Juniper Command Line
Uploaded by
সামিউল সুমনJuniper Command Line
Uploaded by
সামিউল সুমন# VLAN Configuration
====================
set vlans UMS vlan-id 2
set interfaces irb unit 51 family inet address 172.16.2.254/24
set vlans UMS l3-interface irb.2
***on SRX Firewall****
set routing-option static route 172.16.2.0/24 next-hop 172.16.1.254
# DHCP Server Configuration
===========================
1. Create VLAN (all Switches)
=============================
set vlans WiFi vlan-id 51
2. Create irb Interface:
========================
set interfaces irb unit 51 family inet address 172.16.51.254/24
set vlans WiFi l3-interface irb.51
3. Allow permission for VLAN 51 on Firewall/SRX-1500
====================================================
set routing-option static route 172.16.51.0/24 next-hop 172.16.1.254
4. Crate Pool:
==============
set system services dhcp-local-server group DHCP-POOL-51 interface irb.51
5. Assign Network:
==================
set access address-assignment pool DHCP-POOL-51 family inet network 172.16.51.0/24
set access address-assignment pool DHCP-POOL-51 family inet dhcp-attributes name-
server 45.64.132.66
set access address-assignment pool DHCP-POOL-51 family inet dhcp-attributes router
172.16.51.254
set access address-assignment pool DHCP-POOL-51 family inet range User-Range low
172.16.51.1
set access address-assignment pool DHCP-POOL-51 family inet range User-Range high
172.16.51.230
6. DHCP Excluded Address:
=========================
set access address-assignment pool DHCP-POOL-51 family inet excluded-range RESERVE
low 172.16.53.231
set access address-assignment pool DHCP-POOL-51 family inet excluded-range RESERVE
high 172.16.53.253
7. Clear DHCP Server binding
============================
clear dhcp server binding all; clear DHCP pool
or
<address> or <interface interface-name> or <interfaces-vlan>
8. Neighbor Discovery betweenn Cisco and Juniper Switch
=======================================================
DC-EMC-SW#show lldp neighbors; from Cisco Switch
root@ServerFarm> show lldp neighbors; From Juniper Switch
# Static Route Configuration
============================
set system host-name R1
set interfaces ge-0/0/0 unit 0 description “Link from R1 to R2”
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24
set interfaces lo0 unit 0 family inet address 10.0.0.1/32
set interfaces lo0 unit 0 family inet address 10.0.0.2/32
set routing-options static route 192.168.47.0/24 next-hop 172.16.1.2
set system host-name R2
set interfaces ge-0/0/0 unit 0 description “Link from R2 to R1”
set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.2/24
set interfaces lo0 unit 0 family inet address 192.168.47.5/32
set interfaces lo0 unit 0 family inet address 192.168.47.6/32
set routing-options static route 0.0.0.0/0 next-hop 172.16.1.1
# System Backup and Restore
===========================
putty -> logging -> all sesssion output -> Browse <file location>
session -> SSH [ip address] -> root [******]
root@Core_Switch# show | display set | no-more
# Factory Reset / Password Reset
================================
# Port Security
===============
# Spanning-tree / BPDU Gurad
============================
# Port permission on Firewall
=============================
DHCP CONFIGURE
==============
set system services dhcp-local-server group DHCP-POOL-51 interface irb.51
set access address-assignment pool DHCP-POOL-51 family inet network 172.16.51.0/24
set access address-assignment pool DHCP-POOL-51 family inet range User-Range low
172.16.51.1
set access address-assignment pool DHCP-POOL-51 family inet range User-Range high
172.16.51.230
set access address-assignment pool DHCP-POOL-51 family inet dhcp-attributes name-
server 45.64.132.66
set access address-assignment pool DHCP-POOL-51 family inet dhcp-attributes router
172.16.51.254
set access address-assignment pool DHCP-POOL-51 family inet excluded-range RESERVE
low 172.16.53.231
set access address-assignment pool DHCP-POOL-51 family inet excluded-range RESERVE
high 172.16.53.253
IRB INTERFACE CREATE
====================
set interfaces irb unit 2 family inet address 172.16.2.254/24
VLAN CREATE
===========
set vlans UMS vlan-id 2
VLAN INTERFACE TAGGING
======================
set vlans UMS l3-interface irb.2
TRUNK CONFIGURE
===============
set interfaces xe-0/0/0 unit 0 family ethernet-switching interface-mode trunk
set interfaces xe-0/0/0 unit 0 family ethernet-switching vlan members all
SPECIFIC VLAN ASSIGN
====================
set interfaces xe-0/0/0 unit 0 family ethernet-switching vlan members UMS
INTERFACE STATUS
===============
show interface terse
monitor interface traffic
CONFIGURATION
==============
show | display set| no-more; configuration backup
show | compare; show changes
run show chasis hardware; show hardware status
show run interface description
set chasis fpc 0 pic 0 port 14 speed 1g
run show interfaces ge-0/0/1; Physical Link check
root@AIUB-FW# show |display set |match irb; Information about peer with irb
interface
Port Enable/Disable and Port Description
=========================================
aiub@ServerFarm# set interfaces xe-0/0/12 disable
aiub@ServerFarm# delete interfaces xe-0/0/12 disable
aiub@ServerFarm# set interfaces xe-0/0/46 description LINK->Project Office
^
aiub@ServerFarm# set interfaces xe-0/0/46 description LINK->EMC
CPU Process check
=================
Aiub@Core_Switch> show chasis routing-engin
Aiub@Core_Switch> show chasis environment
Port Speed
==========
set interface ge0/0/47 link-mode full-duplex
set interface g/0/047 ether-option auto-negotiation
set interface g0/0/47 speed auto
configure License/Antivirus
==========================
run show system license
show security utm feature-profile anti-virue | display set | no-more
show security utm utm avira-av-policy_1 | display set | no-more
set security utm feature-profile anti-virus type sophos-engine
commit check
commit confirmed 5
SSH Disable from WAN
=====================
load set terminal relative
show | compare
SRX 1500 License Install
=======================
run show system license
root> request system license add terminal
[Type ^D at a new line to end input,
enter blank line between each license key]
Paste the license key and press enter
Type Ctrl+D
Set Date and Time
=================
show system uptime
set date ntp bd.pool.ntp.org
Configure Web Interface
=======================
set system services web-management http
Misc
====
