<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="32659" language="en" source="https://portal.flane.ch/swisscom/en/xml-course/juniper-cn2" lastchanged="2025-10-16T22:21:12+02:00" parent="https://portal.flane.ch/swisscom/en/xml-courses"><title>Implementing Cloud-Native Contrail Networking</title><productcode>CN2</productcode><vendorcode>JP</vendorcode><vendorname>Juniper Networks</vendorname><fullproductcode>JP-CN2</fullproductcode><version>1.0</version><objective>&lt;p&gt;After successfully completing this course, you should be able to:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Describe what Contrail networking is and how it enhances cloud networking.&lt;/li&gt;&lt;li&gt;Use Kubernetes to manage workloads.&lt;/li&gt;&lt;li&gt;Validate and manage a cluster with multiple namespaces.&lt;/li&gt;&lt;li&gt;Describe the architecture of a Contrail networking cluster.&lt;/li&gt;&lt;li&gt;Validate that Contrail is operating correctly.&lt;/li&gt;&lt;li&gt;Install and validate virtual networks.&lt;/li&gt;&lt;li&gt;Route traffic between virtual networks.&lt;/li&gt;&lt;li&gt;Implement security between and within virtual networks.&lt;/li&gt;&lt;li&gt;Install and validate network services.&lt;/li&gt;&lt;li&gt;Provide external access to services.&lt;/li&gt;&lt;li&gt;Configure and monitor analytics to understand the state of a use case.&lt;/li&gt;&lt;/ul&gt;</objective><essentials>&lt;ul&gt;
&lt;li&gt;Basic networking knowledge;&lt;/li&gt;&lt;li&gt;Basic BGP knowledge; and&lt;/li&gt;&lt;li&gt;Completion of the &lt;span class=&quot;cms-link-marked&quot;&gt;&lt;a class=&quot;fl-href-prod&quot; href=&quot;/swisscom/en/course/juniper-jcf&quot;&gt;&lt;svg role=&quot;img&quot; aria-hidden=&quot;true&quot; focusable=&quot;false&quot; data-nosnippet class=&quot;cms-linkmark&quot;&gt;&lt;use xlink:href=&quot;/css/img/icnset-linkmarks.svg#linkmark&quot;&gt;&lt;/use&gt;&lt;/svg&gt;Juniper Cloud Fundamentals &lt;span class=&quot;fl-prod-pcode&quot;&gt;(JCF)&lt;/span&gt;&lt;/a&gt;&lt;/span&gt; course, or equivalent knowledge&lt;/li&gt;&lt;/ul&gt;</essentials><audience>&lt;p&gt;Individuals working with software-defined networking solutions in data-center, service provider, and enterprise network environments&lt;/p&gt;</audience><contents>&lt;ul&gt;
&lt;li&gt;Course Introduction&lt;/li&gt;&lt;li&gt;Course Prologue&lt;/li&gt;&lt;li&gt;Kubernetes Overview&lt;/li&gt;&lt;li&gt;Describing Cloud-Native Contrail Networking Architecture&lt;/li&gt;&lt;li&gt;Installing Cloud-Native Contrail Networking&lt;/li&gt;&lt;li&gt;Verifying and Troubleshooting Contrail Installation&lt;/li&gt;&lt;li&gt;Describing Contrail CNI&lt;/li&gt;&lt;li&gt;Implementing Namespaces&lt;/li&gt;&lt;li&gt;Describing Services&lt;/li&gt;&lt;li&gt;Implementing Services&lt;/li&gt;&lt;li&gt;Describing Network Policies&lt;/li&gt;&lt;li&gt;Implementing Network Policies&lt;/li&gt;&lt;li&gt;Describing Virtual Networks&lt;/li&gt;&lt;li&gt;Implementing Virtual Networks&lt;/li&gt;&lt;li&gt;Implementing Route Targets&lt;/li&gt;&lt;li&gt;Implementing Virtual Network Routers&lt;/li&gt;&lt;li&gt;Implementing IP Forwarding and Fabric Source NAT&lt;/li&gt;&lt;li&gt;Basic CN2 Troubleshooting&lt;/li&gt;&lt;/ul&gt;</contents><outline>&lt;h5&gt;Course Introduction&lt;/h5&gt;&lt;h5&gt;Course Prologue&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe the basics of the Cloud-Native Contrail Networking solution&lt;/li&gt;&lt;li&gt;Identify the key Contrail use cases&lt;/li&gt;&lt;li&gt;Outline a use case scenario for the course&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Kubernetes Overview&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe Kubernetes fundamentals&lt;/li&gt;&lt;li&gt;Describe the Kubernetes objects&lt;/li&gt;&lt;li&gt;Describe Kubernetes networking&lt;/li&gt;&lt;li&gt;Describe connecting applications with services&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 1: Working with Kubernetes&lt;/p&gt;
&lt;h5&gt;Describing Cloud-Native Contrail Networking Architecture&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe the Contrail architecture and its core components&lt;/li&gt;&lt;li&gt;Describe component communications&lt;/li&gt;&lt;li&gt;Describe deployment models&lt;/li&gt;&lt;li&gt;Describe the configuration resources&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Installing Cloud-Native Contrail Networking&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe the installation process for Contrail on Upstream Kubernetes&lt;/li&gt;&lt;li&gt;Identify other components to be installed&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Verifying and Troubleshooting Contrail Installation&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Validate cluster state using kubectl&lt;/li&gt;&lt;li&gt;Validate using log files&lt;/li&gt;&lt;li&gt;Validate using Contrailstatus plug-in&lt;/li&gt;&lt;li&gt;Describe Kubernetes-specific validations&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 2: Validating the Contrail installation&lt;/p&gt;
&lt;h5&gt;Describing Contrail CNI&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Define CNI plugins&lt;/li&gt;&lt;li&gt;Explain the CN2 CNI default implementation&lt;/li&gt;&lt;li&gt;Explain the CN2 CNI custom implementation&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Implementing Namespaces&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe namespaces&lt;/li&gt;&lt;li&gt;Implement an additional namespace&lt;/li&gt;&lt;li&gt;Implement an isolated namespace&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 3: Implementing Namespaces&lt;/p&gt;
&lt;h5&gt;Describing Services&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe service support&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Implementing Services&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Implement a ClusterIP service&lt;/li&gt;&lt;li&gt;Implement a NodePort service&lt;/li&gt;&lt;li&gt;Implement a LoadBalance service&lt;/li&gt;&lt;li&gt;Implement ingress access&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 4: Implementing Services&lt;/p&gt;
&lt;h5&gt;Describing Network Policies&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe the Kubernetes network policy concepts&lt;/li&gt;&lt;li&gt;Describe the network policies YAML template&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Implementing Network Policies&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Isolate pods from traffic sourced from other namespaces&lt;/li&gt;&lt;li&gt;Implement a policy based on namespace, pod, and port&lt;/li&gt;&lt;li&gt;Implement an ingress policy based on IP Block and port, with egress enabled based on namespace&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 5: Implementing Network Policies&lt;/p&gt;
&lt;h5&gt;Describing Virtual Networks&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe virtual networks&lt;/li&gt;&lt;li&gt;Describe network attachment definitions with Multus&lt;/li&gt;&lt;li&gt;Describe user-defined virtual network templates&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Implementing Virtual Networks&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Implement a user-defined virtual network&lt;/li&gt;&lt;li&gt;Attach deployments to a virtual network&lt;/li&gt;&lt;li&gt;Implement user-defined pod network&lt;/li&gt;&lt;li&gt;Attach deployments to a user-defined pod network&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 6: Implementing Virtual Networks&lt;/p&gt;
&lt;h5&gt;Implementing Route Targets&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe route targets&lt;/li&gt;&lt;li&gt;Implement route targets&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 7: Implementing Route Targets&lt;/p&gt;
&lt;h5&gt;Implementing Virtual Network Routers&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe virtual network routers&lt;/li&gt;&lt;li&gt;Implement mesh virtual network routers&lt;/li&gt;&lt;li&gt;Implement hub-and-spoke virtual network routers&lt;/li&gt;&lt;li&gt;Implement multi-namespace virtual network routers&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 8: Implementing Virtual Network Routers&lt;/p&gt;
&lt;h5&gt;Implementing IP Forwarding and Fabric Source NAT&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Implement IP forwarding&lt;/li&gt;&lt;li&gt;Implement fabric source NAT&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 9: Implementing IP Forwarding and Fabric Source NAT&lt;/p&gt;
&lt;h5&gt;Basic CN2 Troubleshooting&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Describe basic CN2 troubleshooting&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Lab 10: Performing Basic CN2 Troubleshooting&lt;/p&gt;</outline><objective_plain>After successfully completing this course, you should be able to:


- Describe what Contrail networking is and how it enhances cloud networking.
- Use Kubernetes to manage workloads.
- Validate and manage a cluster with multiple namespaces.
- Describe the architecture of a Contrail networking cluster.
- Validate that Contrail is operating correctly.
- Install and validate virtual networks.
- Route traffic between virtual networks.
- Implement security between and within virtual networks.
- Install and validate network services.
- Provide external access to services.
- Configure and monitor analytics to understand the state of a use case.</objective_plain><essentials_plain>- Basic networking knowledge;
- Basic BGP knowledge; and
- Completion of the Juniper Cloud Fundamentals (JCF) course, or equivalent knowledge</essentials_plain><audience_plain>Individuals working with software-defined networking solutions in data-center, service provider, and enterprise network environments</audience_plain><contents_plain>- Course Introduction
- Course Prologue
- Kubernetes Overview
- Describing Cloud-Native Contrail Networking Architecture
- Installing Cloud-Native Contrail Networking
- Verifying and Troubleshooting Contrail Installation
- Describing Contrail CNI
- Implementing Namespaces
- Describing Services
- Implementing Services
- Describing Network Policies
- Implementing Network Policies
- Describing Virtual Networks
- Implementing Virtual Networks
- Implementing Route Targets
- Implementing Virtual Network Routers
- Implementing IP Forwarding and Fabric Source NAT
- Basic CN2 Troubleshooting</contents_plain><outline_plain>Course Introduction

Course Prologue


- Describe the basics of the Cloud-Native Contrail Networking solution
- Identify the key Contrail use cases
- Outline a use case scenario for the course
Kubernetes Overview


- Describe Kubernetes fundamentals
- Describe the Kubernetes objects
- Describe Kubernetes networking
- Describe connecting applications with services
Lab 1: Working with Kubernetes

Describing Cloud-Native Contrail Networking Architecture


- Describe the Contrail architecture and its core components
- Describe component communications
- Describe deployment models
- Describe the configuration resources
Installing Cloud-Native Contrail Networking


- Describe the installation process for Contrail on Upstream Kubernetes
- Identify other components to be installed
Verifying and Troubleshooting Contrail Installation


- Validate cluster state using kubectl
- Validate using log files
- Validate using Contrailstatus plug-in
- Describe Kubernetes-specific validations
Lab 2: Validating the Contrail installation

Describing Contrail CNI


- Define CNI plugins
- Explain the CN2 CNI default implementation
- Explain the CN2 CNI custom implementation
Implementing Namespaces


- Describe namespaces
- Implement an additional namespace
- Implement an isolated namespace
Lab 3: Implementing Namespaces

Describing Services


- Describe service support
Implementing Services


- Implement a ClusterIP service
- Implement a NodePort service
- Implement a LoadBalance service
- Implement ingress access
Lab 4: Implementing Services

Describing Network Policies


- Describe the Kubernetes network policy concepts
- Describe the network policies YAML template
Implementing Network Policies


- Isolate pods from traffic sourced from other namespaces
- Implement a policy based on namespace, pod, and port
- Implement an ingress policy based on IP Block and port, with egress enabled based on namespace
Lab 5: Implementing Network Policies

Describing Virtual Networks


- Describe virtual networks
- Describe network attachment definitions with Multus
- Describe user-defined virtual network templates
Implementing Virtual Networks


- Implement a user-defined virtual network
- Attach deployments to a virtual network
- Implement user-defined pod network
- Attach deployments to a user-defined pod network
Lab 6: Implementing Virtual Networks

Implementing Route Targets


- Describe route targets
- Implement route targets
Lab 7: Implementing Route Targets

Implementing Virtual Network Routers


- Describe virtual network routers
- Implement mesh virtual network routers
- Implement hub-and-spoke virtual network routers
- Implement multi-namespace virtual network routers
Lab 8: Implementing Virtual Network Routers

Implementing IP Forwarding and Fabric Source NAT


- Implement IP forwarding
- Implement fabric source NAT
Lab 9: Implementing IP Forwarding and Fabric Source NAT

Basic CN2 Troubleshooting


- Describe basic CN2 troubleshooting
Lab 10: Performing Basic CN2 Troubleshooting</outline_plain><duration unit="d" days="4">4 days</duration><pricelist><price country="DE" currency="USD">4000.00</price><price country="CH" currency="USD">4000.00</price><price country="AT" currency="USD">4000.00</price><price country="SE" currency="USD">4000.00</price><price country="IL" currency="USD">4000.00</price><price country="AE" currency="USD">4000.00</price><price country="FR" currency="USD">4000.00</price><price country="SI" currency="USD">4000.00</price><price country="SK" currency="USD">4000.00</price></pricelist><miles/></course>