CloudLabBox
Try the free demo

JNCIS-ENT lab 7 of 17

Storm control and Layer 2 filters

Limit broadcast and multicast storms on access ports, then filter traffic at the three places a Junos switch can: on the port, on the VLAN and on the IRB, and prove the order in which they are applied with counters.

Run this lab

It needs Lite: its 3 nodes are set to 6 vCPU and 7,168 MB in total. That fits the free demo too.

In your workspace: Shared, then JNCIS-ENT JN0-352 guided labs, then 07 - Storm control and Layer 2 filters

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 55 minutes
Nodes need
6 vCPU, 7,168 MB
Smallest plan
Lite

The scenario

SW1 serves an office VLAN with a finance PC (PC1) and a visitor desk (PC2). Two incidents need answers:

  1. A looped cable at another office flooded broadcasts until the switches ran out of capacity: every access port needs storm control.
  2. The visitor desk must not reach the finance PC at all, may use the gateway (10.10.10.1), and the network team wants counts of what the visitor desk sends.

What you’ll practise

  • Explain storm control, its thresholds and its actions, and apply a storm-control profile
  • Name the filter types on a Junos switch: port, VLAN and router (IRB) filters
  • Explain the processing order of filters on ingress and egress
  • Write family ethernet-switching filters with Layer 2 and Layer 3 match conditions and apply them
  • Verify filters with counters

The tasks

  1. Storm control
  2. Filter types and their order
  3. A port filter for the visitor desk
  4. A VLAN filter
  5. A router filter on the IRB

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Storm control and Layer 2 filters3 nodes, 2 links. Every link is listed as text below the diagram.SW1PC1PC2ge-0/0/0eth0ge-0/0/1eth0
3 nodes, with the interface names each link uses.
Every link, as text
  • SW1 ge-0/0/0 to PC1 eth0
  • SW1 ge-0/0/1 to PC2 eth0
Nodes in Storm control and Layer 2 filters, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
SW1Juniper vJunos-switchvjunosswitch-23.4R2-S2.14 vCPU, 5,120 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC2VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder JNCIS-ENT JN0-352 guided labs.

  3. Open 07 - Storm control and Layer 2 filters and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More JNCIS-ENT labs

All JNCIS-ENT labs

Related labs in other courses

CloudLabBox is independent of Juniper Networks. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.