Juniper SRX防火墙默认保存50份最近修改过的配置归档,如下所示:
netscreen@SRX3600# rollback ?
Possible completions:
<[Enter]> Execute this command
0 2010-08-20 22:14:53 HKT by netscreen via cli
1 2010-08-20 22:06:04 HKT by netscreen via cli
2 2010-08-20 22:05:02 HKT by netscreen via cli
3 2010-08-20 17:12:27 HKT by netscreen via cli
4 2010-08-20 15:49:18 HKT by netscreen via cli
5 2010-08-18 17:09:15 HKT by netscreen via cli
6 2010-08-18 17:06:43 HKT by netscreen via cli
7 2010-08-18 16:47:52 HKT by netscreen via cli
8 2010-08-18 16:03:22 HKT by netscreen via cli
9 2010-08-18 14:55:11 HKT by netscreen via cli
10 2010-08-18 14:45:24 HKT by netscreen via cli
11 2010-08-18 14:43:27 HKT by netscreen via cli
12 2010-08-18 14:39:12 HKT by netscreen via cli
13 2010-08-17 15:39:36 HKT by netscreen via cli
14 2010-08-17 15:34:28 HKT by netscreen via cli
15 2010-08-17 15:15:02 HKT by netscreen via cli
16 2010-08-17 15:11:50 HKT by netscreen via cli
17 2010-08-17 15:08:12 HKT by netscreen via cli
18 2010-08-17 15:05:21 HKT by netscreen via cli
19 2010-08-17 14:58:07 HKT by netscreen via cli
20 2010-08-17 14:53:11 HKT by netscreen via cli
21 2010-08-17 14:40:45 HKT by netscreen via cli
22 2010-08-17 14:40:22 HKT by netscreen via cli
23 2010-08-17 14:38:16 HKT by netscreen via cli
24 2010-08-17 14:36:49 HKT by netscreen via cli
25 2010-08-10 16:34:56 HKT by netscreen via cli
26 2010-08-10 16:32:43 HKT by netscreen via cli
27 2010-08-10 15:29:42 HKT by netscreen via cli
28 2010-08-10 15:08:20 HKT by netscreen via cli
29 2010-08-10 15:04:59 HKT by netscreen via cli
30 2010-08-10 15:03:32 HKT by netscreen via cli
31 2010-08-10 14:56:15 HKT by netscreen via cli
32 2010-08-10 14:54:37 HKT by netscreen via cli
33 2010-08-10 14:51:08 HKT by netscreen via cli
34 2010-08-10 14:44:23 HKT by netscreen via cli
35 2010-08-10 14:16:26 HKT by netscreen via cli
36 2010-08-10 10:52:15 HKT by netscreen via cli
37 2010-08-10 10:51:03 HKT by netscreen via cli
38 2010-08-10 10:49:51 HKT by netscreen via cli
39 2010-08-09 14:53:37 HKT by netscreen via cli
40 2010-08-06 18:15:34 HKT by netscreen via cli
41 2010-08-06 17:38:34 HKT by netscreen via cli
42 2010-08-06 17:37:20 HKT by netscreen via cli
43 2010-08-06 17:16:57 HKT by netscreen via cli
44 2010-08-06 17:13:39 HKT by netscreen via cli
45 2010-08-06 16:50:02 HKT by netscreen via cli
46 2010-08-06 16:39:22 HKT by netscreen via cli
47 2010-08-06 16:29:12 HKT by netscreen via cli
48 2010-08-06 16:28:10 HKT by netscreen via cli
49 2010-08-06 16:27:12 HKT by netscreen via cli
| Pipe through a command
在需要回滚配置时,如果加上一段简单的注释将让你能确定系统将恢复到你希望的得到的恢复版本中。
netscreen@SRX3600# delete security ike gateway dialup-ike no-nat-traversal
[edit]
netscreen@SRX3600# commit comment "enable ike gateway dialup-ike nat-t"
/* 在激活配置的同时,为该配置加入注释 —— 激活那天ike gateway nat穿透功能 */
netscreen@SRX3600# run show system commit
0 2010-08-20 22:14:53 HKT by netscreen via cli
enable ike gateway dialup-ike nat-t
1 2010-08-20 22:06:04 HKT by netscreen via cli
2 2010-08-20 22:05:02 HKT by netscreen via cli
3 2010-08-20 17:12:27 HKT by netscreen via cli
4 2010-08-20 15:49:18 HKT by netscreen via cli
5 2010-08-18 17:09:15 HKT by netscreen via cli
6 2010-08-18 17:06:43 HKT by netscreen via cli
7 2010-08-18 16:47:52 HKT by netscreen via cli
8 2010-08-18 16:03:22 HKT by netscreen via cli
9 2010-08-18 14:55:11 HKT by netscreen via cli
10 2010-08-18 14:45:24 HKT by netscreen via cli
11 2010-08-18 14:43:27 HKT by netscreen via cli
12 2010-08-18 14:39:12 HKT by netscreen via cli
13 2010-08-17 15:39:36 HKT by netscreen via cli
14 2010-08-17 15:34:28 HKT by netscreen via cli
15 2010-08-17 15:15:02 HKT by netscreen via cli
16 2010-08-17 15:11:50 HKT by netscreen via cli
[edit]
转载于:https://blog.51cto.com/handsomelbl/1136838