Juniper基础配置

root> show configuration | display set      配置按set行显示,查看的配置为未commit的配置(commit check)
root# set system services ssh   全局开启SSH服务
root# set system root-authentication plain-text-password   更改SRX密码
root# set system services web-management http interface ge-0/0/1.0    trust口开启web登陆
root# set security zones security-zone untrust interfaces ge-0/0/0
root# set security zones security-zone trust interfaces ge-0/0/1   
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http   允许WEB登陆
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ping  允许ping trust口
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services dhcp trust开启dhcp
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ssh  trust口允许ssh   
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ping 允许ping utrust
set interfaces ge-0/0/0 unit 0 family inet address 10.10.10.1/24
set interfaces ge-0/0/1 unit 0 family inet address 10.10.20.1/24
delete interfaces ge-0/0/0 unit 0 family inet address 10.10.10.1/24 删除配置

posted @ 2017-12-07 14:53  風£飛  阅读(574)  评论(0编辑  收藏  举报