多廠商防火墻系列之十七juniper netscreen運維配置加排錯1.2系統(tǒng)管理學習

技術博客 Juniper防火系統(tǒng) Copyright?2007JuniperNetworks, Proprietaryand

網 整理 技術博客 系統(tǒng)組

所有關鍵的系統(tǒng)功能在內存中運行Certs, Certs,Copyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 ns208->getsystemProductName:NS208SerialNumber:0043042002000034,ControlHardwareVersion:0110(0)-(11),FPGA VLAN1IPSoftwareVersion:,Type:Firewall+BaseMac:0010.db1d.1c30FileName:n200-LAS0z0ad,A:psdDate04/15/200322:06:53,DaylightSavingA:psdUp2hours31minutes14secondsSinceTotalDeviceResets:0SysteminNAT/routeUseinterfaceIP,ConfigUserName:Interfacenumber0,if_info0,if_indexlinkup,phy-linkup/full-duvsysRoot,zoneTrust,vrdhcp*ip mac*manageip,mac---more--

IntheCLI,getcommandsprovidevaluablestatusaboutoperationalconditions:SystemserialOperatingInterfaceInterfaceManagementCopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 以下的特征需要增加licenseCapacityexpansion(extended/advancedURLDeep兩種安裝key的方Manual–getkeyfromexecexeclicense-key[capacity]Automatic–registerdeviceatJuniperWebsite,thenexecexeclicense-keyCopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 文件備份/恢復netscreen ScreenOSConfiguration備份/配置文件的On-boardTFTPExternalstorageManagementstation(WebUICopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 保存配Savesautomaticallywhenyouclick“Apply”orConsole yssaveManualWritestoon-boardflashconfigurationns208>ns208>Copyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 只有根管理員才能進行這配置文件備savesaveconfigfromflashto[tftp<address>|pcmcia|slot1]ns208->saveconfigfromflashtotftp50配置文件恢Option1:copiesfileintoflash–availableatnextsavesaveconfigfrom[tftp<address>|pcmcia|slot1]<filename>tons208->saveconfigfromtftp5015June03.cfgtoOption2:mergesfileintoRAM–BEsavesaveconfigfrom[tftp<address>|pcmcia|slot1]<filename>ns208->saveconfigfromtftp5015June03.cfgCopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 Copyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 軟件包Imagesavesavesoftwarefromflashto[tftp<address>|pcmcia|slot1]<filename>ns208->savesoftwarefromflashtotftp50ns208image.binImageimportingsavesavesoftwarefrom[tftp<address>|pcmcia|slot1]<filename>toflashns208->savesoftwarefromtftp50newimagetoflashCopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 UpgradeExample–5XT->savesoftwarefromtftp50newimage.bintotftpreceivedoctets=tftpsuccess!TFTPSavetoflash.Itmaytakeafewminutes...updatenewflashimage(02c86db0,33tform=17,cpu=10,version=16offset=20,address=900000,size=date=0,time=0,cksum=28e9f31cProgramflash(0, )...5XT->Copyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 UpgradeExample-Copyright?2007JuniperNetworks, Proprietaryand

網 整理 技術博客 RecoveringtheScreenOSImage-BootNetScreenNS-200BootLoaderVersion3.0.0(Checksum:35E1A866)Copyright(c)1997-2003NetScreen ,Inc.Totalphysicalmemory:128MBTest-PassInitialization-DoneModelNumber:NS-SerialNumber[0043042002000034]:READHWVersionNumber[0110]:READSelfMACAddress[0010-db1d-1c30]:READONLYBootFileName[n200-LAS0z0ad]:n200-LAS0z0adSelfIPAddress[]:TFTPIPAddress[31]:Saveloaderconfig(112bytes)...

TFTPservermustbeinsamesubnetasNetScreen’sSelfIPaddress.ServermustbeconnectedTrustinterfaceonwithTrustE1interfaceondeviceswithE1interfaceE1/1orMGTinterfaceCopyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 BootModeLoadingfile"n200-LAS0z0ad"...LoadedSuccessfully!(size=3,444,522bytes)Ignoreimageauthentication!Savetoon-boardflashdisk?(y/[n]/m)Savingasdefaultsystemimageinflashdisk...Done!(size=3,444,522bytes)Rundownloadedsystemimage?([y]/n)Start NS200SystemSoftwareCopyright,1997-2003VersionInitHeap GT64120revisionid:LoadNVRAMInformation...Copyright?2007JuniperNetworks, Proprietary

網 整理 技術博客 根管理員口令口令不能被恢系統(tǒng)需要回到出廠設Alsocalled“AssetAllconfiguration s,andkeysare兩種方LogintoconsolewithdeviceserialnumberasusernameWarningmess