juniper M320路由器基本配置

主机名配置
set system host-name 主机名

时区配置
set system time-zone Asia/Hong_Kong

root用户的配置
set system root-authentication encrypted-password *****

DNS服务器配置
set system name-server x.x.x.x

tacacs+服务器配置
set system tacplus-server x.x.x.x secret ****
set system tacplus-server x.x.x.x single-connection
set system tacplus-serverx.x.x.x source-address x.x.x.x

认证顺序配置 先进行tacacs+认证 再进行本地密码认证
set system authentication-order tacplus
set system authentication-order password

用户配置
set system login user test class super-user //超级用户
set system login user test authentication encrypted-password test123

禁用某条命令
deactivate system login user test

开启telnet服务
set system services telnet

配置sysylog服务器
set system syslog user * any emergency
set system syslog host x.x.x.x any any
set system syslog host x.x.x.x facility-override local5
set system syslog host x.x.x.x any notice
set system syslog host x.x.x.x facility-override local7
set system syslog host x.x.x.x any notice
set system syslog host x.x.x.x facility-override local7
set system syslog file messages any notice
set system syslog file messages authorization info
set system syslog file command-log interactive-commands info
set system syslog source-address x.x.x.x

配置提交配置主备路由引擎同步
set system commit synchronize

配置NTP服务器
set system ntp server x.x.x.x
set system ntp server x.x.x.x prefer

启动备份路由引擎的冗余功能
set chassis redundancy failover on-loss-of-keepalives
set chassis redundancy failover on-disk-failure
set chassis redundancy graceful-switchover

当磁盘丢失了，引擎重启。
set chassis routing-engine on-disk-failure reboot

忽略管理口down告警
set chassis alarm management-ethernet link-down ignore

     本文转自杰1992 51CTO博客，原文链接：http://blog.51cto.com/holger/2056328，如需转载请自行联系原作者