nanog mailing list archives

Re: [EXTERNAL] Juniper configuration recommendations/BCP


From: Pierre LANCASTRE <pierre.lancastre () gmail com>
Date: Thu, 8 Oct 2020 17:13:58 +0200

Hi

https://www.juniper.net/assets/kr/kr/local/pdf/books/tw-hardening-junos-devices-checklist.pdf

http://62.210.157.99/juniperdayone/TW_Hardening_Junos_Devices.pdf

Cheers

Pierre

Le jeu. 8 oct. 2020 à 16:59, Mann, Jason via NANOG <nanog () nanog org> a
écrit :

If using loopbacks on the router you have to have a firewall filter on it
to permit traffic to the device even if you have a firewall filter on
individual interfaces that would allow/deny traffic



*From:* NANOG <nanog-bounces+jamann=mt.gov () nanog org> * On Behalf Of *Forrest
Christian (List Account)
*Sent:* Thursday, October 8, 2020 3:38 AM
*To:* nanog list <nanog () nanog org>
*Subject:* [EXTERNAL] Juniper configuration recommendations/BCP



<ISP hat on>

After nearly 30 years of being a cisco shop, I'm working on configuring
our first pair of Juniper MX204's to replace our current provider-edge
cisco.



I've worked through enough of the Juniper documentation/books to have a
fairly good handle on how to configure these, but I wanted to check with
the list to see if there are any Juniper-Specific gotchas I might run into
that isn't documented well.



I've done a bit of googling and am either finding stuff that is largely
Cisco-specific or which is generic - all of which I'm rather familiar with
based on my past history.   Is there anything I should worry about which is
Juniper-specific?



--

- Forrest


Current thread: