2、SRX筆記及基礎(chǔ)配置-創(chuàng)新互聯(lián)

遠(yuǎn)程基本配置

目前創(chuàng)新互聯(lián)已為近千家的企業(yè)提供了網(wǎng)站建設(shè)、域名、網(wǎng)絡(luò)空間、網(wǎng)站改版維護(hù)、企業(yè)網(wǎng)站設(shè)計(jì)、陽明網(wǎng)站維護(hù)等服務(wù)，公司將堅(jiān)持客戶導(dǎo)向、應(yīng)用為本的策略，正道將秉承"和諧、參與、激情"的文化，與客戶和合作伙伴齊心協(xié)力一起成長(zhǎng)，共同發(fā)展。

root@SRX1# show | display set

set version 12.1X44.4

set system host-name SRX1

set system time-zone Asia/Shanghai

set system root-authentication encrypted-password "$1$0m2EDDUB$hW0MnI7hQFLfmFmROx02B1"

set system name-server 114.114.114.114

set system services ssh

set system services web-management http

set system ntp server 62.201.225.9

set interfaces ge-0/0/0 unit 0 family inet address 192.168.130.212/24

set interfaces ge-0/0/1 unit 0 family inet address 1.1.1.254/24

set routing-options static route 0.0.0.0/0 next-hop 192.168.130.2

set security nat source rule-set NAT-Policy from zone trust

set security nat source rule-set NAT-Policy to zone untrust

set security nat source rule-set NAT-Policy rule Trust-Untrust-Interface-NAT match source-address 1.1.1.0/24

set security nat source rule-set NAT-Policy rule Trust-Untrust-Interface-NAT then source-nat interface

set security policies from-zone trust to-zone untrust policy Permit-ALL match source-address any

set security policies from-zone trust to-zone untrust policy Permit-ALL match destination-address any

set security policies from-zone trust to-zone untrust policy Permit-ALL match application any

set security policies from-zone trust to-zone untrust policy Permit-ALL then permit

set security zones security-zone untrust host-inbound-traffic system-services ping

set security zones security-zone untrust host-inbound-traffic system-services ssh

set security zones security-zone untrust host-inbound-traffic system-services http

set security zones security-zone untrust interfaces ge-0/0/0.0

set security zones security-zone trust host-inbound-traffic system-services ping

set security zones security-zone trust host-inbound-traffic system-services ssh

set security zones security-zone trust host-inbound-traffic system-services http

set security zones security-zone trust interfaces ge-0/0/1.0

set security nat static rule-set static-nat from zone untrust

set security nat static rule-set static-nat rule rule1 match destination-address 192.168.130.199/32

set security nat static rule-set static-nat rule rule1 then static-nat prefix 1.1.1.1/32

set security nat proxy-arp interface ge-0/0/0.0 address 192.168.130.199/32

set security zones security-zone trust address-book address test 1.1.1.1/32

set security zones security-zone trust address-book address-set 1.1.1.1 address test

set applications application 3389 protocol tcp

set applications application 3389 destination-port 3389

set applications application-set 3389-3389 application 3389

set security policies from-zone untrust to-zone trust policy 1 match source-address any

set security policies from-zone untrust to-zone trust policy 1 match destination-address test

set security policies from-zone untrust to-zone trust policy 1 match application 3389-3389

set security policies from-zone untrust to-zone trust policy 1 then permit

===========================================================================================

root@SRX2> show interfaces terse | match g 查看接口配置

root@SRX2# show | display set   查看Set格式的配置

root@SRX2# show | compare 查看待提交配置與當(dāng)前運(yùn)行配置的差別

root@SRX2> clear system commit 清除未被提交的配置

root@SRX2> show system uptime 查看系統(tǒng)時(shí)鐘

root@SRX2# commit at "2016-09-30 13:48:00"   在指定時(shí)間保存配置

root@SRX2# commit comment "Only test" 為提交的配置進(jìn)行說明

root@SRX2> show system commit 查看提交配置的說明（包含有提交的配置說明）

root@SRX2# rollback ?   查看可恢復(fù)的配置

root@SRX2# rollback 9   恢復(fù)某一配置，需commit配置才生效

root@SRX2# commit confirmed 確認(rèn)提交配置命令（十分鐘內(nèi)不對(duì)配置進(jìn)行確認(rèn)，自動(dòng)恢復(fù)配置到提交之前）

root@SRX2# commit and-quit 確認(rèn)并且退出

root@SRX2# set system host-name My-SRX 設(shè)置主機(jī)名

root@SRX2# set system name-server 114.114.114.114 設(shè)置DNS

root@SRX2> show system uptime 查看時(shí)間

root@SRX2# set system time-zone Asia/Shanghai 設(shè)置時(shí)區(qū)

root@SRX2> set date 200808080808.08 手動(dòng)設(shè)置時(shí)間

root@SRX2# set system ntp server 3.asia.pool.ntp.org 設(shè)置NTP

root@SRX2> show ntp associations 查看NTP

root@SRX2> show ntp status 查看NTP

root@SRX2> request system reboot 重啟系統(tǒng)

root@SRX2> request system power-off 關(guān)閉系統(tǒng)

root@SRX2# set system root-authentication plain-text-password 修改root密碼

root@SRX2# set system login user zqb class super-user authentication plain-text-password   設(shè)置遠(yuǎn)程登錄密碼

恢復(fù)root密碼

Loading /boot/defaults/loader.conf

/kernel text=0x894aa0 data=0x4d050+0x100b2c syms=[0x4+0x92cf0+0x4+0xd1487]

/boot/modules/libmbpool.ko text=0xd9c data=0x100

/boot/modules/if_em_vjx.ko text=0xb794 data=0x5ec+0x204 /

Hit [Enter] to boot immediately, or space bar for command prompt.

================

此時(shí)按空格鍵

OK boot -s

================

進(jìn)入單用戶模式

System watchdog timer disabled

Enter full pathname of shell or 'recovery' for root password recovery or RETURN for /bin/sh: recovery

================

進(jìn)入密碼恢復(fù)模式

Starting CLI ...

root@SRX2>

root@SRX2# set system services ssh root-login deny 禁止ssh的root登錄

root@SRX2# set system services ssh 啟用SSH

root@SRX2# set system services web-management http    啟動(dòng)web管理

root@SRX2> show version 查看版本

root@SRX2> show system license 查看授權(quán)信息

root@SRX2> request system license add terminal 加載授權(quán)信息(回車+Ctrl+D結(jié)束)

root@SRX2> show cli history 查看歷史命令

root@SRX2> show system processes extensive 查看系統(tǒng)利用率

root@SRX2> restart chassis-control gracefully 重啟系統(tǒng)進(jìn)程

set security zones security-zone trust address-book address 1.1.1.1 1.1.1.1/32

set security zones security-zone trust address-book address 1.1.1.2 1.1.1.2/32

set security zones security-zone trust address-book address-set Inside address 1.1.1.1

set security zones security-zone trust address-book address-set Inside address 1.1.1.2

set applications application 3389 protocol tcp

set applications application 3389 destination-port 3389

set applications application-set 3389-3389 application 3389

set schedulers scheduler test-scheduler daily start-time 09:00 stop-time 18:00

set schedulers scheduler test-scheduler sunday exclude

set schedulers scheduler test-scheduler saturday exclude

set schedulers scheduler one-time start-date 2016-10-18.09:00 stop-date 2016-10-18.18:00

set security policies from-zone trust to-zone untrust policy Permit-ALL scheduler-name test-scheduler

set security nat static rule-set static-nat from zone untrust

set security nat static rule-set static-nat rule rule1 match destination-address 192.168.130.199/32

set security nat static rule-set static-nat rule rule1 then static-nat prefix 1.1.1.1/32

set security nat proxy-arp interface ge-0/0/0.0 address 192.168.130.199/32

set security zones security-zone trust address-book address test 1.1.1.1/32

set security zones security-zone trust address-book address-set 1.1.1.1 address test

set applications application 3389 protocol tcp

set applications application 3389 destination-port 3389

set applications application-set 3389-3389 application 3389

set security policies from-zone untrust to-zone trust policy 1 match source-address any

set security policies from-zone untrust to-zone trust policy 1 match destination-address test

set security policies from-zone untrust to-zone trust policy 1 match application 3389-3389

set security policies from-zone untrust to-zone trust policy 1 then permit

另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)scvps.cn，海內(nèi)外云服務(wù)器15元起步，三天無理由+7*72小時(shí)售后在線，公司持有idc許可證，提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì)，專為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。

分享名稱：2、SRX筆記及基礎(chǔ)配置-創(chuàng)新互聯(lián)
標(biāo)題路徑：http://muchs.cn/article38/ddcipp.html

成都網(wǎng)站建設(shè)公司_創(chuàng)新互聯(lián)，為您提供軟件開發(fā)、網(wǎng)站營銷、靜態(tài)網(wǎng)站、云服務(wù)器、品牌網(wǎng)站設(shè)計(jì)、網(wǎng)站制作

廣告

聲明：本網(wǎng)站發(fā)布的內(nèi)容（圖片、視頻和文字）以用戶投稿、用戶轉(zhuǎn)載內(nèi)容為主，如果涉及侵權(quán)請(qǐng)盡快告知，我們將會(huì)在第一時(shí)間刪除。文章觀點(diǎn)不代表本網(wǎng)站立場(chǎng)，如需處理請(qǐng)聯(lián)系客服。電話：028-86922220；郵箱：631063699@qq.com。內(nèi)容未經(jīng)允許不得轉(zhuǎn)載，或轉(zhuǎn)載時(shí)需注明來源： 創(chuàng)新互聯(lián)