Day One


Book Description




Juniper MX Series


Book Description

Discover why routers in the Juniper MX Series, with their advanced feature sets and record breaking scale, are so popular among enterprises and network service providers. This authoritative book shows you step-by-step how to implement high-density, high-speed Layer 2 and Layer 3 Ethernet services, using Router Engine DDoS Protection, Multi-chassis LAG, Inline NAT, IPFIX/J-Flow, and many other Juniper MX features. Written by Juniper Network engineers, each chapter covers a specific Juniper MX vertical and includes review questions to help you test what you learn. Delve into the Juniper MX architecture, including the next generation Junos Trio chipset Explore Juniper MX’s bridging, VLAN mapping, and support for thousands of virtual switches Add an extra layer of security by combining Junos DDoS protection with firewall filters Create a firewall filter framework that only applies filters specific to your network Discover the advantages of hierarchical scheduling Combine Juniper MX routers, using a virtual chassis or Multi-chassis LAG Install network services such as Network Address Translation (NAT) inside the Trio chipset Examine Junos high availability features and protocols on Juniper MX "For the no-nonsense engineer who likes to get down to it, The Juniper MX Series targets both service providers and enterprises with an illustrative style supported by diagrams, tables, code blocks, and CLI output. Readers will discover features they didn't know about before and can't resist putting them into production." —Ethan Banks, CCIE #20655, Packet Pushers Podcast Host







Troubleshooting BGP


Book Description

The definitive guide to troubleshooting today’s complex BGP networks This is today’s best single source for the techniques you need to troubleshoot BGP issues in modern Cisco IOS, IOS XR, and NxOS environments. BGP has expanded from being an Internet routing protocol and provides a scalable control plane for a variety of technologies, including MPLS VPNs and VXLAN. Bringing together content previously spread across multiple sources, Troubleshooting BGP describes BGP functions in today’s blended service provider and enterprise environments. Two expert authors emphasize the BGP-related issues you’re most likely to encounter in real-world deployments, including problems that have caused massive network outages. They fully address convergence and scalability, as well as common concerns such as BGP slow peer, RT constraint filtering, and missing BGP routes. For each issue, key concepts are presented, along with basic configuration, detailed troubleshooting methods, and clear illustrations. Wherever appropriate, OS-specific behaviors are described and analyzed. Troubleshooting BGP is an indispensable technical resource for all consultants, system/support engineers, and operations professionals working with BGP in even the largest, most complex environments. · Quickly review the BGP protocol, configuration, and commonly used features · Master generic troubleshooting methodologies that are relevant to BGP networks · Troubleshoot BGP peering issues, flapping peers, and dynamic BGP peering · Resolve issues related to BGP route installation, path selection, or route policies · Avoid and fix convergence problems · Address platform issues such as high CPU or memory usage · Scale BGP using route reflectors, diverse paths, and other advanced features · Solve problems with BGP edge architectures, multihoming, and load balancing · Secure BGP inter-domain routing with RPKI · Mitigate DDoS attacks with RTBH and BGP Flowspec · Understand common BGP problems with MPLS Layer 3 or Layer 2 VPN services · Troubleshoot IPv6 BGP for service providers, including 6PE and 6VPE · Overcome problems with VXLAN BGP EVPN data center deployments · Fully leverage BGP High Availability features, including GR, NSR, and BFD · Use new BGP enhancements for link-state distribution or tunnel setup This book is part of the Networking Technology Series from Cisco Press, which offers networking professionals valuable information for constructing efficient networks, understanding new technologies, and building successful careers.




MPLS in the SDN Era


Book Description

How can you make multivendor services work smoothly on today’s complex networks? This practical book shows you how to deploy a large portfolio of multivendor Multiprotocol Label Switching (MPLS) services on networks, down to the configuration level. You’ll learn where Juniper Network's Junos, Cisco's IOS XR, and OpenContrail, interoperate and where they don’t. Two network and cloud professionals from Juniper describe how MPLS technologies and applications have rapidly evolved through services and architectures such as Ethernet VPNs, Network Function Virtualization, Seamless MPLS, Egress Protection, External Path Computation, and more. This book contains no vendor bias or corporate messages, just solid information on how to get a multivendor network to function optimally. Topics include: Introduction to MPLS and Software-Defined Networking (SDN) The four MPLS Builders (LDP, RSVP-TE, IGP SPRING, and BGP) Layer 3 unicast and multicast MPLS services, Layer 2 VPN, VPLS, and Ethernet VPN Inter-domain MPLS Services Underlay and overlay architectures: data centers, NVO, and NFV Centralized Traffic Engineering and TE bandwidth reservations Scaling MPLS transport and services Transit fast restoration based on the IGP and RSVP-TE FIB optimization and egress service for fast restoration




Detection of Intrusions and Malware, and Vulnerability Assessment


Book Description

This book constitutes the proceedings of the 18th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, DIMVA 2021, held virtually in July 2021. The 18 full papers and 1 short paper presented in this volume were carefully reviewed and selected from 65 submissions. DIMVA serves as a premier forum for advancing the state of the art in intrusion detection, malware detection, and vulnerability assessment. Each year, DIMVA brings together international experts from academia, industry, and government to present and discuss novel research in these areas. Chapter “SPECULARIZER: Detecting Speculative Execution Attacks via Performance Tracing” is available open access under a Creative Commons Attribution 4.0 International License via link.springer.com.




The Complete IS-IS Routing Protocol


Book Description

Detailed case studies illustrate interoperability issues between the two major routing vendors, Cisco Systems and Juniper Networks Highly pratical: explains why IS-IS works the way it does to how IS-IS behaves in the real world of routers and networks




Network Functions Virtualization (NFV) with a Touch of SDN


Book Description

Network Functions Virtualization (NFV) will drive dramatic cost reductions while also accelerating service delivery. Using NFV with SDN, network owners can provision new functions rapidly on demand, improve scalability, and leverage microservices. Benefits like these will make NFV indispensable for service providers, mobile operators, telcos, and enterprises alike. Network Functions Virtualization (NFV) with a Touch of SDN is the first practical introduction to NFV’s fundamental concepts, techniques, and use cases. Written for wide audiences of network engineers, architects, planners, and operators, it assumes no previous knowledge of NFV architecture, deployment, or management. The authors first explain how virtualization, VMs, containers, and related technologies establish the foundation for the NFV transformation. Next, they show how these concepts and technologies can be applied to virtualize network functions in the cloud, data centers, routing, security, and the mobile packet core. You’ll discover new tools and techniques for managing and orchestrating virtualized network devices, and gain new clarity on how SDN and NFV interact and interrelate. By the time you’re done, you’ll be ready to assess vendor claims, evaluate architectures, and plan NFV’s role in your own networks. Understand NFV’s key benefits and market drivers Review how virtualization makes NFV possible Consider key issues associated with NFV network design and deployment Integrate NFV into existing network designs Orchestrate, build, and deploy NFV networks and cloud services Maximize operational efficiency by building more programmable, automated networks Understand how NFV and SDN work together Address security, programmability, performance, and service function chaining Preview evolving concepts that will shape NFV’s future




QoS for IP/MPLS Networks


Book Description

A comprehensive guide to implementing QoS in IP/MPLS networks using Cisco IOS and Cisco IOS XR Software Understand IP QoS architectures and how they apply to MPLS Take a detailed look at traffic management using policing, shaping, scheduling, and active queue management Study Cisco QoS behavioral model and the modular QoS command-line interface (MQC) Learn the operation of MPLS TE with its DiffServ extensions and applicability as a traffic-protection alternative Find multiple configuration and verification examples illustrating the implementation of MPLS TE, DS-TE, and FRR Review the different designs, ranging from a best-effort backbone to the most elaborate scenarios combining DiffServ, DS-TE, and FRR Quality of service (QoS) plays a key role in the implementation of IP and MPLS networks today. However, QoS can be one of the most complex aspects of networking. The industry efforts to achieve convergence have generated a need for increased levels of traffic differentiation. Today’s networks need to meet an array of QoS requirements to support distinct applications (such as voice, video, and data) and multiple network services (such as IP, Ethernet, and ATM) on a single converged, multiservice network. QoS has therefore has become an integral part of network design, implementation, and operation. QoS for IP/MPLS Networks is a practical guide that will help you facilitate the design, deployment, and operation of QoS using Cisco® IOS® Software and Cisco IOS XR Software. The book provides a thorough explanation of the technology behind MPLS QoS and related technologies, including the different design options you can use to build an MPLS network with strict performance requirements. This book discusses MPLS Traffic Engineering (MPLS TE) as a tool to complement MPLS QoS and enhance the performance characteristics of the network. You’ll learn technology, configuration, and operational details, including the essentials facts about the behavior and configuration of the rich MPLS QoS and related MPLS TE functionality. To get the most out of this book, you should have a basic understanding of both IP and MPLS, including the basics of IP addressing and routing and the basics of MPLS forwarding.