131页来自锐捷内部的Juniper中文经典配置手册 juniper-RSR04E/08E 配置手册

131页来自锐捷内部的Juniper中文经典配置手册 juniper-RSR04E/08E 配置手册

1．JUNOS简介………………………………………………………………………………………………………………………. 7
1.1 系统启动顺序…………………………………………………………………………………………………………….. 7
1.2 系统启动、关闭和升级………………………………………………………………………………………………. 8
1.2.1 RSR 系统启动………………………………………………………………………………………………….. 8
1.2.2，关机或者从启动。………………………………………………………………………………………….. 8
1.2.3 更新系统软件…………………………………………………………………………………………………… 9
1.3 使用junos 帮助………………………………………………………………………………………………………….. 9
2. JUNOS CLI…………………………………………………………………………………………………………………………11
2.1 CLI 的模式……………………………………………………………………………………………………………….11
2.1.1 CLI 操作模式…………………………………………………………………………………………………. 12
2.1.2 配置模式………………………………………………………………………………………………………… 14
3．系统管理和服务………………………………………………………………………………………………………………. 20
3.1 Root 帐户………………………………………………………………………………………………………………… 20
3.1.1 登陆………………………………………………………………………………………………………………. 20
3.1.2 配置root 密码………………………………………………………………………………………………… 20
3.2 管理user 账号和访问……………………………………………………………………………………………….. 21
3.2.1 user 帐户………………………………………………………………………………………………………… 21
3.2.2 login classes …………………………………………………………………………………………………….. 21
3.3 services and processes…………………………………………………………………………………………………. 22
3.3.1 设置 host name 、dns、domain-name ………………………………………………………………. 22
3.3.2 设置Telnet、SSH…………………………………………………………………………………………….. 23
3.3.2 设置FTP…………………………………………………………………………………………………………. 26
3.3.3 设置时间和时区、NTP （network time protocol） …………………………………………… 27
3.3.4 配置SNMP……………………………………………………………………………………………………… 31
3.3.5 诊断工具 ping、traceroute、syslog、………………………………………………………………. 32
4，interface 配置和控制………………………………………………………………………………………………………… 36
4.1 标准接口命名规则…………………………………………………………………………………………………….. 36
4.2 配置Ethernet interface : GE and FE …………………………………………………………………………….. 39
4.4.1 MAC 地址设置……………………………………………………………………………………………….. 39
4.4.2 VLAN Tagging…………………………………………………………………………………………………. 40
4.2.3 Source Filtering………………………………………………………………………………………………… 41
4.3 配置VRRP （RFC 2338）………………………………………………………………………………………… 42
4.3.1 工作原理………………………………………………………………………………………………………… 42
4.3.2 RSR 实现……………………………………………………………………………………………………….. 42
4.4 Aggregated Interfaces ………………………………………………………………………………………………. 44
4.5 Troubleshooting interface…………………………………………………………………………………………….. 47
4.5.1 monitor interface ………………………………………………………………………………………………. 47
4.5.1 show interfaces fe-0/0/0 extensive ………………………………………………………………………. 47
4.5.2 在E-1 Loopback 测试物理链路使用………………………………………………………………… 47
5. protocol-Independent Routing ………………………………………………………………………………………………. 49
5.1 静态路由协议…………………………………………………………………………………………………………… 49
5.2 Aggregated Routes 和 Generated Routes………………………………………………………………. 50
5.3 Martian Routes……………………………………………………………………………………………………. 51
5.4 JUNOS 路由表…………………………………………………………………………………………………………. 52
5.5 JUNOS software Preference Values …………………………………………………………………….. 53
5.6 新添加路由表…………………………………………………………………………………………………………… 54
5.7 Load Balancing ………………………………………………………………………………………………………….. 54
5.8 其它 Features …………………………………………………………………………………………………………. 56
6．Route policy …………………………………………………………………………………………………………………….. 58
6.1 policy overview…………………………………………………………………………………………………………. 58
6.2 什么时候使用路由策略…………………………………………………………………………………………….. 58
6.3 输入输出策略…………………………………………………………………………………………………………… 58
6.4 查看策略操作…………………………………………………………………………………………………………… 59
6.5 路由策略链………………………………………………………………………………………………………………. 59
6.6 匹配条件…………………………………………………………………………………………………………………. 60
6.7 匹配后动作………………………………………………………………………………………………………………. 61
6.8 default policy…………………………………………………………………………………………………………….. 61
6.9 Route Filters……………………………………………………………………………………………………………… 62
6.10 Route Filters and Other Match Criteria ………………………… 63
6.11 Applying Routing Policies ……………………………………. 64
6.12 BGP Policy Application ………………………………………. 65
7．Routing Information Protocol （RIP） ……………………………………………………………………………….. 66
7.1 RIP技术概述…………………………………………………………………………………………………………….. 66
7.2.1 路由选择环路…………………………………………………………………………………………………. 67
7.2.2 RIP报文格式……………………………………………………………………………………………………. 69
7.3 RIP 配置………………………………………………………………………………………………………………….. 70
7.3 Monitoring RIP …………………………………………………………………………………………………… 70
7.3.2 查看RIP 路由表……………………………………………………………………………………………… 71
7.3.3 查看RIP发布到指定邻居的路由………………………………………………………………………. 71
7.3.4 查看RIP收到指定邻居的路由………………………………………………………………………….. 71
7.3.5 查看RIP的statistics………………………………………………………………………………………….. 72
7.3.5 存放RIP log…………………………………………………………………………………………………….. 72
7.4 配置案例…………………………………………………………………………………………………………………. 73
8. Open Shortest Path First (OSPF) …………………………………………………………………………………………… 76
8.1 引言………………………………………………………………………………………………………………………… 76
8.2 OSPF技术概述………………………………………………………………………………………………………….. 77
8.2.1 链路状态路由协议………………………………………………………………………………………….. 77
8.2.2 扩散………………………………………………………………………………………………………………. 77
8.2.3 Diskjtra算法…………………………………………………………………………………………………….. 77
8.2.4 区域………………………………………………………………………………………………………………. 78
8.2.5 主干区域0……………………………………………………………………………………………………… 78
8.2.6 指定路由器…………………………………………………………………………………………………….. 78
8.2.7 OSPF协议包……………………………………………………………………………………………………. 79
8.2.8 链路状态通告…………………………………………………………………………………………………. 80
8.2.9 OSPF网的类型………………………………………………………………………………………………… 82
8.3 配置OSPF……………………………………………………………………………………………………………….. 82
8.3.1 单区域……………………………………………………………………………………………………………. 82
8.3.2 配置OSPF多区域……………………………………………………………………………………………. 83
8.3.2 配置a Stub Area ………………………………………………………………………………………………. 83
8.3.3 配置a Not-So-Stubby Area ……………………………………………………………………………….. 83
8.4.4 配置OSPF Virtual Link…………………………………………………………………………………….. 84
8.3.5 配置OSPF Router Interfaces……………………………………………………………………………… 84
8.3.6 配置验证………………………………………………………………………………………………………… 84
8.4 JUNOS Troubleshooting ……………………………………………………………………………………………… 85
8.4.1 查看参与OSPF运行的接口show ospf interface ………………………………………………….. 85
8.4.2 查看OSPF 邻居……………………………………………………………………………………………… 85
8.4.3 查看OSPF LSA 数据库…………………………………………………………………………………… 86
8.4.3 清空OSPF 数据库………………………………………………………………………………………….. 87
8.4.5 查看OSPF Log………………………………………………………………………………………………… 87
8.4.6 查看OSPF statistics ………………………………………………………………………………………….. 88
8.4.7 查看运行OSPF 算法………………………………………………………………………………………. 89
8.4.8 查看ospf 路由………………………………………………………………………………………………… 89
8.5 配置OSPF 多区域……………………………………………………………………………………………………. 90
8.5.1 查看RSR ospf 学习的路由……………………………………………………………………………… 94
8.5.2 查看OSPF 邻接关系………………………………………………………………………………………. 95
8.5.3 查看参与ospf 接口…………………………………………………………………………………………. 95
8.5.4 查看路由表摘要……………………………………………………………………………………………… 96
8.5.5 查看转发表……………………………………………………………………………………………………… 96
8.5.6 查看接口cost ………………………………………………………………………………………………….. 96
8.5.7 OSPF Authentication…………………………………………………………………………………………. 97
8.6 配置Stub Areas ……………………………………………………………………………………………………….. 101
8.7 配置Not-So-Stubby Areas (NSSA)…………………………………………………………………………….. 106
8.8 配置Virtual Links…………………………………………………………………………………………………….. 106
9. Firewall Filters …………………………………………………………………………………………………………………..111
9.1 firewall Filters Overview …………………………………………………………………………………………….111
9.2 执行 Firewall Filter…………………………………………………………………………………………………..111
9.2.1 firewall filter 命令格式…………………………………………………………………………………….111
9.2.2 默认动作………………………………………………………………………………………………………..112
9.2.3 匹配条件………………………………………………………………………………………………………..112
9.2.4 动作……………………………………………………………………………………………………………….117
9.2.3 Applying Firewall Filters …………………………………………………………………………………. 120
9.3 Protecting the Routing Engine ……………………………………………………………………………………. 121
9.4 Rate Limits……………………………………………………………………………………………………………… 121
9.5 show firewall…………………………………………………………………………………………………………… 123
9.5.1 show firewall log………………………………………………………………………………………….. 123
9.5.2 show log messages ………………………………………………………………………………………….. 123
9.5.3 show interfaces filters ……………………………………………………………………………………… 124
9.6 Configuring Filter-Based Forwarding………………………………………………………………………….. 124