发新话题
打印

[网络转载] 关于juniper

关于juniper

Juniper所有配置,均在配置状态下进行。分为由console进入和远程telnet进入。
由console进入JUNOS系统命令操作(由FreeBSD的简化系统)
%cli          进入下面的用户操作
hostname>edit      进入下面的用户配置
hostname#      配置操作
由远程telnet直接进入用户操作
hostname>edit      进入下面的用户配置
hostname#      配置操作

1  系统配置
1.1  系统信息基本配置
#edit system    进入system配置菜单
#set host-name axi580-a-hz1
#set domain-name zj.cn.net
#set time-zone Asia/Shanghai
# set system root-authentication plain-text-password (console登录,root口令缺省为空,虚设新口令)
New password:******
Retype new password:******
#show     查看配置
#commit    配置生效      OR
#commit confirmed    配置生效测试,5分钟后系统自动会滚,恢复原来配置。
1.2  系统用户息
1.2.1 用户组的配置
  #set login class high idle-timeout 30 permissions all
  “high” 是组名;”all” 用户将拥有该router的全部权限。
  #set login class medium idle-timeout 30 permissions clear
  #set login class medium idle-timeout 30 permissions configure
  #set login class medium idle-timeout 30 permissions interface-control
  #set login class medium idle-timeout 30 permissions network
  #set login class medium idle-timeout 30 permissions maintenance
  “medium”具有多个权限,” clear configure interface-control network
    view maintenance”
  #set login class low idle-timeout 30 permissions view
配置了high、medium、low三个权限组,将在用户配置时用到。
权限设置如下:
  admin Can view user accounts
  admin-control Can modify user accounts
  all All permission bits turned on
  clear Can clear learned network information
  configure Can enter configuration mode
  control Can modify any configuration values
  edit Can edit full files
  field Special for field (debug) support
  firewall Can view firewall config
  firewall-control Can modify firewall config
  floppy Can read and write the floppy drive
  interface Can view interface config
  interface-control Can modify interface config
  maintenance Can perform system maintenance (as wheel)
  network Can access the network
  reset Can reset and restart interfaces and processes
  rollback Can rollback for depth greater than zero
  routing Can view routing config
  routing-control Can modify routing config
  secret Can view secret config
  secret-control Can modify secret config
  shell Can start a local shell
  snmp Can view SNMP config
  snmp-control Can modify SNMP config
  system Can view system config
  system-control Can modify system config
  trace Can view trace file settings
  trace-control Can modify trace file settings
  view Can view current values and statistics
1.2.2 用户配置
#set login user admin full-name newwork-admin uid 2001 class high plain-text-password
New password:******
Retype new password:******
Username 为admin;user id 为2001;组为high
#set login user manager full-name newwork-manager uid 2002 class midium
plain-text-password
New password:******
Retype new password:******
#set login user viewer full-name newwork-viwer uid 2003 class low plain-text-password
New password:******
Retype new password:******
#commit    配置生效      OR
#commit confirmed    配置生效测试,5分钟后系统自动会滚,恢复原来配置。
1.3  系统服务配置
本帖隐藏的内容需要回复才可以浏览

TOP

:lol 呵呵学习学习

TOP

发新话题