1. Install GNS3 all in onepackage. It is straight forward process described in many tutorials and videos available on internet.
2. Install Oracle VM VirtualBox.
3. Download Junos vmdk files (JunOS Olive-disk1.vmdk)
4. Create a VM in VirtualBox using junos vmdk files.
5. Change settings of junosVM as following:
- disable floppy/CD;
- set 'Base Memory' to 512MB;
- Network Settings: there are 4 adapters, each adapter should be set to as 'Not attached' and Advanced => Adapter Type: Paravirtualized Network;
Read more
Scenario:
Office network consists of two internet facing SRX firewalls (FW1 and FW2) and L3 main switch (CORE-SW1). Core switch can be from any vendor, in our case, its a cisco device. Firewalls are connected to two different ISPs, FW1 is connected to ISP1 and FW2 is connected to FW2. CORE-SW1 has L3 uplinks to each SRX and has a couple of different VLAN L3 interfaces where users live, it is a default gateway for LAN.
Both firewall have IPsecVPN links to the datacenter network, which consists of actually two datacenters connected via 10g DCI. Clients/Users of the remote office need to be able to connect to the internet and also to the datacenter. We need to be able to fail over to the secondary ISP should the primary fail. Active/Active scenario is preferred.
Read more
Tasks:
1. Implement Route Reflectors;
2. Configure a Route Reflector and Internal BGP session;
3. Restrict Route Propagation to a Client;
4. Implement BGP Security Options;
5. Implement BGP Neighbor Authentication Using Key Chains;
6. Enable BGP TTL Security Check;
7. Enable CoPP;
8. Enable RTBG Filtering;
9. Improve BGP Scalability;
10. Improve BGP Convergence by Changing the BGP Scan and Advertisement Interval;
11. Improve BGP Convergence by Enabling BFD;
12. Implement BGP Route Dampening;
Read more