juniper 配置命令
合集下载
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
命令说明 列1 同步两块引擎之间用户session，主要体现 在RE切换用户是否有感知开启用户不会掉线 在运行OSPF情况下使两块引擎同步运行OSPF 协议，建议不要开启 定义该接口支持灵活的vlan tag 灵活标记的含义是指该接口既可以接收有2 层vlan tag的数据包，也可以接收只有1层 vlan tag的数据包。接收只有1层vlan tag 数据包配置如下： 定义vlan外层tag 定义vlan内层tag MX QINQ网关理ARP 路由互通 注释 进入底层的centos 可以把大量的配置导入960 备份旧的软件及设置 升级交换机
命令 列2 set chassis redundancy graceful-switchover Set routing-options nonstop-routing nonstop-routing synchronize set interfaces xe-0/1/0 flexible-vlan-tagging set interfaces xe-0/0/0 flexible-vlan-tagging set interfaces xe-0/1/0 unit 100 vlan-tags outer 1001 set interfaces xe-0/1/0 unit 100 vlan-tags inner 24 set interfaces xe-0/1/0 flexible-vlan-tagging set interfaces xe-0/1/0 unit 100 vlan-tags outer 1001 set interfaces xe-0/1/0 unit 100 vlan-tags inner 24 set interfaces xe-7/0/1 unit 100 family inet address 114.213.96.1/24 set access address-assignment pool DHCP_TuShuGuan family inet network 121.248.147.0/24 set access address-assignment pool DHCP_TuShuGuan family inet range 1 low 121.248.147.2 set access address-assignment pool DHCP_TuShuGuan family inet range 1 high 121.248.147.240 set access address-assignment pool DHCP_TuShuGuan family inet dhcp-attributes nameserver 121.248.150.10 set access address-assignment pool DHCP_TuShuGuan family inet dhcp-attributes nameserver 202.119.208.10 set interfaces xe-0/1/0 native-vlan-id 1010 set interfaces ge-1/3/3 gigether-options 802.3ad ae1 set interfaces ge-1/3/4 gigether-options 802.3ad ae1 set interfaces ge-1/3/5 gigether-options 802.3ad ae1 set interfaces ae1 description Link-to-CMCC set interfaces ae1 unit 0 family inet address 120.195.104.254/30 load set terminal set protocols ppp-service dns-group-profile dns set access group-profile dns ppp primary-dns 121.248.150.10 set access group-profile dns ppp secondary-dns 202.119.208.10 set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" ppp-options pap set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" pppoe-options underlying-interface "$junos-underlying-interface" set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" pppoe-options server set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" no-keepalives set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" family inet set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" no-traps set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" family inet policer disable-arp-policer set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosset system commit
set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" no-traps set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" vlan-id "$junos-vlan-id" set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" family inet policer disable-arp-policer set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" family inet6 unnumbered-address lo0.0 set system commit synchronize set system dynamic-profile-options versioning set chassis network-services enhanced-ip set dynamic-profiles pppoe predefined-variable-defaults input-filter 10M set dynamic-profiles pppoe predefined-variable-defaults output-filter 10M set access profile sunrise-test authentication-order none set access profile none authentication-order none set access profile sunrise-test accounting order none set system commit synchronize run request routing-engine login re0 进入低层 可以开ftp 纯交换模式 当交换机用 ssh { + + + root-login deny; protocol-version v2;
load set terminal request system snapshot request system software add jinstall-ex-4500-12.3R6.6.tgz reboot
} processes { general-authentication-service { inactive: traceoptions { file debug-authed-Y121025 size 10m; flag all; } } dhcp-service { inactive: traceoptions { file debug-dhcp-Y121025 size 10m; flag all; } } - } run request routing-engine login other-routing-engine run set date 201411051013.30 run clear ddos-protection protocols arp aggregate culprit-flows annotate 192.168.10.0/24 start shell user root "注释内容“
DHCP 以及地址绑定
vlan1010 的数据包出去不打tag
端口聚合
可以把大量的配置导入960 PPPoE拨号中加DN
pppoE动态模版
qinq动态Vlan模版
单层动态Vlan模版
两块引擎的commit同步 即使有用户也可以修改dynamic文件 更好的收集信息
radius宕机用户正常上网拨号
同步两块引擎配置 主控之间互登陆 run start shell network-services all-ethernet network-services enhanced-ip ssh
定义vlan外层tag定义vlan内层tagmxqinq网关迁移dhcp以及地址绑定vlan1010的数据包出去不打tag端口聚合可以把大量的配置导入960pppoe拨号中加dnpppoe动态模版qinq动态vlan模版单层动态vlan模版两块引擎的commit同步即使有用户也可以修改dynamic文件更好的收集信息radius宕机用户正常上网拨号同步两块引擎配置主控之间互登陆runstartshellnetworkservicesallethernetnetworkservicesenhancedipsshdebug登录到另一块引擎设置时间清理arp路由互通注释进入底层的centos可以把大量的配置导入960备份旧的软件及设置升级交换机命令列2setchassisredundancygracefulswitchoversetroutingoptionsnonstoproutingnonstoproutingsetsystemcommitsynchronizesetinterfacesxe010flexiblevlantaggingsetinterfacesxe000flexiblevlantaggingsetinterfacesxe010unit100vlantagsouter1001setinterfacesxe010unit100vlantagsinner24setinterfacesxe010flexiblevlantaggingsetinterfacesxe010unit100vlantagsouter1001setinterfacesxe010unit100vlantagsinner24setinterfacesxe701unit100familyinetaddress11421396124setaccessaddressassignmentpooldhcptushuguanfamilyinetnetwork121248147024setaccessaddressassignmentpooldhcptushuguanfamilyinetrange1low1212481472setaccessaddressassignmentpooldhcptushuguanfamilyinetrange1high121248147240setaccessaddressassignmentpooldhcptushugu
命令 列2 set chassis redundancy graceful-switchover Set routing-options nonstop-routing nonstop-routing synchronize set interfaces xe-0/1/0 flexible-vlan-tagging set interfaces xe-0/0/0 flexible-vlan-tagging set interfaces xe-0/1/0 unit 100 vlan-tags outer 1001 set interfaces xe-0/1/0 unit 100 vlan-tags inner 24 set interfaces xe-0/1/0 flexible-vlan-tagging set interfaces xe-0/1/0 unit 100 vlan-tags outer 1001 set interfaces xe-0/1/0 unit 100 vlan-tags inner 24 set interfaces xe-7/0/1 unit 100 family inet address 114.213.96.1/24 set access address-assignment pool DHCP_TuShuGuan family inet network 121.248.147.0/24 set access address-assignment pool DHCP_TuShuGuan family inet range 1 low 121.248.147.2 set access address-assignment pool DHCP_TuShuGuan family inet range 1 high 121.248.147.240 set access address-assignment pool DHCP_TuShuGuan family inet dhcp-attributes nameserver 121.248.150.10 set access address-assignment pool DHCP_TuShuGuan family inet dhcp-attributes nameserver 202.119.208.10 set interfaces xe-0/1/0 native-vlan-id 1010 set interfaces ge-1/3/3 gigether-options 802.3ad ae1 set interfaces ge-1/3/4 gigether-options 802.3ad ae1 set interfaces ge-1/3/5 gigether-options 802.3ad ae1 set interfaces ae1 description Link-to-CMCC set interfaces ae1 unit 0 family inet address 120.195.104.254/30 load set terminal set protocols ppp-service dns-group-profile dns set access group-profile dns ppp primary-dns 121.248.150.10 set access group-profile dns ppp secondary-dns 202.119.208.10 set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" ppp-options pap set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" pppoe-options underlying-interface "$junos-underlying-interface" set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" pppoe-options server set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" no-keepalives set dynamic-profiles pppoe3 interfaces pp0 unit "$junos-interface-unit" family inet set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" no-traps set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" vlan-tags outer "$junos-stacked-vlan-id" set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" vlan-tags inner "$junos-vlan-id" set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosinterface-unit" family inet policer disable-arp-policer set dynamic-profiles stackvlan interfaces "$junos-interface-ifd-name" unit "$junosset system commit
set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" no-traps set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" vlan-id "$junos-vlan-id" set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" family inet policer disable-arp-policer set dynamic-profiles vlan interfaces "$junos-interface-ifd-name" unit "$junos-interfaceunit" family inet6 unnumbered-address lo0.0 set system commit synchronize set system dynamic-profile-options versioning set chassis network-services enhanced-ip set dynamic-profiles pppoe predefined-variable-defaults input-filter 10M set dynamic-profiles pppoe predefined-variable-defaults output-filter 10M set access profile sunrise-test authentication-order none set access profile none authentication-order none set access profile sunrise-test accounting order none set system commit synchronize run request routing-engine login re0 进入低层 可以开ftp 纯交换模式 当交换机用 ssh { + + + root-login deny; protocol-version v2;
load set terminal request system snapshot request system software add jinstall-ex-4500-12.3R6.6.tgz reboot
} processes { general-authentication-service { inactive: traceoptions { file debug-authed-Y121025 size 10m; flag all; } } dhcp-service { inactive: traceoptions { file debug-dhcp-Y121025 size 10m; flag all; } } - } run request routing-engine login other-routing-engine run set date 201411051013.30 run clear ddos-protection protocols arp aggregate culprit-flows annotate 192.168.10.0/24 start shell user root "注释内容“
DHCP 以及地址绑定
vlan1010 的数据包出去不打tag
端口聚合
可以把大量的配置导入960 PPPoE拨号中加DN
pppoE动态模版
qinq动态Vlan模版
单层动态Vlan模版
两块引擎的commit同步 即使有用户也可以修改dynamic文件 更好的收集信息
radius宕机用户正常上网拨号
同步两块引擎配置 主控之间互登陆 run start shell network-services all-ethernet network-services enhanced-ip ssh
定义vlan外层tag定义vlan内层tagmxqinq网关迁移dhcp以及地址绑定vlan1010的数据包出去不打tag端口聚合可以把大量的配置导入960pppoe拨号中加dnpppoe动态模版qinq动态vlan模版单层动态vlan模版两块引擎的commit同步即使有用户也可以修改dynamic文件更好的收集信息radius宕机用户正常上网拨号同步两块引擎配置主控之间互登陆runstartshellnetworkservicesallethernetnetworkservicesenhancedipsshdebug登录到另一块引擎设置时间清理arp路由互通注释进入底层的centos可以把大量的配置导入960备份旧的软件及设置升级交换机命令列2setchassisredundancygracefulswitchoversetroutingoptionsnonstoproutingnonstoproutingsetsystemcommitsynchronizesetinterfacesxe010flexiblevlantaggingsetinterfacesxe000flexiblevlantaggingsetinterfacesxe010unit100vlantagsouter1001setinterfacesxe010unit100vlantagsinner24setinterfacesxe010flexiblevlantaggingsetinterfacesxe010unit100vlantagsouter1001setinterfacesxe010unit100vlantagsinner24setinterfacesxe701unit100familyinetaddress11421396124setaccessaddressassignmentpooldhcptushuguanfamilyinetnetwork121248147024setaccessaddressassignmentpooldhcptushuguanfamilyinetrange1low1212481472setaccessaddressassignmentpooldhcptushuguanfamilyinetrange1high121248147240setaccessaddressassignmentpooldhcptushugu