juniper防火墙基本操作之 一

root
cli
configure

show interfaces terse
show interfaces brief
show interfaces detail
show interfaces extensive

show interfaces detail | match fe-0/0/0

help reference security policies

root> help apropos arp ?
root> help apropos secu

clear security
Clear security information
clear security alarms
Clear (acknowledge) security alarms
clear security alarms all
Clear (acknowledge) all security alarms

root> configure ?
Possible completions:
<[Enter]> Execute this command 默认模式，大家一起改
batch Work in batch mode (commit happens in batch)
dynamic Work in dynamic database
exclusive Obtain exclusive lock (other users cannot make changes) 排除模式，只有我能改
private Work in private database (other's changes do not show) 只能看到自己的配置，提交后，别人改的不生效
| Pipe through a command

 

root# set interfaces fe-0/0/0.1 family inet address 1.1.1.1/24

[edit]
root#
edit]
root# show interfaces
fe-0/0/0 {
unit 1 {
family inet {
address 1.1.1.1/24;
}
}
}
fxp0 {
unit 0 {
family inet {
dhcp {
vendor-id Juniper-vmx-VM630A2B4FFD;
}
}
}
}

[edit]
root#

root# show interfaces fe-0/0/0.1 family inet
address 1.1.1.1/24;

 

 

 

 

 

 root# edit interfaces

 

 

 

 

 

 

 

 

 

 

 

 

 

 

root# edit interfaces fe-0/0/0.0

 

 

 

 

 

 

 

 

 

 

root# set interfaces fe-0/0/0 unit 1 family inet address 2.2.2.2/24

root# replace pattern fe-0/0/0 with fe-0/0/1

[edit]

root# edit interfaces fe-0/0/1

[edit interfaces fe-0/0/1]

root# show
unit 1 {
family inet {
address 2.2.2.2/24;
}
}

[edit interfaces fe-0/0/1]
root#

 

root# copy interfaces fe-0/0/1 to fe-0/0/2

 

root# edit interfaces fe-0/0/2

[edit interfaces fe-0/0/2]
root#

[edit interfaces fe-0/0/2]
root# show
unit 1 {
family inet {
address 2.2.2.2/24;
}
}

 

 

show security 

show security alarms

下面可以刷的配置：

 

 

 

 

 

 

 

 配置密码后才能提交：

 

 

 

 

 

 

 

 

 

 

 

 

 

 

即需要10分钟内进行第二次提交commit，不然自动恢复到提交前的配置

标签：juniper,show,edit,interfaces,防火墙,fe,基本操作,security,root
来源： https://www.cnblogs.com/linux-china/p/16631449.html