Need Help?
|
BOOK DESCRIPTION
The routing engine on Junos routers performs many different functions, from processing routing protocol updates, to driving the command-line interface (CLI). Given that the routing engine is critical to the operation of the device and its network, you need to protect the routing engine from unwanted traffic by allowing only essential permitted traffic. Unwanted traffic can come in many different forms: malicious traffic seeking to gain unauthorized access, unintentional routing protocol updates from neighboring devices, or even legitimate traffic that exceeds a given bandwidth limit. This Day One book shows you how to secure the routing engine step-by-step. Learn how, learn why, then follow along as you build a modular firewall filter and apply it. “An indispensable resource for anyone who needs to protect their Internet connected routers.” Matt Hite, Network engineer, Zynga Sample Pages |
DOWNLOAD BOOK
Day One books are a free download for our J-Net members*. If you're not a J-Net member, create a user account now. It's fast and there's no commitment or spam. Once you're a member you can come back and download any of the Day One books.
* If you have an existing Juniper user account, you can use it to login to J-Net
ABOUT THE AUTHOR(S)
Douglas Hanks Jr. is a Sr. Systems Engineer with Juniper Networks. He is certified in Juniper Networks as JNCIE-ENT #213 and JNCIE-SP #875. Douglas' interests are network engineering and architecture for both Enterprise and Service Provider routing and switching.
I work closely with many large, enterprise customers in the San Francisco Bay Area. One of the most common questions I receive is "how do we secure the router?" It's a very valid concern because in many of the implementation scenarios the routers are being directly exposed to the Internet, partners or customers.
Securing the Routing Engine for the M, MX and T Series is for anyone who is responsible for designing, implementing and maintaining security on Juniper routers. It isn't specific for enterprise or service provider customers, as the problems addressed in this book are common to all customers. The book is written by network engineers for network engineers.
This book arms the reader with all the tools requires to secure the routing engine. There are three primary building blocks in this book: firewall filters, policers and Junos configuration automation. The book is bundled with a security framework that the reader can instantly deploy into his or her environment with very little customization required.
It's generally accepted that there's a hard way of doing things and there's an easy way. I hope that it becomes self-evident how powerful Junos is compared to other network operating systems. Junos allows the network administrator to focus on the difficult problems while offloading repetitive and mundane tasks. Ultimately, Junos allows your business to "do more with less."
I have no specific book recommendation, but instead I encourage the reader to pursue a Junos certification. There are three tracks: enterprise, service provider, and security. Each track begins with the JNCIA-Junos certification and branches out from there. Each track has three levels certification: specialist, professional and expert. The certification process is a very challenging and rewarding experience. I'm currently going through the certification process and it has taught me to have a new level of respect of the amount of work and knowledge required to obtain the highest certificate of JNCIE.Find out more at http://www.juniper.net/us/en/training/certification/
I love writing. It's something that I wish I could do more of. I was fortunate enough to recognize a major concern out in the field and have the opportunity to work with Juniper to publish this book.
Chapter 2: Policers. I'm a visual learner and for a very long time I had trouble fully understanding how they actually work. Policers aren't a tangible thing you can pick up and take apart. If there are other readers that have difficulty understanding policers, I hope that this book clearly illustrates how they work and can be used.