juniper M320路由器基本配置

主機名配置

set system host-name 主機名

時區配置

set system time-zone Asia/Hong_Kong

root使用者的配置

set system root-authentication encrypted-password *****

DNS伺服器配置

set system name-server x.x.x.x

tacacs+伺服器配置

set system tacplus-server x.x.x.x secret ****

set system tacplus-server x.x.x.x single-connection

set system tacplus-serverx.x.x.x source-address x.x.x.x

認證順序配置 先進行tacacs+認證 再進行本地密碼認證

set system authentication-order tacplus

set system authentication-order password

使用者配置

set system login user test class super-user //超級使用者

set system login user test authentication encrypted-password test123

禁用某條指令

deactivate system login user test

開啟telnet服務

set system services telnet

配置sysylog伺服器

set system syslog user * any emergency

set system syslog host x.x.x.x any any

set system syslog host x.x.x.x facility-override local5

set system syslog host x.x.x.x any notice

set system syslog host x.x.x.x facility-override local7

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file command-log interactive-commands info

set system syslog source-address x.x.x.x

配置送出配置主備路由引擎同步

set system commit synchronize

配置NTP伺服器

set system ntp server x.x.x.x

set system ntp server x.x.x.x prefer

啟動備份路由引擎的備援功能

set chassis redundancy failover on-loss-of-keepalives

set chassis redundancy failover on-disk-failure

set chassis redundancy graceful-switchover

當磁盤丢失了，引擎重新開機。

set chassis routing-engine on-disk-failure reboot

忽略管理口down告警

set chassis alarm management-ethernet link-down ignore

     本文轉自傑1992 51CTO部落格，原文連結：http://blog.51cto.com/holger/2056328，如需轉載請自行聯系原作者