Junosphere Release Notes 3 0
Junosphere Release Notes 3 0
Junosphere Release Notes 3 0
Release 3.0
July 2015
Revision 14
Topologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Parsing Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Junosphere Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Virtual Routers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Secure Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Operational Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Resolved Known Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Revision History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Release Overview
If the information in your current release notes differs from the information found in the
other documentation sources, follow the Junosphere Release Notes.
• The Junosphere Guide for Users and Junosphere Guide for Bank Administrators, which
provide detailed information about features available in Release 3.0
The entire documentation set, including the release notes, is available in PDF format on
the Juniper Networks Web site on the Junosphere Technical Documentation page.
Junosphere provides a virtual network environment in which you can configure network
devices in the same manner as on a physical network.
In addition, this release supports topology copy, topology auto-save, and rich tool tips
for all of the icons in the toolbar of the Topology Wizard. A similar tool tip is also available
after the icon has been dragged onto the canvas.
• An advanced architecture that is more robust, flexible, and automated that provides
improved performance.
• The following new images: VJX1000 11.4, VJX1000 12.3, VSRX 12.1X47-D20, Junos Space
14.1R3.4, Junos Space 14.1R3 (with applications), VRR 14.2, and Analyzer appliance.
Supported Browsers
Junosphere is best viewed with Mozilla Firefox 35.0 or later and Internet Explorer 11.0 or
later. In Internet Explorer 11.0, Compatibility View must be turned off in order to view the
user interface. If it is turned on, the user interface does not display correctly.
All browsers must have at least SSL TLS 1.0 enabled. We recommend that TLS 1.1 and
TLS 1.2 be enabled as well. SSL 2.0 and SSL 3.0 connections are not accepted.
• 2 GB RAM
• Two Ethernet cards or one Ethernet card and one wireless connection
• VMware Player
Images
Junosphere provides a range of virtual machine image files, depending on the services
you purchased. Current virtual image files for this release are listed in Table 1 on page 4.
See the virtual machine image descriptions in the online help for information about using
and installing the images.
VJX1000_LATEST Latest qualified VJX1000 image using Juniper Technical Assistance Center (JTAC)
Junos OS Release 12.3
VJX1000_10_3R2_0 Junos OS release 10_3R2_0 for VJX 1000 Not supported by JTAC
WANDL_LATEST Latest qualified WANDL release 6.0.2 Wide Area Network Design Laboratory
image.
VJX1000 Image
By default, the VJX image is configured with a root and non-root user account. The root
username is root and the password is Clouds. The non-root username is juniper and the
password is Clouds. Each VJX image has 2 GB of memory.
Customers running VJX1000 virtual machines based on Release 12.1 of Junos OS for J
Series routers will see new messages during boot up and during commit. The messages
will be of the form:
For Junos OS Release 12.3, the VJX1000 image supports the following software services:
• IPv4
• IPv6
• OSPF
• BGP
• IS-IS
• MPLS
• L3VPN
• L2VPN
• MPLS-TE
• RSVP
• Multicast
• L2Circuit (PWE3)
• BGP-labeled unicast
• XML
• ISISv6
• OSPFv3
• Ethernet CCC
• The Layer 2 services and CoS support is the same as for J Series routers
Please note that the IPv6 BGP feed is not supported for the current release in Junosphere.
CentOS Image
This release supports two CentOS Linux versions:
The CentOS virtual machine images contain iperf, mgen, and wireshark applications.
iperf is a network testing tool that can create TCP and UDP data streams and measure
the throughput of a network that is carrying them.
mgen is open source software that provides the ability to perform IP network performance
tests and measurements using TCP and UDP/IP traffic.
To use Junos Space in your network topology, refer to the online help file located on the
Junosphere.net welcome page.
VPTX
This release includes support for the VPTX latest image.
VSRX
This release includes support for the VSRX release 12.1x47 image.
VMX
This release includes support for the VMX_14_1 and VMX_MRT experimental images.
VRR
This release includes support for the VRR release 14.2 image.
Analyzer Appliance
This release includes support for the Analyzer appliance image.
WANDL
This release includes support for the WANDL release 6.0.2 image.
For help on supported features on the network devices, including the CLI features, you
can use the documentation for Junos OS Release 12.3 for J Series routers found on the
Junos OS for J Series, Release 12.3 Technical Documentation page.
The Junosphere Release 3.0 documentation set describes a feature that is present, but
has not yet been fully qualified by Juniper Networks. This feature will be fully tested and
supported in a future release:
• Packet forwarding in flow mode; this enables all the stateful security features, such
as a stateful firewall, in the release.
User Interface
• Committed VJX configuration changes may take longer than expected to show up in
the downloaded configuration files immediately following Save and Save As commands.
Check the changes in the configuration files after the Save/Save As (you will have to
download the topology to your host environment to check). If the changes are not
there, wait 30 seconds and repeat (PR/731033).
• Occasionally, even though the message in the Messages tab of the Details section of
the Access Active Topologies window may inform you that the topology started
successfully, not all virtual machines started successfully. If you cannot Telnet to one
or more virtual machines, stop and restart the topology. If the problem persists, contact
Juniper Networks Technical Assistance Center (JTAC).
• Junosphere is best viewed with Mozilla Firefox 19.0 or greater and IE 9.0 or greater. In
IE 9.0, Compatibility View must be turned off in order to view the user interface. If it is
turned on, the user interface does not display correctly.
• When a user tries to execute an operation in Junosphere, a message might appear that
says that the connection is lost or a link is broken. The user needs to click the Refresh
icon. The browser defaults to the Welcome page and the user must navigate back to
the page he or she was on when the Refresh icon was clicked.
• The maximum transmission unit (MTU) in the VJX interface must be set to less than
1500 (default). Otherwise, it cannot route BGP packets. The MTU should be set to
1200.
Virtual Images
• The Packet Design Route Explorer virtual image was removed from the current
Junosphere release.
• The Spirent TestCenter virtual image was removed from the current Junosphere release.
It is no longer supported and you should remove existing VMs from your topology.
• The Junos Space 13.1 virtual machine image with pre-installed applications takes at
least 15 minutes after a topology is active to get web service. The Junos Space 13.1
platform virtual machine image takes 10 to 12 minutes after a topology is active to get
web service.
• The Cariden MATE virtual image was removed from the current Junosphere release.
• The Puppet Labs virtual image was removed from the current Junosphere release.
• For VMX images, Junosphere currently supports only the Juniper Networks VMX_13_3
and VMX_MRT images. Any other VMX image versions do not work in Junosphere. If
you start a topology that contains an old VMX image, you will receive an error message
and the topology will fail to start. In order to start a topology that includes an old VMX
image, you must replace the image with the VMX_13_3 image or VMX_MRT image. You
can do this using the topology wizard.
2. In the Topologies section, select the check box next to the topology in which you
need to replace the VMX image and then click the Edit Topology pencil icon that
appears in the top left corner of the screen.
3. You may receive an error message. Click Ok to close the error message. The topology
wizard canvas appears.
4. You must first delete the old VMX image from the topology wizard canvas. To delete
the image, right click on the image and select Delete from the menu.
5. Next, delete any associated bridges for the image. To delete a bridge, right click on
the bridge and select Delete from the menu.
6. To replace the image, drag and drop the new VMX image that is located in the
Juniper - Experimental section of the images tool bar.
7. Next, replace the bridges that you deleted. To replace a bridge, hover the cursor
over the center of the virtual machine that you want to connect until a hand icon
appears and the selected element is surrounded by a green box. Then click and drag
your cursor until it connects to the new VMX image.
Repeat this step for all bridges that you need to replace.
8. Click the Save button that appears in the lower right corner of the topology wizard
canvas.
• The Junos Space 12.2 image with applications (SPACE_12_2R1_3_APPS) is not available
due to a possible defect.
• If you are using a VJX virtual machine image version prior to version 12.3, which is the
VJX_LATEST macro, you may experience a licensing issue with the virtual machine
image. When this happens, the VJX image needs to be restarted. If you still experience
a licensing issue after restarting the VJX image, the license file needs to be patched
manually during run time.
3. On the Advanced tab, select the Use TLS 1.0, Use TLS 1.1, and Use TLS 1.2 options.
4. Click the OK button at the bottom of the Java control panel window.
5. Return to Junosphere and click the Join button again to join your topology.
• Mac users sometimes cannot join an active topology because Secure Access is not
automatically downloaded from the browser to install the Network Connect software.
1. Download the appropriate version of Pulse and install it on the Mac with the help
of the Juniper Networks Technical Assistance Center (JTAC). JTAC can assist you
with the installation, create a new connection entry, and ensure that the Join
operation completes.
NOTE: When you install any software on a Mac, you must always enter
the admin password even though the user is an admin by default.
2. After you click Join, note the URL on the active tab or frame of the browser. It is in
the format https://saX.junosphere.net, where X is an integer.
3. Open the Pulse application, create a new connection with this URL, and click Connect.
NOTE: When you restart a topology, the URL might change. You must
have a connection with this new URL to complete the Join operation.
Topologies
• In the Topology Wizard, there is a limit of 32 connections to a bridge domain.
• If you download a topology and upload it into another library, you can no longer preview
it or edit it using the topology wizard. However, you can copy a topology from one library
to another and the copied topology can be previewed and edited using the topology
wizard as long as the source topology was created using the topology wizard.
To copy a topology, go to Topologies > Manage Topologies, select the topology that
you want to copy, and click the Copy icon located in the top left corner of the screen.
A new window appears where you can specify a new name for the topology and select
one or more destination libraries for the topology. Then, you can edit the topology in
the topology wizard by clicking the Edit topology icon located in the top left corner of
the Manage Topologies window.
• Occasionally, you might be presented with a dialog box stating that you are no longer
connected to a topology, but your topology’s Network Connect session cannot be
terminated. For security purposes, you must manually disconnect from the Network
Connect session on your host. This might happen in the following situations:
• If you leave a topology, but the Network Connect session is still showing as connected
and you never receive a session time-out message.
• You stop the topology, but the Network Connect session is still showing as connected.
• You join a topology, then try to join another topology. If the Network Connect session
did not end before you try to log in to the Junosphere Access Portal for the second
topology, then you must sign out manually from the first Network Connect session.
• To install the Network Connect software, you must have administrative rights on your
computer.
• Users should assign the hostnames for virtual machines when the topology is created
or edited in the Topology Wizard. It is important to create unique hostnames within
the topology.
• In the Topology Wizard, when you rename a Virtual Machine (VM), it changes the
hostname in the .vmm file. However, the hostname is not changed in the configuration
files that are associated with it. You must manually change the hostnames in
configuration files.
• Junosphere does not recommend changing the host name of virtual routers through
the CLI because this prevents Junosphere from saving configuration changes to the
correct .config files.
• Auto logout does not work when you are in the Administration > Access Active Topology
window. For security purposes, we recommend that you log out if you are not using
Junosphere.
Parsing Capabilities
• Parsing capabilities prevent user mistakes by limiting the use of free-form
nomenclatures, such as custom bridge names, in a topology file. Currently, only bridge
names in the range of private0 to private123 are allowed.
Junosphere Connector
• To configure 802.1q VLAN tagging pass-through when using Junosphere Connector
with the VMWare ESXi server, you must set the VLAN ID of the port group of the vSwitch
to 4095. This will put the port into VGT mode which allows VLAN tags to be preserved
across the vSwitch.
• Linux:
• Windows
Virtual Routers
• The IPv6 BGP feed is currently not supported on Junosphere (PR/691145).
• Web browser access to virtual routers via the Juniper Web Device Manager does not
work.
• When using a Web browser to access virtual routers, the Authentication button keeps
spinning with a “loading data” message.
Configuration File
• Junos OS configuration files must have a .conf extension because the VJX virtual
machine saves configuration changes to the filename with a .conf extension. If you
name a Junos OS configuration file <host-name>.config, zip it up, and load it to
Junosphere, Junosphere will use the configuration files as is. It preserves the file name
as is with the .config extension. The virtual machines are booted with these files and
the virtual machines do not care about the extension either. But after you make changes
to the virtual machine and commit the changes, the virtual machine saves the changes
using the same file name but with a .conf extension. As a result, when you issue
Save/Save As, the operation causes Junosphere to look for files with the original .config
extension. Since the changes were written to files with a .conf extension, the changes
never make it back to Junosphere. When you download the configuration file sets, you
will not see the changes.
• In the topology.vmm file, interfaces must be sequential; i.e., em0, em1, em2, and so on.
Also, words that appear in all capital letters in script examples must be entered exactly
as they appear in the examples. For example, EXTERNAL instead of external.
Secure Access
Secure Access is the technology behind the Junosphere Access Portal page. You can find
information relating to it in the Secure Access Release Notes. Click the 7.1R1 version on
the following page:
http://www.juniper.net/techpubs/en_US/sa7.1/information-products/pathway-pages/sa-series/index71.html
.
Operational Notes
• Reservations can be cancelled up to one hour before the start time.
• Set your browser to allow pop-ups from junosphere.net. The Network Connect function
requires them.
• The time zones displayed in Junosphere for reservation start time and end time are
always in the time zone in which the browser is running. To make a reservation for
another time zone, either convert the reservation time to your time zone or temporarily
change your operating system time zone.
• To change your own password, click the Settings icon in the upper right corner of the
screen. The Change Password dialog box appears. Type your old password and new
password (twice). Click the Change button.
• The Junos Space image in Junosphere cannot display the device list or back-up
configuration files properly. When backing up a configuration file from Junos Space,
Junos Space sees all devices as a single device, so multiple configurations are saved
under the first device name.
• Navigating to the Active Topology tab with a large topology may cause a "JSPR-000
: Internal error occurred" message to be displayed (PR/813913). Refresh the browser.
• The user may see a "Connection Timeout" message in the browser. This could be
caused by slow internet connection, bursty traffic, and load on intermediary servers.
Refresh the browser.
• In the Virtual Machines tab, one or more of the VJX states my remain in "UNKNOWN"
state. This could be caused by a bad or corrupted configuration file or a bad VJX license
file. To fix this problem:
2. Click the Reset button and immediately telnet to the VJX and observe the boot
process.
4. Go to the CLI and verify the configurations with the appropriate CLI commands.
• VJX, VSRX, VPTX and VMX currently do not support In-Service Software Upgrade
(ISSU).
• Users must use root/Cloud credentials to access the VMX image. Otherwise, the
credentials are deleted each time the topology is restarted or the VM goes through the
bind and start process.
®
To obtain the most current version of all Juniper Networks technical documentation,
see the product documentation page on the Juniper Networks website at
http://www.juniper.net/techpubs/.
If the information in the latest release notes differs from the information in the
documentation, follow the product Release Notes.
Juniper Networks Books publishes books by Juniper Networks engineers and subject
matter experts. These books go beyond the technical documentation to explore the
nuances of network architecture, deployment, and administration. The current list can
be viewed at http://www.juniper.net/books.
Technical product support is available through the Juniper Networks Technical Assistance
Center (JTAC). If you are a customer with an active J-Care or JNASC support contract,
or are covered under warranty, and need post-sales technical support, you can access
our tools and resources online or open a case with JTAC.
• JTAC hours of operation—The JTAC centers have resources available 24 hours a day,
7 days a week, 365 days a year.
• Find solutions and answer questions using our Knowledge Base: http://kb.juniper.net/
To verify service entitlement by product serial number, use our Serial Number Entitlement
(SNE) Tool: https://tools.juniper.net/SerialNumberEntitlementSearch/
In order to open a case with JTAC for Junosphere, you must provide the bank serial number,
which is located on in the Banks section of the View Banks/Sandboxes/Libraries screen
in the Serial Number column.
Revision History
Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United
States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper Networks, Inc. All other
trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners.
Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify,
transfer, or otherwise revise this publication without notice.