Comments for Aaron's Worthless Words

Comment on JNCIA – Epic Win! by Shoaib Merchant

Shoaib Merchant — Thu, 16 Feb 2012 04:31:51 +0000

Congrats Aaron!

I have been working on Juniper routers for quite sometime now. I too would like to know the materials you used. I’ve heard the Student Guide is good.

Comment on JNCIA – Epic Win! by That1guy15

That1guy15 — Fri, 10 Feb 2012 15:03:12 +0000

Congrats!

As for forcing everyone to certify I feel is the wrong approach. Those that dont want or care to take the time to lear the material will just dump it. Waste of company money IMO. Setting a policy for new-hires and promotions to have a specific certification level would be more motivating.

Comment on JNCIA – Epic Win! by Ben Story

Ben Story — Fri, 10 Feb 2012 13:52:17 +0000

Congrats on the pass, out of curiosity, what materials did you use for studying?

Comment on JNCIA – Epic Win! by Anthony Burke

Anthony Burke — Fri, 10 Feb 2012 03:42:40 +0000

Congrats on the pass. Epic work. I think your boss is doing the right thing. It is a shame that you have used the line ” motivated to learn for themselves.” It seems it’s a common thing in the IT industry that there are those who don’t want to learn and be the best they can be.

Love your blog and your ‘Worthless’ words.

Anthony

Comment on Goals for 2012 by sebastian

sebastian — Thu, 09 Feb 2012 18:47:04 +0000

Hey Aaron,

Great job on the exams man, i found your links on the ACL’s and the ports correlation’s very useful.
it actually helped me solve and issue i was seeing with GLBP and the dot1q sub interfaces. Thanks for the great tips !!!

Comment on Junos Basics – OSPF by CJ Infantino

CJ Infantino — Fri, 03 Feb 2012 01:08:27 +0000

Listen man, Uncle Chambers is getting pretty heated about all this J*Nip3r stuff.

And, it is making me jealous because I don’t get to work with any Juniper kit!

Anyway – when is the JNICA-JUNOS scheduled? :) I have to recert JNCIA so keep the posts coming.

Comment on Junos Basics – OSPF by Ralph Rye

Ralph Rye — Wed, 01 Feb 2012 15:45:56 +0000

Aaron,

Nice post. Studying for my JNCIE-ENT right now so I am keep an eye out for any Junos blog posts.

It would also be good to point out to Cisco converts that including a interface under an area injects that connected IP subnet into OSPF and enables that interface to send/receive Hellos to form a neighbor relationship. If you want to include a directly connected subnet into OSPF but not allow the interface to form a neighbor relationship, simply add the passive option.

protocols {
ospf {
area 0.0.0.0 {
interface ge-0/0/0.0;
interface ge-0/0/1.0 {
passive;
}
}
}
}

Comment on Junos Basics – OSPF by Aaron Conaway

Aaron Conaway — Wed, 01 Feb 2012 14:17:57 +0000

Andrew and Kurt: Thanks for the input, guys. I had no idea about the packet versus flow modes. Time to go for some training, then, eh? :)

RFairclough: Thanks for those bits of information. Those are the details that I’m just not sure of since I’ve been doing Junos for just over 2 months now. LOL

Comment on Junos Basics – OSPF by RFairclough

RFairclough — Wed, 01 Feb 2012 13:07:19 +0000

Remember interface specific statements will over-ride your zone configuration.
Pretty sure your lo0 doesn’t need to be in a zone, however good to make it passive otherwise it does wait out the election period.
Best thing to do with OSPF is create a group enabling BFD on every interface. Group automation is great!

Comment on Junos Basics – OSPF by Kurt Bales (@networkjanitor)

Kurt Bales (@networkjanitor) — Wed, 01 Feb 2012 04:27:02 +0000

Hey mate, great post. I would just like to point out one thing that many new Junos converts dont realise (especially if they start out with SRX).

The problem you state about the firewall rules requirement is because the SRX by default (and later version J-Series) runs in Flow-Mode. In this mode all traffic through the device is subject to security policy.

This feature can be disabled (and you should if you are studying for the -ENT track) by deleting the security section of the config then creating the “security forwarding-options” as per http://juniper.cluepon.net/index.php/Enabling_packet_based_forwarding .

When the SRX is set to packet-mode it will operate like a regular router like we all expect.