Juniper路由器入门之一：需要子接口的端口配置

set interfaces fe-2/0/1 vlan-tagging              ――――在配置接口启用封装VLAN

set interfaces fe-2/0/1 unit 424 vlan-id 424       ―――――配置子接口，VLAN 424

set interfaces fe-2/0/1 unit 424 family inet address 192.168.254.146/30  ――配置子接口地址

Juniper路由器入门之二：无需子接口配置

set interfaces fe-2/0/23 unit 0 family inet address 222.60.11.154/29   ――直接配置地址

Juniper路由器入门之三：E1口配置

set interfaces e1-3/0/0 encapsulation ppp 封装链路类型，包含PPP,HDLC，根据实际情况配置

set interfaces e1-3/0/0 e1-options framing unframed 封装帧格式，参数包含unframed,g704, g704-no-crc4

set interfaces e1-3/0/0 unit 0 family inet address 192.168.1.126/30 配置地址

Juniper路由器入门之四：CE1配置

set interfaces ce1-4/0/0 clocking external

set interfaces ce1-4/0/0 e1-options framing g704-no-crc4

set interfaces ce1-4/0/0 partition 1 timeslots 1-31    ――――设置信道1及时隙1－31

set interfaces ce1-4/0/0 partition 1 interface-type ds  ――――子接口类型DS

set interfaces ds-4/0/0:1 encapsulation ppp         ―――――配置子接口封装ppp

set interfaces ds-4/0/0:1 unit 0 family inet filter input NYYH

set interfaces ds-4/0/0:1 unit 0 family inet address 10.238.173.197/30  ――――配置地址

Juniper路由器入门之五：策略配置

set firewall filter shigonganjuMAS term 1 from source-address 10.238.173.180/30

set firewall filter shigonganjuMAS term 1 then accept

set firewall filter shigonganjuMAS term 2 from source-address 10.238.173.0/24

set firewall filter shigonganjuMAS term 2 from source-address 10.238.179.0/24

set firewall filter shigonganjuMAS term 2 then discard

set firewall filter shigonganjuMAS term 3 then accept

set interfaces fe-2/0/0 unit 44 family inet filter input jiaotongyinhangduanxin―――将策略应用至子接口。
 

【编辑推荐】

1. 安全厂商Juniper为FreeBSD带来MIPS支持
2. Juniper NetScreen防火墙新人指南
3. Juniper致力创新核心路由器