JUNIPER EX3200交换机配置1 Ex3200开机指导开机后：login: rootLast login: Fri Jan 17 22:21:55 on ttyd0--- JUNOS 7.2R3.3 built 2002-03-23 02:44:36 UTCTerminal type? [vt100] <enter>root@%注意使用root用户登录的情况下，输入帐号/密码以后，默认是进入shell模式的（而只有root用户帐号有这个现象），要输入cli命令进入用户模式：root@% cliroot>2 配置模式用户模式下输入configure命令进入配置模式，配置模式下可以对设备进行各种参数的配置root> configure[edit]root#2.1 设置root用户密码命令：set system root-authentication plain-text-password路由器初始化root用户是没有密码的，在第一次进行配置的时候必须要配置root密码才能commit成功。

密码采用字母+数字方式。

Example:lab@M7i_GZ# set system root-authentication plain-text-passwordNew password:Retype new password:2.2 添加系统用户命令：set system login user juniper uid 2000 <-设置用户名为juniper用户id为2000set system login user juniper class super-user <-设置juniper用户为超级用户set system login user juniper authentication plain-text-password <-设置juniper用户的密码2.3 设置主机名命令：set system host-name M7i_GZ <-设置主机名为M7i_GZ2.4 开启系统telnet服务命令：set system services telnet说明：系统默认是没有打开telnet功能的，只有打开telnet服务之后才能从网络上登陆到路由器。

2.5 设置交换机地址命令：Edit systemSet name-server 192.168.17.225Commit删除：Edit systemDelete name-server 192.168.17.2252.6 开启系统ftp服务命令：set system services ftp说明：系统默认是没有打开ftp功能的，只有打开ftp服务之后才能从网络上ftp到路由器。

2.7 配置SNMPset snmp community <community> authorization < read-only/ read-write> clients <prefix> # 设置SNMP字符串set snmp trap-options source-address 192.168.1.1 #设置snmp trap的原地址为192.168.1.1set snmp contact <contact> #设置snmp的联系信息set snmp engine-id local <local> #设置snmp v3 engine ID信息set snmp description <description> #设置snmp的系统描述2.8 配置物理端口参数user@host#set interface ge-slot/pic/port description description#配置端口描述user@host#set interface ge-slot/pic/port mtu mtu-number#配置端口MTUuser@host#set interface ge-slot/pic/port ether-options speed (10m | 100m | 1g) #配置端口速率user@host#set interface ge-slot/pic/port ether-options link-mode (automatic |full-duplex |half-duplex )#配置端口双工user@host#set interface ge-slot/pic/port ether-options (auto-negotiation |no-auto-negotiation )#配置端口自动协商Example（例如）:root@host> editEntering configuration mode[edit]root@host# set interfaces ge-3/0/0 description “to_BJ-4200-1”[edit]root@host# set interfaces ge-3/0/0 mtu 9216[edit]root@host# set interfaces ge-3/0/0 ether-options speed 1g[edit]root@host# set interfaces ge-3/0/0 ether-options link-modefull-duplex[edit]root@host# set interfaces ge-3/0/0 ether-options auto-negotiation2.9 配置物理端口二层接口[edit]root@host# set interfaces ge-0/0/16 unit 0 family ethernet-switchingport-mode access＃配置物理端口作为二层access模式的接口，端口默认情况下就是二层access端口。

[edit]user@host # show interfacesge-0/0/16 {unit 0 {family ethernet-switching;}}2.10 配置物理端口三层接口EX交换机物理接口可以支持三层路由接口功能，直接可以在接口上配置三层地址[edit]root@host# set interfaces ge-0/0/17 unit 0 family inet address192.168.20.1/242.11配置VLAN初始化配置时候，所有端口属于default VLAN，default vlan 的默认ID是0user@host# set interfaces name unit 0 family ethernet-switching port-mode access#配置端口的access模式，默认端口就是access模式。

user@host#set vlans vlan-name vlan-id number#配置VLAN分配vlan IDEX支持2种方式来配置access接口分配到VLAN，采用其中一种就可以实现端口VLAN的划分。

方式一：user@host#set vlans vlan-name interface interface_name直接在VLAN中添加多个物理端口方式二：或是在物理接口下：user@host#set interfaces interface-name unit 0 family ethernet-switching vlan membersvlan-name or vlan-id#添加端口到特定VLANuser@host# show vlans vlan-name detail#查看VLAN信息Example（例如）:root@host> editEntering configuration mode[edit]root@host# set vlans sales vlan-id 100[edit]root@host# set vlans sales interface ge-0/0/1#或者可以如下配置，实现相同的配置效果[edit]root@host# set interfaces ge-0/0/1 unit 0 family ethernet-switchingvlan members sales2.12配置Vlan trunk配置端口作trunk端口，支持802.1Q的标准封装。

user@host# set interfaces name unit 0 family ethernet-switching port-mode trunk#配置端口的VLAN模式为trunk模式user@host# set interfaces name unit 0 family ethernet-switching vlan membersall|number#配置trunk端口的允许通过的VLAN，9.1版本目前不支持vlan-range，预期在9.2版本支持。

Example:root@host> editEntering configuration mode[edit]root@host#showinterfaces {ge-0/0/3 {unit 0 {family ethernet-switching {port-mode trunk;vlan {members [ orange blue ];}}}}ge-0/0/4 {unit 0 {family ethernet-switching {port-mode trunk;vlan {members [ 100 200 ];}}}}}2.13配置native-vlan-idEX在trunk端口下支持native-vlan 的配置：root@host> editEntering configuration mode[edit]root@host# set interface ge-0/0/8 unit 0 family Ethernet-switch native-vlan-id purple[edit]root@host#show interfacege-0/0/8 {unit 0 {family ethernet-switching {port-mode trunk;vlan {members [ orange blue purple ];}native-vlan-id purple;}}2.14 静态路由协议手工添加到路由表下一跳必须有效所以的配置在routing-options 级别Syntax（语法）：routing-options {static {defaults {static-options;}route destination-prefix {next-hop next-hop;qualified-next-hop address {metric metric;preference preference;}static-options;}}}Example（例如）:[edit]user@host# showrouting-options {static {route 0.0.0.0/0 next-hop 192.168.0.1;}}2.15 OSPF单区域[edit]user@host# set protocols ospf area 0 interface ge-0/0/0 [edit]user@host# show protocols ospfarea 0.0.0.0 {interface ge-0/0/0.0;}}配置OSPF 多区域[edit]user@host# show protocols ospfospf {area 0.0.0.0 {interface ge-0/0/0.0;}}[edit]user@host# set protocols ospf area 1 interface at-0/1/1.100[edit]user@host# show protocols ospfospf {area 0.0.0.0 {interface ge-0/0/0.0;}area 0.0.0.1 {interface at-0/1/1.100;}综合实例：set system root-authentication plain-text-passwordset system login user juniper uid 2000 <-设置用户名为juniper用户id为2000set system login user juniper class super-user <-设置juniper用户为超级用户set system login user juniper authentication plain-text-password <-设置juniper用户set system services telnetset vlans 10 vlan-id 10set vlans 20 vlan-id 20set vlans 1 lan-id 1set interfaces ge0/0/0 unit 0 family ethernet-switching port-mode trunkset interfaces ge0/0/0 unit 0 family ethernet-switching vlan members all set interface ge-0/0/0 unit 0 family Ethernet-switch native-vlan-id 1set int vlan unit 10 family inet add 192.168.1.1/24 配置vlan 10的3层地址set int vlan unit 20 family inet add 192.168.2.1/24 配置vlan 20的3层地址set vlan 10 l3-int vlan.10 将vlan 10和int vlan 10地址邦定set vlan 20 l3-int vlan.20 将vlan 20和int vlan 20地址邦定set int ge-0/0/47 un 0 fa inet add 10.1.1.1/30 配置上连接口地址set rout static route 0/0 next-hop 10.1.1.2 配置缺省路由save config 保存配置commit 生效配置load factory-default 清空配置deleterolback。