奥德赛F9 发表于 2018-7-27 12:38:00

juniper的配置-适合对juniper感兴趣的人探讨

  set version 15.1X53-D56
  set system host-name EXxxxx
  set system auto-snapshot
  set system time-zone Asia/wulumuqi
  set system root-authentication encrypted-password "$5$921ALfMm$enIlTZQ5pzjwkKg1KiF/ZTrFnYjiZzEVvt1ByMZmAP."
  set system login user admin uid 2000

  set system login user admin>  set system login user admin authentication encrypted-password "$5$9tiU.vkv$WNFmJaigbWJoGFjJMpc2A9UWPioNI67bOAjNzBHg5./"
  set system login user lab uid 2001

  set system login user lab>  set system login user lab authentication encrypted-password "$5$W15rv9RF$pfCbDyhaMuGioJfcvuq2bAIhQHDYK4gHnDPVskGX389"
  set system services ftp
  set system services ssh
  set system services telnet
  set system services dhcp-local-server group DHCP_For_USER_1 interface irb.4
  set system services dhcp-local-server group DHCP_For_USER_2 interface irb.5
  set system syslog user * any emergency
  set system syslog file messages any notice
  set system syslog file messages authorization info
  set system syslog file interactive-commands interactive-commands any
  set system processes dhcp-service traceoptions file dhcp_logfile

  set system processes dhcp-service traceoptions file>  set system processes dhcp-service traceoptions level all
  set system processes dhcp-service traceoptions flag all
  set chassis aggregated-devices ethernet device-count 20
  set chassis alarm management-ethernet link-down ignore
  set chassis auto-image-upgrade
  deactivate chassis auto-image-upgrade
  set interfaces interface-range To_User_1 member-range ge-0/0/5 to ge-0/0/11
  set interfaces interface-range To_User_1 member-range ge-0/0/0 to ge-0/0/11
  set interfaces interface-range To_User_1 unit 0 family ethernet-switching interface-mode access
  set interfaces interface-range To_User_1 unit 0 family ethernet-switching vlan members vlan4
  set interfaces interface-range To_User_2 member-range ge-0/0/16 to ge-0/0/13
  set interfaces interface-range To_User_2 unit 0 family ethernet-switching interface-mode access
  set interfaces interface-range To_User_2 unit 0 family ethernet-switching vlan members vlan5
  set interfaces ge-0/0/0 unit 0 family ethernet-switching
  set interfaces ge-0/0/1 unit 0 family ethernet-switching
  set interfaces ge-0/0/2 unit 0 family ethernet-switching
  set interfaces ge-0/0/3 unit 0 family ethernet-switching
  set interfaces ge-0/0/4 unit 0 family ethernet-switching
  set interfaces ge-0/0/5 unit 0 family ethernet-switching
  set interfaces ge-0/0/6 unit 0 family ethernet-switching
  set interfaces ge-0/0/7 unit 0 family ethernet-switching
  set interfaces ge-0/0/8 unit 0 family ethernet-switching
  set interfaces ge-0/0/9 unit 0 family ethernet-switching
  set interfaces ge-0/0/10 unit 0 family ethernet-switching
  set interfaces ge-0/0/11 unit 0 family ethernet-switching
  set interfaces ge-0/0/12 unit 0 family ethernet-switching
  set interfaces ge-0/0/13 unit 0 family ethernet-switching
  set interfaces ge-0/0/14 unit 0 family ethernet-switching
  set interfaces ge-0/0/15 unit 0 family ethernet-switching
  set interfaces ge-0/0/16 unit 0 family ethernet-switching
  set interfaces ge-0/0/17 unit 0 family ethernet-switching
  set interfaces ge-0/0/18 unit 0 family ethernet-switching
  set interfaces ge-0/0/19 unit 0 family ethernet-switching
  set interfaces ge-0/0/20 unit 0 family ethernet-switching
  set interfaces ge-0/0/21 unit 0 family ethernet-switching
  set interfaces ge-0/0/22 unit 0 family ethernet-switching
  set interfaces ge-0/0/23 unit 0 family ethernet-switching
  set interfaces ge-0/0/24 unit 0 family ethernet-switching
  set interfaces ge-0/0/25 unit 0 family ethernet-switching
  set interfaces ge-0/0/26 unit 0 family ethernet-switching
  set interfaces ge-0/0/27 unit 0 family ethernet-switching
  set interfaces ge-0/0/28 unit 0 family ethernet-switching
  set interfaces ge-0/0/29 unit 0 family ethernet-switching
  set interfaces ge-0/0/30 unit 0 family ethernet-switching
  set interfaces ge-0/0/31 unit 0 family ethernet-switching
  set interfaces ge-0/0/32 unit 0 family ethernet-switching
  set interfaces ge-0/0/33 unit 0 family ethernet-switching
  set interfaces ge-0/0/34 unit 0 family ethernet-switching
  set interfaces ge-0/0/35 unit 0 family ethernet-switching
  set interfaces ge-0/0/36 unit 0 family ethernet-switching interface-mode access
  set interfaces ge-0/0/36 unit 0 family ethernet-switching vlan members vlan1000
  set interfaces ge-0/0/37 unit 0 family ethernet-switching
  set interfaces ge-0/0/38 unit 0 family ethernet-switching
  set interfaces ge-0/0/39 unit 0 family ethernet-switching
  set interfaces ge-0/0/40 unit 0 family ethernet-switching
  set interfaces ge-0/0/41 unit 0 family ethernet-switching
  set interfaces ge-0/0/42 unit 0 family ethernet-switching
  set interfaces ge-0/0/43 description TO_SANGFOR
  set interfaces ge-0/0/43 unit 0 family inet address xx.xx.xx.xx/xx
  set interfaces ge-0/0/44 description TO_SSL_***
  set interfaces ge-0/0/44 unit 0 family inet address xx.xx.xx.xx/xx
  set interfaces ge-0/0/45 description TO_SITE_***
  set interfaces ge-0/0/45 unit 0 family inet address xx.xx.xx.xx/xx
  set interfaces ge-0/0/46 description T0_SRXxxx-NEIWANG
  set interfaces ge-0/0/46 ether-options 802.3ad ae1
  set interfaces ge-0/0/47 description T0_SRXxxx-NEIWANG
  set interfaces ge-0/0/47 ether-options 802.3ad ae1
  set interfaces ge-0/2/0 unit 0 family ethernet-switching
  set interfaces xe-0/2/0 unit 0 family ethernet-switching interface-mode access
  set interfaces xe-0/2/0 unit 0 family ethernet-switching vlan members vlan1000
  set interfaces ge-0/2/1 unit 0 family ethernet-switching
  set interfaces xe-0/2/1 description xxxxxxxxxxxxxxxxxx
  set interfaces xe-0/2/1 ether-options 802.3ad ae0
  set interfaces ge-0/2/2 unit 0 family ethernet-switching
  set interfaces xe-0/2/2 description xxxxxxxxxxxxxxxxxxxx
  set interfaces xe-0/2/2 ether-options 802.3ad ae0
  set interfaces ge-0/2/3 unit 0 family ethernet-switching
  set interfaces xe-0/2/3 description xxxxxxxxxxxxxxxxxxxxx
  set interfaces xe-0/2/3 ether-options 802.3ad ae0
  set interfaces ae0 native-vlan-id 1
  set interfaces ae0 unit 0 description xxxxxxxxxxxxxxxxxx
  set interfaces ae0 unit 0 family ethernet-switching interface-mode trunk
  set interfaces ae0 unit 0 family ethernet-switching vlan members default
  set interfaces ae0 unit 0 family ethernet-switching vlan members vlan4
  set interfaces ae0 unit 0 family ethernet-switching vlan members vlan5
  set interfaces ae1 description xxxxxxxxxxxxxxx
  set interfaces ae1 unit 0 family inet address xx.xx.xx.xx/xx
  set interfaces irb unit 0 family inet dhcp vendor-id Juniper-exxxx-48t
  set interfaces irb unit 4 family inet address xx.xx.xx.xx/xx
  set interfaces irb unit 5 family inet address xx.xx.xx.xx/xx
  set interfaces me0 unit 0 family inet address xx.xx.xx.xx/xx
  set interfaces vme unit 0 family inet dhcp vendor-id Juniper-xxxx-48t
  set forwarding-options storm-control-profiles default all
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set routing-options static route 0.0.0.0/0 next-hop xx.xx.xx.xx
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set routing-options static route xx.xx.xx.xx/xx next-hop xx.xx.xx.xx
  set protocols ospf export static_into_ospf
  set protocols ospf area 0.0.0.0 interface ge-0/0/xx.0 interface-type p2p
  set protocols lldp interface all
  set protocols lldp-med interface all
  set protocols igmp-snooping vlan default
  set protocols rstp bridge-priority 4k
  set protocols rstp interface ge-0/0/0
  set protocols rstp interface ge-0/0/1
  set protocols rstp interface ge-0/0/2
  set protocols rstp interface ge-0/0/3
  set protocols rstp interface ge-0/0/4
  set protocols rstp interface ge-0/0/5
  set protocols rstp interface ge-0/0/6
  set protocols rstp interface ge-0/0/7
  set protocols rstp interface ge-0/0/8
  set protocols rstp interface ge-0/0/9
  set protocols rstp interface ge-0/0/10
  set protocols rstp interface ge-0/0/11
  set protocols rstp interface ge-0/0/12
  set protocols rstp interface ge-0/0/13
  set protocols rstp interface ge-0/0/14
  set protocols rstp interface ge-0/0/15
  set protocols rstp interface ge-0/0/16
  set protocols rstp interface ge-0/0/17
  set protocols rstp interface ge-0/0/18
  set protocols rstp interface ge-0/0/19
  set protocols rstp interface ge-0/0/20
  set protocols rstp interface ge-0/0/21
  set protocols rstp interface ge-0/0/22
  set protocols rstp interface ge-0/0/23
  set protocols rstp interface ge-0/0/24
  set protocols rstp interface ge-0/0/25
  set protocols rstp interface ge-0/0/26
  set protocols rstp interface ge-0/0/27
  set protocols rstp interface ge-0/0/28
  set protocols rstp interface ge-0/0/29
  set protocols rstp interface ge-0/0/30
  set protocols rstp interface ge-0/0/31
  set protocols rstp interface ge-0/0/32
  set protocols rstp interface ge-0/0/33
  set protocols rstp interface ge-0/0/34
  set protocols rstp interface ge-0/0/35
  set protocols rstp interface ge-0/0/36
  set protocols rstp interface ge-0/0/37
  set protocols rstp interface ge-0/0/38
  set protocols rstp interface ge-0/0/39
  set protocols rstp interface ge-0/0/40
  set protocols rstp interface ge-0/0/41
  set protocols rstp interface ge-0/0/42
  set protocols rstp interface ge-0/2/0
  set protocols rstp interface ge-0/2/1
  set protocols rstp interface ge-0/2/2
  set protocols rstp interface ge-0/2/3
  set policy-options policy-statement static_into_ospf term xx from protocol static
  set policy-options policy-statement static_into_ospf term xx from protocol direct
  set policy-options policy-statement static_into_ospf term xx then accept
  set access address-assignment pool USER_POOL_1 family inet network xx.xx.xx.xx/xx
  set access address-assignment pool USER_POOL_1 family inet range network_range low xx.xx.xx.xx/xx
  set access address-assignment pool USER_POOL_1 family inet range network_range high xx.xx.xx.xx
  set access address-assignment pool USER_POOL_1 family inet dhcp-attributes name-server xx.xx.xx.xx
  set access address-assignment pool USER_POOL_1 family inet dhcp-attributes name-server xx.xx.xx.xx
  set access address-assignment pool USER_POOL_1 family inet dhcp-attributes router xx.xx.xx.xx
  set access address-assignment pool USER_POOL_2 family inet network xx.xx.xx.xx/xx
  set access address-assignment pool USER_POOL_2 family inet range network_range low xx.xx.xx.xx
  set access address-assignment pool USER_POOL_2 family inet range network_range high xx.xx.xx.xx
  set access address-assignment pool USER_POOL_2 family inet dhcp-attributes name-server xx.xx.xx.xx
  set access address-assignment pool USER_POOL_2 family inet dhcp-attributes name-server xx.xx.xx.xx
  set access address-assignment pool USER_POOL_2 family inet dhcp-attributes router xx.xx.xx.xx
  set vlans default vlan-id x
  set vlans default xx-interface irb.0
  set vlans vlanxx vlan-id xx
  set vlans vlanxxx xx-interface irb.xxx
  set vlans vlanx description User_x
  set vlans vlanxvlan-id x
  set vlans vlanx xx-interface irb.x
  set vlans vlanx description User_x
  set vlans vlanx vlan-id x
  set vlans vlanx xx-interface irb.x
  {master:0}
  仅供学习,具体参数改了很多,做到职业素养;如果有对juniper这方面深入研究的,可以推荐一位老师。
  http://edu.51cto.com/course/3284.html
  我也是学习过来的,大侠真的不错。
页: [1]
查看完整版本: juniper的配置-适合对juniper感兴趣的人探讨