Free Juniper JN0-106 Practice Exam with Questions & Answers | Set: 2

The relationship between the routing table (Routing Information Base or RIB) and the forwarding table (Forwarding Information Base or FIB) is the cornerstone of the Junos OS architectural separation between the control and data planes. The routing table resides in the control plane on the Routing Engine (RE). Its primary role is to aggregate all reachability information from every configured protocol and select the best route for each destination prefix based on criteria like preference and metrics.

Once the Routing Engine has identified the single " active " best path for a destination, it distills this complex routing data into a simplified, streamlined version called the forwarding table . The forwarding table contains only the essential information needed to move a packet: the destination prefix, the egress interface, and the Layer 2 next-hop MAC address. The RE then " pushes " this forwarding table to the Packet Forwarding Engine (PFE) in the data plane. By having the PFE use a table built from the routing table , Junos ensures that transit traffic can be processed at wire speed without the overhead of complex routing logic. This one-way flow—from the comprehensive RIB on the RE to the optimized FIB on the PFE—allows the device to maintain high performance even while routing protocols are recalculating or the management plane is under heavy load.

The Junos Command Line Interface (CLI) is structured into two primary hierarchical modes: operational mode and configuration mode. Operational mode is the default entry point when a user logs into the device, signified by the > prompt. This mode is designed for monitoring the health of the device, troubleshooting network issues, and executing system-level maintenance tasks. Specifically, an administrator uses operational mode to verify the version of Junos OS currently active on the device using the show version command.

Additionally, system-level administrative actions that do not involve modifying the device ' s persistent configuration logic are performed within the operational mode. This includes requesting the system to reboot or halt via the request system hierarchy of commands. In contrast, tasks that involve manipulating the configuration database—such as committing proposed changes or rolling back to a previous configuration version—require the user to transition into configuration mode, indicated by the # prompt. Understanding this distinction is vital for efficient navigation of the Junos CLI; while operational mode provides the tools to observe the system and manage its physical state, configuration mode is reserved for altering the logical parameters and routing policies that govern device behavior. Reference: User Interfaces, CLI Modes, Operational Mode Commands.

==========

Junos OS routing policies are evaluated using a sequential, " first-match " logic. When a route is compared against a policy, the system evaluates the terms in the order they are defined. Once a route meets all the match criteria (the from statement) in a term, the router executes the associated action (the then statement).

If the action is a terminating action —such as accept or reject—the evaluation of that specific route for that specific policy ends immediately. In this scenario, since the route matched the first term and the action was accept, the route is successfully processed and the policy evaluation is complete. The system will not proceed to evaluate the second or third terms. This behavior is critical for network architects to understand when ordering terms; more specific " exceptions " must be placed at the top of the policy, while broader " catch-all " terms must be placed at the bottom. If the administrator wanted the evaluation to continue to the next term despite a match, they would need to explicitly include the next term action, which is a non-terminating action. Without it, a match on an accept action signifies the final decision for that route within that policy context.

Junos OS incorporates a robust configuration versioning and recovery system designed to protect against configuration errors and human oversight. A key feature of this system is that rollback files are stored automatically by the device after each successful commit. These files represent a historical record of previous active configurations. By default, the system maintains a set number of these files, allowing an administrator to revert to a previous state (e.g., rollback 1) if the most recent changes result in unexpected network instability.

Another critical safety mechanism is the behavior associated with the commit confirmed command. If an administrator issues this command but fails to provide a subsequent confirmation within a designated timeframe (defaulting to 10 minutes), the system assumes a loss of management connectivity. Consequently, the rollback configurations are applied automatically after the commit confirmed timeout to restore the previous known-good state. This is an essential best practice for remote configuration management. It is important to note that rollback 0 refers to the currently active configuration, not the factory default, and that while Junos supports maintaining a large number of rollback files, the primary operational benefit lies in the automated storage and confirmation-based recovery processes that ensure the device remains reachable and stable. Reference: Configuration Basics, Rollback Configurations, Commit Confirmed Logic.

==========

The configuration exhibit demonstrates a classic scenario where mismatched static routing leads to a routing loop . Router R1 is configured with a default route ( 0.0.0.0/0 ) pointing to R2 as its next hop. Conversely, R2 is configured with a broad static route for 10.1.0.0/16 pointing back to R1 .

If a user sends a packet to an unassigned IP address such as 10.1.99.1 , the following sequence occurs:

R1 receives the packet and consults its routing table. Finding no specific match for the 10.1.99.1 host, it uses the default route and forwards the packet to R2 .

R2 receives the packet and identifies that 10.1.99.1 falls within its defined static route for 10.1.0.0/16 .

Following its configuration, R2 forwards the packet back to R1 . This process repeats indefinitely—or until the packet ' s Time to Live (TTL) reaches zero—because the broad summary on R2 encompasses addresses that R1 does not actually have a local path for. This illustrates the critical importance of ensuring that summary routes or default routes do not overlap in a way that creates circular forwarding paths for non-existent destinations. Reference: Routing Fundamentals, Static Route Configuration, Routing Loops and TTL.

==========

In the Junos OS, the Command Line Interface (CLI) uses distinct prompt symbols to provide the administrator with immediate contextual awareness of their current operating environment. When the prompt ends with a hash symbol (#) , it indicates that the user is in configuration mode .

This mode is the " engine room " of the device, where you modify the candidate configuration. Here, you can add, delete, or modify statements across the various hierarchies like [edit system], [edit interfaces] , or [edit protocols]. It is important to remember that changes made while the # prompt is visible are not active until a commit command is successfully executed.

Contrast this with the operational mode , which is indicated by a greater-than symbol ( > ) . Operational mode is used for monitoring, troubleshooting, and viewing the system status (e.g., show commands). Moving between these modes is a fundamental part of the Junos workflow: you enter configuration mode by typing configure and return to operational mode by typing exit or quit. If you see a percent sign (%), you ' ve wandered into the FreeBSD shell mode , which is a lower-level Unix environment typically reserved for advanced system maintenance. Recognizing that # means you have the power to change the system ' s " brain " is a key safety check for any network architect.

The Packet Forwarding Engine (PFE) represents the data plane of a Junos device, responsible for the high-speed processing and movement of packets through the system. Its primary role is to forward transit traffic—data that enters one interface and exits another—at wire speed using specialized hardware such as Application-Specific Integrated Circuits (ASICs). To accomplish this, the PFE utilizes a local copy of the Forwarding Information Base (FIB) provided by the Routing Engine, ensuring that forwarding decisions are made locally without requiring the main CPU ' s intervention for every packet.

In addition to pure forwarding, the PFE is the functional component that implements and executes firewall filters and policing. Because firewall filters must be applied to transit traffic at line rate to prevent bottlenecks, the PFE evaluates incoming and outgoing packets against configured filter terms in hardware. This ensures that security policies and traffic shaping are applied with minimal latency. It is critical to note that the PFE does not maintain the master routing table (RIB) or perform route selection; those " intelligent " control plane functions are strictly the domain of the Routing Engine. By offloading the repetitive tasks of packet inspection and hardware forwarding to the PFE, Junos OS maintains consistent performance even under heavy traffic loads or complex security configurations. Reference: Junos OS Fundamentals, Packet Forwarding Engine Architecture.

==========

When a Junos device is initialized for the first time or after a factory reset, it operates with a " factory-default " configuration. This configuration contains the minimum settings necessary for the device to boot, but it lacks essential security parameters. The Junos OS kernel enforces a strict security mechanism that prevents any administrator from successfully executing a commit command until a root-level password has been defined.

Specifically, the root-authentication object must be configured under the [edit system] hierarchy. This requirement ensures that no Junos device is deployed into a production environment with an open, unauthenticated root account. If an administrator attempts to commit changes without this setting, the configuration parser will return a " missing mandatory statement " error and the commit process will fail. While other settings—such as a system hostname, management IP address (on the fxp0 or me0 interfaces), or logical interface configurations—are critical for operational readiness, they are not strictly enforced by the system validation logic for the initial activation. Only the root-authentication (which can be a plain-text password or an encrypted key) is a hard prerequisite for transitioning the device from a default state to an active, running configuration.

Analyzing the provided exhibit of the inet.0 routing table reveals that the destination network 10.0.0.0/24 currently has two viable paths: a static route with a preference of 5 and an OSPF route with a preference of 10. Both routes are configured to use 10.12.0.1 via the ge-0/0/1.0 interface as their primary next hop. The static route is currently marked with an asterisk (*), indicating it is the active path chosen by the Routing Engine due to its lower preference value.

In the event that the ge-0/0/1 interface transitions to a " down " state, the physical layer failure triggers the immediate invalidation of all routes associated with that link. Consequently, both the specific static and OSPF routes for the 10.0.0.0/24 prefix are purged from the active forwarding table. The Routing Engine must then perform a re-evaluation of the routing table to identify the next best match for any traffic destined for that range. Since there are no other more specific or equally specific routes available for the 10.0.0.0/24 network, the router falls back to the default route (0.0.0.0/0) . As shown in the exhibit, the default route points to the next-hop address 10.23.0.3 via interface ge-0/0/2.0 . Therefore, if the primary interface fails, traffic will be redirected through this secondary gateway.

The architecture of Junos OS is designed with a strict functional separation between the control plane and the data plane. The Routing Engine (RE) maintains the master Routing Information Base (RIB), which acts as a comprehensive database storing all potential paths learned from various routing protocols, static configurations, and direct connections. However, to achieve wire-speed performance, the device does not consult the RIB for every packet. Instead, the RE identifies the " active " or best routes for each destination based on route preference and metrics.

Once these active routes are selected, the RE distills them into a streamlined Forwarding Information Base (FIB), commonly referred to as the forwarding table, and pushes this table to the Packet Forwarding Engine (PFE). The main function of the forwarding table is to provide a high-speed, local lookup mechanism that allows the PFE to forward transit traffic across the switch fabric with minimal latency. This table contains only the specific exit interface and Layer 2 next-hop information required for packet delivery. By isolating the PFE from the overhead of complex routing protocol state machines and all inactive redundant paths, Junos OS ensures that forwarding performance remains consistent even during control plane re-convergence. Reference: Junos OS Fundamentals, Control Plane and Forwarding Plane functions.

==========