01 JunOS Basic

JunOS

J OS基礎教育訓練

JunOS基礎Ju OS基礎[email protected]

Software Version

♥Juniper SRX100♥Juniper SRX100Version 10.0R1.8

♥Microsoft Internet ExplorerV i 6 0 S i P k 3Version 6.0 Service Pack 3

User Interface Options

J-Web interface:A W b b d GUI♠A Web-based GUI♠The J-Web service using HTTP is enabled by default on J-series routers

JUNOS software CLI:♠Available from console interface

♣RJ-45 RS-232 @ 9600 bps, 8/1/N (not configurable)♣RJ 45 RS 232 @ 9600 bps, 8/1/N (not configurable)♠Available by using Telnet and SSH♠Requires network interface and related service configuration

Dedicated Ethernet management port on M seriesDedicated Ethernet management port on M-series routers

♠All J-series network ports support management access andtransit traffic

Agenda

System Bootingy gMode SwitchingConfiguration HierarchygConfiguration OperatingStarting J-Web

System Booting 1

U-Boot 1.1.6 (Build time: Nov 19 2009 - 07:52:31)

SRX 100 LOWMEM board revision major:0 minor:0 serial #: AT4409AF0075SRX_100_LOWMEM board revision major:0, minor:0, serial #: AT4409AF0075OCTEON CN5020-SCP pass 1.1, Core clock: 500 MHz, DDR clock: 266 MHz (532 Mhzdata rate)DRAM: 512 MBStarting Memory POST... Checking datalines OKChecking datalines... OKChecking address lines... OKChecking 512K memory for U-Boot... OK.Running U-Boot CRC Test... OK.Flash: 4 MBUSB: scanning bus for devices 3 USB Device(s) foundUSB: scanning bus for devices... 3 USB Device(s) found

scanning bus for storage devices... 1 Storage Device(s) foundClearing DRAM....... doneBIST check passed.Net: pic init done (err = 0)octeth0POST PassedPOST PassedPress SPACE to abort autoboot in 1 secondsELF file is 32 bitLoading .text @ 0x8f000078 (241008 bytes)Loading .rodata @ 0x8f03ade8 (13908 bytes)Loading rodata str1 4 @ 0x8f03e43c (15972 bytes)Loading .rodata.str1.4 @ 0x8f03e43c (15972 bytes)Loading set_Xcommand_set @ 0x8f0422a0 (96 bytes)Loading .rodata.cst4 @ 0x8f042300 (20 bytes)Loading .data @ 0x8f043000 (5572 bytes)Loading .data.rel.ro @ 0x8f0445c4 (120 bytes)Loading data rel @ 0x8f04463c (136 bytes)Loading .data.rel @ 0x8f04463c (136 bytes)Clearing .bss @ 0x8f0446c8 (8304 bytes)## Starting application at 0x8f000078 ...Consoles: U-Boot console

System Booting 2

Found compatible API, ver. 1.6

FreeBSD/MIPS U Boot bootstrap loader Revision 1 6FreeBSD/MIPS U-Boot bootstrap loader, Revision 1.6([email protected], Thu Nov 19 07:07:59 UTC 2009)Memory: 512MB[0]Booting from nand-flash slice 1Un-Protected 1 sectorswriting to flashwriting to flash...Protected 1 sectorsLoading /boot/defaults/loader.conf/kernel data=0x90a784+0xc6a78 syms=[0x4+0x74120+0x4+0xa4230]

Hit [Enter] to boot immediately, or space bar for command prompt.Booting [/kernel]... Kernel entry at 0x801000d8 ...getbootinfo: magic 0x0 md 0x80beb000 memsize 0x0getbootinfo: boothowto 0x1000 kernend 0x80c00000 memsize 512MB i2cid 0x530getbootinfo: boothowto 0x1000 kernend 0x80c00000 memsize 512MB i2cid 0x530 kernelname /kernel

Platform Startinginit regular consoleInitializing octeon watchdogInitializing octeon watchdogGDB: debug ports: uartGDB: current port: uartKDB: debugger backends: ddb gdbKDB: current backend: ddbgetmemsize: msgbufp[size=32768] = 0x8000cfe4getmemsize: msgbufp[size=32768] = 0x8000cfe4Copyright (c) 1996-2009, Juniper Networks, Inc.All rights reserved.Copyright (c) 1992-2006 The FreeBSD Project.

System Booting 3

Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994The Regents of the University of California. All rights reserved.

JUNOS 10 0R1 8 #0: 2009 11 03 10:06:39 UTCJUNOS 10.0R1.8 #0: 2009-11-03 10:06:39 [email protected]:/volume/build/junos/10.0/release/10.0R1.8/obj-

octeon/bsd/sys/compile/JSRXNLEJUNOS 10.0R1.8 #0: 2009-11-03 10:06:39 UTC

[email protected]:/volume/build/junos/10.0/release/10.0R1.8/obj-octeon/bsd/sys/compile/JSRXNLEocteon/bsd/sys/compile/JSRXNLEreal memory = 536870912 (512MB)avail memory = 317927424 (303MB)cpuid: 0, btlb_cpumap:0xffffffffFreeBSD/SMP: Multiprocessor System Detected: 2 CPUsInitializing watchdog interuptInitializing watchdog interupt

Loading RT Fifo module.....Loaded RT Fifo modulepmap_helper loaded (interface version 6, syscall 210)cpu0 on motherboardcpu0 on motherboard: CAVIUM's Octeon CPU Rev. 0.1 with no FPU implemented

L1 Cache: I size 32kb(128 line), D size 8kb(128 line), sixty four way.L2 Cache: Size 128kb, ? way

obio0 on motherboarduart0: <Octeon-16550 channel 0> on obio0uart0: <Octeon-16550 channel 0> on obio0uart0: console (9600,n,8,1)twsi0 on obio0dwc0: <Synopsis DWC OTG Controller Driver> on obio0usb0: DWC OTG Controller Using DMA modeUsing DMA modeInit: Port Power? op_state=1Init: Power Port (0)usb0: <USB Bus for DWC OTG Controller> on dwc0

System Booting 4

usb0: USB revision 2.0uhub0: vendor 0x0000 DWC OTG root hub, class 9/0, rev 2.00/1.00, addr 1uhub0: 1 port with 1 removable self powereduhub0: 1 port with 1 removable, self powereduhub1: vendor 0x0409 product 0x005a, class 9/0, rev 2.00/1.00, addr 2uhub1: single transaction translatoruhub1: 2 ports with 1 removable, self poweredumass0: STMicroelectronics ST72682 High Speed Mode, rev 2.00/2.10, addr 3pcib0: <Cavium on chip PCI bridge> on obio0pcib0: <Cavium on-chip PCI bridge> on obio0Disabling Octeon big bar supportPCI Status: PCI 32-bit: 0xc041bpcib0: Initialized controllerpci0: <PCI bus> on pcib0pci0: <serial bus USB> at device 2 0 (no driver attached)pci0: <serial bus, USB> at device 2.0 (no driver attached)pci0: <serial bus, USB> at device 2.1 (no driver attached)pci0: <serial bus, USB> at device 2.2 (no driver attached)cpld0 on obio0gblmem0 on obio0octpkt0: <Octeon RGMII> on obio0octpkt0: <Octeon RGMII> on obio0cfi0: <AMD/Fujitsu - 4MB> on obio0platform_cookie_read not implementedTimecounter "mips" frequency 500000000 Hz quality 0Timecounters tick every 1.000 msecLoading the NETPFE ethernet moduleLoading the NETPFE ethernet moduleLoading E1/T1/J1 driverLoading the DS1/E1 Media Layer; Attaching to media services layerLoading common multilink module.Loading the NETPFE PPPoE moduleLoading the netpfe services driverLoading the netpfe services driverLoading the XDSL Media Layer; Attaching to media services layerLoading the IPSec driverLoading the PTM driver

System Booting 5

Loading the DIALER driverLoading Link Services PICs moduleLoading Link Services PICs module.IPsec: Initialized Security Association Processing.SMP: AP CPU #1 Launched!da0 at umass-sim0 bus 0 target 0 lun 0da0: <ST ST72682 2.10> Removable Direct Access SCSI-2 device da0: 40 000MB/s transfersda0: 40.000MB/s transfersda0: 1000MB (2048000 512 byte sectors: 64H 32S/T 1000C)if_pfe_open: listener socket opened, listening on ...Trying to create bootdev, rootpartition da0s1aTrying to mount root from ufs:/dev/da0s1aAttaching /cf/packages/junos via /dev/mdctlAttaching /cf/packages/junos via /dev/mdctl...Mounted junos package on /dev/md0...

Automatic reboot in progress...** /dev/da0s1aFILE SYSTEM CLEAN; SKIPPING CHECKSFILE SYSTEM CLEAN; SKIPPING CHECKSclean, 59162 free (42 frags, 7390 blocks, 0.0% fragmentation)Verified junos signed by PackageProduction_10_0_0Verified jboot signed by PackageProduction_10_0_0Verified junos-10.0R1.8-domestic signed by PackageProduction_10_0_0** /dev/bo0s3e** /dev/bo0s3eFILE SYSTEM CLEAN; SKIPPING CHECKSclean, 12498 free (26 frags, 1559 blocks, 0.2% fragmentation)** /dev/bo0s3fFILE SYSTEM CLEAN; SKIPPING CHECKSclean 145000 free (184 frags 18102 blocks 0 1% fragmentation)clean, 145000 free (184 frags, 18102 blocks, 0.1% fragmentation)Loading configuration ...mgd: error: Cannot open configuration file: /config/juniper.confmgd: warning: activating factory configuration

System Booting 6

mgd: commit completeSetting initial options: debugger_on_panic=NO debugger_on_break=NO.Starting optional daemons: usbdStarting optional daemons: usbd.Doing initial network setup:.Initial interface configuration:additional daemons: eventd.savecore: /dev/bo0s1b: No such file or directorysavecore: /dev/bo0s1b: No such file or directorysavecore: Reboot reason(s): 0x1: power cycle/failure savecore: no dumps foundAdditional routing options:kern.module_path: /boot//kernel;/boot/modules -> /boot//kernel;/boot/modules;/modulesgrat arp delay=${grat arp delay}: net link ether inet grat arp delay: 0 > 0grat_arp_delay=${grat_arp_delay}: net.link.ether.inet.grat_arp_delay: 0 -> 0

.Doing additional network setup:.Starting final network daemons:.setting ldconfig path: /usr/lib /opt/libstarting standard daemons: cronstarting standard daemons: cron.Initial rc.mips initialization:.Local package initialization:.starting local daemons:.kern.securelevel: -1 -> 1debug kdb stop cpus: 1 -> 2debug.kdb.stop_cpus: 1 -> 2Creating JAIL MFS partition...JAIL MFS partition createdmachdep.nextbootdev: nand-flash -> nand-flashBoot media /dev/da0 has dual root supporthw re dual root media: 0 -> 1hw.re.dual_root_media: 0 -> 1Active Root: /dev/da0s1aBooting from: /dev/da0s1aAlternate Root: /dev/da0s2a

System Booting 7

** /dev/da0s2aFILE SYSTEM CLEAN; SKIPPING CHECKSclean 45976 free (24 frags 5744 blocks 0 0% fragmentation)clean, 45976 free (24 frags, 5744 blocks, 0.0% fragmentation)Fri Oct 8 13:37:07 UTC 2010

Amnesiac (ttyu0)

login: rootlogin: root

--- JUNOS 10.0R1.8 built 2009-11-03 10:06:39 UTCroot@%

Display Hardware

user@host> show chassis hardware detailHardware inventory:Item Version Part number Serial number DescriptionItem Version Part number Serial number DescriptionChassis AT4409AF0075 SRX100-lmRouting Engine REV 08 750-021773 AT4409AF0075 RE-SRX100-LM

usb0 (addr 1) DWC OTG root hub 0 vendor 0x0000 uhub0usb0 (addr 2) product 0x005a 90 vendor 0x0409 uhub1usb0 (addr 3) ST72682 High Speed Mode 64218 STMicroelectronics umass0usb0 (addr 3) ST72682 High Speed Mode 64218 STMicroelectronics umass0

FPC 0 FPCPIC 0 8x FE Base PIC

Power Supply 0

user@host>user@host>user@host> show version Model: srx100-lmJUNOS Software Release [10.0R1.8]

user@host>user@host>

Agenda

System BootinggMode SwitchingConfiguration HierarchygConfiguration OperatingStarting J-Web

Mode Switching 1

Default Login account and empty password

Amnesiac (ttyu0)

login: root

and empty password

E t fi ti d

Enter operational mode

login: root--- JUNOS 10.0R1.8 built 2009-11-03 10:06:39 UTCroot@% cliroot> configureEntering configuration mode

Enter configuration mode

Entering configuration modeThe configuration has been changed but not committed

[edit]root#root#

Mode Switching 2

Exit configuration mode

root# exitThe configuration has been changed but not committedExit with uncommitted changes? [yes no] (yes)Exit with uncommitted changes? [yes,no] (yes)

Exiting configuration mode

root> quitroot> quit

root@% exitlogout

Exit operational mode

Amnesiac (ttyu0)

Login:

Logout

Agenda


Configuration Statement Hierarchy

[edit]user@host# edit protocols ospf area 51 stub

[edit protocols ospf area 0.0.0.51 stub]user@host#

top

chassis interfaces protocols services systems etc

top

chassis interfaces protocols services systems etc.

bgp isis mpls ospf pim rip rsvp vrrp etc.

area area-id graceful-restart overload traffic engineering etc.

area-range area_range interface nssa stub etc.

Configuration File is Hierarchy

CLI commands are entered without curly brackets[ dit t ][edit system]user@host# set services web-management http port 8080

♠The result is a hierarchical configuration file, complete with curly b k tbrackets

[edit system]user@host# show servicesweb-management {

http {port 8080;

}}

[edit system]user@host#

Moving Between Levels 1

edit functions like a change directory (CD) command[ dit][edit]user@host# edit protocols ospf area 51 stub

[edit protocols ospf area 0.0.0.51 stub]user@host# top


top






up moves up one level in the hierarchy[ dit t l f 0 0 0 51 t b][edit protocols ospf area 0.0.0.51 stub]user@host# up

[edit protocols ospf area 0.0.0.51]user@host# top


top






up n moves up n levels[ dit t l f 0 0 0 51][edit protocols ospf area 0.0.0.51]user@host# up 2

[edit protocols]user@host# top


top






top moves to the top of the hierarchy[ dit t l f 0 0 0 51 t b][edit protocols ospf area 0.0.0.51 stub]user@host# top

[edit]user@host# top


top






exit moves to the previous higher level in theHierarchy[edit protocols ospf area 0.0.0.51 stub]user@host# exit

[ di l f] top[edit protocols ospf]user@host#


top






Summary of moving between levels:♠edit functions like a CD command♠up moves up one level♠up n moves up n levels♠top moves to the top of the hierarchy♠exit moves to the previous higher level in the hierarchy or exits configuration mode if at the top level of the hierarchyconfiguration mode if at the top level of the hierarchy

[edit]user@host# exitThe configuration has been changed but not committedThe configuration has been changed but not committedExit with uncommitted changes? [yes,no] (yes)

Exiting configuration mode

user@host>

Agenda


Configuration History

Candidate Active

Commit

Configuration ConfigurationConfigure 0

rollback n

Active configuration stored in/config/juniper.conf.gz

1 2 … 49g j p g

Rollback files stored in/config/juniper.conf.n.gz (n=1–3)/var/db/config/juniper.conf.n.gz (n=4–49)

Configuration Manipulation

Commit Confirmed

Interim ConfigurationConfirmed Configuration

load Candidate Configuration

Commit Active Configuration

Configuration in text file

load

copy

Rollback Previous Configuration

save

Configuration

Viewing Candidate Configuration

[edit]user@host# show system servicesssh;ssh;web-management {

http {port 8080;

}}

You can display just the portions thatconcern you from the root of the hierarchy…

}

[edit]user@host# edit system services

[edit system services]user@host# showssh;web-management {

http {

… or use edit to park yourself at a specificsubhierarchy

http {port 8080;

}}

File Differences 1

Change the candidate configuration[ dit][edit]user@host# delete system services telnetuser@host# set system services sshuser@host# set system services web-management httpuser@host# commit

user@host# delete system services web-managementuser@host# delete system services sshuser@host# set system services telnetuser@host# commit

Display differences between the candidate and active configurations[edit]user@host# show | compare[edit system services]- ssh;+ telnet;- web-management {- http {- port 8080;- }- }

[edit]user@host#

File Differences 2

Compare active and historical configurationsuser@host> show configuration | compare rollback numberuser@host> show configuration | compare filename

Compare arbitrar filesCompare arbitrary filesuser@host> file compare files filename1 filename2

Removing Statements 1

Statements added with set are removed with the deletecommand

♠Removes everything from the specified hierarchy down♠Use wildcard delete to save time♠Use wildcard delete to save time

user@host# show system servicesssh;web-management {eb a age e t {

http {port 8080;

}}

[edit system]user@host# delete system services web-management

[edit system]user@host# show system services

h i b hi h i@ # y

ssh; The entire web-management hierarchy is removed by the delete statement

Removing Statements 2

Pop quiz: You have just disabled an interface with aset interface interface-name disablestatement. How do you re-enable this interface?

[edit]user@host# set interface fe-0/0/1 disableuser@host# commit and-quitcommit completepExiting configuration mode

user@host> show interface terseInterface Admin Link Proto Local Remotefe-0/0/0 up down/ / pfe-0/0/0.0 up downgr-0/0/0 up upip-0/0/0 up uplt-0/0/0 up upmt-0/0/0 up upp ppd-0/0/0 up uppe-0/0/0 up upfe-0/0/1 down up fe-0/0/1.0 up down eth-switch...

Committing a Configuration 1

Configuration changes must be committed to take effectuser@host# commitcommit complete

[edit]user@host#

Use commit check to confirm syntaxuser@host# commit check[edit interfaces lo0 unit 0 family inet][edit interfaces lo0 unit 0 family inet]'address 192.168.69.1/24'Loopback addresses' prefix must be 32 bitserror: configuration check-out failed

U i fi d t t il ti tUse commit confirmed to temporarily activateuser@host# commit confirmedcommit confirmed will be automatically rolled back in 10 minutes

unless confirmedu ess co edcommit complete

# commit confirmed will be rolled back in 10 minutes[edit][ ]user@host#


Schedule a future commit with commit at [edit]user@host# commit at 21:00:00configuration check succeedscommit at will be executed at 2005-05-25 21:00:00 UTCExiting configuration mode

user@host> clear system commit

Use commit and-quit to save timeUse commit and quit to save time[edit]user@host# commit and-quitcommit completeExiting configuration modeExiting configuration mode

user@host>


Add comments with commit comment

[edit]user@host# commit comment "Changed OSPF configuration"commit completecommit complete

[edit]user@host# run show system commit0 2010 10 12 20:28:33 UTC by root via cli0 2010-10-12 20:28:33 UTC by root via cli

Changed OSPF configuration1 2010-10-12 20:17:27 UTC by root via cli commit confirmed, rollback in 10mins2 2010-10-12 20:12:18 UTC by root via cli commit confirmed, rollback in 10mins3 2010 10 12 20:10:15 UTC by root via cli commit confirmed rollback in 10mins3 2010-10-12 20:10:15 UTC by root via cli commit confirmed, rollback in 10mins4 2010-10-12 20:07:04 UTC by root via cli5 2010-10-12 19:53:16 UTC by root via cli

[edit][edit]user@host#

Backing out of Configuration Changes

Use the rollback command to restore one of the last 50 previously committed configurations

[edit]user@host# rollbackload completeload complete

Use rollback (or rollback 0 ) to reset the candidate configuration to the currently active configuration (which is the last version committed)

♠rollback 1 loads the configuration before that♠rollback n loads n configurations before that♠rollback n loads n configurations before that

Using rollback only modifies the candidate configuration

♠Don’t forget to commit the changes!

Saving Configuration Files

Save current candidate configuration using the save command

[edit]user@host# save filename

Fil d t ’ h di t l f ll th i♠File saved to user’s home directory unless full path name is specified♠Only saves from the current hierarchy down

Filename can specify:♠A path and filename on the local router’s file system♠A URL (FTP and SCP)♠A URL (FTP and SCP)

Miscellaneous features:♠terminal option for save commands

♣Si lifi l d ti f t i l b ff♣Simplifies load operations from terminal buffers♠Pipe option for display set

♣Displays the set statements used to create a configuration♠P i di t t h t♠Periodic saves to a remote host

Loading Configuration Files

Configuration information can come from an ASCII file orterminal emulation capture buffer

The load command supports various arguments:♠Override an existing configuration:♠Override an existing configuration:

♣load override filename♠Merge new statements into current configuration:

l d fil♣load merge filename♠Replace existing statements in current configuration:

♣load replace filenamef ff♠Take input from terminal capture buffer:

♣load (replace | merge | override) terminal♠Load relative to current configuration hierarchy:

♣load (replace | merge) (filename | terminal)Changes candidate configuration only♠You must issue a commit to activate

run Is Cool

Use the run command to execute operational-mode CLI commands from within configuration

♠Can be a real time-saver when testing the effect of a recent changechange

[edit interfaces fe-0/0/0]user@host# set unit 0 family inet address 10.250.0.141/16

@h t# ituser@host# commituser@host# run ping 10.250.0.149 count 1PING 10.250.0.149 (10.250.0.149): 56 data bytes64 bytes from 10.250.0.149: icmp_seq=0 ttl=128 time=0.967 ms

--- 10.250.0.149 ping statistics ---1 packets transmitted, 1 packets received, 0% packet lossround-trip min/avg/max/stddev = 0.967/0.967/0.967/0.000 ms

[edit]user@host#

Agenda


Configure

Confirm J-Web service is openedClient connected to trust and get IP address automatic

[edit]user@host# set system services web-management httpuser@host# set system login user john class super-useruser@host# set system login user john authentication plain-text-passwordNew password:

‘j h ’Retype new password:

[edit]user@host# commit

‘john123’‘john123’

Starting J-Web 1

https://<ip address>/

Starting J-Web 2

JunOS

Th kThanksThanks

Date post:	24-Apr-2015
Category:	Documents
Upload:	tarry-ko
View:	117 times
Download:	7 times

01 JunOS Basic

Documents