{"id":364,"date":"2020-04-18T03:50:08","date_gmt":"2020-04-17T18:50:08","guid":{"rendered":"https:\/\/blog.daichang.me\/?p=364"},"modified":"2025-11-19T10:15:06","modified_gmt":"2025-11-19T01:15:06","slug":"junos-%e3%81%a7%e3%81%ae-mgmt-vrf-%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/blog.daichang.me\/?p=364","title":{"rendered":"Junos \u3067\u306e mgmt. VRF \u8a2d\u5b9a"},"content":{"rendered":"<p>Junos \u3067\u306f\u539f\u5247\u3001OOB Management \u7528\u3001\u3059\u306a\u308f\u3061\u7ba1\u7406\u7528\u306e VRF \uff08\u4ee5\u4e0b\u3001mgmt. VRF\uff09\u304c\u5207\u3089\u308c\u3066\u3044\u307e\u305b\u3093\u3002<br \/>\n\u3068\u3044\u3046\u3088\u308a\u3001\u305d\u3082\u305d\u3082 <a href=\"https:\/\/www.juniper.net\/documentation\/en_US\/junos\/topics\/task\/configuration\/mgmt_junos-routing-instance-configuring.html\">mgmt. VRF \u81ea\u4f53\u304c Junos OS 17.3R1 \u304b\u3089\u642d\u8f09\u3055\u308c\u305f\u65b0\u3057\u3044\u6a5f\u80fd<\/a>\u3067\u3042\u308a\u3001\u305d\u308c\u307e\u3067 mgmt. VRF \u3092\u5207\u308b\u3053\u3068\u3059\u3089\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<\/p>\n<p>\u3053\u308c\u304b\u3089 mgmt. VRF \u304c\u4f7f\u3048\u306a\u3044\u5f0a\u5bb3\u3068\u3001mgmt. VRF \u306e\u7c21\u5358\u306a\u4f7f\u3044\u65b9\u306b\u95a2\u3057\u3066\u8aac\u660e\u3057\u307e\u3059\u3002<br \/>\n<!--more--><\/p>\n<p>\u3067\u306f\u3001mgmt. VRF \u304c\u5207\u3089\u308c\u306a\u3044\u3068\u3069\u3046\u3044\u3046\u554f\u984c\u304c\u8d77\u3053\u308b\u304b\u3068\u3044\u3046\u3068\u3001\u7ba1\u7406\u7528\u30dd\u30fc\u30c8 (OOB mgmt.) \u306b\u8a2d\u5b9a\u3057\u305f\u30a2\u30c9\u30ec\u30b9\u7a7a\u9593\u3068\u901a\u5e38\u306e\u30d5\u30a9\u30ef\u30fc\u30c7\u30a3\u30f3\u30b0\u7528\u30dd\u30fc\u30c8\u306b\u8a2d\u5b9a\u3057\u305f\u30a2\u30c9\u30ec\u30b9\u7a7a\u9593\u304c\u30eb\u30fc\u30c6\u30a3\u30f3\u30b0\u30c6\u30fc\u30d6\u30eb\u7684\u306b\u88ab\u3063\u3066\u3044\u308b\u3088\u3046\u306b\u898b\u3048\u307e\u3059\u3002<br \/>\n\u8981\u306f\u3069\u3061\u3089\u306e\u7d4c\u8def\u3082\u7b49\u3057\u304f <code>inet.0<\/code> \u4e0a\u3067\u5b66\u7fd2\u3057\u3066\u3044\u308b\u3088\u3046\u306b\u898b\u3048\u307e\u3059<br \/>\n\u3053\u306e\u72b6\u614b\u3067\u3088\u3057\u306a\u306b\u901a\u4fe1\u3057\u3066\u304f\u308c\u308c\u3070\u826f\u3044\u306e\u3067\u3059\u304c\u3001\u540c\u4e00 prefix \u306e\u30a2\u30c9\u30ec\u30b9\u3092\u305d\u308c\u305e\u308c\u306b\u8a2d\u5b9a\u3059\u308c\u3070\u3001OS \u304b\u3089\u898b\u3048\u308b\u7d4c\u8def\u8868\u7684\u306b\u306f\u540c\u4e00\u306e routing table \u306b\u4e57\u3063\u3066\u3044\u3066\u3082\u3001\u5b9f\u969b\u306b\u306f In-Band \u3068 Out-of-Band \u3068\u7570\u306a\u308b\u5834\u6240\u3067\u7ba1\u7406\u3055\u308c\u3066\u3044\u308b\u7d4c\u8def\u60c5\u5831\u3067\u3059\u306e\u3067\u3001\u305d\u306e prefix \u3067\u306e\u901a\u4fe1\u306f\u7570\u5e38\u72b6\u614b\u3068\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002<br \/>\n\u4f8b\u3048\u3070\u3001192.0.2.1\/24 \u3092 xe-0\/0\/0 \u306b\u8a2d\u5b9a\u3057\u3001192.0.2.100\/24 \u3092 em0 (fxp0, me0) \u306b\u8a2d\u5b9a\u3057\u305f\u5834\u5408\u306a\u3069\u306b\u901a\u4fe1\u7570\u5e38\u304c\u8d77\u304d\u307e\u3059\uff08\u3069\u3061\u3089\u3082 default VRF \u306b\u8a2d\u5b9a\u3055\u308c\u3066\u3044\u308b\u5834\u5408\u3067\u3059\uff09\u3002<\/p>\n<p>\u3058\u3083\u3042\u3001\u7ba1\u7406\u7528\u306e VRF \u3092\u666e\u901a\u306b VRF \u3068\u3057\u3066\u5b9a\u7fa9\u3057\u3066\u3001\u7ba1\u7406\u7528\u30dd\u30fc\u30c8\u306b\u9069\u7528\u3059\u308c\u3070\u826f\u3044\u3001\u3068\u3044\u3046\u767a\u60f3\u306b\u306a\u308a\u307e\u3059\u3002<br \/>\n\u3068\u3053\u308d\u304c Junos \u306f NTP \u3084 syslog \u3068\u3044\u3063\u305f\u30b7\u30b9\u30c6\u30e0\u304c\u81ea\u767a\u3059\u308b\u30d1\u30b1\u30c3\u30c8\u306f default VRF (<code>inet.0<\/code>, <code>inet6.0<\/code>) \u304b\u3089\u3057\u304b\u901a\u4fe1\u304c\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\u3002<br \/>\n\u305d\u306e\u305f\u3081\u3001\u7ba1\u7406\u9762\u306b default VRF \u3092\u4f7f\u7528\u3057\u3001\u5b9f\u901a\u4fe1\u9762\u306b\u5225 VRF \u3092\u5207\u308b\u3068\u3044\u3046\u3084\u308a\u65b9\u304c\u4e00\u822c\u7684\u3067\u3057\u305f\u3002<\/p>\n<p>\u3057\u304b\u3057\u3001\u3053\u308c\u3060\u3068 routing-instances (VRF) \u306e\u4e0a\uff08\u4e2d\uff09\u3067\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u8a2d\u5b9a\u3057\u306a\u3051\u308c\u3070\u3044\u3051\u306a\u3044\u306a\u3069\u3001\u4f55\u304b\u3068\u4e0d\u4fbf\u3067\u3059\u3002<br \/>\n\u307e\u305f\u3001Junos \u306e\u305d\u3046\u3044\u3063\u305f\u6319\u52d5\u3092\u77e5\u3089\u306a\u3044\u4eba\u304b\u3089\u3059\u308b\u3068\u3001\u4e00\u898b\u3059\u308b\u3068\u610f\u5473\u4e0d\u660e\u306a config \u304c\u51fa\u6765\u4e0a\u304c\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n<p>\u305d\u306e\u3088\u3046\u306a\u72b6\u6cc1\u3060\u304b\u3089\u304b\u3069\u3046\u304b\u306f\u77e5\u308a\u307e\u305b\u3093\u304c\u3001\u3088\u3046\u3084\u304f Junos OS 17.3R1 \u304b\u3089<a href=\"https:\/\/www.juniper.net\/documentation\/en_US\/junos\/topics\/task\/configuration\/mgmt_junos-routing-instance-configuring.html\">\u7ba1\u7406\u7528 VRF<\/a> \u304c\u4f7f\u7528\u3067\u304d\u308b\u3053\u3068\u3068\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<p>\u4e0b\u8a18\u306b mgmt. VRF \u3092\u5207\u308a\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u30eb\u30fc\u30c8\u3092\u8a2d\u5b9a\u3057\u3001Cloudflare \u3078 DNS \/ NTP \u3092\u89e3\u6c7a\u3059\u308b\u305f\u3081\u306e config \u306b\u306a\u308a\u307e\u3059\u3002<br \/>\nQFX \u30d9\u30fc\u30b9\u3067\u3059\u304c\u3001MX \u3084 SRX \u3082\u540c\u69d8\u306e config \u3067\u52d5\u4f5c\u3057\u307e\u3059\uff08\u8a2d\u5b9a\u306f\u9069\u5b9c\u8aad\u307f\u66ff\u3048\u3066\u304f\u3060\u3055\u3044\uff09\u3002<br \/>\n\u3053\u3046\u3059\u308b\u3053\u3068\u3067\u305d\u308c\u305e\u308c mgmt. VRF \u3068\u3057\u3066 <code>mgmt_junos.inet.0<\/code> \u3068 <code>mgmt_junos.inet6.0<\/code> \u304c\u5225 table \u3068\u3057\u3066\u3067\u304d\u307e\u3059\u3002<br \/>\n\u306a\u304a\u3001IP \u30a2\u30c9\u30ec\u30b9\u306f <code>198.51.100.100\/24, 2001:db8:1:cafe::100\/64<\/code> \u3068\u3057\u3001\u305d\u308c\u305e\u308c\u306e\u6700\u82e5\u756a\u304c GW \u3068\u3057\u307e\u3059\u3002<\/p>\n<pre class=\"prettyprint linenums\">system {\r\n    name-server {\r\n        1.1.1.1 routing-instance mgmt_junos;\r\n        2606:4700:4700::1111 routing-instance mgmt_junos;\r\n        1.0.0.1 routing-instance mgmt_junos;\r\n        2606:4700:4700::1001 routing-instance mgmt_junos;\r\n    }\r\n    management-instance;\r\n    ntp {\r\n        boot-server time.cloudflare.com;\r\n        server time.cloudflare.com prefer routing-instance mgmt_junos;\r\n    }\r\n}\r\n# Placeholder for QFX platform config.\r\ninterfaces {\r\n    em0 {\r\n        unit 0 {\r\n            family inet {\r\n                address 198.51.100.100&#47;24;\r\n            }\r\n            family inet6 {\r\n                address 2001:db8:1:cafe::100&#47;64;\r\n                address fe80::100&#47;64;\r\n                dad-disable;\r\n            }\r\n        }\r\n    }\r\n}\r\nrouting-instances {\r\n    mgmt_junos {\r\n        routing-options {\r\n            rib mgmt_junos.inet6.0 {\r\n                static {\r\n                    route ::&#47;0 next-hop 2001:db8:1:cafe::1;\r\n                }\r\n            }\r\n            static {\r\n                route 0.0.0.0&#47;0 next-hop 198.51.100.1;\r\n            }\r\n        }\r\n    }\r\n}\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Junos \u3067\u306f\u539f\u5247\u3001OOB Management \u7528\u3001\u3059\u306a\u308f\u3061\u7ba1\u7406\u7528\u306e VRF \uff08\u4ee5\u4e0b\u3001mgmt. VRF\uff09\u304c\u5207\u3089\u308c\u3066\u3044\u307e\u305b\u3093\u3002 \u3068\u3044\u3046\u3088\u308a\u3001\u305d\u3082\u305d\u3082 mgmt. VRF \u81ea\u4f53\u304c Junos OS 17.3R1 \u304b\u3089\u642d [&#8230;]<\/p>\n<p><a class=\"btn btn-secondary understrap-read-more-link\" href=\"https:\/\/blog.daichang.me\/?p=364\">\u7d9a\u304d\u3092\u8aad\u3080&#8230;<span class=\"screen-reader-text\"> from Junos \u3067\u306e mgmt. VRF \u8a2d\u5b9a<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[13,16],"class_list":["post-364","post","type-post","status-publish","format-standard","hentry","category-tech","tag-junos","tag-network"],"_links":{"self":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts\/364","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=364"}],"version-history":[{"count":1,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts\/364\/revisions"}],"predecessor-version":[{"id":438,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts\/364\/revisions\/438"}],"wp:attachment":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=364"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=364"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=364"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}