juniper交换机配置指南

1、jun iper交换机配置指南开机后：login: rootLast logi n: Fri Jan 17 22:21:55 on ttydO-JUNOS 7.2R3.3 built 2002-03-23 02:44:36 UTCTerm inal type? vt100 root%_注意使用root用户登录的情况下，输入帐号/密码以后，默认是进入shell模式的（而只有root用户帐号有这个现象），要输入 cli命令进入用户模式:root% cliroot 配置模式用户模式下输入 con figure命令进入配置模式，配置模式下可以对设备进行各种参数的配置root con figureedi

2、troot#设置root用户密码命令：set systemroot-authe nticatio n pla in-text-password路由器初始化root用户是没有密码的，在第一次进行配置的时候必须要配置root密码才能commit成功。密码采用字母 +数字方式。Example:labM7i=GZ # set systemroot-authe nticati on pla in-text-passwordNew password:Retype new password:添加系统用户命令：set system login user juniper uid 2000 - 设置用户名为 ju

3、niper 用户 id 为 2000set system login user juniper class super-user- 设置 juniper 用户为超级用户set system login user juniper authentication plain-text-password- 设置 juniper 用户的密码设置主机名命令：set system host-nam e M7i_GZ- 设置主机名为 M7i_GZ开启系统 telnet 服务命令：set system services telnet说明：系统默认是没有打开 telnet 功能的，只有打开 telnet 服务之后

4、才能从网络上登陆到路由器 开启系统 ftp 服务命令：set system services ftp说明：系统默认是没有打开 ftp 功能的，只有打开 ftp 服务之后才能从网络上 ftp 到路由器 配置 SNMPset snmp communityauthorization clients # 设置 SNMP 字符串set snmp engine-id localset snmp descriptionset snmp trap-options source-address # 设置 snmp trap 的原地址为 set snmp contact

5、 # 设置 snmp 的联系信息 # 设置 snmp v3 engine ID信息 # 设置 snmp 的系统描述配置物理端口参数userhost#setin terface ge-slot/pic/port descripti on descripti on#配置端口描述userhost#setin terface ge-slot/pic/port mtu m t u-number#配置端口 MTUuserhost#setin terface ge-slot/pic/port ether-opti ons speed (10m| 100m | 1g)#配置端口速率userhost#setin

6、 terface ge-slot/pic/port ether-opti ons link-mode (autom atic | full-duplex |half-duplex )#配置端口双工userhost#setin terface ge-slot/pic/port ether-opti ons (auto-n egotiati on |no-auto-n egotiati on )#配置端口自动协商Example:roothost_ editEn teri ng con figurati on modeeditroothost_# set in terfaces ge-3/0/0 d

7、escripti on“ to_B200- 1 ”editroothost # set in terfaces ge-3/0/0 mtu 9216editroothost # set in terfaces ge-3/0/0 ether-opti ons speed 1geditmoderoothost_# set in terfaces ge-3/0/0 ether-opti ons link-full-duplexeditroothost_# set in terfaces ge-3/0/0 ether-opti ons auto-n egotiati on配置物理端口二层接口editro

8、othost# set in terfaces ge-0/0/16 un it 0 family ether net-switch ingport-m ode access端口#配置物理端口作为二层access模式的接口，端口默认情况下就是二层accessedituserhost_ # show in terfacesge-0/0/16 unit 0 fam ily ether net-switch ing;配置物理端口三层接口EX交换机物理接口可以支持三层路由接口功能，直接可以在接口上配置三层地址editroothost # set in terfaces ge-0/0/17 un it 0

9、 family inet address/24配置VLAN初始化配置时候，所有端口属于 default VLAN ，default vlan 的默认ID是0userhost_# set in terfaces nam e un it 0 family ether net-switch ing port-mode access#配置端口的access模式，默认端口就是access模式。userhost#setvia ns via n-name via n-id n umber#配置VLAN分配vian IDEX支持2种方式来配置 access接口分配到 VLAN，采用其中

10、一种就可以实现端口VLAN的划分。方式一：userhost#set via ns via n-name in terface in terface_ name直接在VLAN中添加多个物理端口方式二：或是在物理接口下：userhost#setin terfaces in terface-name un it 0 famiiy ether net-switch ing via n membersvia n-nam e or via n-id#添加端口到特定 VLANuserhost_# show via ns via n-n ame detaii#查看VLAN信息Exampie:roothost

11、editEn teri ng con figurati on modeeditroothost_# set via ns saies via n-id 100editroothost_# set via ns saies in terface ge-0/0/1#或者可以如下配置，实现相同的配置效果editily ether net-switch ingroothost_# set in terfaces ge-0/0/1 un it 0 famvia n members sales配置 Vian trunk配置端口作trunk端口，支持 802.1Q 的标准封装userhost # set i

12、n terfaces name un it 0 family ether net-switch ing port-mode tru nk#配置端口的 VLAN模式为trunk模式userhost # set in terfaces name un it 0 family ether net-switch ing vla n membersall| number#配置trunk端口的允许通过的 VLAN , 9.1版本目前不支持 vlan-range，预期在9.2版本支持Example:roothost_ editEn teri ng con figurati on modeeditrootho

13、st#showin terfaces ge-0/0/3 unit 0 fam ily ether net-switch ing port-m ode trunk;vla n members ora nge blue ;ge-0/0/4 unit 0 fam ily ether net-switch ing port-m ode trunk;via n members 100 200 ;配置 native-vlan-idEX在trunk 端口下支持native-vlan的配置：roothos editEn teri ng con figurati on m odeeditroothost # s

14、et in terface ge-0/0/8 un it 0 family Ether net-switch n ative-vla n-id purpleeditroothost#showin terface ge-0/0/8 unitOfam ily ethernet-switching port-m ode trunk;vlan members orange blue purple ;native-vlan-id purple;静态路由协议手工添加到路由表下一跳必须有效级别所以的酉己置在 routin g-opti onsSyntax :editrouti ng-opti ons sta

15、tic defaults static-opti ons;route destination-prefix next-hop next-hop;qualified-next-hop address metric m etric;prefere nee prefere nee;static-opti ons;Example:edituserhost# showrouti ng-opti ons static route /0 n ext-hop ;OSPF单区域edituserhost_# set protocols ospf area 0 in terfac

16、e ge-0/0/0edituserhost_# show protocols ospfospf area in terface ge-0/0/0.0;配置OSPF多区域edituserhost_# show protocols ospfospf area in terface ge-0/0/0.0;edituserhost_# set protocols ospf area 1 in terface at-O/1/1.1OOedituserhost_# show protocols ospfospf area in terface ge-0/0

17、/0.0;area in terface at-0/1/1.100;综合实例：set systemroot-authe nticatio n pla in-text-passwordset system login user juniper uid 2000 - 设置用户名为 juniper 用户 id 为 2000set system login user juniper class super-user - 设置 juniper 用户为超级用户set system login user juniper authentication plain-text-password -

18、 设置 juniper 用户 set system services telnetset vlans 10 vlan-id 10set vlans 20 vlan-id 20set vlans 1 lan-id 1 set interfaces ge0/0/0 unit 0 family ethernet-switching port-mode trunk set interfaces ge0/0/0 unit 0 family ethernet-switching vlan members all set interface ge-0/0/0 unit 0 family Ethernet-switch native-vlan-id 1set int vlan unit 10 family inet add /24配置 vlan 10set int vlan unit 20 family inet add 192.168.2