configuration
simulations? Or is it all MC?
Doug_Marschke: To redrover23 There are no configuration simulations like
you may be used to on the cisco exams. However, there are questions that may
ask you about Juniper configurations or to understand operational output.
chozhall1: How do accomplish a default-information originate (OSPF) in
JunOS?
drdata: To chozhall1 Generally you need to define a local 0/0, as a
static with reject/discard/or forwarding next hop. Can also be an aggregate or
generated. Then write policy that is applied as export to advertise the
default. On a stub area setting a default metric results in generation of a
default w/o the need for a static and related export policy.
sfouant: on a similar note, it seems that the functionality of doing
NAT, VPNs, and Firewall services is much more streamlined and intuitive in the
Enhanced Services methodology, especially for those who have previous
experience with ScreenOS devices. Do you know if Juniper has any plans to
abandon the whole service-set model (as outlined in the Enterprise Routing
book), in favor of the Enhanced Services approach?
Doug_Marschke: To sfouant I don't have roadmap view, but on the high end
systems, the "old style" services will be around for quite awhile due
to the packet vs. flow based nature of systems. I don't think we want a T320
flow based...yet...
jmattan: Reminder: these are all excellent questions to ask on J-Net.
You don't have to wait for a live chat to ask them (although we're glad you
did!). Registration on J-Net is free and you simply click "register"
in the upper right hand corner of forums.juniper.net.
jmattan: Remember: we're giving away 3 JUNOS book packs after this
event. You can win a pack consisting of a JUNOS Enterprise Routing and a JUNOS
Enterprise Switching book if you send us an answer to the secret question. The
secret question is coming soon and you can email the answer to
j-net@juniper.net
Doug_Marschke: Yes, I encourage it
zrcheng: Harry, I really enjory your writing, do you plan for an
enterprise "study guide"?
drdata: To zrcheng Thanks! We beleive it is a study guide. But couched
in teh context of an enterprise that needs to do x, and y. The book somewhat
predated the exam, hence the style change. Also, we felt many did not look at
the IP/IE, becuase they were seen as only useful for cert.
redrover23: How can you configure a serial interface to borrow an IP
address from another operational interface? SImilar to ip unnumbered on another
vendors gear?
Doug_Marschke: To redrover23 Easiest way is just to configure the family
on an interface. That will take the "primary" address of the system,
which is usually the loopback.
jmattan: This question came in prior to the event. Q: How does an EX
switch know which type of classifier (ieee 802.1p or dscp) to apply to a given
frame or packet? A L2 trusted port is one which looks at only 802.1p bits of
the packet. On the EX, a switched port becomes L2 trusted when an ieee802.1p
classifier is applied to it. Trunk interfaces are by default L2-trusted.
Chema: Do you think there is a market for ER and EX books, because OJRE
and OJXE pdf's are free on fasttrack?
drdata: To Chema we would like to think so. We did not just throw
"enterpirse" in the title. While ospf is ospf, the ER focuses on
migration scenarios, for example. Someday all will be free pdfs, and we feel
folks will want all 4.
sfouant: What type of rack rentals does Proteus offer and what does that
include? Do you have JNCIE simulations which might mirror what one would expect
to find on the exam?
Doug_Marschke: To sfouant We do actually offer practice exams for every
level of exam. This will include not just a rack to practice on, but a virtual
proctor to grade your work, and to give you feedback after your practice.
Doug_Marschke: To sfouant Contact me for more info doug@proteus.net
drdata: On the unnumber thing, note we started support of ethernet
unnumbered and .32 in 9.3
jmattan: this question came in prior to the event. Q: Are EX uplink
modules really hot swappable? A: Well, sort of. As I understand, if the switch
booted without one, or you swap in a different type of uplink module then was
present at boot, you must reboot to ensure the uplink is properly sensed.
jmattan: there are at least 2 more live chats in this series. On Sept 22
I'll be presenting on updates to our certification program, including new JUNOS
based certs. On October 6, Roy Lee, one of our Product Managers on JUNOS, will
take your questions on scripting and automation. Hope to see you at all 3 for a
chance to win not only books, but an Asus Netbook and an iPod Touch.
Doug_Marschke: Previous questions that came in:In what situations would
an import policy be used with OSPF? Answer: I would say never. The reason it is
there is to block externals into the FIB, but to me it is quick fix
"hack" and not a real long term solution.
jmattan: To be eligible for the Asus Netbook and iPod Touch prizes,
please email the following information to j-net@juniper.net by 5pm Pacific time
on October 6, 2009: � Your J-Net username � Your full name and mailing
address. � The answer to all three live chat secret questions in this series
(we�ll keep track after each event!)
sfouant: Can you tell us a little more about any bootcamps which might
assist folks in preparing for the lab certs?
Doug_Marschke: To sfouant Would love to I will try and not to
self-promote too much, but we offer JNCIE-ER, JNCIP, JNCIE-M certifcation
bootcamps all over the world, with a 98% pass rate. We mentor you to make sure
you will pass!
ac: Thanks to all who are attending, Jeff is about to announce the
secret question for the contest!
Chema: JNCIP-M is like "building" an ISP, and JNCIE-M is about
troubleshoot it. JNCIE-ER practical exam is more like "building" or
"troubleshooting"? Is any documentation avaiable during exam?
drdata: To Chema IMO, the -m is like build/ts a basic isp, and the -e is
the same for advanced topics.
Doug_Marschke: To Chema The JNCIE-ER is a little combo of both, but
mostly building an enterpirse from the ground up. Documentation is available
during the exam in the form of .pdf's
sfouant: After reading "Juniper Enterprise Routing", I am
wondering why the Authors have such a huge proclivity towards naming their
routers after alcoholic beverages...
drdata: To sfouant Like the into says. A fine way of preserving the food
value of grain. And doug does own a bar...
Doug_Marschke: To sfouant Well, I do own a bar in San Francisco.
jmattan: 9 minutes left! Get those questions in!!
chozhall1: If one takes and is successful at the JNCIE-ER could they
then skip the JNCIP-M?
Doug_Marschke: To chozhall1 Well, the are very different focuses. So one
does not preclude the other.
Chema: Don't forget than gin is made from juniper berries
spuluka: What are the design considerations in deciding when to run OSPF
enabled interfaces on the data center switches rather than at the
router/firewall?
drdata: To spuluka Hmm. In my opinion you would not be running ospf on
the servers. In general I think you would leave the access as L2, and route
into the distribution. Using Rstp or rtg and/or eth oam you can get rapid
failover w/o L2 complexity
zrcheng: in the ER book MF classifier, the default action is accept , that
means the router will accept the upstream, what about the upstream mess around
the forwarding class, say they put a lot traffic in EF, so that will be
dangerous to accept their classification, right?
Doug_Marschke: To zrcheng That is the danger, but you have to have trust
in your firewall rule that is is matching teh appropiate traffic. However you
could create a policer to limit that case.
frasier: Is it possible to drop to a shell prompt and reset a single
interface ie. like resetting a pic from the cli
Doug_Marschke: To frasier You can do anything you want in the shell
sfouant: As I haven't read "Enterprise Switching" yet, I am
wondering what is the preferred approach for determining which Switch becomes
Master, which becomes Backup, and which become Line-Card switches in a Virtual
Chassis configuration. Do the authors prefer to just boot them up in the order
of priority, or is hard-coding this the preferred approach?
drdata: To sfouant Both modes are supported. I feel a determinstic
config, in which known switches are set to certain roles makes the most sense
as it simplifies TS. In general the biggest switch (8200) should be the vc
master when possible.
jmattan: Here's the secret question and answer (to win the books).
spuluka What are the design considerations in deciding when to run OSPF enabled
interfaces on the data center switches rather than at the router/firewall?
drdata: To spuluka Hmm. In my opinion you would not be running ospf on the
servers. In general I think you would leave the access as L2, and route into
the distribution. Using Rstp or rtg and/or eth oam you can get rapid failover
w/o L2 complexity
Doug_Marschke: previous question: Can the Juniper switching line migrate
to a IPv6 network? Answer: yes, in the current version of code, JUNOS EX
supports a small subset of routes. In future versions, that pool will be
larger.
Doug_Marschke: Previous question: Is their an equivalent construct in
the switching technology as logical routing instances in Juniper routers
Answer: Not that I know of at this time.
drdata: v6 does need a licence, except for oob
Chema: about "market value". I usually see big Junipers on
ISP's core networks. I haven't see any Juniper box on an enteprise environment.
Are enterprise certificates a good value for the people holding them, or is
more "wise" to invest time on M track?
jmattan: To Chema We just did a big press release with the NYSE and they
chose us over some other, larger competitors. Also, we're definitely seeing
more and more job postings asking for Juniper certifications. However, it is up
to you as we think the enterprise certs are a great starting point and since
they are free right now, thousands of people are getting them (Literally 1000+
last week alone). If the M fits better for you and you are pressed on time, get
that one. If you can squeeze in others, go for it.
zrcheng: is juniper support bi-direction NAT?
Doug_Marschke: To zrcheng Yes. I do have some examples in the Routing
book.
jmattan: Reminder: we'll be back here in 3 weeks talking about updates
to our certification program.
jmattan: 2 minutes left. great questions all!
drdata: Yes, thanks for joining in and your interest in Junos, cert, and
routing/switching.
kellyk7: Thanks for taking tiime out for this.. great job guys
zrcheng: thanks
chozhall1: Thanks Gentlemen!!! I look forward to the next one and
joining the ranks of JNCIE!!!!
jmattan: reminder. Fast Track program has 4 JUNOS based Enterprise certs and right now we have a 10%
discount on the cert exam. Plus, all the course materials are online and free.
donotcry: thanks
jtb: Jeff: my link is was down after the ac said you are about to ask
the secret question. If it was asked, could you repeat it ?
sfouant: What is next for the Dynamic duo known as Harry and Doug?
Doug_Marschke: To sfouant I actually am going to make a
comedy/slasher./horror movie soon, filmed in South Africa!
drdata: To sfouant For me, its catch up w/my day job (testing pim in
mvpn). Sorta feels nice to not have a writing deliverable hanging overhead.
That said, i bore easiley so always subject to change.
drdata: and, there are always fires (litteraly) to put out.
jmattan: secret question once again: Q: from spuluka What are the design
considerations in deciding when to run OSPF enabled interfaces on the data
center switches rather than at the router/firewall? drdata: To spuluka A: Hmm.
In my opinion you would not be running ospf on the servers. In general I think
you would leave the access as L2, and route into the distribution. Using Rstp
or rtg and/or eth oam you can get rapid failover w/o L2 complexity
ac: We are at the end of the hour, thank you everyone for joining the
chat, we hope to see you at the next chat event.
drdata: cheer all
Doug_Marschke: thank you all!
jmattan: email secret question and answer by end of today to
j-net@juniper.net to be eligible for the JUNOS book packs. Winners posted here
on J-Net tomorrow so please check back.
