Juniper初始化之配置管理接口

一、实验环境

  Juniper vSRX 12.1

 

二、配置管理口步骤

  2.0 console进入命令行窗口,初始化用户root,密码为空

  2.1 配置接口IP地址

 set interfaces ge-0/0/1 unit 0 family inet address 192.168.20.2/24

  2.2 创建区域

set security zones security-zone trust

  2.3 配置接口区域

set security zones security-zone trust interfaces ge-0/0/1.0

  2.4 配置允许访问接口的哪些服务

set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ping
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ssh
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services https
commit

  2.5 查看接口信息

show interfaces ge-0/0/1.0

  2.6 配置HTTP登陆

set system services web-management http interface ge-0/0/1.0

  2.7 配置https登陆

set system services web-management https system-generated-certificate
set system services web-management https interface ge-0/0/1.0

  2.8 配置ssh登陆

set system services ssh

  2.9 登陆web界面

 

  

 

三、常见问题

  3.1 如果commit出现 error:commit failed: (missing statements)

  解决方法:需要设置管理员密码

set system root-authentication plain-text-password
commit

 

  3.2 如果登陆http页面,url自动跳转到http://管理地址/servererror.php?code=401,显示该网页无法正常运作

  解决方法:http登陆方式未开启

set system services web-management http interface ge-0/0/1.0

 

posted @ 2019-01-22 10:20  森林326  阅读(2963)  评论(0编辑  收藏  举报