Page 2 Products made or sold by Juniper Networks or components thereof might be covered by one or more of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899, 6,552,918, 6,567,902, 6,578,186, and 6,590,785.
Page 3: End User License Agreement
DOWNLOAD, INSTALL, OR USE THE SOFTWARE, AND (B) YOU MAY CONTACT JUNIPER NETWORKS REGARDING LICENSE TERMS. The Parties. The parties to this Agreement are (i) Juniper Networks, Inc. (if the Customer’s principal office is located in the Americas) or Juniper Networks (Cayman) Limited (if the Customer’s principal office is located outside the Americas) (such applicable entity being referred to herein as “Juniper”), and (ii) the...
Page 4 Public License (“LGPL”)), Juniper will make such source code portions (including Juniper modifications, as appropriate) available upon request for a period of up to three years from the date of distribution. Such request can be made in writing to Juniper Networks, Inc., 1194 N.
Page 5: Document History
Media Flow Manager Administrator’s Guide Document History Date Media Flow Manager Version Comments 2010-4-27 Release 2.0 Document Version 2.0 2010-6-17 Release 2.0 Document Version 2.0a...
Page 7: Table Of Contents
Central Management Console ..................2.27 Appliances (Media Flow Controllers).................. 2.27 Groups..........................2.27 Identities ..........................2.28 Profiles..........................2.28 Status Criteria........................2.28 Rendezvous........................2.28 Service Director ......................2.29 Admission Control....................... 2.30 Real-Time Log File Analyzer..................2.30 Copyright © 2010, Juniper Networks, Inc.
Page 8 CMC Setup > Identities ...................... 3.71 CMC Setup > Rendezvous....................3.73 CMC Profiles....................... 3.74 Manage Profiles........................3.74 Create Profiles........................3.74 CMC Profiles > Apply Profile ....................3.75 CMC Profiles > Edit Profile....................3.76 VIII Copyright © 2010, Juniper Networks, Inc.
Page 9 Media Flow Manager Administrator’s Guide TABLE OF CONTENTS Preset Profiles......................3.79 Preset Profiles > Preset Actions..................3.79 Preset Profiles > Preset Config ..................3.81 Service Director ......................3.82 Configure Service Director ....................3.83 Admission Control....................... 3.86 Media Flow Controller(s) Transmit Bandwidth..............3.86 Admission Control >...
Page 10 ..........................5.130 ntpdate ........................5.131 ping ........................... 5.131 radius-server ......................5.131 reload ........................5.132 reset .......................... 5.133 service-director ......................5.133 show.......................... 5.135 slogin......................... 5.136 snmp-server ......................5.136 snmp traps........................5.138 snmp traps events ......................5.138 Copyright © 2010, Juniper Networks, Inc.
Page 11 Media Flow Manager Administrator’s Guide TABLE OF CONTENTS ssh ..........................5.139 ssh client........................... 5.139 ssh server ......................... 5.140 stats .......................... 5.141 stats alarms ........................5.143 stats CHDs ........................5.144 stats samples........................5.145 tacacs-server ......................5.145 tcpdump ........................5.147 telnet ......................... 5.147 telnet-server ......................
Page 13 Figure 28 System Config > AAA Page Detail ................3.51 Figure 29 System Config > RADIUS Page Detail (Default RADIUS Settings) ......3.52 Figure 30 System Config > RADIUS Page Detail (RADIUS Servers) .......... 3.52 Copyright © 2010, Juniper Networks, Inc. XIII...
Page 14 Figure 66 CMC Profiles > Edit Profile Page Detail (Select Profile) ..........3.77 Figure 67 CMC Profiles > Edit Profile Page Detail (Edit Comment) ..........3.77 Figure 68 CMC Profiles > Edit Profile Page Detail (Add Generic Command) ......3.77 Copyright © 2010, Juniper Networks, Inc.
Page 15 LIST OF FIGURES Figure 69 CMC Profiles > Edit Profile Page Detail (All Commands) ..........3.78 Figure 70 Preset Profiles > Show Namespace Page Detail ............3.79 Figure 71 Preset Profiles > Purge Objects Page Detail ............... 3.80 Figure 72 Preset Profiles > Audit Nodes Page Detail..............3.81 Figure 73 Preset Profiles >...
Page 17 Set System Date and Time ......................3.63 Configure Network Time Protocol (NTP) ..................3.64 Add or Remove Licenses ....................... 3.65 Reboot ............................3.66 Install Upgrades ..........................3.66 Add Nodes for CMC Management ....................3.68 Create CMC Groups ........................3.71 Copyright © 2010, Juniper Networks, Inc. XVII...
Page 18 View Node Namespaces ....................... 3.79 Purge Node Namespace Objects ....................3.79 Audit Managed Nodes ........................3.80 Configure Service Director ......................3.83 Configure Admission Control Parameters ..................3.87 Add Node to Monitoring List ......................3.88 XVIII Copyright © 2010, Juniper Networks, Inc.
Page 19: Preface
Commands—Alphabetical list of all commands including keywords, arguments, and notes. Documentation and Release Notes To obtain the most current version of all Juniper Networks® technical documentation, see the product documentation page on the Juniper Networks website at http://www.juniper.net/techpubs/ Juniper Networks supports a technical book program to publish books by Juniper Networks engineers and subject matter experts with book publishers around the world.
Page 20: Typographical Conventions
Bit-rate A data rate (the amount of data transferred in one direction over a link divided by the time taken to transfer it) expressed in bits per second. Juniper Networks notation examples: Kbps (kilobits per second), KB/s (kilobytes per second).
Page 21: Documentation Feedback
Media Flow Manager Administrator’s Guide CHAPTER 1 Preface KB and KiB KB=1000 Kilo Bytes (networking), KiB=1024 Kilo Bytes (storage). MB and MiB MB=1,000,000 Mega Bytes (networking), MiB=1,005,376 (1024 x 1024) Mega Bytes (storage). Media Flow Manager: A management interface that allows you to push configurations to a number of Media Flow Controllers from a central interface.
Page 22: Requesting Technical Support
7 days a week, 365 days a year. Self-Help Online Tools and Resources For quick and easy problem resolution, Juniper Networks has designed an online self-service portal called the Customer Support Center (CSC) that provides you with the following features: •...
Page 23: Opening A Case With Jtac
Media Flow Manager Administrator’s Guide CHAPTER 1 Preface Opening a Case with JTAC You can open a case with JTAC on the Web or by telephone. • Use the Case Manager tool in the CSC at http://www.juniper.net/cm/ • Call 1-888-314-JTAC (1-888-314-5822 –...
Page 25: Media Flow Manager Overview
CHAPTER 2 Media Flow Manager Overview Media Flow Manager Administrator’s Guide CHAPTER 2 Media Flow Manager Overview Juniper Networks Media Flow Manager manages Media Flow Controllers: • Central Management Console (CMC)—Lets you attach to Media Flow Controllers and monitor them, group Media Flow Controllers into named categories, create and apply configuration templates, and apply preset action profiles.
Page 26: Remote Monitoring And Management
Once a profile is created, it can be applied to an individual Media Flow Controller or a configured group of Media Flow Controllers. CMC can also use a mutual authentication between the Media Flow Controllers and itself using configurable shared secrets. Copyright © 2010, Juniper Networks, Inc.
Page 27: Central Management Console
Media Flow Manager Administrator’s Guide CHAPTER 2 Media Flow Manager Overview Central Management Console This section describes how the Central Management Console (CMC) works; first, terminology: • Media Flow Manager Server: The machine running the CMC software managing clients. • CMC Client: The software on a Media Flow Controller being managed by a CMC server.
Page 28: Identities
The CMC server may also be put into an auto-accept mode where it immediately accepts any client that presents itself. The server may then log into each approved client, also using preconfigured credentials. Central Management Console Copyright © 2010, Juniper Networks, Inc.
Page 29: Service Director
This section describes how the Service Director feature works. Online video viewing can be significantly improved by delivering content from a location close to the user. Juniper Networks Service Director application is a cost-effective and easy to deploy solution to direct video requests to the nearest content server and deliver location specific content.
Page 30: Admission Control
Real-Time Log File Analyzer Juniper Networks Media Flow Manager also provides an interface to AWStats™ realtime logfile analyzer to provide aggregated log information output to the Reports page. A full log analysis enables AWStats to show you the following information: •...
Page 31 Media Flow Manager Administrator’s Guide CHAPTER 2 Media Flow Manager Overview • Files type • Web compression statistics (for mod_gzip or mod_deflate) • OS used (pages, hits, KB for each OS, 35 OS detected) • Browsers used (pages, hits, KB for each browser, each version Web, Wap, Media browsers: 97 browsers, more than 450 if using browsers_phone.pm library file) •...
Page 33: Media Flow Manager Web-Based Interface
Control—Set admission control options to work with Service Director. • View Logs—View the system log. • Reports—For configured nodes, generate reports. This chapter describes each page of the Media Flow Manager and each option. Figure 3 Media Flow Manager Login Page Detail Copyright © 2010, Juniper Networks, Inc.
Page 34: First Time Login
Disk Space—How much free disk space is left on this Media Flow Controller. • CPU Usage—How much CPU is currently being used by this Media Flow Controller. • Version—The version of this Media Flow Controller. First Time Login Copyright © 2010, Juniper Networks, Inc.
Page 35: Monitoring > Cmc Media Flow Controllers
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 4 Monitoring > Summary Page Detail System Information About the Media Flow Manager running the CMC: • Date and Time, current • Hostname, as configured • Uptime, since boot up •...
Page 36: Figure 5 Monitoring -> Cmc Media Flow Controllers Page
Controllers. Click OK to go back to the main CMC Media Flow Controllers page. Click Refresh to update the page with new information (if any). Click Reconnect if your Connected status is red. Monitoring Copyright © 2010, Juniper Networks, Inc.
Page 37: Figure 6 Monitoring -> Cmc Media Flow Controllers Media Flow Controller Detail Window
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Click Interrupt to stop a profile or command set from being applied, once application has already started. Click Remove Key if you need to install new Host Keys. Figure 6 Monitoring ->...
Page 38: Monitoring > Cpu Load
Below, detailed information on all data ports: RX bytes / TX bytes, RX packets / TX packets, RX mcast packets / TX discards, RX discards / TX errors, RX errors / TX overruns, RX overruns / TX carrier, and RX frame / TX collisions. Monitoring Copyright © 2010, Juniper Networks, Inc.
Page 39: Monitoring > File System
Speed and Duplex—Choose Auto (default) for the Speed and Duplex to be set automatically based on hardware. Or you can set these options to alternate values in the drop-down menu. Juniper Networks highly recommends that Speed and Duplex Note! not be changed from the auto-configured defaults.
Page 40: Figure 8 System Config > Interfaces Page Detail (Eth0 Configuration)
Click Apply to immediately apply changes; Cancel to revert to existing configuration. Click Save at the top of the page to make changes persistent. Figure 9 System Config > Interfaces Page Detail (Add new interface alias) System Config Copyright © 2010, Juniper Networks, Inc.
Page 41: System Config > Routing
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface System Config > Routing Set IP Routing options, including Default Gateway and Static Routes. See Default Gateway On the System Config > Routing page, enter an IP address and click Set Default Gateway to apply changes;...
Page 42: System Config > Dns
Click Apply to immediately apply changes; Cancel to revert to existing configuration. Click Save at the top of the page to make changes persistent. Figure 13 System Config > DNS Page Detail (Add or Modify Name Servers) System Config Copyright © 2010, Juniper Networks, Inc.
Page 43: System Config > Hostname
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Static and Dynamic Domain Names View all configured static and dynamic domain names: • Domain—The configured name for that domain. • Active—Whether or not this domain name is being used currently. •...
Page 44: System Config > Hosts
Click Add Entry to immediately apply changes. Click Save at the top of the page to make changes persistent. Figure 18 System Config > Hosts Page Detail System Config > ARP (Address Resolution) Manage Address Resolution Protocol (ARP) entries. System Config Copyright © 2010, Juniper Networks, Inc.
Page 45 Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Static and Dynamic ARP Entries View Static and Dynamic ARP Entries. See Figure 19, next. • IP address—The configured IP address for this entry. • MAC address—The physical address of this entry. •...
Page 46: System Config > Web
Click Apply to complete operation; Cancel to revert to existing configuration. You can also Generate New HTTPS Certificate by clicking that button. Click Save at the top of the page to make changes persistent across reboots. System Config Copyright © 2010, Juniper Networks, Inc.
Page 47: Figure 22 System Config > Web Page Detail (Web Ui Configuration)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 22 System Config > Web Page Detail (Web UI Configuration) Web Proxy Configuration On the System Config > Web page, set parameters for the CMC Web-based interface when proxied.
Page 48: System Config > Users
• Enabled—Whether or not this user account is enabled. User accounts are enabled by default. Disabling an account makes it inactive (logins are disallowed) but does not delete it from the system. System Config Copyright © 2010, Juniper Networks, Inc.
Page 49: Figure 24 System Config > Users Page Detail (User Accounts)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 24 System Config > Users Page Detail (User Accounts) Select a user account and Remove, Enable, and/or Disable it. Click Save at the top of the page to make changes persistent across reboots. Add New User On the System Config >...
Page 50: System Config > Ssh
Click Apply to complete operation; Cancel to revert to existing configuration. Click Save at the top of the page to make changes persistent across reboots. Figure 27 System Config > AAA Page Detail System Config Copyright © 2010, Juniper Networks, Inc.
Page 51: System Config > Radius
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Authorization Set authorization options. See Figure 28. • Map Order— Determine how the remote user mapping behaves when authenticating users via RADIUS or TACACS+. If the authenticated user name is valid locally, no mapping is performed.
Page 52: Figure 29 System Config > Radius Page Detail (Default Radius Settings)
Retransmit, and Login-lat-group values for this RADIUS server from the default RADIUS settings you made above. Click Add RADIUS Server to complete operation. Click Save at the top of the page to make changes persistent across reboots. System Config Copyright © 2010, Juniper Networks, Inc.
Page 53: System Config > Tacacs
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 31 System Config > RADIUS Page Detail System Config > TACACS+ Configure TACACS+ authentication. See for CLI details. tacacs-server Default TACACS+ Settings View and change Default TACACS+ Settings. See Figure 32, next.
Page 54: Figure 33 System Config > Tacacs+ Page Detail (Tacacs+ Servers)
Retransmit values for this TACACS+ server from the default TACACS+ settings you made above. Click Add TACACS+ Server to complete operation. Click Save at the top of the page to make changes persistent across reboots. System Config Copyright © 2010, Juniper Networks, Inc.
Page 55: System Config > Snmp
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 34 System Config > TACACS+ Page Detail System Config > SNMP Configure SNMP server options. See for CLI details. snmp-server SNMP Configuration Enable SNMP and set SNMP authentication parameters. See Figure 35, below, for graphic.
Page 56: Figure 35 System Config > Snmp Page Detail (Snmp Configuration)
Click Add New Trap Sink to complete adding the new trap sink. Click Save at the top of the page to make changes persistent across reboots. Figure 36 System Config > SNMP Page Detail (Trap Sinks) System Config Copyright © 2010, Juniper Networks, Inc.
Page 57: System Config > Faults
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface System Config > Faults Configure Fault Reporting options. See for CLI details. email Fault Reporting Set SMTP server, Domain name overrides, Return address, and other options. See Figure next.
Page 58: Figure 38 System Config > Faults Page Detail (Notify Recipients)
Click Add Recipient to complete adding the new notify recipient. Click Save at the top of the page to make changes persistent across reboots. Figure 39 System Config > Faults Page Detail (Add New Notify Recipients) System Config Copyright © 2010, Juniper Networks, Inc.
Page 59: System Config > Logging
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface System Config > Logging Configure logging options. Local Log Filtering Set severity level, see Figure 40 for graphic; options are: • Notice—Normal but significant condition or response that could affect operations (default). •...
Page 60: Figure 41 System Config > Logging Page Detail (Local Log Rotation)
Click Apply to complete Remote Sink configuration, Cancel to revert to existing configuration. Click Save at the top of the page to make changes persistent across reboots. Figure 43 System Config > Logging Page Detail (Add New Remote Sink) System Config Copyright © 2010, Juniper Networks, Inc.
Page 61: System Config > Configurations
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Log Format Choose either Standard (default) or WELF (Web trends Enhanced Log Format). If you choose WELF, a WELF firewall name option displays; specify the firewall name that should be associated with each message logged in WELF format.
Page 62: Figure 46 System Config > Configurations Page Detail (Active Configuration)
Remote Username—Login username. • Remote Password—Login password for the set Remote Username. • Remote Config Name—File name of the desired configuration. • New Config Name—A new name for the imported configuration (optional). System Config Copyright © 2010, Juniper Networks, Inc.
Page 63: System Config > Date And Time
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface • Import shared data only—Uncheck to import all nodes, even those not available on this system. Figure 48 System Config > Configurations Page Import Configuration Detail System Config > Date and Time Set system Date and Time, and Time Zone;...
Page 64: System Config > Ntp
Select a server and Remove, Enable, and/or Disable it. Click Save at the top of the page to make changes persistent across reboots. NTP servers are enabled by default. Figure 51 System Config > NTP Page Detail (NTP Servers) System Config Copyright © 2010, Juniper Networks, Inc.
Page 65: System Config > Licensing
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Add New NTP Server Enter NTP server IP address, version, and enable/disable. See Figure 52, next. Figure 52 System Config > NTP Page Detail (Add New NTP Server) System Config >...
Page 66: System Config > Reboot
View installed images and Switch Boot Partition. You may need to switch the boot partition if the image you want to install is in the other partition. See Figure 56 for graphic. Click Save at the top of the page to make changes persistent across reboots. System Config Copyright © 2010, Juniper Networks, Inc.
Page 67: Figure 56 System Config > Upgrade Page Detail (Installed Images)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 56 System Config > Upgrade Page Detail (Installed Images) Install New Image To set partition; use Switch Boot Partition, above, if needed. See Figure 57 for graphic. •...
Page 68: Cmc Setup
Comment—The comment you entered for the Media Flow Controller when you added it. Use Remove to delete the selected Media Flow Controllers from CMC management; Disable to temporarily stop CMC from managing the selected Media Flow Controllers; Enable to allow CMC Setup Copyright © 2010, Juniper Networks, Inc.
Page 69: Figure 58 Cmc Setup Page Detail (Managed Nodes List)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface management to the selected Media Flow Controllers; and Refresh to update the page with the latest information. Figure 58 CMC Setup Page Detail (Managed Nodes List) Add New Media Flow Controller Node For each Media Flow Controller that you want this CMC to manage you’ll need a name, IP address, and authentication type with applicable values.
Page 70: Figure 59 Cmc Setup Page (Add New Node)
Click the Edit link to open an Edit page for the selected node. Click Save at the top of the page to make changes persistent across reboots. Figure 59 CMC Setup Page (Add New Node) CMC Setup Copyright © 2010, Juniper Networks, Inc.
Page 71: Cmc Setup > Groups
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface CMC Setup > Groups Once you’ve added the Media Flow Controllers that you want to manage, you can group them logically. A group can be treated acted on as an individual appliance. Figure 60, next, for graphic.
Page 72: Figure 61 Cmc Setup > Identities Page
Password you entered and will be authenticated with the identity keys you generated. Click Save at the top of the page to make changes persistent across reboots. Figure 61 CMC Setup > Identities Page CMC Setup Copyright © 2010, Juniper Networks, Inc.
Page 73: Cmc Setup > Rendezvous
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface CMC Setup > Rendezvous Rendezvous is the mechanism by which Media Flow Controllers connect to a CMC for management. This page lets you set parameters for Media Flow Controllers to connect automatically.
Page 74: Cmc Profiles
You can select a configured Profile name from the drop-down list and click Select (if needed) to edit a profile. 3. You can Edit the comment for the selected profile; click Apply when done. The comment for that profile changes. CMC Profiles Copyright © 2010, Juniper Networks, Inc.
Page 75: Cmc Profiles > Apply Profile
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface 4. You can add a Generic Command by entering a Sequence # for where in the sequence of existing commands for that profile this command should be executed, and entering a CLI command in the Command text box.
Page 76: Cmc Profiles > Edit Profile
CMC Profiles > Edit Profile Use this page to edit a configured profile chosen from the Profile name drop-down list. See Figure 66, next, for graphic. See for CLI details. cmc profile CMC Profiles Copyright © 2010, Juniper Networks, Inc.
Page 77: Figure 66 Cmc Profiles > Edit Profile Page Detail (Select Profile)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface When you edit a profile, you must re-apply it to the nodes and/or groups that you Important! want to have that profile; the changes are not automatically pushed out. Figure 66 CMC Profiles >...
Page 78: Figure 69 Cmc Profiles > Edit Profile Page Detail (All Commands)
“System Config > SNMP” on page Faults “System Config > Faults” on page Logging “System Config > Logging” on page “System Config > NTP” on page Licensing “System Config > Licensing” on page CMC Profiles Copyright © 2010, Juniper Networks, Inc.
Page 79: Preset Profiles
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Upgrade “System Config > Upgrade” on page Preset Profiles The Preset Profiles pages let you take certain actions on configured profiles and Media Flow Controllers. Preset Profiles > Preset Actions For the selected Media Flow Controller or group, you can use Preset Actions.
Page 80 Figure 72 for graphic. You must create a baseline audit for your nodes and/or groups by clicking Audit Important! Node pro-actively; do this anytime a new profile is applied or changes are made. Preset Profiles Copyright © 2010, Juniper Networks, Inc.
Page 81: Preset Profiles > Preset Config
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 72 Preset Profiles > Audit Nodes Page Detail Preset Profiles > Preset Config For the selected Media Flow Controller or group, you can verify a Preset Config. Apply Probe Setup a probe namespace that can be used by probes, such as load-balancer probes, to check the health of nodes.
Page 82: Service Director
Manager can access so you will be able to reference it. <?xml version="1.0" encoding="UTF-8" ?> <geoiplookup name="GeoIP Service" service="Host Lookup"> <version>1.0.1</version> <host_1>media10.break.com</host_1> <host_2>media10.break.com</host_2> <host_3>media10.break.com</host_3> <country_code>USA</country_code> <region_code>California</region_code> <city_code>Los Angeles</city_code> <client_ip>204.102.252.1</client_ip> <query_ip>98.22.15.52</query_ip> <curr_time>1234567890</curr_time> <error_code>0</error_code> </geoiplookup> Service Director Copyright © 2010, Juniper Networks, Inc.
Page 83: Configure Service Director
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Configure Service Director Use the Service Director > Configure page to set up Service Director, see Figure 74. You need the name and location of any Preset XML Response files you have created (in the format given above), or, to enter information directly, the host/domain names (URL Host) for Media Flow Controllers to which geographically-near incoming requests should be directed.
Page 84: Figure 76 Service Director > Configure Page Detail (Optional Security Configuration)
Host to Respond and Host 1, Host 2, and Host 3—Select the radio-button and enter up to three hostnames. Click Add to complete the Match to Response configuration and Save at the top of the page to make changes persistent across reboots. Service Director Copyright © 2010, Juniper Networks, Inc.
Page 85: Figure 77 Service Director > Configure Page Detail (Match Response Configuration)
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Figure 77 Service Director > Configure Page Detail (Match Response Configuration) Manage Service Director Activate, Deactivate, or Remove entirely a configured Matching URL Host chosen from the drop-down list. Figure 78, below, for graphic.
Page 86: Admission Control
Watermark, and Sampling Frequency settings. Media Flow Controller Interfaces Monitored—Shows which interface monitoring is taking place on for each managed Media Flow Controller. Monitoring should happen on the interface that receives and delivers traffic. Admission Control Copyright © 2010, Juniper Networks, Inc.
Page 87: Admission Control > Configure
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface Admission Control > Configure Click the Configure link at left to open configuration options, the Media Flow Controller Transmit Bandwidth graph still displays at top. Configure Control Parameters Configure a high watermark bandwidth and low watermark bandwidth.
Page 88: Figure 81 Admission Control > Configure Page Detail (Monitored Nodes List)
Click Add to complete the monitoring list configuration and Save at the top of the page to make changes persistent across reboots. Configuration changes take effect immediately from the next client request. Figure 82 Admission Control > Configure Page Detail (Add Node to be Monitored) Admission Control Copyright © 2010, Juniper Networks, Inc.
Page 89: View Logs
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface View Logs The Media Flow Manager system log (syslog) records system activity including: Continuous log, updated every 10 seconds. Current log, that day’s activity. Archived (does not display if not applicable) log (1 - n) Figure 83 CMC View Log Page Detail Reports...
Page 90: Figure 84 Cmc Reports Page Detail
• Domains/countries of hosts visitors (pages, hits, KB, 269 domains/countries detected, GeoIp detection), • Hosts list, last visits and unresolved IP addresses list, • Most viewed, entry and exit pages, • Files type, Reports Copyright © 2010, Juniper Networks, Inc.
Page 91 Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface • Web compression statistics (for mod_gzip or mod_deflate), • OS used (pages, hits, KB for each OS, 35 OS detected), • Browsers used (pages, hits, KB for each browser, each version (Web, Wap, Media browsers: 97 browsers, more than 450 if using browsers_phone.pm library file), •...
Page 93: About The Command Line Interface (Cli)
Media Flow Manager Administrator’s Guide CHAPTER 4 About the Command Line Interface (CLI) The Juniper Networks Media Flow Manager™command line interface (CLI) supports industry- standard commands for configuration and management as well as Media Flow Manager specific commands. The CLI supports command-line editing: press the up arrow to repeat previous lines, and the left arrow to edit the current line.
Page 94: Command Conventions
TAB completes the en command out to enable. Completion (hitting TAB) also shows all commands following the typed letters; for example, typing e (in Standard mode) and then pressing TAB shows enable and exit as the available commands starting with e. Command Conventions Copyright © 2010, Juniper Networks, Inc.
Page 95: Command Syntax Notation Conventions
Media Flow Manager Administrator’s Guide CHAPTER 4 About the Command Line Interface (CLI) Command Syntax Notation Conventions Table 3 shows the notation conventions used in this document to describe command syntax. Table 3 Command Syntax Notation Conventions Notation Description Example Keyword The first word or set of consecutive characters interface...
Page 96: Cli Options
Other cli commands that take one-time actions, rather than change a setting, and thus do not fall under the session or default umbrellas. For example, cli clear-history. • terminal commands are clones of a subset of the cli session commands, and are only present for ease-of-use. CLI Options Copyright © 2010, Juniper Networks, Inc.
Page 97 Media Flow Manager Administrator’s Guide CHAPTER 4 About the Command Line Interface (CLI) Some settings, such as the terminal length and width, are inherently session-specific, Note! and there are no corresponding commands to set defaults. Also, some commands are only available in default form.
Page 98 Display CLI settings: the inactivity timeout, whether or not paging is enabled, the terminal size and type. For settings which have configured defaults, both those and the current session settings are displayed. CLI Options Copyright © 2010, Juniper Networks, Inc.
Page 99: Cli Commands
Leave Configuration mode, or close the CLI window if in Standard mode. exit Manipulate stats, and tcpdump reports. file ftp-server. Configure FTP settings. help View the interactive help system. Set the system’s hostname. hostname Manage software images. image Configure network interfaces. interface Copyright © 2010, Juniper Networks, Inc.
Page 100 “CLI Options” on page terminal EXEC. Trace the route packets take to a destination. traceroute Configure user accounts and set capabilities. username Configure the Web-based management console. Save the running configuration to persistent storage. write Copyright © 2010, Juniper Networks, Inc.
Page 101: Aaa
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Configure AAA (authentication, authorization and accounting) settings; AAA accounting options are not supported at this time. Note that RADIUS and/or TACACS+ authentication must be configured before these options can be specified with this command. aaa (authentication) Configure authentication settings.
Page 102: Arp
• —Allow or disallow (with no) enabling fallback reboot if next fallback-reboot enable the configuration file cannot be applied after an upgrade or downgrade is attempted. Copyright © 2010, Juniper Networks, Inc.
Page 103: Clear
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands • —Specify which location the system should boot from by default; use 1 or 2 for system location ID. Use next to set the boot location to be the next one after the one currently booted from.
Page 104: Cmc
{password [password <pw> |username <username><pw>] | {ssh-dsa2 | ssh- rsa2} identity <identity> [push [username<user> password<pw>]} authtype check-status client-requests enable comment connection {auto | reconnect | connect | disconnect} enable port <port#> remove-key rename <new_appliance_ID> source address <IP_address> port <port#> Copyright © 2010, Juniper Networks, Inc.
Page 105 Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Create or delete (with no) an <appliance ID> for a remote appliance to manage; also enter an address and port number. NOTE: this will interrupt any active operations on this appliance (e.g.
Page 106: Cmc Auth
Configure CMC authorization. See “CMC Setup > Identities” on page 71 for implementation details. cmc auth host-key {strict | global-only} {ssh-dsa2 | ssh-rsa2} identity <identity> generate public <key> private [<key>] Copyright © 2010, Juniper Networks, Inc.
Page 107: Cmc Group
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Notes: • or ssh-rsa2 identity —Configure options for ssh-dsa2 or ssh-rsa2 ssh-dsa2 authorization. • —Generate a new identity (a private and public key-pair) or delete (with no) generate an existing identity. •...
Page 108: Cmc Profile
ARP, hostname, the resolver, licensing, ssh, time zone, and the CMC itself. show cmc profiles Lists all the profiles currently configured. show cmc profiles <profile_name> Shows the settings and commands in an individual profile. Copyright © 2010, Juniper Networks, Inc.
Page 109: Cmc Rendezvous
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands cmc rendezvous Configure Central Management Console rendezvous options. cmc rendezvous server accept {client <client> | all} auth default authtype password username <name> password [<password>] ssh-dsa2 | ssh-rsa2 username <name> identity <identity> auto-accept enable service-name <name>...
Page 110: Cmc Server
PER APPLIANCE that we are currently transmitting to. show cmc server Show general CMC server configuration and status. cmc status Configure CMC status monitoring of managed appliances. cmc status enable check-interval <number_of_seconds> timeout <number_of_seconds> force check criteria Copyright © 2010, Juniper Networks, Inc.
Page 111: Configuration
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Notes: • —Enable or disable status checking of connected appliances. enable • —Sets the time delay between the start of one check-interval <number of seconds> status check and the start of the next. •...
Page 112 • —Write the running configuration to persistent storage. If the to keyword is not write used, write to the currently active file. If to is used, write to persistent storage to the configuration Copyright © 2010, Juniper Networks, Inc.
Page 113: Configuration Text
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands specified file, and change the active file to that one. If no-switch is specified after to, the active configuration file is not changed to the named file after the save. If downloading configuration files from another system running the management Note! system, they can be found in the /config/db directory.
Page 114: Configure
Enter configuration mode from Enable mode. configure terminal From enable enter configure terminal to go to Configuration mode. Use exit to go from Configuration mode to Enable mode; disable to go from Enable mode to Standard mode. configure Copyright © 2010, Juniper Networks, Inc.
Page 115: Crypto
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands crypto Media Flow Manager only. Configure IPSec cryptographic settings. crypto ipsec peer <IP_address> local <IP_address> keying ike [preshared-key <string> | prompt-preshared-key] [mode {transport|tunnel}] [exchange-mode {main|aggressive|base}] [pfs_group <group #>] [lifetime <seconds>] [encrypt {3des|aes-cbc|none}] [auth {hmac-md5|hmac-sha1}] no crypto ipsec peer <IP_address>...
Page 116: Debug
[event <event_name>] dead-letter enable [cleanup max-age <duration>] domain <hostname or IP_address> mailhub <hostname or IP_address> malhub-port <port> notify event <event_name> recipient <email_address> [class [failure] [info]] [detail] return-addr <username> return-host send-test debug Copyright © 2010, Juniper Networks, Inc.
Page 117 Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Notes: • auth • —Enable SMTP authentication for Media Flow Controller emails; default is enable disabled. Use no email auth to re-disable. • —Set a password for SMTP authentication of emails; if no password is set, password the user is prompted for the password.
Page 118: Email Event Name
—Disk I/O per second has risen too high. disk-io-high • —Disk I/O per second has fallen back to acceptable levels. disk-io-ok • —Unexpected system shutdown. unexpected-shutdown • —An interface’s link state has changed to UP.* interface-up email Copyright © 2010, Juniper Networks, Inc.
Page 119: Email Class
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands • —An interface’s link state has changed to DOWN.* interface-down • —Average CPU utilization has risen too high. cpu-util-ave-high • —Average CPU utilization has fallen back to normal levels. cpu-util-ave-ok * Can be added to info events class (see below) with email notify event <event_name>. email class Email class options are as follows: •...
Page 120: File
—Display a list of statistics report files. Use the filename option to display the stats contents of a particular statistics report file. • —Display a list of tcpdump files. Use the filename option to display a summary tcpdump of the contents of a particular tcpdump file. file Copyright © 2010, Juniper Networks, Inc.
Page 121: Ftp-Server
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands ftp-server Configure FTP (file transfer protocol) settings. ftp-server {enable} Enable the FTP server. Use no ftp-server enable to disable. show ftp-server Show FTP server settings. hostname Set system hostname. See “System Config > Hostname” on page 43 for task details.
Page 122: Interface
—Enable or disable (with no) use of DHCP on the specified interface. This gets the dhcp IP address and netmask via DHCP so those settings are ignored. Setting the IP address and netmask disables DHCP implicitly, though it can also be disabled explicitly using the interface Copyright © 2010, Juniper Networks, Inc.
Page 123 —Set or clear (with no) this interface’s IP address and netmask. Important! IP_address • —Set the interface MTU. Default is 1500. Juniper Networks recommends keeping the default. Use no interface <interface_name> mtu to reset default. • —Enable or disable (with no) the specified interface.
Page 124: Job
Jobs are implicitly created by setting a job option. A job is pending when both a time in the future is specified, and the job is enabled. A job may have an empty set of CLI commands. Copyright © 2010, Juniper Networks, Inc.
Page 125 Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Jobs are specified in local time, meaning that if the time on the system changes, the job occurs in the new local time of the system (assuming that time has not passed). An arbitrary number of CLI commands may be specified with a job and are executed in the order specified by the set sequence numbers.
Page 126: License
Display a list of all installed licenses and list all licensable features which are currently activated by a license. For each, display: • A unique ID which is a small integer. license Copyright © 2010, Juniper Networks, Inc.
Page 127: Logging
It does not record service activity or errors. The Media Flow Controller errorlog records service related errors but is mostly useful for debugging by Juniper Networks Support. Media Flow Controller provides several service-specific logs, detailed in Chapter 5, “Media Flow Controller Fault...
Page 128 • (default)—Squid standard format. standard • —Web trends Enhanced Log Format. Use fw-name to specify the firewall name welf that should be associated with each message logged in WELF format. If no firewall logging Copyright © 2010, Juniper Networks, Inc.
Page 129: Logging Severity Level
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands name is set, the hostname is used by default. Use no logging format welf fw-name to delete. • —Set the severity level at which user-executed CLI commands are level cli commands logged.
Page 130: Ntp
—Enable or disable NTP overall. Default is enabled. disable • —Add or delete (with no) an NTP peer. peer • —Temporarily disable this NTP peer. Use no ntp peer disable <NTP_per_IP_address> disable to re-enable. Copyright © 2010, Juniper Networks, Inc.
Page 131: Ntpdate
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands • —Allowable version numbers are 3 and 4; default is 4. If version number unspecified, default is used. • —Add or delete (with no) an NTP server. server • —Temporarily disable this NTP server. Use no ntp server disable <NTP_server_IP_address>...
Page 132: Reload
—Set or reset to default (with no), the (global) timeout for retransmitting a timeout request to any RADIUS server. Default is 3. Sets . Range is 1-60. show radius RADIUS settings. reload Reboot or shut down the system. reload force halt [noconfirm] noconfirm reload Copyright © 2010, Juniper Networks, Inc.
Page 133: Reset
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Notes: • —Reboot the system. If there are unsaved changes to the configuration, you may reload be prompted to save these changes (do a write memory) first before rebooting. The prompt is suppressed if confirmation of losing unsaved changes is disabled (with the no cli default prompt confirm-unsaved command).
Page 134 <name> <http-url> located at an external server; the configured file <name> and <http-url> allow the file to be extracted from a server, this file should be installed in the document root directory. service-director Copyright © 2010, Juniper Networks, Inc.
Page 135: Show
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Example: http://www.example.com/svc/geo/uk- service-director xml-response UK-response xml-map.xml service-director query-url-host geosvc.example.com match isp Comcast response video1.comcast.com video2.comcast.com match zip 95054 response example1.video.com example2.video.com match city “Los Angeles” response cdn1.video.com cdn2.video.com match state CA response 12.1.10.183 12.1.10.184 12.2.18.23 match country USA response cdn2.video.com match country GBR response UK-response match continent Asia response cdn.singapore.com...
Page 136: Slogin
At this time, Media Flow Controller does not support provisioning over SNMP V3. Note! snmp-server community <community_name> [ro] contact <contact_name> enable [communities] [traps] host <IP_address> disable traps [version <trap_version> | 1 | 2c] [<community_string>] listen [enable] [interface <interface_name>] location <system_location> slogin Copyright © 2010, Juniper Networks, Inc.
Page 137 Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands traps event <event_name> user {<user_name> | admin} v3 Notes: • —Set a community name for either read-only (ro) or read/write (rw) SNMP community requests. Default, and if unspecified, is ro. The read-only community means only queries are performed.
Page 138: Snmp Traps
Network utilization has risen too high. netusage-high Paging activity has risen too high. paging-high A process in the system has crashed. process-crash A process in the system unexpectedly exited. process-exit Smartd warnings. smart-warning Unexpected shutdown. unexpected-shutdown snmp-server Copyright © 2010, Juniper Networks, Inc.
Page 139: Ssh
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Configure your SSH client and server. ssh client Configure SSH (secure sockets shell) client options. ssh client global host-key-check {ask | no | yes} known-host <known_host_entry> user {<username> | admin | cmcrendv | monitor} authorized-key sshv2 <public_key>...
Page 140: Ssh Server
—Configure SSH server interface access restrictions. listen • —Enable (default) or disable (with no) the listen interface-restricted list for enable SSHD. If enabled and at least one non-DHCP interface is specified in the list, the SSH Copyright © 2010, Juniper Networks, Inc.
Page 141: Stats
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands connections are only accepted on those specified interfaces. When disabled, SSH connections are accepted on any interface. • —Add interfaces to the listen list; default is eth0. If interface <interface_name> the interface is also running as a DHCP client, it is as if the interface was not added. If DHCP is later turned off on this interface, it is as if the interface was then added to the listen list.
Page 142 (hh:mm:ss); in 24-hour time. Dash (-) may be used in the <time> field as an abbreviation for midnight. The date and time specified are interpreted as local time according to the currently set timezone. stats Copyright © 2010, Juniper Networks, Inc.
Page 143: Stats Alarms
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands • —If a filename is specified, the stats are exported to a file of filename <filename> that name; otherwise a name is chosen automatically and contains the name of the report and the time and date of the export. Any automatically-chosen name is given a .csv extension.
Page 144: Stats Chds
CPU utilization that day: percentage of time spent. Default interval and range are cpu_util_day 1800 seconds. Disk I/O (input/output) in kilobytes per second. disk_io Filesystem usage average that day: bytes. Default interval and range are 300 fs_mnt_day seconds. stats Copyright © 2010, Juniper Networks, Inc.
Page 145: Stats Samples
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Table 7 Stats CHDs (continued from previous page) Stat CHD Description Filesystem usage for that month: bytes. Default interval and range are 7200 fs_mnt_month seconds. Filesystem usage for that week: bytes. Default interval and range are 1800 fs_mnt_week seconds.
Page 146 —Sets, or resets to the default (with no), a global communication value for all timeout TACACS+ servers. Can be overridden in a tacacs-server host command. Range is 1-60, default is 3. Sets the wait time for retransmitting a request to any TACACS+ server. tacacs-server Copyright © 2010, Juniper Networks, Inc.
Page 147: Tcpdump
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands show tacacs TACACS+ settings. tcpdump tcpdump [<options>] Network diagnostic tool. Invokes standard binary, passing command line arguments straight through. Runs in foreground, printing packets as they arrive, until user hits Ctrl+C. telnet EXEC command.
Page 148 (not so for cleartext passwords) and can be re-applied with the saved configuration. show usernames users [history [username <username>]] whoami username Copyright © 2010, Juniper Networks, Inc.
Page 149: Web
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands Notes: • —List of all user accounts and the capabilities of each. usernames • —List of all currently logged-in users, and related information such as idle time and users what host they have connected from. Optionally, choose history to view the history of user logins, past and present.
Page 150: Web Proxy
• basic • —Configure HTTP basic authentication settings for the Web proxy. basic —Specify a plaintext password for HTTP • password <plaintext_password> basic authentication with an authenticating proxy. Only used if the web proxy Copyright © 2010, Juniper Networks, Inc.
Page 151: Write
Media Flow Manager Administrator’s Guide CHAPTER 5 CLI Commands auth authtype is set to basic. Note the password is accepted and stored in plaintext. —Specify a username for HTTP basic authentication with • username <username> an authenticating proxy. Only used if the web proxy auth authtype is set to basic.
Page 153: Index
Management Console connecting Management Console RADIUS options banners SSH options commands copying boot configuration files commands counters image file, location reset for rate-limit stats creating configuration file cache Copyright © 2010, Juniper Networks, Inc.
Page 154 SNMP settings host SSH client information RADIUS, set system time, date, and timezone TACACS system version host-key, SSH HTTP add ⁄ delete servers access to Management Console show configuration domains Copyright © 2010, Juniper Networks, Inc.
Page 155 MB and MiB, definitions clock, commands merging, configurations display version motd (message of the day) banner, set hostname moving reboot configuration files reset to factory image files set clock stats files Copyright © 2010, Juniper Networks, Inc.
Page 156 SCP and FTP requirement uploading configuration files log files uri-prefix example and usage SCP format users commands version, system viewing local log file warnings changing duplex ⁄ speed reverting to factory defaults watermark, definition Copyright © 2010, Juniper Networks, Inc.

Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI Administrator's Manual

Quick Links

Need help?

Questions and answers

Related Manuals for Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI

Summary of Contents for Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI

Table of Contents