1introjunos

Introduction to JUNOS Software

Traceoptions Configuration Example (contd.)

The following are configuration options for tracing files:

hierarchies. Including the traceoptions statement at the [edit interfaces inter ace-name] hierarchy level allows you to trace the operations of individual

Notin erfaces. You can also trace the operations of the interface process, which is the device-control process (dcd).

When tracing a specific interface, the specification of a trace file is not supported. The JUNOS Software kernel does the logging in this case, so the tracing information is placed in the system’s messages file. In contrast, global interface tracing supports an archive file; by default, /var/log/dcd is used for global interface tracing.

Secondary System Configuration • Chapter 5–23

Introduction to JUNOS Software

Viewing Log and TraceReproductionFil s

By default, JUNOS Software stores log and trace files in /var/log. To view stored log

files, use the show log command. Recall that the CLI automatically pauses when more thanforwaone sc een of information exists, and that at this more prompt, you can more pr mpt to view the context help screen of available commands, shown in the

enter a d slash (/) character to conduct a forward search. As a hint, enter h at a

following example:

---(Help for CLI aut m re)---

. . .

The ability to cascade multiple instances of the CLI’s pipe functionality is a real benefit when you must search a long file for specific information. The slide shows the required syntax to evoke logical AND and logical OR searches within extensive outputs and files.

Chapter 5–24 • Secondary System Configuration

Introduction to JUNOS Software

Monitoring Log and Trace Files

since the monitor start command depends on the logged information being written to the log file first, the system must have the needed storage space for the log file and the log file must actually exist.

user@host> monitor start messages | match fail

Use Esc+q to enable and disable syslog output to the screen; use the monitor stop command to cease all monitoring. If no output sends to the screen after issuing the monitor start command, you might want to issue the Esc+q key sequence to check if a previously initiated monitoring session was frozen rather than stopped.

Continued on next page.

Secondary System Configuration • Chapter 5–25

Introduction to JUNOS Software

Monitoring Log and Trace Files (contd.)

If you do not delete or disable all trace flags, tracing continues in the background and the output continues to be written to the specified file. The file remains on the storage device of the system until you either manually deleted or overwrite it according to the traceoptions file parameters. To disable all tracing at a particular hierarchy, issue a delete traceoptions command at that hierarchy and commit the change.

Log and Trace File Manipulation

To truncate files used for logging, use the clear log filename command.

To delete a file, use the file delete command. If you want, you can also use wildcards with the file command’s delete, compare, copy, list, and rename operations.

Chapter 5–26 • Secondary System Configuration

Introduction to JUNOS Software

Secondary System Configuration • Chapter 5–27

Introduction to JUNOS Software

What Time Is It?

btain a commodity UNIX or Windows device configured to provide a timing reference based on its local clock. Any synchronization, even if based on an inaccurate local clock, is better than none.

JUNOS Software supports client, server, and symmetric modes of NTP operation, and can also support broadcast and authentication. We recommend that authentication be used to ensure that an attacker cannot compromise synchronization on a system.

The slide provides a typical NTP-related configuration stanza. Two machines can synchronize only when their current clocks are relatively close. By default, if the time difference between the local device’s clock and the NTP server’s clock is more than 128 milliseconds, the clocks are slowly stepped into synchronization. However, if the difference is more than 1000 seconds, the clocks are not synchronized. A boot server is used to set a system clock at boot time to ensure that it is close enough to later synchronize to the configured time server. Issue the operational mode set date ntp address command as a substitute for a boot server.

Chapter 5–28 • Secondary System Configuration

Introduction to JUNOS Software

Monitoring NTPReproduction

Use the show ntp associations command to display synchronization status. The add ess column shows the hostname or IP address of remote NTP peers. The symbol next to the hostname or IP address gives the status of peers in the clock selecti n p cess. The following are possible symbols:

You can view further synchronization details with the show ntp status command.

Secondary System Configuration • Chapter 5–29

Introduction to JUNOS Software

Chapter 5–30 • Secondary System Configuration

Secondary System Configuration • Chapter 5–31

Introduction to JUNOS Software

Upon entering a commitReproductioncommand or reaching the specified time interval, the system copies the configu ation file into the /var/transfer/config directory and an

FTP or SCP session is opened with the remote storage device. Once the configuration file is transfefored to the remote storage device, a system log message is generated, confirming success failure of the transfer. The destination filename format, as

Notshown on he slide, cannot be altered by configuration.

Chapter 5–32 • Secondary System Configuration