Day 2 of JUNIA (FWV device Management)
Management of equipment
1. Set up users for the firewall
Ns5gt- > set admin user cisco password cisco privilege all
two。 Firewall configuration DNS server
Ns5gt- > set dns host dns1 202.96.209.5
3. Firewall configuration NTP server
Ns5gt- > set ntp server time.windows.com
Ns5gt- > set ntp server src-interface eth4
Ns5gt- > set ntp interval 1
4. Configure SNMP (simple network management protocol)
Ns5gt- > get config | include snmpset snmp community "huda" Read-Write Trap-on traffic version anyset snmp host "huda" 192.168.1.12 255.255.255.255 src-interface ethernet1 trap v1set snmp location "Shanghai" set snmp contact "Hu Da 18721571000" set snmp name "ns5gt" set snmp port listen 161set snmp port trap 162
5. Configure Syslog Syslog server (using UDP514)
Ns5gt- > set syslog config 192.168.1.12
Ns5gt- > set syslog enable
Ns5gt- > set syslog src-interface eth2
Ns5gt- > set syslog config 192.168.1.12 log all
Ns5gt- > set syslog config 192.168.1.12 facilities local7 local0
Receive logs for Syslog level 7 and level 0
6. Activate the license file
a. Put the authorization code and the serial number of the firewall on the official website of Juniper to generate the authorization key
b. Run commands on the firewall to activate the extended function of the firewall
Ns5gt- > exec license-key
7. File Management of Firewall
a. Save configuration
Ns5gt- > save
b. Configure backup
Ns5gt- > save config from flash to tftp 192.168.1.12 20130524.cfg
Save the current firewall configuration to the TFTP server with the name cfg
c. Recovery of configuration
Ns5gt- > save config from tftp 192.168.1.12 20130524.cfg to flash
Import it into the flash card, and the next restart will take effect.
Ns5gt- > save config from tftp 192.168.1.12 20130524.cfg merge
Directly import to RAM memory to run, and take effect directly
d. Configured rollback
1. Create a rollback configuration file
Ns5gt- > save config to last-known-good
two。 Activate the rollback function of the firewall
Ns5gt- > exec config rollback enable
3. Restart
Ns5gt (rollback enabled)-> reset
Ns5gt (rollback enabled)-> reset
System reset, are you sure? Y/ [n] y
8. Recovery function of firewall
The image file in the a.flash card crashes
Solution: you must use BootLoader to restore the mirror
