Juniper Day One+ MX304 User manual

Day One+
MX304
IN THIS GUIDE
Step 1: Begin | 1
Step 2: Up and Running | 7
Step 3: Keep Going | 12
Step 1: Begin
IN THIS SECTION
Meet the MX304 Universal Router | 2
Install the MX304 | 2
Power On | 5
In this guide, we provide a simple, three-step path, to quickly get you up and running with your new router. We've
simplied and shortened the installaon and conguraon steps, and included how-to videos. You'll learn how to install
the MX304 in a rack, power it up, and congure basic sengs.
This guide covers how to install an AC-powered MX304 router. For instrucons on installing DC-powered and
HVAC/DC-powered MX304 routers, see the MX304 Hardware Guide.

Meet the MX304 Universal Router
The MX304 router provides a highly compact, 2 U plaorm with the exibility to scale out services with 4.8 Tbps
system capacity. Based on Juniper Networks Trio 6 chipset, the MX304 router is designed and opmized for a wide
range of demanding edge requirements (business, residenal, mobile, cable, data center and more) anywhere in the
network.
The MX304 router runs the Junos operang system (Junos OS). It has pluggable Roung Engines (it supports one or two
Roung Engines), two dedicated AC, DC, or HVAC/HVDC power supply modules, and front-to-back cooling. It accepts
up to three line card MICs (LMICs), each with a Trio 6.0 chipset and 1.6 Tbps of forwarding capacity. The MX304 router
supports a maximum of 12x400 Gbps ports, 48x100 Gbps ports or a combinaon (with three LMICs).
Install the MX304
IN THIS SECTION
What's in the Box? | 2
What Else Do I Need? | 3
Install the MX304 Router in a Four-Post Rack | 3
What's in the Box?
• MX304 router preinstalled with Roung Engines, LMICs, fan trays, power supplies, and cover panels for the empty
line card slots.
• Rack mounng brackets (preinstalled on the chassis)
• AC power cables appropriate for your geographic locaon
• Cable management bracket with cable manager screws
• Ethernet cable, RJ-45 to DB-9 adapter
2

• SFP transceiver dust cover and QSFP transceiver dust cover
• An electrostac discharge (ESD) grounding strap
• Grounding lug (Panduit LCD6-14A-L or equivalent) and screws
What Else Do I Need?
• Someone to help you secure the router to the rack
• Phillips (+) screwdrivers, numbers 1 and 2
• Management host such as a laptop or desktop PC
• Serial-to-USB adapter (if your laptop or desktop PC doesn’t have a serial port)
• Grounding cable #6 AWG (4.11 mm²) stranded wire
Install the MX304 Router in a Four-Post Rack
Here's how to install the router in a four-post rack or a cabinet:
CAUTION: If you're installing more than one router in a rack, install them from the boom up.
CAUTION: Before front-mounng the router in a rack, have a qualied technician verify that the rack is
strong enough to support the router's weight and is adequately supported at the installaon site.
CAUTION: Liing the chassis and mounng it in a rack requires two people (one person to hold the
router in place and a second person to install the screws). A fully loaded AC-powered router weighs up
to 70.54 lb (32 kg).
1. Review the General Safety Guidelines and Warnings.
2. Wrap and fasten one end of the ESD grounding strap around your bare wrist, and connect the other end to a site
ESD point.
3

3. (Oponal) Install the cable management brackets on each side of the front of the chassis. Secure each bracket with
screws at the boom and top of the bracket as shown:
4. Posion the router in front of the four-post rack or the cabinet.
5. With one person holding on to each side of the chassis, carefully li the boom of the chassis so that rack mounng
brackets (with oponal cable management brackets) contact the rack rails.
6. Aach the chassis to the front of the rack as shown:
7. On the rear of the chassis, slide the rear-mounng brackets on both sides of the chassis unl they contact the rack
rails. Insert the rack mounng screws through the mounng brackets and mounng holes on the rack and ghten
them. Be sure to ghten the screws in the two boom holes rst, and then ghten the screws in the top two holes.
4

8. Verify that the mounng brackets on each side of the rack are level.
9. (Oponal) Secure the front cover with the air lter to the chassis. Tighten the four screws, turning them clockwise.
Power On
Now that you've mounted your router in the rack, you're ready to connect it to power.
The AC-powered MX304 router comes with two AC power supplies preinstalled on the rear panel.
WARNING: The router is a pluggable type A equipment installed in a restricted-access locaon. The
chassis has a separate protecve earthing terminal (sized for M6 hex screws) in addion to the power
supply cord's grounding pin. This separate protecve earthing terminal must be permanently connected
to earth.
NOTE: Each power supply must be connected to a dedicated AC power feed and a dedicated customer-site
circuit breaker. We recommend using a circuit breaker rated for 15 A (110 VAC) minimum, or as required by local
code.
1. Verify that a licensed electrician has aached the cable lug that ships with the router to the grounding cable.
2. Ensure that all grounding surfaces are clean and brought to a bright nish before grounding connecons are made.
3. Aach an electrostac discharge (ESD) grounding strap to your bare wrist, and connect the strap to an approved
site ESD grounding point. See the instrucons for your site.
4. Connect one end of the grounding cable to a proper earth ground, such as the rack.
5

5. Detach the ESD grounding strap from the site ESD grounding point and connect it to one of the ESD points on the
chassis.
6. Place the grounding lug aached to the grounding cable over the grounding points on the chassis, and secure it
with M6 pan head screws.
7. Dress the grounding cable, and ensure that it doesn’t block access to or touch other device components, and that it
doesn’t drape where people could trip over it.
8. Ensure that the power supplies are fully inserted in the router.
9. Turn o the AC power switch on the power supply.
10. Plug in the AC power cord to the power socket on the power supply.
11. Push the retainer clip through the loop and ghten it unl it ts snug around the power cord.
12. Route the power cord so that it doesn't block the air exhaust and access to router components, or drape where
people could trip on it.
13. If the AC power source outlet has a power switch, turn it o.
14. Plug the power cord into the AC power source outlet.
15. If the AC power source outlet has a power switch, turn it on.
16. Repeat Step 8 through Step 15 to install the other power supply.
6

Step 2: Up and Running
IN THIS SECTION
Plug and Play | 7
Perform Inial Conguraon | 7
Now that the MX304 is powered on, let’s do some inial conguraon to get it up and running on the network. It’s
simple to congure and manage the MX304 using the CLI.
Plug and Play
The MX304 router ships with factory-default sengs that enable some zero touch provisioning (ZTP) funcons. These
sengs load as soon as you power on the switch. In our case we congure the router manually, so we remove the ZTP
sengs as part of our inial conguraon.
Perform Inial Conguraon
You can easily customize the factory-default conguraon with just a few commands. When you commit changes to the
conguraon, a new conguraon le is created. This becomes the acve conguraon. You can always revert to the
factory-default conguraon anyme you want.
When ZTP is not used you must perform the inial conguraon of an MX304 router through the console port (CON)
using the Junos OS command-line interface (CLI). If your MX304 has dual Roung-Engines, you should perform these
steps on each Roung-Engine, being sure to specify a unique management IP address for the management interface on
each Roung-Engine. See "Step 3: Keep Going" on page 12 for informaon on how to use conguraon groups to
share a single conguraon le between both Roung-Engines.
Have the following informaon ready before you begin the inial conguraon:
• The router's host and domain name
• IP address and subnet mask for the management Ethernet interface
• IP address of a default gateway for the management network
• IP address of a DNS server
• The root user's password
1. Verify that the router is powered on.
7

2. NOTE: You may see messages on the console relang to ZTP and DHCP. These messages stop once your
remove the ZTP statements from the default conguraon.
Congure your serial port for 9600 bps/8-N-1, and aach the cable to the CON port of the desired Roung-
Engine. Log in as the “root” user. No password is needed.
FreeBSD/amd64 (Amnesiac) (ttyu0)
login: root
root@:~ #
3. Start the CLI.
root@:~ # cli
root>
4. Enter conguraon mode.
cli> configure
[edit]
root#
5. Set the root authencaon password by entering either a plain text password, an encrypted password, or an SSH
public key string (ECDSA, ED25519 or RSA).
[edit]
root# set system root-authentication plain-text-password
New password: password
Retype new password: password
or
[edit]
root# set system root-authentication encrypted-password encrypted-password
or
[edit]
root# set system root-authentication (ssh-ecdsa | ssh-ed25519 | ssh-rsa) public-key
8

6. Remove factory default conguraon statements that relate to ZTP. Aer you commit these inial changes the ZTP
process is stopped and the related console messages are no longer displayed.
[edit]
root@# delete system commit
root@# delete chassis auto-image-upgrade
root@# delete interfaces fxp0
7. Congure the IP address and prex length for the router’s management Ethernet interface (fxp0). You also
congure an IPv4 address on the loopback interface in this step. Having a rouble IP address on the loopback
interface is a best pracce and is generally needed later, when roung protocols are congured.
[edit]
root# set interfaces fxp0 unit 0 family inet address address/prefix-length
root# set interfaces lo0 unit 0 family inet address address/32
8. Perform an inial commit to acvate the modied conguraon.
[edit]
root# commit
commit complete
[edit]
root#
9. Congure the router's host name. If the name includes spaces, enclose the name in quotaon marks (“ ”).
[edit]
root# set system host-name host-name
10. Congure the router’s domain name.
[edit]
root# set system domain-name domain-name
11. Congure the IP address of a DNS server.
[edit]
root@# set system name-server address
12. Congure one or more stac routes to remote subnets that have access to the management subnet. Without stac
roung, access to the management port is limited to devices aached to the management subnet. Stac roung is
needed to access the management interface from devices aached to remote subnets. For more informaon about
stac routes, see Congure Stac Routes.
9

In our example we dene a single default stac route to provide management network reachability to all possible
remote desnaons.
[edit]
root# set routing-options static route 0.0.0.0/0 next-hop destination-IP retain no-readvertise
13. Congure the IP address of a backup router. The backup router is only used while the roung protocol is not
running. The primary use of the backup router is to provide roung capability for the management port on the
backup Roung-Engine. This is because the backup Roung-Engine does not run the roung protocol daemon
(rpd).
14. In most cases the backup router is the same IP next hop as used for the management network's stac routes. We
again use a default route to provide the back up Roung-Engine with reachability for all possible remote
desnaons.
[edit]
root# set system backup-router address
root# set system backup-router destination 0.0.0.0/0
15. Congure remote access for the root user over ssh. By default the root user is only able to log-in via the console
port. The root-login allow statement permits remote log-in for the root user.
[edit]
root# set system services ssh root-login allow
16. (Oponal) Display the conguraon to verify it's correct.
[edit]
root# show
system {
host-name host-name ;
root-authentication {
authentication-method ( encripted-password | public-key );
}
services {
ssh {
root-login allow;
}
}
domain-name domain-name ;
backup-router address destination 0.0.0.0/0 ;
name-server {
address ;
}
10

}
interfaces {
fxp0 {
unit 0 {
family inet {
address address/prefix-length ;
}
}
}
lo0 {
unit 0 {
family inet {
address address/ 32;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop destination-IP ;
}
}
17. Commit the conguraon to acvate it on the router.
[edit]
root# commit
commit complete
[edit]
root@ host-name #
18. When you've nished conguring the router, exit conguraon mode.
[edit]
root@ host-name # exit
Exiting configuration mode
root@ host-name >
Congratulaons. The inial conguraon is complete. Remember to also congure the backup Roung Engine if
your MX304 is equipped with redundant control planes. At this point you should be able to remotely access both
of the Roung-Engines as the root user with ssh.
11

Step 3: Keep Going
IN THIS SECTION
What's Next? | 12
General Informaon | 12
Learn with Videos | 13
Congratulaons! Now that you've done the inial conguraon, your MX304 is ready to use. Here are some things you
can do next:
What's Next?
If you want to Then
Congure, monitor, and troubleshoot various interfaces
installed on the MX304
See Interfaces Fundamentals for Junos OS.
Congure essenal user access and authencaon features for
your system
See User Access and Authencaon Administraon Guide for
Junos OS.
Install and upgrade Junos OS and related soware See Junos OS Soware Installaon and Upgrade Guide.
Use conguraon groups to share a conguraon le between
redundant Roung-Engines.
See Conguring Junos OS for the First Time on a Device with
Dual Roung Engines.
General Informaon
If you want to Then
See all documentaon available for the MX304 Visit MX304 Documentaon
See all documentaon available for Junos OS Visit Junos OS Documentaon
12

(Connued)
If you want to Then
Change conguraon sengs, get another device up and
running, or both, install REs, LMICs, fan trays, and power
supplies
See MX304 Hardware Guide
Stay up-to-date with new and changed features and known and
resolved issues
See the Junos OS Release Notes
Learn with Videos
Our video library connues to grow! We’ve created many, many videos that demonstrate how to do everything from
install your hardware to congure advanced Junos OS network features. Here are some great video and training
resources that will help you expand your knowledge of Junos OS.
If you want to Then
Get short and concise ps and instrucons that provide quick
answers, clarity, and insight into specic features and funcons
of Juniper technologies
See Learning with Videos on Juniper Networks main YouTube
page
View a list of the many free technical trainings we oer at
Juniper
Visit the Geng Started page on the Juniper Learning Portal
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the
United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the
property of their respecve owners. Juniper Networks assumes no responsibility for any inaccuracies in this document.
Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publicaon without noce.
Copyright © 2022 Juniper Networks, Inc. All rights reserved.
13