Owner's Manual

414
}
}
Radius Server
You must either define a user or provice user access with a radius server, as follows.
login {
user superguy {
class super-user;
authentication {
encrypted-password "$1$iX9M87qC$rBJubIgZ.8cjJyuxnn5cG/"; #
SECRET-DATA
}
}
}
MTU Configuration for L3 VPNs
Provisioning L3 VPNs one customer site at a time works well, but trying to provision two sites or
more at the same time, may fail, leaving stray configurations on the router that may cause more
problems.
The root issue is an MTU problem in the WAN cloud between the OpenManage Network Manager
server and the J-series routers. OpenManage Network Manager provisions using JUNOScript over
telnet/ssh, and sends large packet sizes (default MTU on Solaris server is 1500) that somehow get
fragmented and fail. The workaround is to configure the MTU size on the Ethernet NIC on the
Solaris host to a lower value (say, 1300 or 1400).
Preserving Configlet Files for Debugging
You can preserve restored configlet files on the device, for debugging. Go to the menu item Settings
-> Configuration -> Control Settings
, and, in the properties tab of the screen this produces, find
redcell.devicedriver.juniper.netrestore.delete_tmp_files . By default, this is
true, and deletes the files in temporary storage. change this to false to preserve the files.
You can see the preserved temporary files by logging into the device that was configured. Once
logged in, type
start shell to get into the shell command mode. Display the temporary
directory typing
cd /tmp . The temporary configlet files are stored here. Type cat
‘filename.conf’
to see the file contents. Find the filename restored from the user interface by
looking at the details of the Audit Log for that restore action.