Juniper所有
配置,均在
配置状态下进行。分为由console进入和远程telnet进入。
由console进入JUNOS系统命令操作(由FreeBSD的简化系统)
%cli 进入下面的用户操作
hostname>edit 进入下面的用户配置
hostname# 配置操作
由远程telnet直接进入用户操作
hostname>edit 进入下面的用户配置
hostname# 配置操作
1 系统配置
1.1 系统信息基本配置
#edit system 进入system配置菜单
#set host-name axi580-a-hz1
#set domain-name zj.cn.net
#set time-zone Asia/Shanghai
# set system root-authentication plain-text-password (console登录,root口令缺省为空,虚设新口令)
New password:******
Retype new password:******
#show 查看配置
#commit 配置生效 OR
#commit confirmed 配置生效测试,5分钟后系统自动会滚,恢复原来配置。
1.2 系统用户息
1.2.1 用户组的配置
#set login class high idle-timeout 30 permissions all
“high” 是组名;”all” 用户将拥有该router的全部权限。
#set login class medium idle-timeout 30 permissions clear
#set login class medium idle-timeout 30 permissions configure
#set login class medium idle-timeout 30 permissions interface-control
#set login class medium idle-timeout 30 permissions network
#set login class medium idle-timeout 30 permissions maintenance
“medium”具有多个权限,” clear configure interface-control network
view maintenance”
#set login class low idle-timeout 30 permissions view
配置了high、medium、low三个权限组,将在用户配置时用到。
权限设置如下:
admin Can view user accounts
admin-control Can modify user accounts
all All permission bits turned on
clear Can clear learned network information
configure Can enter configuration mode
control Can modify any configuration values
edit Can edit full files
field Special for field (debug) support
firewall Can view firewall config
firewall-control Can modify firewall config
floppy Can read and write the floppy drive
interface Can view interface config
interface-control Can modify interface config
maintenance Can perform system maintenance (as wheel)
network Can access the network
reset Can reset and restart interfaces and processes
rollback Can rollback for depth greater than zero
routing Can view routing config
routing-control Can modify routing config
secret Can view secret config
secret-control Can modify secret config
shell Can start a local shell
snmp Can view SNMP config
snmp-control Can modify SNMP config
system Can view system config
system-control Can modify system config
trace Can view trace file settings
trace-control Can modify trace file settings
view Can view current values and statistics
1.2.2 用户配置
#set login user admin full-name newwork-admin uid 2001 class high plain-text-password
New password:******
Retype new password:******
Username 为admin;user id 为2001;组为high
#set login user manager full-name newwork-manager uid 2002 class midium
plain-text-password
New password:******
Retype new password:******
#set login user viewer full-name newwork-viwer uid 2003 class low plain-text-password
New password:******
Retype new password:******
#commit 配置生效 OR
#commit confirmed 配置生效测试,5分钟后系统自动会滚,恢复原来配置。
1.3 系统服务配置
本帖隐藏的内容需要回复才可以浏览