JUNIPER-EX3200交換機(jī)配置

1、JUNIPER EX3200交換機(jī)配置1 Ex3200開(kāi)機(jī)指導(dǎo)開(kāi)機(jī)后：login: rootLast login: Fri Jan 17 22:21:55 on ttyd0- JUNOS 7.2R3.3 built 2002-03-23 02:44:36 UTCTerminal type? vt100 root% 注意使用root用戶(hù)登錄的情況下，輸入帳號(hào)/密碼以后，默認(rèn)是進(jìn)入shell模式的（而只有root用戶(hù)帳號(hào)有這個(gè)現(xiàn)象），要輸入cli命令進(jìn)入用戶(hù)模式：root% cliroot2 配置模式用戶(hù)模式下輸入configure命令進(jìn)入配置模式，配置模式下可以對(duì)設(shè)備進(jìn)行各種參數(shù)的配置root

2、configureeditroot#2.1 設(shè)置root用戶(hù)密碼命令：set system root-authentication plain-text-password路由器初始化root用戶(hù)是沒(méi)有密碼的，在第一次進(jìn)行配置的時(shí)候必須要配置root密碼才能commit成功。密碼采用字母+數(shù)字方式。Example: labM7i_GZ# set system root-authentication plain-text-password New password:Retype new password:2.2 添加系統(tǒng)用戶(hù)命令：set system login user juniper uid

3、2000 -設(shè)置用戶(hù)名為juniper用戶(hù)id為2000set system login user juniper class super-user -設(shè)置juniper用戶(hù)為超級(jí)用戶(hù)set system login user juniper authentication plain-text-password -設(shè)置juniper用戶(hù)的密碼2.3 設(shè)置主機(jī)名命令：set system host-name M7i_GZ -設(shè)置主機(jī)名為M7i_GZ2.4 開(kāi)啟系統(tǒng)telnet服務(wù)命令：set system services telnet說(shuō)明：系統(tǒng)默認(rèn)是沒(méi)有打開(kāi)telnet功能的，只有打開(kāi)teln

4、et服務(wù)之后才能從網(wǎng)絡(luò)上登陸到路由器。2.5 設(shè)置交換機(jī)地址命令：Edit systemSet name-server 25Commit刪除：Edit systemDelete name-server 252.6 開(kāi)啟系統(tǒng)ftp服務(wù)命令：set system services ftp說(shuō)明：系統(tǒng)默認(rèn)是沒(méi)有打開(kāi)ftp功能的，只有打開(kāi)ftp服務(wù)之后才能從網(wǎng)絡(luò)上ftp到路由器。2.7 配置SNMPset snmp community authorization clients # 設(shè)置SNMP字符串set snmp trap-options source

5、-address #設(shè)置snmp trap的原地址為set snmp contact #設(shè)置snmp的聯(lián)系信息set snmp engine-id local #設(shè)置snmp v3 engine ID信息set snmp description #設(shè)置snmp的系統(tǒng)描述2.8 配置物理端口參數(shù)userhost#set interface ge-slot/pic/port description description#配置端口描述userhost#set interface ge-slot/pic/port mtu mtu-number#配置端口M

6、TUuserhost#set interface ge-slot/pic/port ether-options speed (10m | 100m | 1g)#配置端口速率userhost#set interface ge-slot/pic/port ether-options link-mode (automatic | full-duplex |half-duplex )#配置端口雙工userhost#set interface ge-slot/pic/port ether-options (auto-negotiation |no-auto-negotiation )#配置端口自動(dòng)協(xié)商E

7、xample（例如）:roothost editEntering configuration modeeditroothost# set interfaces ge-3/0/0 description “to_BJ-4200-1”editroothost# set interfaces ge-3/0/0 mtu 9216editroothost# set interfaces ge-3/0/0 ether-options speed 1geditroothost# set interfaces ge-3/0/0 ether-options link-modefull-duplexeditroo

8、thost# set interfaces ge-3/0/0 ether-options auto-negotiation2.9 配置物理端口二層接口editroothost# set interfaces ge-0/0/16 unit 0 family ethernet-switchingport-mode access配置物理端口作為二層access模式的接口，端口默認(rèn)情況下就是二層access端口。edituserhost # show interfacesge-0/0/16 unit 0 family ethernet-switching;2.10 配置物理端口三層接口EX交換機(jī)物理接

9、口可以支持三層路由接口功能，直接可以在接口上配置三層地址editroothost# set interfaces ge-0/0/17 unit 0 family inet address/242.11配置VLAN初始化配置時(shí)候，所有端口屬于default VLAN，default vlan 的默認(rèn)ID是0userhost# set interfaces name unit 0 family ethernet-switching port-mode access#配置端口的access模式，默認(rèn)端口就是access模式。userhost#set vlans vlan-na

10、me vlan-id number#配置VLAN分配vlan IDEX支持2種方式來(lái)配置access接口分配到VLAN，采用其中一種就可以實(shí)現(xiàn)端口VLAN的劃分。方式一：userhost#set vlans vlan-name interface interface_name直接在VLAN中添加多個(gè)物理端口方式二：或是在物理接口下：userhost#set interfaces interface-name unit 0 family ethernet-switching vlan membersvlan-name or vlan-id#添加端口到特定VLANuserhost# show vl

11、ans vlan-name detail#查看VLAN信息Example（例如）:roothost editEntering configuration modeeditroothost# set vlans sales vlan-id 100editroothost# set vlans sales interface ge-0/0/1#或者可以如下配置，實(shí)現(xiàn)相同的配置效果editroothost# set interfaces ge-0/0/1 unit 0 family ethernet-switchingvlan members sales2.12配置Vlan trunk配置端口作tr

12、unk端口，支持802.1Q的標(biāo)準(zhǔn)封裝。userhost# set interfaces name unit 0 family ethernet-switching port-mode trunk#配置端口的VLAN模式為trunk模式userhost# set interfaces name unit 0 family ethernet-switching vlan membersall|number#配置trunk端口的允許通過(guò)的VLAN，9.1版本目前不支持vlan-range，預(yù)期在9.2版本支持。Example:roothost editEntering configuration

13、modeeditroothost#showinterfaces ge-0/0/3 unit 0 family ethernet-switching port-mode trunk;vlan members orange blue ;ge-0/0/4 unit 0 family ethernet-switching port-mode trunk;vlan members 100 200 ;2.13配置 native-vlan-idEX在trunk端口下支持native-vlan 的配置：roothost editEntering configuration modeeditroothost#

14、set interface ge-0/0/8 unit 0 family Ethernet-switchnative-vlan-id purpleeditroothost#show interfacege-0/0/8 unit 0 family ethernet-switching port-mode trunk;vlan members orange blue purple ;native-vlan-id purple;2.14 靜態(tài)路由協(xié)議手工添加到路由表下一跳必須有效所以的配置在routing-options 級(jí)別Syntax（語(yǔ)法）：editrouting-options static

15、 defaults static-options;route destination-prefix next-hop next-hop;qualified-next-hop address metric metric;preference preference;static-options;Example（例如）:edituserhost# showrouting-options static route /0 next-hop ;2.15 OSPF單區(qū)域edituserhost# set protocols ospf area 0 interface ge

16、-0/0/0edituserhost# show protocols ospfospf area interface ge-0/0/0.0;配置OSPF 多區(qū)域edituserhost# show protocols ospfospf area interface ge-0/0/0.0;edituserhost# set protocols ospf area 1 interface at-0/1/1.100edituserhost# show protocols ospfospf area interface ge-0/0/0.0;area 0

17、.0.0.1 interface at-0/1/1.100;綜合實(shí)例：set system root-authentication plain-text-passwordset system login user juniper uid 2000 -設(shè)置用戶(hù)名為juniper用戶(hù)id為2000set system login user juniper class super-user -設(shè)置juniper用戶(hù)為超級(jí)用戶(hù)set system login user juniper authentication plain-text-password -設(shè)置juniper用戶(hù)set system s

18、ervices telnetset vlans 10 vlan-id 10 set vlans 20 vlan-id 20set vlans 1 lan-id 1set interfaces ge0/0/0 unit 0 family ethernet-switching port-mode trunkset interfaces ge0/0/0 unit 0 family ethernet-switching vlan members allset interface ge-0/0/0 unit 0 family Ethernet-switch native-vlan-id 1set int vlan unit 10 family inet add /24 配置vlan 10的3層地址set int vlan unit 20 family inet add /2