Create the link group interface and assign an IP address to it

[local]Redback(config)#context local
[local]Redback(config-ctx)#interface AMS-IX
[local]Redback(config-if)#ip address 195.69.x.x/23
[local]Redback(config-if)#exit

Create the link group and bind it to its interface

[local]Redback(config)#link-group AMS-IX ether
[local]Redback(config-link-group)#bind interface AMS-IX local

Configure an ethernet port and add it to the link group

[local]Redback(config-config)#port ethernet 1/1
[local]Redback(config-port)#no shutdown
[local]Redback(config-port)#link-group AMS-IX
[local]Redback(config-port)#exit

Configure another ehternet port and add it to the link group

[local]Redback(config-config)#port ethernet 1/2
[local]Redback(config-port)#no shutdown
[local]Redback(config-port)#link-group AMS-IX
[local]Redback(config-port)#exit

To match the AMS-IX arp timeout (4 hours) you need to configure this under the interface

[local]Redback(config)#context local
[local]Redback(config-ctx)#int AMS-IX
[local]Redback(config-if)#ip arp timeout 14400
[local]Redback(config-port)#exit

Also, you can set your aggregated min-links to a value that will cause the bundle to drop in the event that your links can no longer support the amount of traffic you move trough the link-group.Thus, 2-port aggregated link, pushing 1.2 Gbps sustained across, drop bundle if n == 1;

[local]Redback(config)#link-group AMS-IX ether
[local]Redback(config-link-group)#minimum-links 2
[local]Redback(config-link-group)#exit

This config is made to interconnect with an aggregated link towards the AMS-IX. For other Link aggregation interconnects you need to make changes towards this config.

So please stop asking me for complete configs !!!! Get a J Course or Google a bit

{master}[edit]
marcel@re0.lab2# show snmp
    location Amsterdam;
    contact "netops@domain.tld";
    community blablablabla {
    authorization read-only;
    clients {
        10.10.10.1/32;
        172.16.1.200/32;
    }
}
Very basic and easy I’m not a personal helpdesk so figure out your self how to configure read-write

1.  Log in to the master Routing Engine.

2.  Enter the JUNOS software configuration mode:

	{master}

	marcel@re0.lab2> configure

3.  Disable Routing Engine redundancy.

	{master} [edit]

	marcel@re0.lab2# delete chassis redundancy

4.  Save the configuration change on both Routing Engines.

	{master} [edit]

	marcel@re0.lab2# commit synchronize and-quit

5.  Log in to the backup Routing Engine.

       {master}
        marcel@re0.lab2> request routing-engine login other routing-engine

	{backup}

	marcel@re1.lab2> request system software add

	/var/home/marcel/jinstall-8.xxx.x-domestic-signed.tgz reboot

6.  Switchover to the other Routing Engine to change the role.

       {backup}
        marcel@re1.lab2> quit

       {master}
       marcel@re0.lab2> request chassis routing-engine master switch
      
       marcel@re0.lab2>

7.  Install the new software version on the Backup Routing Engine.

	{backup}

	marcel@re0.lab2> request system software add

	/var/home/marcel/jinstall-8.xxx.x-domestic-signed.tgz reboot

8.  Enable Routing Engine Redundancy again 

	{master}

	marcel@re1.lab2> configure

	[edit]

	marcel@re1.lab2# rollback 1

9.  Save the configuration change on both Routing Engines

	[edit]	marcel@re1.lab2> commit synchronize and-quit

10.  If you are satisfied that the new software is running smoothly

                     {master}

	marcel@re1.lab2> request routing-engine login other routing-engine

	{backup}

	marcel@re0.lab2> request system snapshot

	{backup}

	marcel@re0.lab2> quit

It is not hard to config aggregated links.

[edit]
marcel@lab2# show chassis
aggregated-devices {
    ethernet {
        device-count 2;
    }
}
---
[edit]
marcel@lab2# show interfaces ge-1/0/0
gigether-options {
    802.3ad ae0;
}

[edit]
marcel@lab2# show interfaces ge-1/1/0
gigether-options {
   802.3ad ae0;
}

[edit]
marcel@lab2# show interfaces ae0
description "AE0 towards lab-1";
unit 0 {
   family inet {
       filter {
           input AMSIX-in;
           output AMSIX-out;
       }
       address 10.10.4.2/30;
   }
   family inet6 {
       address 2001:0960:1300:1144::1/64;
   }
}

It is also possible to use load balancing per packet.

Be advised that the IPv6 part of the webinterface is buggy.

I build the tunnel between an Juniper M7i and a Netscreen 5gt-wireless
You only will find the config to configure your Netscreen device in this document.

First step to do is to enable ipv6 in the device. You have to do this on the commandline (serialconsole/telnet/ssh).

Config needs to be done on the command line of your netscreen device

Save your config and reset the device.

Some Background info:

• Trust interface 10.10.10.1 – Trust
• Untrust interface – Untrust
• IPv6 broker (choose any you like. SixXs is preffered) – 213.204.x.x
• IPv6 subnet – 2001:960:2000::/48

First configure the Trust interface:

Time to configure the tunnel:

Next step is to setup a static route towards the far end side:

Now we need a policy to allow traffic in/out:

Use these policy’s at your own risk. Your IPv6 network is now fully open. You need to configure strict policy’s to keep your network safe.

NOTE: Do not ask me questions how to configure your clients behind a netscreen. Google is your friend.
I’m not a tunnel-broker so stop bugging me with questions to get an IPv6 Tunnel !!!!

They are in Dutch.