■基本設定
set system host-name HOSTNAME
set system domain-name DOMAINAME
set system services telnet
■認証設定
set system radius-server **** port 1645
set system radius-server **** secret "PASSWORD"
set system radius-server **** timeout *
set system radius-server **** retry *
set system radius-server **** source-address *****
■Interface
Loopback設定:(subif unit 0～1に分割） set interfaces lo0 description loopback-0
set interfaces lo0 unit 0 family inet filter input FILTER_NAME
set interfaces lo0 unit 0 family inet address .../32
set interfaces lo0 unit 1 family inet filter FILTER_NAME
set interfaces lo0 unit 1 family inet address .../32
物理設定: set interfaces ge-*** description DESCRIPTION
set interfaces ge-*** mtu MTUVALUE
set interfaces ge-*** unit 0 family mpls mtu 4478
set interfaces ge-*** unit 0 family inet mtu 4470
set interfaces ge-*** unit 0 family inet address .../30
■Filter（ACL)
set firewall family inet filter JUNOSFILTER term SNMP from source-address .../32
set firewall family inet filter JUNOSFILTER term SNMP from protocol udp
set firewall family inet filter JUNOSFILTER term SNMP from destination-port snmp
set firewall family inet filter JUNOSFILTER term SNMP then accept
■OSPF
set protocols ospf spf-options delay 1000
set protocols ospf lsa-refresh-interval 30
set protocols ospf area 0.0.0.** interface lo0.0
set protocols ospf area 0.0.0.** interface ge-/0.0 interface-type p2p
set protocols ospf area 0.0.0. interface ge-/0.0 metric 999
set protocols ospf area 0.0.0. interface ge-/0.0 ldp-synchronization
set protocols ospf area 0.0.0. interface ge-/0.0 authentication simple-password "PASSWORD"
set protocols ospf area 0.0.0. interface ge-/0.0 bfd-liveness-detection minimum-interval **
set protocols ospf area 0.0.0. interface ge-**/0.0 bfd-liveness-detection multiplier **
■LDP
set protocols ldp track-igp-metric
set protocols ldp keepalive-interval 60
set protocols ldp keepalive-timeout 180
set protocols ldp interface ge-**
■BGP
set protocols bgp hold-time 90
set protocols bgp advertise-inactive
set protocols bgp log-updown
set protocols bgp group PEERGROUP type internal
set protocols bgp group PEERGROUP local-address ...
set protocols bgp group PEERGROUP family inet unicast
set protocols bgp group PEERGROUP family inet-vpn unicast
set protocols bgp group PEERGROUP neighbor ... description DECR
■VRF
set routing-instances VRFNAME instance-type vrf
set routing-instances VRFNAME interface lo0.**
set routing-instances VRFNAME route-distinguisher 111:1111
set routing-instances VRFNAME vrf-import IMPORT_MAP
set routing-instances VRFNAME vrf-export EXPORT_MPA
set routing-instances shared-vr routing-options static route ** Next-hop **
网友评论