JN0-106 Exam Dumps - Junos - Associate (JNCIA-Junos) Junos OS 21.2

In Junos OS, a routing policy is a powerful tool used to manage the flow of routing information between the Routing Information Base (RIB) and routing protocols. Unlike forwarding decisions, which are handled by the Packet Forwarding Engine, routing policies function within the control plane on the Routing Engine. Their primary purpose is to define specific criteria for importing routes into the routing table from neighbors or exporting routes from the routing table to neighbors.

Routing policies consist of terms containing from (match) and then (action) statements. They allow administrators to filter prefixes (e.g., denying specific BGP routes), modify route attributes (e.g., changing OSPF metrics or BGP communities), and manipulate path selection behavior. For example, an export policy might be used to ensure that only specific internal subnets are advertised to an ISP via BGP, preventing the accidental leakage of private infrastructure addresses. By default, Junos applies " default policies " for each protocol (such as OSPF accepting all OSPF routes), but custom policies allow for granular control over how the device interacts with the rest of the network. This ensures that the routing table contains only the desired paths for optimal traffic engineering.

Secure remote administrative access to a Junos OS device is performed by using SSH (Secure Shell) . Therefore, ssh 172.16.10.1 is the correct command. Juniper defines the Junos CLI ssh operational command as a mechanism for opening a secure connection between a local router or switch and a remote system. The destination can be specified by hostname or IP address.

SSH provides authenticated and encrypted remote access, protecting login credentials and management traffic while the administrator performs configuration, monitoring, or maintenance operations. Junos devices can accept incoming SSH sessions when SSH is enabled under the [edit system services ssh] configuration hierarchy.

telnet 172.16.10.1 can establish a remote terminal session, but Telnet does not provide the encryption required for secure administrative access. ftp is principally a file-transfer protocol and is not the appropriate mechanism for interactive device maintenance. traceroute is an operational diagnostic utility used to identify the Layer 3 path toward a destination; it does not provide device login functionality.

Study Guide Reference Topics: User Interfaces — CLI remote access; Junos OS Fundamentals — system services; Operational Monitoring and Maintenance — secure device management.

In modern Junos OS versions, the most efficient and standard way to isolate Out-of-Band (OOB) management traffic from transit traffic is by utilizing the management-instance . Historically, management interfaces like fxp0 (on M/MX/T series) or me0 (on EX/QFX series) shared the global routing table (inet.0), which could lead to routing conflicts if management subnets overlapped with production data.

To resolve this, Junos introduced the set system management-instance command. When this is enabled, the OS automatically creates a dedicated routing instance named mgmt_junos. The physical management interface (be it fxp0, em0, or me0) and its associated logical unit are moved into this private instance. This creates a complete separation: management protocols like SSH, SNMP, and NTP operate within mgmt_junos, while BGP, OSPF, and customer data remain in inet.0. This architecture ensures that even a massive routing loop or table exhaustion in the production plane will not prevent an administrator from accessing the device via the OOB port. Furthermore, it simplifies the configuration of default gateways for management traffic, as the mgmt_junos instance maintains its own independent routing table (mgmt_junos.inet.0), preventing management routes from ever being leaked into the provider core.

The Junos OS operates using a candidate configuration model, where changes are made in a temporary buffer before being applied to the running system. To ensure accuracy and prevent unintended network disruptions, it is a critical best practice to review the differences between the candidate buffer and the currently active configuration. The command show | compare executed from the [edit] hierarchy level is the primary tool for this task.

When this command is issued, the CLI performs a line-by-line comparison. The output uses a " diff " format: lines prefixed with a plus sign (+) represent new statements added to the candidate configuration, while lines prefixed with a minus sign (-) indicate statements that have been removed. This visualization allows the architect to verify exactly what will change upon execution of the commit command. Unlike operational mode commands that only show the final state, show | compare highlights the delta, making it indispensable for auditing complex policy changes or interface reconfigurations. This step acts as a final manual validation gate, reducing the risk of syntax errors or logical misconfigurations entering the production environment. Using this command is a fundamental skill for passing the JNCIA-Junos exam and for professional day-to-day operations.

The statement describing commit confirmed 5 is correct. In Junos OS, configuration changes are first made to a candidate configuration . They do not become the active operational configuration merely because they have been entered in configuration mode. A commit operation is required to validate and activate those changes.

The commit confirmed mechanism provides an important administrative safety feature. When the administrator enters:

commit confirmed 5

Junos OS activates the candidate configuration but requires confirmation within 5 minutes . If the configuration is not confirmed before the timer expires, Junos OS automatically rolls back to the previously committed configuration. Juniper explicitly documents that the optional number following commit confirmed specifies the confirmation period in minutes.

Option A is incorrect because operational mode is primarily used for monitoring, troubleshooting, maintenance, and operational commands rather than making persistent configuration changes. Option B is incorrect because configuration-mode edits remain candidate changes until committed. Option D is also incorrect: rollback 0 does not restore factory defaults . It loads the most recently committed configuration and effectively removes pending uncommitted modifications.

Study Guide Reference Topics: Configuration Basics — candidate versus active configuration, commit operations, confirmed commits, configuration rollback, and Junos CLI modes.

The architecture of Junos OS is designed with a strict functional separation between the control plane and the data plane. The Routing Engine (RE) maintains the master Routing Information Base (RIB), which acts as a comprehensive database storing all potential paths learned from various routing protocols, static configurations, and direct connections. However, to achieve wire-speed performance, the device does not consult the RIB for every packet. Instead, the RE identifies the " active " or best routes for each destination based on route preference and metrics.

Once these active routes are selected, the RE distills them into a streamlined Forwarding Information Base (FIB), commonly referred to as the forwarding table, and pushes this table to the Packet Forwarding Engine (PFE). The main function of the forwarding table is to provide a high-speed, local lookup mechanism that allows the PFE to forward transit traffic across the switch fabric with minimal latency. This table contains only the specific exit interface and Layer 2 next-hop information required for packet delivery. By isolating the PFE from the overhead of complex routing protocol state machines and all inactive redundant paths, Junos OS ensures that forwarding performance remains consistent even during control plane re-convergence. Reference: Junos OS Fundamentals, Control Plane and Forwarding Plane functions.

==========

Junos OS firewall filters operate on a sequential, " first-match " logic, but their behavior is significantly influenced by the use of terminating versus non-terminating actions. In this exhibit, a packet with a source address of 10.0.0.0/8 is evaluated against the filter named test.

Evaluation begins with term 1 . The packet matches the source-address criteria, triggering the actions defined in the then statement. The first action is log, which sends the packet header information to the firewall task buffer for logging. The second action is next term . This is a critical non-terminating action ; it instructs the Packet Forwarding Engine (PFE) to continue the evaluation process using the subsequent term in the filter rather than stopping after the match.

Evaluation then moves to term 2 . Because term 2 contains no from match conditions, it acts as a " catch-all " for any traffic that reaches it. The action in this term is reject . This is a terminating action that discards the packet and sends an ICMP " destination unreachable " message back to the source. Therefore, the packet is first recorded by the logging process and is subsequently dropped by the rejection mechanism. If next term had not been present in term 1 , the packet would have been implicitly accepted (as any matched term without a terminating action like discard, reject, or accept defaults to an implicit accept in that specific term). However, the explicit instruction to move forward ensures the packet hits the reject statement.

Junos OS features a sophisticated configuration management system that automatically creates a snapshot of the active configuration every time a commit is successfully performed. These snapshots are stored as rollback files in a historical archive. Within the configuration mode hierarchy, the rollback command allows an administrator to discard current candidate changes and load a previously committed configuration into the candidate buffer.

The numbering of these rollback files is sequential and follows a specific logic: rollback 0 represents the configuration that is currently active and running on the system. To revert to the state that existed immediately prior to the most recent commit, the administrator must use rollback 1. This command overwrites the current candidate configuration with the previous operational state. It is important to note that executing rollback 1 does not immediately impact the running system; it merely populates the candidate database. The changes must still be verified—often using show | compare—and then finalized by executing the commit command. By default, Junos maintains up to 50 of these rollback configurations (and up to 100 on certain platforms/versions), providing a robust safety net for operational recovery and auditing. Reference: Configuration Basics, Managing Configurations, Rollback configurations.