juniper之常用命令

configure ospf vlan <vlan name> neighbor add <ipaddress>
OSPF中路由重发布配置
enable ospf export direct [cost <metric> [ase-type-1 | ase-type-2] {tag <number>} | <route map>]
show ospf
show access-list {<name> | port <portlist>}
show access-list-monitor
show ospf area <area identifier>
show ospf area detail
show ospf ase-summary
13.Access－Lists配置
create access-list icmp destination source
create access-list ip destination source ports
create access-list tcp destination source ports
6.port-channel配置
enable sharing <port> grouping <portlist> {port-based | address-based | round-robin}
show port sharing //查看配置
7.stp配置
enable stpd //启动生成树
show diag
show iparp
show iproute
show ipstat
show log
show tech all
show version detail
17.备份和升级软件
download image [<hostname> | <ipaddress>] <filename> {primary | secondary}
network的作用
configure ospf area <area identifier> add range <ipaddress> <mask> [advertise | noadvertise] {type-3 | type-7} 把某个网段加到
某个Area中去，相当于Cisco中的network的作用
configure vrrp vlan UserVlan vrid 10 preempt
5.端口镜像配置
首先将端口从VLAN中删除
enable mirroring to port 3 ＃选择3作为镜像口
config mirroring add port 1 ＃把端口1的流量发送到3
config mirroring add port 1 vlan default ＃把1和vlan default的流量都发送到3
收host和团体字符串
12.安全配置
disable ip-option loose-source-route
disable ip-option strict-source-route
disable ip-option record-route
disable ip-option record-timestamp
10.OSPF配置
enable ospf 启用OSPF进程
create ospf area <area identifier> 创建OSPF区域
configure ospf routerid [automatic | <routerid>] 配置Routerid
configure ospf add vlan [<vlan name> | all] area <area identifier> {passive} 把某个vlan加到某个Area中去，相当于Cisco中的
create access-list udp destination source ports
14.默认路由配置
config iproute add default <gateway>
15.恢复出厂值，但不包括用户改的时间和用户帐号信息
unconfig switch {all}
16.检查配置
disable ipforwarding broadcast
disable udp-echo-server
disable irdp vlan <vlan name>
disable icmp redirect
disable web 关闭web方式访问交换机
enable cpu-dos-protect
show version
show config
show session
show management 查看管理信息，以及snmp信息
show banner
show ports configuration
show ports utilization ?
show memory/show cpu-monitoring
config vlan Server tag 10
config vlan User tag 20
config vlan Manger tag 30
设定Vlan网关地址：
config vlan Server ipa 192.168.41.1/24
config vlan User ipa 192.168.40.1/24
show ospf interfaces {vlan <vlan name> | area <area identifier>}
unconfigure ospf {vlan <vlan name> | area <area identifier>}
【2】switch
show itch
show config
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
create stpd stp-name //创建一个生成树
configure stpd <spanning tree name> add vlan <vlan name> {ports <portlist> [dot1d | emistp | pvst-plus]}
configure stpd stpd1 priority 16384
enable ospf export static [cost <metric> [ase-type-1 | ase-type-2] {tag <number>} | <route map>]
enable ospf originate-default {always} cost <metric> [ase-type-1 | ase-type-2] {tag <number>}
1.用户名和密码配置
create account [admin | user] <username> 回车
输入密码：
再次输入密码：
configure account admin 回车
输入密码：
再次输入密码：
2.port配置
config ports <portlist> auto off {speed [10 | 100 | 1000]} duplex [half | full] auto off
config vlan Manger ipa 192.168.*.*/24
Enable ipforwarding 启用ip路由转发，即vlan间路由
Trunk 配置
config vlan Server add port 1-3 t
config vlan User add port 1-3 t
config snmp access-profile readwrite [<access_profile> | none] 这是控制读写控制
config snmp add trapreceiver <ip address> {port <udp_port>} community <communitystring> {from <source ip address>} 配置snmp接
3.Vlan配置
无论是核心还是接入层，都要先创建三个Vlan，并且将所有归于Default Vlan的端口删除：
config vlan default del port all
create vlan Server