企业网络项目调试系列-03锐捷核心交换机与Juniper防火墙配置
拓扑
锐捷核心交换机配置
inter Ag3
switchport mode access
switchport access vlan 2000
inter g1/0/21
port-group 3 mode active
inter g2/0/21
port-group 3 mode active
exit
vlan 2000
inter vlan 2000
ip address 10.1.1.254 255.255.255.0
ip route 0.0.0.0 0.0.0.0 10.1.1.1
防火墙配置
恢复出厂设置
load factory-default
set system root-authentication plain-text-password
commit
exit
exit
reboot
cli
configure
delete security
delete interfaces
delete vlans
delete system
set system root-authentication plain-text-password
聚合口设置(#这里我理解为连了几台，跟ae号有关)
set chassis aggregated-devices ethernet device-count 1
set interfaces ge-0/0/1 gigether-options 802.3ad ae0
set interfaces ge-0/0/2 gigether-options 802.3ad ae0
set interfaces ae0 aggregated-ether-options lacp active
配置接口IP地址
set interfaces ae0 unit 0 family inet address 10.1.1.1/24
set interface ge-0/0/10.0 family inet address 172.16.3.1/24
set interface ge-0/0/14.0 family inet address 123.100.1.1/24
set interface ge-0/0/15.0 family inet address 202.100.1.1/24
配置接口到指定的区域
set security zones security-zone INSIDE interfaces ae0.0
set security zones security-zone DMZ interfaces ge-0/0/10.0
set security zones security-zone OUTSIDE interfaces ge-0/0/14.0
set security zones security-zone OUTSIDE interfaces ge-0/0/15.0
配置静态路由
edit routing-options static
set route 192.168.10.0/24 next-hop 10.1.1.254
set route 192.168.20.0/24 next-hop 10.1.1.254
set route 192.168.30.0/24 next-hop 10.1.1.254
set route 192.168.40.0/24 next-hop 10.1.1.254
set route 192.168.50.0/24 next-hop 10.1.1.254
set route 192.168.60.0/24 next-hop 10.1.1.254
set route 192.168.70.0/24 next-hop 10.1.1.254
set route 192.168.80.0/24 next-hop 10.1.1.254
set route 192.168.90.0/24 next-hop 10.1.1.254
set route 192.168.100.0/24 next-hop 10.1.1.254
set route 0.0.0.0/0 next-hop 202.100.1.254
set route 0.0.0.0/0 qualified-next-hop 123.100.1.254 preference 100
exit
策略集配置（1.内到外允许，2.内到DMZ指定IP允许80、443，3.DMZ到外允许 4.外到内和DMZ拒绝默认)
内到外DX允许
edit security policies from-zone INSIDE to-zone OUTSIDE
edit policy Permit-All
set match source-address any
set mat
