Juniper | Udemy

 Factory Default Configuration
#load factory-default

----------------------
Initial Configuration
Root Authentication
#set system root-authentication plain-text-password

SSH
>edit
#edit system services
#set ssh root-login allow
#set ssh protocol-version v2
#set ssh port ..
#set telnet 

DOMAIN
#edit system
#set host-NAME R-01
#set domain-name training.lab
#set name-server 8.8.8.8
#set time-zone Asia/Jakrta

VERIFIKASI:
#show name-server
#delete name-server 8.8.4.4

DATE
root@R-02> set date 202511041111.00    
Tue Nov  4 11:11:00 UTC 2025

root@R-02> 

---------------
LOGIN MESSAGE
# set system login message *All logins are monitored...!!!"
# set cli idle-timout 10

LOGIN MESSAGE
# set system login message "\n\n\n\tTHIS DEVICE IS MONITORED!!! This device is managed by CORP \n\n\n"

-----------------------------------------------

LOGIN CLASS
root@R-02# set system login user aguna2 class DEMO 
[edit]
root@R-02# set system login class DEMO permissions access
root@R-02# set system login user aguna2 authentication plain-text-password    
root@R-02# commit 
!
root@R-02# set system login user aguna1 class ADMIN_USER 
[edit]
root@R-02# set system login class ADMIN_USER permissions all
root@R-02# set system login user aguna1 authentication plain-text-password    
root@R-02# commit 
!

User-Group Vendor
----------------
root@R-02# edit system login class Vendors 
root@R-02# set access-start 09:00 
root@R-02# set access-end 17:00 
root@R-02# set allowed-days [ monday tuesday wednesday friday ] 
root@R-02# set allow-commands ping;trace;show
root@R-02# set permissions interface-control 
root@R-02# set permissions configure
root@R-02# show 
root@R-02# top
set system login user vendor1 class Vendors
set system login class Vendors permissions access
set system login user vendor1 authentication plain-text-password  
-------------  
INTERFCAE
Interface disebut sebagai type fp pic / port
fpc = flexible PIC connector- line card slot number
pic - physical interface card - interface card slot number
port = port number
ex: ge-1/0/1
Gigaethernet, fpc-1, pic-0, port-1

--------------

RENAME IP INTERFACE
root@SRX-01# run show configuration interfaces | display set | match ge-0/0/2
set interfaces ge-0/0/2 unit 0 family inet address 192.168.2.254/24

lalu di ganti menjadi IP 192.168.11.254/24
root@SRX-01# edit interfaces ge-0/0/2 unit 0 family inet   
root@SRX-01# rename address 192.168.2.254/24 to address 192.168.11.254/24  

---------------------------------

PREFERRED ADDRES
By default, the numerically lowest will be taken as the preferred addres.But we have option the fluencer.

Ex:
[edit interfaces ge-0/0/2]
root@R-02# show 
unit 0 {
    family inet {
        address 172.16.1.1/24;
        address 172.16.1.2/24;
   !
lalu jadi preferred IP 172.16.1.2
[edit interfaces ge-0/0/2]
root@R-02# set unit 0 family inet address 172.16.1.2/24 primary

VERIFIKASI:
[edit interfaces ge-0/0/2]
root@R-02# show 
unit 0 {
    family inet {
        address 172.16.1.1/24 {
            primary;
        }
        address 172.16.1.2/24;
---------------------------------- 

Berbagi :